last executing test programs: 27.542340147s ago: executing program 1 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000a982200000000000000240012800b00010062726964676500001400028005001600030000000800040000"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 27.414299125s ago: executing program 1 (id=2050): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x24004044) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, 0x4, "957b0a386101819797d7c1bd75f5fe54f049ddca5f0c5c9bc539d170cf2e21f5", 0xfd0, 0x3504, 0x4, 0x9}, 0x3c) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) (async, rerun: 64) write$nci(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="42210101"], 0x4) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000837834d2bf0000000000a9"], 0x0}, 0x90) (async) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, &(0x7f0000000000)) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r13, 0x0, 0x18, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000002", @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050001000000"], 0x38}}, 0x4000) 27.245062893s ago: executing program 0 (id=2054): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x8084}, 0x4080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x66}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 27.227460258s ago: executing program 1 (id=2055): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000081cb5c009428", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) getsockopt$inet_opts(r0, 0x0, 0x53, 0x0, &(0x7f0000002e40)=0x10) 27.078365117s ago: executing program 0 (id=2056): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}], 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8881}, 0x800) 27.066749824s ago: executing program 0 (id=2058): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x81}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x5, 0xd1f, 0x3f, @private2, @remote, 0x7800, 0x8, 0xfffffff7, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0xad, 0x0, 0x9, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x10, 0x40, 0x5, 0x2}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000680)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x700, 0x1, 0x8, 0x7, {{0x22, 0x4, 0x0, 0x7, 0x88, 0x67, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, {[@generic={0x7, 0x4, "1d72"}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x2, 0x8, "4e852b8f9d7f"}, {0x0, 0xd, "342a307f57a4cbd1d32ad3"}, {0x5, 0xf, "24361c67f3bf43509b6c8e8d4a"}, {0x5, 0x5, "ffdb1c"}]}, @generic={0x7, 0x8, "f47c02f46667"}, @ssrr={0x89, 0x1f, 0x24, [@rand_addr=0x64010102, @remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, @remote, @remote]}, @timestamp={0x44, 0x18, 0x96, 0x0, 0x6, [0x8, 0x4, 0x570, 0x0, 0xe5b7]}, @end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xf4, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x94f43ec5a78972e0}, 0x44800) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x10, r2, 0xb2343000) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000980), 0x800000, 0x0) read$rfkill(r11, &(0x7f00000009c0), 0x8) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) write$tun(r12, &(0x7f0000000a40)={@val={0x0, 0x88b5}, @void, @eth={@empty, @local, @void, {@mpls_uc={0x8847, {[{0x5, 0x0, 0x1}], @ipv4=@igmp={{0x9, 0x4, 0x3, 0x8, 0x11b, 0x64, 0x0, 0x7, 0x2, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xf9, 0x3, 0x7, [{@private=0xa010102, 0x9}]}]}}, {0x1f, 0x9f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "d545b77b1132d399ee1a1787db10c342d12fb4239db6bdb421281f73ca54af1087e6f92a61f3e72a0942253b76c4b4435b12b35d70b45d88a5a06a07ce596d4a4313abf8fedbe1f80b97d3820b43cc16011b35f2ddb861244a8e464ea4d7056536f2b0ca0ac20b54f3251976b99c0f8ecb98272667509862f04c78c31d1bfedd9ca41272771d5e33b58f19a704cff56ee8071413fe846ace5a723be556dc9ee2a9eb4852c1c5ded2fe73ce9fcd13c3434cbdb0d4685d25f66d2e56f5b0c6f7f7afcf82808e1885cdccc761f475fb7680e2e185002ce5a3c5c2693c7db9022f0cf6c7ce91170db7c55dfc566a92bcd4"}}}}}}}, 0x131) r13 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000b80), &(0x7f0000000bc0)=0xe, 0x80000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r13, 0xf501, 0x0) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r14, 0x8907, &(0x7f0000000c00)) r15 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r2) r16 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r15, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x1c}}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r16}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c400}, 0x4040010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)=r13}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0xa, 0x5, &(0x7f0000000e80)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r17}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000ec0)='GPL\x00', 0x8, 0x6d, &(0x7f0000000f00)=""/109, 0x41100, 0x2, '\x00', r8, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f80)={0x0, 0x0, 0x7, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) 26.842632299s ago: executing program 1 (id=2060): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000900000000000000000000000000711003000000ddff9400000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00000011000306000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000120000140012800c0001006d6163766c616e000400028008001a8004000700"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 26.842273819s ago: executing program 0 (id=2061): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) recvmmsg(r1, &(0x7f0000000d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000240)=""/28, 0x1c}, 0x2}, {{&(0x7f0000000ac0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000b40)=""/207, 0xcf}, {&(0x7f0000000c40)=""/136, 0x88}], 0x2, &(0x7f0000000d00)=""/123, 0x7b}, 0x3}], 0x2, 0x1, &(0x7f0000000e40)={r3, r4+60000000}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f00000000c0)={r6, r7+10000000}, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.145327979s ago: executing program 1 (id=2067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000007c000880280000802400010097a49d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c4c00008024000100dbffffffffffffffffbfffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ec219b153000080140002007767300000000000000000000000000038cfbcc4ab38"], 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x38, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@typed={0x4, 0xd9}, @nested={0x4, 0xc7}, @nested={0x4, 0x77}, @nested={0x4, 0xc7}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 25.974400556s ago: executing program 0 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x4000000, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4000000) 25.969594651s ago: executing program 1 (id=2072): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xd4, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1}}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x1}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x41, &(0x7f0000000080), 0x100}, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000300)=0x5080c0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r14], 0x4) r15 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r15, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 25.802441484s ago: executing program 0 (id=2074): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @multicast2, @rand_addr=0x64010101, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 18.718859363s ago: executing program 2 (id=2161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251700000064000680080001004c0000004c00040067636d286165732900000000000000000000000000000000000000000000000024000000a34951bc2473fb9de5bb04150bfbe00e87e9f2188911a0ed96585baa8dafc5abb81a9be2080006000821b34a938af712"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18.546327515s ago: executing program 2 (id=2162): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@null, 0x4, 'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}}, 0x8014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008840) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@null, 0x4, 'lo\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}}, 0x8014) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008840) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) 18.441064285s ago: executing program 2 (id=2164): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)=@buf={0xd7, &(0x7f00000002c0)="c0be43029e8eff5502e3bda454d777c176cb4f82f30d4a14e6d39c5caafd60ee549952e86746bf712e9a5fb2a34e8d0c4c1f7227b896896a55938f54670298943fa61bba6b838c29c969a90b155f0d8545a24403ef587e395d2a7e090398d31ae89dbb3c896442c2d5f86b7cd3a9231f099c05706777ff581b14ece7dd47f6cfd2450a46b1d70456d12a834426d63cc41bd2d73c0c3730f62864c5fb402e978d578b371e3b549405eb5c314f8b36b4a610770ec002d60381f06f893e808a4233d937c6aa9e85b368d864a406eccdf407ca887daba87ad0"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80, 0xb, 0x4}}}}]}, 0x40}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000500)={0x33, @dev={0xac, 0x14, 0x14, 0x38}, 0x4e22, 0x1, 'rr\x00', 0xc, 0x9, 0x13}, 0x2c) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x10001}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES32=r7, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3801000010002000"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x20004090) 18.270328785s ago: executing program 2 (id=2166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) 18.205135577s ago: executing program 2 (id=2168): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x9010, r0, 0x3fef3000) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x3, 0x1, 0x6}) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'net_cls'}]}, 0x9) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5ba1}}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x37, &(0x7f00000001c0)=""/55, 0x41000, 0x30, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x5, 0x4, 0x2}, 0x10, 0x17430, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x4, 0x2, 0xb, 0xb}, {0x4, 0x3, 0xf, 0x2}], 0x10, 0x208}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000003c0)={{r0}, "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"}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000013c0)={0x1, 0x0, 0x5, 0x7, 0xfffffff7, 0x40}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000001400), 0x800) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000001440)=""/4096, &(0x7f0000002440)=0x1000) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000002480)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002740)={r2, 0x0, 0xe3, 0x16, &(0x7f00000024c0)="a267cfbda7cafaf30d46450cf8ce0d53bad5d6099c82c632789094bdc383aebe94bc9558906e7eb27e0145dccaba89369ce2e4e65a5adc48a381ed121f08ed781d0e22837bac703fc280c050ecb21ab1bb5d1fe5384af19a84217906867b3a21da7a25d81748e2f548f1ee8fa21eb56dcf88aaa00cfdbb407548f710705041fc0cbadc470c72c0bb23fd1b5f8498e2a062f5faf10fe64bcf0e0d1230f2f9678f35b1370d0fee5b2d35286fd725b9b87a6870e21c46c2103eaf079cd64f9595f76831b4603eda3aecc372365968b57382c93c2379d7592175f1465c750d1c1a7eb30bfd", &(0x7f00000025c0)=""/22, 0xffffffff, 0x0, 0xfa, 0x16, &(0x7f0000002600)="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", &(0x7f0000002700)="7086745b7c4930e47454a377532aec9fca394b88d0cd", 0x4, 0x0, 0x4}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000027c0), 0x8) recvmmsg$unix(r4, &(0x7f0000004100)=[{{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/24, 0x18}, {&(0x7f00000028c0)=""/135, 0x87}, {&(0x7f0000002980)=""/141, 0x8d}], 0x3, &(0x7f0000002a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003c80)=""/98, 0x62}, {&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/129, 0x81}, {&(0x7f0000003e00)=""/69, 0x45}, {&(0x7f0000003e80)=""/16, 0x10}, {&(0x7f0000003ec0)=""/54, 0x36}, {&(0x7f0000003f00)=""/161, 0xa1}], 0x7, &(0x7f0000004040)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x3, 0x8100, &(0x7f00000041c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004240), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000004280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r10, &(0x7f0000004340)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x28, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x4f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x44044800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004700)={r9, 0x0, 0xc4, 0xbc, &(0x7f0000004380)="c483f1c6f140afffd2450884ba975868ca6947f85408b8b1760e38487ea6b83bdac79f7d2a68a3413ad1c58e9646e3bff4aaa5d2d4342fc77ea894af9247b632805a0d3be5696c2472f3cb04dbd09188811274815eeb12806fc0a80ab76010428495965e715fbab62087593d0f3f879c51e8d9d604be635a68f2dc890ec26948973acb67ce07319430988d187e6b8874969c4b4bacb3c4553d7bb50ba3306785adf432934f511fc6434928eef4b416dd865abf3f14abc5390a36e4739c8db4346aad945e", &(0x7f0000004480)=""/188, 0x2, 0x0, 0x85, 0xc8, &(0x7f0000004540)="6f4c79a76d80feb2c9f0fa7d25e95b90816e25c8b37fcd3dad7c64634c22c0b1b3d22897a82753fe32de464e164cdc4e2b84878977fd337cb53f77913f12777d4ef78a49aed749ebcbb8bad25adb8f9b358efa9fe80abae02a6f1b47c568fd70763bda3335e3e140419f4f5b2bf6f3b25d54456805211c0418a41c211fe8d97fe6806bcce3", &(0x7f0000004600)="f5ef1bb8ff5bc16d4b643982fe4b85af24467ecb7bdd8c98d2226f7ff6c3de39c2325a392c5ac458271526a6090208330bf4659f22fb0f8ee3ca5b8b083e0fc923cebd137c7140bdcd7a37961da7cdabcd0a2a6c8c8603d9bdc0279348936c3b152b394bd9d420b890ac93f39683620917257dc96e7645cd1f1a8698a73405f56880b2b982f10d31c355c01c11fb68ef517f0d37ace8de63a806e147fbfe3beb73590767d8319ab5d824881a8cf02acc1164a9774ecf5f43399d0cfb2b5e8788415444942263660c", 0x6}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000047c0)=@security={'security\x00', 0xe, 0x4, 0x5e8, 0xffffffff, 0x0, 0xf8, 0x1c8, 0xffffffff, 0xffffffff, 0x518, 0x518, 0x518, 0xffffffff, 0x4, &(0x7f0000004780), {[{{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff], [0x0, 0xff, 0xff, 0xffffff00], 'ip6gretap0\x00', 'ip6gre0\x00', {0xff}, {}, 0x3a, 0x0, 0x4, 0x50}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x39, 0xe6, 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x11, 0x4, 0x1}}}, {{@uncond, 0x0, 0x228, 0x350, 0x0, {}, [@common=@rt={{0x138}, {0xfffffffe, [0x46994587, 0xfffff3c3], 0x7fff, 0x8, 0x4, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x30}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, @empty, @local], 0x2}}, @common=@dst={{0x48}, {0x0, 0x2, 0x1, [0xbea6, 0x2f, 0x1ff, 0x0, 0x3, 0xafa9, 0x3, 0x7fff, 0x80, 0x5, 0x8, 0xc17, 0x5, 0x1, 0x1, 0xf7], 0xd}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:apt_var_log_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) clock_gettime(0x0, &(0x7f0000004f00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000004e40)={0x80000000, 0xff, 0x100, 0x2, 0xc67, 0x7f, 0x6, 0x10000}, &(0x7f0000004e80)={0x4, 0x0, 0x8, 0x5, 0x6ae6, 0x9, 0x10000}, &(0x7f0000004ec0)={0xfffffffffffff24e, 0x594b, 0xffffffff80000000, 0x1, 0x1ff, 0x6a, 0x7, 0xa8d6}, &(0x7f0000004f40)={r13, r14+10000000}, &(0x7f0000004fc0)={&(0x7f0000004f80)={[0x1]}, 0x8}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000005000)={r9}) sendmsg$NL80211_CMD_DISASSOCIATE(r15, &(0x7f0000005340)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005300)={&(0x7f0000005080)={0x26c, r11, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x84ca}, @NL80211_ATTR_IE={0x20e, 0x2a, [@fast_bss_trans={0x37, 0xe7, {0x7, 0x8, "820f332ddd39863ce0cd3383503c6712", "dcc6cc0f504d37061c25db3a8a1c6e398938f9dde440bb747bf7d45318e4dbdb", "62fcb4db88ec6f5e908c9e53314f54f1afc569e4c1489dddc76ffcfd93e323f7", [{0x2, 0x6, "88bbc52f14ce"}, {0x1, 0x15, "db4765ff932b2c480dff7e1729d78d8f2b5f3b380d"}, {0x2}, {0x4, 0x26, "09d2f90845cafcbea09e4ff700fe302d57d1009d6b58bb8b8413ca860a3498822fa92fca5e45"}, {0x3, 0x1f, "82f3188ef1b8db4233965ff6e7e18114a79721c26ef7b0a721d702d5f73643"}, {0x2, 0x10, "b5fd3d41c447f474a7e98ed0d8a84fad"}, {0x2, 0x4, "9202ed7d"}, {0x3, 0x11, "75e0e14ca6729a73887177decd7b5e14f6"}]}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @random={0x9, 0x66, "c6ddaf114ce8731202da01391b3b3fb3d717595721674198e2fe3a733c69b2c0848ef216aeb53e48eaf05c9a4a936016317cbde1c8ee06f2428c8350748c00d6437f28412f92386da61c19c73add4113013fd2a6bf3ac5a9118072857ab9bf97302bbbd50c81"}, @sec_chan_ofs={0x3e, 0x1}, @ht={0x2d, 0x1a, {0xc, 0x3, 0x0, 0x0, {0xb, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x6}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x7d, {{0x0, 0x1, 0x1}, 0xf9, 0x2, 0x9, @broadcast, 0x800, @void, 0x2, 0x9, 0x9, [{{0x1}, @device_a, 0xfffffffe}, {{0x1}, @device_a, 0x4}, {{}, @broadcast, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0xa}, {{0x1}, @device_b, 0x10001}, {{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0xe1}, {{}, @device_a, 0x400}]}}, @mesh_chsw={0x76, 0x6, {0x8, 0x5, 0x9, 0x2}}, @mesh_chsw={0x76, 0x6, {0x2, 0x5, 0x4, 0x7}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20000000) sendmsg$NL80211_CMD_NOTIFY_RADAR(r15, &(0x7f0000005440)={&(0x7f0000005380), 0xc, &(0x7f0000005400)={&(0x7f00000053c0)={0x34, r11, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005480)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r16, 0x4018f514, &(0x7f00000054c0)={0xc, 0x400, 0x1}) r17 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r17, 0x89e1, &(0x7f0000005500)={r8}) 18.059648487s ago: executing program 2 (id=2171): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) 17.821823465s ago: executing program 3 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb3be}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0xa01, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x200480d0}, 0x14e153d0d47cc572) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40004) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x96, 0x7, 0x3, 0x8, @remote, @remote, 0x0, 0x0, 0x4, 0xbd}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xeb}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x40090}, 0x24008060) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x204, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x89ebc99ce1943076}, @NL802154_ATTR_SEC_KEY={0x13c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1b9bd69264df1d24fe4ff18aae4e8c379ffb4747c4f9a87ce8193316ab5f1208"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2aa6b474e9bece12059fd2d938fa9233c94fbcd368303f65cfda49d01a064f0d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f0385baf720a6c31b71129ac22da370c"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4c32}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ff432e488fc3bc1db3d64e2ace8a4031"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e313954a910d1c61379940506279fb81"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e718aec0d292e56a915762669cde0f94"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_SEC_KEY={0x90, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e994f9229b179e98cf687960f2aaea95"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "296c16fb69b0ef3330cfd61426a29bfa"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "59fbd855d08b27263127d0a745986713f83198d74299068a5dd1d3b2b64eb5c8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "28e44d3f72a2ecfee5d2799a3c657a7e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "40494ec9fe1cb5b03e0eed83384e603e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x204}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000a80)={&(0x7f0000000900), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb0, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x34d6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffdc}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040}, 0x5) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004004}, 0x48008) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2604c080}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r9, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008885}, 0x4004000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map=0x1, 0x1f, 0x0, 0x5, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000ec0)=[0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0], 0x0}, 0x40) (async) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001000)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000fc0)={r0, r5, 0x25, 0x1e, @val=@tcx={@void, @value=r12, @void, @void, r11}}, 0x1c) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001500)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f00000010c0)={0x3f0, r13, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5b, 0x4, "9168d53b3c9551f825d314df12638180ed8072ebed68ff0cabea66310dcece6fe656607615f00af1ff004a59b62a48b016ba0aa40629611d1d35f2d4f3012ed283fad3e639bf71d4810a83ddda58d2136ab405e07f9463"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "5d9a96851e299de42d8705b771a0271ae4658a9bf8bb6f97512ee222aa57c3319e711e6d7f4ad0365910b93d9ee9f134b90772d35855b4a8f7d7965885a8287bc8e8a2dfef2fddbb7a47dd19091e3353cee594d70a0f903c36c286b870a8c5f7dedb1854a75ba255b19905e3a976ea5e74c6dc9cfe434ca07ca86b12070a26f380785246497ec0e7fb7e80472701248ec227a16a7627d4218ad368ad1237b530c68b55c7473cc1f74983e1f7cb607af93f75caa6a7a99212efe039"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x874c}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "642669f8010734a30c4aac4122dc59437de787aeb9bc49687df6575ef89d1cc61432ed97f4be343afd259be07724dce2d40a89ff7c75a36d548659484fd4a11e2c9cc7c64b73ee0b25f5bc2d7c07e1c8a62b31fa9d76d9af669ca1040071311ecf611376482345e0678b27e104b1b9c2547ccaf05ac7d528d8af78c50e90beb70087882e78450edd8c99eed32d499d250d25044d5eb1636e7f30ec4844c16186a9558483a8b9edf29be89fb969f9cafebcf3629bfbe8009c37e92e00"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "5652af67b1b7db6f5466d497a7a9dd6ba50a82a097643f4e66f9312e5868afd572a42dcc33560102"}, @ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "74e4f53b6b89a4921b04eb"}, @ETHTOOL_A_BITSET_VALUE={0xbb, 0x4, "c456e240fe37d4b8b86515968e5565af6daa781ff661f317ec55eddbc3e05c6f635e4710ea0860d479664fd43e649d4c680181d77d2653a240845cacf952ccbb122600df1ed640716ca06a5ee68f7dd1459caab5db81c575d24232f3454fb409c69102e469b4bf5d0bc7a4ee8ab05b75aa4b97d82c4efbe917435e4d373987acf6b74b83073cf7ac01dd257fd25965d255c81a2b82df08e7500ff8667ab8f65689fac705d815c30daa03659984623f2201cb0ba407d20c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f2, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44004}, 