last executing test programs: 25.884562841s ago: executing program 0 (id=753): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a074edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3}, &(0x7f0000000140), &(0x7f0000000000)='%pI4 \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x226, 0xffffffff, 0x1323, 0xe, 0xdf0, 0x4, 0x10000, {0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x9}}, 0x80000001, 0x4b, 0x7fffffff, 0x2, 0x3}}, &(0x7f0000000840)=0xb0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0) 25.587857337s ago: executing program 0 (id=758): r0 = socket(0x1d, 0x2, 0x6) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000001100)=0x8) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x2, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) 25.361609616s ago: executing program 0 (id=762): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0xfffffffffffffffd, &(0x7f0000000340)=0x33) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r5, r6, 0x0, 0x3, &(0x7f0000000140)='(@\x00'}, 0x30) r7 = socket(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000001bbbbbbbbbbbb00000600000086dd67f846"], 0x62) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) bind$alg(r12, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r11], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0xfffffffe, 0x4) 23.767488191s ago: executing program 0 (id=777): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029000f"], 0x18}}], 0x2, 0x4001) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r2 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xffa6, 0x7, 0x8, 0xcfb}, {0x1a5, 0x0, 0x9, 0x5}, {0x4, 0x5, 0xa, 0x9}, {0xa, 0xd, 0x8a, 0xf0}]}) splice(r2, 0x0, r3, 0x0, 0xf3e, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8b}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_eeprom={0xc, 0x7, 0x7f}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x8, 0x3, 0x2, @mcast2, @empty, 0x7, 0x7800, 0xffffffff, 0x8}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0139eabd7000fddbdf252700000011000300", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x4008000) r10 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20.539328342s ago: executing program 0 (id=801): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="9a2e8f8801"], 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 20.392609569s ago: executing program 1 (id=802): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x5, &(0x7f0000000840)=[{0x6, 0x0, 0x0, 0x2}, {0xfff6, 0xa, 0x9, 0x8001}, {0x4, 0x14, 0x0, 0x400}, {0xb, 0x7, 0xf8, 0xa}, {0x9, 0x80, 0x31, 0x9}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f00000001c0)=0x100, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000880)=@ethtool_rxfh={0x0, 0xa, 0x5, 0xc, 0x7, "240486", 0x3}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'geneve0\x00', 0x1000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x38, 0x3c, 0x0, @private0, @local, {[@hopopts={0x3b, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$TUNSETVNETLE(r4, 0x400454dc, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001900010000000000000000000a0000000000000000000000140005000000000000000000000000000000000865fded0ad44aaf5b5428bdb2e36984ba"], 0x30}}, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000012000103"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) read(r0, &(0x7f0000000240)=""/142, 0x8e) 20.302608009s ago: executing program 0 (id=804): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000240)='GPL\x00', 0x1}, 0x90) 19.782985212s ago: executing program 2 (id=809): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000200)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 19.584518575s ago: executing program 2 (id=811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, "89fd17", 0x14, 0x6, 0x1, @mcast2, @private2, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x21, 0x6, 0x0, 0x1}}}}}}}}, 0x4e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="50010000100013070000000000000024ce000001000000000000000000000000e0000081000000000000000000000000000000000000e3c2fe7aa8b53509000000800a1d1a52da9fef578f49e861a10b83dcd41bcbb52d3385be72f7747b637acfbf96c0cd0cf77872811d1cc2cbbb6e83842039e7b648558804", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000006000010078636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000008e948fe8a078aed61eafdf6c3ac48365183721a85750f1"], 0x150}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x20000044) 19.416897493s ago: executing program 1 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}]}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) r10 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r10, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) (async) r11 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) r12 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r12, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) r13 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$netlink(0x10, 0x3, 0x10) 19.360729592s ago: executing program 2 (id=815): getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x10}, &(0x7f00000000c0)=0x8) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x6, 0x100}, 0xc) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, 0x1, 0x8, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x59}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x63}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x798f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x488d3}, 0x4004000) (async) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x800) recvfrom$x25(r3, &(0x7f0000000280)=""/155, 0x9b, 0x2043, &(0x7f0000000340)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) 19.27289861s ago: executing program 1 (id=817): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000)="3b3f42edecab514851c1178e1ec727306213165052e5b4b9f232f94af9f7999e666239bd44e9503fd65de34c07ec6b192aa43074cad96a9c9c758dd396f849300b2f2461e9fe8bf5045ba95c906ea650f76d1d0a225092d1e960f05cf817f416517d1854ee26bf65c73f16c0f4634c5ec3832502a9f52eee7a26add659696b02c56eaeaa2ae45df43a813b1dc8023e028ac302436ba60c28e5575949589eb2ce0e5a6d", &(0x7f0000000200)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r1, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r0}, 0x20) 19.204714558s ago: executing program 2 (id=818): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x208001}, 0x8) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 19.072229542s ago: executing program 1 (id=821): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x100, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa87a089}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x15}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x120, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda5d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa760}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5812}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8084) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00\x00\x00\x00 '}) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000300)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "0e50bed978329bfad3bc6a98286dc14a9e2f018f16f5fb0eebf829de5a6b00da", 0xfff, 0x97a, 0x8fb1ab7d, 0x26e6}, 0x3c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r9 = socket$phonet(0x23, 0x2, 0x1) r10 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r10, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r11}}}], 0x20, 0x50}, 0x40880) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e21, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x0, 0x87, r6, r11}, {0x9, 0x81, 0x8, 0x8, 0x0, 0x0, 0x7, 0x8000000000000000}, {0x8000000000000001, 0x6, 0x685, 0x1}, 0x1, 0x3, 0x2, 0x1, 0x3, 0x1}, {{@in=@local, 0x4d5, 0xff}, 0xa, @in6=@mcast2, 0x3502, 0x3, 0x1, 0x7, 0x7, 0x4, 0x81}}, 0xe8) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x28c, r12, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_OURS={0x238, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3800000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x73, 0x4, "2cd3893cccb1b091c5bb804110bc3b38bf9de831c442f59cb4bd7b046195d2b1ef4a71b2ed683db0022588692e660cb13f15b51aa2e7c84ec0c2ed0f216e8e3ffe3e1079823b2d017e916ab033f3eaf37f1895c9bb65645e455b4fc326d12b33a97c3dda0e50ae7911b8154c5ee63c"}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "c5f789c5ad8577da82d42a4cb9f6b6f68c549c398132c2967db3d2bb15f386a42100551f6c7c8ea405c56aa6316e856b60755dc57d46b6bbc2f657f43961ebfc8130ea38506d916635d12a6919ae2521b08aca907c312570387f4d0a04ff0f7cd7cd26b55363ec3b4b7aed1858ddce0c2fec7f037d922a588ba96801de5336df33f1f311114b1ebb8cce152199ea25d2192321fbf2a43b454e5f293b6b8d638c5d53a5ec47c561901484bab35e429c0098f89f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "812bce10f55d520b584210419de19f18fe389312893080e66d0188663f78e969f7657d9b97fd3b0923ed544663c55b2495881f1a39eed40fde"}, @ETHTOOL_A_BITSET_VALUE={0x92, 0x4, "dcb150a433f72525c291726ec175133dfc5eaaef972fca00055cd0b6aeee1b7af69cedfe24fabc4e3d36316c20ff089c836b85df1909850ea9f4a316aa35825fa4950725f76867339d1a062c01a1756eafc4f4fecefb76fbc04dfce3fdbfdb97bb85cf0ff30746db81e1fea51c9b23e1b04595af8f5bbc2344a26cd5adfc7effb6988c51fee7401f9b98b6752b94"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}]}, 0x28c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 18.976799985s ago: executing program 2 (id=822): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) 18.672248961s ago: executing program 2 (id=826): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40000100) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40000100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x38, r12, 0x8d61ddcfedb48df, 0xfffffffd, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@private1}, &(0x7f0000000140)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2080005, r14}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x1, 0x200, 0xfffffffd, {{0x18, 0x4, 0x2, 0x29, 0x60, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x8, [{@remote, 0x80000000}, {@broadcast, 0x9}]}, @lsrr={0x83, 0x1b, 0x58, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010102]}, @rr={0x7, 0xb, 0xe2, [@rand_addr=0x64010100, @broadcast]}, @generic={0x83, 0x2}, @lsrr={0x83, 0x7, 0xda, [@local]}, @generic={0x7, 0x9, "9943b861f654f7"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000a000500aaaaaaaaaabb0000080009"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 18.061626498s ago: executing program 1 (id=833): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60e3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r1, 0x0, 0x0, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.639407519s ago: executing program 1 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x3, 0x3c5a, 0x2, 0x3}, @eth={@multicast, @multicast, @void, {@canfd={0xd, {{0x2}, 0x7, 0x2, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x897}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='xen_mc_entry\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x3}, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000240), &(0x7f0000000340)='%pB \x00'}, 0x20) 17.244616956s ago: executing program 4 (id=839): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040), 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000659b7b07f8baac927f94af001c00128009000100766c616e000000000c00028006", @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 17.077301673s ago: executing program 4 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40042}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 16.948774599s ago: executing program 4 (id=843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) listen(r1, 0x800803fc) shutdown(r1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000024c0)=0x7d, 0x4) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0xb1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 16.915300208s ago: executing program 4 (id=845): r0 = socket(0xa, 0x2400000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b70200000000e6ccbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe02000000850000001a000000b7000000100000009500000000000000455781a5fee65e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde43a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d1106fb0289ce67a66afd92c3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a060000009b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece6d311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da326018362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f707777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee23483508818b897e3b677d3d342640e328504ae2dbf8fe1d704765de74891f7c8dae85739c50409c62040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c1b7d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5f001000000100008000000000ed6f6663677df37de0ec0d0f548b273940be5d1fe0aae14d1a76e0741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ce0000000000000000000000000000000064d3210f806a4877e73c19072e358da1cdbef27967e918e6f2bab4a78ce0103a91789340b00db45df429d650e2f6acfbf9bf2f1b23064f3e60a9ded23b652f110940813a14c97abc84ab3cf728efd94ba2895a0884e7f7c53bc60d1b9768a979929055be8565b8a15dffc8692476ff03963b626afbc18750629666d1f449f02271064768c0731aeccb2c342ae3fa9956354e847f086eee8cd78617ad6ae28f121b23c1128b78f521eea8c487ae31f9112db0e671dd47d95ea9653e51da8c99a996656149a65f8e88032ddf35717407"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffffe3, 0x0, 0x1, 0x0, 0x0, 0x24018891}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1044}, 0x2004000c) sendmsg$nl_route(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x18, 0x100, 0x70bd26, 0x0, {0x2, 0x60, 0x124, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x4040000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) socket(0xa, 0x2400000001, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) (async) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffffe3, 0x0, 0x1, 0x0, 0x0, 0x24018891}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1044}, 0x2004000c) (async) sendmsg$nl_route(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x18, 0x100, 0x70bd26, 0x0, {0x2, 0x60, 0x124, 0x0, 