last executing test programs: 21.00793018s ago: executing program 3 (id=825): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="df2500000000fdff0400"/20], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40004) syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000706010200000000000000000500000a05000100070000000900020073797a31000000005f1c110c4b843eb30e7834162b3ec353d8d3568debdb57adf2c097ec5ae7664b29f94bac6ca7796551afa8201fe5184d380187397118f04ba11d63d56e8fa5953e37bd0a44b677ec3ebf77bb77d68c9a3505c11bc6f6"], 0x28}, 0x1, 0x0, 0x0, 0x8814}, 0x8000) 20.636317772s ago: executing program 3 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000200001030000008ef54565ff05"], 0x14}}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r6, 0x23, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000680000020000fffffeffffff0a00000000000000062749bc9b7416c500070003000000424813e73c1e4202d3ff34a866fee067a21eaeb2b92b06dfbc0063508aae47158792769a3873ebe5897fa885fa395de200fb6f557fb85ef2025c889528ba6ff0b226b2520f6126ee0644473ea2faae5507086fc11b3442d45ea58e6be443384724055b97b143227fb7f4d7c5d193d6432636ae3256fe69c64d6776381021e3a041f5b8a92a5e6905e287b138a97a787479a799d63bdbfb2367e82148b495fe5107df"], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000380)={0xa0000001}) epoll_pwait(r11, &(0x7f0000000140)=[{}], 0x1, 0xe, 0x0, 0x0) bind$netlink(r7, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2043}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/216, 0xd8}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f0000000040)=""/50, 0x32}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x9, 0x40010020, 0x0) 19.614684628s ago: executing program 3 (id=848): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, &(0x7f0000000240)=""/142, 0x8e, 0x100, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631149000000000085100000020000008500000005000000950000000000000095e9600500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x204, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d8, 0x3, 0x0, 0x1, [{0x1d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x25, 0x1, "b06b07b73f94eccbd7d8af574fcc6450a43237b945b0c856dc19827202c543c174"}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x298}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x2c, 0x28, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x6, 0x7}, {0x10, 0xe}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) 19.463862356s ago: executing program 0 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x2c, 0x28, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0xd}, {0xffff}, {0xffe0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x24046090) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0xffffffffffffffff) (async) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000001}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x82000, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 19.284893475s ago: executing program 0 (id=851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x140f, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x40810) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)="1111152664", 0x5}, 0x1, 0x0, 0x0, 0x2c004014}, 0x80) recvmmsg(r2, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x22, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 19.204583179s ago: executing program 1 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 19.055160768s ago: executing program 1 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x3, 0x6, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa300000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300001aa0c253d0db0d56a2fed6945d8ca352926e97b21079c144ae7c0d018652c722c517bb2798bf8cabd3e8da8ae30c6dfb8d686b9952e4eff0249228ecdb67707e6afbe19f3ad005ecc2f42155217429b1853606d069dea96f14128cd573f8e3a3014df811300f926ad58d844ffe8a7699fff0659028b906cfbf3b80e42250e25ad26e9a228e9c4bdea7afb0", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x90) 18.903503018s ago: executing program 1 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) r4 = getgid() sendmmsg$unix(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="f46ec94c888b99fa67e822ce5cea943dd71d1bd9b4f8e0270a4b84e8c4827795a8b9e01af010dcd636165dbe006b88f4ae00a3d4a6e9c9c4c5930daf2707e51db07b8566723755081ebb42e02805d263618f0125fe6a127fcd18117d84a2640403c7ea6469a8e7eafe756f19223ac222d71e1623f2875dbd6b8a0cd652dec331cece6ab893f42bfdf4c37ff71ed2c0b51723e5232ed4772a7ddefd797033e340d933726f655be6ed1ada2094cc839d34ed5f507b0b5659def06b612d6e34217764fe46518140c9e5788a4cb6e15fd89ce1bfef17", 0xd4}, {&(0x7f0000000100)}, {&(0x7f00000004c0)="da1ac5eaf075def7cfd1787de181a7df70738c038a660ad348da6114be944a9f27bf1acccf5353b25374167a439a1315353d181544fd6d87230464f425192d86a7bf64577a63d02bcab3f1c834aa0443585402adfb16d9e05cab773486e743715db1e3ca0f2b5d9b660a9a9e51ccec2ba19fe9c9cf3273524fecbd47d8", 0x7d}, {&(0x7f00000005c0)="e6cc967933a4868abdba4fcc3e56346293dbcf8b774e96dd360660117a7f7f31cfa8359c09256c822718a7accf27af8ebfc5da01fa715e62f71a3c36819a7d311c95378b98a979e5d7aa126869a55581c774b97f66ee473279f99a0a3a786490037e1b1d7e4935867307e10ffb0a7a919e9fd60012e5a014552f2647c8e3af6800562c2acc58c4940855e3373188b1ca19c086cfa7e2", 0x96}, {&(0x7f0000000540)="85bf182d72a6b904d9f14de8c01696f350b6c22a4147663ff1de5d087e8e53481b4a1462172b7b97fce331be8c37c1ddf01d1a91828a6f3ac111b81051", 0x3d}], 0x5, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x50, 0x4000}}], 0x1, 0x40001) getsockopt(r2, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000220000042abd7001ffdbdf250210146a0900000200000000"], 0x1c}, 0x1, 0x0, 0x0, 0xd080}, 0x4008080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @local, @private2, {[], "c10a074faa17e05f"}}}}}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) ioctl$sock_ifreq(r1, 0x8915, &(0x7f0000000340)={'ip6_vti0\x00', @ifru_flags=0x1}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r5, 0x608, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x13}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8005}, 0x801) 18.56368286s ago: executing program 3 (id=857): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xffffffffffffffa6, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) syz_open_procfs$namespace(r1, 0x0) 18.548239206s ago: executing program 1 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x20}, 0x1, 0x200000000000000}, 0x0) 18.279372555s ago: executing program 0 (id=863): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@updsa={0x10c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x734c4b15b9d5c4b4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, @in6=@remote, {0x7, 0x4, 0x7, 0x5, 0x0, 0x3ba, 0x8000, 0x1}, {0x7, 0x8, 0x30, 0xa}, {0x7a0c39ff, 0x0, 0x2}, 0x70bd28, 0x3506, 0xa, 0x2, 0x67, 0x5c}, [@encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e23, @in=@empty}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4c020) socket(0x40000000015, 0x5, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@updsa={0x10c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x734c4b15b9d5c4b4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, @in6=@remote, {0x7, 0x4, 0x7, 0x5, 0x0, 0x3ba, 0x8000, 0x1}, {0x7, 0x8, 0x30, 0xa}, {0x7a0c39ff, 0x0, 0x2}, 0x70bd28, 0x3506, 0xa, 0x2, 0x67, 0x5c}, [@encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e23, @in=@empty}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4c020) (async) 18.277892976s ago: executing program 1 (id=864): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x18084}, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x4c, 0x0, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 18.261286794s ago: executing program 3 (id=865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x8, 0x180, 0x0, 0x0, 0xff}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 18.075396542s ago: executing program 2 (id=867): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xed, 0x0, &(0x7f00000008c0)="259a53d8151cfbd6be96eb6588a806fdd010222ad77dda2c4dec2ced754b95294df9f27fc5fe08b627070dd81667626da6113603a968e8845b36b7578cd51e202a4083a081a75febff4daa58d7a715e736464ac22907782dfa89e099e00ec43aba82b34884a0f0c404e9bc5794ba57c114a2769809e897fbdbcb482f162df4174f9ae57b0c6d8ffa12f9cb37b3a847926910df8e6c98fd00bf9070352e24caaed3085cedfd900e32a9621b589cb4f56f7f225788fcfed75a10dac1f4e1212f2bcb15d9eb315d4933e66c32c4470a411e5ae42acfe4cf63d893f4f7bca4b5f5f97bf1d71d2a2251031e732da6ca", 0x0, 0x2, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) syz_emit_ethernet(0x2e, &(0x7f0000000a00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaa8aaaaaaaa0800461900200066000007019078ac1414bb0a010100820200000000907800660004"], 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="40010000410007010000001007000000017c00000400fc802801018022017000800ae5c653b3ddf86d07fea3177863d51167d4bb4733b0e18ea94476d1ab09101c8482c0c47891b1278c219fc32533072bb159cd9336497e21c70be566b17ad1ebd4d40959fc3e5c4e53f3afa8dfc997d5b9ef629024eb21e3ffc17bf0c73b7fc5b56531f12405fc79cc6b1bdf522deaa53b4ed7bc482d73910c2b62dcd1e7eb617a5a42823d277c88bef57f6486add9ae0faabc724535d325f5ede12c990b246eba25b545b47ecfaf8687e7b26b18b89b120a188bf88b40409fe36b40aeaf10bbf846b742ba19f3ce6560ea7fbb02af123f75de33762e4915b60d6deb0e1726e902968038f7282c83b5d273691782e892983e749cd1479f2b83483e5aba21e2792ccc4e056591aa525fe4ca825796aa9b7ef703d2daaa60d83457d1ac96000042aec8a1864ff06f41110a88a4cb5fa115290761efaff1d65fa99f6218fe3f04fb05704f9b851316e3c4bb837977adab03d2d2222d5b3bff9a967cde58b3576d2a55cdd169a6abe3853c4d8de5bbaabb9295c847cccfc50831b81bc17fe127bc5c8e5c6b9cc895ea84b139bcac9cee007c06aee8d6278ea073d6ff82e7d4941b8aca9de386883ab42aa44d7b8ed55320f160783a5d1d2ee0e73dc6182143ab34a994b2bac3bc37568d0398e27cfc282fd3f75aace624ef7c06469f3eeea62c7c09368d1917670060657b9bdb3e66b3798f535ece3e8a58b64cfde284d2cf5ba1b9c421a2dd89de57fcebbcd2ac158e515d0863f5ee017577062ee2195fff1f73d544f03c7da824f2e2f6b90aff34570905693cd2de53f4ac461c9188740eb47e9d679fd706ca09bafc09a3a562d533134c9ba2f803c43158c0f5e2d4c756662b63af3cad6ce53acf"], 0x140}}, 0x44800) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@deltaction={0x1c8, 0x31, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x82}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb132}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80c0}, 0x40040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbfb, {0x6}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 18.054787979s ago: executing program 1 (id=868): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:system_map_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x44080}, 0x4081) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000500)={{r7}, 0x5, &(0x7f00000004c0)=[0x4, 0x3e2d, 0x2c, 0x8, 0x7f], 0x7fffffff, 0x0, 0x1}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r3) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:syslog_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}}, 0x8010) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$sock(r11, &(0x7f0000001940)=[{{&(0x7f0000000a80)=@x25, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b00)="d644f42e350a59225399421b49ec323b053d74a9f304f25d863d8a555520f2cf93d3b994a14aed25ace2af2afe8fce7e66f9687dc4595f2356497532ba5be674ca6068cebe8ef837243ed302ec098b", 0x4f}, {&(0x7f0000000b80)="7d4fd0d3d27d1e2dc8ca531785d31f2b28e8511a10bdb341b40f7dfb41d0389d7d3caeb71ee279b48dea592cc003c4c7aa57bc33497fc26406d1bf80569abb4975402a275f21cd4c3f666ac1de0efd54e1099c97d40cfdf750c3acf2becd1e688fa8", 0x62}, {&(0x7f0000000c00)="75e544dfa4df8e0ac7c538aedeb2a5639cd8a50bfa773c2f57e4c3f559608a6cb3248c143a1ec70ef515617b6278b339e48f94b78e2765607ef0400861fcd6847f26b1438638a8bececd7dd22a6692d316b4ca871d522302fe383b16712f8068a716e2185a6c1d046feaa3d1135ae227cc53fcf7f157cd9ece4bad5c946ee82f372f2944a3e621882f0a3f93c9400dc73301c9753608a7ef310e50832a84276a40b5f632bda309c5ad402179fa21a913fefd02ffe7ca35f74e6e79249d0ffe9e808dc879c0aafecba435c05878", 0xcd}, {&(0x7f0000000d00)="d224b20b99b94183bd07d222275673fc0a885f0dc389a2313209e115bb02b4965f9165819a76f95bba43bfd69dd44828", 0x30}, {&(0x7f0000000d40)="d89112c5c5fafbaf214fea6bf33747f97e0b84e980195587347deb23d1f5e23445a7c4f2eb63ad4a10a33b12d468021dc26d12381c027d71888917b6b5a69e17ab1aec35941739743c2dfe9a485458980fdb0ab45aba23aeb4d3804db7cf66647624dc4b29", 0x65}, {&(0x7f0000000dc0)="3414cc789418a613127c51876a87c87f3a9d0cdc07ba6b843126540bf490c5fe6894937f080feae2ae978ad10c942a0f468abb71f8c1d287ff6e8c13f7c676027fb834dd49bddaf8127ca9d545caeab5ca6dfe1407993b87575408bd048b21270dc5e8fd244a633cf3774f797d329e9d3d1dd26df3861c9ae5c5f59fb54e1e6fa0e0b54faa", 0x85}, {&(0x7f0000000e80)="61facd1483ba948631e58ed531b58d5930d5b1fccc7ae56ca828b7e405db7ebb75558c5395fe9778ebcf06094d6decd5e4d73844ed44e000def1b034a2945ae90505281b8ca7ad228a3bcb9b33a2b542842d2ff1461a565f7b2520eb", 0x5c}], 0x7, &(0x7f0000000f80)=[@timestamping={{0x14, 0x1, 0x25, 0x48}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001000)="e4ea9074715fee610ca30ef5d4de959f382bb8a5bb4d3044607c80e843e1b25145c1974f2212598cb48ae4d0ce60656a17fe2ec12d69e63f48a0da12fc3aac1d8e88ac8c5aa552918f1230018c74ae399d845f9ff2527e99ae442f6dbcc9245026e05b963379af21a68b4f387ebc7cae17345373a8dfd998", 0x78}, {&(0x7f0000001080)="7132667e2a9aa0f45091d0ed6de5d1c39ea19a240820905f187b19040393c1c4db0e80538fa1d32eb78c41fa0aa94b3bf3090ab826556593a3f87b205458f8cbbfeff1f8a036dc721ff86f9d18bc01f41703273564ad3e2bf368ad8fa8594d9689c2dd8cf062fbc50837dcfb278aab8ada2dfc4f6e4829c9187680ed1dd2a5fe61a1180719470358", 0x88}, {&(0x7f0000001140)="c0d9e92ed1a7284f778b4ad9ccc4ba1924e04d705058057819a774a12ed667295f696162faf271cdf86907ec5faffa3cff8e20ccc4590dfb5f00b26b56c6d109749b9a", 0x43}, {&(0x7f00000011c0)="c7cfbafad45eef10027f829dbbc1f1b535a14026cdb62a72b26fa40504350daea859d50158e04bdfc85acebb1636504da1124ffbb6271e36223f6aaba56cd297b7bd22f0225c737c50005d0165ab47c61d5acf0251dd6a572af7c3da495dac7aa67b7f67973b0fb60fe049b80f346c6301cff2b54ba0c8cf976fca99d28b9669fd0cc46594bdf80d", 