0x10) (async) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r14, 0x29, 0xca, &(0x7f0000001640)={0x0, 0x1, 0x0, r5, 0x2}, 0xc) (async) r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000016c0), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000018c0)={&(0x7f0000001680), 0xc, &(0x7f0000001880)={&(0x7f0000001700)={0x148, r15, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67664b5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5dbd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b847caa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69e66904}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x130c9cf3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa0fb3e2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c53bfd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6d7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1712}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41c164c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e0b6319}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c84156a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61b26835}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x861c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x536e9379}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ad8a3d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee1b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e97d99d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5df2f03f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e6cdf8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5226}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2415a44d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffede2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79fdffb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5039422a}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x90}, 0x8080) 17.635703837s ago: executing program 3 (id=2178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) close(0x4) 17.508396322s ago: executing program 3 (id=2180): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de01610066000380"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x42) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0x30, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "ba66523bc5dea26a1ca732c6535999ae3164ec5ef5b99e18d31261edd793d61d8464a0e8"}}}}}}}, 0x0) 17.393636045s ago: executing program 3 (id=2182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0xc850) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffd14, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x5, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x80c, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8089}, 0x4008800) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010600002200000000000900000024000480130001dd62726f6164636173742d6c696e6b00000c0007800800050001000000"], 0x38}}, 0x4000) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000140)={0x22, 0x5, 0x9, 0x4, 0xfffffffd, 0x81}) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000009001f00706879f529000000050020"], 0x28}}, 0x0) 17.283783672s ago: executing program 3 (id=2184): r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = socket$inet6(0xa, 0x3, 0x87) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0xfff9, @remote, 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r5, &(0x7f0000001dc0), 0x213, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3, 0x4, 0xad}}, 0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r4, &(0x7f00000000c0), 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x2000000000000181, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xb}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x3b, 0x107, 0xfffffffe, 0x0, {0x0, 0x7c}}, 0xfffffe7e}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 17.162338796s ago: executing program 3 (id=2185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000ad0000000000000000850000002700000085000000050000009500"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xd1, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000008c0), &(0x7f0000000a80), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r3, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000d40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000fc0)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x14, 0x7}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0xe, 0x5, {0x1, 0x5, 0x7, 0x8, 0x8000, 0x7, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x200, 0x8, {{0xb, 0x4, 0x1, 0x3c, 0x2c, 0x64, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @end, @generic={0x94, 0xd, "6716eb24a131e9ce96b0e8"}, @rr={0x7, 0x7, 0x98, [@multicast2]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={r3, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0], 0x0, 0x64, &(0x7f0000001140)=[{}], 0x8, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x57, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001400)={0x200, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4020}, 0x20000000) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1000}, 0xc) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5a2cfdd", @ANYRES16=r16, @ANYBLOB="01002abd7000fedbdf25030000000c000180080006000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r16, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x7e, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffe0, 0xc}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) 16.177036896s ago: executing program 4 (id=2188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa3d63403aaaaaaaa0180c2001f196871f19a000086dd2c7b57843c127eb9cd602a843500140600000000000004"], 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4c0d0) syz_emit_ethernet(0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000f34796390081004b000011bc4eaae00a8b9bb1776535443a6e6d34f943141748f826a9969504b877068efbd02b4d0da60eac89e8af6c291a2f41692bc9582c07e54cb2ec39536926bd3bb36718de535d684cadffa324708818d1f7397787cbf8a21e013505e14c55b4414dde01cf730db6631c78bd02f840d1e9aa75f47c64c00d"], &(0x7f00000000c0)={0x1, 0x2, [0xd70, 0x61, 0x6c7, 0x292]}) 16.154930059s ago: executing program 4 (id=2189): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty}}}}, 0x0) 16.119912103s ago: executing program 4 (id=2190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x80000) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) writev(r2, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x11c, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x10a, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 15.206379892s ago: executing program 4 (id=2191): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) r1 = socket(0x2a, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x0) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x23, &(0x7f0000000140)={0x0, {{0x29, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000000000000000100fffd0900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800054000000000080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408"], 0x100}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb93f}, 0x1c) connect$pppl2tp(r8, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 15.198900669s ago: executing program 4 (id=2192): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001040)="e7337703a4", 0x5}], 0x1}}], 0x1, 0x4c818) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x4000002}, {0x3, 0xc, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.142101655s ago: executing program 4 (id=2193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000240)=0xffffffff, &(0x7f0000000340)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x553b00, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 10.119718894s ago: executing program 32 (id=2074): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @multicast2, @rand_addr=0x64010101, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 10.075334362s ago: executing program 33 (id=2072): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000360009000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000000036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b0113000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a8cb62d81814c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c550282778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b358f571cd15af64f69951d79e5b57ba3640d345fbe1c9bf7ca74846bf4c2a73a80cee7c15839e2326694f6f5cc5408cbfdef7c6868299b1c8cdaf52740cc2e66daafc00000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xd4, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1}}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x1}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x41, &(0x7f0000000080), 0x100}, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000300)=0x5080c0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r14], 0x4) r15 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r15, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3.047459099s ago: executing program 34 (id=2171): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) 2.022981733s ago: executing program 35 (id=2185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000ad0000000000000000850000002700000085000000050000009500"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xd1, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000008c0), &(0x7f0000000a80), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r3, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000d40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000fc0)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x14, 0x7}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0xe, 0x5, {0x1, 0x5, 0x7, 0x8, 0x8000, 0x7, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x200, 0x8, {{0xb, 0x4, 0x1, 0x3c, 0x2c, 0x64, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @end, @generic={0x94, 0xd, "6716eb24a131e9ce96b0e8"}, @rr={0x7, 0x7, 0x98, [@multicast2]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={r3, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0], 0x0, 0x64, &(0x7f0000001140)=[{}], 0x8, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x57, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001400)={0x200, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4020}, 0x20000000) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1000}, 0xc) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5a2cfdd", @ANYRES16=r16, @ANYBLOB="01002abd7000fedbdf25030000000c000180080006000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r16, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x7e, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffe0, 0xc}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) 0s ago: executing program 36 (id=2193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000240)=0xffffffff, &(0x7f0000000340)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x553b00, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) kernel console output (not intermixed with test programs): ft promiscuous mode [ 100.138609][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.172464][ T5933] tipc: Node number set to 2886997007 [ 100.261309][ T6262] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.410656][ T6265] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 100.757053][ T6281] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 100.767580][ T6281] netlink: 'syz.2.77': attribute type 2 has an invalid length. [ 101.998986][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 102.057982][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 102.175657][ T6316] pim6reg: entered allmulticast mode [ 103.155817][ T6372] __nla_validate_parse: 4 callbacks suppressed [ 103.155836][ T6372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.105'. [ 103.296459][ T6378] netlink: 348 bytes leftover after parsing attributes in process `syz.1.108'. [ 103.356996][ T6383] tipc: Started in network mode [ 103.362235][ T6383] tipc: Node identity de86afeec055, cluster identity 4711 [ 103.369806][ T6383] tipc: Enabled bearer , priority 0 [ 103.491767][ T6383] syzkaller0: entered promiscuous mode [ 103.498720][ T6383] syzkaller0: entered allmulticast mode [ 103.613861][ T6380] tipc: Resetting bearer [ 103.673842][ T6380] tipc: Disabling bearer [ 103.805001][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.835453][ T6401] Bluetooth: MGMT ver 1.23 [ 104.504085][ T6431] netlink: 'syz.3.127': attribute type 29 has an invalid length. [ 104.538325][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 104.579181][ T6434] netlink: 'syz.3.127': attribute type 29 has an invalid length. [ 104.598681][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 104.624595][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 104.745454][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.130'. [ 104.884651][ T9] IPVS: starting estimator thread 0... [ 104.940872][ T6453] netlink: 324 bytes leftover after parsing attributes in process `syz.4.133'. [ 105.002066][ T6451] IPVS: using max 28 ests per chain, 67200 per kthread [ 105.231460][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.594895][ T6490] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 105.612409][ T6491] netlink: 148 bytes leftover after parsing attributes in process `syz.1.139'. [ 105.701323][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 106.140044][ T6518] tipc: Started in network mode [ 106.145511][ T6518] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 106.172050][ T6518] tipc: Enabled bearer , priority 10 [ 106.216302][ T6519] netlink: 'syz.4.149': attribute type 4 has an invalid length. [ 106.285577][ T6519] netlink: 'syz.4.149': attribute type 4 has an invalid length. [ 106.331810][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 106.767255][ T6536] syzkaller1: entered promiscuous mode [ 106.788782][ T6536] syzkaller1: entered allmulticast mode [ 107.046179][ T6573] netlink: 'syz.2.162': attribute type 178 has an invalid length. [ 107.285033][ T6584] tipc: Enabled bearer , priority 10 [ 107.729905][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.796367][ T6612] tipc: Enabled bearer , priority 0 [ 107.819689][ T6612] syzkaller0: entered promiscuous mode [ 107.835930][ T6612] syzkaller0: entered allmulticast mode [ 107.862803][ T6612] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 107.908081][ T6612] tipc: Resetting bearer [ 107.973100][ T6610] tipc: Resetting bearer [ 108.012651][ T6610] tipc: Disabling bearer [ 108.106664][ T6621] netlink: 'syz.0.177': attribute type 2 has an invalid length. [ 108.110809][ T6624] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 108.291587][ T9] tipc: Node number set to 4269801492 [ 108.298840][ T6624] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 108.344882][ T6627] __nla_validate_parse: 5 callbacks suppressed [ 108.344899][ T6627] netlink: 340 bytes leftover after parsing attributes in process `syz.3.178'. [ 108.404464][ T6639] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 108.902868][ T6665] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 108.913309][ T6665] netlink: 'syz.0.191': attribute type 2 has an invalid length. [ 108.981370][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 109.249628][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'. [ 109.280739][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'. [ 109.336356][ T6680] trusted_key: syz.0.193 sent an empty control message without MSG_MORE. [ 109.685860][ T6693] bridge_slave_0: invalid flags given to default FDB implementation [ 109.727238][ T6705] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 109.814912][ T6705] bond1: entered promiscuous mode [ 109.829220][ T6705] bond1: entered allmulticast mode [ 109.852221][ T6705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.436272][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 110.448640][ T6732] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 110.456473][ T6732] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 110.579514][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.212'. [ 110.584228][ T6738] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 110.606420][ T6746] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 110.626237][ T6740] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.210'. [ 110.651116][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.214'. [ 110.696133][ T6749] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 110.697281][ T6738] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 110.724447][ T6738] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 110.762365][ T6738] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.790240][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.215'. [ 110.835648][ T6746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.844367][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.214'. [ 110.885384][ T6750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.894364][ T6750] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.907187][ T6750] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 110.949524][ T6749] tipc: Enabling of bearer rejected, failed to enable media [ 111.082842][ T6751] veth3: entered promiscuous mode [ 111.142157][ T6756] vlan2: entered allmulticast mode [ 111.147388][ T6756] bond2: entered allmulticast mode [ 111.517352][ T6786] 8021q: VLANs not supported on vcan0 [ 111.758400][ T6803] openvswitch: netlink: Missing key (keys=40, expected=80) [ 112.515993][ T6851] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 113.044220][ T6882] openvswitch: netlink: Message has 5 unknown bytes. [ 114.207996][ T6890] __nla_validate_parse: 12 callbacks suppressed [ 114.208017][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 114.246367][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 114.298327][ T1162] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.300059][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 114.331709][ T1162] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.356884][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 114.390585][ T1162] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.460920][ T1162] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.564280][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 114.608669][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 114.649999][ T6924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.262'. [ 114.885492][ T6934] macvtap1: entered promiscuous mode [ 114.897089][ T6934] vlan0: entered promiscuous mode [ 114.913526][ T6934] team0: Device macvtap1 failed to register rx_handler [ 114.927238][ T6942] netlink: 224 bytes leftover after parsing attributes in process `syz.1.266'. [ 114.961909][ T6934] vlan0: left promiscuous mode [ 115.030909][ T6946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.476834][ T6972] vxcan1 speed is unknown, defaulting to 1000 [ 115.509369][ T6972] vxcan1 speed is unknown, defaulting to 1000 [ 115.566066][ T6972] vxcan1 speed is unknown, defaulting to 1000 [ 115.658469][ T6978] netlink: 'syz.2.277': attribute type 10 has an invalid length. [ 115.732486][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.756403][ T6978] bond0: (slave team0): Enslaving as an active interface with an up link [ 115.994665][ T6972] infiniband syz2: set active [ 115.999586][ T6972] infiniband syz2: added vxcan1 [ 116.015238][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 116.180056][ T6972] RDS/IB: syz2: added [ 116.192804][ T6972] smc: adding ib device syz2 with port count 1 [ 116.199769][ T6972] smc: ib device syz2 port 1 has pnetid [ 116.298219][ T121] vxcan1 speed is unknown, defaulting to 1000 [ 116.315201][ T6972] vxcan1 speed is unknown, defaulting to 1000 [ 117.128898][ T7022] netlink: 'syz.0.291': attribute type 83 has an invalid length. [ 117.165483][ T7022] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 117.196641][ T6972] vxcan1 speed is unknown, defaulting to 1000 [ 117.231679][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 117.489522][ T7029] team0: Device gtp0 is of different type [ 117.793800][ T7043] Bluetooth: MGMT ver 1.23 [ 117.998672][ T7044] vxcan1 speed is unknown, defaulting to 1000 [ 118.131001][ T7054] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 118.156887][ T7054] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 118.188007][ T7056] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 118.206068][ T7056] netlink: 224 bytes leftover after parsing attributes in process `syz.2.305'. [ 118.218254][ T7056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.305'. [ 118.362370][ T6972] vxcan1 speed is unknown, defaulting to 1000 [ 119.085028][ T7092] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 119.116332][ T7092] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 119.147224][ T7094] syzkaller0: entered promiscuous mode [ 119.171674][ T7094] syzkaller0: entered allmulticast mode [ 119.273012][ T6972] vxcan1 speed is unknown, defaulting to 1000 [ 119.279876][ T7099] __nla_validate_parse: 4 callbacks suppressed [ 119.279894][ T7099] netlink: 144 bytes leftover after parsing attributes in process `syz.0.315'. [ 119.728746][ T7108] syzkaller1: entered promiscuous mode [ 119.756431][ T7108] syzkaller1: entered allmulticast mode [ 119.917920][ T7116] tipc: Enabling of bearer rejected, failed to enable media [ 120.084684][ T6972] vxcan1 speed is unknown, defaulting to 1000 [ 120.318687][ T7131] netlink: 'syz.1.325': attribute type 2 has an invalid length. [ 120.428869][ T7139] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 120.467998][ T7139] netlink: 220 bytes leftover after parsing attributes in process `syz.4.328'. [ 120.538956][ T7142] net veth1_virt_wifi .: renamed from virt_wifi0 [ 120.600691][ T7146] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 120.883280][ T7158] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 