last executing test programs: 1m5.068309096s ago: executing program 1 (id=1597): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0xa, 0x4, 0x44, @remote, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x40, 0x20, 0x7ff, 0x8}}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) 1m4.913563371s ago: executing program 1 (id=1599): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x55, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="c801000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000a8011a80a40102803c000180380021000000000008001800000000003800030000000000080009000000000008000c0000000800380012000000000008001f000000000060000a8014000700fc01000000000000000000000000000000000700fe8000000000000000b3fd0700200100000000000000000000000000010500080000000000050008000000000014000700fc02000000000000000000000000000005000800000000000400070000001c002c000a8021fe0700fc00000000000000000000000000000014000700ff0100000000000000000000000000012800028056000180080000000000000008002000000000000800000002000000080000000000000004001c000000070000000000000000"], 0x1c8}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0a0006e92554130008021100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) r10 = socket(0x18, 0x3, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x1, 0x3, {0x77359400}, {r13, r14/1000+60000}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="010000009000bd9ea38da013637fafb3bb1f41b7c6c253b0a71b92fdb5060d5868e0d078b00d81f21cb7feb4465f7c57c7d278f86c254a071adf90a3532e853128b9", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000ce2a4fa7a0aa108b"], 0x48}}, 0x40884) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r10], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r15, 0x1, 0x43, &(0x7f0000001100)={0x0, 0xea60}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r17}, &(0x7f0000000040), &(0x7f0000000140)=r16}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r17}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r16}, 0x20) 1m4.740566159s ago: executing program 1 (id=1601): unshare(0x6a040080) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x4000}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x44004881) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0x2c, 0x7, 0x7}) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r9 = accept4$netrom(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @rose}, [@bcast, @null, @default, @default, @bcast, @netrom, @netrom, @netrom]}, &(0x7f0000000040)=0x48, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000280)={0x0, 'geneve1\x00', {0x2}, 0x3}) 1m3.664379229s ago: executing program 1 (id=1610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r1, 0x0, 0x3}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xa8, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffaa2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6be}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20001000) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) sendmmsg$inet_sctp(r2, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x510) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1m2.940356431s ago: executing program 1 (id=1614): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000200), &(0x7f0000000280)=0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x82) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) 1m2.371395485s ago: executing program 1 (id=1621): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000, 0x8001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001040), r1) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001080)) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f00000010c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000001100)) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000001140)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001180), 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000011c0)=""/51, 0x33, 0x1, &(0x7f0000001200)=""/200, 0xc8}, &(0x7f0000001340)=0x40) r6 = accept4$llc(0xffffffffffffffff, &(0x7f0000001380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000013c0)=0x10, 0x800) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0xffffffffffffffff, 0xf4, 0x18}, 0xc) splice(r6, &(0x7f0000001400)=0x9, r7, &(0x7f0000001480)=0x7, 0x0, 0x8) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000014c0), 0x2000, 0x0) ioctl$PPPIOCGIDLE64(r8, 0x8010743f, &(0x7f0000001500)) getpid() sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000017c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)={0x1c4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x5b}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe6, 0x5b, "fcfe24590b0ac579d02e5aede15e31b3c1a4fa05afd1b3169f4d3ae6ba86cc3a4316ce0b4e3a2dc4310a700495a5f9db1054361026ec391ce9cf0325b124e746a4539eeed929d89336a6037d43f677c65b23f60ba8baabaf506d8ee43fddcda3316edb89b178e6db61f939371eaf3241f5d04f82744807ca9a9fe127f44cc6612f84c3ddee8fe90641784c39b7074e463390a7373912d84180b059169fc4008f1f34986e2f982f477ba261dd5e2b61ba720a7639c9a9ce8a83d82b739e8e0a4f18c23615767f19d1fd92b26fe564e1f0a06a586157132dbfbe154e8be114924b8031"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}, @NL80211_ATTR_FRAME_MATCH={0x9a, 0x5b, "e0443f99d72a93152366c7bb8376dc06a03e6e00063e331b736958f10f119d6fcba418c5844e009c9599e5759a20786975727206aa002d0cec4634f339ff3ba9fb026c2efabe7f34f4b5f1291a965b0d6e75b9690417563e20a17269985a08d637e205bdfdcf3af3e09d4bc82bd14c4b27f37b16022c04d95a852cba935706cfd9bd1a0327807b48adb3f3ded5e9f2b6d86b944a62bb"}, @NL80211_ATTR_FRAME_MATCH={0xf, 0x5b, "7f3234807642a615d0d709"}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20044814}, 0x40000) ioctl$PPPIOCSMRRU(r8, 0x4004743b, &(0x7f0000001800)=0x80000000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f0000001940)=0x1000, 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, r10, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x100, 0x38}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x38}}, 0x4) socketpair(0x18, 0x3, 0x8, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000001b40)={0x0, 0x1000, "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"}, &(0x7f0000002b80)=0x1008) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000002bc0)={r13, 0xf, 0x1}, 0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000002c00)={0x0, 0x2, 0x7}) 1m2.069932086s ago: executing program 32 (id=1621): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000, 0x8001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001040), r1) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001080)) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f00000010c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000001100)) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000001140)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001180), 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000011c0)=""/51, 0x33, 0x1, &(0x7f0000001200)=""/200, 0xc8}, &(0x7f0000001340)=0x40) r6 = accept4$llc(0xffffffffffffffff, &(0x7f0000001380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000013c0)=0x10, 0x800) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0xffffffffffffffff, 0xf4, 0x18}, 0xc) splice(r6, &(0x7f0000001400)=0x9, r7, &(0x7f0000001480)=0x7, 0x0, 0x8) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000014c0), 0x2000, 0x0) ioctl$PPPIOCGIDLE64(r8, 0x8010743f, &(0x7f0000001500)) getpid() sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000017c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)={0x1c4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x5b}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe6, 0x5b, "fcfe24590b0ac579d02e5aede15e31b3c1a4fa05afd1b3169f4d3ae6ba86cc3a4316ce0b4e3a2dc4310a700495a5f9db1054361026ec391ce9cf0325b124e746a4539eeed929d89336a6037d43f677c65b23f60ba8baabaf506d8ee43fddcda3316edb89b178e6db61f939371eaf3241f5d04f82744807ca9a9fe127f44cc6612f84c3ddee8fe90641784c39b7074e463390a7373912d84180b059169fc4008f1f34986e2f982f477ba261dd5e2b61ba720a7639c9a9ce8a83d82b739e8e0a4f18c23615767f19d1fd92b26fe564e1f0a06a586157132dbfbe154e8be114924b8031"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}, @NL80211_ATTR_FRAME_MATCH={0x9a, 0x5b, "e0443f99d72a93152366c7bb8376dc06a03e6e00063e331b736958f10f119d6fcba418c5844e009c9599e5759a20786975727206aa002d0cec4634f339ff3ba9fb026c2efabe7f34f4b5f1291a965b0d6e75b9690417563e20a17269985a08d637e205bdfdcf3af3e09d4bc82bd14c4b27f37b16022c04d95a852cba935706cfd9bd1a0327807b48adb3f3ded5e9f2b6d86b944a62bb"}, @NL80211_ATTR_FRAME_MATCH={0xf, 0x5b, "7f3234807642a615d0d709"}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20044814}, 0x40000) ioctl$PPPIOCSMRRU(r8, 0x4004743b, &(0x7f0000001800)=0x80000000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f0000001940)=0x1000, 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, r10, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x100, 0x38}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x38}}, 0x4) socketpair(0x18, 0x3, 0x8, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000001b40)={0x0, 0x1000, "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"}, &(0x7f0000002b80)=0x1008) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000002bc0)={r13, 0xf, 0x1}, 0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000002c00)={0x0, 0x2, 0x7}) 20.308728478s ago: executing program 4 (id=1976): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0xffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x325, 0x2, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r10, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000006c0)={0x0, 0x8, 0x3}, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r13, 0x301, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffe6, 0xb}, {0x7, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008050) 20.120636583s ago: executing program 5 (id=1978): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000009c0)={{r2}, 0x100000000, 0x418b, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x400, 0x1, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xaee6, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a142c9c3b825"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x100}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 20.094332204s ago: executing program 2 (id=1979): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x8, 0x4e24, 0x7, 0x2, 0x80, 0xa0, 0x2b, 0x0, r3}, {0x7, 0x5, 0x8, 0x32f, 0x7, 0x8, 0xc0, 0x8}, {0x101, 0x4, 0x7, 0x8}, 0x10000, 0x6e6bbd, 0x1, 0x1, 0x0, 0x3}, {{@in6=@remote, 0x4d2, 0xff}, 0x2, @in=@local, 0x3507, 0x1, 0x6e92b5f764230681, 0x74, 0x800, 0x8, 0x4}}, 0xe8) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r4) 19.821607905s ago: executing program 2 (id=1981): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0xe5, @empty, 0x4e21, 0x2, 'wrr\x00', 0x2, 0x9, 0x61}, 0x2c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f740e9830000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x2000000, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r11) sendmsg$NFC_CMD_LLC_SDREQ(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r11, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r13, 0x70d, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r14, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 19.801088553s ago: executing program 4 (id=1982): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000002e000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="20040000e8"], 0x420}}, 0x40040) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r5 = accept(r2, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[], 0x6c}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0)) 19.524130138s ago: executing program 5 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09052cbd7000fbdbdf25030000000c00018006000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc7f}, @in6={0xa, 0x4e21, 0x6, @local, 0x9}], 0x48) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 19.523719848s ago: executing program 2 (id=1985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6c9, &(0x7f0000000c00)={@local, @empty, @void, {@mpls_mc={0x8848, {[], @llc={@llc={0xe51e05055d516789, 0x0, "d2", "8398e9fadaf00506e3f924f08feed07fe1b7fba4198f41c1bb9e1dbaf4d304aa89a3dc4c5a5a9434b2f63e246acef21c3d58fee08c28683b6b1e9448fbe847cade4e1111952219ac802c76a13c142bd731370a7c81e9f48bd211bed366519db42d051261813cd2396c5d85ee343c6b6e3e7316a70294825ef7d3d533a71296eea5ad4f7f89c09e7d476a600cc575ad0d0d2d8bb387f6fd2ec4d0b8af42832ad05978e908f2a4850d879416a77f0fc35ab4290de3308277f9ee937a32821edc399abf0467f5baf14207a03739bd245a210c26380c080f6925322c06e2f5b78a028bf9a201ad292cdb6fd5fe97494433c98463536d5409706fcd2c18181ec4dab9fdb41c707f15f0da7dce711f05ad50d7a8a38dee0f176277e0d20375e62f720754532272c082d4ea120c973f62bf15752b9c857dea9fa12a96db2757090ba61fbc71442d53788e0380b81346a057c7f0208b38a66ced3cf72b2f155e347329d6a4402c4f7d224acd1c02369e1dc469533a1ed54967cc28a7dd16718671f9babbea0c2cf8992afe7dcd02f95a8f22da1a61d334244a05a6ff399e0e0ab6faa052898e98acab2941fe6f3b76467f4ea64b51866d1a940ee9eacc3ca2f9c9b798626c9327666ed3d8ae33176ed6941f68874c6898f8ac6519b3fcde6adcf3748a3a367e9967e420be8f2a1e7856478ef83eaf067307fd50f698e70d109f1c576818cf5d74e71e9fedcb26eadccfd9ced501a1506364da7f13d6b76451dd7acead3702a1edeafce0a45c2b1b766256db159fe7d98ecbbf9ccf8fe57f0154cdb07059bad602fc6730e952cb48e6da52c0e669f797e87bc9587723e29a210918dfe54b890a85129771f420f04f1fa54d04f30a8d9fe546debfe3066c39bc2a72226ff3f6166b30a3fb00da9e1c3adb546315f714e9ecb8200165699c614af542d6edb86973e5ca4764b2262caf3f4a1fe1d2d28a930a1996a0b5130f2d0fdc981d03d45063e7ef5767485547512bd7353426d6d6833a2afaf032cf81094b16e92b0d0e349be821b94be2601d5ceb2f52a0829767c132215ee14f835fe3cebad9715e52b7980f65ac825e7d2dfeb48faee0b21c42dd40a4699599dc5ea11c5eeeb60770c1a6b8581fcbc11a77ee9d0f01d4f0b95e3baef5f96606d78931fe6b1ae0dda0998adb3bf4ec773e65e4164b99017af5bd0d445705d8a0b67ee460049f2d7ae31e13076891ba33f5f153ba26b768b78def16f9952af9e9d4f2f4c505d5bf0c485db011a5c8b2a9f51303791ee988979a8f7c9455d0452697b6c57343e7fb83d26858174031af04e622afa7eb4c0ac70e44a11951b8845bdd55420e73be49b77612b6e3883be06dd11646cc2ca101703df326ad4fbb7f0e266bb8d79cd0eff011e3037bd354f96effd17b63da38c3456ee269c033265f4b1cff2b67a22af3f20b26ff6ede4b9fdfbebfd52a4d0980bcafd825b3a374956c2bbad0f77e4746431faf6943af784143cdf4cd78b17e573d54d9599f65be387fbdf9e1cb91838b0e2638f8a39316b8f530f5018845f9131f8ca70d92d88ceb845f4b758333a30119495331f462f7f3a3c7a05ab33ad2752f1b348178e1e7a491eb59433034f564a0ba2fdd00f575ce5614f068561ce0eb5ff422eb7cd14297428f75145846ce5ae151719278fc86b997f1df9ca0c604cd647b6950d3e199a9d2e68143b9bfcb31565118c9b3b1c2aca44c2d74e75b78b2534516f7fcc2481fe7d90bd2703f4e10f467545e57514bbb5aad42a6932b00e5e704facfbc9cd4b9630a601c70a6b1267caee2c7330797d98677cc3f768783fcc57d9f3118057e00b3efecceb1c26b0c540d13c0140a0abcebb47ce5a72db36e1d19a2ea933e9faa10c5d63fe361dc8b6571efc27b58b0a1999c1ae4111d31052375e86a190174653b5414c3bc61b65865d725b6733f5beb69b15d00053213551e5b2794d65df891d00268bdb9a1f0dae5f0c2edd998ada8bf08d9f7533208e51efef5ded3fa5b7ba5df46eed471fdbe8cf97ffd2771bdbad6a8738b60f14848509e5fb6e97ed4266f16d53fa03ff37fb0828f70b9659bcc9fc4393b69712882bf4668115fddaaac819740f37abc1b85fab0f6289dc575f115fadd84f05ac7e6aa84e3e9b4279671521073b5ea7a2784b84f5d1210ee4cd8a085ba0807bcb17834c050fb18ec8bf3b6dcbadab235d03b73d83382ba54e6ecd2ca35b8fa52c3db4a4834c00fcf8a19e2566d5482771da37f011d1ebde7380eaae24139191c2422fa47dab0f5a2b8fbbd98c881863c1124114a75574964a15423fa293e11c5e273083efcd85ae8d4c8162381547e4d795674cec56a434e9f3b5ec4cfe06e37f92e2ebf4a615298d12c65b8eaa589d7be170c56f69871e9b251ac9be1ce33cd841d4b330612d6b45c421922"}}}}}}, 0x0) 19.431500713s ago: executing program 5 (id=1986): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) socket$kcm(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40c0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x7f, 0x2, 0x3, 0x1, 0x7, 0xfffc}, 0xffffffffffffff5e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x7, @private1, 0x98}, 0x20) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="111102000020060028000200000001006d4b630018000500000000000000000100c2800008000500080000000802050000000000e5d4e042aa24c85e6b54096217d3a36dccba5c74651da2a360d66554c11ad75e3b7bc5ec0f621c228e1233c8676bc8ec3c88526d389484bd863de5288306cfb156207e7d32354eb2d3d389c7c38ab06f4920", @ANYRESHEX=r8, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 19.337245232s ago: executing program 2 (id=1987): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0xfc9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x3, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0xf2, 0x7f}}]}, 0x34}}, 0x4000010) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01162cbd7000ffdbdf250c000020040002000000c01bdd1d82e76abf03b22ff84756e97b272de5bc1c0feec4ba809fd2ffb3134b9a2784b066e40be60de4ed57830e259789086502f0595133891c7bd6f75318962608fb33f4d5cb13446687b868cf3b833b"], 0x18}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10) close(r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r10, 0x0, 0x29, &(0x7f0000001600)=""/176, &(0x7f00000016c0)=0xb0) close(0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r11 = socket(0x8, 0x3, 0x0) writev(r11, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002940)="59721f1223e8d1f829bfa3e27a317bdab2973149c7b70b981e5e3dbd2a155a52d656b4905bdd65efe73e0d7896bd62023c88703efa4f3caea27440771a984b72af9c1b77c769c079910affdf3a6062f4e02dab52e170341db4f21427ceff61104fb0733ad13a4eabd6", 0x69}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20) setsockopt$inet6_tcp_int(r9, 0x6, 0x19, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500e5ff7d90868cf44600000000000000", @ANYRES32=0x0, @ANYBLOB="15010000812000001800128008000100677470000c00028008000300feffffff"], 0x38}}, 0x28000000) 19.036912424s ago: executing program 5 (id=1991): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x200}, 0x1c) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000100)) listen(r0, 0x10000000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000200)=0x8, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000400)={&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x31}, 0xa}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x897b, 0x3, 0x6, 0x400}}], 0x18, 0x4014}, 0x2c0408d0) connect$inet(r4, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10) 18.857972425s ago: executing program 3 (id=1992): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xb, 0x9, 0x5, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8000, 0x3, 0x5f}}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_OIF={0x0, 0x4, r1}, @RTA_EXPIRES={0x8, 0x17, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000003dd000061104000000000060000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.808285942s ago: executing program 4 (id=1993): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000008000000000000180100002021702500000000002020207b1af8ff00000000bf080000000000000064aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054300de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x5d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000) getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x48801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x24000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c3100004a1000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="49000000010001", 0x7) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.683954744s ago: executing program 3 (id=1994): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22385}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}}, 0x4000010) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 18.547939907s ago: executing program 2 (id=1995): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000), 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000400)=0x101, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x4, 0x0, 0x1, 0x5e, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1}, 0xc) 18.416576857s ago: executing program 3 (id=1996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xprtrdma_err_chunk\x00', r1, 0x0, 0x81}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14, 0x10, 0x30}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x0, 0x1, 'syz0\x00'}}], {0x14}}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18.361519134s ago: executing program 3 (id=1997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6c9, &(0x7f0000000c00)={@local, @empty, @void, {@mpls_mc={0x8848, {[], @llc={@llc={0xe51e05055d516789, 0x0, "d2", "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"}}}}}}, 0x0) 18.248619995s ago: executing program 3 (id=1999): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB="030000000000000000f500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r2, 0x0, 0xa0028000}, 0x86) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x1, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd7000ffdbdf2507000000080001001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000900005a00000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x44c, 0x31, 0x3d, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1e, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x6, 0x8000, 0x100000, 0x1, 0x7ff, 0x1, 0x10000, 0x9, 0x0, 0x10000, 0x4, 0x9, 0x6, 0x5, 0x10, 0x1000, 0x200, 0x1, 0x0, 0x4, 0xa0, 0x32d4, 0xa, 0x80000000, 0x3, 0x4f7, 0x0, 0x9, 0x3, 0xfffffff5, 0x7, 0x3, 0x4, 0x80ed, 0x7fff, 0xfffffff9, 0x4, 0x4, 0x8, 0x0, 0xb6, 0x7f, 0x43, 0x2, 0xfffffffb, 0x1, 0x1ff, 0x3, 0x9, 0x4, 0x41, 0x905, 0x7, 0x6, 0x3, 0x1, 0x7, 0xffffffff, 0x58, 0x9, 0x7ff, 0xa, 0x2, 0xffffff61, 0x8a8, 0x1, 0x0, 0x8, 0x5, 0xffff8000, 0x1, 0x3, 0xffffffff, 0x4, 0xb, 0x1, 0x8, 0x10001, 0x302160e2, 0x0, 0x1, 0xff, 0x4, 0x80, 0x3, 0x4, 0x1, 0x7, 0x1, 0x7ff, 0xfffffffc, 0x81, 0x7, 0x66d3, 0xfffffffb, 0xef2, 0x9, 0x6, 0x7fffffff, 0x10000e52, 0x7, 0x4, 0x400, 0x0, 0xffffffff, 0x7fffffff, 0x3, 0x2, 0x0, 0x2, 0x9265, 0x3, 0x8, 0xff, 0xb58, 0xe3, 0x0, 0x7000, 0x9ae, 0x2, 0x0, 0x550, 0x2, 0x4, 0x4ca, 0x559b, 0x0, 0x2, 0x2, 0x400, 0x37, 0x1ff, 0x1, 0x6, 0x4, 0xc40, 0x1, 0x1, 0x74, 0xee, 0x9, 0x10000, 0x401, 0xc, 0x59b1, 0xd117, 0xf, 0x7, 0x4, 0xff, 0x80, 0x620a, 0x9, 0x1, 0x2, 0x2, 0x8, 0xfffffbff, 0x43, 0x7, 0x8, 0x2, 0x38a9, 0xd85, 0x8, 0x3, 0x38, 0x4404, 0x1, 0x1020, 0x3ff, 0xf4d, 0x463ae, 0xffffff00, 0xffffffff, 0x9, 0x81, 0xd8, 0x8, 0x1, 0xc1e4, 0xfffffff8, 0x8, 0x3, 0xd, 0x7, 0x1, 0x0, 0x6, 0xc, 0x9, 0x1, 0xe, 0x0, 0x5, 0x8, 0x8, 0x0, 0x66, 0x7, 0x8, 0x1, 0x3, 0x8, 0x0, 0x6, 0x80, 0x6, 0x68f, 0x7, 0x3, 0x7, 0x8, 0xfff, 0x2, 0xe7d, 0x4, 0x4, 0x3, 0x7, 0x9, 0x4, 0x1ff, 0xfffffffd, 0xf45b, 0x9, 0x76, 0x1, 0x3, 0x0, 0x4, 0x326, 0x8, 0x8, 0x80000000, 0x30000, 0x2, 0x800000, 0x1e, 0x40, 0x5, 0x4, 0x9, 0x2, 0xffff, 0x80000001, 0x8, 0x1c000000, 0x84d1, 0xff, 0x84, 0x9, 0x2, 0x800]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES16=r0, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x4) listen(r8, 0x5) write(r8, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) unshare(0x6a040000) 18.041995449s ago: executing program 5 (id=2000): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x3, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001300e9990000000000090000e0000001000000000000000000000000e00000010000000000000000000000000200000000000000000000007da49a76a2a79c5e3a6f91a307367f3e8c89d8781af3f58be35fa31928de6524a040677fbd9dfb8626df65ed01b0278c2dabfb0a46775c05a2f3661c7b3a226430da998ab0e21fcb9ab05442533cfb7b726af7e8b9ce0853574fa3bbb84718349ad709781ab25ad4b9e9fe8e99b68d396c2ac6e1a13a5fffd5bd2ad8a938e04f0cdf3348d28cb42b70d03dd6a5cb994b1781910256ac72a20a9b9b287b2fb02415bf", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/112], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ffff3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000325b6b3fcac1d56300"/101], 0xb8}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x80, 0x8, 0x80, 0x0, {{0x17, 0x4, 0x3, 0xc, 0x5c, 0x66, 0x0, 0x9, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x8, "34e3f9d215c3"}, @cipso={0x86, 0x3e, 0x1, [{0x6, 0x10, "5ed70bce10266b79cd976f12f752"}, {0x0, 0xb, "e2c4ff939f39ccb86d"}, {0x2, 0x6, "ae85ea9c"}, {0x7, 0x7, "cfb94d1d48"}, {0x5, 0x7, "de2b90336b"}, {0x7, 0x7, "12cf9c1bc6"}, {0x5, 0x2}]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x4000800) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x8, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}, @TCA_FLOWER_KEY_CT_LABELS={0x6, 