0x88}], 0x4, &(0x7f00000012c0)=[@mark={{0x14, 0x1, 0x24, 0x5ad0000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8d9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xc0}}, {{&(0x7f0000001380)=@in6={0xa, 0x4e23, 0x1000, @private2, 0x2}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)="72e24144b4db1756705b955851b07bb95a6d97eee42dba8a4e8a5248a991", 0x1e}, {&(0x7f0000001440)="75bb4f2b10e0048e03c0728a17b9f695152f489ee465d3606ff0e08f40c9b6c594cb407952865be6c0e2b30481851d518f5bab1bc2ef2f6df221e68245fb071fae067c67fae5e84ca0097fb24b807ecfd164dab079cee8cd22a292ed1396acd43acc936c86b17d5daaa891711f78cb6843cacca547f2d1422fbe02f0435e6ceb1f7d7d09ea9e1471ae7108a241", 0x8d}, {&(0x7f0000001500)="d07b365f06880d8addf22b4a0e92a8c0fedcecfd156fe703a15a660e65f0eff09e0e380e3550d01560331737432ff79a013b7d099807c8a000af20653a7e902c68451155ecd9d4e89daa073706bb4512f9bb7eaeeb59d39c6459699b8c047ee1506f31a6afa0208d4d57bde2fc3b56e756bc05370df6d301ce776f1b4f8f34eea57dd4972f68071bd1c4995cb9e9611ee58dba9378b1298e7a93d12e009121bc3dad72b51a815cc30f204c14667b778f1f88c5b208229e29aaf1af074f0954141b0d062ed350abb9", 0xc8}, {&(0x7f0000001600)="19b60e08459f8b5eaf0e68deeb4ca5404dae044ce2757bf26122b12430cd4ead95a62c2673c218cc248593d1999dfd79192794ac0dfd6f78343109d536b1181cae0e14f1b585f26c59bb79055e8a3bf391f65658c61acdde3ddb80c711fa6434af6c126a956b1d75cf4a4407dff6a9eb266caf92f869f3f1c8aa61d75f10cb48f2f1d0e78d382caba513e5e6d9a602e7d642261ffdf6d6408d7d73e128ffdffd94af6e21", 0xa4}, {&(0x7f00000016c0)="d153bf38bf599adb4fb1e68d32d93d0af0795bb67b61cddbb922ec8b06815fc48d3b4c1f96140a4dc9608ac8bbe738e539e873ac67f44ebcd23f231e0404fd81624ecc71f1b8586771fc9020d6e4260d6df26c9370287bf39b41d99c96cad06b39170ed8dfaf7ac89fbbd3aca41e74e82a4214e1c94edc2d34801765cae0aeb6f445e77e97e41380522f1ac47db6cf6d348e14b400c4ba8480be152eb35a147ad672191955753f30cb672f8de3c31960a2e527a44728001d280627a32a", 0xbd}, {&(0x7f0000001780)="3a64ef59dd71b98bd55327377bad6037c2bdc11b87369df99a2f85d99bb275e6fddb67bed285d0196d8a4cee99b7096f8cb22e216fc4cbd24df568ebe71ed9e2d355fc6476838365ee63859e5ebf46c2cc06a38f4e208cb21392e0de273315ba14898123567b10ed41f3a07cb76fc7711a7a15210733be1285d01bd0dbb4a2b69324414649cc4eb8575f43a10054732e2812eeecff3f0f15496e37e6072ca12b457ae83f943ea0eb0eead00e8a3c", 0xae}], 0x6, &(0x7f00000018c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6d74}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}}], 0x3, 0x4004081) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, 0x1409, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000800) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) write$nci(r12, &(0x7f0000001b40)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0xa, {0x0, 0x9b, 0x0, 0x6e, 0x6, 0x9}}, 0xc) r13 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r13, &(0x7f0000002f40)={&(0x7f0000001b80)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c00)=""/231, 0xe7}, {&(0x7f0000001d00)=""/69, 0x45}, {&(0x7f0000001d80)=""/94, 0x5e}, {&(0x7f0000001e00)=""/252, 0xfc}], 0x4, &(0x7f0000001f40)=""/4096, 0x1000}, 0x40002003) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r14, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x50, r15, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x5e35c48040f07b09}, 0x20008001) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000003100), &(0x7f0000003140)=0x4) 18.040529713s ago: executing program 0 (id=869): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x4000000, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4000000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 17.807440189s ago: executing program 3 (id=870): socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0xfffffffffffffc2c}, 0x400c0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@setneightbl={0x0, 0x43, 0x200, 0x70bd2b, 0x25dfdbfe, {0x2}, [@NDTA_THRESH2={0x0, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="410028bd3000fbdbdf2503000097"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)) 17.66718154s ago: executing program 0 (id=872): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x8, 0x6, @local}, 0x14) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200)={r2, r3+10000000}, 0x0, 0x39) 17.463535639s ago: executing program 2 (id=874): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="00001700", @ANYRES16=0x0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500220000000000"], 0x64}}, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x37) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24000090}, 0x2404e8c8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x20000001) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x4, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000380)=0x4) close(r0) 17.241582333s ago: executing program 2 (id=876): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000540)=0x1000000, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x400}, {@in6=@private1, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x198}}, 0x0) 17.131933238s ago: executing program 2 (id=877): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) splice(r2, 0x0, r0, 0x0, 0x7ffff040, 0x1200000000000000) 16.95416159s ago: executing program 2 (id=878): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x801, 0xfffffffc) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x1236]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x800}]}]}]}}]}, 0x9c}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x10, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xf8, 0x8, 0x7b, 0x2, 0x6, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x1, 0xe, 0xfffffffe, 0x2, 0x0, 0xf, 0x6}}, {0x10, 0x2, [0x5, 0x7, 0x7f, 0x52, 0x7911, 0x8]}}]}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x61}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9a}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xfa}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) socket$netlink(0x10, 0x3, 0xb) socket$inet6(0x10, 0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 16.812353723s ago: executing program 2 (id=879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000061107c0000feff00950000000000001d0c00a97a239657c8b78ce74fbbe015ebe5a89247a0ef1b56f5e3acb93793fc82e9fb3e273f458fc0a19b9822202c73264f6ce2db719ae59f00f175aeb8ee7ad7f0275f255cdcdae834fe9c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000162700eb000000d474000a0808000000", @ANYRES32=r6, @ANYBLOB="0b000080976b64087c603000"], 0x24}], 0x1}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.671767668s ago: executing program 0 (id=880): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000022c0)={r3}, &(0x7f0000000140)=0x8) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5218) write$tcp_congestion(r0, 0x0, 0x0) 16.384835331s ago: executing program 4 (id=882): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="22b76f75c419087ca562d3a94fe89900", 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r3, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000200)=""/147, 0x93}}, 0x10) 16.305633019s ago: executing program 4 (id=883): syz_emit_ethernet(0x88, &(0x7f0000000640)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x4a, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [0x25, 0x1, 0xe]}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x3}}}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x258, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7997}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x78, 0x3, "1b81d78535b5ef4dc9331e46eae02d40bdf334bbc047ad02d28014f3bca9fe315b24838a2f5df1e7140685c1578c23e520d4fa566894d3c158543613f8b57681dbb5f9b150da4a2931c4b27b2d65ab47cc78aa7858e6e17224edb565a32323cdcce61b41a4ab4fce68a2afa975f42720d4471ab6"}, @TIPC_NLA_NODE_ID={0x80, 0x3, "b528cba3e72d157c34ff401eb30f7f27cff5416bd5658b9b64f2e79b628ced04afb05ce1b3ffcee0c4c9b93e5544ebc73a4c2efd67e824bef1a27b3a6c870bb902bd6d415323962fb6a2e10486959eccc4d7c25696179c26463a455bb58061bdb5cde5fb699558dadfe1e677841b82cb390d5f70de3dd7ac372eec68"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a63041f3157622ddcba5b36c4925323c4bb5820916afb32d0cac0e055bf6a3777e263c"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "908b69cf04430779531fa08ad61750fb2a6f00f255d4c69704f313635301f53588e1ad58"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x24044008}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="73feffff1c00000300"/20, @ANYRES32=0x0, @ANYBLOB="000000000a000101000000aaaaaa003cb3dc3c9855a4ddca0d0000000000d1fe0100399e7786112f0000093b278bfcf4f8"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 16.216908321s ago: executing program 4 (id=884): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@remote, @rose, @netrom, @default, @remote, @bcast, @remote, @null]}, &(0x7f0000000080)=0x48, 0x80000) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000240)=0x5, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x90) 16.143676549s ago: executing program 4 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000080001006401010214001680100008800c000680080001"], 0x38}}, 0x20000054) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xa3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x100000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6e, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100), 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x8000001, @mcast2, 0x4}}, 0x0, 0x0, 0xf, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$inet6(r3, &(0x7f0000000740)={&(0x7f00000001c0)={0xa, 0x4e22, 0x46a8f31e, @remote, 0x3}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000200)="d5aaf4a01196a5e44b21fa8295fff2559f591c1f424d317e570b293f637f7d9c4c124f9093b15e82159096aa4bb3450fba8f4e5c22697bd3295040d36199591a8d71d25f670ab4076a8142cfcd76e18ad393a7c93eb8d983263b3f", 0x5b}, {&(0x7f0000000280)="9c58b7dd4544a8221c824030887e693a14d87a9a247b8388b01bcbae7dcc7054181584cb329f1edd81737f5a2e7682a8cc7f978c51a15bf5a7ea04d5af9eaa99a8bca4092d54facb1ebf8c0eb882da0806420a6f2ae62cba5ce82c1ccfc20ecb13ba3295035c39", 0x67}, {&(0x7f0000000600)="8db058d509163dd06d248cdf4125c9c8b9f2d560cfdbb4a85cd30d7c597d2533ca3e972bba60cd01a0a5407b822199c6047f69355cf2716f220795e7d6819c6f4efb99eae1b3a7e1d9f532bad061786d309560f9ba0995ec95ac912836bded84becf7dd9f913059c36ac150786a17cf602a92f76c05a82803b3e785028b5cb1fec9e5c6293286b37ea447dd55f5e0b23863ed065ce50dad2351bad2509403a0a570515dfb87e5f6f334c7d11c7302455d006e58b99f41edc858e9adbb2e0220ebc94065d856c004a97fff222", 0xcc}], 0x3, &(0x7f00000007c0)=[@rthdrdstopts={{0x68, 0x29, 0x37, {0x3b, 0x9, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x2, 0x5, [0x2, 0x1693, 0x0, 0x5, 0x8, 0x4, 0xb, 0x5]}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x16, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x50, 0x29, 0x37, {0x6c, 0x6, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @empty}]}}}, @dstopts={{0xc0, 0x29, 0x37, {0x21, 0x14, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @pad1, @calipso={0x7, 0x48, {0x1, 0x10, 0x7, 0x0, [0x8, 0x1fc, 0xffffffff80000001, 0x3, 0xffffffff, 0x100000001, 0x49, 0x5]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x1, 0x43, [0x7fff, 0x2, 0x3f, 0x8, 0x1b, 0x4]}}, @jumbo={0xc2, 0x4, 0xc}, @enc_lim={0x4, 0x1, 0xd1}]}}}], 0x198}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 16.131875813s ago: executing program 4 (id=886): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)=@caif=@util={0x25, "52365f3aaf6b89c77acaa96dfc2b4476"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="48000000000000001701000009000000ac6e0ebae2aa13ce4523972ad73af79ac54cca9040d2841d6dba9abb0be28d932793106c7b61f640bb05ecb4b6b41bc1396b000000000000c00000000000000006000000fb04000032e2ed98a5fe6653393f88d340e50690356ec92fbf7446f40d86cdfb43d582dde934d8782c0a0f6743c190dcd3f7a9a59d61ad2a24d4434ca1de783b534721da990f4242067bc0d4708e03e4e48abd0d92e0df923ebd6498eed342420763f4583e33b0e3ac9b929058625888d797e9ca0bbe81a6d594465a04596d36f5fae2f9f6f889966c54ba9bf4a1a1c7ce0dbaf1752f0935a2cc3f913c3ed5c63c30659e7b5983fe8f91cff39e4dd2a8351d577750000000000000000e010000080000006b851302a415e444ac8b53d2a91c175dcf390c8ea6b6b8c1f680835d326d5fac57ab12bb389ec80f9a6009bb7c4e705b6bc0c213f6aaaa6a59a037d200000000c800000000000000010000000b000000b109579ff0033ff0f4312a2d2b9d3b5c388133d76ed3a0d238b81fd8856aca0a92da72d1b696400e555c171717e5501be8918365e513ecd38e780b3d16951538812dd061c1e0b39c93f4467d92f8cc4aa6bfaf79cf4d8672552aa997f8bc9ea2e440a082d14db6073e837ea60bc9e231affd5fd974c096473e13cb9b55ad43ca37f01e05d68e1f051b4e34c87ff6aa32af11ceab8d12f6e756ea0db1ed28583f6712779040ff8317be09b0464c42752af60000000000000030000000000000000600000003000000a9a027bec25526a724f6822d941ceb6f3d694226d51c73bf2eb5cc0000000000b80000000000000007010000050000005f762fb84b0cd705fe968f718b4c030cdd8ee16523ac6de5f8af4eadd22ca02ac54114afbc7e1fc4b4eb2c85922d6c1d730b5ba2760221c78d5e1e3c5e5e49a96af364ddeb3d19c369629059cf1f3017d4231a4556d403faa81067f9a5aa0de42b540de45b26cff2bf432ebf58d7cf81116fbbd1ab544b538ee60c1f2ec4dabae24cbd15cc098d0e459510b0272d2b67d2a3b5e776ded3840282590083f4fdbaa9dc076e40b88127"], 0x308}}], 0x1, 0x40001) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x6020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x4, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x24000804) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r4, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040810}, 0x4002) 16.06278773s ago: executing program 4 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e73657400002800028008000940000000a7080004400000000008000340000000000900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r8, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10001, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)="f9dad9a872947bdc2951b87a6f38cee77dc37783310401bc015ae42566dc813c3cd9bc48afd9df4ff112204a9b8086133e103a0e2b4e8a0cfce24723a639697a5b3f424852c93fec73301767f4ba2899d97a85d9ec11f4e46ff5f03e793c61ba795aac19480e8181fbe1ab80efb6d6b183cf1118a58bcb8a3bea97136aa7a9ad0638ca41884122c2d21611b6dd489bff0868c2b3d443f6ae9bcb76b77cb86bceb99660d1c9f63c12a9eca2302f771fd8", 