0xfe}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x4040000) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) (async) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) (async) 16.784275237s ago: executing program 3 (id=846): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0xffffffff, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}]}, 0x70}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0xffffffff, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}]}, 0x70}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r2, 0x0, 0x0, 0x40002042, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000fbdbdf2501000000080000000000000014000480050003000100000005000300060000000800020002000000fb8cdc2f1b698bb8b6f7818a7d6440f3be17f9d1be55e3311d83050a066462bf7c3b3d7fcc76f4dc957317ecfe7e0fc12cc8443314a01b9b5f4b411c472d0b143a33fa9c6e73e02bae70bbe83f22426b9fed20a22f48fa057e360b1a4559f67cc0acff1a419a1c8de6458500000000ceefcf630df19861c1ffc42fce7dd8b1ca02021d89bac2285cd389c8363115d08c36559f842a29f054af76cbc6312c4a15f213db94607326a05fc3c9207aa362a156c005e700"/243], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030303"], 0x20}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x204, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x299fd704}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d098f9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69067054}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29959974}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21b7e25}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbbf36a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d509f5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fc85cce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c9c7518}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ee4adca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ce93174}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61d35221}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x215fee2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33d37727}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fdbefd6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ab1ec90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46e0ba1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf35799f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb09b778}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56804424}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35c1989b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e26295a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79e2be09}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c17c11c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x857a5bc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe7e1f5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c2307fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39c9cfa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4040805}, 0x840) 16.75892477s ago: executing program 4 (id=847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @private}, &(0x7f0000000140)=0xc) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x260, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x154, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x10}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x10000000}, 0x4040001) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(ccm-aes-ce)\x00'}, 0x0, 0x180}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x184}}, 0x0) (rerun: 32) 16.753977781s ago: executing program 3 (id=848): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x1, 0x70bd2d, 0x25dbdbfe, {0x1}, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x3a, 0x10000000000000a1, [{}]}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, r0, 0xffffe000) 16.596549537s ago: executing program 3 (id=849): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0xe000000}]}]}}, 0x0, 0x42}, 0x20) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) listen(r1, 0x0) (async) listen(r0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) 16.540390402s ago: executing program 4 (id=850): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0xfe, 0xbc, 0x2}, {0x3, 0x5, 0x3, 0x2}, {0x5, 0x0, 0x57, 0x1}]}, 0x10) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@default, @rose, @rose, @null, @rose, @remote, @rose, @bcast]}, &(0x7f0000000180)=0x48, 0x80800) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x266, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x101, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xf, 'syz0\x00', @bcast, 0xffff, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000002c0)=0x9) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0x6, @empty, 0xfff}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) setsockopt(r1, 0x0, 0xd, &(0x7f0000000400)="61d47cabb06af61609665684c00b3162999fc9630f6d0f5f96b36548c5d2fa7e9fd0bb1d79997c", 0x27) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, &(0x7f0000000480)=0x10, 0x400) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f00000004c0)={0x8, 'bond_slave_1\x00', {'ipvlan1\x00'}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000580)={r7, @in6={{0xa, 0x4e21, 0x1, @remote, 0x3}}, 0x1, 0xc3}, 0x90) sendto$inet6(r6, &(0x7f0000000640)="01b07be403e1c72d11dee4d27a3a74e39f8674205a664e17747cde30ad16", 0x1e, 0x40, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000680)={@mcast2}, &(0x7f00000006c0)=0x14) connect$inet6(r3, &(0x7f0000000700)={0xa, 0x4e23, 0x800, @private1, 0x4}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x208042, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000780)={'virt_wifi0\x00', @broadcast}) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000007c0)) r9 = socket(0x3, 0x8000b, 0x401) bind$ax25(r9, &(0x7f0000000800)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 16.498585671s ago: executing program 3 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r1, @ANYBLOB="180006"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r4}, &(0x7f0000000140), &(0x7f0000000100)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffff00000000100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r7, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010000000000001000000a000000", @ANYRES32=r3, @ANYBLOB="00005e0014000100fc020000000000fffffffc0000000000"], 0x30}}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) 16.419163289s ago: executing program 3 (id=852): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001380)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x70, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'E[!%)]$.:'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x528e}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x721}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfb0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) 15.496672604s ago: executing program 3 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x20) (async) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611084000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) connect$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0xfffffffffffffffe, {0x1, 0x101, 0x4}, 0x2}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r11) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x1c, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) 4.529874079s ago: executing program 32 (id=804): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000240)='GPL\x00', 0x1}, 0x90) 3.503473421s ago: executing program 33 (id=826): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40000100) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40000100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x38, r12, 0x8d61ddcfedb48df, 0xfffffffd, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@private1}, &(0x7f0000000140)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2080005, r14}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x1, 0x200, 0xfffffffd, {{0x18, 0x4, 0x2, 0x29, 0x60, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x8, [{@remote, 0x80000000}, {@broadcast, 0x9}]}, @lsrr={0x83, 0x1b, 0x58, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010102]}, @rr={0x7, 0xb, 0xe2, [@rand_addr=0x64010100, @broadcast]}, @generic={0x83, 0x2}, @lsrr={0x83, 0x7, 0xda, [@local]}, @generic={0x7, 0x9, "9943b861f654f7"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000a000500aaaaaaaaaabb0000080009"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 2.520812382s ago: executing program 34 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x3, 0x3c5a, 0x2, 0x3}, @eth={@multicast, @multicast, @void, {@canfd={0xd, {{0x2}, 0x7, 0x2, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x897}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='xen_mc_entry\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x3}, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000240), &(0x7f0000000340)='%pB \x00'}, 0x20) 1.491577323s ago: executing program 35 (id=850): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0xfe, 0xbc, 0x2}, {0x3, 0x5, 0x3, 0x2}, {0x5, 0x0, 0x57, 0x1}]}, 0x10) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@default, @rose, @rose, @null, @rose, @remote, @rose, @bcast]}, &(0x7f0000000180)=0x48, 0x80800) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x266, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x101, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xf, 'syz0\x00', @bcast, 0xffff, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000002c0)=0x9) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0x6, @empty, 0xfff}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) setsockopt(r1, 0x0, 0xd, &(0x7f0000000400)="61d47cabb06af61609665684c00b3162999fc9630f6d0f5f96b36548c5d2fa7e9fd0bb1d79997c", 0x27) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, &(0x7f0000000480)=0x10, 0x400) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f00000004c0)={0x8, 'bond_slave_1\x00', {'ipvlan1\x00'}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000580)={r7, @in6={{0xa, 0x4e21, 0x1, @remote, 0x3}}, 0x1, 0xc3}, 0x90) sendto$inet6(r6, &(0x7f0000000640)="01b07be403e1c72d11dee4d27a3a74e39f8674205a664e17747cde30ad16", 0x1e, 0x40, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000680)={@mcast2}, &(0x7f00000006c0)=0x14) connect$inet6(r3, &(0x7f0000000700)={0xa, 0x4e23, 0x800, @private1, 0x4}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x208042, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000780)={'virt_wifi0\x00', @broadcast}) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000007c0)) r9 = socket(0x3, 0x8000b, 0x401) bind$ax25(r9, &(0x7f0000000800)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 0s ago: executing program 36 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x20) (async) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611084000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) connect$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0xfffffffffffffffe, {0x1, 0x101, 0x4}, 0x2}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r11) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x1c, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 87.159178][ T5852] cgroup: Unknown subsys name 'net' [ 87.287028][ T5852] cgroup: Unknown subsys name 'cpuset' [ 87.300596][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.168920][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.962476][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.982835][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.003695][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.016827][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.027489][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.039891][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.052585][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.063360][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.074482][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.084885][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.095081][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.106561][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.112500][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.121009][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.130582][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.147799][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.151580][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.159371][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.178578][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.182478][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.188500][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.199557][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.214151][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.221832][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.245186][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.983507][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 93.071052][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 93.330008][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 93.419727][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 93.467252][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 93.481277][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.491167][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.504104][ T5862] bridge_slave_0: entered allmulticast mode [ 93.514651][ T5862] bridge_slave_0: entered promiscuous mode [ 93.579960][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.588270][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.600246][ T5862] bridge_slave_1: entered allmulticast mode [ 93.612109][ T5862] bridge_slave_1: entered promiscuous mode [ 93.641417][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.654905][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.666663][ T5867] bridge_slave_0: entered allmulticast mode [ 93.677208][ T5867] bridge_slave_0: entered promiscuous mode [ 93.757531][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.767512][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.777532][ T5867] bridge_slave_1: entered allmulticast mode [ 93.787409][ T5867] bridge_slave_1: entered promiscuous mode [ 93.824649][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.839473][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.947222][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.970147][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.070979][ T5862] team0: Port device team_slave_0 added [ 94.083602][ T5862] team0: Port device team_slave_1 added [ 94.108003][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.116810][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.124737][ T5871] bridge_slave_0: entered allmulticast mode [ 94.133108][ T5871] bridge_slave_0: entered promiscuous mode [ 94.186150][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.196472][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.206513][ T5868] bridge_slave_0: entered allmulticast mode [ 94.216016][ T5868] bridge_slave_0: entered promiscuous mode [ 94.225890][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.234551][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.243579][ T5868] bridge_slave_1: entered allmulticast mode [ 94.253646][ T5868] bridge_slave_1: entered promiscuous mode [ 94.261597][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.272331][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.278719][ T5878] Bluetooth: hci1: command tx timeout [ 94.282927][ T51] Bluetooth: hci0: command tx timeout [ 94.289736][ T5878] Bluetooth: hci3: command tx timeout [ 94.296901][ T5871] bridge_slave_1: entered allmulticast mode [ 94.312921][ T5871] bridge_slave_1: entered promiscuous mode [ 94.324026][ T5867] team0: Port device team_slave_0 added [ 94.336618][ T5867] team0: Port device team_slave_1 added [ 94.343511][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.352453][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.355878][ T5878] Bluetooth: hci4: command tx timeout [ 94.367512][ T5878] Bluetooth: hci2: command tx timeout [ 94.369848][ T5873] bridge_slave_0: entered allmulticast mode [ 94.382005][ T5873] bridge_slave_0: entered promiscuous mode [ 94.479482][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.490913][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.502211][ T5873] bridge_slave_1: entered allmulticast mode [ 94.512389][ T5873] bridge_slave_1: entered promiscuous mode [ 94.522371][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.531112][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.565485][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.583595][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.599860][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.627897][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.636150][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.666959][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.681561][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.689840][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.717188][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.748610][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.757697][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.790870][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.834542][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.853460][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.879985][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.893085][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.937330][ T5868] team0: Port device team_slave_0 added [ 94.950209][ T5868] team0: Port device team_slave_1 added [ 95.015955][ T5873] team0: Port device team_slave_0 added [ 95.079442][ T5871] team0: Port device team_slave_0 added [ 95.091017][ T5871] team0: Port device team_slave_1 added [ 95.112270][ T5873] team0: Port device team_slave_1 added [ 95.204260][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.214402][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.244823][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.266125][ T5867] hsr_slave_0: entered promiscuous mode [ 95.273520][ T5867] hsr_slave_1: entered promiscuous mode [ 95.286940][ T5862] hsr_slave_0: entered promiscuous mode [ 95.295864][ T5862] hsr_slave_1: entered promiscuous mode [ 95.303870][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 95.312162][ T5862] Cannot create hsr debugfs directory [ 95.350350][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.360671][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.390346][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.486879][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.496488][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.532088][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.552205][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.560985][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.596635][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.612712][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.621118][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.651129][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.665598][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.673127][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.709154][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.924893][ T5868] hsr_slave_0: entered promiscuous mode [ 95.936242][ T5868] hsr_slave_1: entered promiscuous mode [ 95.943533][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 95.951923][ T5868] Cannot create hsr debugfs directory [ 96.043313][ T5871] hsr_slave_0: entered promiscuous mode [ 96.053614][ T5871] hsr_slave_1: entered promiscuous mode [ 96.060578][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 96.068131][ T5871] Cannot create hsr debugfs directory [ 96.106684][ T5873] hsr_slave_0: entered promiscuous mode [ 96.113940][ T5873] hsr_slave_1: entered promiscuous mode [ 96.122896][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 96.130592][ T5873] Cannot create hsr debugfs directory [ 96.355515][ T5878] Bluetooth: hci3: command tx timeout [ 96.355766][ T51] Bluetooth: hci0: command tx timeout [ 96.361789][ T5878] Bluetooth: hci1: command tx timeout [ 96.435669][ T5878] Bluetooth: hci4: command tx timeout [ 96.435678][ T51] Bluetooth: hci2: command tx timeout [ 96.483920][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.502598][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.550975][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.618645][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.789159][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.804609][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.817164][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.836912][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.967747][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.986931][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.018917][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.051532][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.124824][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.143155][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.172086][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.202198][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.253586][ T979] cfg80211: failed to load regulatory.db [ 97.291557][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.320249][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.337037][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.351022][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.426643][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.454608][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.517515][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.566199][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.575917][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.592828][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.619833][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.632317][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.673353][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.682766][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.724716][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.765260][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.775720][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.842252][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.867569][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.898301][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.907983][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.945960][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.955711][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.971524][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.997109][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.080785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.090400][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.133311][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.141223][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.173886][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.252898][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.261548][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.304161][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.313178][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.411993][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.437303][ T5878] Bluetooth: hci1: command tx timeout [ 98.437324][ T51] Bluetooth: hci0: command tx timeout [ 98.437363][ T51] Bluetooth: hci3: command tx timeout [ 98.515157][ T51] Bluetooth: hci2: command tx timeout [ 98.522305][ T5866] Bluetooth: hci4: command tx timeout [ 98.940368][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.050965][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.244092][ T5868] veth0_vlan: entered promiscuous mode [ 99.292898][ T5868] veth1_vlan: entered promiscuous mode [ 99.343938][ T5862] veth0_vlan: entered promiscuous mode [ 99.363551][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.411850][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.432220][ T5862] veth1_vlan: entered promiscuous mode [ 99.508167][ T5868] veth0_macvtap: entered promiscuous mode [ 99.536141][ T5868] veth1_macvtap: entered promiscuous mode [ 99.596831][ T5871] veth0_vlan: entered promiscuous mode [ 99.621237][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.640400][ T5862] veth0_macvtap: entered promiscuous mode [ 99.656732][ T5873] veth0_vlan: entered promiscuous mode [ 99.678771][ T5862] veth1_macvtap: entered promiscuous mode [ 99.688709][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.724250][ T5871] veth1_vlan: entered promiscuous mode [ 99.742335][ T5867] veth0_vlan: entered promiscuous mode [ 99.761705][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.784369][ T3514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.797094][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.820787][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.831615][ T5873] veth1_vlan: entered promiscuous mode [ 99.848315][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.860039][ T5867] veth1_vlan: entered promiscuous mode [ 99.881568][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.951342][ T5871] veth0_macvtap: entered promiscuous mode [ 99.990801][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.003839][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.033814][ T5871] veth1_macvtap: entered promiscuous mode [ 100.046010][ T3514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.057602][ T3514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.139881][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.151714][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.167445][ T5873] veth0_macvtap: entered promiscuous mode [ 100.187912][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.227852][ T5873] veth1_macvtap: entered promiscuous mode [ 100.253392][ T5867] veth0_macvtap: entered promiscuous mode [ 100.253526][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.275622][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.286781][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.338609][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.357490][ T5867] veth1_macvtap: entered promiscuous mode [ 100.375075][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.395980][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.409452][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.431959][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.466882][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.481712][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.516778][ T5866] Bluetooth: hci1: command tx timeout [ 100.519678][ T51] Bluetooth: hci3: command tx timeout [ 100.522785][ T5878] Bluetooth: hci0: command tx timeout [ 100.544292][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.561878][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.576810][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.595828][ T5866] Bluetooth: hci2: command tx timeout [ 100.601854][ T5878] Bluetooth: hci4: command tx timeout [ 100.670769][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.698883][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.739586][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.775873][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.822775][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.854548][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.914497][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.952579][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.013554][ T5990] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 