last executing test programs: 23.031460638s ago: executing program 4 (id=1208): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000611468000000000005000000000000009500000000000000779f9fa2e91cfa4af1ccc92c5a388253597a5af4a7db3b1ebf2645589098a327d63ecbd5e23c039b1c21acc73ea3ce5a35ff5c8d9aecbb8bbb1ce5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x360, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79da}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "99e9f2bbb2fe60873a9769f5d8ae7591e43f34a301546d86404f0fba48d380d80f"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400000}, @TIPC_NLA_NODE_ID={0xcd, 0x3, "9c906a79ca27db14ce661a5fd3571470cd79538cdd43fc1a330b1908587db89570f02b76de63ae5fa166250201662d68a7ce24f6e93967b0ec568a679b37b45229dea12c4637e54188a0b0d2450d26b9e0fa693058f39a254a99f74b49fd9c8e3a33e89196a988a120850becc85cc41cd31f015659453e79a5467bc6a22d6b977529efa4d84e41321c34092f26516924b694a991747683f63e94aec1f5cf3e338412e5df2575e6ffadd678270ea1903d23670afdedc976215fdd2880979d233eb87345027f86c4b458"}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) write$cgroup_subtree(r0, 0x0, 0x4d) 22.714207573s ago: executing program 4 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) 22.539710004s ago: executing program 4 (id=1216): socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a"], 0xc8}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet(0x10, 0x3, 0x0) 22.39049003s ago: executing program 4 (id=1220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) (async, rerun: 32) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) (rerun: 32) 22.23168174s ago: executing program 4 (id=1224): r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0xc0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 21.073205855s ago: executing program 4 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x18, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x6040) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x100440200, r10}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r10}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) 17.008009837s ago: executing program 3 (id=1306): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000070103000000000000000000000000080001"], 0x1c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/264, 0x108}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002500010125bd7000fb0a6f9a950000000800030048"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a0000000000000018000880140001000200000000000000870004001048a2ff060007000700000008000500", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e20, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, @in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e22, 0x2, @local}, @in={0x2, 0x4e22, @loopback}], 0x74) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r11], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r12, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) 16.901492711s ago: executing program 2 (id=1308): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) poll(&(0x7f0000000580)=[{r1, 0x101}], 0x1, 0x2) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="84000000639348ede8ada1ba6c59946982c6ba4e0000007e41c3cb97f771c32a485c", @ANYRES16=r2, @ANYBLOB="200025bd7000fddbdf250300000005000400020000000900030073797a30000000000900030073797a32000000000900030073797a31000000000900030073797a30000000000900030073797a30000000000900010073797a31000000000900030073797a3100000000140002006d6163766c616e300000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x5, 0x3) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x1, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x4, 0x1, @void, @void, @val={0x3, 0x1, 0xb6}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x45}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x40804) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x20004000) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483c0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x70, 0x0, 0x3, 0x4}, {0x81, 0x4, 0x9, 0x5}]}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 16.670595639s ago: executing program 2 (id=1309): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x9, 0x2001, 0x1, {0xa, 0x4e20, 0xfbdf, @rand_addr=' \x01\x00', 0x9}}}, 0x32) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000280)={r7, 0x7}, &(0x7f0000000400)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0xc, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r10, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) 16.121711715s ago: executing program 0 (id=1315): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x454, 0x3f3, 0xe22, 0x70bd26, 0x25dfdbfe, {0x10, 0x0, 0x3f, [0x1e1, 0x9, 0x8001, 0x4, 0x3ff, 0x7fff, 0xff, 0x7, 0x5, 0xfffffffd, 0x664, 0x7, 0x3, 0x80000000, 0xb8d, 0x8000, 0xc, 0x7, 0x7, 0x6, 0x9a40, 0x4, 0x8, 0x0, 0x6, 0xfff, 0x80, 0x5, 0x0, 0x12, 0x0, 0x2, 0x2, 0x80, 0x9, 0x8, 0x0, 0x4, 0x5, 0x2, 0xf, 0x5, 0x76, 0x0, 0x401, 0xe, 0x7ff, 0x2, 0x3, 0x7, 0xc0000000, 0x8, 0x2, 0x2, 0x3, 0x2, 0x3, 0x2, 0xaabd, 0xffffffff, 0x6, 0x6, 0xb, 0x4], [0x9, 0x1ff, 0x0, 0x1, 0x0, 0xd3, 0x100000, 0x7, 0x0, 0x7, 0x80, 0x6, 0x7, 0x9, 0x0, 0xc1, 0xc71, 0x2, 0xe, 0xd565, 0xffffffff, 0x0, 0xe67, 0x8001, 0xfffffff8, 0x1000, 0xdfc, 0xc, 0x3, 0x6f, 0x8, 0x4, 0x76f5, 0x95, 0x9, 0x2, 0xb, 0x8001, 0x1ab33939, 0xfffffff7, 0x1130, 0x1, 0x7, 0x5, 0xb6c, 0x3, 0xffffff52, 0x9, 0x2, 0x80, 0x4, 0x10, 0xde3d, 0xfffffffe, 0x1, 0x7, 0x2, 0x5, 0x6, 0x3, 0xc, 0x8, 0x693, 0x9], [0x8, 0x8, 0x800, 0x8, 0x40, 0x9, 0x81, 0x1, 0x8, 0x6d4e, 0x5, 0xfe, 0x2, 0x1, 0x680a, 0x3, 0x8, 0x5, 0x7, 0xffffffff, 0x20cd, 0x4, 0x4, 0x0, 0xf65, 0x1, 0x1, 0x8, 0x0, 0x1, 0x0, 0x5, 0x6, 0x4, 0x9, 0x4, 0x10, 0x7, 0x11a, 0x0, 0xa, 0x6, 0x1, 0x8, 0x5, 0x3, 0x9, 0x101, 0x4, 0x3, 0xe4, 0x5e08bf2b, 0xe, 0x1, 0x5, 0xb, 0x9, 0xccd, 0x1, 0xb1d, 0x889, 0x3, 0x4], [0x100, 0x7, 0xfff, 0x1, 0x9, 0x5e, 0xe4a8, 0x9, 0x6, 0x7, 0xa, 0x5, 0x3, 0x4, 0x9, 0x7, 0x9, 0xd50b, 0x7fffffff, 0x2, 0x3, 0x40, 0x10, 0x4, 0x7, 0x3, 0x7ff, 0x7980, 0x800, 0xfff, 0xfffffff9, 0x1, 0x200, 0x2, 0x7, 0x3, 0x3, 0xffff, 0x0, 0x81, 0x8bc3, 0xa, 0x0, 0x4, 0x9, 0xfffffff9, 0x8, 0x6, 0x8, 0x8, 0x7, 0x0, 0xfffffffb, 0x9, 0x2, 0x9, 0xfe000, 0x4, 0xfffffeff, 0x7fff, 0x1f4, 0x377f, 0x6, 0x9], 0x32, ['.^!\x00', '/.\x92+:\x00', '\x00', '\x94$\xc4#$:[\x00', '\xf5\x00', '\xfd^&(\x81.\x00', '&@}.\xf2*+--#*\'\\\x00', '{\x00', '\x00', '/(}(\x00']}, ["", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r2, 0x812, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd8, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x31}}}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xc, 0x6}, {0x4, 0x6}, {0x9, 0x2}, {0x5, 0x1}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0xe0, 0x1}, {0x93, 0x6}, {0x9, 0x4}, {0x1, 0x7}, {0xc, 0x2}, {0x6b}, {0x4, 0x7}], "ace81b1b8efc9915"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x0, 0x6}, {0x4, 0x1}, {0x5, 0x2}, {0x5, 0x4}, {0x8, 0x6}, {0x5, 0x5}, {0x93}, {0x4}, {0xb9, 0x4}, {0x3, 0x2}, {0x0, 0x6}, {0x5, 0x3}, {0x2c}, {0xfb, 0x2}, {0x7a, 0x2}, {0x5, 0x6}], "d00a7faaacf7fb35"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0xff}], "5672fa1d69c87ae6"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x3, 0x2}, {0x2, 0x7}, {0x10, 0x6}, {0x80}, {0x8, 0x2}, {0x3, 0x3}, {0x40, 0x2}, {0xa1}, {0x5}, {0xf9, 0x5}, {0xc, 0x3}, {0x8, 0x3}, {0x9, 0x6}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0x4}, {0x90, 0x4}, {0x9}, {0x81, 0x2}, {0x80, 0x3}], "f48f6129b5fe41b8"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xfa, 0x7}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x5}], "377a35dc60df09d5"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "4f49e71fee1e9fa4"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40896}, 0x40000) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x8c, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x13}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa0}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x94}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x44}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000b80)={0x27, r4, 0x0, 0x1, 0x1, 0x2, "f9da2583f445bb4de0c6d304bf56d96e4112a619d13acc3ecb8861fe287157d53ed4d97586b42aba9a4034348151cb0d120d099aa78cd2e08ea33140624609", 0x2d}, 0x60, &(0x7f0000000f80)=[{&(0x7f0000000c00)="9bb40127c9bc30aff373acb2dbb7cd63aa63c309ac3e42e4e57aa45c4605ffad24c6f5dc7d1011de4f7f7fd28e882e3218f2c14515bfab1f1d28e3cc551f3eb0a7f65f27cfc0aa170948cca4906e8a09a7ac0cc1a47dc315184c7afa17eac27078efac5288e9f5d10b398dd0f52232cfa30e14db6505e4ebec570d5fc6b470e879a052148a35b24975e9f571b91e8f95", 0x90}, {&(0x7f0000000cc0)="efee7ca50510397da9d6b4e7bde4afa667b9e32c4c137c2101cbef8851a91e69c35fadf1f4b2a25986ef9ae720168f0eddac95786d14052b48d1690ff902b24825c858e4b745414377681c4d730cce8c551302cef731f4e261d6915db3ff56eaa9548c8430b8788aad968514312200848f230ecfd07ee2a0923b4f64d9864ac1e3413174716ceed3dc5d4597bfbf405e08df9b9c086fdddf8c0f0cb25d9330e430cfba1c198b6123dd8aa74e2d52cd3479201088bbbf81319ab9422476e1da30ba2ec9b4dc0bf06807f4c959d3c72eace3", 0xd1}, {&(0x7f0000000dc0)="7c277a52d01a6e83d25da6783e15ccd2f18f3dd50cc07dd0ef3d62f914f6906bfc1301fef8b3e47556a51df2128628081eb53a708eae5f51bc2041858b63baadd291ecb1c308a649b45449f4960de203f8533230336b746d740dc96002ec8d", 0x5f}, {&(0x7f0000000e40)="c633", 0x2}, {&(0x7f0000000e80)="0e3abf04d63972383c302fee6740bf40fe674881338fd435b0fbe11ecf8196692b3f396300e2636604e3ac264e5471812775d73bb6ca8526e0c3d777440243d1e4a973b4de625b1ce8f55372275bdf1c1538de45a09a5282441b8a3e29a01a28cef8bee7b2b5de1d70767df5920947a94de6911481b03ee2c725b432eef5be194a806db5143db7d4f830d3474ff64527d3bf2ae301f9775e79a850b7a344bfc12d04378a385922ddce44f6ccd799d61a1ca8995383f54f27ab22700e0f6395eeafe9e2ffa70fd3a2af8824f6cd5417f1951c4d0545c2d23040116682de01fc3968f9682d02290826cfc51e", 0xeb}], 0x5, &(0x7f0000001000)={0x48, 0x117, 0xe75e, "e10326569d43118221a5c608d07877320f25fad727d388da1118606e2482b21a255f215e4ed5e6951971220b7a3bc0345e"}, 0x48, 0x20000801}, 0x1) ioctl$sock_ifreq(r0, 0x891f, &(0x7f00000010c0)={'vlan1\x00', @ifru_ivalue=0x1000}) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x10, 0x3fb, 0x200, 0x70bd25, 0x2, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r5 = accept$netrom(0xffffffffffffffff, &(0x7f0000001200)={{}, [@remote, @bcast, @netrom, @rose, @netrom, @netrom, @bcast, @default]}, &(0x7f0000001280)=0x48) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f00000012c0)=0xffff, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f0000001300)={{0x3, @null, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001380)=@id, &(0x7f00000013c0)=0x10, 0x40800) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000001440)={r8, r9/1000+10000}, 0x10) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001480)=0x1, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000014c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x74, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "c55a2ec2357791f4697389abb4556389"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="b6594cd6ae6a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r11, 0x28, 0x2, &(0x7f0000001680)=0x9, 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000016c0)={{r6}, "8cb046e8a873232945adfaac7e6bd993afcf996341d67cf55ff6db50d7b9e84eb75831d2c3f10240bb4cbc1c7a852d7d932cddf3343fc217702a2946e61ede49831dc80eaaed770a41c1bada64677a6ed286cb23f897b60981f330dfd4f08ff0d4f9c3bd93ae758709beba18afea1bf617de4f4859b640b4ea4c74dd317877a33294a9bc71ce050a147a5100f96329da518118c533168a11bd021e4806a0c48b1e7944ed3eac8483306b8548f830334af7037efec3e47bfe03a0b7418d9ea490e59181afc4057f203ca322a3ebc68197a69e9f15e4a0d84c7662f25f21ce6f1dfcaf3b9305b1b34c3ec1f91a2bfaf83ef67567ce56c786f9e3ab659c74064713cc1c5c33eb614a3e5e1b7ddd148b7a449e57075317d08834c659159da4beddb594e70036d8a9f2bba7a849cf9423c1d5125a7fbf54366d38db11c089a8f3b6355672795b6cd90de6b6f8a26c7ed3a9925704cdd305d1091cde1e7a07a7114e9c3e1e06fd9f527a2ce11dbbb8e51f81918462ab319d2ea3b973adc10d3507836fac378ab4f958c5fcb8ad8178961cdb371d6b58001a0aedbb4ab31d841ca09079274d6ac09b71ddb7b2e9beae09ce5a7954083c5e21c79fcbc62d880b33f013746f4e62fbbde543cf9f57d5343a76d774498deb648f63b0063a021329fe0f854546cff7ee54b89723bdaac727c355834fbd8ca1ab9cca0be20f74398a0f956d82e9aacacb580f92da2980c3f1cd2b6094ea7b8757c6455ac2753121ac3b16318e8d334e6196d12ff668403cc13668d4e768b03cd96da0950349809cbe34e57f2b59c5ae8f2ed552f9421a17bc7b2a393c5522e7e328ebc49ddc86c12b17399e36429eec764728fb4ecad8caf97381a4fd6bd88147d41c48d922bd6e9371cd6e38eab6346e22a06e5e0530c93c926385179b892abef3bc6f3527e2f4689775665f54e57902ee91152f7c058d81eb970f6200f2716258517b5eaae2c8939f99bf2f7217c5cf0d974fa989814538f54ee72b53be96bbb2fd992d1c143407acb2190a08f34a5d32956ec4808b020c8c27ead7c75e942a04dfc95425dcf3cec887e1a1c90279e057214d3c4d94bc32ba42df658568a98eafd30d957ae1c2518f72bb46256b2b4b5d4666966698d40c72bdaed72c2c4833026f1da6595a9f5d90a685d197a444418b21edd4c5439bc7b92c2475a1c0930556b4ce35a5a8b78cc3c23d0659b155d245722a22b95a64d5b7917d3d8d49f10446d05dc1a8df766eb7503639e56c0f5af1c6d7f0816b8c02b632a38093697589a590d94a70c5b9712f4998dc8915e5969801a2252ec94e733b4007be6322b97ed4f7aef34df70d359239334e8106f010b5d27e5d7c669aaeb3202b43911d4963fdb050c2574b8e7b4079be9362dd728f1377fa52db9d8ccb2387e9367561f364682050b9779e0f1fad1da11125311f309ce2967b3ee48afd9c230035aa05619ba7f7ec1469d69ff023ceb74eb3e7646673f3a3aded4f15fcc767e605d311cfbaaf0d4da19979c1d21cf803f4a7231a9deb9a92db50218263b313f5435d384fe00c9703fc48ffcdaa5c27ae0d1f6c8ceb14e98ff8b6689a84b823572781e0081c18a0359f54da079fece91f0a70dcab88d576c7c501e5a1acd78b389fe922467cfb87ca21711d2ac0e8355efd4641f9a35ef88a1c648882349c6885edfe71f90d825c9e7faceff566acda764a5d4f9901a7cf4678cc17f080b637379f26024dc42cfdaba01aebf90c7c215915f9c68c6b036c0e56f3208721dec6905a1d8c9c664b83ad2134cf0524408ae73e1cef64e2f67d4fcdbf051ffbb6bd80a103969478821741415e067729975c52724d6fd46e32f6a07596ae0e953e0af90b0d4aa316640d20bfc12156c2afe072eff81d6f02501ed2ce2c9c864efa07d0ca533b4e1f7cb5eeb8b744ef4aeb94b5be45d719a60159d35091043188ec3c8c3476c9fa3bbf227f09da78ba2af774697c93ac2c66637f369b3828e77a5d9ac14c37b90fadf7f31c2020a14331535c5dcf432e63d19de85b90640ce4e3ed0cabffbed9474f582d2d2fc41b1545f7da6edf9f54443e7fac7f57da10c5adf72a1704944e53e0d10590ef584286a8d1ed701c0b355d3f8b04ed2d0ba6edb03f20a2ec7e6f4f31fcdcb67f1cac92b76a76a21a6f02233467eea8dbeb8342416448484a61d56e38d9a4719cc5cc3bb235e90b01a7f4a7494a0074bda8f8b42b4ac2a0e49096d3d21e83b9f7c124294e0ffd9e5be97fd9b68e5e5ffb5c4eec7a4a9817e750ec82d822a1d74a6c3cbb346b9b18f6fc736cea0113312d9c42428c6eebc95fc4a772c09eed6e3d2631f45457a48b401cda2f6d2e62cf6c59ef748192dd7a3d8e6267dc73b020d015f9fb0472608f68705256fb4889ce6d41a204f644489fba08920e6f68a0e5a38f32b6410a9b1aca6b4ac55b39e725e3985fa0cd694e01f0bfa8705cdeb54cd331e1b0b196173487e03fd7285698cb92d4f9ef5d33098c5a3e51b158c655255e4a3666d6e69e1de82e7812ad2986f81b079ee12f20f064a18b690fa591066e55cbe0e9ef1bdb92a599fad71607201d3eb4b64cf1e96c893104f5b8d447f6a18ea8a205314da3d799aa1c02d63f2dd9ac1848460715a057bce885e5253a3b8093cb62722d0431d733d7b5ce7856726f964f8c3872f2eb3d1c8d90ebef0142558f33146cd9e8c15e16cf9915a5b73f6304eb35c6335f50af988abff1947b4f21918eb0b2246204cd735afd64b8fa467f4d6c9b48f50b432be2a4be71d3b1364186b130ecef8afa07e591213910c93cf177a8c1baa37d97d091936686857db8f1005c52899841d3cb959dec0ed4dc155084fc195b0d4b57646c41efedce1b72b9eb33182a42ba91d9d088a2234f4121e58a6b2f1953e3919edbc275c76bdb57b6bd371ce4d8098ecf03f5cfa78f52105d4865908de11932df26f4eddba91c980f75803b5e1edf59899567613543d93523ac3596524551ef905608fa4efeb2f5adf559ab00b17eb7bbc7be0bba4d14e2176b160ea3d7764d7b380945eda81dc70f34628a3e6d5cfdede51034da36ef7500fd88e83fb69b88a5efada26c3428713624291584d631feac981763767ff2da4b7edf7a2afdbc79ec1e5fdcd68759d290eb8a27d0b4912339275610a873e7e264dec8f4bc5bdb5459cb8c04e2d7fe377918a89d16114808d7ed6bc3d3b5e74d254aefd1d41b76bc105af705c88284fce5657ef71dce6ddbc0d4be97eb3558eae0fa8d380e6f8b594be16397128cf026c575bc217124effe5c092688d10153013b4e1cd7ea4e270b7f8fab662c86449ee38f29154224f94dbac066cb163142e72ae46f709992286cb4c8e619b9fb99ff946ee39b6d38e36fd8bfce1ba87785ab10b4943adb20a2e2594630ceb14b538238e34c00fdbeb308f31533e05cf5c83b05c4eaaf7c28dae52ff1dbc909212d9004a99f8e198d5a7322500baf78ab62021e4f6d6f1d997688ba941efd89b0ba736d17e052a82f2e94acc3d32e552cfac868df78c299c2a0cf40c6b842ffa9b53d7297f335cda51c3a6a2864a2a99a17613b654d6fd17562f7a161ad5c574e0408deb3fba2f5361f432f6b575cbdc3c8034a5101c6ed291199be6492306b9c6c9a71912b7a279869923fdd029ca7dcc9e19e6d3677c4efbbc08ff06fac0d4eb9450197a1a5702c21f3a01c7cba3a089b9522e0a884238e7c5dbafbaf549a31a4fbd35dfc9ab25323013c3c6b0a68fa1d7f89ff9efcef50c9814a9b35968783cf3b6848d17913e4af71e64f16d85e035bb0cb9d74dae116f1922fe8020e8a788ed8b186ff49cd5b82637a9752100de256513d3940f2d36b7cebc92b4a5aad2ba00ff877fb6d219b51315078a0d84a9d93d2df842584291e7daaccb509c1d772f40afdcb6ab72ff5c08db450fb9278ef1fb63afb8033ec682dc22a17cad0d7d10b4d86657bd24502740e90b8c424dc4a295087be2e259fb1b00b628e482ee4169558efd479d27a7f4c4bc114753aa3537ed0783a85e8d603edc35ecbe1e574a51442fa460a4d890cf892adfab34361f59bdf8ff16875c0e6e8324d9821453cbf0581fba0d7c65291693c3178939a8af21c84f661960a093dad6fe2a0d47e975821e3f545200f21df4e268b70240697db840b898420bbc73aef2e0191b5435ea3a23f40f4b3b6feda64ac5396b31840cc60b8bc20f699dbf6c8362c61b00c0ba6e1eabf20d5ad2ab6da55aa9847f3d132d6b1c48db2d68ec37eaa78814751249d20ccb62b842243dc2770bf009666b7a0adf9cee87be6df09daef7e8f1904b3a680235fda8a9ac046dc501235c7437c39d42a9df3d4986bbb8b2ea3afb64ed597be97676810d655ce465dcf35bd9d5adedffe38689712941a4e8d11795674e45890f1686b6f538df33e58ecc36e8a7f8b0750a848b5dcc2eb0499f35a570b9266fe7a928b935dace029179da5f4de0804c350d2fd67c5ef642a27a0c4a8ff37f78c8d1622dcbda373d0ec4ce53c7b5a603abf502cbce5fedc9fdd16fb1d3254512085a22b2a90e7e82d904a7d4bf04cf938c41fe979d6457a371ea802eb4e4ae4c83316b8baa9edfff70573976b180629266ae95d1dc4fef43825f1df2fce77a16d3ff99506c5bb3d3564f98f59a5557f4eeb6a2a056638346f5759c20e20de45785e80ce314942616d5586d19f26e60af7bd5d9fcd5d063d31a67b5d8f746e1c49cca29961f634bceddba7438800ec68699d1b8cec39f5d3781212d9f794104ee9ddc9a21fc60854a803dd0d0bcf64030fcbede99e5bbcbbb56870b794455c8bd98db5231afbde37fa9551b87e3355bcb68538c0b0330f5cec8ba6e6d3d8f59d5db3244bcfe1453cafeb3b15ff4b52b6c805c79c0ab2c190372fb82dcab1216fa234055b7946f2f66f4dd8c93e7e27f030b0760ba0eb76d01b7a286cc288b0517b3465f7afcc67aeb769963b9d75416769be95acc3c4e69a6edaa547160270270c1bb00a6d3fa34c1ac39615e5c7aafbacf7c31951cd00ab6c36f6afd2b749f7be8fe01de104409ce1c2ee0dda4eed3efe347f76670d3f0a989ab636ddabcdc8f5b6de324cf814e092dc3ec25061a745ce0d5a5470efb9b367665dee95ac9e0c351fc9a0ae2f161d443713a93fae35be48b7c54489fed0e3442693f711bf75e4276ea677845fa1980bc79e37fa107e31b577808abc85b669659d45080653ca14531ded4896060155b9bbc164842db7d59b951bbb5e63fc93c9c164928ae3a4e3a7307137ef98a500e823f226b84a3d28bf4b7cbb373c31f78f62a730d5d1e4256ac33b0a694ccb9fe7b91f1d4bcb8c73a24d31ccbc9f3192d5582d3f3bd46ccdf57fe1716a6638b787babfe2c37062abe75d476def6b1b432a31beb3483a19ca814f22eea939b62e3bb6b442a01eb181bcdd785af4267f78ba89c5d95b2533b57215ed3920550c36100b31224fe4d5f332df14fcf64aec4c0684bb6e91c7031584c7a3601a2b2dee1761f5b694eb2becf89f4ace06e66486759df922ca1df4ad1dc885f68dcb603e38cbf7331ef8ca6da2840d73d58a9cd33e86252eab692dc8fe5711e280f142a4450ce1cd08f3bc34b16ea9da828cda7968cc95b8f8947ba0b265383b8267b8a497a7ce7062efe7b3ae951a1092ab535b6858da876c15d517b5746f96b615732c8de11b26632b8d9baba383ec3d78a9b82b8e9ff3f64168ea27c69900ae01dce07d116d2c8b8d8a34d3bd1beb242cf76fe740e88a94e4e005dfedb9c0"}) 16.112007883s ago: executing program 3 (id=1316): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@hci={0x1f, 0x1, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000280)="88c4de2d7e87810c5e87fcc2205f5191e407fd026a7513260068e300c99e007893997352240fac86ffabc8a11cad3dca3be727725dd481b61c062f21a7c90d2e201fcb271f6b468a0e385a1374fc38ca1f47b0f9a5cf118183625d1d3ddd69c83d0ec2b3475d9f7fdab85834c34ad0986fe05b9d248d5abb8e63cb8136fb7da0706b8bfe07127fd641aa4a2886", 0x8d}], 0x2, &(0x7f0000000340)=[{0x18, 0x0, 0xffffff32, "f5d3"}, {0x58, 0x116, 0x6, "cd32a79cfc42909db60ac15349722743ce7fd3431983ccff3fad34b952da45c050a359794c73a661851a3fe1421d547adaca8cbe5b58f2a7fc7d493a58d73759b21b4b6bce3cffef"}], 0x70}, 0x4000) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8f}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.086565497s ago: executing program 0 (id=1317): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 15.979398124s ago: executing program 3 (id=1318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6b, 0x0, r0, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x98, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x6}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x0, 0x2}, {0x3, 0x2, 0x2}, {0x3, 0x5}, 0x53ce}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) (async) r7 = socket(0x1, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r1, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x11, 0x22, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0x16}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb2c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x68}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000018c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000001980)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001900)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002980)={0x3, 0xa, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000029c0)=[r3, r4, r4], &(0x7f0000002a00)=[{0x4, 0x5, 0x10, 0xb}, {0x4, 0x2, 0x3, 0x3}, {0x3, 0x2, 0x10, 0x4}, {0x4, 0x4, 0xb}, {0x5, 0x3, 0x8, 0x1}, {0x1, 0x1, 0x3}, {0x2, 0x1, 0x4}, {0x0, 0x2, 0x1, 0xc}, {0x5, 0x4, 0xe}], 0x10, 0xa2a8}, 0x94) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x10, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_FLAGS={0x0, 0x8, 0x80}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3}}]}, 0xfffffe2f}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r11, &(0x7f0000000480)={@void, @val, @ipv6=@dccp_packet={0x0, 0x6, "492216", 0xfcf, 0x21, 0x0, @dev, @private2, {[@fragment, @routing={0x0, 0xc, 0x0, 0x0, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @empty]}, @hopopts={0x0, 0x1e0, '\x00', [@generic={0x0, 