0xb0}], 0x1) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r9, 0x541b, &(0x7f0000000840)) sendmsg$tipc(r6, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) 2.153698723s ago: executing program 32 (id=868): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:system_map_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x44080}, 0x4081) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000500)={{r7}, 0x5, &(0x7f00000004c0)=[0x4, 0x3e2d, 0x2c, 0x8, 0x7f], 0x7fffffff, 0x0, 0x1}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r3) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:syslog_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}}, 0x8010) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$sock(r11, &(0x7f0000001940)=[{{&(0x7f0000000a80)=@x25, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b00)="d644f42e350a59225399421b49ec323b053d74a9f304f25d863d8a555520f2cf93d3b994a14aed25ace2af2afe8fce7e66f9687dc4595f2356497532ba5be674ca6068cebe8ef837243ed302ec098b", 0x4f}, {&(0x7f0000000b80)="7d4fd0d3d27d1e2dc8ca531785d31f2b28e8511a10bdb341b40f7dfb41d0389d7d3caeb71ee279b48dea592cc003c4c7aa57bc33497fc26406d1bf80569abb4975402a275f21cd4c3f666ac1de0efd54e1099c97d40cfdf750c3acf2becd1e688fa8", 0x62}, {&(0x7f0000000c00)="75e544dfa4df8e0ac7c538aedeb2a5639cd8a50bfa773c2f57e4c3f559608a6cb3248c143a1ec70ef515617b6278b339e48f94b78e2765607ef0400861fcd6847f26b1438638a8bececd7dd22a6692d316b4ca871d522302fe383b16712f8068a716e2185a6c1d046feaa3d1135ae227cc53fcf7f157cd9ece4bad5c946ee82f372f2944a3e621882f0a3f93c9400dc73301c9753608a7ef310e50832a84276a40b5f632bda309c5ad402179fa21a913fefd02ffe7ca35f74e6e79249d0ffe9e808dc879c0aafecba435c05878", 0xcd}, {&(0x7f0000000d00)="d224b20b99b94183bd07d222275673fc0a885f0dc389a2313209e115bb02b4965f9165819a76f95bba43bfd69dd44828", 0x30}, {&(0x7f0000000d40)="d89112c5c5fafbaf214fea6bf33747f97e0b84e980195587347deb23d1f5e23445a7c4f2eb63ad4a10a33b12d468021dc26d12381c027d71888917b6b5a69e17ab1aec35941739743c2dfe9a485458980fdb0ab45aba23aeb4d3804db7cf66647624dc4b29", 0x65}, {&(0x7f0000000dc0)="3414cc789418a613127c51876a87c87f3a9d0cdc07ba6b843126540bf490c5fe6894937f080feae2ae978ad10c942a0f468abb71f8c1d287ff6e8c13f7c676027fb834dd49bddaf8127ca9d545caeab5ca6dfe1407993b87575408bd048b21270dc5e8fd244a633cf3774f797d329e9d3d1dd26df3861c9ae5c5f59fb54e1e6fa0e0b54faa", 0x85}, {&(0x7f0000000e80)="61facd1483ba948631e58ed531b58d5930d5b1fccc7ae56ca828b7e405db7ebb75558c5395fe9778ebcf06094d6decd5e4d73844ed44e000def1b034a2945ae90505281b8ca7ad228a3bcb9b33a2b542842d2ff1461a565f7b2520eb", 0x5c}], 0x7, &(0x7f0000000f80)=[@timestamping={{0x14, 0x1, 0x25, 0x48}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001000)="e4ea9074715fee610ca30ef5d4de959f382bb8a5bb4d3044607c80e843e1b25145c1974f2212598cb48ae4d0ce60656a17fe2ec12d69e63f48a0da12fc3aac1d8e88ac8c5aa552918f1230018c74ae399d845f9ff2527e99ae442f6dbcc9245026e05b963379af21a68b4f387ebc7cae17345373a8dfd998", 0x78}, {&(0x7f0000001080)="7132667e2a9aa0f45091d0ed6de5d1c39ea19a240820905f187b19040393c1c4db0e80538fa1d32eb78c41fa0aa94b3bf3090ab826556593a3f87b205458f8cbbfeff1f8a036dc721ff86f9d18bc01f41703273564ad3e2bf368ad8fa8594d9689c2dd8cf062fbc50837dcfb278aab8ada2dfc4f6e4829c9187680ed1dd2a5fe61a1180719470358", 0x88}, {&(0x7f0000001140)="c0d9e92ed1a7284f778b4ad9ccc4ba1924e04d705058057819a774a12ed667295f696162faf271cdf86907ec5faffa3cff8e20ccc4590dfb5f00b26b56c6d109749b9a", 0x43}, {&(0x7f00000011c0)="c7cfbafad45eef10027f829dbbc1f1b535a14026cdb62a72b26fa40504350daea859d50158e04bdfc85acebb1636504da1124ffbb6271e36223f6aaba56cd297b7bd22f0225c737c50005d0165ab47c61d5acf0251dd6a572af7c3da495dac7aa67b7f67973b0fb60fe049b80f346c6301cff2b54ba0c8cf976fca99d28b9669fd0cc46594bdf80d", 0x88}], 0x4, &(0x7f00000012c0)=[@mark={{0x14, 0x1, 0x24, 0x5ad0000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8d9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xc0}}, {{&(0x7f0000001380)=@in6={0xa, 0x4e23, 0x1000, @private2, 0x2}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)="72e24144b4db1756705b955851b07bb95a6d97eee42dba8a4e8a5248a991", 0x1e}, {&(0x7f0000001440)="75bb4f2b10e0048e03c0728a17b9f695152f489ee465d3606ff0e08f40c9b6c594cb407952865be6c0e2b30481851d518f5bab1bc2ef2f6df221e68245fb071fae067c67fae5e84ca0097fb24b807ecfd164dab079cee8cd22a292ed1396acd43acc936c86b17d5daaa891711f78cb6843cacca547f2d1422fbe02f0435e6ceb1f7d7d09ea9e1471ae7108a241", 0x8d}, {&(0x7f0000001500)="d07b365f06880d8addf22b4a0e92a8c0fedcecfd156fe703a15a660e65f0eff09e0e380e3550d01560331737432ff79a013b7d099807c8a000af20653a7e902c68451155ecd9d4e89daa073706bb4512f9bb7eaeeb59d39c6459699b8c047ee1506f31a6afa0208d4d57bde2fc3b56e756bc05370df6d301ce776f1b4f8f34eea57dd4972f68071bd1c4995cb9e9611ee58dba9378b1298e7a93d12e009121bc3dad72b51a815cc30f204c14667b778f1f88c5b208229e29aaf1af074f0954141b0d062ed350abb9", 0xc8}, {&(0x7f0000001600)="19b60e08459f8b5eaf0e68deeb4ca5404dae044ce2757bf26122b12430cd4ead95a62c2673c218cc248593d1999dfd79192794ac0dfd6f78343109d536b1181cae0e14f1b585f26c59bb79055e8a3bf391f65658c61acdde3ddb80c711fa6434af6c126a956b1d75cf4a4407dff6a9eb266caf92f869f3f1c8aa61d75f10cb48f2f1d0e78d382caba513e5e6d9a602e7d642261ffdf6d6408d7d73e128ffdffd94af6e21", 0xa4}, {&(0x7f00000016c0)="d153bf38bf599adb4fb1e68d32d93d0af0795bb67b61cddbb922ec8b06815fc48d3b4c1f96140a4dc9608ac8bbe738e539e873ac67f44ebcd23f231e0404fd81624ecc71f1b8586771fc9020d6e4260d6df26c9370287bf39b41d99c96cad06b39170ed8dfaf7ac89fbbd3aca41e74e82a4214e1c94edc2d34801765cae0aeb6f445e77e97e41380522f1ac47db6cf6d348e14b400c4ba8480be152eb35a147ad672191955753f30cb672f8de3c31960a2e527a44728001d280627a32a", 0xbd}, {&(0x7f0000001780)="3a64ef59dd71b98bd55327377bad6037c2bdc11b87369df99a2f85d99bb275e6fddb67bed285d0196d8a4cee99b7096f8cb22e216fc4cbd24df568ebe71ed9e2d355fc6476838365ee63859e5ebf46c2cc06a38f4e208cb21392e0de273315ba14898123567b10ed41f3a07cb76fc7711a7a15210733be1285d01bd0dbb4a2b69324414649cc4eb8575f43a10054732e2812eeecff3f0f15496e37e6072ca12b457ae83f943ea0eb0eead00e8a3c", 0xae}], 0x6, &(0x7f00000018c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6d74}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}}], 0x3, 0x4004081) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, 0x1409, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000800) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) write$nci(r12, &(0x7f0000001b40)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0xa, {0x0, 0x9b, 0x0, 0x6e, 0x6, 0x9}}, 0xc) r13 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r13, &(0x7f0000002f40)={&(0x7f0000001b80)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c00)=""/231, 0xe7}, {&(0x7f0000001d00)=""/69, 0x45}, {&(0x7f0000001d80)=""/94, 0x5e}, {&(0x7f0000001e00)=""/252, 0xfc}], 0x4, &(0x7f0000001f40)=""/4096, 0x1000}, 0x40002003) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r14, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x50, r15, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x5e35c48040f07b09}, 0x20008001) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000003100), &(0x7f0000003140)=0x4) 2.107222072s ago: executing program 33 (id=870): socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0xfffffffffffffc2c}, 0x400c0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@setneightbl={0x0, 0x43, 0x200, 0x70bd2b, 0x25dfdbfe, {0x2}, [@NDTA_THRESH2={0x0, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="410028bd3000fbdbdf2503000097"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)) 1.08492666s ago: executing program 34 (id=880): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000022c0)={r3}, &(0x7f0000000140)=0x8) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5218) write$tcp_congestion(r0, 0x0, 0x0) 1.041640475s ago: executing program 35 (id=879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000061107c0000feff00950000000000001d0c00a97a239657c8b78ce74fbbe015ebe5a89247a0ef1b56f5e3acb93793fc82e9fb3e273f458fc0a19b9822202c73264f6ce2db719ae59f00f175aeb8ee7ad7f0275f255cdcdae834fe9c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000162700eb000000d474000a0808000000", @ANYRES32=r6, @ANYBLOB="0b000080976b64087c603000"], 0x24}], 0x1}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 36 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e73657400002800028008000940000000a7080004400000000008000340000000000900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r8, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10001, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)="f9dad9a872947bdc2951b87a6f38cee77dc37783310401bc015ae42566dc813c3cd9bc48afd9df4ff112204a9b8086133e103a0e2b4e8a0cfce24723a639697a5b3f424852c93fec73301767f4ba2899d97a85d9ec11f4e46ff5f03e793c61ba795aac19480e8181fbe1ab80efb6d6b183cf1118a58bcb8a3bea97136aa7a9ad0638ca41884122c2d21611b6dd489bff0868c2b3d443f6ae9bcb76b77cb86bceb99660d1c9f63c12a9eca2302f771fd8", 0xb0}], 0x1) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r9, 0x541b, &(0x7f0000000840)) sendmsg$tipc(r6, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 85.574724][ T5849] cgroup: Unknown subsys name 'net' [ 85.768127][ T5849] cgroup: Unknown subsys name 'cpuset' [ 85.777518][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.601620][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.323747][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.323751][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.339356][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.353955][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.362297][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.373566][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.374866][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.389446][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.396995][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.405551][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.413486][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.422028][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.430985][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.440217][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.468825][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.477393][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.485478][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.493920][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.505261][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.512938][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.514373][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.528461][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.542443][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.551918][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.560940][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.038831][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 91.355593][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 91.441506][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.449060][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.457363][ T5875] bridge_slave_0: entered allmulticast mode [ 91.465703][ T5875] bridge_slave_0: entered promiscuous mode [ 91.475880][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.483497][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.490845][ T5875] bridge_slave_1: entered allmulticast mode [ 91.499843][ T5875] bridge_slave_1: entered promiscuous mode [ 91.507836][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 91.592440][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 91.639902][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.675411][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.782058][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 91.817121][ T5875] team0: Port device team_slave_0 added [ 91.855602][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.863234][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.870657][ T5871] bridge_slave_0: entered allmulticast mode [ 91.879428][ T5871] bridge_slave_0: entered promiscuous mode [ 91.888784][ T5875] team0: Port device team_slave_1 added [ 91.957647][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.965598][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.972846][ T5871] bridge_slave_1: entered allmulticast mode [ 91.980959][ T5871] bridge_slave_1: entered promiscuous mode [ 92.062623][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.069688][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.097034][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.118180][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.129392][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.138448][ T5868] bridge_slave_0: entered allmulticast mode [ 92.150099][ T5868] bridge_slave_0: entered promiscuous mode [ 92.160631][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.171901][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.180908][ T5868] bridge_slave_1: entered allmulticast mode [ 92.194123][ T5868] bridge_slave_1: entered promiscuous mode [ 92.202323][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.214591][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.222123][ T5860] bridge_slave_0: entered allmulticast mode [ 92.235606][ T5860] bridge_slave_0: entered promiscuous mode [ 92.249234][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.257385][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.268731][ T5860] bridge_slave_1: entered allmulticast mode [ 92.277857][ T5860] bridge_slave_1: entered promiscuous mode [ 