0x61, "c1d1a1d6b8d93b12202bd5dbecc88ebe"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @broadcast}, &(0x7f00000003c0)=0xc) 18.037993869s ago: executing program 4 (id=2001): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0x5a778000) sendmsg$tipc(r0, &(0x7f0000001700)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x8000) 17.820380931s ago: executing program 4 (id=2002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a0000090900010073797a3100000000090002"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x198, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0x3, 0x1}}, [@TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x92, 0xffff, 0x7, 0x1, 0x6, 0x0, 0x3}}, {0xa, 0x2, [0x4, 0x4, 0xa]}}, {{0x1c, 0x1, {0x3, 0x8, 0x8, 0x5, 0x2, 0x30000000, 0x800, 0x7}}, {0x12, 0x2, [0xb, 0xb, 0x200, 0x4, 0x4, 0x1, 0x7]}}, {{0x1c, 0x1, {0x81, 0xff, 0x7fff, 0xc, 0x1, 0x100, 0xceaf, 0x2}}, {0x8, 0x2, [0x7, 0xfffb]}}, {{0x1c, 0x1, {0xf, 0x2, 0x2, 0x10000, 0x1, 0xa, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x40, 0x5, 0x9, 0x2, 0x6, 0x400, 0x8}}, {0x14, 0x2, [0x8, 0x10, 0x0, 0x0, 0xfed4, 0x2, 0x0, 0x0]}}, {{0x1c, 0x1, {0xc6, 0xb0, 0x9, 0x6, 0x2, 0x921, 0x2, 0x4}}, {0xc, 0x2, [0x7, 0x8000, 0xe4, 0x80]}}, {{0x1c, 0x1, {0x6, 0x5, 0x7, 0x2, 0x0, 0x0, 0x5, 0x2}}, {0x8, 0x2, [0xfff, 0x5]}}, {{0x1c, 0x1, {0xf7, 0x7, 0x4, 0x1, 0x0, 0xd, 0x13dccf8b, 0x3}}, {0xa, 0x2, [0x8, 0x9, 0x6]}}, {{0x1c, 0x1, {0x66, 0xbf, 0xfff, 0x5, 0x0, 0x5, 0x9, 0x8}}, {0x14, 0x2, [0xffff, 0x800, 0xff52, 0x5, 0x5, 0x3, 0x100, 0x9]}}]}]}, 0x198}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) 17.611522353s ago: executing program 5 (id=2004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000500)="dd788cd6c1efae51a4217a622821e639485c1aa91e182e3a98dd454cc1769e97de9e3c8b98670955cc57149a2ad34ef17bc4227bf3834b42051aa56d1ada5d987e66601e527c6eb829", 0x49, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r1, 0x29, 0x1e, &(0x7f0000000280)=0x100, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r3) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000417c160c2a1a10be369e2b5651db4a84fea0cb0b9592c2e5269f9e200144c7207808bae4c5f9639fb0f1cd261199c06b457094a16ad490f92e0faa94091e6058892e07dded75cbf11a0c9136ed3710ac68208e973181548223277df5d887b3fcba89d8dcac661f767b7a9769ecc0ffd2", @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x40) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 17.436046403s ago: executing program 4 (id=2005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='itimer_state\x00', r0, 0x0, 0x400002000010}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r3, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x40000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRESDEC=r3, @ANYRESDEC=r4, @ANYRES16=r1, @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES64, @ANYRESOCT=r5], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r8}, &(0x7f0000000980), &(0x7f00000009c0)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r8, &(0x7f0000000680), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000063c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x8000002) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x10000009}) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000000080)={0x40000011}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r6, &(0x7f0000000140)) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002d00090027bd7000000000000400000030000dac0f0005ac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c10000"], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r14, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 17.321814145s ago: executing program 2 (id=2006): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept(r1, &(0x7f0000000440)=@pppoe, &(0x7f0000000400)=0x80) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000003e07ebb6288f2f1952000701feffff0000dc4ff214752264d7540aece375773fdea41f46489b7cf22d0a0b8e5c1400e100000000000040000000000000000000ea0400028000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xd5, "2ec1e55c58407b18778bf44a370d6d366d5ccb39142e4fee1339cfda4c7d4ebf18b39cafc07bc95a410862897c6bec4be6b993ea4eadf37862471b9d44140d6098e327b41add19e6d98c3a8756ed5d3f0ac1bd536006920da2ceada8b38ea323f0a66b018445629361577a47ee61f9499c7475fe3ba379a16d07249eb7e171672f290218a9e4004d1c8400fa4bee589ba7e26b4ee5f17f01a2c1b002d26598f9efd438eb6fb1ba55cdbfe7cfd6971ec95d7d41208094f8921ef4e62766645d714ca8419e1c93b77676db54a4a384867925e4fb8324"}, &(0x7f0000000340)=0xdd) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000380)={r4, 0x1}, &(0x7f00000003c0)=0x8) 16.261632858s ago: executing program 0 (id=2010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x2}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff58f, 0x0, 0x0, 0x0, 0x2d}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x1490, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000200), &(0x7f0000000240)=[{0x1, 0x4, 0x6, 0x5}, {0x4, 0x4, 0x8, 0xa}, {0x5, 0x4, 0x4, 0x7}, {0x1, 0x2, 0x5, 0x2}, {0x2, 0x5, 0x4, 0x9}], 0x10, 0x4}, 0x94) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) (async) r4 = getpid() (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8803) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@remote, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3a, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x20004880}, 0xc000) (async, rerun: 32) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYRES16=r4], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b800000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a004000000000000fb852af3b0000000000000000000000000000009d63c6bf6d559e24a29c66992b125cf6477cf576284a13a4435a82467faebdce87345dd24de609e616f8e3885e73bfc1bcce72cabae2680052ed791c05dbeb1c3f01ceb290c943e8009899a9d899c57acbbab74ff63a62e025", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/112], 0xb8}}, 0x4000) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r11, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000b80)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r12, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r13}, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000bc0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8eb2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r14}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) setsockopt$MRT_TABLE(r10, 0x0, 0xcf, &(0x7f0000000380)=0xffffff03, 0x4) unshare(0x24020400) 16.168285536s ago: executing program 0 (id=2011): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000001080)=0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x1}, 0x18) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x16}]}}]}, 0x60}}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@generic={0xcf, 0x1, 0xb, 0x0, 0x9}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x0, 0x1, 0xa, 0x80, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0xf, &(0x7f0000000240)=""/15, 0x41000, 0x9, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x10000}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xd, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[r7, r6, r6, r6, r7, r6, r7, 0xffffffffffffffff, r7], &(0x7f0000000840)=[{0x1, 0x1, 0x3, 0x1}], 0x10, 0x6}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r6, 0x7ca8e000) writev(r7, &(0x7f0000000080)=[{0x0}], 0x1) accept4(r0, 0x0, 0x0, 0x800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x7a44, 0x1700) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x7a05, 0x1700) write$cgroup_type(r10, &(0x7f00000000c0), 0x9) sendfile(r10, r9, 0x0, 0x10000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r11, &(0x7f00000004c0), 0x0, 0xfffffffc, 0x0) write$cgroup_subtree(r11, 0x0, 0x0) 15.965256818s ago: executing program 0 (id=2012): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @bcast, @rose={'rose', 0x0}, 0x7ff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x81, 0x9}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x103}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'geneve1\x00'}) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x4000049) 15.776924604s ago: executing program 0 (id=2013): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x2, 0x0, 0x1}, {0xfffff}]}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x38}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000500)=0xc) r5 = getuid() sendmmsg$unix(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000400)="6a88a86dd1d07438dc7bddfb06f0b8e2f42fa5fb981face2626db11508d3aebdcbc401f91999efee46e56cd7a7f5892aa5159f204037ff26187d57edfeac459075231be8d4f267e3722e87f9407fca9a810a91308922cd35eaa955bd33034948d330c402d40d2be09e85e030b548e36311a7d75cc677a2c534c9b48c79b5cd9e756b412a5e9b5f459a995bbffd315acb440be366dec271d852048e8c1ddcc4292fffeee404945f2ff2bb0f27ec", 0xad}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r1, r0, r0, r1, r0]}}], 0x50, 0x4000c}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000005c0)="ac480a01ed745ea5e7efab1c00d4b86fe8520be5daecea8ca5b3208d13ca91dcb36872b4b355fcd2b50d17d64cc49710396f1153751e25f6d11bbb1288f04942ecc27dcd349fee469032dd0732dbdd5d7c84ffebf0b24a81f901c74d861489c45593ddb6aeabeb81a941416a4397957feba7693a9f78ba3a364f9772ebcb0bde0dc3276f", 0x84}, {&(0x7f0000000680)="22af259095c40bf834a338e494287a504cbb80b4b7635317846bbcc8e68498291838b68b0b9da5e5f621c8d7143837ec6c87f4d48b5d26701d94746dd6b9305d0c168e2ac5a781332c901e936dd6b3b25c1fbe55bd113cc7b0b79ed4efb5cddba8daf51903d5448a96", 0x69}, {&(0x7f0000000700)="456ac8e565db4008a5a241f29be41fd35227c854b1c2a8d431eed767b503622918588c2dea9fc70e65dfd886aee72d94dfd86a97882941f0da6943d05ef6a8b3b472a3f3b7f284da9e9706e235bebf0920591d573b6b7dfc976285ee6424c857ce7226ee3af3a4dc35f1a59ec17b9f0d740300ae9445120b2e1f669a372ede3b4b877f1f245d241e3d70334f78731b4d64d2be249d9da401ad", 0x99}, {&(0x7f0000000940)="c8a9d1c421880e9158689492683db99522d9b9d804d55f7a766538d8a2b50f99a7fa8ed7b1ba76000c8a663e854c1c6f7f772b5a089e5a052256314a91bf616fb9f0c53870aac75b3daa9c6e5b7bf064963d38f5ef334e567791e872e136c60a652622e0ff4d512c20437451d900069f56da701100242d39bd", 0x79}, {&(0x7f00000009c0)="95c37e061bcbe40db757bc2884a47db8fc1e7370d3608c3498fc27a6c5fa7f631dd542df3c0060297c1d842c98c8e2cea638581d84577d7cd2852c5f23a4dbcf84116622af65ad7ca141b74f1d5666c2551b36099bad2fca4542d0ccd62a9fc0dd09aa1586148785e760ed8c5347669f1ef9b0434ea0a192eea08452d43175fb6b01084488e7856ec283f7b5f6b958b6899dc400658b279ef9c07755218b459bc4441b1711a7d9a4c8b71fe074772d865eb63fd4ee3ad744865ca6f7a94eccd0811ce19b5b27e065fa8059953c72", 0xce}, {&(0x7f00000007c0)="5cca3f7d7d1834ae1114e90a633b323267732507cf21cc1d6a839a11f845a0d5354e4a7522ee086498766965d6cf7fee7fe6fdc01e", 0x35}, {&(0x7f0000000ac0)="371099c1b28c6c2cbb339c9a9038bac7e8b4c93f12ce43607d51a001f2f4f90a4cae84c683503d745a9cf396dbd54fde49f82c068ee2e6a4ebc3ef82b2f0c3e79b6b913b63ac8071c603", 0x4a}], 0x7, 0x0, 0x0, 0xc000}}], 0x2, 0x50) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0x15}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r8, 0x18000000000002a0, 0x14, 0x41, &(0x7f00000004c0)="b9ff030768441a8cb89e14f00800e075702b1c1d", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.680368688s ago: executing program 0 (id=2014): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000080)="9265e0", 0x3}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 15.654462425s ago: executing program 0 (id=2015): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5, 0x60ff, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3acf1ec7ae70bb24"}}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r3, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x3c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r5, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@fwd={0x1}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xa, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x30, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000001540)=""/74, 0x48, 0x4a, 0x1}, 0x28) 15.091280183s ago: executing program 3 (id=2016): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000088000000", @ANYRES32, @ANYBLOB="000002000022678e72aeb3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000024000000040000000300000008000000", @ANYRES32, @ANYBLOB="acd000"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async) read$nci(r6, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r5, &(0x7f0000000380)}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000300)={0x24, @short={0x2, 0x26f3e3c91cc806ff, 0xaaa3}}, 0x14) (rerun: 32) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r13, &(0x7f0000000100), 0xa, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 2.042950416s ago: executing program 33 (id=2004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000500)="dd788cd6c1efae51a4217a622821e639485c1aa91e182e3a98dd454cc1769e97de9e3c8b98670955cc57149a2ad34ef17bc4227bf3834b42051aa56d1ada5d987e66601e527c6eb829", 0x49, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r1, 0x29, 0x1e, &(0x7f0000000280)=0x100, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r3) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000417c160c2a1a10be369e2b5651db4a84fea0cb0b9592c2e5269f9e200144c7207808bae4c5f9639fb0f1cd261199c06b457094a16ad490f92e0faa94091e6058892e07dded75cbf11a0c9136ed3710ac68208e973181548223277df5d887b3fcba89d8dcac661f767b7a9769ecc0ffd2", @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x40) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 2.01308904s ago: executing program 34 (id=2006): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept(r1, &(0x7f0000000440)=@pppoe, &(0x7f0000000400)=0x80) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000003e07ebb6288f2f1952000701feffff0000dc4ff214752264d7540aece375773fdea41f46489b7cf22d0a0b8e5c1400e100000000000040000000000000000000ea0400028000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xd5, "2ec1e55c58407b18778bf44a370d6d366d5ccb39142e4fee1339cfda4c7d4ebf18b39cafc07bc95a410862897c6bec4be6b993ea4eadf37862471b9d44140d6098e327b41add19e6d98c3a8756ed5d3f0ac1bd536006920da2ceada8b38ea323f0a66b018445629361577a47ee61f9499c7475fe3ba379a16d07249eb7e171672f290218a9e4004d1c8400fa4bee589ba7e26b4ee5f17f01a2c1b002d26598f9efd438eb6fb1ba55cdbfe7cfd6971ec95d7d41208094f8921ef4e62766645d714ca8419e1c93b77676db54a4a384867925e4fb8324"}, &(0x7f0000000340)=0xdd) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000380)={r4, 0x1}, &(0x7f00000003c0)=0x8) 1.971150618s ago: executing program 35 (id=2005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='itimer_state\x00', r0, 0x0, 0x400002000010}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r3, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x40000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRESDEC=r3, @ANYRESDEC=r4, @ANYRES16=r1, @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES64, @ANYRESOCT=r5], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r8}, &(0x7f0000000980), &(0x7f00000009c0)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r8, &(0x7f0000000680), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000063c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x8000002) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x10000009}) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000000080)={0x40000011}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r6, &(0x7f0000000140)) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002d00090027bd7000000000000400000030000dac0f0005ac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c10000"], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r14, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 42.703324ms ago: executing program 36 (id=2015): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5, 0x60ff, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3acf1ec7ae70bb24"}}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r3, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x3c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r5, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@fwd={0x1}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xa, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x30, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000001540)=""/74, 0x48, 0x4a, 0x1}, 0x28) 0s ago: executing program 37 (id=2016): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000088000000", @ANYRES32, @ANYBLOB="000002000022678e72aeb3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000024000000040000000300000008000000", @ANYRES32, @ANYBLOB="acd000"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async) read$nci(r6, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r5, &(0x7f0000000380)}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000300)={0x24, @short={0x2, 0x26f3e3c91cc806ff, 0xaaa3}}, 0x14) (rerun: 32) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r13, &(0x7f0000000100), 0xa, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) kernel console output (not intermixed with test programs): .872330][ T6972] syzkaller0: entered promiscuous mode [ 131.914740][ T6972] syzkaller0: entered allmulticast mode [ 131.975473][ T6972] tipc: Resetting bearer [ 132.025245][ T6971] tipc: Resetting bearer [ 132.059374][ T6971] tipc: Disabling bearer [ 132.800821][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.808129][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.059218][ T7010] rdma_op ffff88804e8e81f0 conn xmit_rdma 0000000000000000 [ 133.598421][ T7025] netlink: 'syz.3.222': attribute type 5 has an invalid length. [ 133.608406][ T7025] netlink: 'syz.3.222': attribute type 7 has an invalid length. [ 133.713408][ T7025] : entered promiscuous mode [ 134.100230][ T7046] __nla_validate_parse: 2 callbacks suppressed [ 134.100247][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 134.265752][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 134.466311][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.474185][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.810419][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.828203][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.022120][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.061309][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.142477][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'. [ 135.151820][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.253083][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.295325][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 135.567831][ T7077] bond1: entered promiscuous mode [ 135.596606][ T7077] bond1: entered allmulticast mode [ 135.602773][ T7077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.097215][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.241'. [ 136.331097][ T7119] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 136.416255][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 136.473812][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 136.510696][ T7127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.246'. [ 136.531505][ T7132] syz_tun: entered allmulticast mode [ 136.583402][ T7128] dvmrp8: entered allmulticast mode [ 136.744254][ T7132] netlink: 'syz.2.244': attribute type 23 has an invalid length. [ 137.251475][ T7125] syz_tun: left allmulticast mode [ 137.257115][ T7125] dvmrp8: left allmulticast mode [ 137.310728][ T7164] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 138.044466][ T7175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.258'. [ 138.106156][ T7180] tipc: Enabling of bearer rejected, failed to enable media [ 138.340745][ T7190] netlink: 'syz.2.263': attribute type 13 has an invalid length. [ 138.368546][ T7190] netlink: 'syz.2.263': attribute type 17 has an invalid length. [ 138.527808][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 138.646551][ T7190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.656020][ T7190] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.686681][ T7190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.594075][ T7235] ip6tnl1: entered allmulticast mode [ 139.759639][ T7230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.802761][ T7230] bond0: (slave bond1): Enslaving as an active interface with an up link [ 139.918767][ T7252] FAULT_INJECTION: forcing a failure. [ 139.918767][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.949831][ T7252] CPU: 1 UID: 0 PID: 7252 Comm: syz.1.277 Not tainted syzkaller #0 PREEMPT(full) [ 139.949855][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.949872][ T7252] Call Trace: [ 139.949879][ T7252] [ 139.949887][ T7252] dump_stack_lvl+0x189/0x250 [ 139.949919][ T7252] ? __pfx____ratelimit+0x10/0x10 [ 139.949937][ T7252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.949955][ T7252] ? __pfx__printk+0x10/0x10 [ 139.949988][ T7252] should_fail_ex+0x414/0x560 [ 139.950014][ T7252] _copy_to_user+0x31/0xb0 [ 139.950037][ T7252] simple_read_from_buffer+0xe1/0x170 [ 139.950065][ T7252] proc_fail_nth_read+0x1b3/0x220 [ 139.950087][ T7252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.950109][ T7252] ? rw_verify_area+0x2a6/0x4d0 [ 139.950128][ T7252] ? __lock_acquire+0xab9/0xd20 [ 139.950148][ T7252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.950167][ T7252] vfs_read+0x200/0xa30 [ 139.950185][ T7252] ? fdget_pos+0x247/0x320 [ 139.950204][ T7252] ? __pfx___mutex_lock+0x10/0x10 [ 139.950222][ T7252] ? __pfx_vfs_read+0x10/0x10 [ 139.950244][ T7252] ? __fget_files+0x2a/0x420 [ 139.950264][ T7252] ? __fget_files+0x3a0/0x420 [ 139.950277][ T7252] ? __fget_files+0x2a/0x420 [ 139.950300][ T7252] ksys_read+0x145/0x250 [ 139.950321][ T7252] ? __pfx_ksys_read+0x10/0x10 [ 139.950338][ T7252] ? rcu_is_watching+0x15/0xb0 [ 139.950360][ T7252] ? do_syscall_64+0xbe/0x3b0 [ 139.950383][ T7252] do_syscall_64+0xfa/0x3b0 [ 139.950399][ T7252] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.950416][ T7252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.950432][ T7252] ? clear_bhb_loop+0x60/0xb0 [ 139.950461][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.950477][ T7252] RIP: 0033:0x7fdfd7d8d5fc [ 139.950500][ T7252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.950513][ T7252] RSP: 002b:00007fdfd8b81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.950534][ T7252] RAX: ffffffffffffffda RBX: 00007fdfd7fc5fa0 RCX: 00007fdfd7d8d5fc [ 139.950546][ T7252] RDX: 000000000000000f RSI: 00007fdfd8b810a0 RDI: 0000000000000004 [ 139.950556][ T7252] RBP: 00007fdfd8b81090 R08: 0000000000000000 R09: 0000000000000000 [ 139.950566][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.950576][ T7252] R13: 00007fdfd7fc6038 R14: 00007fdfd7fc5fa0 R15: 00007ffddcdaf968 [ 139.950605][ T7252] [ 140.411040][ T7258] netlink: 'syz.3.280': attribute type 10 has an invalid length. [ 140.776990][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.784801][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.853021][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.860273][ T7258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.867868][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.875062][ T7258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.002659][ T7258] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.032207][ T7275] ip6tnl1: entered allmulticast mode [ 141.248591][ T7296] __nla_validate_parse: 1 callbacks suppressed [ 141.248608][ T7296] netlink: 460 bytes leftover after parsing attributes in process `syz.3.289'. [ 141.508405][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 141.540885][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 141.588553][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.290'. [ 141.757434][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 141.798671][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 141.811022][ T7313] tap0: tun_chr_ioctl cmd 2147767507 [ 141.833601][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 141.866203][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 142.408189][ T9] IPVS: starting estimator thread 0... [ 142.420410][ T7347] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 142.506616][ T7348] IPVS: using max 26 ests per chain, 62400 per kthread [ 142.567090][ T7352] netlink: 'syz.3.308': attribute type 3 has an invalid length. [ 142.576807][ T7350] netlink: 'syz.0.307': attribute type 3 has an invalid length. [ 142.589000][ T7350] syz_tun: entered allmulticast mode [ 142.613884][ T7350] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.654979][ T7350] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 142.899124][ T7349] syz_tun: left allmulticast mode [ 143.704243][ T7398] !: renamed from dummy0 (while UP) [ 143.759065][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 143.945510][ T7399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.033563][ T7399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.085598][ T7399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.093020][ T7399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.419609][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 144.489915][ T7404] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 144.552606][ T7404] netlink: 'syz.1.323': attribute type 10 has an invalid length. [ 144.644054][ T7404] batman_adv: batadv0: Adding interface: virt_wifi0 [ 144.676322][ T7404] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.765452][ T7404] batman_adv: batadv0: Interface activated: virt_wifi0 [ 145.340733][ T7448] Illegal XDP return value 4294967262 on prog (id 246) dev N/A, expect packet loss! [ 145.583711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.707088][ T7466] netlink: 'syz.2.336': attribute type 13 has an invalid length. [ 145.727028][ T7466] netlink: 'syz.2.336': attribute type 17 has an invalid length. [ 145.760071][ T7466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.779007][ T7469] tipc: Enabled bearer , priority 0 [ 145.846476][ T7469] tipc: Disabling bearer [ 146.477898][ T7498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.509624][ T7492] __nla_validate_parse: 3 callbacks suppressed [ 146.509641][ T7492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'. [ 146.510424][ T7502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.346'. [ 146.535870][ T7502] (unnamed net_device) (uninitialized): option ad_select: invalid value (44) [ 146.548483][ T7502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.749219][ T7513] netlink: 'syz.1.347': attribute type 3 has an invalid length. [ 146.911949][ T7518] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 147.083315][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 147.273879][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 147.296128][ T7544] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 24, id = 0 [ 147.560887][ T7553] netlink: 'syz.0.359': attribute type 10 has an invalid length. [ 147.617693][ T7554] netlink: 'syz.0.359': attribute type 10 has an invalid length. [ 147.637207][ T7559] Bluetooth: MGMT ver 1.23 [ 147.668826][ T7555] netlink: 'syz.0.359': attribute type 10 has an invalid length. [ 147.711152][ T7553] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 147.736843][ T7553] team0: Failed to send options change via netlink (err -105) [ 147.764340][ T7553] team0: Port device netdevsim0 added [ 147.840934][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 147.852144][ T7554] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.875361][ T7554] team0: Failed to send options change via netlink (err -105) [ 147.898549][ T7554] team0: Port device dummy0 added [ 147.907877][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 147.919113][ T7555] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.951635][ T7555] team0: Failed to send options change via netlink (err -105) [ 147.959521][ T7555] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.969869][ T7555] team0: Port device dummy0 removed [ 147.979159][ T7555] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.120603][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'. [ 148.171201][ T7578] netlink: 256 bytes leftover after parsing attributes in process `syz.2.368'. [ 148.301739][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 149.304269][ T7631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.379'. [ 149.469994][ T7631] trusted_key: syz.0.379 sent an empty control message without MSG_MORE. [ 149.819567][ T7647] netlink: 'syz.2.383': attribute type 20 has an invalid length. [ 149.868177][ T7652] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 150.003280][ T7663] netlink: 'syz.0.385': attribute type 13 has an invalid length. [ 150.040952][ T7663] netlink: 'syz.0.385': attribute type 17 has an invalid length. [ 150.349704][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.361101][ T7663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.717416][ T7691] netlink: 'syz.2.391': attribute type 4 has an invalid length. [ 151.292802][ T7720] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 151.339894][ T7717] team0: No ports can be present during mode change [ 151.414848][ T7720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.492664][ T7733] netlink: 'syz.3.403': attribute type 18 has an invalid length. [ 151.687609][ T7739] tap0: tun_chr_ioctl cmd 1074025677 [ 151.697545][ T7739] tap0: linktype set to 270 [ 151.801727][ T7733] syz.3.403 (7733) used greatest stack depth: 16088 bytes left [ 151.938826][ T7759] __nla_validate_parse: 12 callbacks suppressed [ 151.938843][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.412'. [ 151.959267][ T7756] dvmrp1: entered allmulticast mode [ 151.966247][ T7756] dvmrp1: left allmulticast mode [ 152.294360][ T7759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.098529][ T7804] syzkaller0: entered promiscuous mode [ 153.110227][ T7804] syzkaller0: entered allmulticast mode [ 153.138370][ T7807] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 153.195173][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 153.221782][ T7816] IPVS: Error joining to the multicast group [ 153.234578][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'. [ 153.250114][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 153.317171][ T7821] netlink: 60 bytes leftover after parsing attributes in process `syz.0.425'. [ 153.328726][ T7821] netlink: 676 bytes leftover after parsing attributes in process `syz.0.425'. [ 153.355795][ T7821] netlink: 676 bytes leftover after parsing attributes in process `syz.0.425'. [ 153.519518][ T7835] sctp: [Deprecated]: syz.4.430 (pid 7835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.519518][ T7835] Use struct sctp_sack_info instead [ 153.558820][ T7839] sctp: [Deprecated]: syz.4.430 (pid 7839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.558820][ T7839] Use struct sctp_sack_info instead [ 153.856649][ T7854] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 153.944352][ T7854] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 154.146965][ T7877] pim6reg1: entered promiscuous mode [ 154.152369][ T7877] pim6reg1: entered allmulticast mode [ 154.297049][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 154.519112][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 154.548896][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 154.677495][ T7918] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 155.274724][ T7947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.403773][ T7952] tipc: Enabled bearer , priority 0 [ 155.528876][ T7951] tipc: Disabling bearer [ 155.634518][ T7969] openvswitch: netlink: Missing key (keys=40, expected=100) [ 155.891810][ T7980] tipc: Enabled bearer , priority 0 [ 155.958929][ T7980] syzkaller0: entered promiscuous mode [ 155.964893][ T7980] syzkaller0: entered allmulticast mode [ 156.016221][ T7986] tipc: Resetting bearer [ 156.112731][ T7986] tipc: Disabling bearer [ 156.120832][ T7991] can: request_module (can-proto-4) failed. [ 156.544066][ T8010] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 156.595299][ T8018] netlink: 'syz.2.478': attribute type 3 has an invalid length. [ 156.637563][ T8014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 156.909496][ T8038] tipc: Started in network mode [ 156.923738][ T8038] tipc: Node identity 424b0416ff4a, cluster identity 4711 [ 156.931665][ T8038] tipc: Enabled bearer , priority 0 [ 156.961942][ T8033] syzkaller0: entered promiscuous mode [ 157.023410][ T8033] syzkaller0: entered allmulticast mode [ 157.087908][ T8033] tipc: Resetting bearer [ 157.174640][ T8033] tipc: Disabling bearer [ 158.079786][ T8081] netlink: 'syz.3.492': attribute type 3 has an invalid length. [ 158.091271][ T8081] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 158.101717][ T8081] __nla_validate_parse: 11 callbacks suppressed [ 158.101734][ T8081] netlink: 220 bytes leftover after parsing attributes in process `syz.3.492'. [ 158.122647][ T8083] netlink: 'syz.3.492': attribute type 3 has an invalid length. [ 158.130677][ T8083] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 158.142588][ T8083] netlink: 220 bytes leftover after parsing attributes in process `syz.3.492'. [ 158.233803][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 158.242924][ T8087] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 158.314895][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.493'. [ 158.346595][ T8090] netlink: 240 bytes leftover after parsing attributes in process `syz.2.494'. [ 158.428188][ T8096] netlink: 'syz.3.496': attribute type 2 has an invalid length. [ 158.497578][ T8098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.497'. [ 158.900645][ T8120] netlink: 48 bytes leftover after parsing attributes in process `syz.2.504'. [ 159.005342][ T8120] netlink: 'syz.2.504': attribute type 29 has an invalid length. [ 159.013152][ T8124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.211339][ T8129] ip6gretap0: entered promiscuous mode [ 159.234560][ T8129] vlan2: entered promiscuous mode [ 159.360279][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 159.434836][ T8140] netlink: 248 bytes leftover after parsing attributes in process `syz.3.512'. [ 159.573128][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 159.677206][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.690384][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.726124][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.781020][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.797300][ T8182] veth0: entered promiscuous mode [ 160.815718][ T8178] can: request_module (can-proto-0) failed. [ 160.844236][ T8182] veth0: left promiscuous mode [ 160.967110][ T8157] netlink: 'syz.0.515': attribute type 1 has an invalid length. [ 162.078527][ T8240] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 162.095132][ T8244] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 162.134333][ T8244] netlink: 'syz.4.542': attribute type 3 has an invalid length. [ 162.357679][ T8262] netlink: 'syz.0.548': attribute type 13 has an invalid length. [ 162.618664][ T8283] netlink: 'syz.2.553': attribute type 1 has an invalid length. [ 162.792155][ T8283] bond2: entered promiscuous mode [ 162.819218][ T8283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.173994][ T8312] __nla_validate_parse: 20 callbacks suppressed [ 163.174011][ T8312] netlink: 44 bytes leftover after parsing attributes in process `syz.2.559'. [ 163.333571][ T8314] nbd1: detected capacity change from 0 to 549764202496 [ 163.530542][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 163.554604][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 163.564383][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 163.588975][ T8319] syzkaller1: entered promiscuous mode [ 163.597874][ T8319] syzkaller1: entered allmulticast mode [ 163.617378][ T8331] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 163.849853][ T5868] block nbd1: Receive control failed (result -32) [ 163.879083][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'. [ 163.895065][ T8341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.567'. [ 163.917164][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 164.143064][ T8345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.321047][ T8345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.410712][ T8366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.571'. [ 164.493378][ T8345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.699084][ T8345] team0: Port device netdevsim0 removed [ 164.715999][ T8345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.251446][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.415068][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.488652][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.519356][ T8415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.584'. [ 165.891777][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.915846][ T8436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.014778][ T8436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.203345][ T8439] netlink: 44 bytes leftover after parsing attributes in process `syz.4.590'. [ 166.289141][ T8452] bond0: entered promiscuous mode [ 166.295373][ T8452] bond_slave_0: entered promiscuous mode [ 166.301359][ T8452] bond_slave_1: entered promiscuous mode [ 166.301780][ T8455] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 166.307629][ T8452] bridge0: entered promiscuous mode [ 166.326213][ T8452] bond0: left promiscuous mode [ 166.331121][ T8452] bond_slave_0: left promiscuous mode [ 166.338445][ T8452] bond_slave_1: left promiscuous mode [ 166.345177][ T8452] bridge0: left promiscuous mode [ 166.387091][ T8455] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 166.520762][ T8467] netlink: 'syz.3.598': attribute type 7 has an invalid length. [ 167.365716][ T8503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.449010][ T8503] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.672020][ T8529] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 167.679362][ T8529] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 168.441613][ T8573] __nla_validate_parse: 9 callbacks suppressed [ 168.441631][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.629'. [ 168.453803][ T8574] netlink: 'syz.4.628': attribute type 13 has an invalid length. [ 168.661013][ T8583] sch_fq: defrate 0 ignored. [ 168.748748][ T8585] tipc: Enabled bearer , priority 0 [ 168.757230][ T8585] syzkaller0: entered promiscuous mode [ 168.762891][ T8585] syzkaller0: entered allmulticast mode [ 168.789470][ T8584] tipc: Resetting bearer [ 168.838969][ T8584] tipc: Disabling bearer [ 168.897736][ T8594] netlink: 'syz.2.635': attribute type 10 has an invalid length. [ 168.910948][ T8594] team0: Port device dummy0 added [ 168.919543][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 168.954079][ T8599] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 169.093237][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 169.111869][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.640'. [ 169.119141][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 169.145488][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 169.162458][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 169.188699][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 169.222439][ T8614] netlink: 88 bytes leftover after parsing attributes in process `syz.4.639'. [ 169.290342][ T8630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.644'. [ 169.409129][ T8636] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 169.489466][ T8636] bond0: (slave bond_slave_1): Releasing backup interface [ 169.532440][ T8643] tipc: Started in network mode [ 169.538077][ T8643] tipc: Node identity 7e4cf8803e82, cluster identity 4711 [ 169.545620][ T8643] tipc: Enabled bearer , priority 0 [ 169.554494][ T8643] syzkaller0: entered promiscuous mode [ 169.560200][ T8643] syzkaller0: entered allmulticast mode [ 169.581513][ T8642] tipc: Resetting bearer [ 169.608353][ T8642] tipc: Disabling bearer [ 169.862456][ T8657] netlink: 'syz.2.652': attribute type 6 has an invalid length. [ 169.905050][ T8657] netlink: 'syz.2.652': attribute type 12 has an invalid length. [ 170.021952][ T8665] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 170.046121][ T8665] gretap1: entered allmulticast mode [ 170.063761][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 170.733949][ T8721] bond0: (slave batadv0): Releasing backup interface [ 170.749543][ T8721] bridge_slave_0: left allmulticast mode [ 170.757190][ T8721] bridge_slave_0: left promiscuous mode [ 170.763071][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.830313][ T8721] bridge_slave_1: left allmulticast mode [ 170.863716][ T8721] bridge_slave_1: left promiscuous mode [ 170.870842][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.873110][ T8729] netlink: 'syz.1.670': attribute type 9 has an invalid length. [ 170.890691][ T8721] bond0: (slave bond_slave_0): Releasing backup interface [ 170.906513][ T8721] bond0: (slave bond_slave_1): Releasing backup interface [ 170.921410][ T8721] team0: Port device team_slave_0 removed [ 170.933979][ T8721] team0: Port device team_slave_1 removed [ 170.940687][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.949150][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.958192][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.967254][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.450983][ T8747] !: renamed from dummy0 (while UP) [ 172.038872][ T8768] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 172.089533][ T8768] netlink: 'syz.3.682': attribute type 12 has an invalid length. [ 172.098820][ T8773] netlink: 'syz.0.681': attribute type 21 has an invalid length. [ 172.687208][ T8804] netlink: 'syz.4.686': attribute type 21 has an invalid length. [ 172.722863][ T8762] syzkaller0: entered promiscuous mode [ 172.769203][ T8762] syzkaller0: entered allmulticast mode [ 172.866222][ T8815] FAULT_INJECTION: forcing a failure. [ 172.866222][ T8815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.905883][ T8815] CPU: 0 UID: 0 PID: 8815 Comm: syz.4.688 Not tainted syzkaller #0 PREEMPT(full) [ 172.905909][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.905918][ T8815] Call Trace: [ 172.905925][ T8815] [ 172.905933][ T8815] dump_stack_lvl+0x189/0x250 [ 172.905957][ T8815] ? __pfx____ratelimit+0x10/0x10 [ 172.905974][ T8815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.905993][ T8815] ? __pfx__printk+0x10/0x10 [ 172.906014][ T8815] ? __might_fault+0xb0/0x130 [ 172.906047][ T8815] should_fail_ex+0x414/0x560 [ 172.906073][ T8815] _copy_from_iter+0x1de/0x1790 [ 172.906095][ T8815] ? rcu_is_watching+0x15/0xb0 [ 172.906112][ T8815] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 172.906132][ T8815] ? __pfx__copy_from_iter+0x10/0x10 [ 172.906148][ T8815] ? __build_skb_around+0x257/0x3e0 [ 172.906168][ T8815] ? netlink_sendmsg+0x642/0xb30 [ 172.906182][ T8815] ? skb_put+0x11b/0x210 [ 172.906203][ T8815] netlink_sendmsg+0x6b2/0xb30 [ 172.906231][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.906252][ T8815] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.906271][ T8815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.906289][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.906307][ T8815] __sock_sendmsg+0x21c/0x270 [ 172.906333][ T8815] ____sys_sendmsg+0x505/0x830 [ 172.906358][ T8815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.906386][ T8815] ? import_iovec+0x74/0xa0 [ 172.906409][ T8815] ___sys_sendmsg+0x21f/0x2a0 [ 172.906431][ T8815] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.906483][ T8815] ? __fget_files+0x2a/0x420 [ 172.906498][ T8815] ? __fget_files+0x3a0/0x420 [ 172.906524][ T8815] __x64_sys_sendmsg+0x19b/0x260 [ 172.906546][ T8815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.906575][ T8815] ? __pfx_ksys_write+0x10/0x10 [ 172.906600][ T8815] ? do_syscall_64+0xbe/0x3b0 [ 172.906622][ T8815] do_syscall_64+0xfa/0x3b0 [ 172.906641][ T8815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.906656][ T8815] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 172.906672][ T8815] ? clear_bhb_loop+0x60/0xb0 [ 172.906692][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.906707][ T8815] RIP: 0033:0x7f392b38ebe9 [ 172.906730][ T8815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.906743][ T8815] RSP: 002b:00007f392c138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.906761][ T8815] RAX: ffffffffffffffda RBX: 00007f392b5c5fa0 RCX: 00007f392b38ebe9 [ 172.906773][ T8815] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 172.906784][ T8815] RBP: 00007f392c138090 R08: 0000000000000000 R09: 0000000000000000 [ 172.906794][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.906804][ T8815] R13: 00007f392b5c6038 R14: 00007f392b5c5fa0 R15: 00007ffc9db4f408 [ 172.906833][ T8815] [ 175.183890][ T8848] __nla_validate_parse: 16 callbacks suppressed [ 175.183906][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 175.235449][ T8848] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 175.738959][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 175.987336][ T8870] FAULT_INJECTION: forcing a failure. [ 175.987336][ T8870] name failslab, interval 1, probability 0, space 0, times 1 [ 176.016570][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.1.699 Not tainted syzkaller #0 PREEMPT(full) [ 176.016594][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.016604][ T8870] Call Trace: [ 176.016611][ T8870] [ 176.016619][ T8870] dump_stack_lvl+0x189/0x250 [ 176.016642][ T8870] ? __pfx____ratelimit+0x10/0x10 [ 176.016661][ T8870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.016680][ T8870] ? __pfx__printk+0x10/0x10 [ 176.016704][ T8870] ? __lock_acquire+0xab9/0xd20 [ 176.016737][ T8870] should_fail_ex+0x414/0x560 [ 176.016763][ T8870] should_failslab+0xa8/0x100 [ 176.016787][ T8870] kmem_cache_alloc_noprof+0x73/0x3c0 [ 176.016808][ T8870] ? skb_clone+0x212/0x3a0 [ 176.016832][ T8870] skb_clone+0x212/0x3a0 [ 176.016854][ T8870] __netlink_deliver_tap+0x404/0x850 [ 176.016886][ T8870] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.016905][ T8870] netlink_deliver_tap+0x19c/0x1b0 [ 176.016924][ T8870] netlink_unicast+0x7fa/0x9e0 [ 176.016956][ T8870] ? __pfx_netlink_unicast+0x10/0x10 [ 176.016981][ T8870] ? netlink_sendmsg+0x642/0xb30 [ 176.016995][ T8870] ? skb_put+0x11b/0x210 [ 176.017017][ T8870] netlink_sendmsg+0x805/0xb30 [ 176.017043][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.017065][ T8870] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.017083][ T8870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.017101][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.017119][ T8870] __sock_sendmsg+0x21c/0x270 [ 176.017153][ T8870] ____sys_sendmsg+0x505/0x830 [ 176.017185][ T8870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.017214][ T8870] ? import_iovec+0x74/0xa0 [ 176.017237][ T8870] ___sys_sendmsg+0x21f/0x2a0 [ 176.017260][ T8870] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.017318][ T8870] ? __fget_files+0x2a/0x420 [ 176.017332][ T8870] ? __fget_files+0x3a0/0x420 [ 176.017359][ T8870] __x64_sys_sendmsg+0x19b/0x260 [ 176.017381][ T8870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.017409][ T8870] ? __pfx_ksys_write+0x10/0x10 [ 176.017427][ T8870] ? rcu_is_watching+0x15/0xb0 [ 176.017450][ T8870] ? do_syscall_64+0xbe/0x3b0 [ 176.017471][ T8870] do_syscall_64+0xfa/0x3b0 [ 176.017488][ T8870] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.017505][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.017521][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 176.017541][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.017558][ T8870] RIP: 0033:0x7fdfd7d8ebe9 [ 176.017573][ T8870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.017586][ T8870] RSP: 002b:00007fdfd8b81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.017604][ T8870] RAX: ffffffffffffffda RBX: 00007fdfd7fc5fa0 RCX: 00007fdfd7d8ebe9 [ 176.017617][ T8870] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 176.017627][ T8870] RBP: 00007fdfd8b81090 R08: 0000000000000000 R09: 0000000000000000 [ 176.017637][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.017647][ T8870] R13: 00007fdfd7fc6038 R14: 00007fdfd7fc5fa0 R15: 00007ffddcdaf968 [ 176.017677][ T8870] [ 176.502149][ T8864] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 176.542438][ T8864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.547966][ T8870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.699'. [ 176.548716][ T8864] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 176.581877][ T8885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.701'. [ 176.664781][ T8864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.701495][ T8864] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 