0xeff, "325fe2a58698d25b743fa7a9829c4befe916174e5de460dd59a0d15314166bdd8f6304b2d1a19cc1e25fa179849a641032dfc89d24cd6ec19741cc800cc4f80014797a2e5a53e2b3a6bf16053a9af96e6bc51759a66d9a3537b321ba58e7664c58aaa35e49693ec0c97f963d8e5b94948af056169369e25ba3e4cdef39585d7a85a3716c59bdcc2fcb6f2731276d6f5a922a47616345f277d08c35c044b03f10107cc3aa1ead26d8f4295f68f935970e50851983f5d02deecc8719bfcc241feb3bcea582c4f0519464ff9c1a2b3a298f1d6a94c7d36b10be92f0427456dd1e3f47451500d9cc86ac32317122084f29277f01f35d71506b0c1cc7c7fa69ab85693173789326f9cc89323ce57ac48cc50e11e6923e220ba46bcec219009d9ab4654ac5bba57d051bffc9f6107301f12558d0d2b626e348f252121da7a0cfed2a8245fd0509829757d09cbc9e8a209f6edb547e54efc99393735f046d62de59c7f46a373dd099cdab1393ec29ffdcd4ed702688b18f8af73f1f41db9bff0b5b43b5816f8c5d5ea0462386250a7c6bb49b41da890196e923614ddcc92769c52e7f9c582a1fad11c508aeefa3d3ea7f01d4e42abe013ddd95d8eb7633aaa034fcbb9b3b025f148bb0e0218ae8b43f6c823950ae84f0bbde07662a6ceae12503d2546650a68905c26ce3f9812abb29704ca0e8004572ffe0cda5700d6098a43c2689ee459520a225ca60265ee32984291699a609db474e5d0098d513fce88cc36c56f06c7e5db08b20801f7fa80111241e26bea444c232408dbc3908430f37b390b293bf167e9f7076b59403cbff7bd0dd2b03275f1b43ea33448f97ef77863ce5a3a03b3623db879cee07b206aeeffe2a48b10a82869ab5f9ab04b3643f3e1548b27dd32a3a833127b9217fe25420996f6c76954a0cb12bcd61dd6452a5174164b5b0ba54b75be9ccd6070df3cf6104bf9deb617084c61bacfb3f61105e2cd1e64e2c8fce1c4ba71b56a16b0c7139fbc891468b9119f37e6d0b840558d8ee98cafdbff420f14a78ab36329a931b0893732ce7919708ed4ab4e4b385b6eaffd9b05cb164c3ef90ac07a599996dc891d9d435d9745e19167352b82cad77a3f5a94802d574ae5e0b3faf95fdd5b01714c7edfb745a0146301c9bde1210c21c57ef425d6d04ba459bffc73aef6a79651887ddb83194b274efefdc82d25bcbc6682756465d77a0f2423cb6bd76cb7c693c1302f3b487cd7546e72c07bccacc074c89b28f9276c628039fd1f975fbc3d8402f3aa0824f8a501ecb2379cb3f2683240dc3f2b1739b548e49829dfe9a03dcc6b6af40092e0f4381ef7d40350b7a55adbaccb307239f411d94c6bf8f2c8b0f3b01be5674b5405da642e63b987d060c7c943f7e13b518ee7893c49191a90fd444a3340bd748f5b7db6dd9f813fbc1fde137130f8512b1451ab35263d45759a16a01ad95876f6601cc2685f21ccd440efd8e956f70dbd373a4c65373431562b70f77e299b05965693c12a5da02e8b7d61be61c534c1be406089dff955f3dccec8da3902b5db276b92669a437484f021ea23f10ccfec7b55599ba5002e0b6854fef7fc0fc4f38bfef5042d58cd173b4092da86af26033e47e0067674c8765cbde2c6aaf7134d739f969905c0a01b80bfb8bd1e2ce6099ce2ac19480b87d973fa2530138c71a108ede3ec28d1234ed118919ac59507b4052eacb1edd84f33cba6953d7027dbe8aa939f7173fcb72f46cc92583b33c2a9eefc38fcefc08ba7bd227a6ec01b5135dc1ca1945f5a2f6e34f2715a858e4c62b0051a1a744e10607cb2202a0d4fe71f5977760c6af92c4e5b58572514fda24568bb1a8e87d275e293f7d0ac61fdbfb02f4c6f112d1d8799bee5050d975a18ed14bafe1e749d8749503c0698e1303e4e324d251bd82b31a1627cbc53d00419021a106662d0f3ed1b61893f77675e9405ce0cbc8ec737db058597af938819570fe96ca2e00d8d262828bc8d11aa4de4d6179159a9c457a5d4a8222ce6fc81d75ee1cd4f831cb4b747b1e2382698a1362130dbe1a9d175313485ea7c9a948963fba03d11bf57f04ddb1574d9d1b9f0ed849b599d1f7269a4fbf4406f3066795f484b2add9c810b4c636ccadf96024358bb4ef0e8fb247c848e1fef6346adfb229aeb14f149ce2f33df9c015ddc5e86213d56f81411ee77aec805c78dcce53dc211137b50b27853ebe50f5f08631a7c48f64b432f48f2415a46535bc124945329014f16d5ab6a36281896f32f484e54cea8488261cbbe05cd43593e5f77c9e981695293e85a420570a73b792cd72d288b0f6226e2ceb202b0c15c416228ce6e6c413d085911c5fb692121069f2dbd232efd567d2ddd4dadaba1958a6afed6ef0fa316882b39a31a4b729360fc65e9a26cfeca7433d9d68139b7699c063923588db1768a7786aa0f70999984d2689a598cefea95413f182517791bb85f6070dff41bdc7b6003844aeff1a9e7071a3789b6d2d7e1c3e36d2126dd231587edb2e84cf5adfb0a3106ac460878352f86d32f9c3b88df011a2ae17e14f83d9c2371564a266bf3aa01ea3dbb7a7eab050df4b1166cb4b2ecc4bf2f8322a191a74396dd2637f284300f098de91768cdca913ff589051df0ab24f599a46d1b084da4c69ab78ead62acd619ce6639f579585cc7a108ead0d8a053436e43cc0f92ae31d4cf6de3ca8cb57a9137e544b92cfdc4268e1e8b9dac19863f4d85181636043677d61033a8449b926ac4f70bed9c134c2f153d41e04b93f364e4cbbdff5fc4dc79f2a4771f30e704cdb39c9b30a9137d87b75e5bbe23193ece7515062139186a71f169665c9d754ecc4e4d3025a8c9f9be65b61bbd2625346b2a1f8813d6cdf39c0ee898a02764d0981468e8bf6b3c109ef9098dc18f94eba637e0dbe2f4cfb400371b4c789a9e691a68cc8399d20f46146edae58ff9132c6b8f29afbadddb7b8743f96197824f7dcffb92efed7137a996ff986528db8f548b9e0bf906dc14788c6280742a1f3a79443969306e78e49c3ae7c80e76c1749b5db8966c0173363d9a89c21c66219b18b72f53431b17f5c8be1dc5b936e9d5a7bbfb8e48a07a4192174f8f5d92635773cc67662c0b357e528b467e58c61a1059a83808403a3d13ed35b08e9fe5d895e608d59c07372c26f1f4f502169e01ffa9078e74e8dc92c1e1dbf4089b541744df3a27a6361cc066d58da0eebfe37a6ac2fc67efe2ba9097a0e8ce08dc93e85fd85ea6acb2f9103ca795f90da31cd3f13b51c1cbd284c5945f791cba700849163efb16c17a50b55d6a1d9d2705e1b9d9a68e21e1e83be9428026187aa750f00c97674b80d396b1e812f53e26d1435b65ac9ee6d8c605756efa81e3e53650330c8600c196843e2652f798289e19432b39556ab24e616dfa9c65f2851e240220c36ec90923051716813afea0f676cf42e64a483a5204e4c26b9ca5e455b84d66f8ef359502f7066b0b8187a054ad4e4d984d0d60c4712458ea34ed42d51bcb62e02a280e61fdc98299db9e3eab5f68862be9545c919b99d55e0bc162e8cca3537c90d0fcc32e15da66e86fea7fa6476d9d741ccf3fbc6c20f6eeab9dd497048f1cd587f363dd8edddcc6b6161ff91837dbc4bd2a649c02bdecb6aa4a601cd403d8cefefe5d0c7b98332c16c77868a31177d4b4002cf2b3792fdf5b77037393670895e4db52178105e2f0f5dc3437dd863467c186d394aa64a58411edd6c6f8b82bfdc107df882131960de39b61b6c5f51ea2bde19d7978fdea633eb37516a3d18443ce3745e8337d40b0c4dd6aae2d154d3eedf2b8dde2f282087ef8128df91eb0b645eb2a4f761c7bf29c3e497e83cccb747d319e09c32ae397e418147ebc88c6dc76769132ea18f5252cb5515bed3ffe4dd2be7a73710fc02455504b0181039ed318b7afbcb39fae1c29872c1fb6890b389c6f3573a8676c8e37ff4812199ee159db72eb4af1da73822529f69aa114d8b50d90339e1a92bb128734a5f5c1be2de49a49219bb829bfd1abac610e2ed3ace05d63e739af4d8a0f101f62cc7fe7e0b20c6a4649b31a5ead704a36e6fe0e2a04fdd4ce0ca828a6cbbefea8c8103d5e831e7e39dca4e70c4b7d1f90f39af9f38dcf8cda545dc5910f1a9e1b7a0fec3419c97f6bfe3ec667f80055b956c07d781275a01f71d1860d76d94f84cb9e39bcb48a7ec64f9fdb058746a5c965e96ebb5fad1ea12fb4e5070de68174a9a19042cc4603b5dc3026127bc0822167a9e5ee319ec4d80f3d767ee7aa3ae9537ca09ec74705c3818a023aced55bd70a44775de70d6abc848f1f3c43f07f3f7986bf6830dd9f564beeb3e8e42e9c9c966fa1ebfeba9ff41fa3dc1f60d50a35b20d914f00c37f9e0d20b46e494122941e7bed9772313be4cb6116357144947914519b748ddd1091fd040625e9f99fb5aa3a1d5c0d714c26a26aba090a4b54e13b760ad3b1f851b24cda84ef6ce1cef7c0fffbf21bad731a3c9a919db695ed3c74f773c8e28c2c8945ec80e1a7d69306be8b87c0f819f6621f775ea5b37f03c95cbdd9036cfdc7c79087b476f3530d775251d2918e3b5e1360a4455f27651d6cc21e156c8c577ca6d2615ae2fa9948384aaec04300bde38d3eca1a99412f3598d5393e39ac68d4bd1b8c7e2733c514e91678c9ef8cba0fe3a6741c0aa9b6e7e9d029052d93c237ba22a0fb01c88249edc3464223d5726ba92966c25bcd0c431b492f367e52655bd2de2898f13c16265612f20bef11cf3df31f0cf0d8c3a98c2425121ab0b029d0e8985b1f325ef870b42f9d6cc400ed12944a6460946dd931b1cf492b6737805c87188cde4c2e2441ff92505ecfe1423bffccdf959766a197b4b97f1dd08c54df1ed2664a73496306eb5b489454164663563883669001b7396f86a67c39cd5250302539d60c260db5eac75ad7ee0131bbd46fc93e8035f20bc5879fa055bffc753ac857b090cc47060107bc01932c0921c10497f26a0d98a4b24836d2da0c7019d1bc05321299a6e88c6942b140af5c78568e9189f4f08349d07740257e6a0b705f73818993515f805dc33ed454dab273576f17b7f8e84a06f39f53991e79e92837d95f893e1c4f3daab53f0d681d274d5b00449780ab76ff79d2c390c3362782bf7d1137bfae1f7096789c6ff1ce2ad66567a7875332ce27ea3adef59d91a0435e72fe4d54c2fa65d81161251a11d7746c3af4ac4f113869f3fd339f5f8360d03920713dded89945a630a7069001b8399a8ff89bbbb7dddc1b4cf6cd223136e8606a3eb95089917ce399940289ab0989029adf32d0477afee150c23e99e662e3f8bef4a8ab61f4e9ccc57381cc033306b1c559e57726a9837af87b84f41f489267bd95799a3090af634dcff7caf402e239591aaaf581ad704"}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "85b36f", 0x0, "00f2ff"}, "6927155de4155953418064938630a61736c5e9f80d756280b0d28fd858ebabd2c7d30f6e3cc7f93d294c6275d3420ce5ba199ec804b4ec9ab7cb4384532cc3"}}}}, 0x1001) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x541b, &(0x7f0000000040)) r12 = accept$ax25(r2, 0x0, &(0x7f0000000380)) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000001540)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000001640)=0xe8) ioctl$SIOCAX25ADDUID(r12, 0x89e1, &(0x7f0000001680)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r13}) (async) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) (async) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0xa6, 0x0, r0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) getsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000340), 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd03}, [@ldst={0x0, 0x1, 0x6, 0xb, 0x0, 0x20, 0x4}, @call={0x85, 0x0, 0x0, 0x4d}, @ldst={0x3, 0x0, 0x2, 0x9, 0x7, 0x100, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x7f, 0x4e, &(0x7f0000000140)=""/78, 0x40f00, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[r3, r4, r0, r15, r0], &(0x7f0000000400)=[{0x1, 0x1, 0x4, 0xa}, {0x8, 0x2, 0x5, 0x9}, {0x4, 0x5, 0x8, 0xb}, {0x3, 0x4, 0xe, 0x6}, {0x2, 0x4, 0x0, 0x1}, {0x4, 0x4, 0x7, 0x6}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x2723}, 0x94) 15.965471725s ago: executing program 0 (id=1319): unshare(0x20040600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000001c0)=0x80, 0x800) bind$pptp(r1, &(0x7f0000000240)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffd8c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) bind$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) listen(r2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x2b, 0x0, 0xa}, 0x28) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 15.948368997s ago: executing program 3 (id=1320): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000100001002dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80210000010000001400030005000000616e3000000000000000000001800c0007000900000006000000"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@generic={0x0, 0x7, 0x7, 0x1, 0x100}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x1000}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 15.835734663s ago: executing program 0 (id=1321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 15.834342814s ago: executing program 1 (id=1322): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x80ffffff}, {0x6}]}) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 15.829178405s ago: executing program 3 (id=1323): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 15.776895119s ago: executing program 0 (id=1324): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) (async) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000280)}, &(0x7f0000002100)=0x10) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.742837727s ago: executing program 2 (id=1325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000500)={0x0, 0xffffff44, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) syz_emit_ethernet(0x4e, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 15.619839484s ago: executing program 1 (id=1326): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000002c0)={0x4, &(0x7f0000000240)=[{0x401, 0x83, &(0x7f0000000180)="83f7971756067d230b097e2bd69e15bc0b789b88937958d25adac82f0de373ecf333aa2d9a7991b00053d884f15926149ff8b3cfbefd5eef47e5b17724b59eef918e8fc44209f5408508cd8570cdb5d6b8a4187f20f679d283d0299e976fa915baf334c0f95d9a40e4d2ddda7837c529bc3b848ec7437c2975b33c2ed1e48e95e39c9a", 0x1}, {0x5, 0x11, &(0x7f0000000000)="d119d11d08171c238e4291f5ed0db8f079", 0x1}, {0x2, 0x26, &(0x7f0000000080)="95dc01fad6b2a5c9070e4726576851c3b8ae071b319198c82b392effeef234bd792eda0f98ea", 0x0, 0x1}, {0x40, 0x0, &(0x7f00000000c0)}]}) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) 15.619082535s ago: executing program 0 (id=1327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, r3, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x38}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r6 = socket(0x28, 0x5, 0x0) (async, rerun: 32) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) (async, rerun: 64) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = accept4$unix(r7, 0x0, 0x0, 0x800) recvfrom$unix(r9, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r5, 0x0, 0x0) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r11, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, 0x0, 0x40040) (rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) (async, rerun: 32) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 15.618619767s ago: executing program 3 (id=1328): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x20}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800800180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x3, 0x9, 0x2, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x700, 0x20, 0x7, 0xfffffff8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x2000, 0x2, {{0x22, 0x4, 0x3, 0x21, 0x88, 0x68, 0x0, 0x4, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0xe, 0x3, 0x9, [{@local, 0x2}, {@remote, 0x3d4}, {@multicast2, 0x53af}, {@broadcast, 0x7}, {@broadcast, 0xffffffff}, {@local, 0x5}, {@empty, 0xaaf1}, {@multicast2, 0x9}]}, @noop, @rr={0x7, 0xb, 0x17, [@multicast2, @local]}, @timestamp_addr={0x44, 0x24, 0x1f, 0x1, 0x3, [{@rand_addr=0x64010100, 0x3}, {@loopback, 0x2}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7}]}]}}}}}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000014001a80100004800c000580"], 0x34}}, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r12, 0x29, 0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="00002bbd7000fedbdf2501000000040003008400018008000100", @ANYRES32=r7, @ANYBLOB="000000073e46cfae29e95853db831f5b8433d3eef73876a3eb6302948f38f01f6ffc7f7b1a0e780a6ac81f018bb8ab1fa721e8d4763606289a268931405e08e1e93016cb80462376a7bfb8ccd0e1b17c", @ANYRES32=r8, @ANYBLOB="1400020076657468305f746f5f687372000000000800030001000000140002007465616d30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1600020000000000000000000000000000000000080003000300000008000300010000756e6c300400000000845b50e920b77d24a175b900000000000004000300040003001400038008100100c8cf2badbe000a74a157787f867d9b", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500ea044dd5bb05fa639ca9e4c91e0008000300"/31, @ANYRES32=r6, @ANYBLOB="0800050008000000"], 0x24}}, 0xdcee729b7a9faec8) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000010000007f000000a609000080b00000", @ANYRES32=0x1, @ANYBLOB="0320000000000100000000040000000000000000", @ANYRES32=r10, @ANYRES32=r13, @ANYBLOB="05000000010000000200"/20, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r14, &(0x7f0000000000)={0x23, 0x20}, 0x10) 15.563964383s ago: executing program 1 (id=1329): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000019400)=ANY=[]}, @devid}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000001c0)=0x2, 0x4) r2 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="040000000100"], 0x50) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 15.562442998s ago: executing program 2 (id=1330): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x64}}, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x2, 0x0, 0x2}, {0x2, 0x1, 0x8, 0x2}], 0x10, 0x8}, 0x94) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000009a350e1a7ce59700000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) 15.498497155s ago: executing program 2 (id=1331): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r1}, 0xc) 15.351565697s ago: executing program 2 (id=1332): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x14, 0xc0, &(0x7f0000000180)=""/192, 0x0, 0x38, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000300)={0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)='%pS \x00'}, 0xffffffffffffffd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0125070000000400ea000000000000f58a0f3143c302902ce4cb8c29289e5c7eaf91eadaeada58237000000000c8cf94de0000000063f83e7fe40e4fa37725fc444953a82d98bad83c8d8086dc12a285285754d7bf8f1301bc992d95c7e31f50b11b4b8aab1e3cd45988c0a412cdd049842c3541e2523bcc0fac82cfd1c0463374f0bbccbaca41cf7427259a41bd02e0dab1a058600bf4685c282d475ca27ac5037710377ee1de723cd51fac40157a4fbf00000000000000000000c6ad50ae85e8a951f80902ea388d9d6929488b373208c1c88256fc3e34"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440800401800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r4, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf001}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b28, &(0x7f0000000000)={'wlan1\x00', 0x0}) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES8=r5, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r8, @ANYRESDEC=r10, @ANYRESOCT=r6], 0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket(0x9, 0x800, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r14, r13, 0xffffffffffffffff, 0x2) r15 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a80100004800c000480"], 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r16, @ANYRES32=r15, @ANYBLOB="c200"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="00000000030000000500"/28], 0x50) 15.351059649s ago: executing program 1 (id=1333): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x80000001, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110}}], 0x28}, 0x0) 15.306293646s ago: executing program 1 (id=1334): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4, 0x200}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYRESOCT=r4], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$qrtr(r1, &(0x7f0000000000)={0x2a, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) 15.202012019s ago: executing program 1 (id=1335): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001900)={&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$tun(r1, &(0x7f0000000f80)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}], @ipv4=@generic={{0x16, 0x4, 0x3, 0x3, 0x11c, 0x5, 0x0, 0x9b, 0x21, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, {[@end, @end, @rr={0x7, 0x3, 0xf6}, @cipso={0x86, 0x21, 0x1, [{0x7, 0x12, "949f031506754dd2cdf7d5cf53758b9e"}, {0x5, 0x2}, {0x2, 0x7, "e0ec124205"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x2, [{@rand_addr=0x64010102}]}, @timestamp_prespec={0x44, 0xc, 0xb4, 0x3, 0x5, [{@local, 0x4}]}]}}, "31c75f38e380a8201f0d89142b16f2148bf194b66a0ea7e52fbf02193f5fabebd586e7a5a0ce424e1c368d084148828275f293a47682291b96d4bf4fc9f3c8c5b365db1faa1cb41962408d9d91005456dd9ef0df5d4e016c6b6a3ad2405aa4daa8ad29d2da6c5b2e2e7a9c91e8e66295ba293b9560ce1ebedd606593e98ca02230196fd241a0197199bee99099192004958f9ec4baae487d68c8af0914d89f7e09cffeb7720a8d8a4a3666aad531e1ff236559cf3d6495e450c6f569c5765f142aeaa6a2"}}}}}}, 0x132) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xa2, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@routing={0x0, 0x0, 0x2, 0x8}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r8, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000010c0)=ANY=[@ANYBLOB="180800e3feffff3f00000000000000008510000006000000851000000400000066080000000092001800000800000000b17145e4b485430000ad2f8228feff0000002a30e3a23b7f0271b54bc34300009500009500000000000000858318b638ea5b6f0eb90624660de595aa1a9a1786bbe51a8a0f7641f9f372ddb2787e14a15769f10ce3fd55c1e84abe9c1a846a30c854267239023bf0c80ae4d075e245692031d9934ba005dbc91629c6a1d82a4ae03383d8141f7ed4335c41274ade69c2163600"/214], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400000000f6dbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500250000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 5.171005912s ago: executing program 32 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x18, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x6040) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x100440200, r10}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r10}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) 141.874705ms ago: executing program 33 (id=1327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, r3, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x38}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r6 = socket(0x28, 0x5, 0x0) (async, rerun: 32) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) (async, rerun: 64) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = accept4$unix(r7, 0x0, 0x0, 0x800) recvfrom$unix(r9, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r5, 0x0, 0x0) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r11, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, 0x0, 0x40040) (rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) (async, rerun: 32) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 106.462978ms ago: executing program 34 (id=1335): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001900)={&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$tun(r1, &(0x7f0000000f80)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}], @ipv4=@generic={{0x16, 0x4, 0x3, 0x3, 0x11c, 0x5, 0x0, 0x9b, 0x21, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, {[@end, @end, @rr={0x7, 0x3, 0xf6}, @cipso={0x86, 0x21, 0x1, [{0x7, 0x12, "949f031506754dd2cdf7d5cf53758b9e"}, {0x5, 0x2}, {0x2, 0x7, "e0ec124205"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x2, [{@rand_addr=0x64010102}]}, @timestamp_prespec={0x44, 0xc, 0xb4, 0x3, 0x5, [{@local, 0x4}]}]}}, "31c75f38e380a8201f0d89142b16f2148bf194b66a0ea7e52fbf02193f5fabebd586e7a5a0ce424e1c368d084148828275f293a47682291b96d4bf4fc9f3c8c5b365db1faa1cb41962408d9d91005456dd9ef0df5d4e016c6b6a3ad2405aa4daa8ad29d2da6c5b2e2e7a9c91e8e66295ba293b9560ce1ebedd606593e98ca02230196fd241a0197199bee99099192004958f9ec4baae487d68c8af0914d89f7e09cffeb7720a8d8a4a3666aad531e1ff236559cf3d6495e450c6f569c5765f142aeaa6a2"}}}}}}, 0x132) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xa2, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@routing={0x0, 0x0, 0x2, 0x8}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r8, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000010c0)=ANY=[@ANYBLOB="180800e3feffff3f00000000000000008510000006000000851000000400000066080000000092001800000800000000b17145e4b485430000ad2f8228feff0000002a30e3a23b7f0271b54bc34300009500009500000000000000858318b638ea5b6f0eb90624660de595aa1a9a1786bbe51a8a0f7641f9f372ddb2787e14a15769f10ce3fd55c1e84abe9c1a846a30c854267239023bf0c80ae4d075e245692031d9934ba005dbc91629c6a1d82a4ae03383d8141f7ed4335c41274ade69c2163600"/214], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400000000f6dbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500250000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 49.64073ms ago: executing program 