92.313853][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.321085][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.348978][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.430106][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.511487][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.521733][ T5872] Bluetooth: hci1: command tx timeout [ 92.531578][ T5864] Bluetooth: hci0: command tx timeout [ 92.537664][ T5865] Bluetooth: hci2: command tx timeout [ 92.572897][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.586120][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.595372][ T5865] Bluetooth: hci4: command tx timeout [ 92.603268][ T5865] Bluetooth: hci3: command tx timeout [ 92.651689][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.682179][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.727449][ T5875] hsr_slave_0: entered promiscuous mode [ 92.735391][ T5875] hsr_slave_1: entered promiscuous mode [ 92.742990][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.750390][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.758298][ T5859] bridge_slave_0: entered allmulticast mode [ 92.766244][ T5859] bridge_slave_0: entered promiscuous mode [ 92.805765][ T5871] team0: Port device team_slave_0 added [ 92.814387][ T5860] team0: Port device team_slave_0 added [ 92.838466][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.846612][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.855164][ T5859] bridge_slave_1: entered allmulticast mode [ 92.862671][ T5859] bridge_slave_1: entered promiscuous mode [ 92.872460][ T5868] team0: Port device team_slave_0 added [ 92.881025][ T5871] team0: Port device team_slave_1 added [ 92.889505][ T5860] team0: Port device team_slave_1 added [ 92.918428][ T5868] team0: Port device team_slave_1 added [ 93.049559][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.064165][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.074692][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.081762][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.108815][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.122872][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.130027][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.157703][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.170349][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.178037][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.205654][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.250843][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.257922][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.284144][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.296139][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.304163][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.330855][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.350813][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.358107][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.384561][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.423837][ T5859] team0: Port device team_slave_0 added [ 93.433628][ T5859] team0: Port device team_slave_1 added [ 93.624190][ T5860] hsr_slave_0: entered promiscuous mode [ 93.631113][ T5860] hsr_slave_1: entered promiscuous mode [ 93.639147][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 93.657078][ T5860] Cannot create hsr debugfs directory [ 93.684768][ T5871] hsr_slave_0: entered promiscuous mode [ 93.692026][ T5871] hsr_slave_1: entered promiscuous mode [ 93.709886][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 93.720088][ T5871] Cannot create hsr debugfs directory [ 93.730597][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.739035][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.767796][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.785433][ T5868] hsr_slave_0: entered promiscuous mode [ 93.792006][ T5868] hsr_slave_1: entered promiscuous mode [ 93.798626][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 93.804799][ T5868] Cannot create hsr debugfs directory [ 93.849141][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.856820][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.883487][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.107053][ T5859] hsr_slave_0: entered promiscuous mode [ 94.116123][ T5859] hsr_slave_1: entered promiscuous mode [ 94.122549][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 94.128588][ T5859] Cannot create hsr debugfs directory [ 94.370546][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.422290][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.471817][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.507399][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.593753][ T5872] Bluetooth: hci1: command tx timeout [ 94.599319][ T5872] Bluetooth: hci0: command tx timeout [ 94.606234][ T5865] Bluetooth: hci2: command tx timeout [ 94.651997][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.666077][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.676192][ T5865] Bluetooth: hci3: command tx timeout [ 94.676202][ T5872] Bluetooth: hci4: command tx timeout [ 94.690517][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.704076][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.824673][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.840943][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.865563][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.877850][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.989355][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.019981][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.032746][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.049596][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.171069][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.257544][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.271806][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.305884][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.322316][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.336766][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.364548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.372048][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.408313][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.416183][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.446721][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.514750][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.545229][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.572372][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.599127][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.606502][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.658202][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.666018][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.679333][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.687565][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.723169][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.730763][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.769260][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.890291][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.978594][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.985966][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.030673][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.038509][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.069360][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.129934][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.179131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.187052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.222294][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.262482][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.270789][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.591861][ T5875] veth0_vlan: entered promiscuous mode [ 96.651818][ T5875] veth1_vlan: entered promiscuous mode [ 96.677900][ T5865] Bluetooth: hci2: command tx timeout [ 96.678163][ T5864] Bluetooth: hci1: command tx timeout [ 96.691309][ T5872] Bluetooth: hci0: command tx timeout [ 96.754638][ T5872] Bluetooth: hci4: command tx timeout [ 96.760200][ T5872] Bluetooth: hci3: command tx timeout [ 96.803625][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.845250][ T5875] veth0_macvtap: entered promiscuous mode [ 96.886708][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.938705][ T5875] veth1_macvtap: entered promiscuous mode [ 97.038604][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.060000][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.077452][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.136166][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.151259][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.166223][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.198005][ T5871] veth0_vlan: entered promiscuous mode [ 97.212147][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.227607][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.238317][ T3092] cfg80211: failed to load regulatory.db [ 97.318225][ T5871] veth1_vlan: entered promiscuous mode [ 97.468184][ T5871] veth0_macvtap: entered promiscuous mode [ 97.515690][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.526983][ T5860] veth0_vlan: entered promiscuous mode [ 97.541547][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.578060][ T5871] veth1_macvtap: entered promiscuous mode [ 97.589943][ T5859] veth0_vlan: entered promiscuous mode [ 97.617373][ T5860] veth1_vlan: entered promiscuous mode [ 97.647506][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.649299][ T5859] veth1_vlan: entered promiscuous mode [ 97.665855][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.681663][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.720087][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.772672][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.775638][ T5868] veth0_vlan: entered promiscuous mode [ 97.808624][ T5860] veth0_macvtap: entered promiscuous mode [ 97.848665][ T3497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.869286][ T3497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.899071][ T5868] veth1_vlan: entered promiscuous mode [ 97.909042][ T5860] veth1_macvtap: entered promiscuous mode [ 97.926254][ T3497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.940671][ T3497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.970331][ T5981] netlink: 'syz.3.4': attribute type 33 has an invalid length. [ 97.982340][ T5981] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 98.012375][ T5859] veth0_macvtap: entered promiscuous mode [ 98.041533][ T5859] veth1_macvtap: entered promiscuous mode [ 98.075331][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.126378][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.162079][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.175748][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.226415][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.258366][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.286691][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.317129][ T5868] veth0_macvtap: entered promiscuous mode [ 98.330626][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.350134][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.387653][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.400359][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.411623][ T5868] veth1_macvtap: entered promiscuous mode [ 98.430404][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.448838][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.468377][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.478683][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.489846][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.590958][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.642029][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.752990][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.753841][ T5864] Bluetooth: hci1: command tx timeout [ 98.767481][ T5872] Bluetooth: hci0: command tx timeout [ 98.771013][ T5865] Bluetooth: hci2: command tx timeout [ 98.779840][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.801957][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.801963][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.834326][ T5865] Bluetooth: hci3: command tx timeout [ 98.834335][ T5864] Bluetooth: hci4: command tx timeout [ 98.849288][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.900316][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.918333][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.939899][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.070846][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.095826][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.245766][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.282393][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.309009][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.343175][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.574173][ T6012] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11'. [ 99.607129][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.646980][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.751657][ T6012] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 99.768694][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.010016][ T6028] Zero length message leads to an empty skb [ 100.105657][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 100.130310][ T6028] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 100.159104][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 100.240490][ T6042] netlink: 'syz.1.17': attribute type 11 has an invalid length. [ 100.249006][ T6042] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17'. [ 100.644698][ T6058] netlink: 'syz.1.20': attribute type 7 has an invalid length. [ 101.562020][ T6087] warning: `syz.1.