101.114374][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.140229][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.144574][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.168314][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.239106][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.355502][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.378216][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.396350][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.422492][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.533521][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.591264][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.707596][ T6002] sctp: [Deprecated]: syz.0.9 (pid 6002) Use of int in max_burst socket option. [ 101.707596][ T6002] Use struct sctp_assoc_value instead [ 101.723960][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.740237][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.764552][ T6002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 101.774720][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.812442][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.181373][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 102.201441][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 102.262581][ T6016] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 102.367074][ T6016] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.419695][ T6016] bond0: (slave team0): Enslaving as an active interface with an up link [ 102.649035][ T6033] netlink: 'syz.2.14': attribute type 25 has an invalid length. [ 102.773452][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 102.811633][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 102.966110][ T6039] geneve2: entered promiscuous mode [ 103.014250][ T6047] netlink: 'syz.0.18': attribute type 27 has an invalid length. [ 103.175832][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 103.402062][ T6057] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 103.447684][ T6065] netlink: set zone limit has 8 unknown bytes [ 103.493695][ T6065] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 103.501660][ T6067] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 103.540500][ T6059] veth3: entered promiscuous mode [ 103.554855][ T6059] bond0: (slave veth3): Enslaving as an active interface with an up link [ 103.804896][ T6057] veth5: entered promiscuous mode [ 103.819280][ T6057] bond0: (slave veth5): Enslaving as an active interface with an up link [ 103.858220][ T6068] vlan2: entered allmulticast mode [ 103.871146][ T6068] veth1: entered allmulticast mode [ 103.900693][ T6075] netlink: 168 bytes leftover after parsing attributes in process `syz.2.24'. [ 104.305998][ T6079] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 104.600392][ T6098] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 104.792625][ T6100] sctp: failed to load transform for md5: -4 [ 104.839780][ T5996] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 104.888792][ T6115] Zero length message leads to an empty skb [ 104.948409][ T5996] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 105.242786][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 105.333745][ T6125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.373488][ T6117] fido_id[6117]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 105.442152][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 105.479351][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 105.641950][ T6126] bridge_slave_1: left allmulticast mode [ 105.695849][ T6126] bridge_slave_1: left promiscuous mode [ 105.708095][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.774046][ T6126] bridge_slave_0: left allmulticast mode [ 105.787207][ T6126] bridge_slave_0: left promiscuous mode [ 105.806223][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.003752][ T6132] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 106.151172][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.176692][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.211288][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.249226][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.418846][ T6150] tipc: Started in network mode [ 106.424239][ T6150] tipc: Node identity f282e568123d, cluster identity 4711 [ 106.453461][ T6150] tipc: Enabled bearer , priority 0 [ 106.491752][ T6150] syzkaller0: entered promiscuous mode [ 106.523562][ T6150] syzkaller0: entered allmulticast mode [ 106.657540][ T6150] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 106.728307][ T6150] tipc: Resetting bearer [ 106.741199][ T6149] tipc: Resetting bearer [ 106.762798][ T6149] tipc: Disabling bearer [ 107.236592][ T6184] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.698468][ T6197] wg1: entered promiscuous mode [ 109.122890][ T6217] __nla_validate_parse: 1 callbacks suppressed [ 109.122912][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 109.162556][ T6187] infiniband syz!: set active [ 109.200886][ T6187] infiniband syz!: added team_slave_0 [ 109.217838][ T6217] trusted_key: syz.4.63 sent an empty control message without MSG_MORE. [ 109.262149][ T6187] syz!: rxe_create_cq: returned err = -12 [ 109.291464][ T6187] infiniband syz!: Couldn't create ib_mad CQ [ 109.315954][ T6187] infiniband syz!: Couldn't open port 1 [ 109.444114][ T6187] RDS/IB: syz!: added [ 109.482844][ T6187] smc: adding ib device syz! with port count 1 [ 109.529048][ T6187] smc: ib device syz! port 1 has pnetid [ 109.543543][ T6201] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.551628][ T6201] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 109.661917][ T6201] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.703898][ T6201] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 109.811103][ T6201] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.827418][ T6201] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 109.887972][ T6201] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.898704][ T6201] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 109.975179][ T6201] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.981183][ T6201] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 110.172159][ T6251] IPVS: length: 85 != 8 [ 110.236424][ T6253] netlink: 80 bytes leftover after parsing attributes in process `syz.0.72'. [ 111.613332][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 111.693354][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 111.785305][ T6297] warning: `syz.0.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.455166][ T6311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.88'. [ 114.470549][ T6314] xt_limit: Overflow, try lower: 271964/0 [ 114.627298][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 114.647973][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 114.666734][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 114.696769][ T6324] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.91'. [ 114.732536][ T6316] bridge0: port 3(vlan2) entered blocking state [ 114.740784][ T6324] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.91'. [ 114.775114][ T6316] bridge0: port 3(vlan2) entered disabled state [ 114.812193][ T6316] vlan2: entered allmulticast mode [ 114.845223][ T6316] bridge0: entered allmulticast mode [ 114.890639][ T6316] vlan2: left allmulticast mode [ 114.916552][ T6316] bridge0: left allmulticast mode [ 115.255368][ T6342] netlink: 256 bytes leftover after parsing attributes in process `syz.3.95'. [ 115.282718][ T6342] netlink: 'syz.3.95': attribute type 9 has an invalid length. [ 115.717082][ T6361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.793239][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 116.023146][ T6187] syz.1.54 (6187) used greatest stack depth: 19944 bytes left [ 116.101525][ T6373] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 116.216526][ T6380] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 116.253307][ T6373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.357698][ T6386] vlan2: entered allmulticast mode [ 116.425368][ T6386] veth1: entered allmulticast mode [ 116.448136][ T6387] netlink: 244 bytes leftover after parsing attributes in process `syz.3.102'. [ 116.723919][ T5876] IPVS: starting estimator thread 0... [ 116.747213][ T6398] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 116.818592][ T6399] IPVS: using max 24 ests per chain, 57600 per kthread [ 117.130045][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 117.620892][ T6429] macvtap1: entered promiscuous mode [ 117.626506][ T6429] vlan0: entered promiscuous mode [ 117.632109][ T6429] macvtap1: entered allmulticast mode [ 117.665976][ T6429] vlan0: entered allmulticast mode [ 117.673227][ T6429] veth0_vlan: entered allmulticast mode [ 118.200629][ T6468] netlink: 'syz.4.124': attribute type 2 has an invalid length. [ 118.392465][ T6482] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 118.628919][ T6490] sctp: [Deprecated]: syz.4.129 (pid 6490) Use of int in max_burst socket option deprecated. [ 118.628919][ T6490] Use struct sctp_assoc_value instead [ 118.831705][ T6502] netlink: 'syz.0.132': attribute type 49 has an invalid length. [ 119.182583][ T30] audit: type=1800 audit(1755186804.211:2): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.137" name="memory.events" dev="tmpfs" ino=197 res=0 errno=0 [ 119.412927][ T6528] vlan2: entered allmulticast mode [ 119.419285][ T6528] bond0: entered allmulticast mode [ 119.439319][ T6528] bond_slave_0: entered allmulticast mode [ 119.459663][ T6528] bond_slave_1: entered allmulticast mode [ 119.673546][ T6537] nbd: socks must be embedded in a SOCK_ITEM attr [ 119.748398][ T6541] netlink: 'syz.0.142': attribute type 2 has an invalid length. [ 120.146700][ T6563] lo: entered allmulticast mode [ 120.164502][ T6563] lo: left allmulticast mode [ 120.205938][ T6562] __nla_validate_parse: 5 callbacks suppressed [ 120.205957][ T6562] netlink: 44 bytes leftover after parsing attributes in process `syz.2.149'. [ 120.296603][ T6565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.150'. [ 120.324604][ T6565] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 120.590762][ T6578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.152'. [ 121.645704][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 121.700656][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.164'. [ 121.778725][ T6625] gre1: entered promiscuous mode [ 121.796273][ T6625] gre1: entered allmulticast mode [ 121.886055][ T6635] netlink: 'syz.1.167': attribute type 7 has an invalid length. [ 122.252535][ T6651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.173'. [ 122.624604][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'. [ 123.243860][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 123.637662][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 123.866945][ T6703] netlink: 'syz.3.189': attribute type 3 has an invalid length. [ 123.879373][ T6703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.014712][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 124.052136][ T6711] bridge_slave_1: left allmulticast mode [ 124.063987][ T6711] bridge_slave_1: left promiscuous mode [ 124.083016][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.100270][ T6711] bridge_slave_0: left allmulticast mode [ 124.106616][ T6711] bridge_slave_0: left promiscuous mode [ 124.112517][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.365646][ T6722] bridge0: entered promiscuous mode [ 124.371188][ T6722] bridge0: entered allmulticast mode [ 124.542117][ T6729] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 125.085568][ T6749] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 125.512956][ T6757] __nla_validate_parse: 2 callbacks suppressed [ 125.512979][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 125.746464][ T6765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.204'. [ 125.824879][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.204'. [ 126.033017][ T30] audit: type=1804 audit(1755186811.061:3): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.205" name="/newroot/39/cgroup.controllers" dev="tmpfs" ino=214 res=1 errno=0 [ 126.079593][ T30] audit: type=1800 audit(1755186811.061:4): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.205" name="cgroup.controllers" dev="tmpfs" ino=214 res=0 errno=0 [ 126.421139][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 126.449365][ T6788] netlink: 64 bytes leftover after parsing attributes in process `syz.3.210'. [ 126.528794][ T6783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.536610][ T6785] bond0: option ad_select: unable to set because the bond device is up [ 126.573622][ T6793] vlan3: entered allmulticast mode [ 126.600858][ T6793] bond1: entered allmulticast mode [ 126.672696][ T6792] tipc: Enabling of bearer rejected, failed to enable media [ 126.699810][ T6797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.968350][ T6812] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 127.001280][ T6812] nbd: error processing sock list [ 127.013706][ T6812] block nbd0: shutting down sockets [ 127.036194][ T6816] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 127.063973][ T6816] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 127.105609][ T6816] netlink: 188 bytes leftover after parsing attributes in process `syz.3.214'. [ 127.142123][ T6816] NCSI netlink: No device for ifindex 458760 [ 127.146836][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 127.160910][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 127.350848][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 127.455572][ T6830] netlink: 'syz.3.220': attribute type 13 has an invalid length. [ 127.505777][ T6830] veth0_macvtap: left promiscuous mode [ 127.521779][ T6830] macvtap0: entered allmulticast mode [ 127.562641][ T6830] macvtap0: refused to change device tx_queue_len [ 128.825655][ T6868] netlink: 72 bytes leftover after parsing attributes in process `syz.0.230'. [ 129.747882][ T6903] openvswitch: netlink: Missing key (keys=40, expected=100) [ 129.981323][ T6914] tipc: Can't bind to reserved service type 3 [ 130.028793][ T30] audit: type=1107 audit(1755186815.061:5): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='WW^ⰋUT]3 rejected, failed to enable media [ 