35 (id=1332): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x14, 0xc0, &(0x7f0000000180)=""/192, 0x0, 0x38, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000300)={0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)='%pS \x00'}, 0xffffffffffffffd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0125070000000400ea000000000000f58a0f3143c302902ce4cb8c29289e5c7eaf91eadaeada58237000000000c8cf94de0000000063f83e7fe40e4fa37725fc444953a82d98bad83c8d8086dc12a285285754d7bf8f1301bc992d95c7e31f50b11b4b8aab1e3cd45988c0a412cdd049842c3541e2523bcc0fac82cfd1c0463374f0bbccbaca41cf7427259a41bd02e0dab1a058600bf4685c282d475ca27ac5037710377ee1de723cd51fac40157a4fbf00000000000000000000c6ad50ae85e8a951f80902ea388d9d6929488b373208c1c88256fc3e34"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440800401800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r4, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf001}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b28, &(0x7f0000000000)={'wlan1\x00', 0x0}) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES8=r5, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r8, @ANYRESDEC=r10, @ANYRESOCT=r6], 0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket(0x9, 0x800, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r14, r13, 0xffffffffffffffff, 0x2) r15 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a80100004800c000480"], 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r16, @ANYRES32=r15, @ANYBLOB="c200"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="00000000030000000500"/28], 0x50) 0s ago: executing program 36 (id=1328): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x20}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800800180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x3, 0x9, 0x2, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x700, 0x20, 0x7, 0xfffffff8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x2000, 0x2, {{0x22, 0x4, 0x3, 0x21, 0x88, 0x68, 0x0, 0x4, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0xe, 0x3, 0x9, [{@local, 0x2}, {@remote, 0x3d4}, {@multicast2, 0x53af}, {@broadcast, 0x7}, {@broadcast, 0xffffffff}, {@local, 0x5}, {@empty, 0xaaf1}, {@multicast2, 0x9}]}, @noop, @rr={0x7, 0xb, 0x17, [@multicast2, @local]}, @timestamp_addr={0x44, 0x24, 0x1f, 0x1, 0x3, [{@rand_addr=0x64010100, 0x3}, {@loopback, 0x2}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7}]}]}}}}}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000014001a80100004800c000580"], 0x34}}, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r12, 0x29, 0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="00002bbd7000fedbdf2501000000040003008400018008000100", @ANYRES32=r7, @ANYBLOB="000000073e46cfae29e95853db831f5b8433d3eef73876a3eb6302948f38f01f6ffc7f7b1a0e780a6ac81f018bb8ab1fa721e8d4763606289a268931405e08e1e93016cb80462376a7bfb8ccd0e1b17c", @ANYRES32=r8, @ANYBLOB="1400020076657468305f746f5f687372000000000800030001000000140002007465616d30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1600020000000000000000000000000000000000080003000300000008000300010000756e6c300400000000845b50e920b77d24a175b900000000000004000300040003001400038008100100c8cf2badbe000a74a157787f867d9b", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500ea044dd5bb05fa639ca9e4c91e0008000300"/31, @ANYRES32=r6, @ANYBLOB="0800050008000000"], 0x24}}, 0xdcee729b7a9faec8) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000010000007f000000a609000080b00000", @ANYRES32=0x1, @ANYBLOB="0320000000000100000000040000000000000000", @ANYRES32=r10, @ANYRES32=r13, @ANYBLOB="05000000010000000200"/20, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r14, &(0x7f0000000000)={0x23, 0x20}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 102.845034][ T9] cfg80211: failed to load regulatory.db [ 103.407132][ T5817] cgroup: Unknown subsys name 'net' [ 103.526787][ T5817] cgroup: Unknown subsys name 'cpuset' [ 103.537114][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 105.470388][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 110.113440][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.125020][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.137677][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.162315][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.182182][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.190276][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.203073][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.204100][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.219328][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.221705][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.227615][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.236989][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.249682][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.259030][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.268597][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.280241][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.288646][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.290062][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.299661][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.305853][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.320002][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.328550][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.344145][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.352033][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.360608][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.081035][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 111.105853][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 111.292201][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 111.376689][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 111.441160][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 111.575061][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.582683][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.590831][ T5835] bridge_slave_0: entered allmulticast mode [ 111.599960][ T5835] bridge_slave_0: entered promiscuous mode [ 111.610497][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.618127][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.625694][ T5835] bridge_slave_1: entered allmulticast mode [ 111.634181][ T5835] bridge_slave_1: entered promiscuous mode [ 111.642218][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.649427][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.657868][ T5842] bridge_slave_0: entered allmulticast mode [ 111.665994][ T5842] bridge_slave_0: entered promiscuous mode [ 111.723698][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.731291][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.739328][ T5842] bridge_slave_1: entered allmulticast mode [ 111.747242][ T5842] bridge_slave_1: entered promiscuous mode [ 111.814683][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.822277][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.829725][ T5837] bridge_slave_0: entered allmulticast mode [ 111.837561][ T5837] bridge_slave_0: entered promiscuous mode [ 111.857622][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.896151][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.905155][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.913248][ T5837] bridge_slave_1: entered allmulticast mode [ 111.920999][ T5837] bridge_slave_1: entered promiscuous mode [ 111.937506][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.949756][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.019205][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.035846][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.047124][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.056712][ T5834] bridge_slave_0: entered allmulticast mode [ 112.066550][ T5834] bridge_slave_0: entered promiscuous mode [ 112.139342][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.149596][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.157927][ T5834] bridge_slave_1: entered allmulticast mode [ 112.169738][ T5834] bridge_slave_1: entered promiscuous mode [ 112.180158][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.193228][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.202723][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.212886][ T5836] bridge_slave_0: entered allmulticast mode [ 112.222310][ T5836] bridge_slave_0: entered promiscuous mode [ 112.234663][ T5835] team0: Port device team_slave_0 added [ 112.244712][ T5835] team0: Port device team_slave_1 added [ 112.286828][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.297282][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.307345][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.317048][ T5836] bridge_slave_1: entered allmulticast mode [ 112.326687][ T5836] bridge_slave_1: entered promiscuous mode [ 112.352651][ T5842] team0: Port device team_slave_0 added [ 112.362774][ T5848] Bluetooth: hci1: command tx timeout [ 112.369489][ T5848] Bluetooth: hci2: command tx timeout [ 112.433382][ T5842] team0: Port device team_slave_1 added [ 112.440994][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.448791][ T5848] Bluetooth: hci3: command tx timeout [ 112.449524][ T5845] Bluetooth: hci4: command tx timeout [ 112.455879][ T5851] Bluetooth: hci0: command tx timeout [ 112.467738][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.496172][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.512363][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.569692][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.580017][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.616527][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.634635][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.650107][ T5837] team0: Port device team_slave_0 added [ 112.662444][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.725230][ T5837] team0: Port device team_slave_1 added [ 112.738424][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.765284][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.774714][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.803719][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.818881][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.827217][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.857572][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.926872][ T5834] team0: Port device team_slave_0 added [ 112.968821][ T5836] team0: Port device team_slave_0 added [ 112.981155][ T5836] team0: Port device team_slave_1 added [ 112.991075][ T5834] team0: Port device team_slave_1 added [ 113.000132][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.008885][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.047729][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.110179][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.119415][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.151743][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.194327][ T5835] hsr_slave_0: entered promiscuous mode [ 113.202941][ T5835] hsr_slave_1: entered promiscuous mode [ 113.275111][ T5842] hsr_slave_0: entered promiscuous mode [ 113.284944][ T5842] hsr_slave_1: entered promiscuous mode [ 113.295172][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 113.304408][ T5842] Cannot create hsr debugfs directory [ 113.312374][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.320824][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.352887][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.367651][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.375961][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.408607][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.424304][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.432414][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.462242][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.487015][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.496167][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.525101][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.693982][ T5834] hsr_slave_0: entered promiscuous mode [ 113.701279][ T5834] hsr_slave_1: entered promiscuous mode [ 113.709190][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 113.716894][ T5834] Cannot create hsr debugfs directory [ 113.729312][ T5837] hsr_slave_0: entered promiscuous mode [ 113.738239][ T5837] hsr_slave_1: entered promiscuous mode [ 113.745956][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 113.753552][ T5837] Cannot create hsr debugfs directory [ 113.821503][ T5836] hsr_slave_0: entered promiscuous mode [ 113.831163][ T5836] hsr_slave_1: entered promiscuous mode [ 113.840432][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 113.849233][ T5836] Cannot create hsr debugfs directory [ 114.423169][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.442592][ T5851] Bluetooth: hci2: command tx timeout [ 114.442763][ T5845] Bluetooth: hci1: command tx timeout [ 114.470122][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.492652][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.505138][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.522291][ T5845] Bluetooth: hci4: command tx timeout [ 114.522418][ T5848] Bluetooth: hci3: command tx timeout [ 114.531796][ T5851] Bluetooth: hci0: command tx timeout [ 114.572872][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.593167][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.616788][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.645907][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.730916][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.750034][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.764284][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.780305][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.960951][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.978900][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.008641][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.021301][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.089993][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.169786][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.184715][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.193381][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.206244][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.217922][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.244924][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.258951][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.266644][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.298039][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.305729][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.366997][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.421172][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.438966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.446861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.531658][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.539135][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.612189][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.665771][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.673555][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.697058][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.730173][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.746222][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.754026][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.854099][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.875376][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.907648][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.915465][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.944711][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.953053][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.017907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.026645][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.044279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.053701][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.250569][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.357449][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.530374][ T5851] Bluetooth: hci2: command tx timeout [ 116.531041][ T5848] Bluetooth: hci1: command tx timeout [ 116.564898][ T5842] veth0_vlan: entered promiscuous mode [ 116.605118][ T5848] Bluetooth: hci3: command tx timeout [ 116.611150][ T5848] Bluetooth: hci0: command tx timeout [ 116.617229][ T5848] Bluetooth: hci4: command tx timeout [ 116.626433][ T5842] veth1_vlan: entered promiscuous mode [ 116.668002][ T5835] veth0_vlan: entered promiscuous mode [ 116.752166][ T5835] veth1_vlan: entered promiscuous mode [ 116.817044][ T5842] veth0_macvtap: entered promiscuous mode [ 116.850663][ T5842] veth1_macvtap: entered promiscuous mode [ 116.877659][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.893623][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.950632][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.960549][ T5835] veth0_macvtap: entered promiscuous mode [ 116.984839][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.999269][ T5835] veth1_macvtap: entered promiscuous mode [ 117.023593][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.034194][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.057018][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.070139][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.080595][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.121395][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.188036][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.233831][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.247938][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.311428][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.325862][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.359047][ T5837] veth0_vlan: entered promiscuous mode [ 117.387258][ T5837] veth1_vlan: entered promiscuous mode [ 117.465383][ T5836] veth0_vlan: entered promiscuous mode [ 117.517330][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.530310][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.574829][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.585635][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.616630][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.639962][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.651495][ T5836] veth1_vlan: entered promiscuous mode [ 117.689614][ T5834] veth0_vlan: entered promiscuous mode [ 117.715410][ T5837] veth0_macvtap: entered promiscuous mode [ 117.748020][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.761204][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.775976][ T5837] veth1_macvtap: entered promiscuous mode [ 117.782749][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 117.786632][ T5834] veth1_vlan: entered promiscuous mode [ 117.868565][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.954106][ T5836] veth0_macvtap: entered promiscuous mode [ 117.998354][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.010139][ T5834] veth0_macvtap: entered promiscuous mode [ 118.035442][ T5836] veth1_macvtap: entered promiscuous mode [ 118.086083][ T5834] veth1_macvtap: entered promiscuous mode [ 118.093911][ T5949] tipc: Started in network mode [ 118.099043][ T5949] tipc: Node identity 2e4d53c1870d, cluster identity 4711 [ 118.142323][ T5949] tipc: Enabled bearer , priority 0 [ 118.160746][ T972] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.199129][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.276773][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.292310][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.315934][ T5949] tipc: Disabling bearer [ 118.355567][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.379218][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.397673][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.451126][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.529525][ T1112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.588908][ T1112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.606801][ T1112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.612181][ T5848] Bluetooth: hci2: command tx timeout [ 118.622890][ T1112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.625373][ T5845] Bluetooth: hci1: command tx timeout [ 118.676211][ T1112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.676717][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.687168][ T5845] Bluetooth: hci0: command tx timeout [ 118.687218][ T5845] Bluetooth: hci3: command tx timeout [ 118.687276][ T5845] Bluetooth: hci4: command tx timeout [ 118.704684][ T1112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.734465][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.815804][ T1112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.829695][ T1112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.857154][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 118.915936][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 118.976911][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 119.012915][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 119.067446][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.076601][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.089069][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.099626][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.129710][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 119.159184][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 119.197077][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.197458][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 119.223645][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.253871][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 119.349221][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 