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.733853][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 101.801887][ T6093] dummy0: entered promiscuous mode [ 101.836787][ T6093] batadv_slave_1: entered promiscuous mode [ 101.861001][ T6098] netlink: 156 bytes leftover after parsing attributes in process `syz.1.30'. [ 101.905799][ T6099] netlink: 156 bytes leftover after parsing attributes in process `syz.1.30'. [ 102.058907][ T6102] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 102.245678][ T6107] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 102.857695][ T6132] block nbd0: Unsupported socket: shutdown callout must be supported. [ 103.129089][ T6154] syz.4.44 uses obsolete (PF_INET,SOCK_PACKET) [ 103.188299][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.196677][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.236061][ T6152] bridge0: entered allmulticast mode [ 103.999767][ T6177] netlink: 'syz.0.53': attribute type 4 has an invalid length. [ 104.073912][ T6181] netlink: 'syz.0.53': attribute type 4 has an invalid length. [ 104.104793][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 104.153496][ T6188] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 104.193513][ T6188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.264981][ T6193] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 104.351188][ T6195] netlink: 'syz.2.58': attribute type 4 has an invalid length. [ 104.368386][ T6195] sctp: [Deprecated]: syz.2.58 (pid 6195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.368386][ T6195] Use struct sctp_sack_info instead [ 104.718400][ T6215] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.768417][ T6215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.65'. [ 104.900977][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 124.062435][ T6228] netlink: 152 bytes leftover after parsing attributes in process `syz.2.68'. [ 124.312388][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 124.446724][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 124.966694][ T6283] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 125.000380][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.030011][ T6287] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 125.040161][ T6283] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 125.081855][ T6287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.83'. [ 125.097369][ T6287] batadv0: entered promiscuous mode [ 125.105254][ T6287] batadv0: entered allmulticast mode [ 125.124153][ T6287] bond0: (slave batadv0): Releasing backup interface [ 125.156987][ T6287] bridge0: port 3(batadv0) entered blocking state [ 125.165728][ T6287] bridge0: port 3(batadv0) entered disabled state [ 125.389053][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 125.400784][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 125.433053][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.87'. [ 125.727154][ T6313] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 125.889848][ T6316] veth0: entered promiscuous mode [ 125.899624][ T6316] veth0: left promiscuous mode [ 126.079349][ T6324] netlink: 'syz.3.96': attribute type 2 has an invalid length. [ 126.088212][ T6324] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 126.128013][ T6324] netlink: 32 bytes leftover after parsing attributes in process `syz.3.96'. [ 126.220380][ T6327] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.98'. [ 126.499263][ T6344] Bluetooth: MGMT ver 1.23 [ 126.514864][ T5865] Bluetooth: hci4: command tx timeout [ 126.720057][ T6348] netlink: 'syz.1.103': attribute type 6 has an invalid length. [ 126.773691][ T6354] syzkaller1: entered promiscuous mode [ 126.779613][ T6354] syzkaller1: entered allmulticast mode [ 126.815096][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'. [ 127.126324][ T6371] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.412228][ T6387] nbd: must specify at least one socket [ 127.426830][ T6387] nbd: must specify at least one socket [ 127.434362][ T6387] nbd: must specify at least one socket [ 127.440347][ T6387] nbd: must specify at least one socket [ 127.446727][ T6387] nbd: must specify at least one socket [ 127.452695][ T6387] nbd: must specify at least one socket [ 127.461832][ T6387] nbd: must specify at least one socket [ 127.711774][ T6392] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 127.759054][ T59] tipc: Subscription rejected, illegal request [ 128.624254][ T6423] syzkaller1: entered promiscuous mode [ 128.630552][ T6423] syzkaller1: entered allmulticast mode [ 128.642704][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.127'. [ 128.647945][ T6423] syzkaller1: left promiscuous mode [ 128.659982][ T6423] syzkaller1: left allmulticast mode [ 129.805362][ T6477] sctp: [Deprecated]: syz.0.143 (pid 6477) Use of int in maxseg socket option. [ 129.805362][ T6477] Use struct sctp_assoc_value instead [ 129.851192][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 129.911188][ T6471] team0: Port device team_slave_0 removed [ 130.410064][ T6501] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 130.441328][ T6501] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 130.489576][ T6504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.151'. [ 130.665811][ T6508] vlan0: entered promiscuous mode [ 130.672002][ T6508] vlan0: entered allmulticast mode [ 130.689567][ T6508] veth0_vlan: entered allmulticast mode [ 130.831579][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 130.982722][ T6520] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 131.021940][ T6524] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 131.031693][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.158'. [ 131.087353][ T6524] team0: Port device geneve0 added [ 131.521883][ T6009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.550023][ T6009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.941517][ T6559] netlink: 'syz.2.168': attribute type 2 has an invalid length. [ 131.971741][ T6559] netlink: 84 bytes leftover after parsing attributes in process `syz.2.168'. [ 138.197309][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.204414][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 151.064363][ T6566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.169'. [ 151.074880][ T6568] netlink: 'syz.3.172': attribute type 23 has an invalid length. [ 151.359055][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.177'. [ 151.425298][ T6586] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 151.532498][ T6594] netlink: 96 bytes leftover after parsing attributes in process `syz.1.179'. [ 151.600110][ T6594] netlink: 68 bytes leftover after parsing attributes in process `syz.1.179'. [ 151.650585][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 151.688160][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.179'. [ 151.755422][ T6604] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 151.775953][ T6603] tipc: Started in network mode [ 151.780886][ T6603] tipc: Node identity 16fda6146cdb, cluster identity 4711 [ 151.820706][ T6603] tipc: Enabled bearer , priority 0 [ 151.935760][ T6616] netlink: 'syz.4.185': attribute type 4 has an invalid length. [ 151.958011][ T6612] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 151.973712][ T6603] syzkaller0: MTU too low for tipc bearer [ 151.979674][ T6603] tipc: Disabling bearer [ 152.012145][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 152.021314][ T6617] bond1: (slave gretap1): making interface the new active one [ 152.028707][ T6617] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 152.070224][ T6623] netlink: 44 bytes leftover after parsing attributes in process `syz.2.188'. [ 152.081287][ T6624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.188'. [ 152.364339][ T6631] netlink: 84 bytes leftover after parsing attributes in process `syz.0.191'. [ 152.566671][ T6634] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 152.646135][ T6634] bond1: entered promiscuous mode [ 152.651340][ T6634] bond1: entered allmulticast mode [ 152.660466][ T6634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.975611][ T6703] bridge1: entered promiscuous mode [ 153.980972][ T6703] bridge1: entered allmulticast mode [ 154.240106][ T6714] tipc: Enabled bearer , priority 0 [ 154.282047][ T6714] syzkaller0: entered promiscuous mode [ 154.303835][ T6714] syzkaller0: entered allmulticast mode [ 154.451939][ T6711] tipc: Resetting bearer [ 154.490276][ T6711] tipc: Disabling bearer [ 154.520694][ T6727] netlink: 'syz.4.221': attribute type 29 has an invalid length. [ 154.582448][ T6724] netlink: 'syz.1.219': attribute type 16 has an invalid length. [ 154.605256][ T6724] netlink: 'syz.1.219': attribute type 17 has an invalid length. [ 154.632738][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.645045][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.791407][ T6724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.138678][ T6745] netlink: 'syz.1.223': attribute type 16 has an invalid length. [ 174.160635][ T6745] netlink: 'syz.1.223': attribute type 3 has an invalid length. [ 174.179852][ T6745] __nla_validate_parse: 2 callbacks suppressed [ 174.179871][ T6745] netlink: 132 bytes leftover after parsing attributes in process `syz.1.223'. [ 174.379446][ T6754] netlink: 'syz.2.228': attribute type 15 has an invalid length. [ 174.665240][ T6768] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 174.857665][ T6776] openvswitch: netlink: Key type 29 is not supported [ 174.900475][ T6781] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 174.952605][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 175.159080][ T6790] team0: Device vti0 is of different type [ 175.317830][ T6797] tipc: Started in network mode [ 175.329410][ T6797] tipc: Node identity ea6dbc676879, cluster identity 4711 [ 175.376118][ T6797] tipc: Enabled bearer , priority 0 [ 175.506279][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 175.566720][ T6797] tipc: Disabling bearer [ 176.072424][ T6834] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.255'. [ 176.082431][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 176.112229][ T6835] bridge_slave_1: left allmulticast mode [ 176.136663][ T6835] bridge_slave_1: left promiscuous mode [ 176.142532][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.213847][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 176.277898][ T6835] bridge_slave_0: left allmulticast mode [ 176.295598][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 176.304699][ T6835] bridge_slave_0: left promiscuous mode [ 176.315146][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.366302][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 176.392235][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 176.477050][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 176.495855][ T6855] netlink: 'syz.3.261': attribute type 11 has an invalid length. [ 176.555622][ T6854] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 176.826025][ T6864] netlink: 'syz.1.264': attribute type 18 has an invalid length. [ 176.944011][ T148] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.954132][ T6864] netlink: 'syz.1.264': attribute type 18 has an invalid length. [ 176.986977][ T6009] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.015658][ T6009] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.090728][ T6009] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.267409][ T6886] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 178.303840][ T6937] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 178.327095][ T6939] netlink: 'syz.2.287': attribute type 13 has an invalid length. [ 179.215902][ T6981] netlink: 'syz.1.298': attribute type 21 has an invalid length. [ 179.233610][ T6981] __nla_validate_parse: 16 callbacks suppressed [ 179.233629][ T6981] netlink: 152 bytes leftover after parsing attributes in process `syz.1.298'. [ 179.252128][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.299'. [ 179.416268][ T6994] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 179.425711][ T6994] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 179.436155][ T6994] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 179.469461][ T6994] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 179.522978][ T6994] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 179.560225][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 179.566640][ T6994] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 179.583352][ T6994] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 179.591480][ T6994] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 179.703023][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 179.876937][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 179.908229][ T7005] chnl_net:caif_netlink_parms(): no params data found [ 180.272393][ T7026] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 180.281695][ T7024] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 180.306392][ T7024] netlink: 220 bytes leftover after parsing attributes in process `syz.4.307'. [ 180.624334][ T7040] trusted_key: syz.1.312 sent an empty control message without MSG_MORE. [ 180.849723][ T7061] netlink: 100 bytes leftover after parsing attributes in process `syz.3.316'. [ 181.131644][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 181.163293][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.274918][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.298301][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.318'. [ 