120.932932][ T7158] netlink: 232 bytes leftover after parsing attributes in process `syz.4.334'. [ 120.952858][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 121.067826][ T7171] vlan0: entered promiscuous mode [ 121.093663][ T7171] vlan0: entered allmulticast mode [ 121.110190][ T7171] veth0_vlan: entered allmulticast mode [ 121.149297][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 121.263915][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 121.614981][ T7170] team0 (unregistering): Port device team_slave_0 removed [ 121.637601][ T7170] team0 (unregistering): Port device team_slave_1 removed [ 121.992944][ T7207] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 122.110267][ T7213] IPv6: sit1: Disabled Multicast RS [ 122.139097][ T7213] sit1: entered allmulticast mode [ 122.213951][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.349'. [ 122.286243][ T7217] vxcan1 speed is unknown, defaulting to 1000 [ 122.290369][ T7222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.352'. [ 122.309456][ T7222] netlink: 43 bytes leftover after parsing attributes in process `syz.3.352'. [ 122.343029][ T7218] tipc: Enabled bearer , priority 0 [ 122.343983][ T7222] netlink: 'syz.3.352': attribute type 5 has an invalid length. [ 122.363865][ T7218] tipc: Resetting bearer [ 122.383416][ T7222] netlink: 43 bytes leftover after parsing attributes in process `syz.3.352'. [ 122.544079][ T7216] tipc: Disabling bearer [ 122.999641][ T7251] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 123.008345][ T7253] openvswitch: netlink: Message has -1 unknown bytes. [ 123.082657][ T7258] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 123.088384][ T7246] bond1: entered promiscuous mode [ 123.139486][ T7246] bond1: entered allmulticast mode [ 123.147050][ T7246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.261774][ T7246] bond1 (unregistering): Released all slaves [ 123.281271][ T7251] dummy0: entered promiscuous mode [ 123.287988][ T7251] bridge0: port 3(dummy0) entered blocking state [ 123.294891][ T7251] bridge0: port 3(dummy0) entered disabled state [ 123.301456][ T7251] dummy0: entered allmulticast mode [ 123.308633][ T7251] bridge0: port 3(dummy0) entered blocking state [ 123.315182][ T7251] bridge0: port 3(dummy0) entered forwarding state [ 124.143169][ T7302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.169654][ T7302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.322694][ T7301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.585118][ T7320] __nla_validate_parse: 5 callbacks suppressed [ 124.585148][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 124.627293][ T7322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.634620][ T7322] IPv6: NLM_F_CREATE should be set when creating new route [ 124.670319][ T7320] openvswitch: netlink: Flow key attr not present in new flow. [ 124.750174][ T7325] tc_dump_action: action bad kind [ 124.789999][ T7325] netlink: 596 bytes leftover after parsing attributes in process `syz.4.382'. [ 125.181615][ T7340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.385'. [ 125.587470][ T7367] netlink: 'syz.4.391': attribute type 58 has an invalid length. [ 125.608462][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.391'. [ 125.780606][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.828621][ T7377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.940618][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.985661][ T7369] netlink: 'syz.2.392': attribute type 16 has an invalid length. [ 126.030668][ T7369] netlink: 'syz.2.392': attribute type 17 has an invalid length. [ 126.068043][ T7369] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 126.177672][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 126.229880][ T7391] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 126.577284][ T7409] netlink: 'syz.4.401': attribute type 2 has an invalid length. [ 126.892675][ T7425] netlink: 'syz.1.402': attribute type 2 has an invalid length. [ 126.941565][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 127.509390][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 127.727301][ T7447] netlink: 'syz.3.411': attribute type 4 has an invalid length. [ 127.755764][ T7447] netlink: 'syz.3.411': attribute type 4 has an invalid length. [ 127.959832][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.977109][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.010234][ T7453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.035024][ T7459] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.415'. [ 128.059212][ T7459] sctp: [Deprecated]: syz.4.415 (pid 7459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.059212][ T7459] Use struct sctp_sack_info instead [ 128.300310][ T7471] netlink: 364 bytes leftover after parsing attributes in process `syz.4.418'. [ 128.843207][ T7489] syzkaller1: entered promiscuous mode [ 128.854989][ T7489] syzkaller1: entered allmulticast mode [ 128.919822][ T7494] sctp: [Deprecated]: syz.2.427 (pid 7494) Use of int in max_burst socket option. [ 128.919822][ T7494] Use struct sctp_assoc_value instead [ 129.060163][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 129.220883][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.791642][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 130.216021][ T7542] __nla_validate_parse: 2 callbacks suppressed [ 130.216041][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 130.279211][ T7542] bridge0: entered allmulticast mode [ 130.285131][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 130.294977][ T7542] bridge_slave_1: left allmulticast mode [ 130.300655][ T7542] bridge_slave_1: left promiscuous mode [ 130.326464][ T7542] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.353183][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 130.432917][ T7542] bridge_slave_0: left allmulticast mode [ 130.457608][ T7542] bridge_slave_0: left promiscuous mode [ 130.464549][ T7542] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.475983][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 130.511997][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 130.550604][ T7542] bridge0 (unregistering): left allmulticast mode [ 130.636654][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 130.871729][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.448'. [ 131.105469][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 131.279341][ T7586] netlink: 184 bytes leftover after parsing attributes in process `syz.4.457'. [ 131.482435][ T7595] netlink: 104 bytes leftover after parsing attributes in process `syz.1.460'. [ 131.776665][ T7606] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 132.113416][ T7622] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 132.233806][ T7626] bridge0: port 1(syz_tun) entered blocking state [ 132.254633][ T7626] bridge0: port 1(syz_tun) entered disabled state [ 132.277243][ T7626] syz_tun: entered allmulticast mode [ 132.320896][ T7634] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 132.349059][ T7626] syz_tun: entered promiscuous mode [ 132.373035][ T7626] bridge0: port 1(syz_tun) entered blocking state [ 132.379785][ T7626] bridge0: port 1(syz_tun) entered forwarding state [ 132.398910][ T9] IPVS: starting estimator thread 0... [ 132.483254][ T7636] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 132.494233][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 132.514036][ T7638] IPVS: using max 24 ests per chain, 57600 per kthread [ 132.735028][ T7657] veth0: entered promiscuous mode [ 132.922203][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.935583][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.402492][ T7683] netlink: 'syz.3.486': attribute type 5 has an invalid length. [ 133.431572][ T7683] netlink: 'syz.3.486': attribute type 6 has an invalid length. [ 133.805869][ T7707] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 134.071190][ T7717] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 135.011161][ T7769] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.657888][ T7793] siw: device registration error -23 [ 137.202281][ T7805] team0 (unregistering): Port device team_slave_0 removed [ 137.229845][ T7805] team0 (unregistering): Port device team_slave_1 removed [ 137.299798][ T7826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.415579][ T7836] syzkaller0: entered promiscuous mode [ 137.437871][ T7836] syzkaller0: entered allmulticast mode [ 138.271326][ T7875] __nla_validate_parse: 21 callbacks suppressed [ 138.271347][ T7875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.544'. [ 138.615780][ T7893] netlink: 'syz.4.550': attribute type 10 has an invalid length. [ 138.683416][ T7893] netlink: 'syz.4.550': attribute type 10 has an invalid length. [ 138.757920][ T7902] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.764671][ T7902] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.902710][ T7910] netlink: 'syz.4.555': attribute type 14 has an invalid length. [ 139.269317][ T7922] vxcan1 speed is unknown, defaulting to 1000 [ 139.272663][ T7930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.282742][ T7930] IPv6: NLM_F_CREATE should be set when creating new route [ 139.335656][ T7932] tipc: Enabled bearer , priority 0 [ 139.407987][ T7938] syzkaller0: entered promiscuous mode [ 139.457976][ T7938] syzkaller0: entered allmulticast mode [ 139.493874][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.522433][ T7932] tipc: Resetting bearer [ 139.539712][ T7928] tipc: Resetting bearer [ 139.623129][ T7946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.660218][ T7928] tipc: Disabling bearer [ 139.677906][ T7942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.857642][ T7995] sctp: [Deprecated]: syz.0.577 (pid 7995) Use of int in maxseg socket option. [ 140.857642][ T7995] Use struct sctp_assoc_value instead [ 141.033006][ T7997] vxcan1 speed is unknown, defaulting to 1000 [ 141.172544][ T8009] netlink: 'syz.4.582': attribute type 4 has an invalid length. [ 141.262341][ T8017] netlink: 'syz.4.582': attribute type 4 has an invalid length. [ 141.297971][ T8009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.582'. [ 141.314101][ T8009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.582'. [ 141.529730][ T8018] team0: Device wireguard0 is of different type [ 141.623166][ T8030] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.587'. [ 141.700618][ T8031] netlink: 256 bytes leftover after parsing attributes in process `syz.0.588'. [ 141.985587][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 142.009414][ T8042] Dead loop on virtual device ip6_vti0, fix it urgently! [ 142.041318][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.593'. [ 142.093266][ T8042] Dead loop on virtual device ip6_vti0, fix it urgently! [ 142.122613][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 142.228080][ T8053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.597'. [ 142.560037][ T8066] netlink: 72 bytes leftover after parsing attributes in process `syz.4.600'. [ 142.824847][ T8075] netlink: 'syz.0.604': attribute type 25 has an invalid length. [ 143.154057][ T5940] IPVS: starting estimator thread 0... [ 143.271523][ T8093] IPVS: using max 26 ests per chain, 62400 per kthread [ 143.287719][ T8097] __nla_validate_parse: 4 callbacks suppressed [ 143.287738][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 143.614955][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 143.699788][ T8115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.707155][ T8115] IPv6: NLM_F_CREATE should be set when creating new route [ 144.210588][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 144.246376][ T8148] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 144.281790][ T8148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.840024][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 144.854133][ T8172] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 144.871604][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 144.897373][ T8174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.635'. [ 145.108805][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 145.109374][ T8183] xt_HMARK: proto mask must be zero with L3 mode [ 145.136919][ T8184] netlink: 'syz.3.638': attribute type 1 has an invalid length. [ 145.138322][ T8183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 145.148513][ T8184] netlink: 136 bytes leftover after parsing attributes in process `syz.3.638'. [ 145.169598][ T8183] netlink: 'syz.0.639': attribute type 20 has an invalid length. [ 145.193394][ T8185] netlink: 'syz.3.638': attribute type 3 has an invalid length. [ 145.226667][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 145.249679][ T8184] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 145.260788][ T8183] netlink: 'syz.0.639': attribute type 20 has an invalid length. [ 145.278088][ T8184] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 145.491031][ T8199] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 145.589047][ T8202] netlink: 'syz.0.644': attribute type 6 has an invalid length. [ 145.617993][ T8205] veth4: entered promiscuous mode [ 145.638858][ T8205] veth5: entered promiscuous mode [ 145.964012][ T8224] netlink: 'syz.0.650': attribute type 21 has an invalid length. [ 145.979014][ T8224] netlink: 'syz.0.650': attribute type 6 has an invalid length. [ 146.153244][ T8226] syzkaller1: entered promiscuous mode [ 146.158785][ T8226] syzkaller1: entered allmulticast mode [ 146.214082][ T8226] tipc: Started in network mode [ 146.233814][ T8226] tipc: Node identity 5a88476c5c1c, cluster identity 4711 [ 146.241161][ T8226] tipc: Enabled bearer , priority 0 [ 146.279427][ T8235] syzkaller0: entered promiscuous mode [ 146.327080][ T8235] syzkaller0: entered allmulticast mode [ 146.387810][ T8226] tipc: Resetting bearer [ 146.452101][ T8225] tipc: Resetting bearer [ 146.540849][ T8225] tipc: Disabling bearer [ 146.631308][ T8244] syzkaller1: entered promiscuous mode [ 146.641743][ T8244] syzkaller1: entered allmulticast mode [ 147.000613][ T8271] delete_channel: no stack [ 147.042176][ T8274] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 147.209188][ T8274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.745836][ T8319] netlink: 'syz.0.673': attribute type 16 has an invalid length. [ 147.810629][ T8319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.863037][ T8321] lo speed is unknown, defaulting to 1000 [ 147.884513][ T8321] lo speed is unknown, defaulting to 1000 [ 147.901166][ T8321] lo speed is unknown, defaulting to 1000 [ 148.571644][ T8349] __nla_validate_parse: 10 callbacks suppressed [ 148.571664][ T8349] netlink: 220 bytes leftover after parsing attributes in process `syz.4.681'. [ 148.874026][ T8321] infiniband syz0: set active [ 148.891570][ T5933] lo speed is unknown, defaulting to 1000 [ 148.902511][ T8321] infiniband syz0: added lo [ 148.908150][ T8321] syz0: rxe_create_cq: returned err = -12 [ 148.951312][ T8321] infiniband syz0: Couldn't create ib_mad CQ [ 148.961793][ T8321] infiniband syz0: Couldn't open port 1 [ 149.035485][ T8360] netlink: 'syz.1.685': attribute type 11 has an invalid length. [ 149.086566][ T8321] RDS/IB: syz0: added [ 149.100457][ T8321] smc: adding ib device syz0 with port count 1 [ 149.118270][ T8321] smc: ib device syz0 port 1 has pnetid [ 149.135706][ T9] lo speed is unknown, defaulting to 1000 [ 149.144757][ T8321] lo speed is unknown, defaulting to 1000 [ 149.798252][ T8306] syz.3.672: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.893123][ T8306] CPU: 0 UID: 0 PID: 8306 Comm: syz.3.672 Not tainted syzkaller #0 PREEMPT(full) [ 149.893152][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.893173][ T8306] Call Trace: [ 149.893182][ T8306] [ 149.893191][ T8306] dump_stack_lvl+0x189/0x250 [ 149.893234][ T8306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.893260][ T8306] ? __pfx__printk+0x10/0x10 [ 149.893291][ T8306] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.893316][ T8306] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.893343][ T8306] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 149.893371][ T8306] warn_alloc+0x214/0x310 [ 149.893411][ T8306] ? __pfx_warn_alloc+0x10/0x10 [ 149.893454][ T8306] ? __get_vm_area_node+0x28f/0x300 [ 149.893484][ T8306] ? hash_netport4_resize+0x235/0x1b60 [ 149.893512][ T8306] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 149.893578][ T8306] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.893618][ T8306] ? rcu_is_watching+0x15/0xb0 [ 149.893641][ T8306] ? hash_netport4_resize+0x235/0x1b60 [ 149.893663][ T8306] ? hash_netport4_resize+0x235/0x1b60 [ 149.893683][ T8306] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 149.893714][ T8306] ? hash_netport4_resize+0x235/0x1b60 [ 149.893746][ T8306] hash_netport4_resize+0x235/0x1b60 [ 149.893769][ T8306] ? hash_netport4_uadt+0xc97/0xf30 [ 149.893798][ T8306] ? __pfx_hash_netport4_add+0x10/0x10 [ 149.893821][ T8306] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 149.893862][ T8306] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 149.893898][ T8306] call_ad+0x44b/0xb00 [ 149.893937][ T8306] ? __pfx_call_ad+0x10/0x10 [ 149.893984][ T8306] ? __nla_parse+0x40/0x60 [ 149.894021][ T8306] ip_set_ad+0x791/0x930 [ 149.894060][ T8306] ? __pfx_ip_set_ad+0x10/0x10 [ 149.894135][ T8306] nfnetlink_rcv_msg+0xb4d/0x1130 [ 149.894166][ T8306] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 149.894217][ T8306] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.894243][ T8306] ? kasan_save_free_info+0x46/0x50 [ 149.894323][ T8306] netlink_rcv_skb+0x205/0x470 [ 149.894357][ T8306] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.894388][ T8306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.894445][ T8306] ? bpf_lsm_capable+0x9/0x20 [ 149.894471][ T8306] ? security_capable+0x7e/0x2e0 [ 149.894509][ T8306] nfnetlink_rcv+0x26a/0x2520 [ 149.894541][ T8306] ? __dev_queue_xmit+0x1d79/0x3b50 [ 149.894578][ T8306] ? __dev_queue_xmit+0x27b/0x3b50 [ 149.894617][ T8306] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 149.894643][ T8306] ? __pfx___dev_queue_xmit+0x10/0x10 [ 149.894684][ T8306] ? ref_tracker_free+0x63a/0x7d0 [ 149.894714][ T8306] ? __asan_memcpy+0x40/0x70 [ 149.894735][ T8306] ? __pfx_ref_tracker_free+0x10/0x10 [ 149.894782][ T8306] ? skb_clone+0x246/0x3a0 [ 149.894810][ T8306] ? __netlink_deliver_tap+0x807/0x850 [ 149.894841][ T8306] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.894885][ T8306] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.894926][ T8306] netlink_unicast+0x82c/0x9e0 [ 149.894964][ T8306] ? __pfx_netlink_unicast+0x10/0x10 [ 149.894995][ T8306] ? netlink_sendmsg+0x642/0xb30 [ 149.895011][ T8306] ? skb_put+0x11b/0x210 [ 149.895035][ T8306] netlink_sendmsg+0x805/0xb30 [ 149.895065][ T8306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.895088][ T8306] ? aa_sock_msg_perm+0xf1/0x1d0 [ 149.895110][ T8306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.895132][ T8306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.895152][ T8306] __sock_sendmsg+0x21c/0x270 [ 149.895184][ T8306] ____sys_sendmsg+0x505/0x830 [ 149.895214][ T8306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.895247][ T8306] ? import_iovec+0x74/0xa0 [ 149.895276][ T8306] ___sys_sendmsg+0x21f/0x2a0 [ 149.895301][ T8306] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.895366][ T8306] ? __fget_files+0x2a/0x420 [ 149.895382][ T8306] ? __fget_files+0x3a0/0x420 [ 149.895412][ T8306] __x64_sys_sendmsg+0x19b/0x260 [ 149.895438][ T8306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.895473][ T8306] ? rcu_is_watching+0x15/0xb0 [ 149.895499][ T8306] ? do_syscall_64+0xbe/0x3b0 [ 149.895523][ T8306] do_syscall_64+0xfa/0x3b0 [ 149.895540][ T8306] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.895570][ T8306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.895590][ T8306] ? clear_bhb_loop+0x60/0xb0 [ 149.895615][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.895634][ T8306] RIP: 0033:0x7f28e498ebe9 [ 149.895661][ T8306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.895678][ T8306] RSP: 002b:00007f28e58a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.895699][ T8306] RAX: ffffffffffffffda RBX: 00007f28e4bc5fa0 RCX: 00007f28e498ebe9 [ 149.895713][ T8306] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007 [ 149.895725][ T8306] RBP: 00007f28e4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 149.895738][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.895749][ T8306] R13: 00007f28e4bc6038 R14: 00007f28e4bc5fa0 R15: 00007ffc28ea6d08 [ 149.895783][ T8306] [ 149.895794][ T8306] Mem-Info: [ 149.951614][ T8321] lo speed is unknown, defaulting to 1000 [ 149.961095][ T8306] active_anon:6953 inactive_anon:0 isolated_anon:0 [ 149.961095][ T8306] active_file:2692 inactive_file:39868 isolated_file:0 [ 149.961095][ T8306] unevictable:768 dirty:32 writeback:0 [ 149.961095][ T8306] slab_reclaimable:10937 slab_unreclaimable:102180 [ 149.961095][ T8306] mapped:30560 shmem:2638 pagetables:1141 [ 149.961095][ T8306] sec_pagetables:0 bounce:0 [ 149.961095][ T8306] kernel_misc_reclaimable:0 [ 149.961095][ T8306] free:1322335 free_pcp:12631 free_cma:0 [ 150.462345][ T8306] Node 0 active_anon:33220kB inactive_anon:0kB active_file:10768kB inactive_file:159276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117132kB dirty:140kB writeback:0kB shmem:14612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12040kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.541517][ T8306] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.584158][ T8306] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.633059][ T8306] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 150.684553][ T8306] Node 0 DMA32 free:1377132kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26372kB inactive_anon:0kB active_file:10768kB inactive_file:157700kB unevictable:1536kB writepending:140kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:35928kB local_pcp:13732kB free_cma:0kB [ 150.728336][ T8306] lowmem_reserve[]: 