130.612135][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.641073][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.842035][ T6953] __nla_validate_parse: 5 callbacks suppressed [ 130.842081][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 130.861140][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 131.042648][ T6957] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 131.069999][ T6959] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 131.532227][ T6985] Bluetooth: MGMT ver 1.23 [ 131.548879][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 132.067656][ T7007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.274'. [ 132.241299][ T7013] netlink: 9 bytes leftover after parsing attributes in process `syz.0.276'. [ 132.254325][ T7013] gretap0: entered promiscuous mode [ 132.277845][ T7013] netlink: 5 bytes leftover after parsing attributes in process `syz.0.276'. [ 132.290314][ T7013] 0{X: renamed from gretap0 [ 132.314630][ T7013] 0{X: left promiscuous mode [ 132.327311][ T7013] 0{X: entered allmulticast mode [ 132.337700][ T7013] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 132.913438][ T7029] netlink: 220 bytes leftover after parsing attributes in process `syz.4.281'. [ 133.085690][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.092315][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.114457][ T7036] bond0: entered promiscuous mode [ 133.137944][ T7036] bond_slave_0: entered promiscuous mode [ 133.184572][ T7036] bond_slave_1: entered promiscuous mode [ 133.221558][ T7047] netlink: 'syz.0.285': attribute type 16 has an invalid length. [ 133.257313][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 133.276665][ T7047] netlink: 'syz.0.285': attribute type 17 has an invalid length. [ 133.321709][ T7047] 0{X: left allmulticast mode [ 133.329486][ T7052] netlink: 68 bytes leftover after parsing attributes in process `syz.4.290'. [ 133.492922][ T7047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.033166][ T7082] netlink: 'syz.2.299': attribute type 32 has an invalid length. [ 134.124271][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 134.310702][ T7090] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 134.482402][ T7090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.555587][ T7101] xt_limit: Overflow, try lower: 271964/0 [ 134.563560][ T7090] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 134.573594][ T7090] netlink: 'syz.1.302': attribute type 2 has an invalid length. [ 134.586324][ T7090] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 134.604429][ T7090] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 134.623741][ T7090] netlink: 'syz.1.302': attribute type 2 has an invalid length. [ 134.898470][ T7096] veth7: entered promiscuous mode [ 134.946436][ T7096] bond1: (slave veth7): Enslaving as an active interface with a down link [ 136.053204][ T7163] __nla_validate_parse: 4 callbacks suppressed [ 136.053226][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 136.086296][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 136.301084][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.326'. [ 136.415713][ T7172] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.326'. [ 136.429656][ T7176] netlink: 'syz.0.327': attribute type 2 has an invalid length. [ 136.776041][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 136.857209][ T7188] netlink: 14 bytes leftover after parsing attributes in process `syz.1.331'. [ 136.893580][ T7188] hsr_slave_0: left promiscuous mode [ 136.928893][ T7188] hsr_slave_1: left promiscuous mode [ 137.520435][ T7211] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 137.576805][ T7215] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 137.631535][ T7215] bond0: (slave wlan1): Opening slave failed [ 137.681436][ T7216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.337'. [ 137.910833][ T7229] sit2: entered promiscuous mode [ 137.955377][ T7229] sit2: entered allmulticast mode [ 138.164452][ T7232] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.344'. [ 138.629087][ T7243] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 138.649903][ T7243] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.751511][ T7251] IPVS: set_ctl: invalid protocol: 112 10.1.1.1:20000 [ 138.997910][ T7259] netdevsim netdevsim4 : renamed from netdevsim0 [ 139.023194][ T7259] netdevsim netdevsim4 : left promiscuous mode [ 139.106679][ T7266] validate_nla: 3 callbacks suppressed [ 139.106699][ T7266] netlink: 'syz.2.358': attribute type 10 has an invalid length. [ 139.136441][ T7266] syz_tun: entered promiscuous mode [ 139.162382][ T7270] netlink: 'syz.2.358': attribute type 10 has an invalid length. [ 139.165456][ T7266] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 139.181018][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.354'. [ 139.215822][ T7270] bond0: (slave wlan1): Opening slave failed [ 139.987593][ T7304] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 140.058454][ T7309] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 140.096401][ T7304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.231975][ T7304] veth5: entered promiscuous mode [ 140.907647][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 141.495739][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.385'. [ 141.985683][ T7389] tipc: Started in network mode [ 141.996855][ T7389] tipc: Node identity 1ad3410a6c15, cluster identity 4711 [ 142.005621][ T7389] tipc: Enabled bearer , priority 0 [ 142.050063][ T7389] tipc: Resetting bearer [ 142.085224][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 142.140594][ T7387] tipc: Disabling bearer [ 142.495385][ T7407] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 142.517736][ T7407] netlink: 236 bytes leftover after parsing attributes in process `syz.3.400'. [ 142.691989][ T7407] xfrm1: entered allmulticast mode [ 142.783156][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.401'. [ 142.810126][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.401'. [ 142.832241][ T7411] netlink: 50 bytes leftover after parsing attributes in process `syz.4.401'. [ 143.422634][ T7442] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 143.441903][ T7442] netlink: 144 bytes leftover after parsing attributes in process `syz.2.409'. [ 143.466515][ T7442] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 143.490591][ T7442] netlink: 'syz.2.409': attribute type 2 has an invalid length. [ 143.512098][ T7442] netlink: 64 bytes leftover after parsing attributes in process `syz.2.409'. [ 143.849344][ T7457] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 144.002677][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'. [ 144.400671][ T7473] vxlan0: left allmulticast mode [ 145.145830][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 145.517739][ T7507] macvlan0: entered allmulticast mode [ 145.536920][ T7507] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 146.113831][ T7535] netlink: 'syz.3.437': attribute type 3 has an invalid length. [ 146.231950][ T7538] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 146.293360][ T7538] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 146.313711][ T7538] gretap1: entered promiscuous mode [ 146.328288][ T7538] gretap1: entered allmulticast mode [ 146.452918][ T7545] netlink: 'syz.1.442': attribute type 4 has an invalid length. [ 146.478722][ T7545] syzkaller1: entered promiscuous mode [ 146.498979][ T7545] syzkaller1: entered allmulticast mode [ 146.590133][ T7550] Driver unsupported XDP return value 0 on prog (id 89) dev N/A, expect packet loss! [ 146.823681][ T7560] tunl0: entered promiscuous mode [ 146.865834][ T7560] netlink: 'syz.2.448': attribute type 3 has an invalid length. [ 146.905073][ T7560] __nla_validate_parse: 3 callbacks suppressed [ 146.905091][ T7560] netlink: 9 bytes leftover after parsing attributes in process `syz.2.448'. [ 146.978060][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 147.034319][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 147.075435][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 149.462491][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.469'. [ 149.511779][ T7627] IPVS: length: 152 != 8 [ 149.555605][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.468'. [ 149.761079][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 150.024791][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 150.103046][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 150.114707][ T7651] netlink: 'syz.0.477': attribute type 10 has an invalid length. [ 150.123800][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 150.140220][ T7656] nbd: must specify at least one socket [ 150.702021][ T7680] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 150.864380][ T7687] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 150.926342][ T1145] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 151.610943][ T7716] pim6reg1: entered promiscuous mode [ 151.679493][ T7716] pim6reg1: entered allmulticast mode [ 151.729389][ T7720] netlink: 'syz.4.497': attribute type 32 has an invalid length. [ 151.754252][ T7720] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 152.024449][ T7725] __nla_validate_parse: 7 callbacks suppressed [ 152.024472][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 152.468837][ T7736] 8021q: VLANs not supported on ip6_vti0 [ 152.492598][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 152.603562][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 152.684472][ T7748] sctp: [Deprecated]: syz.1.506 (pid 7748) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.684472][ T7748] Use struct sctp_sack_info instead [ 152.877275][ T7752] netlink: 'syz.4.508': attribute type 11 has an invalid length. [ 153.924577][ T7801] tipc: Started in network mode [ 153.946913][ T7801] tipc: Node identity 06038827cc8a, cluster identity 4711 [ 153.954410][ T7801] tipc: Enabled bearer , priority 0 [ 154.023205][ T7802] syzkaller0: entered promiscuous mode [ 154.044487][ T7802] syzkaller0: entered allmulticast mode [ 154.148303][ T7802] tipc: Resetting bearer [ 154.240119][ T7802] tipc: Resetting bearer [ 154.334546][ T7802] tipc: Disabling bearer [ 155.210699][ T7849] tipc: Enabling of bearer rejected, failed to enable media [ 155.255353][ T7849] netlink: 'syz.0.533': attribute type 4 has an invalid length. [ 155.511604][ T7861] netlink: 'syz.1.536': attribute type 32 has an invalid length. [ 155.776304][ T7865] netlink: 300 bytes leftover after parsing attributes in process `syz.3.539'. [ 155.843703][ T7865] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 155.890487][ T7865] team0: Device veth1_macvtap failed to register rx_handler [ 156.046693][ T7876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'. [ 156.398397][ T7884] tipc: Enabled bearer , priority 0 [ 156.447693][ T7884] syzkaller0: entered promiscuous mode [ 156.453236][ T7884] syzkaller0: entered allmulticast mode [ 156.579556][ T7882] tipc: Resetting bearer [ 156.618777][ T7882] tipc: Disabling bearer [ 157.183508][ T7910] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 157.239162][ T7910] batman_adv: batadv0: Adding interface: team0 [ 157.308333][ T7910] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.373117][ T7910] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 157.489366][ T7926] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 157.529766][ T7926] netlink: 'syz.1.561': attribute type 3 has an invalid length. [ 157.539904][ T7926] netlink: 224 bytes leftover after parsing attributes in process `syz.1.561'. [ 157.735991][ T7932] veth9: entered promiscuous mode [ 157.755032][ T7932] veth9: entered allmulticast mode [ 157.989125][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 158.015130][ T7946] netlink: 224 bytes leftover after parsing attributes in process `syz.4.565'. [ 158.063630][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 158.228324][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.570'. [ 158.398085][ T7960] netlink: 9 bytes leftover after parsing attributes in process `syz.2.571'. [ 158.409071][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 158.437244][ T7964] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 158.464042][ T7960] gretap0: entered promiscuous mode [ 158.472365][ T30] audit: type=1804 audit(1755186843.501:6): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.574" name="/newroot/111/cgroup.controllers" dev="tmpfs" ino=579 res=1 errno=0 [ 158.497790][ T7965] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 158.516544][ T7971] netlink: 14 bytes leftover after parsing attributes in process `syz.3.575'. [ 158.516963][ T7960] netlink: 5 bytes leftover after parsing attributes in process `syz.2.571'. [ 158.537871][ T30] audit: type=1800 audit(1755186843.501:7): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.574" name="cgroup.controllers" dev="tmpfs" ino=579 res=0 errno=0 [ 158.561241][ T7960] 0{X: renamed from gretap0 [ 158.570063][ T7974] netlink: 'syz.4.572': attribute type 10 has an invalid length. [ 158.594511][ T7960] 0{X: left promiscuous mode [ 158.642083][ T7960] 0{X: entered allmulticast mode [ 158.650944][ T7960] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 158.729349][ T7964] bond0: (slave team0): Releasing backup interface [ 158.749217][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 158.805464][ T7964] bond0: (slave bond_slave_0): Releasing backup interface [ 158.847900][ T7964] bond0: (slave bond_slave_1): Releasing backup interface [ 158.907363][ T7964] team0: Port device team_slave_0 removed [ 158.962026][ T7964] team0: Port device team_slave_1 removed [ 158.987651][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.004805][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.018891][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.036954][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.068368][ T7971] hsr_slave_0: left promiscuous mode [ 159.079550][ T7971] hsr_slave_1: left promiscuous mode [ 159.134369][ T7974] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 159.167932][ T7974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.185889][ T7974] bond0: (slave wlan1): Opening slave failed [ 159.262833][ T7982] vlan2: entered allmulticast mode [ 159.289610][ T7982] bridge0: entered allmulticast mode [ 159.295401][ T7982] bridge4: port 1(vlan2) entered blocking state [ 159.310344][ T7982] bridge4: port 1(vlan2) entered disabled state [ 159.363467][ T7982] vlan2: entered promiscuous mode [ 159.382099][ T7982] bridge0: entered promiscuous mode [ 159.735704][ T8001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.857052][ T8043] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 160.867419][ T8043] syzkaller0: refused to change device tx_queue_len [ 161.401586][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.410536][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.163672][ T8043] veth3: left promiscuous mode [ 162.172652][ T8043] veth5: left promiscuous mode [ 162.195938][ T8043] veth7: left promiscuous mode [ 162.206726][ T8043] sit2: left promiscuous mode [ 162.211512][ T8043] sit2: left allmulticast mode [ 162.219572][ T8043] veth9: left promiscuous mode [ 162.224400][ T8043] veth9: left allmulticast mode [ 162.370413][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.432892][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.461363][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.491595][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.648952][ T8095] __nla_validate_parse: 5 callbacks suppressed [ 162.648973][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.602'. [ 162.967641][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 162.981555][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 163.020534][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 163.098863][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 163.373070][ T8120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.613'. [ 163.421202][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.611'. [ 163.454464][ T8128] netlink: 52 bytes leftover after parsing attributes in process `syz.4.613'. [ 163.516715][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.611'. [ 163.783798][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.619'. [ 163.913067][ T8146] netlink: 'syz.3.620': attribute type 5 has an invalid length. [ 163.999110][ T8151] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 164.069802][ T8153] netlink: 'syz.3.623': attribute type 23 has an invalid length. [ 164.261064][ T8160] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 164.703603][ T8182] batman_adv: batadv0: Removing interface: team0 [ 164.744703][ T8182] bridge_slave_0: left allmulticast mode [ 164.751034][ T8182] bridge_slave_0: left promiscuous mode [ 164.759056][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.780281][ T8182] bridge_slave_1: left allmulticast mode [ 164.790098][ T8182] bridge_slave_1: left promiscuous mode [ 164.798911][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.846754][ T8182] bond0: (slave bond_slave_0): Releasing backup interface [ 164.881052][ T8182] bond0: (slave bond_slave_1): Releasing backup interface [ 164.921899][ T8182] team0: Port device team_slave_0 removed [ 164.942606][ T8182] team0: Port device team_slave_1 removed [ 164.950026][ T8182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.970983][ T8182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.982321][ T8182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.990388][ T8182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.008913][ T8182] vlan2: left promiscuous mode [ 165.013764][ T8182] bridge0: left promiscuous mode [ 165.020051][ T8182] bridge4: port 1(vlan2) entered disabled state [ 165.174116][ T8192] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 165.248972][ T8044] IPVS: starting estimator thread 0... [ 165.256108][ T8198] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 165.277877][ T8198] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 165.365218][ T8200] IPVS: using max 26 ests per chain, 62400 per kthread [ 165.602581][ T8210] veth0: entered promiscuous mode [ 165.802963][ T8221] netlink: 'syz.4.643': attribute type 4 has an invalid length. [ 165.885563][ T8221] `: renamed from bond0 [ 166.166721][ T8230] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 166.429453][ T8248] syz.3.653 uses old SIOCAX25GETINFO [ 166.462719][ T8247] pim6reg527: entered allmulticast mode [ 166.945234][ T8282] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 166.953680][ T8282] macvtap0: left allmulticast mode [ 167.071540][ T8286] tipc: Enabling of bearer rejected, failed to enable media [ 167.270286][ T8291] veth5: entered allmulticast mode [ 167.365494][ T8292] veth7: entered allmulticast mode [ 167.530279][ T8296] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 167.668490][ T8319] __nla_validate_parse: 18 callbacks suppressed [ 167.668511][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 167.744431][ T8310] syzkaller0: entered promiscuous mode [ 167.759327][ T8310] syzkaller0: entered allmulticast mode [ 167.783788][ T8319] lo: entered allmulticast mode [ 167.872587][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 167.873992][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.980122][ T8323] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 168.060562][ T8323] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 168.776836][ T8382] netlink: 'syz.4.682': attribute type 7 has an invalid length. [ 168.806986][ T8382] : entered promiscuous mode [ 168.962574][ T8388] netlink: ct family unspecified [ 168.993605][ T8388] openvswitch: netlink: Actions may not be safe on all matching packets [ 169.356448][ T8407] netlink: 68 bytes leftover after parsing attributes in process `syz.2.687'. [ 169.629701][ T8423] tipc: Enabled bearer , priority 0 [ 169.705443][ T8413] syzkaller0: entered promiscuous mode [ 169.734987][ T8413] syzkaller0: entered allmulticast mode [ 169.857913][ T8413] tipc: Resetting bearer [ 169.900289][ T8411] tipc: Resetting bearer [ 169.971256][ T8411] tipc: Disabling bearer [ 170.292039][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.701'. [ 171.468015][ T8513] netlink: 'syz.3.712': attribute type 2 has an invalid length. [ 171.542464][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 171.739406][ T8522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.715'. [ 171.769876][ T8520] netlink: 44 bytes leftover after parsing attributes in process `syz.2.715'. [ 172.003553][ T8533] openvswitch: netlink: IPv4 tun info is not correct [ 172.136445][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 172.517141][ T8557] netlink: 'syz.0.724': attribute type 21 has an invalid length. [ 172.632236][ T8557] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 172.844650][ T8570] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 172.896821][ T8571] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 172.958957][ T8570] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 173.022246][ T8576] netlink: 14 bytes leftover after parsing attributes in process `syz.3.728'. [ 173.043200][ T8573] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 173.303196][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.731'. [ 173.398123][ T8597] netlink: 'syz.4.733': attribute type 10 has an invalid length. [ 173.427453][ T8597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.733'. [ 173.623858][ T8597] team0: Port device geneve0 added [ 173.636134][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 173.960581][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 174.206163][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.743'. [ 174.238536][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.743'. [ 174.427905][ T8636] syzkaller0: entered promiscuous mode [ 174.433451][ T8636] syzkaller0: entered allmulticast mode [ 174.712712][ T8663] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 174.734609][ T8666] netlink: 'syz.3.750': attribute type 4 has an invalid length. [ 174.745151][ T8663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.790347][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 174.855466][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.750'. [ 174.870600][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 174.918421][ T8674] Bluetooth: MGMT ver 1.23 [ 175.085507][ T8677] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 175.116221][ T8677] gretap1: entered promiscuous mode [ 175.122678][ T8677] gretap1: entered allmulticast mode [ 175.168007][ T8681] netlink: 'syz.2.754': attribute type 11 has an invalid length. [ 175.406436][ T8690] tipc: Enabled bearer , priority 0 [ 175.445943][ T8690] syzkaller0: entered promiscuous mode [ 175.451482][ T8690] syzkaller0: entered allmulticast mode [ 175.474360][ T8698] netlink: 'syz.4.759': attribute type 13 has an invalid length. [ 175.500213][ T8702] netlink: 'syz.3.760': attribute type 4 has an invalid length. [ 175.708531][ T8698] 8021q: adding VLAN 0 to HW filter on device ` [ 175.759362][ T8698] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.787627][ T8698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.900999][ T8690] tipc: Resetting bearer [ 175.932091][ T8689] tipc: Resetting bearer [ 176.050680][ T8689] tipc: Disabling bearer [ 176.890368][ T8754] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.033139][ T8765] netlink: 'syz.3.774': attribute type 13 has an invalid length. [ 177.318830][ T8765] syzkaller0: entered promiscuous mode [ 177.336650][ T8765] syzkaller0: entered allmulticast mode [ 177.473539][ T8779] netlink: 'syz.0.777': attribute type 3 has an invalid length. [ 178.990417][ T8786] dvmrp1: entered allmulticast mode [ 179.113660][ T8807] tipc: Enabling of bearer rejected, failed to enable media [ 179.124213][ T8814] __nla_validate_parse: 66 callbacks suppressed [ 179.124234][ T8814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.786'. [ 179.352658][ T8821] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 179.714656][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.791'. [ 179.755524][ T8829] tipc: Invalid UDP bearer configuration [ 179.755587][ T8829] tipc: Enabling of bearer rejected, failed to enable media [ 180.120426][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.796'. [ 180.403867][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 180.413213][ T8853] netlink: 'syz.1.800': attribute type 15 has an invalid length. [ 180.949466][ T8875] rdma_op ffff88807bcc71f0 conn xmit_rdma 0000000000000000 [ 181.038931][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 181.238151][ T8886] sctp: [Deprecated]: syz.4.810 (pid 8886) Use of int in maxseg socket option. [ 181.238151][ T8886] Use struct sctp_assoc_value instead [ 181.359761][ T8888] netlink: 96 bytes leftover after parsing attributes in process `syz.2.811'. [ 181.534761][ T8892] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 182.274123][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 182.296687][ T8924] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.449632][ T8949] netlink: 'syz.4.828': attribute type 21 has an invalid length. [ 182.457728][ T8949] netlink: 128 bytes leftover after parsing attributes in process `syz.4.828'. [ 182.467033][ T8949] netlink: 'syz.4.828': attribute type 4 has an invalid length. [ 182.475529][ T8949] netlink: 'syz.4.828': attribute type 5 has an invalid length. [ 182.483210][ T8949] netlink: 3 bytes leftover after parsing attributes in process `syz.4.828'. [ 182.494509][ T8949] netlink: 'syz.4.828': attribute type 21 has an invalid length. [ 182.503928][ T8949] netlink: 128 bytes leftover after parsing attributes in process `syz.4.828'. [ 182.514199][ T8949] netlink: 'syz.4.828': attribute type 4 has an invalid length. [ 182.538781][ T8949] netlink: 'syz.4.828': attribute type 5 has an invalid length. [ 182.932679][ T8967] netlink: 'syz.1.833': attribute type 30 has an invalid length. [ 183.604926][ T8993] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 183.684313][ T8995] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 183.740947][ T8995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.763568][ T8997] bond2: (slave gretap2): making interface the new active one [ 183.772646][ T8997] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 184.233593][ T9023] netlink: 'syz.3.848': attribute type 7 has an invalid length. [ 184.453864][ T9035] netlink: 'syz.3.851': attribute type 11 has an invalid length. [ 194.518092][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.958231][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.398325][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.756395][ T31] INFO: task kworker/0:7:7400 blocked for more than 143 seconds. [ 332.764197][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 332.783761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.798479][ T31] task:kworker/0:7 state:D stack:24168 pid:7400 tgid:7400 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 332.814274][ T31] Workqueue: events rfkill_sync_work [ 332.824908][ T31] Call Trace: [ 332.828241][ T31] [ 332.831200][ T31] __schedule+0x1798/0x4cc0 [ 332.845077][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 332.850544][ T31] ? __pfx___schedule+0x10/0x10 [ 332.858045][ T31] ? schedule+0x91/0x360 [ 332.862350][ T31] schedule+0x165/0x360 [ 332.867009][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.872514][ T31] __mutex_lock+0x7e6/0x1360 [ 332.881752][ T31] ? __mutex_lock+0x5b6/0x1360 [ 332.944924][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 332.950474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.978540][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.983826][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 332.990194][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.997770][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 333.003554][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 333.012826][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 333.018950][ T31] rfkill_set_block+0x1d2/0x440 [ 333.023847][ T31] rfkill_sync_work+0x114/0x200 [ 333.029341][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 333.035394][ T31] process_scheduled_works+0xade/0x17b0 [ 333.041006][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.047498][ T31] worker_thread+0x8a0/0xda0 [ 333.052139][ T31] ? __kthread_parkme+0x7b/0x200 [ 333.057589][ T31] kthread+0x70e/0x8a0 [ 333.061706][ T31] ? __pfx_worker_thread+0x10/0x10 [ 333.071678][ T31] ? __pfx_kthread+0x10/0x10 [ 333.076716][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.081963][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.087866][ T31] ? __pfx_kthread+0x10/0x10 [ 333.092539][ T31] ret_from_fork+0x3fc/0x770 [ 333.097638][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.102801][ T31] ? __switch_to_asm+0x39/0x70 [ 333.108039][ T31] ? __switch_to_asm+0x33/0x70 [ 333.112851][ T31] ? __pfx_kthread+0x10/0x10 [ 333.118202][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.123030][ T31] [ 333.130970][ T31] INFO: task kworker/0:9:8044 blocked for more than 143 seconds. [ 333.139009][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 333.151261][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.164755][ T31] task:kworker/0:9 state:D stack:25848 pid:8044 tgid:8044 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 333.182448][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 333.191677][ T31] Call Trace: [ 333.195264][ T31] [ 333.198223][ T31] __schedule+0x1798/0x4cc0 [ 333.202767][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 333.208749][ T31] ? __pfx___schedule+0x10/0x10 [ 333.213652][ T31] ? schedule+0x91/0x360 [ 333.219441][ T31] schedule+0x165/0x360 [ 333.223652][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.234004][ T31] __mutex_lock+0x7e6/0x1360 [ 333.238978][ T31] ? __mutex_lock+0x5b6/0x1360 [ 333.243788][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 333.250738][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.256122][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 333.261884][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 333.268089][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 333.274234][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 333.280393][ T31] process_scheduled_works+0xade/0x17b0 [ 333.287099][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.293145][ T31] worker_thread+0x8a0/0xda0 [ 333.298258][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.304633][ T31] ? __kthread_parkme+0x7b/0x200 [ 333.310248][ T31] kthread+0x70e/0x8a0 [ 333.314361][ T31] ? __pfx_worker_thread+0x10/0x10 [ 333.320883][ T31] ? __pfx_kthread+0x10/0x10 [ 333.330475][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.336519][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.341766][ T31] ? __pfx_kthread+0x10/0x10 [ 333.348233][ T31] ret_from_fork+0x3fc/0x770 [ 333.352959][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.358387][ T31] ? __switch_to_asm+0x39/0x70 [ 333.363205][ T31] ? __switch_to_asm+0x33/0x70 [ 333.368162][ T31] ? __pfx_kthread+0x10/0x10 [ 333.372805][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.377825][ T31] [ 333.380890][ T31] INFO: task syz.0.804:8862 blocked for more than 143 seconds. [ 333.397583][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 333.405275][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.413976][ T31] task:syz.0.804 state:D stack:25096 pid:8862 tgid:8862 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 333.426251][ T31] Call Trace: [ 333.429562][ T31] [ 333.432498][ T31] __schedule+0x1798/0x4cc0 [ 333.437159][ T31] ? validate_chain+0x897/0x2140 [ 333.442134][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.447217][ T31] ? __pfx___schedule+0x10/0x10 [ 333.452116][ T31] ? schedule+0x91/0x360 [ 333.456512][ T31] schedule+0x165/0x360 [ 333.460706][ T31] schedule_timeout+0x9a/0x270 [ 333.465674][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 333.471093][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.476465][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.481697][ T31] ? wait_for_completion+0x267/0x5d0 [ 333.487337][ T31] wait_for_completion+0x2bf/0x5d0 [ 333.492499][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 333.498284][ T31] ? __flush_work+0xd2/0xbc0 [ 333.502922][ T31] ? __flush_work+0xd2/0xbc0 [ 333.507815][ T31] __flush_work+0x9b9/0xbc0 [ 333.512355][ T31] ? __flush_work+0xd2/0xbc0 [ 333.518995][ T31] ? __pfx___flush_work+0x10/0x10 [ 333.524061][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 333.529542][ T31] ? __pfx___cancel_work+0x10/0x10 [ 333.534683][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 333.540622][ T31] __cancel_work_sync+0xbe/0x110 [ 333.545708][ T31] rfkill_unregister+0x92/0x220 [ 333.550604][ T31] nfc_unregister_device+0x96/0x2a0 [ 333.556083][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 333.561851][ T31] virtual_ncidev_close+0x56/0x90 [ 333.566962][ T31] __fput+0x44c/0xa70 [ 333.570985][ T31] task_work_run+0x1d4/0x260 [ 333.575879][ T31] ? __pfx_task_work_run+0x10/0x10 [ 333.581032][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 333.586691][ T31] exit_to_user_mode_loop+0xec/0x110 [ 333.592034][ T31] do_syscall_64+0x2bd/0x3b0 [ 333.596933][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.603040][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.609305][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.614013][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.620249][ T31] RIP: 0033:0x7f53eeb8ebe9 [ 333.624712][ T31] RSP: 002b:00007ffcc8d36928 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 333.633536][ T31] RAX: 0000000000000000 RBX: 00007f53eedb7da0 RCX: 00007f53eeb8ebe9 [ 333.641624][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 333.649834][ T31] RBP: 00007f53eedb7da0 R08: 0000000000000000 R09: 00000006c8d36c1f [ 333.657892][ T31] R10: 000000000003fd98 R11: 0000000000000246 R12: 000000000002c4c7 [ 333.666045][ T31] R13: 00007f53eedb6180 R14: ffffffffffffffff R15: 00007ffcc8d36a40 [ 333.674098][ T31] [ 333.677235][ T31] INFO: task syz.2.826:8935 blocked for more than 144 seconds. [ 333.684938][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 333.692261][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.701099][ T31] task:syz.2.826 state:D stack:25064 pid:8935 tgid:8934 ppid:5868 task_flags:0x400040 flags:0x00004004 [ 333.713277][ T31] Call Trace: [ 333.716655][ T31] [ 333.719626][ T31] __schedule+0x1798/0x4cc0 [ 333.724183][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.729133][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.734030][ T31] ? __pfx___schedule+0x10/0x10 [ 333.739020][ T31] ? schedule+0x91/0x360 [ 333.743317][ T31] schedule+0x165/0x360 [ 333.747545][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.753038][ T31] __mutex_lock+0x7e6/0x1360 [ 333.757736][ T31] ? __mutex_lock+0x5b6/0x1360 [ 333.762535][ T31] ? rfkill_register+0x37/0x8e0 [ 333.767436][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.772498][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 333.777951][ T31] ? device_initialize+0x24b/0x440 [ 333.783112][ T31] rfkill_register+0x37/0x8e0 [ 333.787857][ T31] nfc_register_device+0x14a/0x320 [ 333.793006][ T31] nci_register_device+0x87f/0x9d0 [ 333.798229][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 333.803893][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 333.809266][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 333.814680][ T31] virtual_ncidev_open+0x129/0x1a0 [ 333.819905][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 333.825610][ T31] misc_open+0x2bc/0x330 [ 333.829877][ T31] chrdev_open+0x4c9/0x5e0 [ 333.834342][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 333.839404][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 333.845863][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 333.850843][ T31] do_dentry_open+0x953/0x13f0 [ 333.855697][ T31] vfs_open+0x3b/0x340 [ 333.859794][ T31] ? path_openat+0x2ecd/0x3830 [ 333.864601][ T31] path_openat+0x2ee5/0x3830 [ 333.869291][ T31] ? arch_stack_walk+0xfc/0x150 [ 333.874187][ T31] ? stack_depot_save_flags+0x40/0x860 [ 333.879779][ T31] ? __pfx_path_openat+0x10/0x10 [ 333.884753][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.890938][ T31] do_filp_open+0x1fa/0x410 [ 333.895529][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.900416][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 333.905520][ T31] ? _raw_spin_unlock+0x28/0x50 [ 333.910396][ T31] ? alloc_fd+0x64c/0x6c0 [ 333.914758][ T31] do_sys_openat2+0x121/0x1c0 [ 333.919520][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 333.924742][ T31] ? exc_page_fault+0x76/0xf0 [ 333.929539][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 333.934913][ T31] __x64_sys_openat+0x138/0x170 [ 333.939809][ T31] do_syscall_64+0xfa/0x3b0 [ 333.944370][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.949705][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.955868][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.960591][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.969213][ T31] RIP: 0033:0x7f51d498ebe9 [ 333.973681][ T31] RSP: 002b:00007f51d57ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 333.982684][ T31] RAX: ffffffffffffffda RBX: 00007f51d4bb5fa0 RCX: 00007f51d498ebe9 [ 333.990909][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 333.999174][ T31] RBP: 00007f51d4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.007325][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.015531][ T31] R13: 00007f51d4bb6038 R14: 00007f51d4bb5fa0 R15: 00007ffdac458fa8 [ 334.023548][ T31] [ 334.026831][ T31] INFO: task syz.1.836:8983 blocked for more than 144 seconds. [ 334.034401][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 334.041862][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.050652][ T31] task:syz.1.836 state:D stack:28328 pid:8983 tgid:8978 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 334.062676][ T31] Call Trace: [ 334.066055][ T31] [ 334.069025][ T31] __schedule+0x1798/0x4cc0 [ 334.073565][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.078534][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.083433][ T31] ? __pfx___schedule+0x10/0x10 [ 334.088421][ T31] ? schedule+0x91/0x360 [ 334.092702][ T31] schedule+0x165/0x360 [ 334.096918][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.102386][ T31] __mutex_lock+0x7e6/0x1360 [ 334.107126][ T31] ? __mutex_lock+0x5b6/0x1360 [ 334.111939][ T31] ? misc_open+0x51/0x330 [ 334.116448][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.121523][ T31] misc_open+0x51/0x330 [ 334.125843][ T31] chrdev_open+0x4c9/0x5e0 [ 334.130307][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 334.135346][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 334.141712][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 334.146743][ T31] do_dentry_open+0x953/0x13f0 [ 334.151541][ T31] vfs_open+0x3b/0x340 [ 334.155687][ T31] ? path_openat+0x2ecd/0x3830 [ 334.160482][ T31] path_openat+0x2ee5/0x3830 [ 334.165154][ T31] ? arch_stack_walk+0xfc/0x150 [ 334.170059][ T31] ? stack_depot_save_flags+0x40/0x860 [ 334.175635][ T31] ? __pfx_path_openat+0x10/0x10 [ 334.180600][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.186771][ T31] do_filp_open+0x1fa/0x410 [ 334.191306][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.196242][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 334.201333][ T31] ? _raw_spin_unlock+0x28/0x50 [ 334.206262][ T31] ? alloc_fd+0x64c/0x6c0 [ 334.210644][ T31] do_sys_openat2+0x121/0x1c0 [ 334.215402][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.220654][ T31] ? exc_page_fault+0x76/0xf0 [ 334.225407][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 334.230742][ T31] __x64_sys_openat+0x138/0x170 [ 334.235694][ T31] do_syscall_64+0xfa/0x3b0 [ 334.240235][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.245545][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.251662][ T31] ? clear_bhb_loop+0x60/0xb0 [ 334.256414][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.262332][ T31] RIP: 0033:0x7fd6db18ebe9 [ 334.266842][ T31] RSP: 002b:00007fd6d93f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.275514][ T31] RAX: ffffffffffffffda RBX: 00007fd6db3b6090 RCX: 00007fd6db18ebe9 [ 334.283531][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 334.291698][ T31] RBP: 00007fd6db211e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.299717][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.307754][ T31] R13: 00007fd6db3b6128 R14: 00007fd6db3b6090 R15: 00007ffe83078198 [ 334.315977][ T31] [ 334.319031][ T31] INFO: task syz.4.850:9032 blocked for more than 144 seconds. [ 334.327953][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 334.335371][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.344149][ T31] task:syz.4.850 state:D stack:28328 pid:9032 tgid:9031 ppid:5867 task_flags:0x400040 flags:0x00004004 [ 334.356188][ T31] Call Trace: [ 334.359486][ T31] [ 334.362448][ T31] __schedule+0x1798/0x4cc0 [ 334.367046][ T31] ? kasan_save_free_info+0x46/0x50 [ 334.372276][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.377201][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.382092][ T31] ? __pfx___schedule+0x10/0x10 [ 334.387041][ T31] ? schedule+0x91/0x360 [ 334.391326][ T31] schedule+0x165/0x360 [ 334.395542][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.401031][ T31] __mutex_lock+0x7e6/0x1360 [ 334.405711][ T31] ? __mutex_lock+0x5b6/0x1360 [ 334.410527][ T31] ? misc_open+0x51/0x330 [ 334.414979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.420130][ T31] misc_open+0x51/0x330 [ 334.424320][ T31] chrdev_open+0x4c9/0x5e0 [ 334.428840][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 334.433818][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 334.440330][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 334.445363][ T31] do_dentry_open+0x953/0x13f0 [ 334.450181][ T31] vfs_open+0x3b/0x340 [ 334.454282][ T31] ? path_openat+0x2ecd/0x3830 [ 334.459133][ T31] path_openat+0x2ee5/0x3830 [ 334.463759][ T31] ? arch_stack_walk+0xfc/0x150 [ 334.468720][ T31] ? stack_depot_save_flags+0x40/0x860 [ 334.474223][ T31] ? __pfx_path_openat+0x10/0x10 [ 334.479262][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.485423][ T31] do_filp_open+0x1fa/0x410 [ 334.489964][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.494888][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 334.499998][ T31] ? _raw_spin_unlock+0x28/0x50 [ 334.504969][ T31] ? alloc_fd+0x64c/0x6c0 [ 334.509353][ T31] do_sys_openat2+0x121/0x1c0 [ 334.514061][ T31] ? __se_sys_futex+0x36f/0x400 [ 334.518993][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.524226][ T31] ? rcu_is_watching+0x15/0xb0 [ 334.529077][ T31] __x64_sys_openat+0x138/0x170 [ 334.533955][ T31] do_syscall_64+0xfa/0x3b0 [ 334.538558][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.543792][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.549975][ T31] ? clear_bhb_loop+0x60/0xb0 [ 334.554687][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.560650][ T31] RIP: 0033:0x7f67d898ebe9 [ 334.565142][ T31] RSP: 002b:00007f67d97bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.573589][ T31] RAX: ffffffffffffffda RBX: 00007f67d8bb5fa0 RCX: 00007f67d898ebe9 [ 334.581662][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 334.589725][ T31] RBP: 00007f67d8a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.598023][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.606401][ T31] R13: 00007f67d8bb6038 R14: 00007f67d8bb5fa0 R15: 00007fffe4ec7f18 [ 334.614416][ T31] [ 334.617649][ T31] INFO: task syz.3.853:9043 blocked for more than 145 seconds. [ 334.625475][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 334.632784][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.641607][ T31] task:syz.3.853 state:D stack:28328 pid:9043 tgid:9042 ppid:5873 task_flags:0x400040 flags:0x00004004 [ 334.653731][ T31] Call Trace: [ 334.657296][ T31] [ 334.660258][ T31] __schedule+0x1798/0x4cc0 [ 334.664793][ T31] ? kasan_save_free_info+0x46/0x50 [ 334.670167][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.675304][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.680232][ T31] ? __pfx___schedule+0x10/0x10 [ 334.685383][ T31] ? schedule+0x91/0x360 [ 334.689669][ T31] schedule+0x165/0x360 [ 334.693852][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.699604][ T31] __mutex_lock+0x7e6/0x1360 [ 334.704259][ T31] ? __mutex_lock+0x5b6/0x1360 [ 334.709151][ T31] ? misc_open+0x51/0x330 [ 334.713513][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.718871][ T31] misc_open+0x51/0x330 [ 334.723068][ T31] chrdev_open+0x4c9/0x5e0 [ 334.727609][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 334.732593][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 334.739130][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 334.744109][ T31] do_dentry_open+0x953/0x13f0 [ 334.749000][ T31] vfs_open+0x3b/0x340 [ 334.753092][ T31] ? path_openat+0x2ecd/0x3830 [ 334.758148][ T31] path_openat+0x2ee5/0x3830 [ 334.762773][ T31] ? arch_stack_walk+0xfc/0x150 [ 334.767762][ T31] ? stack_depot_save_flags+0x40/0x860 [ 334.773259][ T31] ? __pfx_path_openat+0x10/0x10 [ 334.778446][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.784562][ T31] do_filp_open+0x1fa/0x410 [ 334.789161][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.794058][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 334.799449][ T31] ? _raw_spin_unlock+0x28/0x50 [ 334.804340][ T31] ? alloc_fd+0x64c/0x6c0 [ 334.808787][ T31] do_sys_openat2+0x121/0x1c0 [ 334.813521][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.818966][ T31] ? exc_page_fault+0x76/0xf0 [ 334.823702][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 334.829247][ T31] __x64_sys_openat+0x138/0x170 [ 334.834155][ T31] do_syscall_64+0xfa/0x3b0 [ 334.839050][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.844290][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.850479][ T31] ? clear_bhb_loop+0x60/0xb0 [ 334.855398][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.861321][ T31] RIP: 0033:0x7f201318ebe9 [ 334.865839][ T31] RSP: 002b:00007f2014027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.874326][ T31] RAX: ffffffffffffffda RBX: 00007f20133b5fa0 RCX: 00007f201318ebe9 [ 334.882485][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 334.890536][ T31] RBP: 00007f2013211e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.898737][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.906899][ T31] R13: 00007f20133b6038 R14: 00007f20133b5fa0 R15: 00007ffcb31297a8 [ 334.915154][ T31] [ 334.918279][ T31] [ 334.918279][ T31] Showing all locks held in the system: [ 334.926193][ T31] 1 lock held by khungtaskd/31: [ 334.931043][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 334.941321][ T31] 1 lock held by klogd/5223: [ 334.946118][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 334.956311][ T31] 2 locks held by getty/5625: [ 334.961066][ T31] #0: ffff88802fcce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 334.970914][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 334.981253][ T31] 4 locks held by kworker/0:7/7400: [ 334.986557][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.001910][ T31] #1: ffffc9001b727bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.015793][ T31] #2: ffffffff8f80e468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 335.026163][ T31] #3: ffff888067c7a100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 335.036182][ T31] 3 locks held by kworker/0:9/8044: [ 335.041402][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.052685][ T31] #1: ffffc9000b197bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.066420][ T31] #2: ffffffff8f80e468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 335.078012][ T31] 1 lock held by syz.0.804/8862: [ 335.082993][ T31] #0: ffff888067c7a100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 335.093053][ T31] 3 locks held by syz.2.826/8935: [ 335.098166][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.106851][ T31] #1: ffff888078fa6100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 335.116657][ T31] #2: ffffffff8f80e468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 335.126830][ T31] 1 lock held by syz.1.836/8983: [ 335.131790][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.140387][ T31] 1 lock held by syz.4.850/9032: [ 335.145499][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.154021][ T31] 1 lock held by syz.3.853/9043: [ 335.159274][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.167974][ T31] 1 lock held by syz-executor/9053: [ 335.173197][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.181706][ T31] 1 lock held by syz-executor/9055: [ 335.187062][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.195627][ T31] 1 lock held by syz-executor/9057: [ 335.200851][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.209502][ T31] 1 lock held by syz-executor/9059: [ 335.214703][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.223243][ T31] 1 lock held by syz-executor/9061: [ 335.228647][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.237270][ T31] 1 lock held by syz-executor/9066: [ 335.242503][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.251198][ T31] 1 lock held by syz-executor/9068: [ 335.256476][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.265300][ T31] 1 lock held by syz-executor/9070: [ 335.270517][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.279084][ T31] 1 lock held by syz-executor/9072: [ 335.284293][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.292958][ T31] 1 lock held by syz-executor/9074: [ 335.298244][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.306925][ T31] 1 lock held by syz-executor/9076: [ 335.312146][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.320906][ T31] 1 lock held by syz-executor/9079: [ 335.326716][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.335608][ T31] 1 lock held by syz-executor/9083: [ 335.340996][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.349781][ T31] 1 lock held by syz-executor/9085: [ 335.355062][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.363562][ T31] 1 lock held by syz-executor/9087: [ 335.368996][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 335.377692][ T31] [ 335.380073][ T31] ============================================= [ 335.380073][ T31] [ 335.388692][ T31] NMI backtrace for cpu 1 [ 335.388720][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 335.388745][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.388757][ T31] Call Trace: [ 335.388765][ T31] [ 335.388774][ T31] dump_stack_lvl+0x189/0x250 [ 335.388808][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.388835][ T31] ? __pfx__printk+0x10/0x10 [ 335.388882][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 335.388908][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 335.388932][ T31] ? __pfx__printk+0x10/0x10 [ 335.388975][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.389012][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 335.389036][ T31] watchdog+0xf93/0xfe0 [ 335.389070][ T31] ? watchdog+0x1de/0xfe0 [ 335.389106][ T31] kthread+0x70e/0x8a0 [ 335.389137][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.389166][ T31] ? __pfx_kthread+0x10/0x10 [ 335.389195][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.389218][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.389242][ T31] ? __pfx_kthread+0x10/0x10 [ 335.389271][ T31] ret_from_fork+0x3fc/0x770 [ 335.389296][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.389324][ T31] ? __switch_to_asm+0x39/0x70 [ 335.389352][ T31] ? __switch_to_asm+0x33/0x70 [ 335.389378][ T31] ? __pfx_kthread+0x10/0x10 [ 335.389406][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.389449][ T31] [ 335.389456][ T31] Sending NMI from CPU 1 to CPUs 0: [ 335.537507][ C0] NMI backtrace for cpu 0 [ 335.537526][ C0] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 335.537556][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.537572][ C0] Workqueue: bat_events batadv_nc_worker [ 335.537597][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x1c/0x2a0 [ 335.537626][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 05 69 ac 02 11 48 89 44 24 08 <83> 3d ad 34 06 0e 00 0f 84 9d 01 00 00 65 8b 05 60 ac 02 11 a9 00 [ 335.537641][ C0] RSP: 0018:ffffc9000210f8a0 EFLAGS: 00000086 [ 335.537659][ C0] RAX: fe626225b62cfe00 RBX: 0000000000000201 RCX: fe626225b62cfe00 [ 335.537673][ C0] RDX: 0000000000000000 RSI: ffffffff8be32660 RDI: ffffffff8be32620 [ 335.537685][ C0] RBP: ffffc9000210f978 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6 [ 335.537698][ C0] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8b46bea8 [ 335.537711][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000421f1c [ 335.537724][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 335.537737][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.537749][ C0] CR2: 00007ffd37623018 CR3: 000000000df36000 CR4: 00000000003526f0 [ 335.537764][ C0] Call Trace: [ 335.537771][ C0] [ 335.537779][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 335.537800][ C0] trace_hardirqs_on+0x28/0x40 [ 335.537823][ C0] __local_bh_enable_ip+0x12d/0x1c0 [ 335.537840][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.537860][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 335.537881][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 335.537900][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 335.537922][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 335.537950][ C0] batadv_nc_worker+0x328/0x610 [ 335.537971][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 335.537989][ C0] process_scheduled_works+0xade/0x17b0 [ 335.538023][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 335.538049][ C0] worker_thread+0x8a0/0xda0 [ 335.538068][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.538094][ C0] ? __kthread_parkme+0x7b/0x200 [ 335.538118][ C0] kthread+0x70e/0x8a0 [ 335.538141][ C0] ? __pfx_worker_thread+0x10/0x10 [ 335.538158][ C0] ? __pfx_kthread+0x10/0x10 [ 335.538180][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.538198][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.538223][ C0] ? __pfx_kthread+0x10/0x10 [ 335.538245][ C0] ret_from_fork+0x3fc/0x770 [ 335.538264][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 335.538285][ C0] ? __switch_to_asm+0x39/0x70 [ 335.538307][ C0] ? __switch_to_asm+0x33/0x70 [ 335.538329][ C0] ? __pfx_kthread+0x10/0x10 [ 335.538350][ C0] ret_from_fork_asm+0x1a/0x30 [ 335.538382][ C0] [ 335.538600][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 335.820573][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 335.832034][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.842100][ T31] Call Trace: [ 335.845388][ T31] [ 335.848328][ T31] dump_stack_lvl+0x99/0x250 [ 335.852935][ T31] ? __asan_memcpy+0x40/0x70 [ 335.857531][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.862733][ T31] ? __pfx__printk+0x10/0x10 [ 335.867361][ T31] vpanic+0x281/0x750 [ 335.871355][ T31] ? __pfx_vpanic+0x10/0x10 [ 335.875865][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 335.881436][ T31] ? preempt_schedule+0xae/0xc0 [ 335.886295][ T31] ? preempt_schedule_common+0x83/0xd0 [ 335.891767][ T31] panic+0xb9/0xc0 [ 335.895498][ T31] ? __pfx_panic+0x10/0x10 [ 335.899937][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 335.905327][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 335.911485][ T31] watchdog+0xfd2/0xfe0 [ 335.915659][ T31] ? watchdog+0x1de/0xfe0 [ 335.920000][ T31] kthread+0x70e/0x8a0 [ 335.924079][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.928773][ T31] ? __pfx_kthread+0x10/0x10 [ 335.933373][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.938574][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.943786][ T31] ? __pfx_kthread+0x10/0x10 [ 335.948389][ T31] ret_from_fork+0x3fc/0x770 [ 335.952986][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.958126][ T31] ? __switch_to_asm+0x39/0x70 [ 335.962900][ T31] ? __switch_to_asm+0x33/0x70 [ 335.967678][ T31] ? __pfx_kthread+0x10/0x10 [ 335.972281][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.977070][ T31] [ 335.980470][ T31] Kernel Offset: disabled [ 335.984794][ T31] Rebooting in 86400 seconds..