181.327650][ T7079] netlink: 256 bytes leftover after parsing attributes in process `syz.2.318'. [ 181.554741][ T1149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.591984][ T5920] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.601733][ T1149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.724454][ T5920] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.831219][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.865521][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.924576][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.946412][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.963433][ T7106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.001377][ T7106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.224846][ T7120] : entered promiscuous mode [ 182.405245][ T7122] bond1: left allmulticast mode [ 182.514770][ T5920] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.590532][ T7135] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 182.700560][ T7143] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 182.721925][ T7143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.413999][ T7176] TCP: TCP_TX_DELAY enabled [ 183.730149][ T7197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.848856][ T7190] bond1: (slave gretap1): making interface the new active one [ 183.860678][ T7190] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 184.681323][ T7237] __nla_validate_parse: 12 callbacks suppressed [ 184.681345][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 184.702247][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.366'. [ 184.811442][ T7241] netlink: 68 bytes leftover after parsing attributes in process `syz.1.368'. [ 185.248197][ T7263] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20000 [ 185.438046][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 185.462353][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 185.525179][ T7278] validate_nla: 3 callbacks suppressed [ 185.525197][ T7278] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 185.660428][ T7280] netlink: 84 bytes leftover after parsing attributes in process `syz.0.384'. [ 185.679256][ T7284] netlink: 80 bytes leftover after parsing attributes in process `syz.2.385'. [ 185.685109][ T7280] netlink: 84 bytes leftover after parsing attributes in process `syz.0.384'. [ 185.722947][ T7285] netlink: 2684 bytes leftover after parsing attributes in process `syz.4.383'. [ 185.952693][ T7294] netlink: 32 bytes leftover after parsing attributes in process `syz.1.388'. [ 186.033352][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.080457][ T7296] syzkaller0: entered promiscuous mode [ 186.089170][ T7296] syzkaller0: entered allmulticast mode [ 186.098578][ T7300] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 186.588509][ T7324] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 187.523977][ T7316] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 187.529451][ T7322] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 187.556659][ T7322] netlink: 'syz.0.398': attribute type 2 has an invalid length. [ 187.637678][ T7335] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 187.718532][ T7339] nbd: must specify at least one socket [ 188.727465][ T7344] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 188.740381][ T7344] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 188.748552][ T7344] gretap2: entered promiscuous mode [ 188.754003][ T7344] gretap2: entered allmulticast mode [ 188.801870][ T7345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.821117][ T7345] bond0: (slave bond1): Enslaving as an active interface with an up link [ 188.955737][ T7365] netlink: 'syz.3.409': attribute type 6 has an invalid length. [ 189.063294][ T7365] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 189.716121][ T7404] bridge0: entered promiscuous mode [ 189.721451][ T7404] bridge0: entered allmulticast mode [ 189.764573][ T7409] Bluetooth: MGMT ver 1.23 [ 189.824275][ T7411] __nla_validate_parse: 8 callbacks suppressed [ 189.824295][ T7411] netlink: 44 bytes leftover after parsing attributes in process `syz.4.422'. [ 189.878062][ T7411] netlink: 43 bytes leftover after parsing attributes in process `syz.4.422'. [ 189.900841][ T7411] netlink: 'syz.4.422': attribute type 5 has an invalid length. [ 189.911189][ T7411] netlink: 43 bytes leftover after parsing attributes in process `syz.4.422'. [ 189.929402][ T7421] netlink: 44 bytes leftover after parsing attributes in process `syz.1.425'. [ 189.943394][ T7421] netlink: 43 bytes leftover after parsing attributes in process `syz.1.425'. [ 189.953563][ T7421] netlink: 'syz.1.425': attribute type 5 has an invalid length. [ 189.970832][ T7421] netlink: 43 bytes leftover after parsing attributes in process `syz.1.425'. [ 189.985513][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 190.103781][ T7425] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 190.138235][ T7429] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.157021][ T7425] netlink: 184 bytes leftover after parsing attributes in process `syz.0.426'. [ 190.670080][ T7452] validate_nla: 1 callbacks suppressed [ 190.670101][ T7452] netlink: 'syz.4.433': attribute type 3 has an invalid length. [ 190.715001][ T7452] netlink: 'syz.4.433': attribute type 11 has an invalid length. [ 190.736387][ T7452] netlink: 224 bytes leftover after parsing attributes in process `syz.4.433'. [ 191.622610][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 192.132162][ T7507] syzkaller1: entered promiscuous mode [ 192.150578][ T7507] syzkaller1: entered allmulticast mode [ 193.379000][ T7553] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 194.513328][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.815214][ T7332] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.853892][ T7332] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.932876][ T7332] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.962570][ T7332] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.315632][ T7626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.505276][ T7636] IPv6: Can't replace route, no match found [ 195.617518][ T7643] netlink: 'syz.4.495': attribute type 3 has an invalid length. [ 195.984660][ T7668] !€ÿ: renamed from bond_slave_0 (while UP) [ 196.257552][ T7679] netlink: 'syz.1.503': attribute type 4 has an invalid length. [ 196.286873][ T7679] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 196.295558][ T7679] netlink: 'syz.1.503': attribute type 3 has an invalid length. [ 196.308211][ T7679] __nla_validate_parse: 9 callbacks suppressed [ 196.308230][ T7679] netlink: 224 bytes leftover after parsing attributes in process `syz.1.503'. [ 196.328641][ T7679] NCSI netlink: No device for ifindex 0 [ 196.561444][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 196.628104][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 196.807253][ T7708] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 196.870886][ T7708] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 196.976142][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'. [ 197.083486][ T7726] openvswitch: netlink: Actions may not be safe on all matching packets [ 197.215275][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.521'. [ 197.229340][ T7733] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 197.302688][ T7733] team0: Port device dummy0 added [ 197.472631][ T7744] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 197.515941][ T7744] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 197.554358][ T7744] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 197.864525][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.532'. [ 197.881241][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.532'. [ 198.147173][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 198.359520][ T7793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.373520][ T7787] netlink: 80 bytes leftover after parsing attributes in process `syz.4.540'. [ 198.412416][ T7787] netlink: 80 bytes leftover after parsing attributes in process `syz.4.540'. [ 198.528009][ T7799] netlink: 'syz.2.544': attribute type 7 has an invalid length. [ 198.562726][ T7799] netlink: 'syz.2.544': attribute type 8 has an invalid length. [ 199.135469][ T5920] IPVS: starting estimator thread 0... [ 199.222710][ T7826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.231742][ T7826] team0: Failed to send port change of device bond2 via netlink (err -105) [ 199.241131][ T7826] team0: Failed to send options change via netlink (err -105) [ 199.248902][ T7830] IPVS: using max 27 ests per chain, 64800 per kthread [ 199.256456][ T7826] team0: Port device bond2 added [ 199.506569][ T7850] ip6gre2: entered allmulticast mode [ 199.639881][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.433736][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.077183][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.081167][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 217.090623][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 218.528930][ T7869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.649410][ T7868] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 218.705988][ T7879] __nla_validate_parse: 5 callbacks suppressed [ 218.706009][ T7879] netlink: 3 bytes leftover after parsing attributes in process `syz.0.566'. [ 218.756902][ T7879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.392491][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 222.482834][ T7932] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 222.540980][ T7922] netlink: 'syz.3.577': attribute type 4 has an invalid length. [ 223.273239][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 223.401867][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 223.430071][ T7961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.480363][ T7973] sctp: [Deprecated]: syz.3.589 (pid 7973) Use of int in max_burst socket option. [ 223.480363][ T7973] Use struct sctp_assoc_value instead [ 224.138692][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 224.153271][ T8007] netlink: 144 bytes leftover after parsing attributes in process `syz.0.599'. [ 224.224523][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 224.277364][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 224.595795][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 224.633747][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 225.104369][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 225.470619][ T8068] tipc: Enabled bearer , priority 0 [ 225.549497][ T8068] syzkaller0: entered promiscuous mode [ 225.566717][ T8068] syzkaller0: entered allmulticast mode [ 226.001362][ T8091] tipc: Resetting bearer [ 226.029252][ T8095] wg1: entered promiscuous mode [ 226.036273][ T8095] wg1: entered allmulticast mode [ 226.091667][ T8064] tipc: Resetting bearer [ 226.174463][ T8064] tipc: Disabling bearer [ 226.300528][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 226.441431][ T8085] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.475383][ T8085] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 226.550658][ T8085] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.576919][ T8085] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 226.648001][ T8085] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.671280][ T8085] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 226.752268][ T8085] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 226.763308][ T8130] netlink: 96 bytes leftover after parsing attributes in process `syz.0.626'. [ 226.809619][ T8085] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 227.058748][ T8149] team0: Device ip6gre1 is of different type [ 227.102327][ T8153] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 227.120120][ T8153] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 227.370329][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 228.937019][ T8251] raw_sendmsg: syz.0.652 forgot to set AF_INET. Fix it! [ 229.503738][ T8276] netlink: 'syz.2.657': attribute type 2 has an invalid length. [ 229.511439][ T8276] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 229.514680][ T8278] netlink: 'syz.1.658': attribute type 10 has an invalid length. [ 229.588550][ T8276] netlink: 'syz.2.657': attribute type 2 has an invalid length. [ 229.590768][ T8278] __nla_validate_parse: 3 callbacks suppressed [ 229.590786][ T8278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.658'. [ 229.628744][ T8276] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 229.659735][ T8283] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 229.687953][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'. [ 229.706972][ T8276] netlink: 'syz.2.657': attribute type 2 has an invalid length. [ 229.818563][ T8276] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 229.850084][ T8276] netlink: 'syz.2.657': attribute type 2 has an invalid length. [ 229.861763][ T8276] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 229.871356][ T8276] netlink: 'syz.2.657': attribute type 2 has an invalid length. [ 230.194832][ T8304] openvswitch: netlink: Missing key (keys=40, expected=80) [ 230.445615][ T8309] batman_adv: batadv0: Adding interface: team0 [ 230.462926][ T8309] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.559218][ T8309] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 230.773875][ T8323] netlink: 14 bytes leftover after parsing attributes in process `syz.0.667'. [ 231.309020][ T8349] netlink: 72 bytes leftover after parsing attributes in process `syz.0.674'. [ 231.505945][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 231.517387][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.677'. [ 231.554843][ T8365] only