0 0 1 1 1 [ 150.739408][ T8306] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 150.793401][ T8306] lowmem_reserve[]: 0 0 0 0 0 [ 150.798733][ T8306] Node 1 Normal free:3892140kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18860kB local_pcp:10220kB free_cma:0kB [ 150.890281][ T8306] lowmem_reserve[]: 0 0 0 0 0 [ 150.898290][ T8306] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.913752][ T8321] lo speed is unknown, defaulting to 1000 [ 150.945743][ T8306] Node 0 DMA32: 363*4kB (UME) 227*8kB (M) 141*16kB (UME) 64*32kB (M) 42*64kB (UME) 19*128kB (ME) 10*256kB (M) 8*512kB (M) 3*1024kB (UM) 2*2048kB (UM) 331*4096kB (UM) = 1382292kB [ 150.966343][ T8306] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 150.980985][ T8306] Node 1 Normal: 189*4kB (UME) 51*8kB (UME) 56*16kB (UME) 95*32kB (UME) 27*64kB (UME) 2*128kB (ME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3892140kB [ 150.999728][ T8306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.011884][ T8306] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.021354][ T8306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.031297][ T8306] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.040890][ T8306] 43968 total pagecache pages [ 151.045910][ T8306] 0 pages in swap cache [ 151.050222][ T8306] Free swap = 124996kB [ 151.073459][ T8306] Total swap = 124996kB [ 151.082314][ T8306] 2097051 pages RAM [ 151.090785][ T8306] 0 pages HighMem/MovableOnly [ 151.117535][ T8306] 425667 pages reserved [ 151.123253][ T8306] 0 pages cma reserved [ 151.474891][ T8399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.503616][ T8399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.550650][ T8321] lo speed is unknown, defaulting to 1000 [ 151.599086][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.740164][ T8404] validate_nla: 2 callbacks suppressed [ 151.740183][ T8404] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 151.781857][ T8404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.973694][ T8412] netlink: 'syz.1.700': attribute type 4 has an invalid length. [ 152.001579][ T8412] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 152.009376][ T8412] netlink: 144 bytes leftover after parsing attributes in process `syz.1.700'. [ 152.031740][ T8412] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 152.039421][ T8412] netlink: 'syz.1.700': attribute type 2 has an invalid length. [ 152.047975][ T8414] netlink: 'syz.2.699': attribute type 10 has an invalid length. [ 152.069036][ T8412] netlink: 64 bytes leftover after parsing attributes in process `syz.1.700'. [ 152.128732][ T8414] team0: Device veth0_vlan failed to register rx_handler [ 152.257469][ T8321] lo speed is unknown, defaulting to 1000 [ 152.569235][ T8429] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 152.612537][ T8429] netlink: 172 bytes leftover after parsing attributes in process `syz.4.704'. [ 152.643955][ T8432] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 152.677856][ T8432] netlink: 172 bytes leftover after parsing attributes in process `syz.4.704'. [ 152.909730][ T8447] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 152.962527][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 153.088015][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 153.116793][ T8447] bond4: entered allmulticast mode [ 153.343982][ T8466] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 153.558323][ T8478] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 154.330519][ T8536] netlink: 48 bytes leftover after parsing attributes in process `syz.4.724'. [ 154.399669][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 154.555198][ T8547] netlink: 72 bytes leftover after parsing attributes in process `syz.2.728'. [ 154.729658][ T8559] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 154.783974][ T8568] block nbd0: not configured, cannot reconfigure [ 154.812914][ T8571] netlink: 81 bytes leftover after parsing attributes in process `syz.2.734'. [ 155.045129][ T8587] netlink: 'syz.1.738': attribute type 16 has an invalid length. [ 155.118199][ T8584] rdma_rxe: rxe_newlink: failed to add lo [ 155.150566][ T8592] netlink: 27 bytes leftover after parsing attributes in process `syz.2.739'. [ 155.170516][ T8587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.186610][ T8588] netlink: 92 bytes leftover after parsing attributes in process `syz.2.739'. [ 155.209892][ T8588] netlink: 232 bytes leftover after parsing attributes in process `syz.2.739'. [ 155.295370][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.741'. [ 155.423711][ T8606] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.743'. [ 155.513194][ T8607] syzkaller0: entered promiscuous mode [ 155.518757][ T8607] syzkaller0: entered allmulticast mode [ 155.717074][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 155.816181][ T8624] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 156.133618][ T8644] bond0: Error: Cannot enslave bond to itself. [ 156.710424][ T8667] openvswitch: netlink: Flow key attr not present in new flow. [ 156.830618][ T8671] validate_nla: 4 callbacks suppressed [ 156.830636][ T8671] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 156.943940][ T8671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.034043][ T8671] veth5: entered promiscuous mode [ 157.138401][ T8680] bond3: (slave veth7): Enslaving as an active interface with a down link [ 157.359466][ T8700] tipc: Started in network mode [ 157.385039][ T8700] tipc: Node identity ce0f1637569c, cluster identity 4711 [ 157.392951][ T8700] tipc: Enabled bearer , priority 0 [ 157.421905][ T8701] syzkaller0: entered promiscuous mode [ 157.440579][ T8701] syzkaller0: entered allmulticast mode [ 157.450497][ T8707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.516396][ T8707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.631121][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.639055][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.730100][ T8714] bridge_slave_0: left allmulticast mode [ 157.740464][ T8714] bridge_slave_0: left promiscuous mode [ 157.754162][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.787984][ T8714] bridge_slave_1: left allmulticast mode [ 157.794226][ T8714] bridge_slave_1: left promiscuous mode [ 157.800105][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.838274][ T8714] bond0: (slave bond_slave_0): Releasing backup interface [ 157.865719][ T8714] bond0: (slave bond_slave_1): Releasing backup interface [ 157.900233][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.925567][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.966047][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.992494][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.216156][ T8734] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 158.244340][ T8734] sctp: [Deprecated]: syz.3.777 (pid 8734) Use of int in max_burst socket option. [ 158.244340][ T8734] Use struct sctp_assoc_value instead [ 158.342590][ T8714] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 158.359281][ T8713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.391515][ T43] tipc: Node number set to 2559776311 [ 158.397390][ T8701] tipc: Resetting bearer [ 158.425083][ T8701] tipc: Disabling bearer [ 158.471133][ T1162] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.509556][ T1162] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.594165][ T1162] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.634042][ T1162] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.657014][ T8738] vxcan1 speed is unknown, defaulting to 1000 [ 159.348771][ T8772] tls_set_device_offload_rx: netdev not found [ 159.367194][ T8772] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 159.407604][ T8738] lo speed is unknown, defaulting to 1000 [ 159.880308][ T8797] __nla_validate_parse: 18 callbacks suppressed [ 159.880327][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 159.960325][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 160.051920][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 160.158799][ T8809] netlink: 'syz.3.799': attribute type 27 has an invalid length. [ 160.296980][ T8815] netlink: 156 bytes leftover after parsing attributes in process `syz.2.800'. [ 160.332488][ T8815] netlink: 156 bytes leftover after parsing attributes in process `syz.2.800'. [ 160.343552][ T8815] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 160.360969][ T8815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.595486][ T8825] bond5: entered promiscuous mode [ 160.601017][ T8825] bond5: entered allmulticast mode [ 160.617157][ T8825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 160.676912][ T8833] syzkaller0: entered promiscuous mode [ 160.683732][ T8833] syzkaller0: entered allmulticast mode [ 160.704645][ T8831] tipc: Enabled bearer , priority 0 [ 160.732347][ T8831] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 160.848609][ T8831] tipc: Resetting bearer [ 160.918569][ T8829] tipc: Resetting bearer [ 160.994178][ T8829] tipc: Disabling bearer [ 161.300149][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 161.377960][ T8859] netlink: zone id is out of range [ 161.383618][ T8859] netlink: zone id is out of range [ 161.419723][ T8859] netlink: zone id is out of range [ 161.448066][ T8859] netlink: zone id is out of range [ 161.495256][ T8859] netlink: zone id is out of range [ 161.500434][ T8859] netlink: zone id is out of range [ 161.634915][ T8885] netlink: 112 bytes leftover after parsing attributes in process `syz.4.815'. [ 162.113512][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 162.191653][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.213899][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 162.259913][ T8899] unknown channel width for channel at 909000KHz? [ 162.928890][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 164.405804][ T8997] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 164.921049][ T9021] __nla_validate_parse: 4 callbacks suppressed [ 164.921069][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.855'. [ 164.989607][ T9026] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 165.033052][ T9024] netlink: 36 bytes leftover after parsing attributes in process `syz.4.857'. [ 165.042231][ T9024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.857'. [ 165.051141][ T9024] netlink: 36 bytes leftover after parsing attributes in process `syz.4.857'. [ 165.108974][ T9024] netlink: 36 bytes leftover after parsing attributes in process `syz.4.857'. [ 165.229032][ T9028] vxcan1 speed is unknown, defaulting to 1000 [ 165.359238][ T9042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.436672][ T9042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.460714][ T9048] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 165.523661][ T9048] tipc: Enabled bearer , priority 0 [ 165.536577][ T9048] syzkaller0: entered promiscuous mode [ 165.545571][ T9048] syzkaller0: entered allmulticast mode [ 165.572038][ T9047] tipc: Resetting bearer [ 165.655807][ T9047] tipc: Disabling bearer [ 165.941079][ T9056] bridge0: port 1(syz_tun) entered disabled state [ 166.266646][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.283799][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.452003][ T9061] netlink: 'syz.3.866': attribute type 1 has an invalid length. [ 166.468490][ T9062] netlink: 'syz.3.866': attribute type 1 has an invalid length. [ 166.493273][ T5940] lo speed is unknown, defaulting to 1000 [ 166.499736][ T5940] syz0: Port: 1 Link DOWN [ 166.499759][ T9028] lo speed is unknown, defaulting to 1000 [ 166.512703][ T4909] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.546409][ T4909] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.574175][ T4909] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.604676][ T4909] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.642527][ T5940] lo speed is unknown, defaulting to 1000 [ 166.660007][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.689261][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.711763][ T9079] tipc: Enabling of bearer rejected, failed to enable media [ 166.733317][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.752173][ T9079] net_ratelimit: 21 callbacks suppressed [ 166.752191][ T9079] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 166.770035][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.902516][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 166.964614][ T9091] netlink: 'syz.0.874': attribute type 8 has an invalid length. [ 167.239145][ T9081] rdma_rxe: rxe_newlink: failed to add wlan1 [ 167.424069][ T9111] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.880'. [ 167.614621][ T9117] pimreg: entered allmulticast mode [ 168.862486][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 168.992849][ T9170] tipc: Enabled bearer , priority 0 [ 169.022611][ T9164] syzkaller0: entered promiscuous mode [ 169.038361][ T9164] syzkaller0: entered allmulticast mode [ 169.128666][ T9170] sit0: mtu less than device minimum [ 169.260818][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 169.668508][ T9205] sctp: [Deprecated]: syz.1.906 (pid 9205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.668508][ T9205] Use struct sctp_sack_info instead [ 169.685700][ T9205] sctp: [Deprecated]: syz.1.906 (pid 9205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.685700][ T9205] Use struct sctp_sack_info instead [ 169.758482][ T9163] tipc: Resetting bearer [ 169.766735][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 169.789843][ T9163] tipc: Disabling bearer [ 170.080697][ T9222] xt_policy: too many policy elements [ 170.150161][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.168073][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.200517][ T9224] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 170.596711][ T9244] netlink: 172 bytes leftover after parsing attributes in process `syz.3.921'. [ 170.717504][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.923'. [ 170.729855][ T9244] bond2: entered promiscuous mode [ 170.737378][ T9244] bond2: entered allmulticast mode [ 170.743465][ T9244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.840993][ T9258] netlink: 'syz.1.920': attribute type 5 has an invalid length. [ 170.871696][ T9244] bond2 (unregistering): Released all slaves [ 170.904309][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 170.949546][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.924'. [ 171.082333][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 171.160161][ T9268] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 171.200020][ T9268] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 171.239821][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 171.299095][ T9274] netlink: 108 bytes leftover after parsing attributes in process `syz.3.930'. [ 171.335203][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 171.340016][ T51] Bluetooth: hci4: link tx timeout [ 171.351736][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.537280][ T9] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0 [ 171.557024][ T9] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 171.784957][ T9298] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 171.808728][ T9294] fido_id[9294]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 171.900886][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 172.218821][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 172.248615][ T9322] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 172.321737][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 172.546385][ T9343] Illegal XDP return value 4294967274 on prog (id 175) dev N/A, expect packet loss! [ 172.613668][ T9322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.689929][ T9349] raw_sendmsg: syz.4.951 forgot to set AF_INET. Fix it! [ 172.718743][ T9334] veth5: entered promiscuous mode [ 172.759071][ T9337] gretap1: entered allmulticast mode [ 172.818004][ T9347] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 173.391724][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 173.409373][ T9381] wg1: entered promiscuous mode [ 173.418244][ T9381] wg1: entered allmulticast mode [ 173.600774][ T9387] netlink: 'syz.3.960': attribute type 4 has an invalid length. [ 173.659918][ T9391] netlink: 'syz.4.961': attribute type 3 has an invalid length. [ 173.915372][ T9404] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 174.700088][ T9436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.722565][ T9435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.892469][ T9445] bond0: entered promiscuous mode [ 174.897650][ T9445] bond_slave_0: entered promiscuous mode [ 174.905689][ T9445] bond_slave_1: entered promiscuous mode [ 174.928130][ T9445] team0: entered promiscuous mode [ 174.960739][ T9445] team_slave_0: entered promiscuous mode [ 175.009642][ T9445] team_slave_1: entered promiscuous mode [ 175.291821][ T9465] hsr0 speed is unknown, defaulting to 1000 [ 175.310103][ T9465] hsr0 speed is unknown, defaulting to 1000 [ 175.337848][ T9465] hsr0 speed is unknown, defaulting to 1000 [ 175.387386][ T9465] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 175.452416][ T9465] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.537137][ T9465] hsr0 speed is unknown, defaulting to 1000 [ 175.606372][ T9465] hsr0 speed is unknown, defaulting to 1000 [ 175.615284][ T9465] hsr0 speed is unknown, defaulting to 1000 [ 175.629871][ T9465] hsr0 speed is unknown, defaulting to 1000 [ 175.646969][ T9465] hsr0 speed is unknown, defaulting to 1000 [ 175.879949][ T9487] openvswitch: netlink: Tunnel attr 47 out of range max 16 [ 176.011611][ T9491] IPVS: ip_vs_add_dest(): server weight less than zero [ 176.025324][ T9493] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 176.117688][ T9500] __nla_validate_parse: 11 callbacks suppressed [ 176.117706][ T9500] netlink: 248 bytes leftover after parsing attributes in process `syz.4.993'. [ 176.228057][ T9499] pim6reg: entered allmulticast mode [ 176.348633][ T9511] netlink: 148 bytes leftover after parsing attributes in process `syz.3.996'. [ 176.549281][ T9519] syz_tun: entered allmulticast mode [ 176.594005][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 176.617463][ T9526] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.658592][ T9528] sock: sock_set_timeout: `syz.3.1000' (pid 9528) tries to set negative timeout [ 176.680682][ T9519] syz_tun: left allmulticast mode [ 176.856245][ T9535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1002'. [ 177.196108][ T9554] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1009'. [ 177.837458][ T9587] sctp: [Deprecated]: syz.2.1019 (pid 9587) Use of int in maxseg socket option. [ 177.837458][ T9587] Use struct sctp_assoc_value instead [ 178.736937][ T9621] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1027'. [ 178.819292][ T9624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 178.822619][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 178.848653][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 178.860567][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 179.305093][ T9651] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.328049][ T9651] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.336623][ T9651] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.344880][ T9651] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.352147][ T9651] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.063311][ T9673] syz.2.1040 uses old SIOCAX25GETINFO [ 180.235836][ T9685] block nbd3: not configured, cannot reconfigure [ 180.766190][ T9718] sctp: [Deprecated]: syz.0.1051 (pid 9718) Use of int in maxseg socket option. [ 180.766190][ T9718] Use struct sctp_assoc_value instead [ 180.806454][ T9717] syzkaller0: entered promiscuous mode [ 180.837183][ T9717] syzkaller0: entered allmulticast mode [ 180.981353][ T9732] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 181.004602][ T9735] sctp: [Deprecated]: syz.0.1055 (pid 9735) Use of int in maxseg socket option. [ 181.004602][ T9735] Use struct sctp_assoc_value instead [ 181.193303][ T9746] warn_alloc: 1 callbacks suppressed [ 181.193323][ T9746] syz.0.1056: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 181.251274][ T9746] CPU: 0 UID: 0 PID: 9746 Comm: syz.0.1056 Not tainted syzkaller #0 PREEMPT(full) [ 181.251300][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.251311][ T9746] Call Trace: [ 181.251319][ T9746] [ 181.251327][ T9746] dump_stack_lvl+0x189/0x250 [ 181.251359][ T9746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.251386][ T9746] ? __pfx__printk+0x10/0x10 [ 181.251414][ T9746] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 181.251438][ T9746] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 181.251462][ T9746] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 181.251487][ T9746] warn_alloc+0x214/0x310 [ 181.251519][ T9746] ? stack_depot_save_flags+0x40/0x860 [ 181.251549][ T9746] ? __pfx_warn_alloc+0x10/0x10 [ 181.251579][ T9746] ? kasan_save_track+0x4f/0x80 [ 181.251604][ T9746] ? xskq_create+0x56/0x170 [ 181.251629][ T9746] ? xsk_init_queue+0xb0/0x110 [ 181.251651][ T9746] ? xsk_setsockopt+0x4dc/0x8d0 [ 181.251673][ T9746] ? do_sock_setsockopt+0x17c/0x1b0 [ 181.251690][ T9746] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 181.251708][ T9746] ? do_syscall_64+0xfa/0x3b0 [ 181.251723][ T9746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.251751][ T9746] __vmalloc_node_range_noprof+0x125/0x12f0 [ 181.251808][ T9746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 181.251843][ T9746] ? __kasan_kmalloc+0x93/0xb0 [ 181.251873][ T9746] vmalloc_user_noprof+0xad/0xf0 [ 181.251900][ T9746] ? xskq_create+0xbf/0x170 [ 181.251928][ T9746] xskq_create+0xbf/0x170 [ 181.251958][ T9746] xsk_init_queue+0xb0/0x110 [ 181.251987][ T9746] xsk_setsockopt+0x4dc/0x8d0 [ 181.252024][ T9746] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.252053][ T9746] ? __pfx_aa_sk_perm+0x10/0x10 [ 181.252088][ T9746] ? aa_sock_opt_perm+0xff/0x1b0 [ 181.252110][ T9746] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 181.252131][ T9746] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.252157][ T9746] do_sock_setsockopt+0x17c/0x1b0 [ 181.252182][ T9746] __x64_sys_setsockopt+0x13f/0x1b0 [ 181.252227][ T9746] do_syscall_64+0xfa/0x3b0 [ 181.252244][ T9746] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.252272][ T9746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.252292][ T9746] ? clear_bhb_loop+0x60/0xb0 [ 181.252317][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.252336][ T9746] RIP: 0033:0x7fb0bb18ebe9 [ 181.252354][ T9746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.252372][ T9746] RSP: 002b:00007fb0bc015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.252393][ T9746] RAX: ffffffffffffffda RBX: 00007fb0bb3c5fa0 RCX: 00007fb0bb18ebe9 [ 181.252407][ T9746] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 181.252419][ T9746] RBP: 00007fb0bb211e19 R08: 0000000000000004 R09: 0000000000000000 [ 181.252432][ T9746] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.252443][ T9746] R13: 00007fb0bb3c6038 R14: 00007fb0bb3c5fa0 R15: 00007fff43426af8 [ 181.252475][ T9746] [ 181.606976][ T9746] Mem-Info: [ 181.610180][ T9746] active_anon:5848 inactive_anon:0 isolated_anon:0 [ 181.610180][ T9746] active_file:2820 inactive_file:39908 isolated_file:0 [ 181.610180][ T9746] unevictable:768 dirty:139 writeback:0 [ 181.610180][ T9746] slab_reclaimable:11087 slab_unreclaimable:104249 [ 181.610180][ T9746] mapped:29333 shmem:1364 pagetables:1239 [ 181.610180][ T9746] sec_pagetables:0 bounce:0 [ 181.610180][ T9746] kernel_misc_reclaimable:0 [ 181.610180][ T9746] free:1320424 free_pcp:14169 free_cma:0 [ 181.657242][ T9746] Node 0 active_anon:23592kB inactive_anon:0kB active_file:11280kB inactive_file:159436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117332kB dirty:552kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13476kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.690748][ T9746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.721888][ T9746] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.752542][ T9746] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 181.758362][ T9746] Node 0 DMA32 free:1373148kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23544kB inactive_anon:0kB active_file:11280kB inactive_file:157860kB unevictable:1536kB writepending:552kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:38860kB local_pcp:19400kB free_cma:0kB [ 181.791468][ T9746] lowmem_reserve[]: 0 0 1 1 1 [ 181.796233][ T9746] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 181.825982][ T9746] lowmem_reserve[]: 0 0 0 0 0 [ 181.830762][ T9746] Node 1 Normal free:3893176kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17824kB local_pcp:9696kB free_cma:0kB [ 181.862640][ T9746] lowmem_reserve[]: 0 0 0 0 0 [ 181.888105][ T9746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 181.901322][ T9746] Node 0 DMA32: 203*4kB (ME) 68*8kB (UME) 35*16kB (UME) 35*32kB (UM) 17*64kB (UM) 15*128kB (UM) 6*256kB (M) 7*512kB (ME) 4*1024kB (UME) 3*2048kB (ME) 330*4096kB (UM) = 1373084kB [ 181.919307][ T9746] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 181.963703][ T9746] Node 1 Normal: 192*4kB (UME) 51*8kB (UME) 56*16kB (UME) 111*32kB (UME) 35*64kB (UME) 2*128kB (ME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3893176kB [ 182.013740][ T9734] bond0: (slave team0): Releasing backup interface [ 182.026287][ T9734] team0 (unregistering): left promiscuous mode [ 182.028166][ T9746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.033609][ T9734] team_slave_0: left promiscuous mode [ 182.048514][ T9734] team_slave_1: left promiscuous mode [ 182.078195][ T9734] team0 (unregistering): Port device team_slave_0 removed [ 182.083040][ T9746] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.105783][ T9746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.106330][ T9734] team0 (unregistering): Port device team_slave_1 removed [ 182.115533][ T9746] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.115556][ T9746] 44088 total pagecache pages [ 182.115566][ T9746] 0 pages in swap cache [ 182.115574][ T9746] Free swap = 124996kB [ 182.115583][ T9746] Total swap = 124996kB [ 182.115594][ T9746] 2097051 pages RAM [ 182.115602][ T9746] 0 pages HighMem/MovableOnly [ 182.115611][ T9746] 425667 pages reserved [ 182.115619][ T9746] 0 pages cma reserved [ 182.500676][ T9776] openvswitch: netlink: Flow key attribute not present in set flow. [ 182.639108][ T9784] netlink: 'syz.1.1067': attribute type 21 has an invalid length. [ 182.668570][ T9784] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.676868][ T9784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.684163][ T9784] IPv6: NLM_F_CREATE should be set when creating new route [ 182.691519][ T9784] IPv6: NLM_F_CREATE should be set when creating new route [ 182.698763][ T9784] IPv6: NLM_F_CREATE should be set when creating new route [ 182.932985][ T9795] sctp: [Deprecated]: syz.0.1069 (pid 9795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.932985][ T9795] Use struct sctp_sack_info instead [ 183.002784][ T9795] sctp: [Deprecated]: syz.0.1069 (pid 9795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.002784][ T9795] Use struct sctp_sack_info instead [ 183.051593][ T9801] __nla_validate_parse: 7 callbacks suppressed [ 183.051611][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 183.076352][ T9800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1073'. [ 183.403830][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.416669][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.494873][ T9817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.721343][ T9830] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 183.783411][ T9830] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1082'. [ 183.832497][ T9830] block nbd1: not configured, cannot reconfigure [ 183.845531][ T9837] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 184.073455][ T9854] tap0: tun_chr_ioctl cmd 1074025677 [ 184.101001][ T9854] tap0: linktype set to 65534 [ 184.143561][ T9855] bridge_slave_0: left allmulticast mode [ 184.168285][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.238240][ T9855] bridge_slave_1: left allmulticast mode [ 184.278737][ T9855] bridge_slave_1: left promiscuous mode [ 184.305920][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.336301][ T9855] bond0: (slave bond_slave_0): Releasing backup interface [ 184.397478][ T9855] bond0: (slave bond_slave_1): Releasing backup interface [ 184.426237][ T9855] team0: Port device team_slave_0 removed [ 184.438456][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 184.476262][ T9855] team0: Port device team_slave_1 removed [ 184.494698][ T9855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.509336][ T9855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.519473][ T9855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.527415][ T9855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.544541][ T9855] bond0: (slave netdevsim0): Releasing backup interface [ 184.566240][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 184.578370][ T9859] veth1_macvtap: left promiscuous mode [ 185.029836][ T9889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.052487][ T9892] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 185.062912][ T9889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.200115][ T9886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.272356][ T9901] netlink: 'syz.0.1104': attribute type 8 has an invalid length. [ 185.582605][ T9926] openvswitch: netlink: EtherType 0 is less than min 600 [ 185.668676][ T9933] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 185.770065][ T9936] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1113'. [ 185.791251][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 185.801158][ T9936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1113'. [ 185.880845][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 185.894295][ T9938] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1112'. [ 185.919361][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'. [ 186.270620][ T9960] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 186.316194][ T9960] vlan2: entered promiscuous mode [ 186.321904][ T9960] bridge0: entered promiscuous mode [ 186.757240][ T9984] netlink: 'syz.2.1129': attribute type 17 has an invalid length. [ 186.902592][ T9990] pim6reg1: entered promiscuous mode [ 186.913406][ T9990] pim6reg1: entered allmulticast mode [ 187.360796][T10015] netlink: 'syz.4.1140': attribute type 21 has an invalid length. [ 187.422255][T10015] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 187.580325][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.663701][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.739594][T10039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.770078][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.827884][T10039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.844403][T10043] netlink: 'syz.2.1148': attribute type 29 has an invalid length. [ 187.850226][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.880878][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.898602][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.911196][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.930752][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.038766][T10053] tap0: tun_chr_ioctl cmd 1074025676 [ 188.065703][T10053] tap0: owner set to 0 [ 188.222696][T10062] __nla_validate_parse: 11 callbacks suppressed [ 188.222719][T10062] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1153'. [ 188.750331][T10086] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1161'. [ 188.763019][T10086] NCSI netlink: No device for ifindex 0 [ 188.836644][T10089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1161'. [ 188.873439][T10086] siw: device registration error -23 [ 188.924786][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 188.975326][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 188.990242][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 189.099002][T10100] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1165'. [ 189.129784][T10102] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 189.256114][T10107] bond4: (slave gretap1): making interface the new active one [ 189.270563][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1166'. [ 189.286950][T10107] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 189.402451][T10106] macvlan2: entered allmulticast mode [ 189.408402][T10106] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 189.533185][T10102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.533638][T10127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.560303][T10127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.588070][T10122] veth1_to_bond: entered allmulticast mode [ 189.628325][T10121] veth1_to_bond: left allmulticast mode [ 189.689882][T10126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.083732][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 190.275131][T10155] vxcan1 speed is unknown, defaulting to 1000 [ 190.774501][T10174] netlink: 'syz.0.1188': attribute type 3 has an invalid length. [ 190.785350][T10174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1188'. [ 191.019286][T10155] lo speed is unknown, defaulting to 1000 [ 191.200935][T10193] netlink: 'syz.1.1194': attribute type 1 has an invalid length. [ 191.233963][T10191] netlink: 'syz.0.1193': attribute type 16 has an invalid length. [ 191.252760][T10191] netlink: 'syz.0.1193': attribute type 17 has an invalid length. [ 191.475309][T10191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.500478][T10191] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.566871][T10191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.622171][ T5954] lo speed is unknown, defaulting to 1000 [ 191.635195][ T5954] syz0: Port: 1 Link ACTIVE [ 191.660730][ T8723] lo speed is unknown, defaulting to 1000 [ 191.688256][T10208] Bluetooth: MGMT ver 1.23 [ 191.804093][T10155] hsr0 speed is unknown, defaulting to 1000 [ 191.816374][T10214] netlink: 'syz.4.1202': attribute type 7 has an invalid length. [ 191.845414][T10214] netlink: 'syz.4.1202': attribute type 8 has an invalid length. [ 191.915050][T10216] veth0: entered promiscuous mode [ 192.024807][T10220] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 192.075729][T10210] veth0: left promiscuous mode [ 192.079307][T10221] sctp: [Deprecated]: syz.1.1203 (pid 10221) Use of int in max_burst socket option deprecated. [ 192.079307][T10221] Use struct sctp_assoc_value instead [ 192.087359][ T8723] lo speed is unknown, defaulting to 1000 [ 192.110740][T10211] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 192.123944][ T8723] syz0: Port: 1 Link DOWN [ 192.203778][ T24] lo speed is unknown, defaulting to 1000 [ 192.214260][ T8718] lo speed is unknown, defaulting to 1000 [ 192.239201][ T8718] syz0: Port: 1 Link ACTIVE [ 192.615930][T10226] netlink: 'syz.2.1205': attribute type 6 has an invalid length. [ 193.362293][T10275] __nla_validate_parse: 12 callbacks suppressed [ 193.362311][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 193.399879][T10275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1220'. [ 193.460727][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1221'. [ 193.744114][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 193.846065][T10295] netlink: 'syz.4.1225': attribute type 4 has an invalid length. [ 193.933023][T10297] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002 [ 194.010187][T10300] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 194.355541][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.362029][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.477766][T10326] netlink: 'syz.4.1233': attribute type 11 has an invalid length. [ 194.530215][T10326] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1233'. [ 194.625792][T10332] netlink: 'syz.1.1235': attribute type 22 has an invalid length. [ 194.635790][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 194.724154][T10332] netlink: 'syz.1.1235': attribute type 22 has an invalid length. [ 194.732363][ T8528] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.764611][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 194.788689][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.818857][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.904479][ T8528] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.978425][T10349] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1238'. [ 195.019047][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 195.040579][T10349] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1238'. [ 195.416208][T10340] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 195.581759][ T8512] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.623007][ T8512] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.656290][ T8512] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.698945][ T8512] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.873599][T10391] team0: Device vti1 is up. Set it down before adding it as a team port [ 196.089365][T10405] vxcan1: tx address claim with dlc 0 [ 196.546642][T10437] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 197.254621][T10482] netlink: 'syz.0.1274': attribute type 10 has an invalid length. [ 197.331136][T10484] vxcan1 speed is unknown, defaulting to 1000 [ 197.338677][T10484] netlink: 'syz.3.1273': attribute type 12 has an invalid length. [ 197.461956][T10487] syzkaller0: entered promiscuous mode [ 197.482011][T10487] syzkaller0: entered allmulticast mode [ 197.586808][T10503] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 197.598548][T10499] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 197.609129][T10500] IPVS: stopping backup sync thread 10503 ... [ 197.631256][T10498] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 197.775091][T10499] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 197.794909][T10499] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 197.890960][T10498] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 197.930560][T10518] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 197.959542][T10498] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 197.979633][T10498] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 197.987892][T10498] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 197.998465][T10498] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 198.023231][T10498] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 198.592610][T10566] __nla_validate_parse: 17 callbacks suppressed [ 198.592629][T10566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1294'. [ 198.666001][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 198.688528][T10575] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1296'. [ 199.259886][T10596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'. [ 199.270517][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 199.470157][T10602] 8021q: VLANs not supported on lo [ 199.488816][T10602] 8021q: VLANs not supported on lo [ 199.746391][T10618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1312'. [ 200.022192][T10638] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 200.669148][T10671] pimreg: left allmulticast mode [ 200.847706][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1330'. [ 200.907011][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 201.093807][T10695] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1334'. [ 201.119008][T10695] tap0: tun_chr_ioctl cmd 1074025677 [ 201.123642][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1337'. [ 201.129979][T10695] tap0: linktype set to 65534 [ 201.443762][T10712] macvtap1: entered promiscuous mode [ 201.450340][T10712] macvtap1: entered allmulticast mode [ 209.713000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.794434][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 211.795301][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 211.800537][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 224.990144][T10742] __nla_validate_parse: 1 callbacks suppressed [ 224.990165][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 225.014718][T10742] validate_nla: 29 callbacks suppressed [ 225.014735][T10742] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 225.054016][T10742] netlink: 'syz.2.1351': attribute type 2 has an invalid length. [ 225.321055][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 225.330157][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 225.747838][T10776] can: request_module (can-proto-0) failed. [ 225.765128][T10787] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1372'. [ 225.784698][T10788] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 225.809654][T10787] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 225.824002][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 225.838623][T10788] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 225.856440][T10790] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.856578][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 225.872637][T10787] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 225.884312][T10794] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.913233][T10792] syzkaller1: entered promiscuous mode [ 225.926598][T10792] syzkaller1: entered allmulticast mode [ 226.023160][T10801] tipc: Enabled bearer , priority 0 [ 226.031026][T10801] syzkaller0: entered promiscuous mode [ 226.038030][T10801] syzkaller0: entered allmulticast mode [ 226.085474][T10801] tipc: Resetting bearer [ 226.101080][T10803] netlink: 'syz.1.1375': attribute type 4 has an invalid length. [ 226.118053][T10799] tipc: Resetting bearer [ 226.166696][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1378'. [ 226.179739][T10799] tipc: Disabling bearer [ 226.209612][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1377'. [ 226.371822][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1381'. [ 226.391742][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'. [ 226.466750][T10817] syzkaller0: entered promiscuous mode [ 226.481522][T10817] syzkaller0: entered allmulticast mode [ 226.579180][T10828] openvswitch: netlink: Flow key attr not present in new flow. [ 226.631202][T10830] openvswitch: netlink: Flow key attr not present in new flow. [ 226.743595][T10837] smc: net device veth0_virt_wifi applied user defined pnetid SYZ0 [ 227.160733][T10853] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.161254][ T5954] IPVS: starting estimator thread 0... [ 227.273165][T10857] IPVS: using max 27 ests per chain, 64800 per kthread [ 228.419219][T10856] team_slave_0: entered allmulticast mode [ 228.674672][T10853] bond0 (unregistering): Released all slaves [ 228.727857][T10875] veth1_to_bond: entered allmulticast mode [ 228.736920][T10875] veth1_to_bond: left allmulticast mode [ 229.130018][T10916] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 229.182777][T10921] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 229.258731][T10924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.294005][T10924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.325078][T10923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.036046][T10977] __nla_validate_parse: 12 callbacks suppressed [ 230.036064][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1431'. [ 230.166320][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 230.240141][T10983] bond0: invalid ARP target 0.0.0.0 specified for addition [ 230.260579][T10983] bond0: option arp_ip_target: invalid value (0) [ 230.270189][T10987] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1434'. [ 230.289457][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 230.301792][T10987] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1434'. [ 230.312448][T10987] netlink: 'syz.1.1434': attribute type 3 has an invalid length. [ 230.320795][T10987] netlink: 'syz.1.1434': attribute type 