176.792865][ T8864] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.811690][ T8864] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 176.888700][ T8864] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.915138][ T8864] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 177.897332][ T8939] netlink: 37 bytes leftover after parsing attributes in process `syz.4.712'. [ 178.153400][ T8961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.717'. [ 178.327297][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 178.451903][ T8968] syz_tun: entered promiscuous mode [ 178.462827][ T8968] syz_tun: left promiscuous mode [ 178.557391][ T8976] dvmrp0: entered allmulticast mode [ 178.612826][ T8979] dvmrp8: entered allmulticast mode [ 178.899903][ T8999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.727'. [ 178.915675][ T8999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.727'. [ 179.089927][ T982] IPVS: starting estimator thread 0... [ 179.134674][ T9008] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.201483][ T9012] IPVS: using max 34 ests per chain, 81600 per kthread [ 179.368683][ T9024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.733'. [ 179.972084][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.019170][ T9054] bond0: (slave rose0): Enslaving as an active interface with an up link [ 180.718751][ T9086] __nla_validate_parse: 4 callbacks suppressed [ 180.718769][ T9086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.748'. [ 180.832740][ T9086] openvswitch: netlink: Missing key (keys=40, expected=80) [ 182.898316][ T9086] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 182.908777][ T9086] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 182.909225][ T9088] netlink: 32 bytes leftover after parsing attributes in process `syz.3.749'. [ 183.073045][ T9104] netlink: 'syz.4.751': attribute type 2 has an invalid length. [ 183.118747][ T9104] k›*·]‘: entered promiscuous mode [ 183.143898][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 183.233764][ T9104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.349118][ T9104] veth0_to_team: entered promiscuous mode [ 183.355114][ T9104] veth0_to_team: entered allmulticast mode [ 183.391285][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 183.442808][ T9124] xfrm1: entered promiscuous mode [ 183.508578][ T9124] xfrm1: entered allmulticast mode [ 183.650634][ T9113] team0: entered promiscuous mode [ 183.666345][ T9113] team0: entered allmulticast mode [ 183.962232][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.759'. [ 184.130730][ T9159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.760'. [ 184.314682][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 184.342876][ T9167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 184.610787][ T9183] netlink: 32 bytes leftover after parsing attributes in process `syz.4.765'. [ 185.048508][ T9209] tap0: tun_chr_ioctl cmd 35111 [ 185.057055][ T9213] Bluetooth: MGMT ver 1.23 [ 185.449405][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 185.739392][ T9242] IPVS: Scheduler module ip_vs_sip not found [ 185.772189][ T9227] IPVS: length: 141 != 8 [ 185.804368][ T9253] __nla_validate_parse: 1 callbacks suppressed [ 185.804386][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 185.808780][ T9227] netlink: 'syz.3.775': attribute type 10 has an invalid length. [ 185.819590][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 185.979229][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 186.018613][ T9227] veth0_vlan: left promiscuous mode [ 186.082784][ T9227] veth0_vlan: entered promiscuous mode [ 186.146322][ T9272] netlink: 'syz.2.783': attribute type 4 has an invalid length. [ 186.192868][ T9227] team0: Device veth0_vlan failed to register rx_handler [ 186.208612][ T9272] netlink: 152 bytes leftover after parsing attributes in process `syz.2.783'. [ 186.317845][ T9261] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 186.333121][ T9272] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.676119][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 186.705424][ T9292] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 187.477637][ T9328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.793'. [ 187.518944][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.794'. [ 187.625844][ T9343] netlink: 37 bytes leftover after parsing attributes in process `syz.2.797'. [ 187.860002][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 187.861114][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.799'. [ 188.834194][ T9387] pim6reg1: entered promiscuous mode [ 188.846104][ T9387] pim6reg1: entered allmulticast mode [ 189.038852][ T9403] netlink: 'syz.1.809': attribute type 15 has an invalid length. [ 189.592804][ T9423] netlink: 'syz.1.814': attribute type 83 has an invalid length. [ 189.828699][ T9428] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 189.911435][ T9440] netlink: 'syz.1.816': attribute type 13 has an invalid length. [ 189.933383][ T9439] openvswitch: netlink: IP tunnel TTL not specified. [ 189.964116][ T9440] netlink: 'syz.1.816': attribute type 17 has an invalid length. [ 189.970866][ T9441] xfrm0: entered promiscuous mode [ 190.011904][ T9441] xfrm0: entered allmulticast mode [ 190.071399][ T9439] sit0: Caught tx_queue_len zero misconfig [ 190.156738][ T9440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.174462][ T9446] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 190.177715][ T9447] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 190.441405][ T9465] netlink: 'syz.3.824': attribute type 3 has an invalid length. [ 190.466480][ T9465] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 190.783677][ T9491] macsec1: entered promiscuous mode [ 190.788931][ T9491] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 190.799851][ T9491] macsec1: entered allmulticast mode [ 190.806156][ T9491] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 190.845559][ T9491] macsec2: entered promiscuous mode [ 190.851008][ T9491] macsec2: entered allmulticast mode [ 190.857551][ T9490] tipc: Enabled bearer , priority 0 [ 190.938048][ T9490] syzkaller0: entered promiscuous mode [ 190.944563][ T9490] syzkaller0: entered allmulticast mode [ 190.951298][ T9490] tipc: Resetting bearer [ 190.972147][ T9489] tipc: Resetting bearer [ 191.974775][ T9] tipc: Node number set to 2372353898 [ 192.465698][ T9489] tipc: Disabling bearer [ 192.512314][ T9501] tipc: Enabled bearer , priority 0 [ 192.519686][ T9502] syzkaller0: entered promiscuous mode [ 192.527811][ T9502] syzkaller0: entered allmulticast mode [ 192.564554][ T9515] tipc: Resetting bearer [ 192.646064][ T9520] __nla_validate_parse: 3 callbacks suppressed [ 192.646082][ T9520] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.835'. [ 192.670249][ T9515] tipc: Resetting bearer [ 192.697533][ T9515] tipc: Disabling bearer [ 192.772487][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 192.807174][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.837'. [ 193.026315][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 193.169646][ T9557] pim6reg: entered allmulticast mode [ 193.212358][ T9559] pim6reg: left allmulticast mode [ 193.270570][ T9543] netlink: 80 bytes leftover after parsing attributes in process `syz.1.843'. [ 193.610639][ T9568] netlink: 'syz.2.846': attribute type 9 has an invalid length. [ 193.645774][ T9568] netlink: 184 bytes leftover after parsing attributes in process `syz.2.846'. [ 193.656790][ T9580] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 193.696443][ T9580] netlink: 244 bytes leftover after parsing attributes in process `syz.3.850'. [ 193.709599][ T9581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.850'. [ 193.739337][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.748441][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.238127][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.265238][ T9597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.854'. [ 194.691372][ T9601] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 194.995273][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 195.177850][ T9624] netlink: 'syz.2.863': attribute type 28 has an invalid length. [ 195.367373][ T9632] netlink: 'syz.1.864': attribute type 21 has an invalid length. [ 195.442588][ T9636] netlink: 'syz.2.865': attribute type 5 has an invalid length. [ 195.453665][ T9637] netlink: 'syz.1.864': attribute type 74 has an invalid length. [ 196.436754][ T9666] !: renamed from dummy0 (while UP) [ 196.571377][ T9666] tap0: tun_chr_ioctl cmd 1074025678 [ 196.606920][ T9666] tap0: group set to 0 [ 197.761134][ T9713] __nla_validate_parse: 6 callbacks suppressed [ 197.761151][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.877'. [ 198.095466][ T9738] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 198.119227][ T9740] tipc: Enabling of bearer rejected, failed to enable media [ 198.170115][ T9742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.887'. [ 198.258593][ T9740] ÿÿÿÿÿÿ: renamed from vlan1 [ 198.280227][ T9749] vlan0: entered promiscuous mode [ 198.364711][ T9748] netlink: 64 bytes leftover after parsing attributes in process `syz.4.888'. [ 198.376319][ T9748] netlink: 36 bytes leftover after parsing attributes in process `syz.4.888'. [ 198.432338][ T9760] ªªªªªª: renamed from wg2 (while UP) [ 198.862700][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.901'. [ 199.119200][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 199.128338][ T9808] netlink: 64 bytes leftover after parsing attributes in process `syz.4.906'. [ 199.830991][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 200.120164][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.914'. [ 200.443294][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 201.482951][ T9874] syzkaller0: entered promiscuous mode [ 201.501781][ T9874] syzkaller0: entered allmulticast mode [ 201.525538][ T9874] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 202.868403][ T9914] __nla_validate_parse: 8 callbacks suppressed [ 202.868419][ T9914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.934'. [ 203.238726][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.938'. [ 203.426600][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 203.450466][ T9937] netlink: 212152 bytes leftover after parsing attributes in process `syz.4.941'. [ 203.483329][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.940'. [ 203.533837][ T9934] netlink: 13 bytes leftover after parsing attributes in process `syz.3.940'. [ 203.686078][ T9958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.946'. [ 203.713879][ T9953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.946'. [ 203.922266][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.950'. [ 203.965349][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.951'. [ 204.071292][ T9982] tipc: Enabling of bearer rejected, failed to enable media [ 204.252632][ T9989] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20002 [ 204.325902][ T9983] syzkaller0: entered promiscuous mode [ 204.331803][ T9983] syzkaller0: entered allmulticast mode [ 204.433593][ T9995] tipc: Enabled bearer , priority 0 [ 204.441273][ T9995] syzkaller0: entered promiscuous mode [ 204.449991][ T9995] syzkaller0: entered allmulticast mode [ 204.527607][ T9999] tipc: Resetting bearer [ 204.757978][ T9994] tipc: Resetting bearer [ 204.924513][ T9994] tipc: Disabling bearer [ 205.127656][T10007] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 205.319582][T10028] lo: Caught tx_queue_len zero misconfig [ 205.390046][T10009] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.421656][T10031] !: renamed from dummy0 (while UP) [ 208.562535][T10100] __nla_validate_parse: 5 callbacks suppressed [ 208.562554][T10100] netlink: 248 bytes leftover after parsing attributes in process `syz.4.975'. [ 208.655996][T10103] IPVS: stopping backup sync thread 7544 ... [ 209.257132][T10124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.269351][T10124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.378297][T10131] syzkaller1: entered promiscuous mode [ 209.386501][T10131] syzkaller1: entered allmulticast mode [ 209.427714][T10124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.440313][T10124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.620555][T10124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.631187][T10124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.751615][T10155] netlink: 72 bytes leftover after parsing attributes in process `syz.1.989'. [ 209.824868][T10124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.847220][T10124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.008646][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 210.053815][T10169] netlink: 56 bytes leftover after parsing attributes in process `syz.0.991'. [ 210.145037][T10175] can: request_module (can-proto-0) failed. [ 210.202991][ T8689] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.218508][ T8689] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.229010][ T8689] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.240985][ T8689] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.276515][ T8689] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.286212][ T8689] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.323009][ T8692] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.332115][ T8692] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.618894][T10199] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1002'. [ 210.665688][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 210.740827][T10197] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 210.805738][T10206] _ÐZ`Ô€@S!: entered promiscuous mode [ 210.947417][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 211.041133][T10219] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1005'. [ 211.219461][T10230] tun0: tun_chr_ioctl cmd 1074025673 [ 211.355312][T10239] IPv6: addrconf: prefix option has invalid lifetime [ 211.400024][T10242] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1012'. [ 211.412237][T10242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1012'. [ 211.833927][T10254] netlink: 'syz.2.1015': attribute type 13 has an invalid length. [ 211.879509][T10256] netlink: 'syz.3.1013': attribute type 21 has an invalid length. [ 211.911837][T10256] netlink: 'syz.3.1013': attribute type 4 has an invalid length. [ 212.023300][T10267] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 212.046331][T10267] netlink: 'syz.2.1018': attribute type 7 has an invalid length. [ 212.162027][T10267] : entered promiscuous mode [ 212.760439][T10307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.096471][T10276] netlink: 'syz.0.1020': attribute type 6 has an invalid length. [ 213.290275][T10330] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 213.601279][T10330] __nla_validate_parse: 12 callbacks suppressed [ 213.601297][T10330] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1034'. [ 213.768502][T10354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1040'. [ 213.818127][T10356] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 213.998776][T10362] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 214.007523][T10362] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1045'. [ 214.683241][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'. [ 214.703636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.847068][T10388] tun0: tun_chr_ioctl cmd 2147767521 [ 214.981727][T10388] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 215.051326][T10399] veth1: mtu less than device minimum [ 215.172187][T10398] can: request_module (can-proto-0) failed. [ 215.502343][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 215.531414][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 215.551229][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 215.630086][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 215.640743][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 215.675927][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 215.869432][T10426] unknown channel width for channel at 909000KHz? [ 215.999697][T10439] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 216.074714][T10446] Bluetooth: MGMT ver 1.23 [ 216.086708][T10446] geneve2: entered promiscuous mode [ 216.154109][T10439] bond3: (slave geneve2): making interface the new active one [ 216.162438][T10439] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 216.177889][ T8696] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 216.220196][ T8696] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 216.465584][ T8696] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 216.479508][ T8696] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 216.707680][T10466] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 217.022302][T10488] netlink: 'syz.3.1081': attribute type 13 has an invalid length. [ 217.109533][T10488] netlink: 'syz.3.1081': attribute type 17 has an invalid length. [ 217.237102][T10500] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.237183][ T43] IPVS: starting estimator thread 0... [ 217.353903][T10503] IPVS: using max 32 ests per chain, 76800 per kthread [ 217.413012][T10488] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.420319][T10488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.427962][T10488] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.435230][T10488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.465899][T10488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.461268][T10558] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 218.801356][T10577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.823223][T10577] __nla_validate_parse: 27 callbacks suppressed [ 218.823241][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'. [ 218.885149][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 218.951221][T10595] netlink: 'syz.3.1104': attribute type 4 has an invalid length. [ 219.048616][T10598] tipc: Enabled bearer , priority 0 [ 219.067188][T10598] syzkaller0: entered promiscuous mode [ 219.072809][T10598] syzkaller0: entered allmulticast mode [ 219.096940][T10598] tipc: Resetting bearer [ 219.131288][T10596] tipc: Resetting bearer [ 219.146783][T10596] tipc: Disabling bearer [ 219.177647][T10603] pim6reg: entered allmulticast mode [ 219.280157][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'. [ 219.462023][T10619] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1111'. [ 219.567512][T10621] syzkaller1: entered promiscuous mode [ 219.578168][T10621] syzkaller1: entered allmulticast mode [ 219.641790][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 219.722297][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 219.746295][T10626] bridge_slave_1: left allmulticast mode [ 219.752044][T10626] bridge_slave_1: left promiscuous mode [ 219.760993][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.771757][T10626] bridge_slave_0: left allmulticast mode [ 219.779197][T10626] bridge_slave_0: left promiscuous mode [ 219.786083][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.259460][T10651] netlink: 'syz.4.1120': attribute type 13 has an invalid length. [ 220.297769][T10651] netlink: 'syz.4.1120': attribute type 17 has an invalid length. [ 220.359184][T10649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 220.422273][T10651] team0: left promiscuous mode [ 220.433072][T10651] team0: left allmulticast mode [ 220.453352][T10651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.532414][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 220.901161][T10685] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1129'. [ 243.455951][T10694] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 243.541026][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 243.620243][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'. [ 243.625585][T10706] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1136'. [ 243.757561][T10709] netlink: 184628 bytes leftover after parsing attributes in process `syz.0.1135'. [ 243.935980][T10704] bond0: (slave bond_slave_1): Releasing backup interface [ 244.029484][T10713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.105034][T10715] team0: Port device dummy0 removed [ 244.112181][T10715] batadv0: left allmulticast mode [ 244.120846][T10715] batadv0: left promiscuous mode [ 244.126851][T10715] bridge0: port 3(batadv0) entered disabled state [ 244.139674][T10715] bridge_slave_0: left allmulticast mode [ 244.147244][T10715] bridge_slave_0: left promiscuous mode [ 244.153111][T10715] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.162927][T10715] bridge_slave_1: left allmulticast mode [ 244.168703][T10715] bridge_slave_1: left promiscuous mode [ 244.174573][T10715] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.191620][T10715] bond0: (slave bond_slave_0): Releasing backup interface [ 244.202810][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 244.221865][T10715] team0: Port device team_slave_0 removed [ 244.235793][T10715] team0: Port device team_slave_1 removed [ 244.242285][T10715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.258024][T10715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.269385][T10715] bond3: (slave geneve2): Releasing active interface [ 244.309136][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 244.341664][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 244.360491][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 244.387456][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 244.533865][T10735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1142'. [ 244.573917][T10736] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20004 [ 244.902382][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'. [ 245.377292][T10788] syz_tun: entered allmulticast mode [ 245.411883][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1158'. [ 245.850647][T10815] tipc: Enabled bearer , priority 10 [ 245.898925][T10815] pimreg: entered allmulticast mode [ 246.320345][T10831] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.394330][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1169'. [ 246.425490][T10831] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.526833][T10831] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.622900][T10831] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.850152][ T8687] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.921749][ T8689] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.930194][ T8689] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.990957][ T8689] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.216763][T10855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1174'. [ 247.799770][T10884] netlink: 'syz.3.1182': attribute type 1 has an invalid length. [ 247.817382][T10886] FAULT_INJECTION: forcing a failure. [ 247.817382][T10886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.821238][T10884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.836929][T10886] CPU: 1 UID: 0 PID: 10886 Comm: syz.1.1181 Not tainted syzkaller #0 PREEMPT(full) [ 247.836953][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.836972][T10886] Call Trace: [ 247.836979][T10886] [ 247.836987][T10886] dump_stack_lvl+0x189/0x250 [ 247.837012][T10886] ? __pfx____ratelimit+0x10/0x10 [ 247.837030][T10886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.837049][T10886] ? __pfx__printk+0x10/0x10 [ 247.837070][T10886] ? __might_fault+0xb0/0x130 [ 247.837103][T10886] should_fail_ex+0x414/0x560 [ 247.837129][T10886] _copy_from_user+0x2d/0xb0 [ 247.837148][T10886] __sys_bpf+0x1ed/0x870 [ 247.837172][T10886] ? __pfx___sys_bpf+0x10/0x10 [ 247.837205][T10886] ? ksys_write+0x22a/0x250 [ 247.837228][T10886] ? __pfx_ksys_write+0x10/0x10 [ 247.837244][T10886] ? rcu_is_watching+0x15/0xb0 [ 247.837268][T10886] __x64_sys_bpf+0x7c/0x90 [ 247.837288][T10886] do_syscall_64+0xfa/0x3b0 [ 247.837304][T10886] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.837320][T10886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.837336][T10886] ? clear_bhb_loop+0x60/0xb0 [ 247.837359][T10886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.837374][T10886] RIP: 0033:0x7fdfd7d8ebe9 [ 247.837390][T10886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.837404][T10886] RSP: 