policy match revision 0 supported [ 231.554867][ T8365] unable to load match [ 231.702789][ T8369] team0: Device gtp0 is of different type [ 231.820139][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 231.972925][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'. [ 232.239343][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 232.819155][ T8422] netlink: 284 bytes leftover after parsing attributes in process `syz.1.692'. [ 232.979297][ T8424] bond0: entered promiscuous mode [ 232.999799][ T8424] bond_slave_0: entered promiscuous mode [ 233.025881][ T8424] bond_slave_1: entered promiscuous mode [ 233.039559][ T8424] bond1: entered promiscuous mode [ 233.344113][ T8450] sctp: [Deprecated]: syz.3.701 (pid 8450) Use of int in maxseg socket option. [ 233.344113][ T8450] Use struct sctp_assoc_value instead [ 233.421194][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.445335][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.584081][ T8455] bond0: left promiscuous mode [ 233.592531][ T8455] bond_slave_0: left promiscuous mode [ 233.639320][ T8455] bond_slave_1: left promiscuous mode [ 233.653921][ T8455] bond1: left promiscuous mode [ 233.672074][ T8455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.739734][ T8455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.930148][ T8460] geneve2: entered promiscuous mode [ 233.940035][ T8460] geneve2: entered allmulticast mode [ 235.217787][ T8533] __nla_validate_parse: 4 callbacks suppressed [ 235.217807][ T8533] netlink: 284 bytes leftover after parsing attributes in process `syz.0.716'. [ 235.375366][ T8541] netlink: 32 bytes leftover after parsing attributes in process `syz.1.718'. [ 235.539370][ T8544] bridge1: entered allmulticast mode [ 235.653264][ T8551] validate_nla: 124 callbacks suppressed [ 235.653285][ T8551] netlink: 'syz.2.720': attribute type 64 has an invalid length. [ 235.768773][ T8560] tipc: Enabled bearer , priority 12 [ 235.783331][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.720'. [ 236.754644][ T8610] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 236.778480][ T8610] netlink: 15 bytes leftover after parsing attributes in process `syz.4.737'. [ 236.864424][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 236.874295][ T5927] tipc: Node number set to 2049353236 [ 237.107214][ T8626] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 237.150967][ T8626] netlink: 'syz.3.741': attribute type 3 has an invalid length. [ 237.174090][ T8626] netlink: 224 bytes leftover after parsing attributes in process `syz.3.741'. [ 237.219052][ T8630] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.497383][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 237.550070][ T8610] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 237.563584][ T8610] netlink: 15 bytes leftover after parsing attributes in process `syz.4.737'. [ 237.622049][ T8648] netlink: 'syz.0.747': attribute type 29 has an invalid length. [ 237.671369][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 238.109924][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'. [ 238.579782][ T8702] sctp: [Deprecated]: syz.0.759 (pid 8702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.579782][ T8702] Use struct sctp_sack_info instead [ 238.663675][ T8706] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.945035][ T8723] netlink: 'syz.4.767': attribute type 29 has an invalid length. [ 239.146532][ T8729] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 239.167096][ T8732] netlink: 'syz.0.770': attribute type 25 has an invalid length. [ 239.174182][ T8731] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 239.176508][ T8729] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 239.206285][ T8731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.246154][ T8731] veth0_vlan: entered allmulticast mode [ 239.316054][ T8731] veth0_vlan: left promiscuous mode [ 239.367646][ T8731] veth0_vlan: entered promiscuous mode [ 239.400941][ T8731] team0: Device veth0_vlan failed to register rx_handler [ 240.018019][ T8756] pim6reg: entered allmulticast mode [ 240.366013][ T8780] __nla_validate_parse: 10 callbacks suppressed [ 240.366035][ T8780] netlink: 17 bytes leftover after parsing attributes in process `syz.0.784'. [ 240.443442][ T8789] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.787'. [ 240.453998][ T8789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.787'. [ 240.462834][ T8780] netlink: 656 bytes leftover after parsing attributes in process `syz.0.784'. [ 240.476034][ T8789] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.787'. [ 240.495470][ T8781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.503759][ T8793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.787'. [ 240.779438][ T8805] netlink: 52 bytes leftover after parsing attributes in process `syz.4.791'. [ 241.007779][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 241.039079][ T8818] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 241.048252][ T8818] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 241.158843][ T8824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.891966][ T8850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.809'. [ 242.436326][ T8858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.810'. [ 242.733515][ T8881] sctp: [Deprecated]: syz.1.818 (pid 8881) Use of int in max_burst socket option deprecated. [ 242.733515][ T8881] Use struct sctp_assoc_value instead [ 243.684088][ T8929] IPv6: addrconf: prefix option has invalid lifetime [ 244.208388][ T8953] sctp: [Deprecated]: syz.0.841 (pid 8953) Use of int in max_burst socket option deprecated. [ 244.208388][ T8953] Use struct sctp_assoc_value instead [ 244.785956][ T8983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.497398][ T9015] bridge3: entered promiscuous mode [ 245.517522][ T9015] bridge3: entered allmulticast mode [ 245.779093][ T9028] __nla_validate_parse: 9 callbacks suppressed [ 245.779113][ T9028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.857'. [ 245.816928][ T9033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.244649][ T9056] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 246.284817][ T9059] tipc: Enabling not permitted [ 246.290822][ T9059] tipc: Enabling of bearer rejected, failed to enable media [ 246.299922][ T9056] netlink: zone id is out of range [ 246.364678][ T9056] netlink: zone id is out of range [ 246.403244][ T9056] netlink: zone id is out of range [ 246.416129][ T9056] netlink: zone id is out of range [ 246.444234][ T9056] netlink: zone id is out of range [ 246.458936][ T9056] netlink: zone id is out of range [ 246.498607][ T9056] netlink: zone id is out of range [ 246.528121][ T9056] netlink: zone id is out of range [ 246.950303][ T9095] veth0: entered promiscuous mode [ 247.563955][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 247.633690][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.751825][ T9094] veth0: left promiscuous mode [ 247.810073][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 248.129838][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 261.076765][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.393525][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.518986][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.967127][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.273483][ T31] INFO: task kworker/0:2:979 blocked for more than 143 seconds. [ 392.281295][ T31] Not tainted syzkaller #0 [ 392.290911][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.299685][ T31] task:kworker/0:2 state:D stack:23824 pid:979 tgid:979 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 392.311913][ T31] Workqueue: events rfkill_sync_work [ 392.317376][ T31] Call Trace: [ 392.320674][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 392.323684][ T31] __schedule+0x1798/0x4cc0 [ 392.328546][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 392.334439][ T31] ? __pfx___schedule+0x10/0x10 [ 392.339770][ T31] ? schedule+0x91/0x360 [ 392.344157][ T31] schedule+0x165/0x360 [ 392.348367][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.354076][ T31] __mutex_lock+0x7e6/0x1360 [ 392.358718][ T31] ? __mutex_lock+0x5b6/0x1360 [ 392.410948][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 392.426650][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.431757][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.448915][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 392.454971][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 392.461347][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 392.467200][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 392.472336][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 392.478104][ T31] rfkill_set_block+0x1d2/0x440 [ 392.483165][ T31] rfkill_sync_work+0x114/0x200 [ 392.488048][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 392.493815][ T31] process_scheduled_works+0xae1/0x17b0 [ 392.499410][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 392.505548][ T31] worker_thread+0x8a0/0xda0 [ 392.510175][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 392.516620][ T31] ? __kthread_parkme+0x7b/0x200 [ 392.521605][ T31] kthread+0x711/0x8a0 [ 392.525783][ T31] ? __pfx_worker_thread+0x10/0x10 [ 392.530935][ T31] ? __pfx_kthread+0x10/0x10 [ 392.535692][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.540927][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.546267][ T31] ? __pfx_kthread+0x10/0x10 [ 392.550908][ T31] ret_from_fork+0x3f9/0x770 [ 392.555546][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.560688][ T31] ? __switch_to_asm+0x39/0x70 [ 392.565574][ T31] ? __switch_to_asm+0x33/0x70 [ 392.570375][ T31] ? __pfx_kthread+0x10/0x10 [ 392.575045][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.579956][ T31] [ 392.583145][ T31] INFO: task kworker/0:3:5934 blocked for more than 143 seconds. [ 392.591168][ T31] Not tainted syzkaller #0 [ 392.596378][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.605343][ T31] task:kworker/0:3 state:D stack:25936 pid:5934 tgid:5934 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 392.617747][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 392.624895][ T31] Call Trace: [ 392.628215][ T31] [ 392.631171][ T31] __schedule+0x1798/0x4cc0 [ 392.635835][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 392.641286][ T31] ? __pfx___schedule+0x10/0x10 [ 392.646578][ T31] ? schedule+0x91/0x360 [ 392.650878][ T31] schedule+0x165/0x360 [ 392.655119][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.660611][ T31] __mutex_lock+0x7e6/0x1360 [ 392.665393][ T31] ? __mutex_lock+0x5b6/0x1360 [ 392.670199][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 392.676552][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.681636][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 392.687721][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 392.693625][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 392.699730][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 392.705614][ T31] process_scheduled_works+0xae1/0x17b0 [ 392.711212][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 392.717286][ T31] worker_thread+0x8a0/0xda0 [ 392.721925][ T31] kthread+0x711/0x8a0 [ 392.726178][ T31] ? __pfx_worker_thread+0x10/0x10 [ 392.731318][ T31] ? __pfx_kthread+0x10/0x10 [ 392.735993][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.741220][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.746609][ T31] ? __pfx_kthread+0x10/0x10 [ 392.751232][ T31] ret_from_fork+0x3f9/0x770 [ 392.756532][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.761696][ T31] ? __switch_to_asm+0x39/0x70 [ 392.766611][ T31] ? __switch_to_asm+0x33/0x70 [ 392.771406][ T31] ? __pfx_kthread+0x10/0x10 [ 392.776092][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.780898][ T31] [ 392.784117][ T31] INFO: task syz.1.868:9057 blocked for more than 143 seconds. [ 392.791680][ T31] Not tainted syzkaller #0 [ 392.802243][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.813844][ T31] task:syz.1.868 state:D stack:26920 pid:9057 tgid:9057 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 392.825892][ T31] Call Trace: [ 392.829288][ T31] [ 392.832236][ T31] __schedule+0x1798/0x4cc0 [ 392.837089][ T31] ? validate_chain+0x897/0x2140 [ 392.842088][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.847091][ T31] ? __pfx___schedule+0x10/0x10 [ 392.852005][ T31] ? schedule+0x91/0x360 [ 392.856331][ T31] schedule+0x165/0x360 [ 392.860524][ T31] schedule_timeout+0x9a/0x270 [ 392.865392][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 392.870836][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.876131][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.881370][ T31] ? wait_for_completion+0x267/0x5d0 [ 392.886792][ T31] wait_for_completion+0x2bf/0x5d0 [ 392.891946][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 392.897647][ T31] ? __flush_work+0xd2/0xbc0 [ 392.902270][ T31] ? __flush_work+0xd2/0xbc0 [ 392.907142][ T31] __flush_work+0x9b9/0xbc0 [ 392.911668][ T31] ? __flush_work+0xd2/0xbc0 [ 392.916535][ T31] ? __pfx___flush_work+0x10/0x10 [ 392.921595][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 392.926982][ T31] ? __pfx___cancel_work+0x10/0x10 [ 392.932120][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 392.937837][ T31] __cancel_work_sync+0xbe/0x110 [ 392.942833][ T31] rfkill_unregister+0x92/0x220 [ 392.947771][ T31] nfc_unregister_device+0x96/0x2a0 [ 392.953061][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 392.958814][ T31] virtual_ncidev_close+0x56/0x90 [ 392.963935][ T31] __fput+0x44c/0xa70 [ 392.967955][ T31] task_work_run+0x1d1/0x260 [ 392.972557][ T31] ? __pfx_task_work_run+0x10/0x10 [ 392.977767][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 