2 has an invalid length. [ 230.328814][T10987] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1434'. [ 230.357329][T10993] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1437'. [ 230.400045][T10993] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1437'. [ 230.417491][T11000] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1438'. [ 230.430374][T10993] netlink: 'syz.2.1437': attribute type 6 has an invalid length. [ 230.448069][T10993] netlink: 'syz.2.1437': attribute type 5 has an invalid length. [ 230.456944][T10993] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1437'. [ 230.497396][T11003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.534716][T11006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.607863][T11009] netlink: 'syz.3.1441': attribute type 6 has an invalid length. [ 230.612602][T11002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.621319][T11007] vxcan1 speed is unknown, defaulting to 1000 [ 230.841855][T11022] tipc: Enabled bearer , priority 0 [ 230.872335][T11022] syzkaller0: entered promiscuous mode [ 230.880572][T11022] syzkaller0: entered allmulticast mode [ 230.941035][T11019] tipc: Resetting bearer [ 231.006853][T11019] tipc: Disabling bearer [ 231.174206][T11007] lo speed is unknown, defaulting to 1000 [ 231.366343][T11040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.760207][T11007] hsr0 speed is unknown, defaulting to 1000 [ 232.676932][T11092] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 233.223002][T11120] netlink: 'syz.2.1473': attribute type 7 has an invalid length. [ 233.725715][T11142] netlink: 'syz.1.1482': attribute type 1 has an invalid length. [ 233.771580][T11142] netlink: 'syz.1.1482': attribute type 3 has an invalid length. [ 233.796287][T11145] netlink: 'syz.0.1483': attribute type 1 has an invalid length. [ 233.811898][T11142] netlink: 'syz.1.1482': attribute type 235 has an invalid length. [ 234.202313][T11172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.209673][T11172] IPv6: NLM_F_CREATE should be set when creating new route [ 234.216986][T11172] IPv6: NLM_F_CREATE should be set when creating new route [ 234.224338][T11172] IPv6: NLM_F_CREATE should be set when creating new route [ 234.282628][T11172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.935240][T11206] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744072586531840) [ 234.969034][T11206] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 235.156253][T11221] __nla_validate_parse: 82 callbacks suppressed [ 235.156273][T11221] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1506'. [ 235.177774][T11220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.213334][T11222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1504'. [ 235.245350][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1505'. [ 235.395238][T11228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.410103][T11231] netlink: 'syz.2.1509': attribute type 13 has an invalid length. [ 235.437127][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1509'. [ 235.437661][T11228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.485580][T11227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.496934][ T8522] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.522544][ T8522] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.567777][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.585306][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.599663][T11231] tipc: Enabled bearer , priority 0 [ 235.615169][T11231] syzkaller0: entered promiscuous mode [ 235.620831][T11231] syzkaller0: entered allmulticast mode [ 235.655668][T11231] tipc: Resetting bearer [ 235.716275][T11234] openvswitch: netlink: Missing key (keys=40, expected=100) [ 235.789169][T11229] tipc: Resetting bearer [ 235.815459][T11229] tipc: Disabling bearer [ 235.997529][T11247] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 236.173305][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1518'. [ 236.182524][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1518'. [ 236.280021][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 236.475847][T11272] syzkaller1: entered promiscuous mode [ 236.486715][T11272] syzkaller1: entered allmulticast mode [ 236.557910][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 236.689594][T11296] tipc: Enabled bearer , priority 0 [ 236.709060][T11296] syzkaller0: entered promiscuous mode [ 236.732827][T11296] syzkaller0: entered allmulticast mode [ 236.743055][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'. [ 236.827064][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 236.893757][T11306] tipc: Enabled bearer , priority 0 [ 236.933174][T11306] tipc: Disabling bearer [ 237.290175][T11333] syzkaller0: entered promiscuous mode [ 237.301771][T11333] syzkaller0: entered allmulticast mode [ 237.454251][T11289] tipc: Resetting bearer [ 237.494541][T11289] tipc: Disabling bearer [ 237.680454][T11348] netlink: 'syz.1.1544': attribute type 21 has an invalid length. [ 238.090008][T11369] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002 [ 238.302902][T11384] tipc: Enabled bearer , priority 0 [ 238.356963][T11384] syzkaller0: entered promiscuous mode [ 238.366553][T11384] syzkaller0: entered allmulticast mode [ 238.409881][T11390] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 238.429616][T11384] tipc: Resetting bearer [ 238.569150][T11383] tipc: Resetting bearer [ 238.599450][T11407] netlink: 'syz.1.1561': attribute type 16 has an invalid length. [ 238.621159][T11407] netlink: 'syz.1.1561': attribute type 17 has an invalid length. [ 238.677892][T11383] tipc: Disabling bearer [ 238.752242][T11407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.771744][T11407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.798910][T11410] 8021q: VLANs not supported on ip6_vti0 [ 239.055037][T11428] netlink: 'syz.1.1569': attribute type 11 has an invalid length. [ 239.195545][T11438] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 239.276426][T11438] veth9: entered promiscuous mode [ 239.425220][T11449] netlink: 'syz.3.1578': attribute type 7 has an invalid length. [ 239.578152][T11460] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 239.595533][T11464] netlink: 'syz.3.1582': attribute type 4 has an invalid length. [ 239.614731][T11460] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 240.027422][T11486] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.080341][T11488] gre0: entered promiscuous mode [ 240.170338][T11494] __nla_validate_parse: 17 callbacks suppressed [ 240.170358][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1591'. [ 240.201801][T11493] sctp: [Deprecated]: syz.2.1593 (pid 11493) Use of int in max_burst socket option. [ 240.201801][T11493] Use struct sctp_assoc_value instead [ 240.348809][T11494] macsec1: entered promiscuous mode [ 240.369435][T11494] macsec1: entered allmulticast mode [ 240.389442][T11494] bridge0: entered allmulticast mode [ 240.414770][T11494] bridge0: port 4(macsec1) entered blocking state [ 240.441690][T11494] bridge0: port 4(macsec1) entered disabled state [ 240.497108][T11494] bridge0: left allmulticast mode [ 240.847239][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 241.261000][T11521] bridge0: port 3(dummy0) entered disabled state [ 241.267757][T11521] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.455069][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.483338][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.033477][ T8724] hsr0 speed is unknown, defaulting to 1000 [ 242.043652][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.059153][ T8724] syz1: Port: 1 Link DOWN [ 242.081871][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.118182][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.151447][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.171066][T11563] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1608'. [ 242.436489][T11583] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 242.522573][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 242.536414][T11577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.670145][T11577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.777793][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 242.953867][T11612] netlink: 'syz.0.1623': attribute type 1 has an invalid length. [ 243.066128][T11612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.137428][T11611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.158882][T11627] netlink: 'syz.3.1628': attribute type 58 has an invalid length. [ 243.167979][T11611] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 243.201869][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1628'. [ 243.211978][T11611] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 243.224082][T11633] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 243.564974][T11652] tipc: Enabling of bearer rejected, media not registered [ 244.205719][ T13] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 20002 - 0 [ 244.215576][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1642'. [ 244.217005][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 244.239186][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 244.274714][T11693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1643'. [ 244.279499][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 244.300202][T11695] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 244.605639][T11720] syzkaller1: entered promiscuous mode [ 244.612243][T11720] syzkaller1: entered allmulticast mode [ 244.680131][T11719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1651'. [ 244.708584][T11724] 8021q: VLANs not supported on vcan0 [ 244.831093][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 244.889474][T11739] syzkaller1: entered promiscuous mode [ 244.895294][T11739] syzkaller1: entered allmulticast mode [ 245.032191][T11746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1658'. [ 245.066511][T11746] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 245.174444][T11746] veth3: entered promiscuous mode [ 245.301305][T11758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.734051][T11772] __nla_validate_parse: 1 callbacks suppressed [ 245.734073][T11772] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1667'. [ 245.878093][T11784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.907879][T11784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.958556][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.011983][T11793] batadv_slave_0: entered promiscuous mode [ 246.081073][T11798] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1674'. [ 246.099231][T11798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.782008][T11841] netlink: 'syz.0.1686': attribute type 3 has an invalid length. [ 247.143709][T11863] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1691'. [ 247.216011][T11868] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 247.333059][T11872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.335373][T11873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1694'. [ 247.364505][T11872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.392972][T11871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.406869][T11873] openvswitch: netlink: Flow key attr not present in new flow. [ 247.709940][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 247.896190][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'. [ 248.130926][ T5975] IPVS: starting estimator thread 0... [ 248.231477][T11919] IPVS: using max 28 ests per chain, 67200 per kthread [ 248.278652][T11926] nbd: must specify an index to disconnect [ 248.360857][T11932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.404576][T11932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.482842][T11941] netlink: 'syz.3.1709': attribute type 27 has an invalid length. [ 248.499887][T11930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.554491][T11944] netlink: 'syz.0.1716': attribute type 7 has an invalid length. [ 248.632966][T11944] : entered promiscuous mode [ 248.890053][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1722'. [ 248.909945][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 248.920878][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1722'. [ 248.934047][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 249.026441][T11968] netlink: 'syz.4.1723': attribute type 1 has an invalid length. [ 249.069173][T11968] netlink: 'syz.4.1723': attribute type 3 has an invalid length. [ 249.375787][T11988] tipc: Enabled bearer , priority 0 [ 249.395546][T11988] syzkaller0: entered promiscuous mode [ 249.415332][T11988] syzkaller0: entered allmulticast mode [ 249.439605][T11988] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 249.494475][T11988] syzkaller0: mtu less than device minimum [ 249.506662][T11986] tipc: Resetting bearer [ 249.566611][T11986] tipc: Disabling bearer [ 249.735248][T12016] netlink: 'syz.0.1737': attribute type 3 has an invalid length. [ 249.818997][T12023] ipvlan0: entered promiscuous mode [ 249.837758][T12023] ipvlan0: entered allmulticast mode [ 249.864436][T12023] veth0_vlan: entered allmulticast mode [ 249.951046][T12030] syzkaller0: entered promiscuous mode [ 249.963929][T12030] syzkaller0: entered allmulticast mode [ 249.972587][T12030] netem: invalid attributes len -24 [ 249.977838][T12030] netem: change failed [ 250.000629][T12030] 8021q: VLANs not supported on lo [ 250.014290][T12030] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 250.377184][T12051] netlink: 'syz.1.1746': attribute type 4 has an invalid length. [ 250.717724][T12076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.759792][T12078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.819896][T12080] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 250.960440][T12087] syzkaller1: entered promiscuous mode [ 250.966716][T12087] syzkaller1: entered allmulticast mode [ 251.306886][T12097] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 251.389457][T12097] bond6: (slave gretap1): making interface the new active one [ 251.398177][T12097] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 251.409623][T12097] __nla_validate_parse: 10 callbacks suppressed [ 251.409646][T12097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1761'. [ 251.430062][T12097] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.493051][T12108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.590179][T12109] syz.0.1764 (12109) used obsolete PPPIOCDETACH ioctl [ 252.056260][T12142] IPVS: Error joining to the multicast group [ 252.362958][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 252.581091][T12181] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1786'. [ 252.661907][T12181] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 252.877922][T12196] tipc: Enabled bearer , priority 0 [ 252.899913][T12196] syzkaller0: entered promiscuous mode [ 252.916253][T12196] syzkaller0: entered allmulticast mode [ 252.917231][T12200] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1794'. [ 252.959970][T12198] bond0: Error: Cannot enslave bond to itself. [ 253.393371][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 253.671991][T12195] tipc: Resetting bearer [ 253.693036][T12195] tipc: Disabling bearer [ 253.754822][T12208] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1797'. [ 254.050471][T12255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.084420][T12259] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1807'. [ 254.109572][T12259] veth1_vlan: mtu less than device minimum [ 254.282411][T12268] netlink: 'syz.1.1808': attribute type 1 has an invalid length. [ 254.328718][T12268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1808'. [ 254.340196][T12271] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1811'. [ 254.368747][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 254.382963][T12271] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 254.400511][T12268] block nbd1: not configured, cannot reconfigure [ 254.593449][T12281] netlink: 'syz.3.1814': attribute type 6 has an invalid length. [ 254.796458][T12301] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 255.798087][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.805764][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.070722][T12301] bond0: (slave ): Enslaving as an active interface with an up link [ 256.144523][T12309] netlink: 'syz.3.1823': attribute type 15 has an invalid length. [ 256.317247][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.368392][T12325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.425555][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.466476][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.512258][T12332] macsec1: entered promiscuous mode [ 256.537642][T12332] macsec1: entered allmulticast mode [ 256.550138][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.602662][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.628741][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.697746][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.715514][T12329] syzkaller1: entered promiscuous mode [ 256.727592][T12329] syzkaller1: entered allmulticast mode [ 256.730431][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.743375][T12329] bridge0: entered allmulticast mode [ 256.802529][T12348] __nla_validate_parse: 5 callbacks suppressed [ 256.802551][T12348] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1835'. [ 256.819000][T12348] gretap0: entered promiscuous mode [ 256.928531][T12353] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 256.980628][T12353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.022733][T12360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.030679][T12360] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 257.049919][T12360] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 257.089496][T12362] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1838'. [ 257.121029][T12363] bond6: entered allmulticast mode [ 257.438616][T12379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1841'. [ 257.459144][T12379] team0: Mode changed to "loadbalance" [ 257.606043][T12386] netlink: 'syz.3.1846': attribute type 24 has an invalid length. [ 257.628816][T12386] team0: Device vti1 is up. Set it down before adding it as a team port [ 257.899039][T12406] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 257.910312][T12407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.958389][T12407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.048068][T12405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.085173][T12417] tipc: Enabling of bearer rejected, failed to enable media [ 258.137653][T12420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.190551][T12420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1855'. [ 258.630897][T12440] bridge_slave_0: entered promiscuous mode [ 258.649709][T12444] openvswitch: netlink: Multiple metadata blocks provided [ 258.667952][T12440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1859'. [ 258.902927][T12457] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 259.005023][T12465] sock: sock_timestamping_bind_phc: sock not bind to device [ 259.073929][T12470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1871'. [ 259.174157][T12478] sctp: [Deprecated]: syz.1.1874 (pid 12478) Use of int in max_burst socket option. [ 259.174157][T12478] Use struct sctp_assoc_value instead [ 259.260083][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 259.274863][T12483] Unsupported xt match [ 259.274881][T12483] unable to load match [ 259.366319][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 259.378092][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 259.499213][T12501] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1879'. [ 259.727622][T12517] netlink: 'syz.3.1887': attribute type 10 has an invalid length. [ 259.800923][T12524] syzkaller1: entered promiscuous mode [ 259.817514][T12524] syzkaller1: entered allmulticast mode [ 260.050764][T12533] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 260.144455][T12544] gre0: left promiscuous mode [ 260.355961][T12559] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.810184][T12544] bridge_slave_0: left promiscuous mode [ 260.854432][T12544] team_slave_0: left allmulticast mode [ 261.178032][T12544] bond1: left promiscuous mode [ 261.183101][T12544] bond1: left allmulticast mode [ 261.290820][ T8715] vxcan1 speed is unknown, defaulting to 1000 [ 261.310342][ T8522] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.325834][ T8715] syz2: Port: 1 Link DOWN [ 261.339242][ T8522] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.368211][ T8522] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.416374][ T921] vxcan1 speed is unknown, defaulting to 1000 [ 261.444550][ T8522] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.672797][T12598] netlink: 'syz.1.1911': attribute type 1 has an invalid length. [ 261.762515][T12598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 261.795034][T12601] vlan0: entered promiscuous mode [ 261.805280][T12601] bond7: entered promiscuous mode [ 261.810507][T12601] vlan0: entered allmulticast mode [ 261.817201][T12601] bond7: entered allmulticast mode [ 261.859478][T12607] __nla_validate_parse: 5 callbacks suppressed [ 261.859498][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1914'. [ 261.883912][T12598] gretap2: entered promiscuous mode [ 261.909006][T12603] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 261.934858][T12614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1917'. [ 262.274583][T12635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.530180][T12661] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1127245951/1127245953 [ 262.542946][T12663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1929'. [ 262.557582][T12661] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1127245951/1127245953 [ 262.566165][T12663] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 262.590888][T12663] netlink: 5112 bytes leftover after parsing attributes in process `syz.0.1929'. [ 262.643548][T12667] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1932'. [ 262.798936][T12677] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1934'. [ 262.840735][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 262.879808][T12682] syzkaller1: entered promiscuous mode [ 262.891759][T12682] syzkaller1: entered allmulticast mode [ 263.521948][ T30] audit: type=1107 audit(1757445853.811:2): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Wb5 K0Dm̺7BZ]E.