119.386242][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.429339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.445063][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 119.594789][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.662675][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.903356][ T5994] IPVS: set_ctl: invalid protocol: 135 172.20.20.21:20004 [ 119.918626][ T5995] IPVS: set_ctl: invalid protocol: 135 172.20.20.21:20004 [ 120.096738][ T6005] Zero length message leads to an empty skb [ 120.408790][ T6018] sctp: [Deprecated]: syz.2.20 (pid 6018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.408790][ T6018] Use struct sctp_sack_info instead [ 120.456722][ T6019] sctp: [Deprecated]: syz.2.20 (pid 6019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.456722][ T6019] Use struct sctp_sack_info instead [ 121.269768][ T6037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.377760][ T6037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.378775][ T6059] netlink: 'syz.2.27': attribute type 11 has an invalid length. [ 121.526890][ T6037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.014130][ T6037] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.527441][ T6108] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 122.541263][ T6108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.103134][ T6129] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 123.170361][ T6129] veth3: entered promiscuous mode [ 123.694815][ T6149] syz.2.42 (6149) used greatest stack depth: 17832 bytes left [ 123.800560][ T6141] syz.2.42 (6141) used greatest stack depth: 16056 bytes left [ 124.039931][ T6161] pim6reg1: entered promiscuous mode [ 124.068106][ T6161] pim6reg1: entered allmulticast mode [ 124.072965][ T6164] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 124.080834][ T6164] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 124.120106][ T6165] __nla_validate_parse: 5 callbacks suppressed [ 124.120128][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 124.536528][ T6185] bridge1: entered promiscuous mode [ 124.542701][ T6185] bridge1: entered allmulticast mode [ 124.546618][ T6189] trusted_key: syz.2.55 sent an empty control message without MSG_MORE. [ 124.715756][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.725965][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.783171][ T6199] Illegal XDP return value 788351189 on prog (id 9) dev N/A, expect packet loss! [ 125.302449][ T6203] syz.0.58 uses obsolete (PF_INET,SOCK_PACKET) [ 125.756064][ T6187] bridge_slave_0: left allmulticast mode [ 125.757338][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 125.765765][ T6187] bridge_slave_0: left promiscuous mode [ 125.782381][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.784652][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 125.823281][ T6187] bridge_slave_1: left allmulticast mode [ 125.830018][ T6187] bridge_slave_1: left promiscuous mode [ 125.837659][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.868166][ T6187] bond0: (slave bond_slave_0): Releasing backup interface [ 125.891165][ T6187] bond0: (slave bond_slave_1): Releasing backup interface [ 125.927585][ T6187] team0: Port device team_slave_0 removed [ 125.952453][ T6187] team0: Port device team_slave_1 removed [ 125.972921][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.989231][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.008027][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.025093][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.054913][ T6187] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.418382][ T6226] tipc: Started in network mode [ 126.424211][ T6226] tipc: Node identity ce3cb8354add, cluster identity 4711 [ 126.432383][ T6226] tipc: Enabled bearer , priority 0 [ 126.441378][ T6226] syzkaller0: entered promiscuous mode [ 126.452811][ T6226] syzkaller0: entered allmulticast mode [ 126.573009][ T6230] 0: reclassify loop, rule prio 0, protocol 800 [ 126.690680][ T62] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.749168][ T62] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.788157][ T62] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.815873][ T62] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.959983][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 126.974849][ T6232] netlink: 68 bytes leftover after parsing attributes in process `syz.0.66'. [ 126.986127][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 127.015701][ T6232] netlink: 104 bytes leftover after parsing attributes in process `syz.0.66'. [ 127.027016][ T6232] netlink: 104 bytes leftover after parsing attributes in process `syz.0.66'. [ 127.110793][ T6226] tipc: Resetting bearer [ 127.161073][ T6225] tipc: Resetting bearer [ 127.178267][ T6237] netlink: 'syz.2.68': attribute type 11 has an invalid length. [ 127.198955][ T6237] netlink: 'syz.2.68': attribute type 11 has an invalid length. [ 127.226456][ T6237] netlink: 224 bytes leftover after parsing attributes in process `syz.2.68'. [ 127.242594][ T6225] tipc: Disabling bearer [ 127.327942][ T6243] warning: `syz.3.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.450505][ T6243] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 127.459138][ T6243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.70'. [ 127.561654][ T6243] team0: Port device geneve0 added [ 127.947501][ T6263] IPv6: sit1: Disabled Multicast RS [ 127.954476][ T6263] sit1: entered allmulticast mode [ 128.518130][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.528595][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.740985][ T6295] netlink: 'syz.0.84': attribute type 12 has an invalid length. [ 129.029520][ T6304] syzkaller0: entered promiscuous mode [ 129.090390][ T6304] syzkaller0: entered allmulticast mode [ 129.261227][ T6308] batadv1: entered allmulticast mode [ 129.472649][ T6320] __nla_validate_parse: 6 callbacks suppressed [ 129.472670][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.90'. [ 129.536696][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.90'. [ 129.600930][ T6323] netlink: 'syz.2.92': attribute type 9 has an invalid length. [ 129.620107][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 129.743105][ T6323] netlink: 'syz.2.92': attribute type 9 has an invalid length. [ 129.757688][ T62] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.783237][ T62] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.803146][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 129.813092][ T62] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.832825][ T6032] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.904253][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.912844][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.020892][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 130.193971][ T6338] syzkaller0: entered promiscuous mode [ 130.208122][ T6338] syzkaller0: entered allmulticast mode [ 130.236189][ T6338] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 130.810424][ T6367] 0: reclassify loop, rule prio 0, protocol 800 [ 131.018053][ T6380] netlink: 'syz.1.107': attribute type 17 has an invalid length. [ 131.109538][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 131.131248][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 131.188103][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.196545][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.371046][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 131.416810][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.433408][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.674839][ T6380] gretap0: entered promiscuous mode [ 131.694662][ T6380] gretap0: left promiscuous mode [ 131.756753][ T6404] block nbd0: not configured, cannot reconfigure [ 131.852063][ T6081] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.874182][ T6081] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.906831][ T6397] tipc: Started in network mode [ 131.947322][ T6397] tipc: Node identity 4e647c30c5da, cluster identity 4711 [ 132.060433][ T6397] tipc: Enabled bearer , priority 0 [ 132.070008][ T6081] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.090243][ T6412] netlink: 'syz.4.114': attribute type 1 has an invalid length. [ 132.119590][ T6416] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 132.121743][ T6081] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.166261][ T6399] syzkaller0: entered promiscuous mode [ 132.188306][ T6399] syzkaller0: entered allmulticast mode [ 132.266605][ T6417] bond1: (slave geneve2): making interface the new active one [ 132.282525][ T6417] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 132.299411][ T6390] tipc: Resetting bearer [ 132.321247][ T6390] tipc: Disabling bearer [ 132.422204][ T6091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 132.425136][ T6430] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 132.453519][ T6091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 132.465083][ T6091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 132.477184][ T6430] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 132.508067][ T6091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 132.839760][ T6447] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 133.005478][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'. [ 133.097530][ T6450] bond2 (unregistering): Released all slaves [ 133.167610][ T6462] tipc: Started in network mode [ 133.176543][ T6462] tipc: Node identity fffffff7, cluster identity 4711 [ 133.185252][ T6462] tipc: Node number set to 4294967287 [ 133.649933][ T6495] : renamed from hsr0 [ 133.728879][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 134.612295][ T6544] __nla_validate_parse: 3 callbacks suppressed [ 134.612321][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 134.653833][ T6548] Bluetooth: MGMT ver 1.23 [ 134.685343][ T6550] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 134.954767][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'. [ 135.049700][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 135.292661][ T6574] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 135.445929][ T6579] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.516303][ T6581] netlink: 'syz.4.157': attribute type 9 has an invalid length. [ 135.540977][ T6582] xt_hashlimit: overflow, rate too high: 0 [ 135.848223][ T6598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.856206][ T6598] IPv6: NLM_F_CREATE should be set when creating new route [ 136.064491][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 136.401208][ T6624] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.424180][ T6626] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 137.155310][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 137.353017][ T6685] netlink: 'syz.3.184': attribute type 2 has an invalid length. [ 137.466858][ T6688] netlink: 'syz.4.185': attribute type 10 has an invalid length. [ 137.494353][ T6690] syzkaller0: entered promiscuous mode [ 137.500085][ T6690] syzkaller0: entered allmulticast mode [ 137.525926][ T6688] batman_adv: batadv0: Adding interface: netdevsim0 [ 137.541686][ T6688] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.596766][ T6688] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 137.640065][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 137.979080][ T6711] netlink: 'syz.3.190': attribute type 12 has an invalid length. [ 138.223728][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.192'. [ 138.275202][ T6724] netlink: 'syz.3.195': attribute type 18 has an invalid length. [ 138.301672][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 138.359343][ T62] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.391716][ T62] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.424940][ T62] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.448768][ T62] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.690926][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.698125][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.912462][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 138.955114][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.201'. [ 139.200584][ T6756] syzkaller1: entered promiscuous mode [ 139.212175][ T6756] syzkaller1: entered allmulticast mode [ 139.242889][ T6759] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 139.762657][ T6772] __nla_validate_parse: 2 callbacks suppressed [ 139.762679][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 140.379767][ T6800] syzkaller0: entered promiscuous mode [ 140.428048][ T6800] syzkaller0: entered allmulticast mode [ 140.713092][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 140.859188][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 140.859197][ T6811] tipc: Enabled bearer , priority 0 [ 140.888846][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 140.944426][ T6811] tipc: Disabling bearer [ 140.974201][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.982894][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.192212][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.230'. [ 141.237805][ T6834] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.228'. [ 141.294220][ T6840] netlink: 68 bytes leftover after parsing attributes in process `syz.2.231'. [ 141.489233][ T6847] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 141.511849][ T6847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.750887][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 142.004462][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 142.065102][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 144.258163][ T6919] netlink: 'syz.1.251': attribute type 5 has an invalid length. [ 144.575264][ T6931] gretap0: entered promiscuous mode [ 144.895446][ T6946] __nla_validate_parse: 2 callbacks suppressed [ 144.895468][ T6946] netlink: 11 bytes leftover after parsing attributes in process `syz.0.257'. [ 145.092083][ T6963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.263'. [ 145.268504][ T6971] xt_l2tp: v2 doesn't support IP mode [ 145.365512][ T6971] pim6reg: entered allmulticast mode [ 145.633164][ T6989] ipvlan2: entered promiscuous mode [ 145.734992][ T6989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.865860][ T7012] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.904235][ T7012] bond3: (slave lo): Enslaving as a backup interface with an up link [ 145.916401][ T7012] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 146.043180][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.279'. [ 146.427832][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 146.505485][ T7052] bond2: option xmit_hash_policy: invalid value (64) [ 146.517061][ T7052] bond2 (unregistering): Released all slaves [ 146.696132][ T7066] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.292'. [ 146.698893][ T7064] team0: Device geneve2 is up. Set it down before adding it as a team port [ 146.861028][ T7071] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.294'. [ 146.871183][ T7071] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.294'. [ 146.931371][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 146.942678][ T7071] hsr_slave_0: left promiscuous mode [ 146.949243][ T7071] hsr_slave_1: left promiscuous mode [ 147.150299][ T7077] netlink: 'syz.4.296': attribute type 29 has an invalid length. [ 147.203353][ T7077] netlink: 'syz.4.296': attribute type 29 has an invalid length. [ 147.212175][ T7080] netlink: 500 bytes leftover after parsing attributes in process `syz.4.296'. [ 147.319393][ T7086] netlink: 192 bytes leftover after parsing attributes in process `syz.2.299'. [ 147.430433][ T7098] unsupported nlmsg_type 40 [ 147.519818][ T7104] netlink: 'syz.0.304': attribute type 21 has an invalid length. [ 147.540970][ T7104] netlink: 'syz.0.304': attribute type 4 has an invalid length. [ 147.549226][ T7104] netlink: 'syz.0.304': attribute type 5 has an invalid length. [ 147.562563][ T7104] netlink: 'syz.0.304': attribute type 21 has an invalid length. [ 147.573069][ T7104] netlink: 'syz.0.304': attribute type 4 has an invalid length. [ 147.581523][ T7104] netlink: 'syz.0.304': attribute type 5 has an invalid length. [ 147.756763][ T7112] : entered promiscuous mode [ 147.851390][ T7114] netlink: 'syz.2.303': attribute type 10 has an invalid length. [ 147.909366][ T7114] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.935830][ T7116] x_tables: duplicate underflow at hook 2 [ 147.948352][ T30] audit: type=1107 audit(1763384823.972:2): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 149.338827][ T7125] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 149.533826][ T7136] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 149.659597][ T7147] validate_nla: 3 callbacks suppressed [ 149.659618][ T7147] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 149.689050][ T7147] netlink: 'syz.3.317': attribute type 2 has an invalid length. [ 149.697259][ T7147] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 149.728715][ T7147] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 149.928839][ T7162] __nla_validate_parse: 13 callbacks suppressed [ 149.928860][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 149.974072][ T7162] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 150.287166][ T1112] tipc: Subscription rejected, illegal request [ 150.320445][ T7190] netlink: zone id is out of range [ 150.351692][ T7190] netlink: zone id is out of range [ 150.357485][ T7190] netlink: set zone limit has 8 unknown bytes [ 150.715306][ T7216] 0: reclassify loop, rule prio 0, protocol 800 [ 150.776675][ T7215] 0: reclassify loop, rule prio 0, protocol 800 [ 150.785836][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.796923][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.807461][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.817946][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.921688][ T7223] net_ratelimit: 925 callbacks suppressed [ 150.921710][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.937962][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.948232][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.959329][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.969710][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.979803][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.989819][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 150.999865][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 151.010091][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 151.020103][ T7223] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 151.709557][ T7221] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 151.719723][ T7221] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.003059][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 152.025394][ T7249] netlink: 44 bytes leftover after parsing attributes in process `syz.4.346'. [ 152.089018][ T7254] x_tables: unsorted underflow at hook 2 [ 152.109410][ T7255] x_tables: unsorted underflow at hook 2 [ 152.458949][ T7278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 152.664798][ T7289] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.978240][ T7309] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.135787][ T7312] syzkaller1: entered promiscuous mode [ 153.141416][ T7312] syzkaller1: entered allmulticast mode [ 153.207623][ T7322] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 153.306816][ T7324] tipc: Started in network mode [ 153.312931][ T7324] tipc: Node identity 325df7209318, cluster identity 4711 [ 153.320521][ T7324] tipc: Enabled bearer , priority 0 [ 153.354385][ T7324] syzkaller0: entered promiscuous mode [ 153.371394][ T7331] netlink: 165 bytes leftover after parsing attributes in process `syz.4.366'. [ 153.372081][ T7324] syzkaller0: entered allmulticast mode [ 153.463145][ T7323] tipc: Resetting bearer [ 153.487430][ T7339] netlink: 'syz.0.368': attribute type 6 has an invalid length. [ 153.503556][ T7323] tipc: Disabling bearer [ 153.518656][ T7339] netlink: 'syz.0.368': attribute type 6 has an invalid length. [ 153.586343][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 153.613942][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'. [ 153.733420][ T7350] atomic_op ffff88807de8e198 conn xmit_atomic 0000000000000000 [ 153.794687][ T7350] IPv6: sit1: Disabled Multicast RS [ 153.801494][ T7350] sit1: entered allmulticast mode [ 153.945711][ T7362] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.375'. [ 153.991259][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 154.180261][ T7376] vlan0: entered promiscuous mode [ 154.202987][ T7376] bridge0: entered promiscuous mode [ 154.406674][ T7385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.379'. [ 154.508000][ T7388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.992851][ T7425] __nla_validate_parse: 3 callbacks suppressed [ 154.992871][ T7425] netlink: 44 bytes leftover after parsing attributes in process `syz.4.391'. [ 155.023809][ T7424] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 155.234492][ T7436] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 156.691003][ T7466] syzkaller0: refused to change device tx_queue_len [ 156.705252][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 156.738344][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.402'. [ 156.792512][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 157.098977][ T7491] net_ratelimit: 7368 callbacks suppressed [ 157.098997][ T7491] 0: reclassify loop, rule prio 0, protocol 800 [ 157.175018][ T7493] tipc: Enabled bearer , priority 0 [ 157.185028][ T7498] netlink: 'syz.1.409': attribute type 13 has an invalid length. [ 157.193458][ T7493] syzkaller0: entered promiscuous mode [ 157.199896][ T7493] syzkaller0: entered allmulticast mode [ 157.346300][ T7498] ipvlan2: left promiscuous mode [ 157.360517][ T7495] tipc: Resetting bearer [ 157.380801][ T7495] tipc: Disabling bearer [ 157.642544][ T6091] wlan1: Trigger new scan to find an IBSS to join [ 157.669371][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 157.928708][ T7532] 0: reclassify loop, rule prio 0, protocol 800 [ 158.105884][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.423'. [ 