002b:00007fdfd8b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.837422][T10886] RAX: ffffffffffffffda RBX: 00007fdfd7fc6180 RCX: 00007fdfd7d8ebe9 [ 247.837433][T10886] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 247.837443][T10886] RBP: 00007fdfd8b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.837453][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.837462][T10886] R13: 00007fdfd7fc6218 R14: 00007fdfd7fc6180 R15: 00007ffddcdaf968 [ 247.837491][T10886] [ 248.343817][T10911] netlink: 'syz.0.1190': attribute type 27 has an invalid length. [ 248.647555][T10933] netlink: 'syz.3.1196': attribute type 2 has an invalid length. [ 248.673538][T10933] __nla_validate_parse: 4 callbacks suppressed [ 248.673556][T10933] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1196'. [ 248.698176][T10939] FAULT_INJECTION: forcing a failure. [ 248.698176][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 248.716606][T10939] CPU: 0 UID: 0 PID: 10939 Comm: syz.4.1195 Not tainted syzkaller #0 PREEMPT(full) [ 248.716631][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.716641][T10939] Call Trace: [ 248.716648][T10939] [ 248.716656][T10939] dump_stack_lvl+0x189/0x250 [ 248.716678][T10939] ? __pfx____ratelimit+0x10/0x10 [ 248.716697][T10939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.716715][T10939] ? __pfx__printk+0x10/0x10 [ 248.716741][T10939] ? __pfx___might_resched+0x10/0x10 [ 248.716762][T10939] should_fail_ex+0x414/0x560 [ 248.716787][T10939] should_failslab+0xa8/0x100 [ 248.716810][T10939] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 248.716832][T10939] ? __get_vm_area_node+0x13f/0x300 [ 248.716858][T10939] __get_vm_area_node+0x13f/0x300 [ 248.716884][T10939] __vmalloc_node_range_noprof+0x301/0x12f0 [ 248.716906][T10939] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 248.716927][T10939] ? __lock_acquire+0xab9/0xd20 [ 248.716976][T10939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.716996][T10939] ? __might_fault+0xb0/0x130 [ 248.717018][T10939] ? _parse_integer_limit+0x1ae/0x1f0 [ 248.717046][T10939] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 248.717065][T10939] __vmalloc_noprof+0xb1/0xf0 [ 248.717086][T10939] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 248.717110][T10939] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 248.717136][T10939] bpf_prog_alloc+0x3c/0x1a0 [ 248.717160][T10939] bpf_prog_load+0x735/0x1930 [ 248.717192][T10939] ? __pfx_bpf_prog_load+0x10/0x10 [ 248.717237][T10939] ? bpf_lsm_bpf+0x9/0x20 [ 248.717254][T10939] ? security_bpf+0x7e/0x300 [ 248.717278][T10939] __sys_bpf+0x528/0x870 [ 248.717300][T10939] ? __pfx___sys_bpf+0x10/0x10 [ 248.717333][T10939] ? ksys_write+0x22a/0x250 [ 248.717356][T10939] ? __pfx_ksys_write+0x10/0x10 [ 248.717373][T10939] ? rcu_is_watching+0x15/0xb0 [ 248.717397][T10939] __x64_sys_bpf+0x7c/0x90 [ 248.717417][T10939] do_syscall_64+0xfa/0x3b0 [ 248.717434][T10939] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.717451][T10939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.717467][T10939] ? clear_bhb_loop+0x60/0xb0 [ 248.717487][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.717503][T10939] RIP: 0033:0x7f392b38ebe9 [ 248.717519][T10939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.717531][T10939] RSP: 002b:00007f39295d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.717550][T10939] RAX: ffffffffffffffda RBX: 00007f392b5c6180 RCX: 00007f392b38ebe9 [ 248.717569][T10939] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 248.717580][T10939] RBP: 00007f39295d5090 R08: 0000000000000000 R09: 0000000000000000 [ 248.717590][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.717599][T10939] R13: 00007f392b5c6218 R14: 00007f392b5c6180 R15: 00007ffc9db4f408 [ 248.717626][T10939] [ 248.717849][T10939] syz.4.1195: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 249.025113][T10939] CPU: 0 UID: 0 PID: 10939 Comm: syz.4.1195 Not tainted syzkaller #0 PREEMPT(full) [ 249.025135][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.025148][T10939] Call Trace: [ 249.025154][T10939] [ 249.025161][T10939] dump_stack_lvl+0x189/0x250 [ 249.025187][T10939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.025203][T10939] ? __pfx__printk+0x10/0x10 [ 249.025222][T10939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.025239][T10939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.025257][T10939] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 249.025276][T10939] warn_alloc+0x214/0x310 [ 249.025304][T10939] ? __pfx_warn_alloc+0x10/0x10 [ 249.025328][T10939] ? __get_vm_area_node+0x13f/0x300 [ 249.025352][T10939] ? __get_vm_area_node+0x2b5/0x300 [ 249.025379][T10939] __vmalloc_node_range_noprof+0x326/0x12f0 [ 249.025400][T10939] ? __lock_acquire+0xab9/0xd20 [ 249.025444][T10939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.025463][T10939] ? __might_fault+0xb0/0x130 [ 249.025486][T10939] ? _parse_integer_limit+0x1ae/0x1f0 [ 249.025514][T10939] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 249.025531][T10939] __vmalloc_noprof+0xb1/0xf0 [ 249.025550][T10939] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 249.025573][T10939] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 249.025595][T10939] bpf_prog_alloc+0x3c/0x1a0 [ 249.025615][T10939] bpf_prog_load+0x735/0x1930 [ 249.025647][T10939] ? __pfx_bpf_prog_load+0x10/0x10 [ 249.025688][T10939] ? bpf_lsm_bpf+0x9/0x20 [ 249.025707][T10939] ? security_bpf+0x7e/0x300 [ 249.025729][T10939] __sys_bpf+0x528/0x870 [ 249.025751][T10939] ? __pfx___sys_bpf+0x10/0x10 [ 249.025781][T10939] ? ksys_write+0x22a/0x250 [ 249.025804][T10939] ? __pfx_ksys_write+0x10/0x10 [ 249.025820][T10939] ? rcu_is_watching+0x15/0xb0 [ 249.025852][T10939] __x64_sys_bpf+0x7c/0x90 [ 249.025871][T10939] do_syscall_64+0xfa/0x3b0 [ 249.025887][T10939] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.025903][T10939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.025918][T10939] ? clear_bhb_loop+0x60/0xb0 [ 249.025938][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.025953][T10939] RIP: 0033:0x7f392b38ebe9 [ 249.025968][T10939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.025981][T10939] RSP: 002b:00007f39295d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.025998][T10939] RAX: ffffffffffffffda RBX: 00007f392b5c6180 RCX: 00007f392b38ebe9 [ 249.026009][T10939] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 249.026018][T10939] RBP: 00007f39295d5090 R08: 0000000000000000 R09: 0000000000000000 [ 249.026028][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.026037][T10939] R13: 00007f392b5c6218 R14: 00007f392b5c6180 R15: 00007ffc9db4f408 [ 249.026063][T10939] [ 249.026104][T10939] Mem-Info: [ 249.314597][T10939] active_anon:3741 inactive_anon:0 isolated_anon:0 [ 249.314597][T10939] active_file:3333 inactive_file:39915 isolated_file:0 [ 249.314597][T10939] unevictable:768 dirty:228 writeback:0 [ 249.314597][T10939] slab_reclaimable:11755 slab_unreclaimable:218012 [ 249.314597][T10939] mapped:30170 shmem:1359 pagetables:982 [ 249.314597][T10939] sec_pagetables:0 bounce:0 [ 249.314597][T10939] kernel_misc_reclaimable:0 [ 249.314597][T10939] free:1208606 free_pcp:18922 free_cma:0 [ 249.368109][T10939] Node 0 active_anon:14864kB inactive_anon:0kB active_file:13332kB inactive_file:159460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120680kB dirty:912kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12660kB pagetables:3788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.414820][T10939] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 249.457325][T10939] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.486582][T10939] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 249.492472][T10939] Node 0 DMA32 free:930264kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14812kB inactive_anon:0kB active_file:13332kB inactive_file:157888kB unevictable:1536kB writepending:912kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:57400kB local_pcp:21032kB free_cma:0kB [ 249.529259][T10939] lowmem_reserve[]: 0 0 1 1 1 [ 249.558864][T10939] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 249.645592][T10939] lowmem_reserve[]: 0 0 0 0 0 [ 249.650377][T10939] Node 1 Normal free:3888628kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19040kB local_pcp:10560kB free_cma:0kB [ 249.761009][T10939] lowmem_reserve[]: 0 0 0 0 0 [ 249.766442][T10939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 249.797279][T10939] Node 0 DMA32: 2056*4kB (UM) 1343*8kB (UME) 276*16kB (UME) 786*32kB (UME) 163*64kB (UME) 42*128kB (UME) 50*256kB (UME) 29*512kB (UME) 15*1024kB (UM) 6*2048kB (U) 198*4096kB (UM) = 930648kB [ 249.820992][T10939] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 249.864066][T10939] Node 1 Normal: 207*4kB (UE) 59*8kB (UME) 40*16kB (UME) 95*32kB (UME) 26*64kB (UME) 8*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3888628kB [ 249.896691][T10976] batadv_slave_0: entered promiscuous mode [ 249.918873][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 249.956063][ T24] IPVS: starting estimator thread 0... [ 249.969124][T10939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.040761][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1206'. [ 250.049958][T10980] IPVS: using max 27 ests per chain, 64800 per kthread [ 250.057481][T10939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.080367][T10939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.111554][T10939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.130583][T10939] 44604 total pagecache pages [ 250.136130][T10939] 0 pages in swap cache [ 250.141380][T10939] Free swap = 124996kB [ 250.157815][T10939] Total swap = 124996kB [ 250.166555][T10939] 2097051 pages RAM [ 250.174923][T10939] 0 pages HighMem/MovableOnly [ 250.220641][T10939] 425673 pages reserved [ 250.259916][T10939] 0 pages cma reserved [ 250.402264][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 250.469045][T10992] team1: entered promiscuous mode [ 250.474413][T10992] team1: entered allmulticast mode [ 250.480270][T10992] 8021q: adding VLAN 0 to HW filter on device team1 [ 250.968629][T11006] syzkaller0: entered promiscuous mode [ 250.975201][T11006] syzkaller0: entered allmulticast mode [ 251.066804][T11012] tipc: New replicast peer: 255.255.255.255 [ 251.074141][T11012] tipc: Enabled bearer , priority 10 [ 251.300320][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 251.346925][T11017] sctp: [Deprecated]: syz.2.1216 (pid 11017) Use of int in maxseg socket option. [ 251.346925][T11017] Use struct sctp_assoc_value instead [ 251.430909][T11017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1216'. [ 251.517743][T11024] tipc: Enabled bearer , priority 0 [ 251.527508][T11024] syzkaller0: entered promiscuous mode [ 251.535714][T11024] syzkaller0: entered allmulticast mode [ 251.545878][T11023] tipc: Resetting bearer [ 251.576139][T11023] tipc: Disabling bearer [ 251.660905][T11036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1221'. [ 251.703709][T11038] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 251.737582][T11038] netlink: 'syz.0.1222': attribute type 2 has an invalid length. [ 251.793036][T11038] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 251.803627][T11038] netlink: 'syz.0.1222': attribute type 2 has an invalid length. [ 251.827679][T11047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1223'. [ 252.200439][ T24] tipc: Node number set to 1087305856 [ 254.129843][T11105] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1240'. [ 254.408878][T11115] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1243'. [ 254.421047][T11117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'. [ 254.574808][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1245'. [ 254.583980][T11122] veth0_to_bond: entered allmulticast mode [ 254.593033][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1245'. [ 254.648959][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 254.820813][T11132] tipc: Enabled bearer , priority 0 [ 254.847941][T11132] syzkaller0: entered promiscuous mode [ 254.868285][T11132] syzkaller0: entered allmulticast mode [ 255.015920][T11137] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1248'. [ 255.056926][T11132] tipc: Resetting bearer [ 255.112835][T11131] tipc: Resetting bearer [ 255.137112][T11131] tipc: Disabling bearer [ 255.411808][T11156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1252'. [ 255.576184][T11160] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1251'. [ 255.607882][T11153] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1251'. [ 255.669555][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.234789][T11200] netlink: 'syz.1.1264': attribute type 10 has an invalid length. [ 256.271513][T11200] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 257.202006][ T10] IPVS: starting estimator thread 0... [ 257.293658][T11241] IPVS: using max 32 ests per chain, 76800 per kthread [ 257.917095][T11243] ªªªªªª: renamed from wg2 (while UP) [ 257.957274][T11247] tipc: Enabling of bearer rejected, failed to enable media [ 258.414371][T11260] bond0: (slave bridge0): Releasing backup interface [ 258.438739][T11260] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.446103][T11260] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.535991][T11260] bridge_slave_0: left allmulticast mode [ 258.570673][T11260] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.590398][T11260] bridge_slave_1: left allmulticast mode [ 258.597859][T11260] bridge_slave_1: left promiscuous mode [ 258.606709][T11260] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.619194][T11260] bond0: (slave bond_slave_0): Releasing backup interface [ 258.643241][T11260] team0: Port device team_slave_0 removed [ 258.662389][T11260] team0: Port device team_slave_1 removed [ 258.702091][T11268] tipc: Cannot configure node identity twice [ 258.728798][T11271] ip6tnl1: entered promiscuous mode [ 258.739663][T11271] ip6tnl1: entered allmulticast mode [ 258.748188][T11271] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 259.098909][T11296] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 259.445796][T11292] bond0 (unregistering): Released all slaves [ 259.480252][T11311] __nla_validate_parse: 9 callbacks suppressed [ 259.480269][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 259.540365][T11313] sctp: [Deprecated]: syz.4.1294 (pid 11313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.540365][T11313] Use struct sctp_sack_info instead [ 259.638908][T11317] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1296'. [ 259.760922][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 259.858637][T11335] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1301'. [ 259.861056][T11331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.032637][T11342] pim6reg: left allmulticast mode [ 260.039804][T11343] netlink: 'syz.1.1302': attribute type 10 has an invalid length. [ 260.059544][T11343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1302'. [ 260.104945][T11343] veth0_vlan: entered allmulticast mode [ 260.117620][T11343] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 260.378001][T11366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1306'. [ 260.638732][T11375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1309'. [ 260.675011][T11375] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1309'. [ 260.703760][T11375] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1309'. [ 260.735841][T11375] netlink: 'syz.1.1309': attribute type 5 has an invalid length. [ 260.767524][T11375] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1309'. [ 260.942255][T11386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.972806][T11386] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 261.291341][T11393] netlink: 'syz.3.1316': attribute type 12 has an invalid length. [ 261.568710][T11413] tipc: Enabled bearer , priority 14 [ 261.932161][T11426] vxcan1: entered allmulticast mode [ 261.990622][T11428] netlink: 'syz.4.1325': attribute type 13 has an invalid length. [ 262.007963][T11428] netlink: 'syz.4.1325': attribute type 17 has an invalid length. [ 262.035098][T11428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.359787][T11454] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 262.399122][T11454] netlink: 'syz.2.1330': attribute type 2 has an invalid length. [ 262.516049][T11454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.528373][T11454] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.553066][T11454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.624420][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 262.683771][T10430] tipc: Node number set to 2903748919 [ 262.774587][T11470] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 262.792572][T11470] openvswitch: netlink: Duplicate key (type 0). [ 263.235125][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 263.440054][T11499] netlink: 'syz.1.1342': attribute type 5 has an invalid length. [ 263.453750][T11499] netlink: 'syz.1.1342': attribute type 6 has an invalid length. [ 263.906949][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.940905][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.306891][T11491] xfrm1: left promiscuous mode [ 264.311827][T11491] xfrm1: left allmulticast mode [ 264.335281][T11493] tipc: Enabled bearer , priority 0 [ 264.363947][T11495] syzkaller0: entered promiscuous mode [ 264.370394][T11495] syzkaller0: entered allmulticast mode [ 264.382983][ T8700] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 264.427296][T10430] syz0: Port: 1 Link DOWN [ 264.528490][T11526] __nla_validate_parse: 16 callbacks suppressed [ 264.528508][T11526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1345'. [ 264.545393][T11510] syzkaller0: entered promiscuous mode [ 264.557049][T11510] syzkaller0: entered allmulticast mode [ 264.587965][ T8687] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.619717][ T8687] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.629033][ T8687] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.638581][ T8687] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.657260][T11495] tipc: Resetting bearer [ 264.682324][T11495] tipc: Disabling bearer [ 264.728683][T11526] bond4: entered promiscuous mode [ 264.738474][T11526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.970984][T11526] bond4 (unregistering): Released all slaves [ 265.023336][T11530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.052635][T11530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.081306][T11530] bond0 (unregistering): (slave bond1): Releasing backup interface [ 265.107239][T11530] bond0 (unregistering): (slave 0!): Releasing backup interface [ 265.127362][T11530] bond0 (unregistering): Released all slaves [ 265.376963][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1352'. [ 265.424269][ T8695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.432655][ T8695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.463939][T11564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1354'. [ 265.805046][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.884277][T11586] 8021q: VLANs not supported on nlmon0 [ 266.230521][T11602] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 266.430330][T11609] openvswitch: netlink: IP tunnel dst address not specified [ 266.610327][T11612] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1369'. [ 266.749643][T11617] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 266.854567][T11622] bond5: (slave gretap1): making interface the new active one [ 266.864393][T11622] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 266.946366][T11635] netlink: 'syz.3.1376': attribute type 3 has an invalid length. [ 267.039040][T11643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1378'. [ 267.057977][T11644] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1377'. [ 267.327809][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 267.337293][T11653] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1381'. [ 267.346972][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 267.423998][T11657] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.441629][T11657] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.536282][T11662] syzkaller1: entered promiscuous mode [ 267.541802][T11662] syzkaller1: entered allmulticast mode [ 267.551597][T11664] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1386'. [ 268.008129][T11687] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 268.415354][ T30] audit: type=1800 audit(1757388665.265:2): pid=11708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1396" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1454 res=0 errno=0 [ 269.085563][T11729] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 269.593615][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 269.657931][T11747] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 269.755398][T11753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.787827][T11752] __nla_validate_parse: 3 callbacks suppressed [ 269.787849][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1410'. [ 269.832097][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1410'. [ 270.459527][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 270.618476][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1420'. [ 270.817295][T11800] syzkaller0: entered promiscuous mode [ 270.822935][T11800] syzkaller0: entered allmulticast mode [ 272.357434][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 272.370773][T11831] openvswitch: netlink: Flow actions attr not present in new flow. [ 272.974699][T11826] : entered promiscuous mode [ 273.137186][T11839] IPv6: sit1: Disabled Multicast RS [ 273.392330][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 273.401452][T11860] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.353123][T11908] vlan0: entered promiscuous mode [ 274.489157][T11905] can: request_module (can-proto-0) failed. [ 274.834391][T11928] tipc: Enabled bearer , priority 0 [ 274.854826][T11928] syzkaller0: entered promiscuous mode [ 274.860579][T11928] syzkaller0: entered allmulticast mode [ 275.109815][T11928] tipc: Resetting bearer [ 275.150472][T11928] tipc: Disabling bearer [ 275.762689][T11961] veth0_to_bond: left allmulticast mode [ 275.785692][T11961] batadv_slave_0: left promiscuous mode [ 275.809214][T11961] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 275.842039][T11961] bond1: left promiscuous mode [ 275.923605][T11961] bond1: left allmulticast mode [ 275.950352][T11961] bond2: left promiscuous mode [ 276.112769][T11985] netlink: 'syz.0.1469': attribute type 13 has an invalid length. [ 276.133666][T11985] netlink: 'syz.0.1469': attribute type 17 has an invalid length. [ 276.204161][T11988] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1469'. [ 276.255601][T11985] erspan0: left promiscuous mode [ 276.319219][T11985] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.340366][T11985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.448533][T11994] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 276.552129][T11997] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1470'. [ 276.572139][T11997] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1470'. [ 276.592401][T11997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1470'. [ 277.447340][T12023] tipc: Enabled bearer , priority 0 [ 277.478817][T12024] syzkaller0: entered promiscuous mode [ 277.521322][T12024] syzkaller0: entered allmulticast mode [ 277.552850][T12023] tipc: Resetting bearer [ 277.929956][T12037] tipc: Enabled bearer , priority 0 [ 277.944863][T12014] tipc: Resetting bearer [ 278.011042][T12014] tipc: Disabling bearer [ 278.038015][T12037] syzkaller0: entered promiscuous mode [ 278.045461][T12037] syzkaller0: entered allmulticast mode [ 278.088800][T12037] tipc: Resetting bearer [ 278.107409][T12035] tipc: Resetting bearer [ 278.126948][T12035] tipc: Disabling bearer [ 278.255958][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1485'. [ 278.272638][T12056] netlink: 'syz.3.1485': attribute type 1 has an invalid length. [ 278.281143][T12056] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1485'. [ 278.452782][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 