Ɣ?KFJvޠXZEx_*[ڋu~;̭|d0>˙촐pڀڥhz{bKI' [ 263.839157][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 264.325751][T12739] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 264.388510][T12739] bond5: entered promiscuous mode [ 264.395671][T12739] bond5: entered allmulticast mode [ 264.403231][T12739] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.475596][T12748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.713597][T12766] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1962'. [ 264.758181][T12766] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1962'. [ 264.880041][T12778] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.521086][T12823] Unsupported ieee802154 address type: 0 [ 265.682070][T12834] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 265.817865][T12843] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 266.021524][T12846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.157317][T12877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.173382][T12870] netlink: 'syz.0.1996': attribute type 1 has an invalid length. [ 266.336218][T12889] netlink: 'syz.1.2000': attribute type 1 has an invalid length. [ 266.375891][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.379662][T12889] netlink: 'syz.1.2000': attribute type 2 has an invalid length. [ 266.392928][T12885] 8021q: VLANs not supported on lo [ 266.463618][T12885] netlink: 'syz.1.2000': attribute type 1 has an invalid length. [ 266.513245][T12885] netlink: 'syz.1.2000': attribute type 2 has an invalid length. [ 266.660502][T12906] netlink: 'syz.1.2006': attribute type 10 has an invalid length. [ 266.853518][T12924] netlink: 'syz.2.2011': attribute type 9 has an invalid length. [ 266.872942][T12924] __nla_validate_parse: 14 callbacks suppressed [ 266.872956][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 266.947384][T12928] netlink: 'syz.3.2012': attribute type 31 has an invalid length. [ 267.038028][T12933] tipc: Enabling of bearer rejected, already enabled [ 267.272506][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 267.329802][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 267.483083][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 267.538718][T12957] tipc: Enabled bearer , priority 0 [ 267.549930][T12957] syzkaller0: entered promiscuous mode [ 267.558263][T12957] syzkaller0: entered allmulticast mode [ 267.585843][T12957] tipc: Resetting bearer [ 267.634603][T12956] tipc: Resetting bearer [ 267.689517][T12956] tipc: Disabling bearer [ 267.950674][T12982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2030'. [ 267.990130][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 268.001005][T12989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2032'. [ 268.085646][T12992] sctp: [Deprecated]: syz.1.2033 (pid 12992) Use of int in max_burst socket option. [ 268.085646][T12992] Use struct sctp_assoc_value instead [ 268.515207][T13021] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 268.827237][T13038] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.887546][T13042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2047'. [ 268.968436][T13045] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 268.979077][T13045] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2049'. [ 269.014219][T13048] nbd: must specify at least one socket [ 269.052001][T13047] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 269.438298][T13075] gre0: entered promiscuous mode [ 269.515507][T13081] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 269.536145][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2060'. [ 270.430179][T13109] tipc: Enabling not permitted [ 270.447205][T13109] tipc: Enabling of bearer rejected, failed to enable media [ 271.342575][T13164] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 271.375255][T13167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.440943][T13128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.475365][T13128] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 271.505645][T13128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.522955][T13128] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 271.567204][T13128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.601605][T13128] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 271.656257][T13128] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.685579][T13128] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 272.288071][T13203] __nla_validate_parse: 5 callbacks suppressed [ 272.288092][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2089'. [ 272.538199][T13217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2092'. [ 272.608012][T13222] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 272.692741][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 272.726526][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 272.758395][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 272.787171][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 272.800196][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 272.810575][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 272.823008][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 272.831120][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 272.843331][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 272.865832][T13228] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 273.256019][T13260] IPv6: sit2: Disabled Multicast RS [ 273.303238][T13260] sit2: entered allmulticast mode [ 273.731762][T13290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2106'. [ 273.950425][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 273.996920][T13303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2111'. [ 274.589039][T13339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2119'. [ 274.670818][T13339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2119'. [ 274.819524][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 274.832591][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 275.066679][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 276.504528][T13450] xt_limit: Overflow, try lower: 604147548/4200216962 [ 277.220038][T13489] tipc: Enabling of bearer rejected, failed to enable media [ 277.395245][T13501] sit0: entered promiscuous mode [ 277.426487][T13501] __nla_validate_parse: 5 callbacks suppressed [ 277.426506][T13501] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2155'. [ 277.705201][T13518] netem: change failed [ 277.717287][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2161'. [ 277.743296][T13518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2160'. [ 277.860535][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 277.888649][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 278.160342][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2167'. [ 278.310176][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 278.766762][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2177'. [ 279.041211][T13595] validate_nla: 29 callbacks suppressed [ 279.041233][T13595] netlink: 'syz.3.2182': attribute type 6 has an invalid length. [ 279.983641][T13634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2186'. [ 279.997083][T13634] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 280.053006][T13636] batadv2: entered allmulticast mode [ 280.337801][T13646] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 280.338405][T13645] netlink: 'syz.4.2190': attribute type 1 has an invalid length. [ 280.358945][T13645] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2190'. [ 281.476323][T13656] tipc: Enabling of bearer rejected, failed to enable media [ 317.235886][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.675990][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 429.242229][ T31] INFO: task kworker/1:11:8724 blocked for more than 143 seconds. [ 429.250141][ T31] Not tainted syzkaller #0 [ 429.255415][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.264228][ T31] task:kworker/1:11 state:D stack:25992 pid:8724 tgid:8724 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 429.276619][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 429.283524][ T31] Call Trace: [ 429.286828][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 429.289781][ T31] __schedule+0x1798/0x4cc0 [ 429.294636][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 429.300102][ T31] ? __pfx___schedule+0x10/0x10 [ 429.305817][ T31] ? schedule+0x91/0x360 [ 429.310229][ T31] schedule+0x165/0x360 [ 429.314521][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.320306][ T31] __mutex_lock+0x7e6/0x1350 [ 429.325136][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.330035][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 429.358240][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.387393][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 429.398065][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 429.416525][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 429.427030][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 429.433097][ T31] process_scheduled_works+0xae1/0x17b0 [ 429.438723][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.444889][ T31] worker_thread+0x8a0/0xda0 [ 429.449728][ T31] kthread+0x70e/0x8a0 [ 429.454129][ T31] ? __pfx_worker_thread+0x10/0x10 [ 429.459293][ T31] ? __pfx_kthread+0x10/0x10 [ 429.464098][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.469382][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.478505][ T31] ? __pfx_kthread+0x10/0x10 [ 429.485119][ T31] ret_from_fork+0x3fc/0x770 [ 429.489769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 429.495015][ T31] ? __switch_to_asm+0x39/0x70 [ 429.499825][ T31] ? __switch_to_asm+0x33/0x70 [ 429.504787][ T31] ? __pfx_kthread+0x10/0x10 [ 429.509432][ T31] ret_from_fork_asm+0x1a/0x30 [ 429.514709][ T31] [ 429.517783][ T31] INFO: task syz.1.2072:13114 blocked for more than 143 seconds. [ 429.525728][ T31] Not tainted syzkaller #0 [ 429.530685][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.539448][ T31] task:syz.1.2072 state:D stack:25096 pid:13114 tgid:13114 ppid:5867 task_flags:0x400040 flags:0x00004004 [ 429.551917][ T31] Call Trace: [ 429.555240][ T31] [ 429.558197][ T31] __schedule+0x1798/0x4cc0 [ 429.562872][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.567768][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.572842][ T31] ? __pfx___schedule+0x10/0x10 [ 429.577720][ T31] ? schedule+0x91/0x360 [ 429.582370][ T31] schedule+0x165/0x360 [ 429.586569][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.592230][ T31] __mutex_lock+0x7e6/0x1350 [ 429.596867][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.601783][ T31] ? rfkill_unregister+0xc8/0x220 [ 429.606855][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.612180][ T31] ? __pfx_device_del+0x10/0x10 [ 429.617054][ T31] rfkill_unregister+0xc8/0x220 [ 429.622289][ T31] nfc_unregister_device+0x96/0x2a0 [ 429.627519][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 429.633818][ T31] virtual_ncidev_close+0x56/0x90 [ 429.639007][ T31] __fput+0x449/0xa70 [ 429.643390][ T31] task_work_run+0x1d1/0x260 [ 429.648030][ T31] ? __pfx_task_work_run+0x10/0x10 [ 429.653274][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 429.658793][ T31] exit_to_user_mode_loop+0xec/0x110 [ 429.664259][ T31] do_syscall_64+0x2bd/0x3b0 [ 429.668879][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.674148][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.680272][ T31] ? clear_bhb_loop+0x60/0xb0 [ 429.685139][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.691076][ T31] RIP: 0033:0x7f878618ebe9 [ 429.695917][ T31] RSP: 002b:00007ffe0eff5458 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 429.704664][ T31] RAX: 0000000000000000 RBX: 0000000000042074 RCX: 00007f878618ebe9 [ 429.712838][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 429.720843][ T31] RBP: 00007f87863c7da0 R08: 0000000000000001 R09: 0000001e0eff574f [ 429.729011][ T31] R10: 0000001b32220000 R11: 0000000000000246 R12: 00007f87863c5fac [ 429.737741][ T31] R13: 00007f87863c5fa0 R14: ffffffffffffffff R15: 00007ffe0eff5570 [ 429.745928][ T31] [ 429.748975][ T31] INFO: task syz.0.2074:13128 blocked for more than 143 seconds. [ 429.756823][ T31] Not tainted syzkaller #0 [ 429.762249][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.770941][ T31] task:syz.0.2074 state:D stack:24344 pid:13128 tgid:13127 ppid:5873 task_flags:0x400040 flags:0x00004006 [ 429.783010][ T31] Call Trace: [ 429.786315][ T31] [ 429.789298][ T31] __schedule+0x1798/0x4cc0 [ 429.794235][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.799155][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.804209][ T31] ? __pfx___schedule+0x10/0x10 [ 429.809112][ T31] ? schedule+0x91/0x360 [ 429.813423][ T31] schedule+0x165/0x360 [ 429.817620][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.823484][ T31] __mutex_lock+0x7e6/0x1350 [ 429.828136][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.832946][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 429.838241][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.843702][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.848943][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 429.855122][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 429.861525][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 429.867285][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 429.872870][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 429.878627][ T31] rfkill_set_block+0x1cf/0x440 [ 429.884000][ T31] rfkill_fop_write+0x44b/0x570 [ 429.888889][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 429.894295][ T31] ? security_kernfs_init_security+0x290/0x290 [ 429.900465][ T31] ? rw_verify_area+0x255/0x4d0 [ 429.905442][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.910359][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 429.916052][ T31] vfs_write+0x27b/0xb30 [ 429.920343][ T31] ? __pfx_vfs_write+0x10/0x10 [ 429.925361][ T31] ? __fget_files+0x2a/0x420 [ 429.929993][ T31] ? __fget_files+0x2a/0x420 [ 429.934706][ T31] ? __fget_files+0x3a0/0x420 [ 429.939412][ T31] ? __fget_files+0x2a/0x420 [ 429.944425][ T31] ksys_write+0x145/0x250 [ 429.948815][ T31] ? __pfx_ksys_write+0x10/0x10 [ 429.953984][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.958781][ T31] ? do_syscall_64+0xbe/0x3b0 [ 429.963706][ T31] do_syscall_64+0xfa/0x3b0 [ 429.968236][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.973712][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.979788][ T31] ? clear_bhb_loop+0x60/0xb0 [ 429.984545][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.990495][ T31] RIP: 0033:0x7fb0bb18ebe9 [ 429.994942][ T31] RSP: 002b:00007fb0bc015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.003865][ T31] RAX: ffffffffffffffda RBX: 00007fb0bb3c5fa0 RCX: 00007fb0bb18ebe9 [ 430.011924][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 430.019905][ T31] RBP: 00007fb0bb211e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.027941][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.036239][ T31] R13: 00007fb0bb3c6038 R14: 00007fb0bb3c5fa0 R15: 00007fff43426af8 [ 430.044508][ T31] [ 430.047598][ T31] INFO: task syz.2.2171:13558 blocked for more than 144 seconds. [ 430.059195][ T31] Not tainted syzkaller #0 [ 430.067087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.075888][ T31] task:syz.2.2171 state:D stack:24712 pid:13558 tgid:13557 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 430.088173][ T31] Call Trace: [ 430.091682][ T31] [ 430.094677][ T31] __schedule+0x1798/0x4cc0 [ 430.099263][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.104406][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.109300][ T31] ? __pfx___schedule+0x10/0x10 [ 430.114448][ T31] ? schedule+0x91/0x360 [ 430.118748][ T31] schedule+0x165/0x360 [ 430.123327][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.128824][ T31] __mutex_lock+0x7e6/0x1350 [ 430.133517][ T31] ? __mutex_lock+0x5bb/0x1350 [ 430.138317][ T31] ? rfkill_fop_open+0x12d/0x820 [ 430.143366][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.148436][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 430.154165][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 430.159596][ T31] rfkill_fop_open+0x12d/0x820 [ 430.164468][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 430.169784][ T31] misc_open+0x2bc/0x330 [ 430.174299][ T31] chrdev_open+0x4cc/0x5e0 [ 430.178758][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.184060][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 430.190445][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.195685][ T31] do_dentry_open+0x953/0x13f0 [ 430.200509][ T31] vfs_open+0x3b/0x340 [ 430.204764][ T31] ? path_openat+0x2ecd/0x3830 [ 430.209580][ T31] path_openat+0x2ee5/0x3830 [ 430.214714][ T31] ? arch_stack_walk+0xfc/0x150 [ 430.219641][ T31] ? stack_depot_save_flags+0x40/0x860 [ 430.225199][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.230188][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.236428][ T31] do_filp_open+0x1fa/0x410 [ 430.240988][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.246119][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.251176][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.256123][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.260515][ T31] do_sys_openat2+0x121/0x1c0 [ 430.265238][ T31] ? __se_sys_futex+0x36f/0x400 [ 430.270125][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.275769][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.280585][ T31] __x64_sys_openat+0x138/0x170 [ 430.285641][ T31] do_syscall_64+0xfa/0x3b0 [ 430.290182][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.295734][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.302189][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.306888][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.312846][ T31] RIP: 0033:0x7fc99f18ebe9 [ 430.317280][ T31] RSP: 002b:00007fc9a00b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.325770][ T31] RAX: ffffffffffffffda RBX: 00007fc99f3c5fa0 RCX: 00007fc99f18ebe9 [ 430.334125][ T31] RDX: 0000000000080080 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 430.342183][ T31] RBP: 00007fc99f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.350161][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.358175][ T31] R13: 00007fc99f3c6038 R14: 00007fc99f3c5fa0 R15: 00007fffc61e23b8 [ 430.366432][ T31] [ 430.369479][ T31] INFO: task syz.3.2185:13607 blocked for more than 144 seconds. [ 430.377306][ T31] Not tainted syzkaller #0 [ 430.382321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.390997][ T31] task:syz.3.2185 state:D stack:27736 pid:13607 tgid:13606 ppid:5870 task_flags:0x400040 flags:0x00004004 [ 430.403365][ T31] Call Trace: [ 430.406672][ T31] [ 430.409640][ T31] __schedule+0x1798/0x4cc0 [ 430.414502][ T31] ? kasan_save_free_info+0x46/0x50 [ 430.419742][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.424688][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.429574][ T31] ? __pfx___schedule+0x10/0x10 [ 430.435060][ T31] ? schedule+0x91/0x360 [ 430.439345][ T31] schedule+0x165/0x360 [ 430.443573][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.449089][ T31] __mutex_lock+0x7e6/0x1350 [ 430.453711][ T31] ? __mutex_lock+0x5bb/0x1350 [ 430.458480][ T31] ? misc_open+0x51/0x330 [ 430.463221][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.468296][ T31] misc_open+0x51/0x330 [ 430.472522][ T31] chrdev_open+0x4cc/0x5e0 [ 430.476977][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.482021][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 430.488390][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.493624][ T31] do_dentry_open+0x953/0x13f0 [ 430.498408][ T31] vfs_open+0x3b/0x340 [ 430.502531][ T31] ? path_openat+0x2ecd/0x3830 [ 430.507325][ T31] path_openat+0x2ee5/0x3830 [ 430.511965][ T31] ? arch_stack_walk+0xfc/0x150 [ 430.516868][ T31] ? stack_depot_save_flags+0x40/0x860 [ 430.523052][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.528025][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.534142][ T31] do_filp_open+0x1fa/0x410 [ 430.538653][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.543578][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.548647][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.553796][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.558162][ T31] do_sys_openat2+0x121/0x1c0 [ 430.562934][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.568160][ T31] ? exc_page_fault+0x76/0xf0 [ 430.573091][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 430.578427][ T31] __x64_sys_openat+0x138/0x170 [ 430.583710][ T31] do_syscall_64+0xfa/0x3b0 [ 430.588246][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.593602][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.599676][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.604407][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.610329][ T31] RIP: 0033:0x7f28e498ebe9 [ 430.614997][ T31] RSP: 002b:00007f28e58a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.623497][ T31] RAX: ffffffffffffffda RBX: 00007f28e4bc5fa0 RCX: 00007f28e498ebe9 [ 430.631819][ T31] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 430.639817][ T31] RBP: 00007f28e4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.648071][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.656103][ T31] R13: 00007f28e4bc6038 R14: 00007f28e4bc5fa0 R15: 00007ffc28ea6d08 [ 430.664182][ T31] [ 430.667234][ T31] INFO: task syz.4.2193:13652 blocked for more than 144 seconds. [ 430.676571][ T31] Not tainted syzkaller #0 [ 430.681583][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.690260][ T31] task:syz.4.2193 state:D stack:27736 pid:13652 tgid:13651 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 430.702592][ T31] Call Trace: [ 430.705892][ T31] [ 430.708847][ T31] __schedule+0x1798/0x4cc0 [ 430.713457][ T31] ? kasan_save_free_info+0x46/0x50 [ 430.718692][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.723626][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.728512][ T31] ? __pfx___schedule+0x10/0x10 [ 430.733665][ T31] ? schedule+0x91/0x360 [ 430.737920][ T31] schedule+0x165/0x360 [ 430.742389][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.747884][ T31] __mutex_lock+0x7e6/0x1350 [ 430.752509][ T31] ? __mutex_lock+0x5bb/0x1350 [ 430.757275][ T31] ? misc_open+0x51/0x330 [ 430.761979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.767047][ T31] misc_open+0x51/0x330 [ 430.771226][ T31] chrdev_open+0x4cc/0x5e0 [ 430.775704][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.780651][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 430.787059][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.792273][ T31] do_dentry_open+0x953/0x13f0 [ 430.797050][ T31] vfs_open+0x3b/0x340 [ 430.801114][ T31] ? path_openat+0x2ecd/0x3830 [ 430.805947][ T31] path_openat+0x2ee5/0x3830 [ 430.810559][ T31] ? arch_stack_walk+0xfc/0x150 [ 430.815464][ T31] ? stack_depot_save_flags+0x40/0x860 [ 430.820939][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.826230][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.832390][ T31] do_filp_open+0x1fa/0x410 [ 430.836921][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.841827][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.846920][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.852226][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.856572][ T31] do_sys_openat2+0x121/0x1c0 [ 430.861247][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.866483][ T31] ? exc_page_fault+0x76/0xf0 [ 430.871184][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 430.876534][ T31] __x64_sys_openat+0x138/0x170 [ 430.881721][ T31] do_syscall_64+0xfa/0x3b0 [ 430.886257][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.891509][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.897578][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.902301][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.908212][ T31] RIP: 0033:0x7fbe1198ebe9 [ 430.912866][ T31] RSP: 002b:00007fbe128db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.921313][ T31] RAX: ffffffffffffffda RBX: 00007fbe11bc5fa0 RCX: 00007fbe1198ebe9 [ 430.929328][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 430.937375][ T31] RBP: 00007fbe11a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.945733][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.953755][ T31] R13: 00007fbe11bc6038 R14: 00007fbe11bc5fa0 R15: 00007ffeaa6ba708 [ 430.962069][ T31] [ 430.965126][ T31] INFO: task syz.4.2193:13653 blocked for more than 145 seconds. [ 430.973374][ T31] Not tainted syzkaller #0 [ 430.978348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.987032][ T31] task:syz.4.2193 state:D stack:26024 pid:13653 tgid:13651 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 430.999060][ T31] Call Trace: [ 431.002698][ T31] [ 431.005648][ T31] __schedule+0x1798/0x4cc0 [ 431.010161][ T31] ? kasan_save_free_info+0x46/0x50 [ 431.015427][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.020314][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.025200][ T31] ? __pfx___schedule+0x10/0x10 [ 431.030158][ T31] ? schedule+0x91/0x360 [ 431.034810][ T31] schedule+0x165/0x360 [ 431.038998][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.044492][ T31] __mutex_lock+0x7e6/0x1350 [ 431.049103][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.053949][ T31] ? misc_open+0x51/0x330 [ 431.058312][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.063601][ T31] misc_open+0x51/0x330 [ 431.067765][ T31] chrdev_open+0x4cc/0x5e0 [ 431.072502][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 431.077471][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 431.083847][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 431.088808][ T31] do_dentry_open+0x953/0x13f0 [ 431.093956][ T31] vfs_open+0x3b/0x340 [ 431.098044][ T31] ? path_openat+0x2ecd/0x3830 [ 431.102864][ T31] path_openat+0x2ee5/0x3830 [ 431.107472][ T31] ? arch_stack_walk+0xfc/0x150 [ 431.112426][ T31] ? stack_depot_save_flags+0x40/0x860 [ 431.117937][ T31] ? __pfx_path_openat+0x10/0x10 [ 431.123238][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.129348][ T31] do_filp_open+0x1fa/0x410 [ 431.133910][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.138794][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 431.143916][ T31] ? _raw_spin_unlock+0x28/0x50 [ 431.148796][ T31] ? alloc_fd+0x64c/0x6c0 [ 431.153564][ T31] do_sys_openat2+0x121/0x1c0 [ 431.158270][ T31] ? __se_sys_futex+0x36f/0x400 [ 431.163175][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.168399][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 431.173667][ T31] __x64_sys_openat+0x138/0x170 [ 431.178731][ T31] do_syscall_64+0xfa/0x3b0 [ 431.183729][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.188948][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.195058][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.199756][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.205683][ T31] RIP: 0033:0x7fbe1198ebe9 [ 431.210099][ T31] RSP: 002b:00007fbe128ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.218779][ T31] RAX: ffffffffffffffda RBX: 00007fbe11bc6090 RCX: 00007fbe1198ebe9 [ 431.226817][ T31] RDX: 0000000000103442 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 431.234880][ T31] RBP: 00007fbe11a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 431.243207][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.251189][ T31] R13: 00007fbe11bc6128 R14: 00007fbe11bc6090 R15: 00007ffeaa6ba708 [ 431.259248][ T31] [ 431.262321][ T31] INFO: task syz.4.2193:13654 blocked for more than 145 seconds. [ 431.270055][ T31] Not tainted syzkaller #0 [ 431.275290][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.284001][ T31] task:syz.4.2193 state:D stack:27240 pid:13654 tgid:13651 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 431.296177][ T31] Call Trace: [ 431.299468][ T31] [ 431.302744][ T31] __schedule+0x1798/0x4cc0 [ 431.307278][ T31] ? kasan_save_free_info+0x46/0x50 [ 431.312532][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.317394][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.322291][ T31] ? __pfx___schedule+0x10/0x10 [ 431.327192][ T31] ? schedule+0x91/0x360 [ 431.331718][ T31] schedule+0x165/0x360 [ 431.335886][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.341414][ T31] __mutex_lock+0x7e6/0x1350 [ 431.346047][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.350842][ T31] ? misc_open+0x51/0x330 [ 431.355203][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.360255][ T31] misc_open+0x51/0x330 [ 431.364778][ T31] chrdev_open+0x4cc/0x5e0 [ 431.369226][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 431.374208][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 431.380570][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 431.385569][ T31] do_dentry_open+0x953/0x13f0 [ 431.390429][ T31] vfs_open+0x3b/0x340 [ 431.394905][ T31] ? path_openat+0x2ecd/0x3830 [ 431.399679][ T31] path_openat+0x2ee5/0x3830 [ 431.404584][ T31] ? arch_stack_walk+0xfc/0x150 [ 431.409476][ T31] ? stack_depot_save_flags+0x40/0x860 [ 431.414987][ T31] ? __pfx_path_openat+0x10/0x10 [ 431.419948][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.426424][ T31] do_filp_open+0x1fa/0x410 [ 431.430952][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.435840][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 431.440898][ T31] ? _raw_spin_unlock+0x28/0x50 [ 431.445814][ T31] ? alloc_fd+0x64c/0x6c0 [ 431.450183][ T31] do_sys_openat2+0x121/0x1c0 [ 431.455128][ T31] ? __se_sys_futex+0x36f/0x400 [ 431.459988][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.465230][ T31] ? __fget_files+0x2a/0x420 [ 431.469835][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 431.475233][ T31] ? __fget_files+0x2a/0x420 [ 431.479835][ T31] __x64_sys_openat+0x138/0x170 [ 431.485043][ T31] do_syscall_64+0xfa/0x3b0 [ 431.489564][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.494803][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.500870][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.505613][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.511971][ T31] RIP: 0033:0x7fbe1198ebe9 [ 431.516391][ T31] RSP: 002b:00007fbe12899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.524845][ T31] RAX: ffffffffffffffda RBX: 00007fbe11bc6180 RCX: 00007fbe1198ebe9 [ 431.532873][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 431.540842][ T31] RBP: 00007fbe11a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 431.549050][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.557083][ T31] R13: 00007fbe11bc6218 R14: 00007fbe11bc6180 R15: 00007ffeaa6ba708 [ 431.565122][ T31] [ 431.568168][ T31] INFO: task syz.4.2193:13655 blocked for more than 145 seconds. [ 431.576370][ T31] Not tainted syzkaller #0 [ 431.581339][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.590029][ T31] task:syz.4.2193 state:D stack:28328 pid:13655 tgid:13651 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 431.602354][ T31] Call Trace: [ 431.605644][ T31] [ 431.608577][ T31] __schedule+0x1798/0x4cc0 [ 431.613133][ T31] ? kasan_save_free_info+0x46/0x50 [ 431.618357][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.623446][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.628308][ T31] ? __pfx___schedule+0x10/0x10 [ 431.633680][ T31] ? schedule+0x91/0x360 [ 431.637954][ T31] schedule+0x165/0x360 [ 431.642178][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.647680][ T31] __mutex_lock+0x7e6/0x1350 [ 431.652315][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.657107][ T31] ? misc_open+0x51/0x330 [ 431.661812][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.666866][ T31] misc_open+0x51/0x330 [ 431.671024][ T31] chrdev_open+0x4cc/0x5e0 [ 431.675493][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 431.680461][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 431.686848][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 431.692151][ T31] do_dentry_open+0x953/0x13f0 [ 431.696961][ T31] vfs_open+0x3b/0x340 [ 431.701054][ T31] ? path_openat+0x2ecd/0x3830 [ 431.705904][ T31] path_openat+0x2ee5/0x3830 [ 431.710525][ T31] ? arch_stack_walk+0xfc/0x150 [ 431.716618][ T31] ? stack_depot_save_flags+0x40/0x860 [ 431.722507][ T31] ? __pfx_path_openat+0x10/0x10 [ 431.727494][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.733791][ T31] do_filp_open+0x1fa/0x410 [ 431.738303][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.743213][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 431.748629][ T31] ? _raw_spin_unlock+0x28/0x50 [ 431.753738][ T31] ? alloc_fd+0x64c/0x6c0 [ 431.758085][ T31] do_sys_openat2+0x121/0x1c0 [ 431.762819][ T31] ? __se_sys_futex+0x36f/0x400 [ 431.767704][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.772928][ T31] ? __fget_files+0x2a/0x420 [ 431.777516][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 431.783080][ T31] ? fdget+0x184/0x1e0 [ 431.787167][ T31] __x64_sys_openat+0x138/0x170 [ 431.792081][ T31] do_syscall_64+0xfa/0x3b0 [ 431.796600][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.801880][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.807967][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.812999][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.818906][ T31] RIP: 0033:0x7fbe1198ebe9 [ 431.823398][ T31] RSP: 002b:00007fbe12878038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.831903][ T31] RAX: ffffffffffffffda RBX: 00007fbe11bc6270 RCX: 00007fbe1198ebe9 [ 431.839890][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 431.848295][ T31] RBP: 00007fbe11a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 431.856324][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.864365][ T31] R13: 00007fbe11bc6308 R14: 00007fbe11bc6270 R15: 00007ffeaa6ba708 [ 431.872837][ T31] [ 431.875904][ T31] [ 431.875904][ T31] Showing all locks held in the system: [ 431.883680][ T31] 1 lock held by khungtaskd/31: [ 431.888628][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 431.898539][ T31] 2 locks held by getty/5625: [ 431.903697][ T31] #0: ffff888033fa60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 431.913530][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 431.923718][ T31] 2 locks held by kworker/u8:15/8528: [ 431.929104][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 431.939287][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 431.948225][ T31] 3 locks held by kworker/1:11/8724: [ 431.953761][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 431.965109][ T31] #1: ffffc9001c8ffbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 431.978664][ T31] #2: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 431.990044][ T31] 2 locks held by syz.1.2072/13114: [ 431.995617][ T31] #0: ffff888051d4e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 432.005466][ T31] #1: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 432.015645][ T31] 2 locks held by syz.0.2074/13128: [ 432.020869][ T31] #0: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 432.031325][ T31] #1: ffff888051d4e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 432.041042][ T31] 2 locks held by syz.2.2171/13558: [ 432.046270][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.055107][ T31] #1: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 432.065365][ T31] 1 lock held by syz.3.2185/13607: [ 432.070469][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.078975][ T31] 1 lock held by syz.4.2193/13652: [ 432.084336][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.092838][ T31] 1 lock held by syz.4.2193/13653: [ 432.097958][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.106441][ T31] 1 lock held by syz.4.2193/13654: [ 432.111891][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.120378][ T31] 1 lock held by syz.4.2193/13655: [ 432.125518][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.134032][ T31] 1 lock held by syz-executor/13662: [ 432.139351][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.148150][ T31] 1 lock held by syz-executor/13663: [ 432.153491][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.162042][ T31] 1 lock held by syz-executor/13665: [ 432.167333][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.176228][ T31] 1 lock held by syz-executor/13667: [ 432.181571][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.190062][ T31] 1 lock held by syz-executor/13669: [ 432.195391][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.204210][ T31] 1 lock held by syz-executor/13676: [ 432.209511][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.218028][ T31] 1 lock held by syz-executor/13677: [ 432.223371][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.232206][ T31] 1 lock held by syz-executor/13679: [ 432.237500][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.245997][ T31] 1 lock held by syz-executor/13681: [ 432.251316][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.259813][ T31] 1 lock held by syz-executor/13683: [ 432.265469][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.274012][ T31] 1 lock held by syz-executor/13690: [ 432.279301][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.287975][ T31] 1 lock held by syz-executor/13691: [ 432.293525][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.302058][ T31] 1 lock held by syz-executor/13693: [ 432.307360][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.315982][ T31] 1 lock held by syz-executor/13695: [ 432.321339][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.329830][ T31] 1 lock held by syz-executor/13697: [ 432.335400][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 432.343932][ T31] [ 432.346277][ T31] ============================================= [ 432.346277][ T31] [ 432.354776][ T31] NMI backtrace for cpu 0 [ 432.354795][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.354810][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.354819][ T31] Call Trace: [ 432.354825][ T31] [ 432.354832][ T31] dump_stack_lvl+0x189/0x250 [ 432.354855][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.354872][ T31] ? __pfx__printk+0x10/0x10 [ 432.354902][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 432.354922][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 432.354943][ T31] ? __pfx__printk+0x10/0x10 [ 432.354966][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.354990][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 432.355011][ T31] watchdog+0xf93/0xfe0 [ 432.355035][ T31] ? watchdog+0x1de/0xfe0 [ 432.355059][ T31] kthread+0x70e/0x8a0 [ 432.355079][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.355098][ T31] ? __pfx_kthread+0x10/0x10 [ 432.355117][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.355156][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.355176][ T31] ? __pfx_kthread+0x10/0x10 [ 432.355195][ T31] ret_from_fork+0x3fc/0x770 [ 432.355213][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.355232][ T31] ? __switch_to_asm+0x39/0x70 [ 432.355250][ T31] ? __switch_to_asm+0x33/0x70 [ 432.355268][ T31] ? __pfx_kthread+0x10/0x10 [ 432.355292][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.355323][ T31] [ 432.355328][ T31] Sending NMI from CPU 0 to CPUs 1: [ 432.501865][ C1] NMI backtrace for cpu 1 [ 432.501883][ C1] CPU: 1 UID: 0 PID: 8528 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 432.501903][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.501915][ C1] Workqueue: bat_events batadv_nc_worker [ 432.501944][ C1] RIP: 0010:__lock_acquire+0x320/0xd20 [ 432.501972][ C1] Code: 44 09 e2 41 c1 e6 14 41 09 d6 8b 54 24 10 c1 e2 13 c1 e5 15 09 d5 09 cd 44 09 f5 41 89 6c c7 20 45 89 44 c7 24 4c 89 7c 24 10 <4d> 8d 34 c7 81 e5 ff 1f 00 00 48 0f a3 2d 3e df 0a 12 73 10 48 69 [ 432.501988][ C1] RSP: 0018:ffffc9001d0178f0 EFLAGS: 00000002 [ 432.502002][ C1] RAX: 000000000000000a RBX: ffffffff8e139f20 RCX: 0000000000000007 [ 432.502014][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802d870000 [ 432.502024][ C1] RBP: 0000000000020007 R08: 0000000000000000 R09: ffffffff8b4789e2 [ 432.502035][ C1] R10: dffffc0000000000 R11: ffffffff8b478910 R12: 0000000000020000 [ 432.502047][ C1] R13: 0000000000000000 R14: 0000000000020000 R15: ffff88802d870af0 [ 432.502059][ C1] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 432.502074][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.502085][ C1] CR2: 00007fb6bb6f7d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 432.502101][ C1] Call Trace: [ 432.502108][ C1] [ 432.502120][ C1] ? batadv_nc_worker+0xd2/0x610 [ 432.502141][ C1] lock_acquire+0x120/0x360 [ 432.502165][ C1] ? batadv_nc_worker+0xd2/0x610 [ 432.502190][ C1] ? batadv_nc_worker+0xd2/0x610 [ 432.502212][ C1] ? batadv_nc_worker+0xd2/0x610 [ 432.502233][ C1] batadv_nc_worker+0xef/0x610 [ 432.502254][ C1] ? batadv_nc_worker+0xd2/0x610 [ 432.502276][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 432.502294][ C1] process_scheduled_works+0xae1/0x17b0 [ 432.502324][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.502349][ C1] worker_thread+0x8a0/0xda0 [ 432.502368][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 432.502396][ C1] ? __kthread_parkme+0x7b/0x200 [ 432.502419][ C1] kthread+0x70e/0x8a0 [ 432.502440][ C1] ? __pfx_worker_thread+0x10/0x10 [ 432.502457][ C1] ? __pfx_kthread+0x10/0x10 [ 432.502478][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.502500][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.502524][ C1] ? __pfx_kthread+0x10/0x10 [ 432.502544][ C1] ret_from_fork+0x3fc/0x770 [ 432.502563][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 432.502591][ C1] ? __switch_to_asm+0x39/0x70 [ 432.502613][ C1] ? __switch_to_asm+0x33/0x70 [ 432.502634][ C1] ? __pfx_kthread+0x10/0x10 [ 432.502655][ C1] ret_from_fork_asm+0x1a/0x30 [ 432.502685][ C1] [ 432.502984][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 432.767174][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.776287][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.786363][ T31] Call Trace: [ 432.789676][ T31] [ 432.792619][ T31] dump_stack_lvl+0x99/0x250 [ 432.797251][ T31] ? __asan_memcpy+0x40/0x70 [ 432.801951][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.807156][ T31] ? __pfx__printk+0x10/0x10 [ 432.811767][ T31] vpanic+0x281/0x750 [ 432.815758][ T31] ? __pfx_vpanic+0x10/0x10 [ 432.820286][ T31] ? preempt_schedule+0xae/0xc0 [ 432.825157][ T31] ? preempt_schedule_common+0x83/0xd0 [ 432.830653][ T31] panic+0xb9/0xc0 [ 432.834394][ T31] ? __pfx_panic+0x10/0x10 [ 432.838910][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 432.844310][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 432.850474][ T31] watchdog+0xfd2/0xfe0 [ 432.854648][ T31] ? watchdog+0x1de/0xfe0 [ 432.858991][ T31] kthread+0x70e/0x8a0 [ 432.863070][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.867762][ T31] ? __pfx_kthread+0x10/0x10 [ 432.872362][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.877574][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.882782][ T31] ? __pfx_kthread+0x10/0x10 [ 432.887378][ T31] ret_from_fork+0x3fc/0x770 [ 432.891985][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.897107][ T31] ? __switch_to_asm+0x39/0x70 [ 432.901877][ T31] ? __switch_to_asm+0x33/0x70 [ 432.906667][ T31] ? __pfx_kthread+0x10/0x10 [ 432.911284][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.916088][ T31] [ 432.919523][ T31] Kernel Offset: disabled [ 432.923860][ T31] Rebooting in 86400 seconds..