158.218741][ T7542] xt_policy: output policy not valid in PREROUTING and INPUT [ 158.236768][ T7542] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 158.294323][ T7544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.382975][ T7548] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 158.495934][ T7553] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 158.599915][ T7555] tipc: Enabled bearer , priority 0 [ 158.647082][ T7554] tipc: Disabling bearer [ 158.847766][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.433'. [ 158.940504][ T7570] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.434'. [ 159.913211][ T7604] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.448'. [ 159.948102][ T7603] netlink: 'syz.2.446': attribute type 2 has an invalid length. [ 159.984047][ T10] IPVS: starting estimator thread 0... [ 159.990540][ T7607] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:0 [ 160.071911][ T7610] IPVS: using max 25 ests per chain, 60000 per kthread [ 160.123413][ T7613] netlink: 13 bytes leftover after parsing attributes in process `syz.0.450'. [ 160.139358][ T5813] hid-generic 0005:0B57:0002.0001: item fetching failed at offset 0/1 [ 160.177058][ T5813] hid-generic 0005:0B57:0002.0001: probe with driver hid-generic failed with error -22 [ 160.254842][ T7619] netlink: 32 bytes leftover after parsing attributes in process `syz.4.452'. [ 160.329852][ T7621] netem: change failed [ 160.342076][ T7622] netlink: 64 bytes leftover after parsing attributes in process `syz.3.453'. [ 160.501338][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 160.603676][ T6081] wlan1: Trigger new scan to find an IBSS to join [ 160.868322][ T7668] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 161.049391][ T7676] netlink: 48 bytes leftover after parsing attributes in process `syz.4.473'. [ 161.083508][ T7681] netlink: 'syz.0.471': attribute type 29 has an invalid length. [ 161.092687][ T7676] netlink: 48 bytes leftover after parsing attributes in process `syz.4.473'. [ 161.095090][ T7680] netlink: 61 bytes leftover after parsing attributes in process `syz.2.472'. [ 161.110038][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 161.124037][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 161.143851][ T7683] veth3: entered promiscuous mode [ 161.158064][ T7681] netlink: 'syz.0.471': attribute type 29 has an invalid length. [ 161.166465][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 161.487163][ T7704] vlan3: entered promiscuous mode [ 161.492841][ T7704] vlan3: entered allmulticast mode [ 161.499173][ T7704] hsr_slave_1: entered allmulticast mode [ 161.518808][ T7706] netlink: 'syz.2.480': attribute type 33 has an invalid length. [ 161.549346][ T7706] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 161.563539][ T7706] bond3 (unregistering): Released all slaves [ 162.050094][ T7726] tipc: Enabled bearer , priority 0 [ 162.058988][ T7726] syzkaller0: entered promiscuous mode [ 162.066322][ T7726] syzkaller0: entered allmulticast mode [ 162.079908][ T7726] tipc: Resetting bearer [ 162.090424][ T7725] tipc: Resetting bearer [ 162.109938][ T7725] tipc: Disabling bearer [ 162.792615][ T7767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.857758][ T7775] xt_TCPMSS: Only works on TCP SYN packets [ 163.566262][ T7828] netlink: 'syz.1.518': attribute type 2 has an invalid length. [ 163.577862][ T7830] pim6reg: entered allmulticast mode [ 163.589704][ T7830] pim6reg: left allmulticast mode [ 163.646096][ T62] wlan1: Trigger new scan to find an IBSS to join [ 163.881057][ T7842] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 164.651994][ T13] wlan1: Creating new IBSS network, BSSID 66:9d:a3:1a:fa:58 [ 164.733742][ T7873] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 164.771713][ T7873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.209251][ T7890] __nla_validate_parse: 51 callbacks suppressed [ 165.209272][ T7890] netlink: 216 bytes leftover after parsing attributes in process `syz.1.539'. [ 165.265914][ T7892] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 165.282783][ T7892] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 165.578204][ T7912] veth1_macvtap: left promiscuous mode [ 165.782562][ T7924] netlink: 'syz.0.547': attribute type 23 has an invalid length. [ 165.867672][ T7926] netlink: 'syz.2.548': attribute type 18 has an invalid length. [ 166.133765][ T7935] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 166.151908][ T7935] netlink: 'syz.2.551': attribute type 3 has an invalid length. [ 166.170019][ T7935] netlink: 224 bytes leftover after parsing attributes in process `syz.2.551'. [ 166.776145][ T7954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.556'. [ 166.843482][ T5848] Bluetooth: hci3: command tx timeout [ 167.307771][ T7968] tipc: Enabled bearer , priority 0 [ 167.352567][ T7968] syzkaller0: entered promiscuous mode [ 167.358205][ T7968] syzkaller0: entered allmulticast mode [ 167.393449][ T7968] syzkaller0: mtu less than device minimum [ 167.413426][ T7967] tipc: Resetting bearer [ 167.463429][ T7967] tipc: Disabling bearer [ 167.509589][ T7973] syzkaller0: entered promiscuous mode [ 167.521913][ T7973] syzkaller0: entered allmulticast mode [ 168.030579][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 168.061813][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 168.099700][ T7995] netlink: 40 bytes leftover after parsing attributes in process `syz.0.571'. [ 168.660495][ T8008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.914983][ T8014] tipc: Invalid UDP bearer configuration [ 168.915043][ T8014] tipc: Enabling of bearer rejected, failed to enable media [ 169.242117][ T8030] netlink: zone id is out of range [ 169.247517][ T8030] netlink: zone id is out of range [ 169.301342][ T8030] netlink: zone id is out of range [ 169.306877][ T8030] netlink: zone id is out of range [ 169.314087][ T8030] netlink: zone id is out of range [ 169.327453][ T8030] netlink: del zone limit has 4 unknown bytes [ 169.358829][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.585'. [ 169.538169][ T8041] nftables ruleset with unbound chain [ 169.857175][ T8055] C: renamed from lo (while UP) [ 170.188260][ T8070] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 170.221957][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 170.231002][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 170.419492][ T7823] Set syz1 is full, maxelem 65536 reached [ 170.468222][ T8081] netlink: 'syz.3.596': attribute type 1 has an invalid length. [ 170.476893][ T8081] netlink: 228 bytes leftover after parsing attributes in process `syz.3.596'. [ 170.566674][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.598'. [ 170.702913][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 171.002771][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.024750][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.262691][ T6091] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.291697][ T6091] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.314580][ T6091] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.341832][ T6091] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.358424][ T6091] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.382141][ T6091] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.455781][ T8127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.604'. [ 171.474691][ T6091] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.484488][ T6091] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.552208][ T8129] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.606'. [ 171.563810][ T8125] xt_l2tp: missing protocol rule (udp|l2tpip) [ 171.792324][ T8148] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.610'. [ 171.935751][ T8156] batadv_slave_1: entered promiscuous mode [ 171.957929][ T8155] batadv_slave_1: left promiscuous mode [ 172.176408][ T8177] netlink: 14 bytes leftover after parsing attributes in process `syz.3.618'. [ 172.232098][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 172.396316][ T8177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.406673][ T8177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.417559][ T8177] bond0 (unregistering): Released all slaves [ 172.736171][ T8212] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 172.775056][ T8209] bond3 (unregistering): Released all slaves [ 172.897413][ T8221] syz.0.631: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 172.936216][ T8221] CPU: 1 UID: 0 PID: 8221 Comm: syz.0.631 Not tainted syzkaller #0 PREEMPT(full) [ 172.936250][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.936271][ T8221] Call Trace: [ 172.936279][ T8221] [ 172.936289][ T8221] dump_stack_lvl+0x189/0x250 [ 172.936338][ T8221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.936369][ T8221] ? __pfx__printk+0x10/0x10 [ 172.936392][ T8221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 172.936421][ T8221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 172.936452][ T8221] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 172.936483][ T8221] warn_alloc+0x214/0x310 [ 172.936516][ T8221] ? stack_depot_save_flags+0x40/0x860 [ 172.936553][ T8221] ? __pfx_warn_alloc+0x10/0x10 [ 172.936587][ T8221] ? kasan_save_track+0x3e/0x80 [ 172.936615][ T8221] ? __kasan_kmalloc+0x93/0xb0 [ 172.936647][ T8221] ? xsk_setsockopt+0x4dc/0x8d0 [ 172.936671][ T8221] ? do_sock_setsockopt+0x17c/0x1b0 [ 172.936691][ T8221] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 172.936711][ T8221] ? do_syscall_64+0xfa/0xfa0 [ 172.936738][ T8221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.936771][ T8221] __vmalloc_node_range_noprof+0x125/0x12d0 [ 172.936843][ T8221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.936880][ T8221] ? __kasan_kmalloc+0x93/0xb0 [ 172.936919][ T8221] vmalloc_user_noprof+0xad/0xf0 [ 172.936950][ T8221] ? xskq_create+0xbf/0x170 [ 172.936979][ T8221] xskq_create+0xbf/0x170 [ 172.937008][ T8221] xsk_init_queue+0xb0/0x110 [ 172.937038][ T8221] xsk_setsockopt+0x4dc/0x8d0 [ 172.937067][ T8221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.937097][ T8221] ? __pfx_aa_sk_perm+0x10/0x10 [ 172.937128][ T8221] ? aa_sock_opt_perm+0xff/0x1b0 [ 172.937173][ T8221] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 172.937194][ T8221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.937222][ T8221] do_sock_setsockopt+0x17c/0x1b0 [ 172.937249][ T8221] __x64_sys_setsockopt+0x13f/0x1b0 [ 172.937277][ T8221] do_syscall_64+0xfa/0xfa0 [ 172.937306][ T8221] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.937335][ T8221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.937355][ T8221] ? clear_bhb_loop+0x60/0xb0 [ 172.937380][ T8221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.937401][ T8221] RIP: 0033:0x7fe6b3d8f6c9 [ 172.937432][ T8221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.937449][ T8221] RSP: 002b:00007fe6b4c96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.937473][ T8221] RAX: ffffffffffffffda RBX: 00007fe6b3fe5fa0 RCX: 00007fe6b3d8f6c9 [ 172.937488][ T8221] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 172.937500][ T8221] RBP: 00007fe6b3e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 172.937513][ T8221] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.937525][ T8221] R13: 00007fe6b3fe6038 R14: 00007fe6b3fe5fa0 R15: 00007ffd550bc538 [ 172.937562][ T8221] [ 172.937681][ T8221] Mem-Info: [ 173.049670][ T8230] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 173.062614][ T8221] active_anon:4789 inactive_anon:0 isolated_anon:0 [ 173.062614][ T8221] active_file:2885 inactive_file:39903 isolated_file:0 [ 173.062614][ T8221] unevictable:768 dirty:117 writeback:0 [ 173.062614][ T8221] slab_reclaimable:11226 slab_unreclaimable:122810 [ 173.062614][ T8221] mapped:29078 shmem:1359 pagetables:1094 [ 173.062614][ T8221] sec_pagetables:0 bounce:0 [ 173.062614][ T8221] kernel_misc_reclaimable:0 [ 173.062614][ T8221] free:1298377 free_pcp:16391 free_cma:0 [ 173.301388][ T8221] Node 0 active_anon:19256kB inactive_anon:0kB active_file:11540kB inactive_file:159408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120512kB dirty:468kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13156kB pagetables:4444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 173.334448][ T8221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 173.337879][ T8227] bond3: (slave C): Releasing backup interface [ 173.364732][ T8221] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.364818][ T8221] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 173.364867][ T8221] Node 0 DMA32 free:1291220kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19256kB inactive_anon:0kB active_file:11540kB inactive_file:159408kB unevictable:1536kB writepending:468kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:47016kB local_pcp:27280kB free_cma:0kB [ 173.364932][ T8221] lowmem_reserve[]: 0 0 0 0 0 [ 173.364979][ T8221] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.365037][ T8221] lowmem_reserve[]: 0 0 0 0 0 [ 173.365084][ T8221] Node 1 Normal free:3886312kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18308kB local_pcp:8512kB free_cma:0kB [ 173.365146][ T8221] lowmem_reserve[]: 0 0 0 0 0 [ 173.365193][ T8221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.365392][ T8221] Node 0 DMA32: 76*4kB (ME) 113*8kB (UME) 52*16kB (ME) 265*32kB (UME) 130*64kB (UME) 56*128kB (UM) 32*256kB (UM) 13*512kB (UM) 13*1024kB (UME) 14*2048kB (UME) 295*4096kB (UM) = 1291160kB [ 173.535992][ T8227] bond3: (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 173.553554][ T8221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 173.553693][ T8221] Node 1 Normal: 208*4kB (UE) 47*8kB (UME) 43*16kB (UME) 74*32kB (UME) 25*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3886312kB [ 173.553897][ T8221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.627970][ T8221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.639795][ T8221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.650766][ T8221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.665519][ T8221] 44143 total pagecache pages [ 173.670444][ T8221] 0 pages in swap cache [ 173.676398][ T8221] Free swap = 124996kB [ 173.682921][ T8221] Total swap = 124996kB [ 173.741181][ T8221] 2097051 pages RAM [ 173.746056][ T8221] 0 pages HighMem/MovableOnly [ 173.750984][ T8221] 424119 pages reserved [ 173.755748][ T8221] 0 pages cma reserved [ 173.872689][ T8227] bridge_slave_0: left allmulticast mode [ 173.879234][ T8227] bridge_slave_0: left promiscuous mode [ 173.895319][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.915075][ T8227] bridge_slave_1: left allmulticast mode [ 173.921253][ T8227] bridge_slave_1: left promiscuous mode [ 173.928502][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.948937][ T8227] bond0: (slave bond_slave_0): Releasing backup interface [ 173.967499][ T8227] bond0: (slave bond_slave_1): Releasing backup interface [ 173.990369][ T8227] team0: Port device team_slave_0 removed [ 174.013075][ T8227] team0: Port device team_slave_1 removed [ 174.024860][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.039208][ T8227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.058593][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.076199][ T8227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.353715][ T972] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.382167][ T972] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.414502][ T972] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.442177][ T972] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.496216][ T8257] dvmrp6: entered allmulticast mode [ 174.773950][ T8278] veth0: entered promiscuous mode [ 174.833274][ T8284] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 174.882208][ T8281] veth0: left promiscuous mode [ 175.305951][ T8311] netlink: 'syz.1.654': attribute type 12 has an invalid length. [ 175.344309][ T8311] bond3: option primary_reselect: invalid value (255) [ 175.353471][ T8311] bond3 (unregistering): Released all slaves [ 175.457031][ T8318] __nla_validate_parse: 10 callbacks suppressed [ 175.457054][ T8318] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.656'. [ 175.777503][ T8337] netlink: 'syz.0.664': attribute type 13 has an invalid length. [ 175.928520][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.938831][ T8337] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.950219][ T8337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.993754][ T8348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.035907][ T8341] Cannot find set identified by id 65534 to match [ 176.070817][ T8357] tipc: Enabled bearer , priority 0 [ 176.079786][ T8357] syzkaller0: entered promiscuous mode [ 176.087906][ T8357] syzkaller0: entered allmulticast mode [ 176.129668][ T8358] tipc: Resetting bearer [ 176.168278][ T8356] tipc: Resetting bearer [ 176.204725][ T8356] tipc: Disabling bearer [ 176.228395][ T8364] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.671'. [ 176.359857][ T8369] netlink: 68 bytes leftover after parsing attributes in process `syz.3.672'. [ 176.447809][ T8371] netlink: 88 bytes leftover after parsing attributes in process `syz.4.673'. [ 176.465409][ T8371] netem: invalid attributes len -24 [ 176.472002][ T8371] netem: change failed [ 177.020417][ T8409] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.684'. [ 177.057726][ T8414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.083418][ T5848] Bluetooth: hci4: command tx timeout [ 177.203276][ T8424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.774988][ T8452] syzkaller1: entered promiscuous mode [ 177.780941][ T8452] syzkaller1: entered allmulticast mode [ 177.900676][ T8456] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.698'. [ 177.971286][ T8461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.700'. [ 178.033025][ T8466] netlink: 1 bytes leftover after parsing attributes in process `syz.0.702'. [ 178.092816][ T8471] netlink: 'syz.2.703': attribute type 29 has an invalid length. [ 178.287085][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.707'. [ 178.315822][ T8478] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 178.355531][ T8478] bond2 (unregistering): Released all slaves [ 178.396036][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 178.432339][ T8493] netlink: 'syz.0.711': attribute type 5 has an invalid length. [ 178.456022][ T8489] 8021q: VLANs not supported on ipvlan1 [ 178.665804][ T8501] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 178.723775][ T8501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.776187][ T8513] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 178.913320][ T8513] bond2: (slave ip6gretap1): making interface the new active one [ 178.923289][ T8513] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 179.098397][ T8532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.298491][ T8554] x_tables: duplicate underflow at hook 2 [ 179.419904][ T8549] syzkaller0: entered promiscuous mode [ 179.429854][ T8549] syzkaller0: entered allmulticast mode [ 179.626718][ T8576] bridge0: port 1(batadv1) entered blocking state [ 179.647225][ T8576] bridge0: port 1(batadv1) entered disabled state [ 179.658427][ T8576] batadv1: entered allmulticast mode [ 179.666395][ T8576] batadv1: entered promiscuous mode [ 179.860322][ T8583] lo: entered promiscuous mode [ 179.876668][ T8583] lo: entered allmulticast mode [ 179.910995][ T8583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.074895][ T8590] netlink: 'syz.2.740': attribute type 23 has an invalid length. [ 180.128542][ T6091] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 180.139257][ T6091] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 180.489688][ T8602] __nla_validate_parse: 12 callbacks suppressed [ 180.489708][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.743'. [ 181.638896][ T8596] tipc: Enabled bearer , priority 0 [ 181.737799][ T8596] tipc: Disabling bearer [ 181.939781][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 181.940713][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 181.960026][ T8627] dvmrp6: left allmulticast mode [ 181.998155][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 182.013693][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 182.046399][ T8633] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.751'. [ 182.324072][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 182.376012][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 182.477753][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 182.605734][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 182.728675][ T8659] sctp: [Deprecated]: syz.1.761 (pid 8659) Use of int in max_burst socket option deprecated. [ 182.728675][ T8659] Use struct sctp_assoc_value instead [ 182.792798][ T8659] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 182.822391][ T8659] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 183.336446][ T8691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.365505][ T8656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.371861][ T8656] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 183.372892][ T8691] tipc: Enabled bearer , priority 0 [ 183.390478][ T8691] syzkaller0: entered promiscuous mode [ 183.396632][ T8691] syzkaller0: entered allmulticast mode [ 183.409568][ T8656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.458905][ T8656] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 183.470567][ T8691] tipc: Resetting bearer [ 183.501432][ T8656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.515519][ T8689] tipc: Resetting bearer [ 183.518413][ T8656] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 183.616169][ T8689] tipc: Disabling bearer [ 183.644208][ T8656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.662583][ T8656] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 184.110529][ T8736] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 184.178409][ T8736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.190224][ T8738] wlan0 speed is unknown, defaulting to 1000 [ 184.228156][ T8738] wlan0 speed is unknown, defaulting