278.585352][T12066] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1490'. [ 278.597689][T12066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1490'. [ 279.047973][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 279.271692][T12115] syzkaller1: entered promiscuous mode [ 279.304918][T12115] syzkaller1: entered allmulticast mode [ 279.479212][T12120] syzkaller0: entered promiscuous mode [ 279.485178][T12120] syzkaller0: entered allmulticast mode [ 281.330284][T12174] __nla_validate_parse: 2 callbacks suppressed [ 281.330302][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 281.939290][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 282.242302][T12169] veth1_to_bridge: entered promiscuous mode [ 282.249585][T12169] veth1_to_bridge: entered allmulticast mode [ 282.267333][T12174] hsr_slave_0: left promiscuous mode [ 282.274130][T12174] hsr_slave_1: left promiscuous mode [ 282.459547][T12190] netlink: 'syz.0.1521': attribute type 4 has an invalid length. [ 282.506959][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 282.518744][T12193] netlink: 'syz.0.1521': attribute type 4 has an invalid length. [ 282.578516][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1521'. [ 282.597843][T12201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1523'. [ 282.619584][T12201] netlink: 'syz.1.1523': attribute type 3 has an invalid length. [ 282.645551][T12201] netlink: 'syz.1.1523': attribute type 3 has an invalid length. [ 282.849862][T12214] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 282.858000][T12214] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 282.879512][T12209] netlink: 'syz.0.1525': attribute type 11 has an invalid length. [ 283.088078][T12226] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 283.186058][T12229] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1531'. [ 283.237303][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1529'. [ 283.359609][T12226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.498415][T12237] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1532'. [ 283.563009][T12244] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.1533'. [ 283.602658][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 283.783215][T12255] dvmrp0: entered allmulticast mode [ 284.810173][T12309] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 284.892231][T12315] openvswitch: netlink: Flow key attribute not present in set flow. [ 285.171286][T12324] macvtap1: entered allmulticast mode [ 285.207317][T12324] veth0_macvtap: entered allmulticast mode [ 285.466625][T12340] Bluetooth: MGMT ver 1.23 [ 285.749353][T12359] openvswitch: netlink: Flow actions attr not present in new flow. [ 285.997225][T12373] netlink: 'syz.2.1571': attribute type 2 has an invalid length. [ 286.060581][T12373] k›*·]‘: entered promiscuous mode [ 286.172860][T12378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.198030][T12378] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.215217][T12378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.270595][T12381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 286.284103][T12381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 286.311369][T12395] veth0_to_team: entered promiscuous mode [ 286.317702][T12395] veth0_to_team: entered allmulticast mode [ 286.399901][T11504] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.449383][T12411] __nla_validate_parse: 17 callbacks suppressed [ 286.449402][T12411] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1575'. [ 286.589612][T12400] tipc: Enabled bearer , priority 0 [ 286.597816][T12411] syzkaller0: entered promiscuous mode [ 286.606814][T12411] syzkaller0: entered allmulticast mode [ 286.724448][T12400] tipc: Resetting bearer [ 286.755524][T12401] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.792987][T12396] tipc: Resetting bearer [ 286.793899][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.869881][T12396] tipc: Disabling bearer [ 287.018655][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'. [ 287.087587][T12423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1579'. [ 287.449264][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'. [ 287.462257][T12446] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1587'. [ 287.490608][T12446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1587'. [ 287.548393][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 287.751460][T12463] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 287.824543][T12401] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.856572][T12401] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.929232][T12469] bond5: (slave gretap1): Releasing active interface [ 287.944562][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 288.034798][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 288.044570][T12479] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1598'. [ 288.141737][T12482] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1599'. [ 288.171246][T12482] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1599'. [ 288.683673][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 288.865391][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 288.918476][T12504] team0: Mode "" not found [ 288.923238][T12507] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 290.336833][T12538] syz_tun (unregistering): left allmulticast mode [ 290.607707][T12560] validate_nla: 4 callbacks suppressed [ 290.607724][T12560] netlink: 'syz.4.1620': attribute type 3 has an invalid length. [ 291.412284][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.429141][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.437895][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.449341][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.457045][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.504289][T12599] __nla_validate_parse: 7 callbacks suppressed [ 291.504308][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 291.527321][T12599] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1631'. [ 291.651276][T12605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1634'. [ 291.689212][T12605] dvmrp8: left allmulticast mode [ 291.755818][T12615] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1634'. [ 291.983695][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 291.999927][T12625] tipc: Enabling of bearer rejected, failed to enable media [ 292.157222][T12635] tap0: tun_chr_ioctl cmd 1074025677 [ 292.162727][T12635] tap0: linktype set to 0 [ 292.282600][T12594] chnl_net:caif_netlink_parms(): no params data found [ 292.304810][T12645] openvswitch: netlink: IP tunnel dst address not specified [ 292.377489][T12641] can: request_module (can-proto-0) failed. [ 292.461283][T12652] openvswitch: netlink: IP tunnel dst address not specified [ 292.507209][T12641] can: request_module (can-proto-0) failed. [ 292.631336][T12594] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.641717][T12594] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.652727][T12594] bridge_slave_0: entered allmulticast mode [ 292.664838][T12594] bridge_slave_0: entered promiscuous mode [ 292.677940][T12594] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.685748][T12594] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.693113][T12594] bridge_slave_1: entered allmulticast mode [ 292.705717][T12594] bridge_slave_1: entered promiscuous mode [ 292.771739][T12594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.789414][T12594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.888922][T12594] team0: Port device team_slave_0 added [ 292.908278][T12594] team0: Port device team_slave_1 added [ 292.989059][T12664] can: request_module (can-proto-0) failed. [ 293.002984][T12664] netlink: 'syz.4.1645': attribute type 10 has an invalid length. [ 293.035459][T12664] team0: Port device 0! added [ 293.041797][T12594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.055201][T12664] netlink: 'syz.4.1645': attribute type 10 has an invalid length. [ 293.067850][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.094363][T12594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.132550][T12664] team0: Port device 0! removed [ 293.142554][T12664] bond0: (slave 0!): Enslaving as an active interface with an up link [ 293.155943][T12594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.162908][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.190719][T12594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.281418][T12594] hsr_slave_0: entered promiscuous mode [ 293.294926][T12594] hsr_slave_1: entered promiscuous mode [ 293.301501][T12594] debugfs: 'hsr0' already exists in 'hsr' [ 293.316308][T12594] Cannot create hsr debugfs directory [ 293.327423][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 293.420982][T12677] netlink: 'syz.2.1650': attribute type 5 has an invalid length. [ 293.429031][T12677] netlink: 'syz.2.1650': attribute type 7 has an invalid length. [ 293.488397][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'. [ 293.512985][ T51] Bluetooth: hci0: command tx timeout [ 293.749677][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1652'. [ 293.765521][T12695] sch_fq: defrate 0 ignored. [ 293.856195][T12594] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 293.872254][T12594] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.891186][T12594] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.904872][T12594] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.160047][T12711] netlink: 'syz.2.1656': attribute type 5 has an invalid length. [ 294.171299][T12711] netlink: 'syz.2.1656': attribute type 7 has an invalid length. [ 294.346036][T12594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.491867][T12725] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 294.538331][T12594] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.612097][T12731] sctp: [Deprecated]: syz.4.1661 (pid 12731) Use of int in maxseg socket option. [ 294.612097][T12731] Use struct sctp_assoc_value instead [ 294.679513][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.686890][ T8700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.719176][T12736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1662'. [ 294.747069][T12736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1662'. [ 294.813861][T12710] delete_channel: no stack [ 294.821692][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.828943][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.110017][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'. [ 295.561089][T12594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.584182][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 295.778450][T12795] : left promiscuous mode [ 295.960337][T12805] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 296.138907][T12814] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 296.357475][T12826] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 296.396677][T12829] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 296.427462][T12594] veth0_vlan: entered promiscuous mode [ 296.452598][T12594] veth1_vlan: entered promiscuous mode [ 296.566712][T12594] veth0_macvtap: entered promiscuous mode [ 296.578682][T12594] veth1_macvtap: entered promiscuous mode [ 296.585554][T12840] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 296.601029][T12840] macvlan1: entered allmulticast mode [ 296.607431][T12840] veth1_vlan: entered allmulticast mode [ 296.620902][T12840] team0: Port device macvlan1 added [ 296.642557][T12840] macvtap2: entered allmulticast mode [ 296.648299][T12840] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 296.657468][T12840] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 296.707202][T12594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.739463][T12594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.777427][T12851] bond0: (slave 0!): Releasing backup interface [ 296.882977][T12857] team0: Mode changed to "broadcast" [ 296.892216][ T8699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.920633][T12390] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.921072][T12851] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 296.937050][T12390] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.939904][T12851] netlink: 'syz.4.1692': attribute type 2 has an invalid length. [ 296.961536][T12390] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.028536][T12860] __nla_validate_parse: 6 callbacks suppressed [ 297.028562][T12860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1694'. [ 297.276185][T12861] macvlan0: entered promiscuous mode [ 297.291719][T12406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.304734][T12406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.341931][T12406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.351639][T12406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.693476][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 297.718864][T12874] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1698'. [ 297.816851][T12882] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 298.028255][T12890] netlink: 'syz.5.1702': attribute type 1 has an invalid length. [ 298.056477][T12891] sctp: [Deprecated]: syz.2.1701 (pid 12891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.056477][T12891] Use struct sctp_sack_info instead [ 298.071680][T12890] netlink: 'syz.5.1702': attribute type 1 has an invalid length. [ 298.330452][T12897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1705'. [ 298.391064][T12902] netlink: 'syz.2.1704': attribute type 12 has an invalid length. [ 298.742464][T12925] netlink: 'syz.2.1711': attribute type 4 has an invalid length. [ 298.752008][T12924] netlink: 'syz.2.1711': attribute type 4 has an invalid length. [ 298.920154][T12931] netlink: del zone limit has 4 unknown bytes [ 298.942208][T12931] sctp: [Deprecated]: syz.5.1714 (pid 12931) Use of int in max_burst socket option. [ 298.942208][T12931] Use struct sctp_assoc_value instead [ 298.958970][T12931] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1714'. [ 298.985869][T12931] sctp: [Deprecated]: syz.5.1714 (pid 12931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.985869][T12931] Use struct sctp_sack_info instead [ 299.743714][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 300.031396][T12968] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1722'. [ 301.104215][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.127934][T13012] syzkaller0: entered promiscuous mode [ 301.137789][T13012] syzkaller0: entered allmulticast mode [ 301.828055][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 303.563704][T13068] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 304.767147][T13061] tc_dump_action: action bad kind [ 304.907067][T13080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1749'. [ 305.062044][T13084] bridge0: port 3(batadv1) entered blocking state [ 305.072393][T13084] bridge0: port 3(batadv1) entered disabled state [ 305.091222][T13084] batadv1: entered allmulticast mode [ 305.102353][T13084] batadv1: entered promiscuous mode [ 305.108499][T13080] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 305.553797][T12401] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 305.563084][T12401] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 305.585756][ T51] Bluetooth: hci4: command tx timeout [ 305.607992][T13116] netlink: 'syz.5.1760': attribute type 4 has an invalid length. [ 305.643876][T13116] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1760'. [ 305.971876][T13130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1764'. [ 306.013797][T13133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 306.050994][T13130] ÿ: renamed from bond_slave_0 [ 306.272247][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 306.329794][T13142] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 306.360394][T13142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.382910][T13144] syzkaller0: entered promiscuous mode [ 306.391747][T13144] syzkaller0: entered allmulticast mode [ 306.430762][T13121] netlink: 'syz.4.1762': attribute type 11 has an invalid length. [ 306.455062][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1769'. [ 306.484961][T13124] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1762'. [ 306.513621][T13124] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 306.529580][T13124] openvswitch: netlink: Message has 1 unknown bytes. [ 306.669844][T13162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1770'. [ 306.733866][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 308.077871][T13207] netlink: 'syz.4.1781': attribute type 3 has an invalid length. [ 308.990657][T13215] netlink: 'syz.4.1785': attribute type 58 has an invalid length. [ 308.998864][T13215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1785'. [ 309.099732][T13163] veth0_macvtap (unregistering): left allmulticast mode [ 309.241160][T13162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 309.241679][T13219] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 309.254756][T13162] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 309.915348][T13243] syzkaller0: entered promiscuous mode [ 309.932300][T13243] syzkaller0: entered allmulticast mode [ 309.982203][T13248] __nla_validate_parse: 1 callbacks suppressed [ 309.982221][T13248] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1792'. [ 310.081499][T13254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1793'. [ 310.350084][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1797'. [ 310.409300][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 310.443837][T13264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1797'. [ 312.167610][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1802'. [ 312.234250][T13276] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1802'. [ 312.243321][T13276] netlink: 13356 bytes leftover after parsing attributes in process `syz.4.1802'. [ 312.435853][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'. [ 313.310468][T13277] vlan0: left promiscuous mode [ 313.433717][T13277] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 313.452327][T13277] ip6tnl1: left allmulticast mode [ 313.502913][T13294] hsr_slave_0: left promiscuous mode [ 313.513143][T13294] hsr_slave_1: left promiscuous mode [ 313.613515][T12406] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.621973][T12406] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.642357][T12406] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.650902][T12406] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.665584][T12401] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.677284][T12401] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.687662][T12401] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.696427][T12401] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.089949][T13312] geneve0: entered promiscuous mode [ 315.151790][T13347] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 315.172943][T13347] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 315.292724][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 315.311338][T13351] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1821'. [ 315.447431][T13358] tipc: Started in network mode [ 315.452756][T13358] tipc: Node identity 5ed0a4147ffc, cluster identity 4711 [ 315.460452][T13358] tipc: Enabled bearer , priority 0 [ 315.472591][T13355] syzkaller0: entered promiscuous mode [ 315.478494][T13355] syzkaller0: entered allmulticast mode [ 315.532204][T13355] tipc: Resetting bearer [ 315.547540][T13355] pimreg: entered allmulticast mode [ 315.585019][T13354] pimreg: left allmulticast mode [ 315.677255][T13354] tipc: Resetting bearer [ 315.729834][T13354] tipc: Disabling bearer [ 315.954040][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 316.239395][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 316.538305][T13398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.641570][T13406] tipc: Enabled bearer , priority 0 [ 316.760086][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 316.826664][T13406] tipc: Disabling bearer [ 316.949056][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1840'. [ 317.131933][T13422] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 317.243758][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'. [ 317.282722][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1840'. [ 317.336855][T13442] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1844'. [ 318.011823][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1855'. [ 318.383645][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 318.920156][T13537] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 319.020252][T13539] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.034788][T13539] syzkaller1: linktype set to 6 [ 319.126538][T13546] netlink: 'syz.0.1873': attribute type 13 has an invalid length. [ 319.147770][T13546] netlink: 'syz.0.1873': attribute type 17 has an invalid length. [ 319.198945][T13552] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.264292][T13546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.112910][T13587] netlink: 'syz.0.1882': attribute type 11 has an invalid length. [ 320.409930][T13600] netem: change failed [ 320.530684][T13605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.731780][T13621] __nla_validate_parse: 7 callbacks suppressed [ 320.731799][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1890'. [ 320.818290][T13627] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1891'. [ 320.876651][T13632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1893'. [ 320.945497][T13635] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.009908][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 322.040111][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1903'. [ 322.068088][T13685] netlink: 'syz.0.1903': attribute type 13 has an invalid length. [ 322.236882][T13695] !: renamed from dummy0 (while UP) [ 322.551704][T13699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1906'. [ 322.748683][T13710] openvswitch: netlink: IPv4 tun info is not correct [ 323.117796][T13738] netlink: 'syz.3.1913': attribute type 1 has an invalid length. [ 323.159282][T13738] netlink: 'syz.3.1913': attribute type 2 has an invalid length. [ 323.543866][T13751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1916'. [ 324.504319][T13794] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 324.573973][T13794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1924'. [ 324.622961][T13790] tipc: Enabling of bearer rejected, failed to enable media [ 325.265907][T13820] siw: device registration error -23 [ 325.696259][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1933'. [ 327.611016][T13833] syzkaller0: entered promiscuous mode [ 327.621970][T13833] syzkaller0: entered allmulticast mode [ 327.630478][T13832] batadv_slave_1: entered promiscuous mode [ 327.644011][T13837] batadv_slave_1: left promiscuous mode [ 327.860092][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1939'. [ 329.888726][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1945'. [ 329.897934][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1945'. [ 330.038378][T13892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1946'. [ 330.680512][T13903] netlink: 'syz.2.1950': attribute type 101 has an invalid length. [ 330.689311][T13903] netlink: 'syz.2.1950': attribute type 7 has an invalid length. [ 331.410286][T13943] tipc: Enabled bearer , priority 0 [ 331.420116][T13943] syzkaller0: entered promiscuous mode [ 331.436005][T13943] syzkaller0: entered allmulticast mode [ 331.464974][T13949] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20004 [ 331.566752][T13953] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1960'. [ 331.607704][T13943] tipc: Resetting bearer [ 331.647636][T13941] tipc: Resetting bearer [ 331.712697][T13941] tipc: Disabling bearer [ 332.014417][T13977] netlink: zone id is out of range [ 332.022427][T13977] netlink: zone id is out of range [ 332.029790][T13977] netlink: zone id is out of range [ 332.039783][T13977] netlink: zone id is out of range [ 332.091834][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 332.107432][T13977] netlink: zone id is out of range [ 332.123035][T13977] netlink: zone id is out of range [ 