to 1000 [ 184.261670][ T8738] wlan0 speed is unknown, defaulting to 1000 [ 184.266556][ T8746] tipc: Enabled bearer , priority 0 [ 184.314201][ T8738] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.349938][ T8754] netlink: 'syz.0.782': attribute type 12 has an invalid length. [ 184.422948][ T8738] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 184.595524][ T8751] syzkaller0: entered promiscuous mode [ 184.619401][ T8751] syzkaller0: entered allmulticast mode [ 184.635962][ T8751] tipc: Resetting bearer [ 184.656589][ T8738] wlan0 speed is unknown, defaulting to 1000 [ 184.675293][ T8738] wlan0 speed is unknown, defaulting to 1000 [ 184.683889][ T8738] wlan0 speed is unknown, defaulting to 1000 [ 184.718780][ T8738] wlan0 speed is unknown, defaulting to 1000 [ 184.738999][ T8738] wlan0 speed is unknown, defaulting to 1000 [ 184.851803][ T8751] tipc: Resetting bearer [ 186.659516][ T8751] tipc: Disabling bearer [ 186.735298][ T43] tipc: Node number set to 2229385269 [ 186.901691][ T8832] __nla_validate_parse: 6 callbacks suppressed [ 186.901711][ T8832] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.793'. [ 187.773296][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 187.789168][ T8881] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 187.813076][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 187.947304][ T8892] geneve2: entered promiscuous mode [ 187.952849][ T8892] geneve2: entered allmulticast mode [ 187.960012][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 187.977168][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 188.013205][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 188.037755][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 188.124415][ T8906] macsec0: entered promiscuous mode [ 188.130213][ T8906] macsec0: entered allmulticast mode [ 188.172304][ T8906] veth1_macvtap: entered allmulticast mode [ 188.187426][ T8906] macsec0: left promiscuous mode [ 188.207273][ T8906] macsec0: left allmulticast mode [ 188.218715][ T8906] veth1_macvtap: left allmulticast mode [ 188.271106][ T8915] pimreg: entered allmulticast mode [ 188.523388][ T8927] netlink: 84 bytes leftover after parsing attributes in process `syz.0.815'. [ 188.566906][ T8927] nbd: must specify at least one socket [ 188.595380][ T8936] netlink: 84 bytes leftover after parsing attributes in process `syz.0.815'. [ 188.619503][ T8936] nbd: must specify at least one socket [ 188.969254][ T8952] netlink: 232 bytes leftover after parsing attributes in process `syz.2.822'. [ 189.081262][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 189.454198][ T8988] netlink: 44 bytes leftover after parsing attributes in process `syz.3.830'. [ 189.663830][ T9004] netlink: 'syz.4.835': attribute type 10 has an invalid length. [ 189.674024][ T9003] netlink: 'syz.4.835': attribute type 10 has an invalid length. [ 189.682332][ T8993] nbd2: detected capacity change from 0 to 63 [ 189.689328][ T8998] block nbd2: NBD_DISCONNECT [ 189.698418][ T8998] block nbd2: Disconnected due to user request. [ 189.713790][ T9004] bridge_slave_1: left allmulticast mode [ 189.719610][ T9004] bridge_slave_1: left promiscuous mode [ 189.738180][ T8998] block nbd2: shutting down sockets [ 189.772108][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.774183][ T9010] netlink: 'syz.1.837': attribute type 2 has an invalid length. [ 189.800789][ T9004] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 189.815189][ T9010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.837'. [ 190.074807][ T9028] syzkaller1: entered promiscuous mode [ 190.084400][ T9028] syzkaller1: entered allmulticast mode [ 190.486013][ T9051] netlink: 256 bytes leftover after parsing attributes in process `syz.3.847'. [ 190.542855][ T9056] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 190.551324][ T9057] sctp: [Deprecated]: syz.2.850 (pid 9057) Use of int in max_burst socket option. [ 190.551324][ T9057] Use struct sctp_assoc_value instead [ 190.649697][ T9056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.725609][ T9056] macvlan2: entered promiscuous mode [ 190.754525][ T9066] xt_ecn: cannot match TCP bits for non-tcp packets [ 190.754802][ T9056] macvlan2: entered allmulticast mode [ 190.767377][ T9056] bond3: entered allmulticast mode [ 190.773328][ T9056] bond3: entered promiscuous mode [ 190.783899][ T9056] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.806856][ T9056] team0: Port device macvlan2 added [ 190.891071][ T9074] ksmbd: Unknown IPC event: 8, ignore. [ 191.298681][ T9105] bond0 (unregistering): Released all slaves [ 191.667983][ T9131] netlink: 'syz.2.869': attribute type 5 has an invalid length. [ 191.789233][ T9140] netlink: 'syz.3.871': attribute type 3 has an invalid length. [ 192.078441][ T9160] __nla_validate_parse: 11 callbacks suppressed [ 192.078464][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'. [ 192.098228][ T9158] openvswitch: netlink: IP tunnel dst address not specified [ 192.619600][ T9198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.933385][ T9216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.958184][ T9217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.892'. [ 192.980436][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.892'. [ 193.256184][ T9235] netlink: 'syz.0.899': attribute type 4 has an invalid length. [ 193.557144][ T9252] Cannot find add_set index 2 as target [ 193.638114][ T9251] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.656914][ T9251] bond0: (slave lo): Enslaving as a backup interface with an up link [ 193.666184][ T9251] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 193.683250][ T9258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.700407][ T9251] syzkaller0: entered promiscuous mode [ 193.719976][ T9251] syzkaller0: entered allmulticast mode [ 193.777038][ T9265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.909'. [ 193.839401][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 194.307977][ T9292] syz.0.917 uses old SIOCAX25GETINFO [ 194.549258][ T9295] netlink: 'syz.2.918': attribute type 9 has an invalid length. [ 194.557384][ T9295] netlink: 'syz.2.918': attribute type 6 has an invalid length. [ 194.567564][ T9295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 194.576829][ T9295] netlink: 'syz.2.918': attribute type 7 has an invalid length. [ 194.584737][ T9295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.918'. [ 195.619712][ T9302] workqueue: name exceeds WQ_NAME_LEN. Truncating to: “&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} [ 195.734042][ T9306] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.921'. [ 195.794441][ T9315] netem: incorrect gi model size [ 195.799764][ T9315] netem: change failed [ 195.806563][ T9315] netlink: 5 bytes leftover after parsing attributes in process `syz.1.924'. [ 195.880767][ T9313] netlink: 'syz.2.922': attribute type 62 has an invalid length. [ 195.901769][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.922'. [ 196.173898][ T9338] IPVS: length: 239 != 24 [ 196.196486][ T9338] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 196.355070][ T9348] netlink: 'syz.2.936': attribute type 18 has an invalid length. [ 196.368988][ T9348] netlink: 'syz.2.936': attribute type 18 has an invalid length. [ 196.501430][ T9353] !€ÿ: renamed from bond_slave_0 [ 196.602123][ T9362] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 196.689950][ T9365] netlink: 'syz.1.942': attribute type 4 has an invalid length. [ 196.909427][ T9375] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 197.091054][ T9390] __nla_validate_parse: 12 callbacks suppressed [ 197.091077][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 197.216960][ T9395] xt_hashlimit: size too large, truncated to 1048576 [ 197.496717][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 197.635152][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.956'. [ 197.859818][ T9430] netlink: 576 bytes leftover after parsing attributes in process `syz.1.958'. [ 197.896347][ T9433] bridge_slave_0: left allmulticast mode [ 197.921464][ T9433] bridge_slave_0: left promiscuous mode [ 197.928333][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.942076][ T9436] netlink: 'syz.2.963': attribute type 24 has an invalid length. [ 197.955670][ T9433] bond0: (slave bridge_slave_1): Releasing backup interface [ 197.991378][ T9433] bond0: (slave bond_slave_0): Releasing backup interface [ 198.019515][ T9433] bond0: (slave bond_slave_1): Releasing backup interface [ 198.045758][ T9443] can: request_module (can-proto-4) failed. [ 198.058768][ T9433] team0: Port device team_slave_0 removed [ 198.069393][ T9433] team0: Port device team_slave_1 removed [ 198.076503][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.085817][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.095644][ T9433] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.235925][ T9459] netlink: 'syz.3.968': attribute type 83 has an invalid length. [ 198.640943][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 198.724116][ T9477] macvtap1: entered promiscuous mode [ 198.729464][ T9477] vlan0: entered promiscuous mode [ 198.735208][ T9477] macvtap1: entered allmulticast mode [ 198.740624][ T9477] vlan0: entered allmulticast mode [ 198.745953][ T9477] veth0_vlan: entered allmulticast mode [ 198.753956][ T9475] tipc: Enabled bearer , priority 0 [ 198.761284][ T9480] syzkaller0: entered promiscuous mode [ 198.785032][ T9480] syzkaller0: entered allmulticast mode [ 198.845028][ T9475] tipc: Resetting bearer [ 198.872127][ T9474] tipc: Resetting bearer [ 198.908212][ T9474] tipc: Disabling bearer [ 198.963330][ T9499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.335327][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 199.339398][ T9523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.989'. [ 199.507570][ T9529] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 199.642975][ T9536] bridge_slave_0: left allmulticast mode [ 199.648975][ T9536] bridge_slave_0: left promiscuous mode [ 199.655188][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.669577][ T9536] bridge_slave_1: left allmulticast mode [ 199.676154][ T9536] bridge_slave_1: left promiscuous mode [ 199.682794][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.722257][ T9536] bond0: (slave bond_slave_0): Releasing backup interface [ 199.792273][ T9536] bond0: (slave bond_slave_1): Releasing backup interface [ 199.876486][ T9536] team0: Port device team_slave_0 removed [ 199.955582][ T9536] team0: Port device team_slave_1 removed [ 199.977286][ T9536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.994929][ T9536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.020445][ T9536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.041214][ T9536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.104080][ T9536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.127079][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.133674][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.495014][ T9575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.533729][ T9581] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1004'. [ 200.562681][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 200.588621][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 200.796031][ T9595] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 200.813716][ T9597] netlink: 'syz.1.1008': attribute type 7 has an invalid length. [ 200.826107][ T9597] netlink: 'syz.1.1008': attribute type 8 has an invalid length. [ 200.839443][ T9595] syzkaller0: entered allmulticast mode [ 200.944109][ T9603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.551038][ T9642] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 201.724396][ T9649] bond2: (slave bridge2): making interface the new active one [ 201.759850][ T9649] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 202.103271][ T9668] bond3: Unable to set up delay as MII monitoring is disabled [ 202.116251][ T9668] bond3 (unregistering): Released all slaves [ 202.358377][ T9682] __nla_validate_parse: 55 callbacks suppressed [ 202.358396][ T9682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1035'. [ 202.506498][ T9686] netlink: 177052 bytes leftover after parsing attributes in process `syz.3.1036'. [ 202.537727][ T9690] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1037'. [ 202.764874][ T9696] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 202.827698][ T9696] dvmrp6: entered allmulticast mode [ 202.924222][ T9703] xt_hashlimit: size too large, truncated to 1048576 [ 203.519022][ T30] audit: type=1804 audit(1763384879.542:3): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1044" name="/newroot/236/cgroup.controllers" dev="tmpfs" ino=1221 res=1 errno=0 [ 203.581634][ T30] audit: type=1800 audit(1763384879.572:4): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1044" name="cgroup.controllers" dev="tmpfs" ino=1221 res=0 errno=0 [ 203.622393][ T9729] syzkaller0: entered promiscuous mode [ 203.644123][ T9729] syzkaller0: entered allmulticast mode [ 203.858297][ T9741] netlink: zone id is out of range [ 203.859673][ T9740] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1049'. [ 203.886029][ T9741] netlink: zone id is out of range [ 203.891306][ T9741] netlink: zone id is out of range [ 203.930034][ T9741] netlink: zone id is out of range [ 203.936175][ T9741] netlink: zone id is out of range [ 203.942045][ T9741] netlink: zone id is out of range [ 203.947790][ T9741] netlink: zone id is out of range [ 203.953442][ T9741] netlink: zone id is out of range [ 203.958917][ T9741] netlink: zone id is out of range [ 203.964933][ T9741] netlink: zone id is out of range [ 204.650880][ T9779] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 204.733411][ T9785] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1063'. [ 204.813759][ T9795] netlink: 'syz.1.1067': attribute type 9 has an invalid length. [ 204.883138][ T9799] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 205.055114][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 205.081323][ T9811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1073'. [ 205.082599][ T9812] macsec0: entered promiscuous mode [ 205.119868][ T9812] macsec0: entered allmulticast mode [ 205.139504][ T9815] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1074'. [ 205.139938][ T9813] dvmrp6: left allmulticast mode [ 205.257871][ T9826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1073'. [ 205.291690][ T9819] veth1_macvtap: entered allmulticast mode [ 205.298495][ T9819] veth1_macvtap: entered promiscuous mode [ 205.304657][ T9819] macsec0: left promiscuous mode [ 205.309890][ T9819] veth1_macvtap: left promiscuous mode [ 205.319207][ T9819] macsec0: left allmulticast mode [ 205.328307][ T9819] veth1_macvtap: left allmulticast mode [ 205.507390][ T9833] tipc: Enabled bearer , priority 2 [ 205.520705][ T9835] tipc: Enabling of bearer rejected, failed to enable media [ 205.580967][ T9839] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1077'. [ 205.602856][ T9844] delete_channel: no stack [ 205.978029][ T9864] netlink: 'syz.4.1087': attribute type 23 has an invalid length. [ 206.133900][ T9874] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 206.340999][ T9885] netlink: 'syz.2.1094': attribute type 4 has an invalid length. [ 206.407014][ T9890] block nbd3: not configured, cannot reconfigure [ 206.489167][ T9900] delete_channel: no stack [ 206.623493][ T43] tipc: Node number set to 2344516656 [ 206.815508][ T9919] xt_ecn: cannot match TCP bits for non-tcp packets [ 206.871153][ T9925] IPVS: length: 213 != 8 [ 207.719651][ T9966] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 207.759984][ T9966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.796593][ T9966] veth3: entered promiscuous mode [ 207.808590][ T9966] bond3: (slave veth3): Enslaving as an active interface with an up link [ 207.886608][ T9969] __nla_validate_parse: 12 callbacks suppressed [ 207.886631][ T9969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1120'. [ 208.116929][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1123'. [ 208.140703][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'. [ 208.410202][ T9996] IPVS: Error connecting to the multicast addr [ 208.640686][T10008] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 208.653084][T10007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1132'. [ 208.713190][T10008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.748409][T10012] bond3: (slave veth5): Enslaving as an active interface with a down link [ 208.775338][T10020] netlink: 'syz.0.1135': attribute type 21 has an invalid length. [ 208.783978][T10020] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1135'. [ 208.793155][T10020] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1135'. [ 208.849136][T10008] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 208.901145][T10012] bond3: (slave veth7): Enslaving as an active interface with a down link [ 208.928614][T10026] Bluetooth: MGMT ver 1.23 [ 209.069405][T10029] netlink: 'syz.3.1139': attribute type 39 has an invalid length. [ 209.194393][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 209.205331][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 209.230108][T10038] net_ratelimit: 10 callbacks suppressed [ 209.230129][T10038] openvswitch: netlink: IP tunnel dst address not specified [ 209.350306][T10044] netlink: 'syz.0.1147': attribute type 11 has an invalid length. [ 209.362793][T10044] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1147'. [ 209.490709][T10052] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 209.726269][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 209.762188][T10060] netlink: zone id is out of range [ 209.767896][T10060] netlink: zone id is out of range [ 209.802286][T10060] netlink: set zone limit has 8 unknown bytes [ 210.243492][T10086] syzkaller0: entered promiscuous mode [ 210.249262][T10086] syzkaller0: entered allmulticast mode [ 210.561281][T10111] xt_hashlimit: max too large, truncated to 1048576 [ 210.574769][T10096] wlan0 speed is unknown, defaulting to 1000 [ 210.579156][T10111] tipc: Enabling of bearer rejected, failed to enable media [ 210.773746][T10115] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 210.921023][T10115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.986263][T10120] bond4: entered allmulticast mode [ 211.034501][T10119] veth0: entered promiscuous mode [ 211.119108][T10119] veth0 (unregistering): left promiscuous mode [ 211.585070][T10158] sctp: [Deprecated]: syz.2.1180 (pid 10158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.585070][T10158] Use struct sctp_sack_info instead [ 211.617285][T10158] Cannot find add_set index 65532 as target [ 211.942318][T10178] netlink: 'syz.0.1189': attribute type 10 has an invalid length. [ 211.977606][T10178] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 212.117311][T10187] netlink: 'syz.0.1192': attribute type 2 has an invalid length. [ 212.554806][T10211] pim6reg1: entered promiscuous mode [ 212.560273][T10211] pim6reg1: entered allmulticast mode [ 212.947082][T10226] __nla_validate_parse: 12 callbacks suppressed [ 212.947103][T10226] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1205'. [ 213.223570][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1209'. [ 213.288855][T10246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1210'. [ 213.835918][T10267] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 213.975053][T10278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1224'. [ 213.996110][T10276] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 214.001115][T10278] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1224'. [ 214.010632][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 214.014688][T10278] netlink: 'syz.4.1224': attribute type 5 has an invalid length. [ 214.032036][T10278] netlink: 'syz.4.1224': attribute type 6 has an invalid length. [ 214.042439][T10278] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1224'. [ 214.057544][T10281] macvtap0: entered promiscuous mode [ 214.071625][T10281] vlan0: entered promiscuous mode [ 214.080125][T10281] macvtap0: entered allmulticast mode [ 214.111710][T10281] vlan0: entered allmulticast mode [ 214.116907][T10281] hsr_slave_1: entered allmulticast mode [ 214.176963][T10285] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1222'. [ 214.298599][T10280] team0: Device geneve3 is up. Set it down before adding it as a team port [ 214.354464][T10287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.576343][T10283] macvtap1: entered promiscuous mode [ 214.587094][T10283] macvtap1: entered allmulticast mode [ 215.222117][T10311] netlink: 'syz.4.1235': attribute type 2 has an invalid length. [ 215.272433][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 215.283604][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 215.326446][T10324] netlink: 'syz.1.1237': attribute type 10 has an invalid length. [ 215.361186][T10323] macvtap1: entered promiscuous mode [ 215.382742][T10323] macvtap1: entered allmulticast mode [ 215.408285][T10324] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.440593][T10324] bond0: (slave team0): Enslaving as an active interface with an up link [ 215.512621][T10334] netlink: 'syz.0.1241': attribute type 24 has an invalid length. [ 215.820748][ T8118] IPVS: starting estimator thread 0... [ 215.902302][T10364] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 215.913829][T10357] IPVS: using max 29 ests per chain, 69600 per kthread [ 215.953501][T10367] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 216.280455][T10384] syzkaller1: entered promiscuous mode [ 216.288457][T10384] syzkaller1: entered allmulticast mode [ 216.922700][T10425] netlink: 'syz.2.1268': attribute type 7 has an invalid length. [ 216.931291][T10425] netlink: 'syz.2.1268': attribute type 8 has an invalid length. [ 216.949650][T10425] erspan0: entered promiscuous mode [ 216.956734][T10425] batadv_slave_1: entered promiscuous mode [ 216.974249][T10425] erspan0: left promiscuous mode [ 216.989520][T10425] batadv_slave_1: left promiscuous mode [ 217.663455][T10445] xt_hashlimit: overflow, rate too high: 0 [ 217.949568][T10462] hsr0 speed is unknown, defaulting to 1000 [ 217.965604][T10462] hsr0 speed is unknown, defaulting to 1000 [ 217.984299][T10462] hsr0 speed is unknown, defaulting to 1000 [ 218.025426][T10462] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 218.057188][T10462] hsr0 speed is unknown, defaulting to 1000 [ 218.065540][T10462] hsr0 speed is unknown, defaulting to 1000 [ 218.075383][T10462] hsr0 speed is unknown, defaulting to 1000 [ 218.085683][T10462] hsr0 speed is unknown, defaulting to 1000 [ 218.095279][T10462] hsr0 speed is unknown, defaulting to 1000 [ 218.146745][T10469] syzkaller0: entered promiscuous mode [ 218.162530][T10469] syzkaller0: entered allmulticast mode [ 218.260401][T10483] __nla_validate_parse: 11 callbacks suppressed [ 218.260420][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 218.397608][T10480] wlan0 speed is unknown, defaulting to 1000 [ 218.406365][T10480] hsr0 speed is unknown, defaulting to 1000 [ 218.460394][T10492] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1291'. [ 218.851234][T10519] tipc: Enabling of bearer rejected, failed to enable media [ 219.054915][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'. [ 219.217350][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1307'. [ 219.765753][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 219.776976][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 219.828745][T10562] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1311'. [ 219.840208][T10562] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1311'. [ 219.856205][T10564] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1311'. [ 219.929966][T10567] vlan3: entered promiscuous mode [ 219.935679][T10567] geneve1: entered promiscuous mode [ 219.941252][T10567] vlan3: entered allmulticast mode [ 219.947518][T10567] geneve1: entered allmulticast mode [ 220.113511][T10578] x_tables: unsorted underflow at hook 1 [ 220.227140][T10584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1319'. [ 220.322878][T10591] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 220.331159][T10589] netlink: 'syz.0.1321': attribute type 11 has an invalid length. [ 220.367330][T10592] gretap1: entered promiscuous mode [ 220.416764][T10591] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 220.453440][T10603] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 220.888385][T10636] bridge0: port 2(batadv2) entered blocking state [ 220.895318][T10636] bridge0: port 2(batadv2) entered disabled state [ 220.903373][T10636] batadv2: entered allmulticast mode [ 220.910863][T10636] batadv2: entered promiscuous mode [ 221.383377][ T6084] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 221.392745][ T6084] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 261.565773][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.572384][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.004861][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.011220][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 369.722155][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 369.729778][ T31] Not tainted syzkaller #0 [ 369.734875][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.743664][ T31] task:kworker/1:1 state:D stack:22760 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 369.756025][ T31] Workqueue: events rfkill_sync_work [ 369.761387][ T31] Call Trace: [ 369.764742][ T31] [ 369.767698][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.772356][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 369.778335][ T31] ? __pfx___schedule+0x10/0x10 [ 369.783613][ T31] ? schedule+0x91/0x360 [ 369.787912][ T31] schedule+0x165/0x360 [ 369.793401][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.798914][ T31] __mutex_lock+0x7e6/0x1350 [ 369.804082][ T31] ? __mutex_lock+0x5bb/0x1350 [ 369.808905][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 369.852074][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.857208][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.873205][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 369.879193][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.888461][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 369.894771][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 369.900029][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 369.906760][ T31] rfkill_set_block+0x1d2/0x440 [ 369.912245][ T31] rfkill_sync_work+0x114/0x200 [ 369.917131][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 369.923058][ T31] process_scheduled_works+0xae1/0x17b0 [ 369.928751][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.934818][ T31] worker_thread+0x8a0/0xda0 [ 369.939466][ T31] kthread+0x711/0x8a0 [ 369.944199][ T31] ? __pfx_worker_thread+0x10/0x10 [ 369.949370][ T31] ? __pfx_kthread+0x10/0x10 [ 369.954365][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.959608][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.965010][ T31] ? __pfx_kthread+0x10/0x10 [ 369.969646][ T31] ret_from_fork+0x4bc/0x870 [ 369.974804][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 369.979945][ T31] ? __switch_to_asm+0x39/0x70 [ 369.984907][ T31] ? __switch_to_asm+0x33/0x70 [ 369.989813][ T31] ? __pfx_kthread+0x10/0x10 [ 369.994566][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.999395][ T31] [ 370.003251][ T31] INFO: task kworker/1:2:812 blocked for more than 143 seconds. [ 370.010932][ T31] Not tainted syzkaller #0 [ 370.016119][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.024988][ T31] task:kworker/1:2 state:D stack:22888 pid:812 tgid:812 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 370.037654][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 370.044719][ T31] Call Trace: [ 370.048048][ T31] [ 370.051008][ T31] __schedule+0x1798/0x4cc0 [ 370.055638][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.061163][ T31] ? __pfx___schedule+0x10/0x10 [ 370.066940][ T31] ? schedule+0x91/0x360 [ 370.071220][ T31] schedule+0x165/0x360 [ 370.075475][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.080980][ T31] __mutex_lock+0x7e6/0x1350 [ 370.085878][ T31] ? __mutex_lock+0x5bb/0x1350 [ 370.090702][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 370.097773][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.103142][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.108949][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.114803][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 370.120907][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 370.127531][ T31] process_scheduled_works+0xae1/0x17b0 [ 370.133403][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.139536][ T31] worker_thread+0x8a0/0xda0 [ 370.144380][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 370.150994][ T31] ? __kthread_parkme+0x7b/0x200 [ 370.156748][ T31] kthread+0x711/0x8a0 [ 370.160935][ T31] ? __pfx_worker_thread+0x10/0x10 [ 370.166267][ T31] ? __pfx_kthread+0x10/0x10 [ 370.170904][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.176386][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.182204][ T31] ? __pfx_kthread+0x10/0x10 [ 370.187115][ T31] ret_from_fork+0x4bc/0x870 [ 370.191978][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 370.197185][ T31] ? __switch_to_asm+0x39/0x70 [ 370.202804][ T31] ? __switch_to_asm+0x33/0x70 [ 370.207607][ T31] ? __pfx_kthread+0x10/0x10 [ 370.212713][ T31] ret_from_fork_asm+0x1a/0x30 [ 370.217587][ T31] [ 370.220754][ T31] INFO: task syz.4.1235:10310 blocked for more than 143 seconds. [ 370.228735][ T31] Not tainted syzkaller #0 [ 370.233860][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.243097][ T31] task:syz.4.1235 state:D stack:23336 pid:10310 tgid:10310 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 370.255117][ T31] Call Trace: [ 370.258421][ T31] [ 370.261364][ T31] __schedule+0x1798/0x4cc0 [ 370.266126][ T31] ? validate_chain+0x897/0x2140 [ 370.271120][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.276606][ T31] ? __pfx___schedule+0x10/0x10 [ 370.282057][ T31] ? schedule+0x91/0x360 [ 370.286365][ T31] schedule+0x165/0x360 [ 370.290540][ T31] schedule_timeout+0x9a/0x270 [ 370.295398][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 370.300809][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.306738][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.312055][ T31] ? wait_for_completion+0x267/0x5d0 [ 370.317405][ T31] wait_for_completion+0x2bf/0x5d0 [ 370.322761][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 370.328457][ T31] ? __flush_work+0xd2/0xbc0 [ 370.333644][ T31] ? __flush_work+0xd2/0xbc0 [ 370.338377][ T31] __flush_work+0x9b9/0xbc0 [ 370.343261][ T31] ? __flush_work+0xd2/0xbc0 [ 370.347899][ T31] ? __pfx___flush_work+0x10/0x10 [ 370.353087][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 370.358532][ T31] ? __pfx___cancel_work+0x10/0x10 [ 370.364598][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 370.370307][ T31] __cancel_work_sync+0xbe/0x110 [ 370.375368][ T31] rfkill_unregister+0x92/0x220 [ 370.380290][ T31] nfc_unregister_device+0x96/0x2a0 [ 370.385698][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 370.392554][ T31] virtual_ncidev_close+0x56/0x90 [ 370.397640][ T31] __fput+0x44c/0xa70 [ 370.401945][ T31] task_work_run+0x1d4/0x260 [ 370.406604][ T31] ? __pfx_task_work_run+0x10/0x10 [ 370.412000][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 370.417489][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 370.423463][ T31] do_syscall_64+0x2bd/0xfa0 [ 370.428381][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.433664][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.439820][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.444785][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.450777][ T31] RIP: 0033:0x7fa17618f6c9 [ 370.455865][ T31] RSP: 002b:00007ffdaf103ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 370.464536][ T31] RAX: 0000000000000000 RBX: 000000000003480e RCX: 00007fa17618f6c9 [ 370.472620][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 370.480723][ T31] RBP: 00007fa1763e7da0 R08: 0000000000000001 R09: 00000013af103fdf [ 370.489569][ T31] R10: 0000001b30820000 R11: 0000000000000246 R12: 00007fa1763e5fac [ 370.497662][ T31] R13: 00007fa1763e5fa0 R14: ffffffffffffffff R15: 00007ffdaf103e00 [ 370.506117][ T31] [ 370.509343][ T31] INFO: task syz.3.1328:10608 blocked for more than 144 seconds. [ 370.520000][ T31] Not tainted syzkaller #0 [ 370.525306][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.534107][ T31] task:syz.3.1328 state:D stack:24392 pid:10608 tgid:10607 ppid:5836 task_flags:0x400140 flags:0x00080003 [ 370.546842][ T31] Call Trace: [ 370.550163][ T31] [ 370.553274][ T31] __schedule+0x1798/0x4cc0 [ 370.557833][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.563033][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.567923][ T31] ? __pfx___schedule+0x10/0x10 [ 370.573493][ T31] ? schedule+0x91/0x360 [ 370.577774][ T31] schedule+0x165/0x360 [ 370.582156][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.587669][ T31] __mutex_lock+0x7e6/0x1350 [ 370.592372][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.597174][ T31] ? __mutex_lock+0x5bb/0x1350 [ 370.603614][ T31] ? rfkill_register+0x37/0x8e0 [ 370.608563][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.614047][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 370.619036][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.624454][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 370.629887][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 370.636208][ T31] rfkill_register+0x37/0x8e0 [ 370.640945][ T31] wiphy_register+0x2231/0x2aa0 [ 370.645952][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 370.651340][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 370.656735][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 370.663389][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 370.669017][ T31] ? ieee80211_register_hw+0x1401/0x40d0 [ 370.674993][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 370.680946][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 370.687010][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 370.693513][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 370.700019][ T31] ? __hrtimer_setup+0x187/0x210 [ 370.705201][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 370.711139][ T31] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 370.717153][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 370.724087][ T31] ? __nla_validate_parse+0x251c/0x2d40 [ 370.729674][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 370.734982][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 370.740162][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 370.745983][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 370.752200][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.757030][ T31] ? __nla_parse+0x40/0x60 [ 370.761988][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 370.768489][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 370.774253][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 370.780396][ T31] ? bpf_lsm_capable+0x9/0x20 [ 370.785778][ T31] ? security_capable+0x7e/0x2e0 [ 370.790843][ T31] genl_rcv_msg+0x60e/0x790 [ 370.795535][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.800703][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 370.806428][ T31] netlink_rcv_skb+0x208/0x470 [ 370.811236][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.816805][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.821984][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.837524][ T31] ? down_read+0x1ad/0x2e0 [ 370.842635][ T31] genl_rcv+0x28/0x40 [ 370.846658][ T31] netlink_unicast+0x82f/0x9e0 [ 370.851641][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 370.857040][ T31] ? netlink_sendmsg+0x642/0xb30 [ 370.862199][ T31] ? skb_put+0x11b/0x210 [ 370.866517][ T31] netlink_sendmsg+0x805/0xb30 [ 370.872526][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.877899][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 370.882995][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.888344][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.894061][ T31] __sock_sendmsg+0x21c/0x270 [ 370.898798][ T31] ____sys_sendmsg+0x505/0x830 [ 370.904370][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.909887][ T31] ? import_iovec+0x74/0xa0 [ 370.914713][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 370.919439][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.924856][ T31] ? __fget_files+0x2a/0x420 [ 370.929485][ T31] ? __fget_files+0x3a0/0x420 [ 370.935289][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 370.940429][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.946313][ T31] ? do_syscall_64+0xbe/0xfa0 [ 370.951156][ T31] do_syscall_64+0xfa/0xfa0 [ 370.955879][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.961175][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.968031][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.973105][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.979118][ T31] RIP: 0033:0x7fe0d238f6c9 [ 370.983660][ T31] RSP: 002b:00007fe0d3218038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.992932][ T31] RAX: ffffffffffffffda RBX: 00007fe0d25e5fa0 RCX: 00007fe0d238f6c9 [ 371.000939][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 371.009458][ T31] RBP: 00007fe0d2411f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.017760][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.026422][ T31] R13: 00007fe0d25e6038 R14: 00007fe0d25e5fa0 R15: 00007ffe087ae048 [ 371.034697][ T31] [ 371.037759][ T31] INFO: task syz.3.1328:10619 blocked for more than 144 seconds. [ 371.045607][ T31] Not tainted syzkaller #0 [ 371.050573][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.060244][ T31] task:syz.3.1328 state:D stack:28712 pid:10619 tgid:10607 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 371.072491][ T31] Call Trace: [ 371.075805][ T31] [ 371.078744][ T31] __schedule+0x1798/0x4cc0 [ 371.083927][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.088803][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.093862][ T31] ? __pfx___schedule+0x10/0x10 [ 371.098792][ T31] ? schedule+0x91/0x360 [ 371.103156][ T31] schedule+0x165/0x360 [ 371.107352][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.113664][ T31] __mutex_lock+0x7e6/0x1350 [ 371.118394][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.123276][ T31] ? genl_rcv_msg+0x10d/0x790 [ 371.128000][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.133264][ T31] ? stack_trace_save+0x9c/0xe0 [ 371.138185][ T31] ? radix_tree_lookup+0x240/0x290 [ 371.143875][ T31] genl_rcv_msg+0x10d/0x790 [ 371.148411][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.153486][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.158589][ T31] netlink_rcv_skb+0x208/0x470 [ 371.163708][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.168587][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.174429][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.179782][ T31] ? down_read+0x1ad/0x2e0 [ 371.184337][ T31] genl_rcv+0x28/0x40 [ 371.188358][ T31] netlink_unicast+0x82f/0x9e0 [ 371.193386][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 371.198728][ T31] ? netlink_sendmsg+0x642/0xb30 [ 371.204356][ T31] ? skb_put+0x11b/0x210 [ 371.208633][ T31] netlink_sendmsg+0x805/0xb30 [ 371.213611][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.218932][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.224077][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.229464][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.235565][ T31] __sock_sendmsg+0x21c/0x270 [ 371.240272][ T31] __sys_sendto+0x3bd/0x520 [ 371.244890][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 371.249938][ T31] ? count_memcg_event_mm+0x21/0x260 [ 371.255496][ T31] ? exc_page_fault+0x82/0x100 [ 371.260309][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 371.266186][ T31] __x64_sys_sendto+0xde/0x100 [ 371.271057][ T31] do_syscall_64+0xfa/0xfa0 [ 371.276033][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.281299][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.287442][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.292708][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.298644][ T31] RIP: 0033:0x7fe0d239155c [ 371.303256][ T31] RSP: 002b:00007fe0d31f5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 371.311995][ T31] RAX: ffffffffffffffda RBX: 00007fe0d31f5fc0 RCX: 00007fe0d239155c [ 371.320076][ T31] RDX: 0000000000000020 RSI: 00007fe0d31f6010 RDI: 0000000000000008 [ 371.329460][ T31] RBP: 0000000000000000 R08: 00007fe0d31f5f14 R09: 000000000000000c [ 371.338049][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 371.346302][ T31] R13: 00007fe0d31f5f68 R14: 00007fe0d31f6010 R15: 0000000000000000 [ 371.355028][ T31] [ 371.358113][ T31] INFO: task syz.3.1328:10626 blocked for more than 144 seconds. [ 371.366164][ T31] Not tainted syzkaller #0 [ 371.371286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.380193][ T31] task:syz.3.1328 state:D stack:28712 pid:10626 tgid:10607 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 371.392931][ T31] Call Trace: [ 371.396229][ T31] [ 371.399172][ T31] __schedule+0x1798/0x4cc0 [ 371.403880][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.408779][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.414078][ T31] ? __pfx___schedule+0x10/0x10 [ 371.419014][ T31] ? schedule+0x91/0x360 [ 371.423985][ T31] schedule+0x165/0x360 [ 371.428218][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.433889][ T31] __mutex_lock+0x7e6/0x1350 [ 371.438537][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.443538][ T31] ? genl_rcv_msg+0x10d/0x790 [ 371.448318][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.454169][ T31] ? stack_trace_save+0x9c/0xe0 [ 371.459089][ T31] ? radix_tree_lookup+0x240/0x290 [ 371.464392][ T31] genl_rcv_msg+0x10d/0x790 [ 371.468962][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.474146][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.479351][ T31] netlink_rcv_skb+0x208/0x470 [ 371.484831][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.489775][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.495054][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.500668][ T31] ? down_read+0x1ad/0x2e0 [ 371.505408][ T31] genl_rcv+0x28/0x40 [ 371.509522][ T31] netlink_unicast+0x82f/0x9e0 [ 371.514954][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 371.520286][ T31] ? netlink_sendmsg+0x642/0xb30 [ 371.525287][ T31] ? skb_put+0x11b/0x210 [ 371.529566][ T31] netlink_sendmsg+0x805/0xb30 [ 371.534535][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.539903][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.545449][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.550781][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.556425][ T31] __sock_sendmsg+0x21c/0x270 [ 371.561293][ T31] __sys_sendto+0x3bd/0x520 [ 371.566042][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 371.571131][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.576825][ T31] ? fd_install+0x97/0x540 [ 371.581297][ T31] ? fd_install+0x30d/0x540 [ 371.585922][ T31] __x64_sys_sendto+0xde/0x100 [ 371.590748][ T31] do_syscall_64+0xfa/0xfa0 [ 371.595482][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.600727][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.607398][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.612490][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.618406][ T31] RIP: 0033:0x7fe0d239155c [ 371.623233][ T31] RSP: 002b:00007fe0d31d4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 371.632413][ T31] RAX: ffffffffffffffda RBX: 00007fe0d31d4fc0 RCX: 00007fe0d239155c [ 371.640428][ T31] RDX: 0000000000000020 RSI: 00007fe0d31d5010 RDI: 000000000000000a [ 371.648938][ T31] RBP: 0000000000000000 R08: 00007fe0d31d4f14 R09: 000000000000000c [ 371.657641][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 371.665807][ T31] R13: 00007fe0d31d4f68 R14: 00007fe0d31d5010 R15: 0000000000000000 [ 371.673914][ T31] [ 371.676978][ T31] INFO: task syz.0.1327:10613 blocked for more than 145 seconds. [ 371.685292][ T31] Not tainted syzkaller #0 [ 371.690275][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.699131][ T31] task:syz.0.1327 state:D stack:27016 pid:10613 tgid:10611 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 371.711310][ T31] Call Trace: [ 371.714666][ T31] [ 371.717627][ T31] __schedule+0x1798/0x4cc0 [ 371.722347][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.727244][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.732246][ T31] ? __pfx___schedule+0x10/0x10 [ 371.737179][ T31] ? schedule+0x91/0x360 [ 371.741500][ T31] schedule+0x165/0x360 [ 371.745693][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.751168][ T31] __mutex_lock+0x7e6/0x1350 [ 371.756134][ T31] ? __mutex_lock+0x5bb/0x1350 [ 371.760954][ T31] ? genl_rcv_msg+0x10d/0x790 [ 371.765694][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.770756][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 371.776167][ T31] ? radix_tree_lookup+0x240/0x290 [ 371.781321][ T31] genl_rcv_msg+0x10d/0x790 [ 371.786062][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.791159][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 371.796373][ T31] ? __asan_memcpy+0x40/0x70 [ 371.801009][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 371.807048][ T31] netlink_rcv_skb+0x208/0x470 [ 371.812246][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.817132][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.822425][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.827770][ T31] ? down_read+0x1ad/0x2e0 [ 371.832511][ T31] genl_rcv+0x28/0x40 [ 371.836710][ T31] netlink_unicast+0x82f/0x9e0 [ 371.841719][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 371.847463][ T31] ? netlink_sendmsg+0x642/0xb30 [ 371.852511][ T31] ? skb_put+0x11b/0x210 [ 371.856885][ T31] netlink_sendmsg+0x805/0xb30 [ 371.861797][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.867398][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.872646][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.877976][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.883558][ T31] __sock_sendmsg+0x21c/0x270 [ 371.888278][ T31] __sys_sendto+0x3bd/0x520 [ 371.892938][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 371.897989][ T31] ? count_memcg_event_mm+0x21/0x260 [ 371.903449][ T31] ? exc_page_fault+0x82/0x100 [ 371.908296][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 371.913718][ T31] __x64_sys_sendto+0xde/0x100 [ 371.918546][ T31] do_syscall_64+0xfa/0xfa0 [ 371.923138][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.928382][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.934702][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.939767][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.946017][ T31] RIP: 0033:0x7fe6b3d9155c [ 371.950471][ T31] RSP: 002b:00007fe6b4c94ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 371.959134][ T31] RAX: ffffffffffffffda RBX: 00007fe6b4c94fc0 RCX: 00007fe6b3d9155c [ 371.967234][ T31] RDX: 0000000000000020 RSI: 00007fe6b4c95010 RDI: 0000000000000004 [ 371.975388][ T31] RBP: 0000000000000000 R08: 00007fe6b4c94f14 R09: 000000000000000c [ 371.983707][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 371.992336][ T31] R13: 00007fe6b4c94f68 R14: 00007fe6b4c95010 R15: 0000000000000000 [ 372.000587][ T31] [ 372.003942][ T31] INFO: task syz.0.1327:10620 blocked for more than 145 seconds. [ 372.012120][ T31] Not tainted syzkaller #0 [ 372.017127][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.026660][ T31] task:syz.0.1327 state:D stack:26984 pid:10620 tgid:10611 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 372.039103][ T31] Call Trace: [ 372.042628][ T31] [ 372.045684][ T31] __schedule+0x1798/0x4cc0 [ 372.050229][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.056214][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.061117][ T31] ? __pfx___schedule+0x10/0x10 [ 372.066385][ T31] ? schedule+0x91/0x360 [ 372.070709][ T31] schedule+0x165/0x360 [ 372.075125][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.080639][ T31] __mutex_lock+0x7e6/0x1350 [ 372.086066][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.090870][ T31] ? genl_rcv_msg+0x10d/0x790 [ 372.095790][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.101154][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 372.106485][ T31] ? radix_tree_lookup+0x240/0x290 [ 372.112521][ T31] genl_rcv_msg+0x10d/0x790 [ 372.117072][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.122753][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 372.128012][ T31] ? __asan_memcpy+0x40/0x70 [ 372.132746][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 372.138568][ T31] netlink_rcv_skb+0x208/0x470 [ 372.144003][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.148938][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.154469][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.159998][ T31] ? down_read+0x1ad/0x2e0 [ 372.164844][ T31] genl_rcv+0x28/0x40 [ 372.168897][ T31] netlink_unicast+0x82f/0x9e0 [ 372.174290][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 372.179612][ T31] ? netlink_sendmsg+0x642/0xb30 [ 372.185086][ T31] ? skb_put+0x11b/0x210 [ 372.189388][ T31] netlink_sendmsg+0x805/0xb30 [ 372.194284][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.199613][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 372.206275][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.211745][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.217422][ T31] __sock_sendmsg+0x21c/0x270 [ 372.222505][ T31] __sys_sendto+0x3bd/0x520 [ 372.227238][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 372.233147][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.238075][ T31] ? fd_install+0x97/0x540 [ 372.242687][ T31] ? fd_install+0x30d/0x540 [ 372.247260][ T31] __x64_sys_sendto+0xde/0x100 [ 372.252234][ T31] do_syscall_64+0xfa/0xfa0 [ 372.256784][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.263058][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.269301][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.274305][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.280265][ T31] RIP: 0033:0x7fe6b3d9155c [ 372.284915][ T31] RSP: 002b:00007fe6b4c73ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 372.293860][ T31] RAX: ffffffffffffffda RBX: 00007fe6b4c73fc0 RCX: 00007fe6b3d9155c [ 372.302076][ T31] RDX: 0000000000000020 RSI: 00007fe6b4c74010 RDI: 0000000000000006 [ 372.310091][ T31] RBP: 0000000000000000 R08: 00007fe6b4c73f14 R09: 000000000000000c [ 372.318164][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 372.326844][ T31] R13: 00007fe6b4c73f68 R14: 00007fe6b4c74010 R15: 0000000000000000 [ 372.335073][ T31] [ 372.338140][ T31] INFO: task syz.2.1332:10631 blocked for more than 145 seconds. [ 372.346070][ T31] Not tainted syzkaller #0 [ 372.351252][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.360618][ T31] task:syz.2.1332 state:D stack:28360 pid:10631 tgid:10629 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 372.373205][ T31] Call Trace: [ 372.376517][ T31] [ 372.379454][ T31] __schedule+0x1798/0x4cc0 [ 372.384884][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.389777][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.394910][ T31] ? __pfx___schedule+0x10/0x10 [ 372.399994][ T31] ? schedule+0x91/0x360 [ 372.404348][ T31] schedule+0x165/0x360 [ 372.408546][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.414702][ T31] __mutex_lock+0x7e6/0x1350 [ 372.419525][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.424422][ T31] ? genl_rcv_msg+0x10d/0x790 [ 372.429242][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.434566][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 372.439741][ T31] ? radix_tree_lookup+0x240/0x290 [ 372.445610][ T31] genl_rcv_msg+0x10d/0x790 [ 372.450149][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.455384][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 372.460445][ T31] ? __asan_memcpy+0x40/0x70 [ 372.465339][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 372.470804][ T31] netlink_rcv_skb+0x208/0x470 [ 372.476307][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.481193][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.486388][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.492088][ T31] ? down_read+0x1ad/0x2e0 [ 372.496559][ T31] genl_rcv+0x28/0x40 [ 372.500603][ T31] netlink_unicast+0x82f/0x9e0 [ 372.506061][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 372.511400][ T31] ? netlink_sendmsg+0x642/0xb30 [ 372.516646][ T31] ? skb_put+0x11b/0x210 [ 372.520936][ T31] netlink_sendmsg+0x805/0xb30 [ 372.525900][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.531310][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 372.536942][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.542809][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.548151][ T31] __sock_sendmsg+0x21c/0x270 [ 372.553366][ T31] __sys_sendto+0x3bd/0x520 [ 372.557928][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 372.563520][ T31] ? count_memcg_event_mm+0x21/0x260 [ 372.568905][ T31] ? exc_page_fault+0x82/0x100 [ 372.573879][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 372.579206][ T31] __x64_sys_sendto+0xde/0x100 [ 372.584064][ T31] do_syscall_64+0xfa/0xfa0 [ 372.588607][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.594589][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.600682][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.605833][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.612036][ T31] RIP: 0033:0x7f1f8fd9155c [ 372.616500][ T31] RSP: 002b:00007f1f90c95ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 372.625812][ T31] RAX: ffffffffffffffda RBX: 00007f1f90c95fc0 RCX: 00007f1f8fd9155c [ 372.634056][ T31] RDX: 0000000000000024 RSI: 00007f1f90c96010 RDI: 0000000000000003 [ 372.642119][ T31] RBP: 0000000000000000 R08: 00007f1f90c95f14 R09: 000000000000000c [ 372.650638][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 372.659491][ T31] R13: 00007f1f90c95f68 R14: 00007f1f90c96010 R15: 0000000000000000 [ 372.667709][ T31] [ 372.670769][ T31] INFO: task syz.1.1335:10638 blocked for more than 146 seconds. [ 372.678711][ T31] Not tainted syzkaller #0 [ 372.684998][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.693927][ T31] task:syz.1.1335 state:D stack:25352 pid:10638 tgid:10637 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 372.706417][ T31] Call Trace: [ 372.709737][ T31] [ 372.712799][ T31] __schedule+0x1798/0x4cc0 [ 372.717354][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.723817][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.728720][ T31] ? __pfx___schedule+0x10/0x10 [ 372.733710][ T31] ? schedule+0x91/0x360 [ 372.737995][ T31] schedule+0x165/0x360 [ 372.742859][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.748362][ T31] __mutex_lock+0x7e6/0x1350 [ 372.753055][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.757949][ T31] ? genl_rcv_msg+0x10d/0x790 [ 372.763011][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.768094][ T31] ? stack_trace_save+0x9c/0xe0 [ 372.773215][ T31] ? radix_tree_lookup+0x240/0x290 [ 372.778371][ T31] genl_rcv_msg+0x10d/0x790 [ 372.783163][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.788070][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.793242][ T31] netlink_rcv_skb+0x208/0x470 [ 372.798309][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.803244][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.808313][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.814094][ T31] ? down_read+0x1ad/0x2e0 [ 372.818738][ T31] genl_rcv+0x28/0x40 [ 372.822986][ T31] netlink_unicast+0x82f/0x9e0 [ 372.827848][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 372.833505][ T31] ? netlink_sendmsg+0x642/0xb30 [ 372.838492][ T31] ? skb_put+0x11b/0x210 [ 372.842959][ T31] netlink_sendmsg+0x805/0xb30 [ 372.847904][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.853466][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 372.858448][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.863961][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.869295][ T31] __sock_sendmsg+0x21c/0x270 [ 372.874197][ T31] __sys_sendto+0x3bd/0x520 [ 372.878737][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 372.883932][ T31] ? count_memcg_event_mm+0x21/0x260 [ 372.889382][ T31] ? exc_page_fault+0x82/0x100 [ 372.894399][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 372.899842][ T31] __x64_sys_sendto+0xde/0x100 [ 372.904848][ T31] do_syscall_64+0xfa/0xfa0 [ 372.909482][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.914936][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.921298][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.926088][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.932055][ T31] RIP: 0033:0x7fca3499155c [ 372.936484][ T31] RSP: 002b:00007fca32bf4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 372.945076][ T31] RAX: ffffffffffffffda RBX: 00007fca32bf4fc0 RCX: 00007fca3499155c [ 372.953199][ T31] RDX: 0000000000000020 RSI: 00007fca32bf5010 RDI: 0000000000000009 [ 372.961222][ T31] RBP: 0000000000000000 R08: 00007fca32bf4f14 R09: 000000000000000c [ 372.969284][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 372.977356][ T31] R13: 00007fca32bf4f68 R14: 00007fca32bf5010 R15: 0000000000000000 [ 372.985603][ T31] [ 372.988657][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 372.997932][ T31] [ 372.997932][ T31] Showing all locks held in the system: [ 373.005901][ T31] 1 lock held by khungtaskd/31: [ 373.010760][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.020809][ T31] 4 locks held by kworker/1:1/43: [ 373.025955][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.037471][ T31] #1: ffffc90000b37ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.050012][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 373.060175][ T31] #3: ffff888021feb100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 373.069994][ T31] 3 locks held by kworker/1:2/812: [ 373.075193][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.086484][ T31] #1: ffffc900033b7ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.100105][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 373.111675][ T31] 2 locks held by getty/5587: [ 373.116382][ T31] #0: ffff88802f6530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.126606][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 373.136964][ T31] 5 locks held by kworker/u8:17/6098: [ 373.142477][ T31] 1 lock held by syz.4.1235/10310: [ 373.147618][ T31] #0: ffff888021feb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 373.157484][ T31] 3 locks held by syz.3.1328/10608: [ 373.162870][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.171148][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 373.180302][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.190346][ T31] 2 locks held by syz.3.1328/10619: [ 373.195647][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.203949][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 373.213188][ T31] 2 locks held by syz.3.1328/10626: [ 373.218402][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.226863][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 373.236045][ T31] 2 locks held by syz.0.1327/10613: [ 373.241266][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.249694][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 373.258881][ T31] 2 locks held by syz.0.1327/10620: [ 373.264161][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.272451][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 373.281609][ T31] 2 locks held by syz.2.1332/10631: [ 373.286949][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.295255][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 373.304389][ T31] 2 locks held by syz.1.1335/10638: [ 373.309591][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 373.317965][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 373.327135][ T31] 2 locks held by syz-executor/10643: [ 373.332785][ T31] #0: ffff88801c761118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.342905][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.352914][ T31] 2 locks held by syz-executor/10648: [ 373.358309][ T31] #0: ffff88807fa7a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.368507][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.378531][ T31] 2 locks held by syz-executor/10649: [ 373.383980][ T31] #0: ffff888027f5d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.394214][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.404411][ T31] 2 locks held by syz-executor/10650: [ 373.409855][ T31] #0: ffff888027f5b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.420438][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.430698][ T31] 2 locks held by syz-executor/10651: [ 373.436155][ T31] #0: ffff888026c9a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.446311][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.456686][ T31] 2 locks held by syz-executor/10657: [ 373.462134][ T31] #0: ffff88807cb63918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.472258][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.482348][ T31] 2 locks held by syz-executor/10662: [ 373.487834][ T31] #0: ffff88807ee38118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.498289][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.508353][ T31] 2 locks held by syz-executor/10663: [ 373.513869][ T31] #0: ffff88807affc918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.524144][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.534280][ T31] 2 locks held by syz-executor/10664: [ 373.539696][ T31] #0: ffff88807cb66918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.549973][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.560032][ T31] 2 locks held by syz-executor/10665: [ 373.565705][ T31] #0: ffff88807d149118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.575921][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.586045][ T31] 2 locks held by syz-executor/10671: [ 373.591521][ T31] #0: ffff8880286fb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.601787][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.611852][ T31] 2 locks held by syz-executor/10676: [ 373.617421][ T31] #0: ffff888078001118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.627894][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.638280][ T31] 2 locks held by syz-executor/10677: [ 373.644027][ T31] #0: ffff888078004918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.654171][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.664290][ T31] 2 locks held by syz-executor/10678: [ 373.669752][ T31] #0: ffff8880301a5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.679921][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.690089][ T31] 2 locks held by syz-executor/10679: [ 373.695685][ T31] #0: ffff888055c16118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 373.705993][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.716928][ T31] [ 373.719460][ T31] ============================================= [ 373.719460][ T31] [ 373.728065][ T31] NMI backtrace for cpu 1 [ 373.728094][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 373.728118][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.728130][ T31] Call Trace: [ 373.728139][ T31] [ 373.728147][ T31] dump_stack_lvl+0x189/0x250 [ 373.728184][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.728213][ T31] ? __pfx__printk+0x10/0x10 [ 373.728248][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 373.728275][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 373.728302][ T31] ? __pfx__printk+0x10/0x10 [ 373.728327][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.728361][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 373.728386][ T31] watchdog+0xf60/0xfa0 [ 373.728414][ T31] ? watchdog+0x1e2/0xfa0 [ 373.728441][ T31] kthread+0x711/0x8a0 [ 373.728473][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.728493][ T31] ? __pfx_kthread+0x10/0x10 [ 373.728523][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.728550][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.728577][ T31] ? __pfx_kthread+0x10/0x10 [ 373.728605][ T31] ret_from_fork+0x4bc/0x870 [ 373.728628][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.728659][ T31] ? __switch_to_asm+0x39/0x70 [ 373.728675][ T31] ? __switch_to_asm+0x33/0x70 [ 373.728691][ T31] ? __pfx_kthread+0x10/0x10 [ 373.728719][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.728756][ T31] [ 373.728773][ T31] Sending NMI from CPU 1 to CPUs 0: [ 373.875098][ C0] NMI backtrace for cpu 0 [ 373.875133][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 373.875152][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.875163][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 373.875193][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 373.875208][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 373.875224][ C0] RAX: b81eecbbec490900 RBX: ffffffff81967b47 RCX: b81eecbbec490900 [ 373.875237][ C0] RDX: 0000000000000001 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 373.875249][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 373.875262][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce870 [ 373.875274][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 373.875286][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 373.875300][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.875311][ C0] CR2: 00007fffa21a64e8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 373.875327][ C0] Call Trace: [ 373.875334][ C0] [ 373.875340][ C0] default_idle+0x13/0x20 [ 373.875356][ C0] default_idle_call+0x73/0xb0 [ 373.875373][ C0] do_idle+0x1e7/0x510 [ 373.875395][ C0] ? __pfx_do_idle+0x10/0x10 [ 373.875423][ C0] cpu_startup_entry+0x44/0x60 [ 373.875441][ C0] rest_init+0x2de/0x300 [ 373.875460][ C0] start_kernel+0x3ae/0x410 [ 373.875480][ C0] x86_64_start_reservations+0x24/0x30 [ 373.875503][ C0] x86_64_start_kernel+0x143/0x1c0 [ 373.875526][ C0] common_startup_64+0x13e/0x147 [ 373.875560][ C0]