332.140898][T13977] netlink: zone id is out of range [ 332.148975][T13983] netlink: del zone limit has 4 unknown bytes [ 332.158514][T13972] netlink: del zone limit has 4 unknown bytes [ 332.163102][T13979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 332.165548][T13977] netlink: zone id is out of range [ 332.240406][T13984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1965'. [ 332.417601][T13999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1969'. [ 332.489157][T14002] lo speed is unknown, defaulting to 1000 [ 332.507604][T14002] lo speed is unknown, defaulting to 1000 [ 332.522447][T14002] lo speed is unknown, defaulting to 1000 [ 332.574200][T14013] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1972'. [ 332.577428][T14002] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 332.701523][T14002] lo speed is unknown, defaulting to 1000 [ 332.735728][T14002] lo speed is unknown, defaulting to 1000 [ 332.760237][T14002] lo speed is unknown, defaulting to 1000 [ 332.774982][T14002] lo speed is unknown, defaulting to 1000 [ 332.782946][T14002] lo speed is unknown, defaulting to 1000 [ 332.802801][T14002] lo speed is unknown, defaulting to 1000 [ 332.815130][T14022] tipc: Enabled bearer , priority 0 [ 332.835822][T14022] syzkaller0: entered promiscuous mode [ 332.845502][T14022] syzkaller0: entered allmulticast mode [ 332.902815][T14026] tipc: Enabling of bearer rejected, failed to enable media [ 332.958255][T14021] tipc: Resetting bearer [ 333.019790][T14021] tipc: Disabling bearer [ 333.201191][T14042] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 333.225189][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1981'. [ 333.408374][T14046] lo speed is unknown, defaulting to 1000 [ 333.487496][T14043] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.1980'. [ 333.502863][T14054] netlink: 'syz.3.1983': attribute type 4 has an invalid length. [ 333.555223][T14054] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1983'. [ 333.625764][T14061] lo speed is unknown, defaulting to 1000 [ 333.661583][T14063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1983'. [ 333.837150][T14065] syzkaller1: entered promiscuous mode [ 333.847731][T14065] syzkaller1: entered allmulticast mode [ 333.988030][T14075] netlink: 'syz.0.1988': attribute type 1 has an invalid length. [ 333.996435][T14075] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1988'. [ 334.020071][T14075] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1988'. [ 334.189864][T14071] lo speed is unknown, defaulting to 1000 [ 334.231737][T14091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1992'. [ 334.232616][T14082] lo speed is unknown, defaulting to 1000 [ 334.247741][T14091] IPv6: NLM_F_REPLACE set, but no existing node found! [ 334.371945][T14094] macsec1: entered promiscuous mode [ 334.379094][T14094] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 334.389118][T14094] macsec1: entered allmulticast mode [ 334.394949][T14094] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 334.437674][T14089] lo speed is unknown, defaulting to 1000 [ 334.452952][T14096] macsec2: entered promiscuous mode [ 334.464195][T14096] macsec2: entered allmulticast mode [ 334.871727][T14117] netlink: 'syz.3.1999': attribute type 1 has an invalid length. [ 335.077378][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2000'. [ 335.148535][T14128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2000'. [ 335.176268][T14127] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1999'. [ 335.302387][T14133] netlink: 'syz.0.2003': attribute type 15 has an invalid length. [ 335.323144][T14133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.423914][T14137] netlink: 'syz.0.2003': attribute type 10 has an invalid length. [ 335.515928][T14137] team0: Port device macvlan1 added [ 335.605886][T14117] lo speed is unknown, defaulting to 1000 [ 337.508186][T14178] batman_adv: batadv0: Adding interface: ip6gretap1 [ 337.519685][T14178] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 337.550260][T14178] batman_adv: batadv0: Interface activated: ip6gretap1 [ 351.664670][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 424.624798][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.303741][ T31] INFO: task kworker/1:2:979 blocked for more than 143 seconds. [ 496.311435][ T31] Not tainted syzkaller #0 [ 496.316616][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.325435][ T31] task:kworker/1:2 state:D stack:22392 pid:979 tgid:979 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 496.337547][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 496.344347][ T31] Call Trace: [ 496.347629][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 496.350565][ T31] __schedule+0x1798/0x4cc0 [ 496.355209][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 496.360721][ T31] ? __pfx___schedule+0x10/0x10 [ 496.365904][ T31] ? schedule+0x91/0x360 [ 496.370165][ T31] schedule+0x165/0x360 [ 496.374521][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.379989][ T31] __mutex_lock+0x7e6/0x1350 [ 496.384709][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.389490][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 496.395860][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.400905][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 496.407052][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 496.412791][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 496.418983][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 496.424753][ T31] process_scheduled_works+0xae1/0x17b0 [ 496.443429][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.449480][ T31] worker_thread+0x8a0/0xda0 [ 496.482650][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 496.495234][ T31] ? __kthread_parkme+0x7b/0x200 [ 496.500228][ T31] kthread+0x70e/0x8a0 [ 496.504402][ T31] ? __pfx_worker_thread+0x10/0x10 [ 496.509539][ T31] ? __pfx_kthread+0x10/0x10 [ 496.514231][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.519450][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.524795][ T31] ? __pfx_kthread+0x10/0x10 [ 496.529406][ T31] ret_from_fork+0x3fc/0x770 [ 496.534023][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.539129][ T31] ? __switch_to_asm+0x39/0x70 [ 496.543986][ T31] ? __switch_to_asm+0x33/0x70 [ 496.548759][ T31] ? __pfx_kthread+0x10/0x10 [ 496.553399][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.558178][ T31] [ 496.561319][ T31] INFO: task syz.5.2004:14136 blocked for more than 143 seconds. [ 496.569119][ T31] Not tainted syzkaller #0 [ 496.574102][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.582772][ T31] task:syz.5.2004 state:D stack:25096 pid:14136 tgid:14136 ppid:12594 task_flags:0x400040 flags:0x00004004 [ 496.594760][ T31] Call Trace: [ 496.598045][ T31] [ 496.600986][ T31] __schedule+0x1798/0x4cc0 [ 496.605551][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.610426][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.615298][ T31] ? __pfx___schedule+0x10/0x10 [ 496.620183][ T31] ? schedule+0x91/0x360 [ 496.624462][ T31] schedule+0x165/0x360 [ 496.628601][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.634106][ T31] __mutex_lock+0x7e6/0x1350 [ 496.638702][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.643503][ T31] ? rfkill_unregister+0xc8/0x220 [ 496.648533][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.653655][ T31] ? __pfx_device_del+0x10/0x10 [ 496.658533][ T31] rfkill_unregister+0xc8/0x220 [ 496.663403][ T31] nfc_unregister_device+0x96/0x2a0 [ 496.668598][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 496.674361][ T31] virtual_ncidev_close+0x56/0x90 [ 496.679392][ T31] __fput+0x44c/0xa70 [ 496.683396][ T31] task_work_run+0x1d1/0x260 [ 496.687993][ T31] ? __pfx_task_work_run+0x10/0x10 [ 496.693105][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 496.698597][ T31] exit_to_user_mode_loop+0xec/0x110 [ 496.703993][ T31] do_syscall_64+0x2bd/0x3b0 [ 496.708596][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.713863][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.720238][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.724938][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.730823][ T31] RIP: 0033:0x7f43c618ebe9 [ 496.735255][ T31] RSP: 002b:00007fffbf009418 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 496.743697][ T31] RAX: 0000000000000000 RBX: 0000000000051e1c RCX: 00007f43c618ebe9 [ 496.751651][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 496.759637][ T31] RBP: 00007f43c63c7da0 R08: 0000000000000001 R09: 0000001ebf00970f [ 496.767633][ T31] R10: 0000001b2d720000 R11: 0000000000000246 R12: 00007f43c63c5fac [ 496.775632][ T31] R13: 00007f43c63c5fa0 R14: ffffffffffffffff R15: 00007fffbf009530 [ 496.783660][ T31] [ 496.786694][ T31] INFO: task syz.4.2005:14144 blocked for more than 143 seconds. [ 496.794529][ T31] Not tainted syzkaller #0 [ 496.799465][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.808182][ T31] task:syz.4.2005 state:D stack:23720 pid:14144 tgid:14143 ppid:5862 task_flags:0x400140 flags:0x00004006 [ 496.820144][ T31] Call Trace: [ 496.823463][ T31] [ 496.826403][ T31] __schedule+0x1798/0x4cc0 [ 496.830924][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.835835][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.840690][ T31] ? __pfx___schedule+0x10/0x10 [ 496.845577][ T31] ? schedule+0x91/0x360 [ 496.849808][ T31] schedule+0x165/0x360 [ 496.853988][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.859445][ T31] __mutex_lock+0x7e6/0x1350 [ 496.864438][ T31] ? rcu_is_watching+0x15/0xb0 [ 496.869216][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.874026][ T31] ? rfkill_register+0x37/0x8e0 [ 496.878879][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.883934][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 496.888878][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.894106][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 496.899395][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 496.905069][ T31] rfkill_register+0x37/0x8e0 [ 496.909751][ T31] wiphy_register+0x214c/0x28d0 [ 496.914654][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 496.919862][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 496.925031][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 496.931104][ T31] ieee80211_register_hw+0x3484/0x4100 [ 496.936584][ T31] ? ieee80211_register_hw+0x14d1/0x4100 [ 496.942213][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 496.948058][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 496.954485][ T31] ? __hrtimer_setup+0x187/0x210 [ 496.959434][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 496.965286][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 496.971023][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 496.976340][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 496.982398][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 496.987952][ T31] ? __sock_sendmsg+0x21c/0x270 [ 496.992792][ T31] ? ____sys_sendmsg+0x505/0x830 [ 496.997754][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 497.002860][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 497.008071][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 497.013850][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 497.019406][ T31] ? __nla_parse+0x40/0x60 [ 497.023868][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 497.030208][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 497.035804][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 497.041866][ T31] ? bpf_lsm_capable+0x9/0x20 [ 497.046566][ T31] ? security_capable+0x7e/0x2e0 [ 497.051498][ T31] genl_rcv_msg+0x60e/0x790 [ 497.056013][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.061027][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 497.066598][ T31] ? __asan_memcpy+0x40/0x70 [ 497.071193][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 497.076590][ T31] netlink_rcv_skb+0x208/0x470 [ 497.081336][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.086202][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.091214][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.096508][ T31] ? down_read+0x1ad/0x2e0 [ 497.100914][ T31] genl_rcv+0x28/0x40 [ 497.104952][ T31] netlink_unicast+0x82f/0x9e0 [ 497.109726][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 497.115042][ T31] ? netlink_sendmsg+0x642/0xb30 [ 497.119983][ T31] ? skb_put+0x11b/0x210 [ 497.124265][ T31] netlink_sendmsg+0x805/0xb30 [ 497.129058][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.134378][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 497.139327][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.144661][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.149948][ T31] __sock_sendmsg+0x21c/0x270 [ 497.154642][ T31] ____sys_sendmsg+0x505/0x830 [ 497.159395][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.164720][ T31] ? import_iovec+0x74/0xa0 [ 497.169225][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 497.173908][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.179108][ T31] ? __fget_files+0x2a/0x420 [ 497.183752][ T31] ? __fget_files+0x3a0/0x420 [ 497.188435][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 497.193405][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.198873][ T31] ? rcu_is_watching+0x15/0xb0 [ 497.203675][ T31] ? do_syscall_64+0xbe/0x3b0 [ 497.208353][ T31] do_syscall_64+0xfa/0x3b0 [ 497.212837][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.218041][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.224134][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.228819][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.234732][ T31] RIP: 0033:0x7f392b38ebe9 [ 497.239127][ T31] RSP: 002b:00007f392c138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.247556][ T31] RAX: ffffffffffffffda RBX: 00007f392b5c5fa0 RCX: 00007f392b38ebe9 [ 497.255609][ T31] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000e [ 497.263607][ T31] RBP: 00007f392b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 497.271579][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.279586][ T31] R13: 00007f392b5c6038 R14: 00007f392b5c5fa0 R15: 00007ffc9db4f408 [ 497.287625][ T31] [ 497.290670][ T31] INFO: task syz.2.2006:14149 blocked for more than 144 seconds. [ 497.300125][ T31] Not tainted syzkaller #0 [ 497.305069][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.313775][ T31] task:syz.2.2006 state:D stack:28936 pid:14149 tgid:14146 ppid:5863 task_flags:0x400040 flags:0x00004004 [ 497.325731][ T31] Call Trace: [ 497.328996][ T31] [ 497.331910][ T31] __schedule+0x1798/0x4cc0 [ 497.336453][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.341311][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.346183][ T31] ? __pfx___schedule+0x10/0x10 [ 497.351042][ T31] ? schedule+0x91/0x360 [ 497.355324][ T31] schedule+0x165/0x360 [ 497.359496][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.364980][ T31] __mutex_lock+0x7e6/0x1350 [ 497.369559][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.374353][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 497.379648][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.384694][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.389877][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 497.395821][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 497.402164][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 497.407944][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 497.413049][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 497.418803][ T31] rfkill_set_block+0x1d2/0x440 [ 497.423684][ T31] rfkill_fop_write+0x44b/0x570 [ 497.428557][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 497.433963][ T31] ? security_kernfs_init_security+0x240/0x290 [ 497.440302][ T31] ? rw_verify_area+0x255/0x4d0 [ 497.445169][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.450010][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 497.455428][ T31] vfs_write+0x27b/0xb30 [ 497.459779][ T31] ? __pfx_vfs_write+0x10/0x10 [ 497.464579][ T31] ? __fget_files+0x2a/0x420 [ 497.469263][ T31] ? __fget_files+0x2a/0x420 [ 497.473893][ T31] ? __fget_files+0x3a0/0x420 [ 497.478714][ T31] ? __fget_files+0x2a/0x420 [ 497.483335][ T31] ksys_write+0x145/0x250 [ 497.487672][ T31] ? __pfx_ksys_write+0x10/0x10 [ 497.492505][ T31] ? rcu_is_watching+0x15/0xb0 [ 497.497350][ T31] ? do_syscall_64+0xbe/0x3b0 [ 497.502050][ T31] do_syscall_64+0xfa/0x3b0 [ 497.506639][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.511831][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.518034][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.522700][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.528604][ T31] RIP: 0033:0x7f3b53f8ebe9 [ 497.533044][ T31] RSP: 002b:00007f3b521f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.541531][ T31] RAX: ffffffffffffffda RBX: 00007f3b541c6090 RCX: 00007f3b53f8ebe9 [ 497.549540][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 497.557554][ T31] RBP: 00007f3b54011e19 R08: 0000000000000000 R09: 0000000000000000 [ 497.565546][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.573569][ T31] R13: 00007f3b541c6128 R14: 00007f3b541c6090 R15: 00007fffc7590a78 [ 497.581571][ T31] [ 497.584672][ T31] INFO: task syz.0.2015:14176 blocked for more than 144 seconds. [ 497.592534][ T31] Not tainted syzkaller #0 [ 497.597804][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.606824][ T31] task:syz.0.2015 state:D stack:26920 pid:14176 tgid:14175 ppid:5874 task_flags:0x400140 flags:0x00004004 [ 497.618842][ T31] Call Trace: [ 497.622120][ T31] [ 497.625065][ T31] __schedule+0x1798/0x4cc0 [ 497.629577][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.634749][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.639608][ T31] ? __pfx___schedule+0x10/0x10 [ 497.644814][ T31] ? schedule+0x91/0x360 [ 497.649063][ T31] schedule+0x165/0x360 [ 497.653202][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.658708][ T31] __mutex_lock+0x7e6/0x1350 [ 497.663453][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.668225][ T31] ? genl_rcv_msg+0x10d/0x790 [ 497.672897][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.678008][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 497.683147][ T31] ? radix_tree_lookup+0x240/0x290 [ 497.688496][ T31] genl_rcv_msg+0x10d/0x790 [ 497.693023][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.698160][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 497.703206][ T31] ? __asan_memcpy+0x40/0x70 [ 497.707854][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 497.713238][ T31] netlink_rcv_skb+0x208/0x470 [ 497.718107][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.722971][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.728037][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.733396][ T31] ? down_read+0x1ad/0x2e0 [ 497.737819][ T31] genl_rcv+0x28/0x40 [ 497.741790][ T31] netlink_unicast+0x82f/0x9e0 [ 497.747032][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 497.752342][ T31] ? netlink_sendmsg+0x642/0xb30 [ 497.757512][ T31] ? skb_put+0x11b/0x210 [ 497.761745][ T31] netlink_sendmsg+0x805/0xb30 [ 497.766579][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.771888][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 497.776881][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.782155][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.787475][ T31] __sock_sendmsg+0x21c/0x270 [ 497.792148][ T31] __sys_sendto+0x3bd/0x520 [ 497.796673][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 497.801699][ T31] ? count_memcg_event_mm+0x21/0x260 [ 497.807077][ T31] ? exc_page_fault+0x76/0xf0 [ 497.811771][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 497.817152][ T31] __x64_sys_sendto+0xde/0x100 [ 497.821920][ T31] do_syscall_64+0xfa/0x3b0 [ 497.826582][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.831835][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.838058][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.842744][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.848741][ T31] RIP: 0033:0x7f4582b90a7c [ 497.853155][ T31] RSP: 002b:00007f45839feec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 497.861660][ T31] RAX: ffffffffffffffda RBX: 00007f45839fefc0 RCX: 00007f4582b90a7c [ 497.869827][ T31] RDX: 0000000000000024 RSI: 00007f45839ff010 RDI: 0000000000000006 [ 497.877869][ T31] RBP: 0000000000000000 R08: 00007f45839fef14 R09: 000000000000000c [ 497.885895][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 497.893891][ T31] R13: 00007f45839fef68 R14: 00007f45839ff010 R15: 0000000000000000 [ 497.901906][ T31] [ 497.905184][ T31] INFO: task syz.0.2015:14177 blocked for more than 144 seconds. [ 497.912914][ T31] Not tainted syzkaller #0 [ 497.918740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.927489][ T31] task:syz.0.2015 state:D stack:28360 pid:14177 tgid:14175 ppid:5874 task_flags:0x400040 flags:0x00004004 [ 497.939497][ T31] Call Trace: [ 497.942767][ T31] [ 497.945719][ T31] __schedule+0x1798/0x4cc0 [ 497.950219][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.955148][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.960005][ T31] ? __pfx___schedule+0x10/0x10 [ 497.964906][ T31] ? schedule+0x91/0x360 [ 497.969135][ T31] schedule+0x165/0x360 [ 497.973598][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.979062][ T31] __mutex_lock+0x7e6/0x1350 [ 497.983707][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.988456][ T31] ? genl_rcv_msg+0x10d/0x790 [ 497.993135][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.998179][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 498.003350][ T31] ? radix_tree_lookup+0x240/0x290 [ 498.008476][ T31] genl_rcv_msg+0x10d/0x790 [ 498.012991][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.018054][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 498.023069][ T31] ? __asan_memcpy+0x40/0x70 [ 498.027682][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 498.033059][ T31] netlink_rcv_skb+0x208/0x470 [ 498.037918][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.042795][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.047885][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.053179][ T31] ? down_read+0x1ad/0x2e0 [ 498.057641][ T31] genl_rcv+0x28/0x40 [ 498.061621][ T31] netlink_unicast+0x82f/0x9e0 [ 498.066562][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 498.071958][ T31] ? netlink_sendmsg+0x642/0xb30 [ 498.076935][ T31] ? skb_put+0x11b/0x210 [ 498.081166][ T31] netlink_sendmsg+0x805/0xb30 [ 498.086195][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.091471][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 498.096441][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.101730][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.107065][ T31] __sock_sendmsg+0x21c/0x270 [ 498.111756][ T31] __sys_sendto+0x3bd/0x520 [ 498.116299][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 498.121327][ T31] ? fd_install+0x97/0x540 [ 498.125758][ T31] ? fd_install+0x30d/0x540 [ 498.130258][ T31] __x64_sys_sendto+0xde/0x100 [ 498.135088][ T31] do_syscall_64+0xfa/0x3b0 [ 498.139591][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.144926][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.151024][ T31] ? clear_bhb_loop+0x60/0xb0 [ 498.155864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.161783][ T31] RIP: 0033:0x7f4582b90a7c [ 498.166230][ T31] RSP: 002b:00007f45839ddec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 498.174697][ T31] RAX: ffffffffffffffda RBX: 00007f45839ddfc0 RCX: 00007f4582b90a7c [ 498.182694][ T31] RDX: 0000000000000020 RSI: 00007f45839de010 RDI: 000000000000000a [ 498.190751][ T31] RBP: 0000000000000000 R08: 00007f45839ddf14 R09: 000000000000000c [ 498.198936][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 498.206941][ T31] R13: 00007f45839ddf68 R14: 00007f45839de010 R15: 0000000000000000 [ 498.214970][ T31] [ 498.217990][ T31] INFO: task syz.3.2016:14181 blocked for more than 145 seconds. [ 498.225965][ T31] Not tainted syzkaller #0 [ 498.230906][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.239652][ T31] task:syz.3.2016 state:D stack:25896 pid:14181 tgid:14180 ppid:5869 task_flags:0x400140 flags:0x00004004 [ 498.251624][ T31] Call Trace: [ 498.254952][ T31] [ 498.257872][ T31] __schedule+0x1798/0x4cc0 [ 498.262364][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.267287][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.272148][ T31] ? __pfx___schedule+0x10/0x10 [ 498.277044][ T31] ? schedule+0x91/0x360 [ 498.281275][ T31] schedule+0x165/0x360 [ 498.285459][ T31] schedule_preempt_disabled+0x13/0x30 [ 498.290899][ T31] __mutex_lock+0x7e6/0x1350 [ 498.295557][ T31] ? __mutex_lock+0x5bb/0x1350 [ 498.300343][ T31] ? rfkill_register+0x37/0x8e0 [ 498.305352][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 498.310376][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 498.315787][ T31] ? device_initialize+0x24b/0x440 [ 498.320888][ T31] rfkill_register+0x37/0x8e0 [ 498.325643][ T31] nfc_register_device+0x14a/0x320 [ 498.330766][ T31] nci_register_device+0x87f/0x9d0 [ 498.335934][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 498.341575][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 498.346870][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 498.352249][ T31] virtual_ncidev_open+0x129/0x1a0 [ 498.357455][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 498.363090][ T31] misc_open+0x2bc/0x330 [ 498.367377][ T31] chrdev_open+0x4c9/0x5e0 [ 498.371784][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.376800][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 498.383155][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.391009][ T31] do_dentry_open+0x950/0x13f0 [ 498.395829][ T31] vfs_open+0x3b/0x340 [ 498.399974][ T31] ? path_openat+0x2ecd/0x3830 [ 498.404776][ T31] path_openat+0x2ee5/0x3830 [ 498.409374][ T31] ? arch_stack_walk+0xfc/0x150 [ 498.414433][ T31] ? stack_depot_save_flags+0x40/0x860 [ 498.419895][ T31] ? __pfx_path_openat+0x10/0x10 [ 498.424844][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.430908][ T31] do_filp_open+0x1fa/0x410 [ 498.435508][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.440371][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 498.445452][ T31] ? _raw_spin_unlock+0x28/0x50 [ 498.450295][ T31] ? alloc_fd+0x64c/0x6c0 [ 498.454738][ T31] do_sys_openat2+0x121/0x1c0 [ 498.459437][ T31] ? __se_sys_futex+0x36f/0x400 [ 498.464478][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 498.469695][ T31] ? rcu_is_watching+0x15/0xb0 [ 498.474519][ T31] __x64_sys_openat+0x138/0x170 [ 498.479383][ T31] do_syscall_64+0xfa/0x3b0 [ 498.483957][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.489249][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.495428][ T31] ? clear_bhb_loop+0x60/0xb0 [ 498.500141][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.506197][ T31] RIP: 0033:0x7f714918ebe9 [ 498.510629][ T31] RSP: 002b:00007f714a015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 498.519297][ T31] RAX: ffffffffffffffda RBX: 00007f71493c5fa0 RCX: 00007f714918ebe9 [ 498.527536][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 498.535702][ T31] RBP: 00007f7149211e19 R08: 0000000000000000 R09: 0000000000000000 [ 498.544271][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.552266][ T31] R13: 00007f71493c6038 R14: 00007f71493c5fa0 R15: 00007ffd2470f088 [ 498.560598][ T31] [ 498.563766][ T31] INFO: task syz.3.2016:14182 blocked for more than 145 seconds. [ 498.571476][ T31] Not tainted syzkaller #0 [ 498.576504][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.585198][ T31] task:syz.3.2016 state:D stack:27880 pid:14182 tgid:14180 ppid:5869 task_flags:0x400140 flags:0x00004004 [ 498.597292][ T31] Call Trace: [ 498.600575][ T31] [ 498.603625][ T31] __schedule+0x1798/0x4cc0 [ 498.608139][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.612984][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.617904][ T31] ? __pfx___schedule+0x10/0x10 [ 498.622782][ T31] ? schedule+0x91/0x360 [ 498.627198][ T31] schedule+0x165/0x360 [ 498.631368][ T31] schedule_preempt_disabled+0x13/0x30 [ 498.636909][ T31] __mutex_lock+0x7e6/0x1350 [ 498.641539][ T31] ? __mutex_lock+0x5bb/0x1350 [ 498.646457][ T31] ? genl_rcv_msg+0x10d/0x790 [ 498.651144][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 498.656182][ T31] ? stack_trace_save+0x9c/0xe0 [ 498.661025][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 498.666405][ T31] ? radix_tree_lookup+0x240/0x290 [ 498.671508][ T31] genl_rcv_msg+0x10d/0x790 [ 498.676032][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.680872][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.685986][ T31] netlink_rcv_skb+0x208/0x470 [ 498.690753][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.695630][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.700656][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.706035][ T31] ? down_read+0x1ad/0x2e0 [ 498.710459][ T31] genl_rcv+0x28/0x40 [ 498.714480][ T31] netlink_unicast+0x82f/0x9e0 [ 498.719262][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 498.724603][ T31] ? netlink_sendmsg+0x642/0xb30 [ 498.729547][ T31] ? skb_put+0x11b/0x210 [ 498.733819][ T31] netlink_sendmsg+0x805/0xb30 [ 498.738586][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.743907][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 498.748878][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.754192][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.759480][ T31] __sock_sendmsg+0x21c/0x270 [ 498.764200][ T31] __sys_sendto+0x3bd/0x520 [ 498.768703][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 498.773824][ T31] ? count_memcg_event_mm+0x21/0x260 [ 498.779134][ T31] ? exc_page_fault+0x76/0xf0 [ 498.784081][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 498.789379][ T31] __x64_sys_sendto+0xde/0x100 [ 498.794193][ T31] do_syscall_64+0xfa/0x3b0 [ 498.798696][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.803933][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.810025][ T31] ? clear_bhb_loop+0x60/0xb0 [ 498.814729][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.820624][ T31] RIP: 0033:0x7f7149190a7c [ 498.825068][ T31] RSP: 002b:00007f7149ff2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 498.833510][ T31] RAX: ffffffffffffffda RBX: 00007f7149ff2fc0 RCX: 00007f7149190a7c [ 498.841484][ T31] RDX: 000000000000001c RSI: 00007f7149ff3010 RDI: 000000000000000a [ 498.849476][ T31] RBP: 0000000000000000 R08: 00007f7149ff2f14 R09: 000000000000000c [ 498.857646][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 498.865797][ T31] R13: 00007f7149ff2f68 R14: 00007f7149ff3010 R15: 0000000000000000 [ 498.873876][ T31] [ 498.876912][ T31] INFO: task syz-executor:14191 blocked for more than 145 seconds. [ 498.884845][ T31] Not tainted syzkaller #0 [ 498.889778][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.898486][ T31] task:syz-executor state:D stack:28040 pid:14191 tgid:14191 ppid:1 task_flags:0x400040 flags:0x00004000 [ 498.910447][ T31] Call Trace: [ 498.913752][ T31] [ 498.916683][ T31] __schedule+0x1798/0x4cc0 [ 498.921171][ T31] ? kasan_save_free_info+0x46/0x50 [ 498.926437][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.931304][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.936166][ T31] ? __pfx___schedule+0x10/0x10 [ 498.941012][ T31] ? schedule+0x91/0x360 [ 498.945362][ T31] schedule+0x165/0x360 [ 498.949672][ T31] schedule_preempt_disabled+0x13/0x30 [ 498.955182][ T31] __mutex_lock+0x7e6/0x1350 [ 498.959778][ T31] ? __mutex_lock+0x5bb/0x1350 [ 498.964585][ T31] ? misc_open+0x51/0x330 [ 498.968920][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 498.973993][ T31] misc_open+0x51/0x330 [ 498.978154][ T31] chrdev_open+0x4c9/0x5e0 [ 498.982558][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.987511][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 498.993862][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.998799][ T31] do_dentry_open+0x950/0x13f0 [ 499.003606][ T31] vfs_open+0x3b/0x340 [ 499.007672][ T31] ? path_openat+0x2ecd/0x3830 [ 499.012422][ T31] path_openat+0x2ee5/0x3830 [ 499.017115][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 499.022584][ T31] ? count_memcg_event_mm+0x21/0x260 [ 499.027895][ T31] ? __pfx_path_openat+0x10/0x10 [ 499.032826][ T31] ? __pfx___up_read+0x10/0x10 [ 499.037650][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 499.042974][ T31] do_filp_open+0x1fa/0x410 [ 499.047606][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.052473][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 499.057545][ T31] ? _raw_spin_unlock+0x28/0x50 [ 499.062391][ T31] ? alloc_fd+0x64c/0x6c0 [ 499.066929][ T31] do_sys_openat2+0x121/0x1c0 [ 499.071603][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 499.076852][ T31] ? fd_install+0x97/0x540 [ 499.081291][ T31] ? fd_install+0x30d/0x540 [ 499.085863][ T31] __x64_sys_openat+0x138/0x170 [ 499.090711][ T31] do_syscall_64+0xfa/0x3b0 [ 499.095256][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.100460][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.106710][ T31] ? clear_bhb_loop+0x60/0xb0 [ 499.111397][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.117310][ T31] RIP: 0033:0x7f0a51f8d4d1 [ 499.121709][ T31] RSP: 002b:00007ffe9de3ae10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 499.130238][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0a51f8d4d1 [ 499.138260][ T31] RDX: 0000000000000002 RSI: 00007f0a52012822 RDI: 00000000ffffff9c [ 499.146286][ T31] RBP: 00007f0a52012822 R08: 0000000000000000 R09: 00007f0a52cfd6c0 [ 499.154305][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 499.162286][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 499.170300][ T31] [ 499.173362][ T31] INFO: task syz-executor:14192 blocked for more than 146 seconds. [ 499.181242][ T31] Not tainted syzkaller #0 [ 499.186336][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.195049][ T31] task:syz-executor state:D stack:27808 pid:14192 tgid:14192 ppid:1 task_flags:0x400040 flags:0x00004000 [ 499.207007][ T31] Call Trace: [ 499.210277][ T31] [ 499.213193][ T31] __schedule+0x1798/0x4cc0 [ 499.217714][ T31] ? kasan_save_free_info+0x46/0x50 [ 499.222902][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.227786][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.232629][ T31] ? __pfx___schedule+0x10/0x10 [ 499.237497][ T31] ? schedule+0x91/0x360 [ 499.241723][ T31] schedule+0x165/0x360 [ 499.245894][ T31] schedule_preempt_disabled+0x13/0x30 [ 499.251349][ T31] __mutex_lock+0x7e6/0x1350 [ 499.255963][ T31] ? __mutex_lock+0x5bb/0x1350 [ 499.260734][ T31] ? misc_open+0x51/0x330 [ 499.265134][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 499.270171][ T31] misc_open+0x51/0x330 [ 499.274349][ T31] chrdev_open+0x4c9/0x5e0 [ 499.278775][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 499.283755][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 499.290091][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 499.295089][ T31] do_dentry_open+0x950/0x13f0 [ 499.299870][ T31] vfs_open+0x3b/0x340 [ 499.303976][ T31] ? path_openat+0x2ecd/0x3830 [ 499.308756][ T31] path_openat+0x2ee5/0x3830 [ 499.313401][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 499.318861][ T31] ? count_memcg_event_mm+0x21/0x260 [ 499.324222][ T31] ? __pfx_path_openat+0x10/0x10 [ 499.329197][ T31] ? __pfx___up_read+0x10/0x10 [ 499.333981][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 499.339288][ T31] do_filp_open+0x1fa/0x410 [ 499.343812][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.348699][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 499.353792][ T31] ? _raw_spin_unlock+0x28/0x50 [ 499.358646][ T31] ? alloc_fd+0x64c/0x6c0 [ 499.362968][ T31] do_sys_openat2+0x121/0x1c0 [ 499.367691][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 499.372894][ T31] ? fd_install+0x97/0x540 [ 499.377344][ T31] ? fd_install+0x30d/0x540 [ 499.381857][ T31] __x64_sys_openat+0x138/0x170 [ 499.386736][ T31] do_syscall_64+0xfa/0x3b0 [ 499.391226][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.396444][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.402495][ T31] ? clear_bhb_loop+0x60/0xb0 [ 499.407205][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.413100][ T31] RIP: 0033:0x7f611298d4d1 [ 499.417524][ T31] RSP: 002b:00007ffef5046510 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 499.426003][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f611298d4d1 [ 499.434049][ T31] RDX: 0000000000000002 RSI: 00007f6112a12822 RDI: 00000000ffffff9c [ 499.442036][ T31] RBP: 00007f6112a12822 R08: 0000000000000000 R09: 00007f61136fd6c0 [ 499.450018][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 499.458006][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 499.466030][ T31] [ 499.469046][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 499.478315][ T31] INFO: task syz-executor:14193 blocked for more than 146 seconds. [ 499.486333][ T31] Not tainted syzkaller #0 [ 499.491273][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.499991][ T31] task:syz-executor state:D stack:28040 pid:14193 tgid:14193 ppid:1 task_flags:0x400040 flags:0x00004000 [ 499.512086][ T31] Call Trace: [ 499.515396][ T31] [ 499.518323][ T31] __schedule+0x1798/0x4cc0 [ 499.522810][ T31] ? kasan_save_free_info+0x46/0x50 [ 499.528065][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.532913][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.537784][ T31] ? __pfx___schedule+0x10/0x10 [ 499.542633][ T31] ? schedule+0x91/0x360 [ 499.546881][ T31] schedule+0x165/0x360 [ 499.551021][ T31] schedule_preempt_disabled+0x13/0x30 [ 499.556491][ T31] __mutex_lock+0x7e6/0x1350 [ 499.561099][ T31] ? __mutex_lock+0x5bb/0x1350 [ 499.565894][ T31] ? misc_open+0x51/0x330 [ 499.570243][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 499.575306][ T31] misc_open+0x51/0x330 [ 499.579454][ T31] chrdev_open+0x4c9/0x5e0 [ 499.584019][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 499.588988][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 499.595359][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 499.600289][ T31] do_dentry_open+0x950/0x13f0 [ 499.605095][ T31] vfs_open+0x3b/0x340 [ 499.609167][ T31] ? path_openat+0x2ecd/0x3830 [ 499.613953][ T31] path_openat+0x2ee5/0x3830 [ 499.618583][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 499.624081][ T31] ? count_memcg_event_mm+0x21/0x260 [ 499.629384][ T31] ? __pfx_path_openat+0x10/0x10 [ 499.634357][ T31] ? __pfx___up_read+0x10/0x10 [ 499.639128][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 499.644459][ T31] do_filp_open+0x1fa/0x410 [ 499.648968][ T31] ? __lock_acquire+0xab9/0xd20 [ 499.653858][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 499.658899][ T31] ? _raw_spin_unlock+0x28/0x50 [ 499.663792][ T31] ? alloc_fd+0x64c/0x6c0 [ 499.668163][ T31] do_sys_openat2+0x121/0x1c0 [ 499.672857][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 499.678095][ T31] ? fd_install+0x97/0x540 [ 499.682509][ T31] ? fd_install+0x30d/0x540 [ 499.687070][ T31] __x64_sys_openat+0x138/0x170 [ 499.691913][ T31] do_syscall_64+0xfa/0x3b0 [ 499.696453][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.701661][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.707815][ T31] ? clear_bhb_loop+0x60/0xb0 [ 499.712483][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.718473][ T31] RIP: 0033:0x7f18bb78d4d1 [ 499.722874][ T31] RSP: 002b:00007ffdd60c9690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 499.731339][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f18bb78d4d1 [ 499.739375][ T31] RDX: 0000000000000002 RSI: 00007f18bb812822 RDI: 00000000ffffff9c [ 499.747445][ T31] RBP: 00007f18bb812822 R08: 0000000000000000 R09: 00007f18bc4fd6c0 [ 499.755466][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 499.763462][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 499.771445][ T31] [ 499.774484][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 499.783574][ T31] [ 499.783574][ T31] Showing all locks held in the system: [ 499.791293][ T31] 1 lock held by khungtaskd/31: [ 499.796167][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 499.806056][ T31] 3 locks held by kworker/1:2/979: [ 499.811178][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 499.822223][ T31] #1: ffffc90003affbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 499.835807][ T31] #2: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 499.847290][ T31] 2 locks held by getty/5621: [ 499.851952][ T31] #0: ffff88814d7ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 499.861736][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 499.871859][ T31] 2 locks held by syz.5.2004/14136: [ 499.877061][ T31] #0: ffff888024d2f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 499.886837][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 499.896974][ T31] 3 locks held by syz.4.2005/14144: [ 499.902160][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.910400][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 499.919457][ T31] #2: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 499.929450][ T31] 2 locks held by syz.2.2006/14149: [ 499.934650][ T31] #0: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 499.944766][ T31] #1: ffff888024d2f100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 499.954488][ T31] 2 locks held by syz.0.2015/14176: [ 499.959760][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.967953][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 499.976970][ T31] 2 locks held by syz.0.2015/14177: [ 499.982158][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.990626][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 499.999674][ T31] 3 locks held by syz.3.2016/14181: [ 500.004895][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.013436][ T31] #1: ffff88804fd1e100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 500.023046][ T31] #2: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 500.032996][ T31] 2 locks held by syz.3.2016/14182: [ 500.038207][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 500.046441][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 500.055461][ T31] 1 lock held by syz-executor/14191: [ 500.060726][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.069270][ T31] 1 lock held by syz-executor/14192: [ 500.074564][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.083011][ T31] 1 lock held by syz-executor/14193: [ 500.088309][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.096810][ T31] 1 lock held by syz-executor/14196: [ 500.102097][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.110560][ T31] 1 lock held by syz-executor/14197: [ 500.116574][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.125060][ T31] 1 lock held by syz-executor/14201: [ 500.130341][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.138847][ T31] 1 lock held by syz-executor/14202: [ 500.144224][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.152694][ T31] 1 lock held by syz-executor/14203: [ 500.157983][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.166456][ T31] 1 lock held by syz-executor/14206: [ 500.171732][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.180205][ T31] 1 lock held by syz-executor/14207: [ 500.185501][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.194036][ T31] 1 lock held by syz-executor/14211: [ 500.199311][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.207760][ T31] 1 lock held by syz-executor/14212: [ 500.213022][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.221479][ T31] 1 lock held by syz-executor/14213: [ 500.226857][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.235350][ T31] 1 lock held by syz-executor/14216: [ 500.240615][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.249112][ T31] 1 lock held by syz-executor/14217: [ 500.254441][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 500.262944][ T31] [ 500.265298][ T31] ============================================= [ 500.265298][ T31] [ 500.273764][ T31] NMI backtrace for cpu 0 [ 500.273788][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 500.273807][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.273818][ T31] Call Trace: [ 500.273826][ T31] [ 500.273835][ T31] dump_stack_lvl+0x189/0x250 [ 500.273862][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.273881][ T31] ? __pfx__printk+0x10/0x10 [ 500.273915][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 500.273940][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 500.273965][ T31] ? __pfx__printk+0x10/0x10 [ 500.273990][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 500.274017][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 500.274042][ T31] watchdog+0xf93/0xfe0 [ 500.274069][ T31] ? watchdog+0x1de/0xfe0 [ 500.274095][ T31] kthread+0x70e/0x8a0 [ 500.274118][ T31] ? __pfx_watchdog+0x10/0x10 [ 500.274138][ T31] ? __pfx_kthread+0x10/0x10 [ 500.274160][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.274190][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.274206][ T31] ? __pfx_kthread+0x10/0x10 [ 500.274226][ T31] ret_from_fork+0x3fc/0x770 [ 500.274245][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 500.274268][ T31] ? __switch_to_asm+0x39/0x70 [ 500.274287][ T31] ? __switch_to_asm+0x33/0x70 [ 500.274305][ T31] ? __pfx_kthread+0x10/0x10 [ 500.274325][ T31] ret_from_fork_asm+0x1a/0x30 [ 500.274362][ T31] [ 500.274369][ T31] Sending NMI from CPU 0 to CPUs 1: [ 500.418977][ C1] NMI backtrace for cpu 1 [ 500.418994][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 500.419011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.419021][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 500.419043][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 b7 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 500.419056][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 500.419071][ C1] RAX: cf3fa9ec4c7b0e00 RBX: ffffffff819683f8 RCX: cf3fa9ec4c7b0e00 [ 500.419082][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b9d08 RDI: ffffffff8be33880 [ 500.419094][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 500.419106][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa39230 [ 500.419118][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 500.419128][ C1] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 500.419141][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.419151][ C1] CR2: 0000560cb6808000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 500.419165][ C1] Call Trace: [ 500.419171][ C1] [ 500.419177][ C1] default_idle+0x13/0x20 [ 500.419194][ C1] default_idle_call+0x74/0xb0 [ 500.419212][ C1] do_idle+0x1e8/0x510 [ 500.419230][ C1] ? __pfx_do_idle+0x10/0x10 [ 500.419253][ C1] cpu_startup_entry+0x44/0x60 [ 500.419268][ C1] start_secondary+0x101/0x110 [ 500.419288][ C1] common_startup_64+0x13e/0x147 [ 500.419314][ C1] [ 500.419968][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 500.586068][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 500.595166][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.605213][ T31] Call Trace: [ 500.608484][ T31] [ 500.611411][ T31] dump_stack_lvl+0x99/0x250 [ 500.615999][ T31] ? __asan_memcpy+0x40/0x70 [ 500.620593][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.625802][ T31] ? __pfx__printk+0x10/0x10 [ 500.630414][ T31] vpanic+0x281/0x750 [ 500.634388][ T31] ? __pfx_vpanic+0x10/0x10 [ 500.638886][ T31] ? preempt_schedule+0xae/0xc0 [ 500.643721][ T31] ? preempt_schedule_common+0x83/0xd0 [ 500.649168][ T31] panic+0xb9/0xc0 [ 500.652877][ T31] ? __pfx_panic+0x10/0x10 [ 500.657298][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 500.662677][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 500.668833][ T31] watchdog+0xfd2/0xfe0 [ 500.672987][ T31] ? watchdog+0x1de/0xfe0 [ 500.677311][ T31] kthread+0x70e/0x8a0 [ 500.681371][ T31] ? __pfx_watchdog+0x10/0x10 [ 500.686035][ T31] ? __pfx_kthread+0x10/0x10 [ 500.690614][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.695806][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.700991][ T31] ? __pfx_kthread+0x10/0x10 [ 500.705572][ T31] ret_from_fork+0x3fc/0x770 [ 500.710158][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 500.715258][ T31] ? __switch_to_asm+0x39/0x70 [ 500.720007][ T31] ? __switch_to_asm+0x33/0x70 [ 500.724755][ T31] ? __pfx_kthread+0x10/0x10 [ 500.729332][ T31] ret_from_fork_asm+0x1a/0x30 [ 500.734096][ T31] [ 500.737357][ T31] Kernel Offset: disabled [ 500.741700][ T31] Rebooting in 86400 seconds..