392.983335][ T31] exit_to_user_mode_loop+0xec/0x110 [ 392.988670][ T31] do_syscall_64+0x2bd/0x3b0 [ 392.993312][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.998536][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.004724][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.009437][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.015643][ T31] RIP: 0033:0x7fc67638ebe9 [ 393.020096][ T31] RSP: 002b:00007ffcb7487868 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 393.028633][ T31] RAX: 0000000000000000 RBX: 000000000003c1c9 RCX: 00007fc67638ebe9 [ 393.036688][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 393.044758][ T31] RBP: 00007fc6765b7da0 R08: 0000000000000001 R09: 0000001eb7487b5f [ 393.052748][ T31] R10: 0000001b31f20000 R11: 0000000000000246 R12: 00007fc6765b5fac [ 393.060791][ T31] R13: 00007fc6765b5fa0 R14: ffffffffffffffff R15: 00007ffcb7487980 [ 393.068844][ T31] [ 393.071878][ T31] INFO: task syz.3.870:9070 blocked for more than 144 seconds. [ 393.080398][ T31] Not tainted syzkaller #0 [ 393.085424][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.094169][ T31] task:syz.3.870 state:D stack:25528 pid:9070 tgid:9067 ppid:5875 task_flags:0x400140 flags:0x00004004 [ 393.106299][ T31] Call Trace: [ 393.109598][ T31] [ 393.112534][ T31] __schedule+0x1798/0x4cc0 [ 393.117131][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.122025][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.127158][ T31] ? __pfx___schedule+0x10/0x10 [ 393.132054][ T31] ? schedule+0x91/0x360 [ 393.136389][ T31] schedule+0x165/0x360 [ 393.140575][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.146164][ T31] __mutex_lock+0x7e6/0x1360 [ 393.150802][ T31] ? __mutex_lock+0x5b6/0x1360 [ 393.155794][ T31] ? rfkill_register+0x37/0x8e0 [ 393.160694][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.165831][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 393.171237][ T31] ? device_initialize+0x24b/0x440 [ 393.176436][ T31] rfkill_register+0x37/0x8e0 [ 393.181149][ T31] nfc_register_device+0x14a/0x320 [ 393.186367][ T31] nci_register_device+0x87f/0x9d0 [ 393.191511][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 393.197199][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 393.202515][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 393.207976][ T31] virtual_ncidev_open+0x129/0x1a0 [ 393.213161][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 393.218821][ T31] misc_open+0x2b9/0x330 [ 393.223230][ T31] chrdev_open+0x4c9/0x5e0 [ 393.227689][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.232638][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 393.239311][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.244358][ T31] do_dentry_open+0x950/0x13f0 [ 393.249164][ T31] vfs_open+0x3b/0x340 [ 393.253292][ T31] ? path_openat+0x2ecd/0x3830 [ 393.258085][ T31] path_openat+0x2ee5/0x3830 [ 393.262682][ T31] ? arch_stack_walk+0xfc/0x150 [ 393.267626][ T31] ? stack_depot_save_flags+0x40/0x860 [ 393.273205][ T31] ? __pfx_path_openat+0x10/0x10 [ 393.278175][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.284351][ T31] do_filp_open+0x1fa/0x410 [ 393.288889][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.293877][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 393.298961][ T31] ? _raw_spin_unlock+0x28/0x50 [ 393.303912][ T31] ? alloc_fd+0x64c/0x6c0 [ 393.308281][ T31] do_sys_openat2+0x121/0x1c0 [ 393.312957][ T31] ? __se_sys_futex+0x36f/0x400 [ 393.321798][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.327420][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.332229][ T31] __x64_sys_openat+0x138/0x170 [ 393.337191][ T31] do_syscall_64+0xfa/0x3b0 [ 393.341732][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.347168][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.353399][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.358119][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.364103][ T31] RIP: 0033:0x7f19eaf8ebe9 [ 393.368562][ T31] RSP: 002b:00007f19ebe13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.377040][ T31] RAX: ffffffffffffffda RBX: 00007f19eb1b5fa0 RCX: 00007f19eaf8ebe9 [ 393.385093][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 393.393144][ T31] RBP: 00007f19eb011e19 R08: 0000000000000000 R09: 0000000000000000 [ 393.401142][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.409207][ T31] R13: 00007f19eb1b6038 R14: 00007f19eb1b5fa0 R15: 00007ffff10fec88 [ 393.417280][ T31] [ 393.420360][ T31] INFO: task syz.2.879:9116 blocked for more than 144 seconds. [ 393.428181][ T31] Not tainted syzkaller #0 [ 393.433182][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.441842][ T31] task:syz.2.879 state:D stack:28328 pid:9116 tgid:9115 ppid:5859 task_flags:0x400040 flags:0x00004004 [ 393.453839][ T31] Call Trace: [ 393.457135][ T31] [ 393.460100][ T31] __schedule+0x1798/0x4cc0 [ 393.464937][ T31] ? kasan_save_free_info+0x46/0x50 [ 393.470187][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.475417][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.480353][ T31] ? __pfx___schedule+0x10/0x10 [ 393.485312][ T31] ? schedule+0x91/0x360 [ 393.489584][ T31] schedule+0x165/0x360 [ 393.493830][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.499321][ T31] __mutex_lock+0x7e6/0x1360 [ 393.504010][ T31] ? __mutex_lock+0x5b6/0x1360 [ 393.508816][ T31] ? misc_open+0x51/0x330 [ 393.513238][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.518328][ T31] misc_open+0x51/0x330 [ 393.522518][ T31] chrdev_open+0x4c9/0x5e0 [ 393.527024][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.532001][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 393.538409][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.543453][ T31] do_dentry_open+0x950/0x13f0 [ 393.548269][ T31] vfs_open+0x3b/0x340 [ 393.552374][ T31] ? path_openat+0x2ecd/0x3830 [ 393.557574][ T31] path_openat+0x2ee5/0x3830 [ 393.562355][ T31] ? arch_stack_walk+0xfc/0x150 [ 393.567312][ T31] ? stack_depot_save_flags+0x40/0x860 [ 393.572811][ T31] ? __pfx_path_openat+0x10/0x10 [ 393.578056][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.584220][ T31] do_filp_open+0x1fa/0x410 [ 393.588755][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.593683][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 393.598838][ T31] ? _raw_spin_unlock+0x28/0x50 [ 393.603757][ T31] ? alloc_fd+0x64c/0x6c0 [ 393.608132][ T31] do_sys_openat2+0x121/0x1c0 [ 393.612815][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.618088][ T31] ? exc_page_fault+0x76/0xf0 [ 393.622798][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 393.628171][ T31] __x64_sys_openat+0x138/0x170 [ 393.633123][ T31] do_syscall_64+0xfa/0x3b0 [ 393.637673][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.642908][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.649069][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.653835][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.659735][ T31] RIP: 0033:0x7f5815b8ebe9 [ 393.664311][ T31] RSP: 002b:00007f5816a89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.672756][ T31] RAX: ffffffffffffffda RBX: 00007f5815db5fa0 RCX: 00007f5815b8ebe9 [ 393.680852][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 393.689121][ T31] RBP: 00007f5815c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 393.697175][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.705219][ T31] R13: 00007f5815db6038 R14: 00007f5815db5fa0 R15: 00007fff7e68f9f8 [ 393.713313][ T31] [ 393.716380][ T31] INFO: task syz.0.880:9120 blocked for more than 144 seconds. [ 393.724206][ T31] Not tainted syzkaller #0 [ 393.729161][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.737889][ T31] task:syz.0.880 state:D stack:25992 pid:9120 tgid:9119 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 393.749893][ T31] Call Trace: [ 393.753236][ T31] [ 393.756190][ T31] __schedule+0x1798/0x4cc0 [ 393.760812][ T31] ? kasan_save_free_info+0x46/0x50 [ 393.766123][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.771060][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.776022][ T31] ? __pfx___schedule+0x10/0x10 [ 393.780920][ T31] ? schedule+0x91/0x360 [ 393.785274][ T31] schedule+0x165/0x360 [ 393.789490][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.795507][ T31] __mutex_lock+0x7e6/0x1360 [ 393.800203][ T31] ? __mutex_lock+0x5b6/0x1360 [ 393.805470][ T31] ? misc_open+0x51/0x330 [ 393.809857][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.814987][ T31] misc_open+0x51/0x330 [ 393.819191][ T31] chrdev_open+0x4c9/0x5e0 [ 393.823687][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.828662][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 393.835115][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.840090][ T31] do_dentry_open+0x950/0x13f0 [ 393.844923][ T31] vfs_open+0x3b/0x340 [ 393.849033][ T31] ? path_openat+0x2ecd/0x3830 [ 393.853879][ T31] path_openat+0x2ee5/0x3830 [ 393.858510][ T31] ? arch_stack_walk+0xfc/0x150 [ 393.863487][ T31] ? stack_depot_save_flags+0x40/0x860 [ 393.869082][ T31] ? __pfx_path_openat+0x10/0x10 [ 393.874130][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.880264][ T31] do_filp_open+0x1fa/0x410 [ 393.884890][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.889782][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 393.894914][ T31] ? _raw_spin_unlock+0x28/0x50 [ 393.899821][ T31] ? alloc_fd+0x64c/0x6c0 [ 393.904386][ T31] do_sys_openat2+0x121/0x1c0 [ 393.909123][ T31] ? __se_sys_futex+0x36f/0x400 [ 393.914152][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.919389][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.924249][ T31] __x64_sys_openat+0x138/0x170 [ 393.929134][ T31] do_syscall_64+0xfa/0x3b0 [ 393.933714][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.938943][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.945115][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.949835][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.955878][ T31] RIP: 0033:0x7f43e518ebe9 [ 393.960328][ T31] RSP: 002b:00007f43e5fda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.968849][ T31] RAX: ffffffffffffffda RBX: 00007f43e53b5fa0 RCX: 00007f43e518ebe9 [ 393.976914][ T31] RDX: 0000000000080040 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 393.984969][ T31] RBP: 00007f43e5211e19 R08: 0000000000000000 R09: 0000000000000000 [ 393.993052][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.001047][ T31] R13: 00007f43e53b6038 R14: 00007f43e53b5fa0 R15: 00007ffe52f97988 [ 394.009110][ T31] [ 394.012162][ T31] INFO: task syz.4.887:9137 blocked for more than 145 seconds. [ 394.019935][ T31] Not tainted syzkaller #0 [ 394.025160][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.033911][ T31] task:syz.4.887 state:D stack:28328 pid:9137 tgid:9136 ppid:5868 task_flags:0x400040 flags:0x00004004 [ 394.045981][ T31] Call Trace: [ 394.049278][ T31] [ 394.052216][ T31] __schedule+0x1798/0x4cc0 [ 394.056817][ T31] ? kasan_save_free_info+0x46/0x50 [ 394.062049][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.066989][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.071874][ T31] ? __pfx___schedule+0x10/0x10 [ 394.076831][ T31] ? schedule+0x91/0x360 [ 394.081113][ T31] schedule+0x165/0x360 [ 394.085367][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.090862][ T31] __mutex_lock+0x7e6/0x1360 [ 394.095560][ T31] ? __mutex_lock+0x5b6/0x1360 [ 394.100356][ T31] ? misc_open+0x51/0x330 [ 394.104803][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.109882][ T31] misc_open+0x51/0x330 [ 394.114519][ T31] chrdev_open+0x4c9/0x5e0 [ 394.119288][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 394.124363][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 394.130769][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 394.136092][ T31] do_dentry_open+0x950/0x13f0 [ 394.140924][ T31] vfs_open+0x3b/0x340 [ 394.145083][ T31] ? path_openat+0x2ecd/0x3830 [ 394.149878][ T31] path_openat+0x2ee5/0x3830 [ 394.154540][ T31] ? arch_stack_walk+0xfc/0x150 [ 394.159440][ T31] ? stack_depot_save_flags+0x40/0x860 [ 394.165022][ T31] ? __pfx_path_openat+0x10/0x10 [ 394.169989][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.176244][ T31] do_filp_open+0x1fa/0x410 [ 394.180783][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.185715][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 394.190801][ T31] ? _raw_spin_unlock+0x28/0x50 [ 394.199480][ T31] ? alloc_fd+0x64c/0x6c0 [ 394.203995][ T31] do_sys_openat2+0x121/0x1c0 [ 394.208953][ T31] ? __se_sys_futex+0x36f/0x400 [ 394.213955][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 394.219190][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.224012][ T31] __x64_sys_openat+0x138/0x170 [ 394.228918][ T31] do_syscall_64+0xfa/0x3b0 [ 394.233540][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.238786][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.245129][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.249853][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.255837][ T31] RIP: 0033:0x7f197d38ebe9 [ 394.260319][ T31] RSP: 002b:00007f197e1f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 394.268804][ T31] RAX: ffffffffffffffda RBX: 00007f197d5b5fa0 RCX: 00007f197d38ebe9 [ 394.276947][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 394.285035][ T31] RBP: 00007f197d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 394.293083][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.301056][ T31] R13: 00007f197d5b6038 R14: 00007f197d5b5fa0 R15: 00007ffff86c2498 [ 394.309122][ T31] [ 394.312193][ T31] [ 394.312193][ T31] Showing all locks held in the system: [ 394.320089][ T31] 1 lock held by khungtaskd/31: [ 394.325041][ T31] #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 394.335008][ T31] 2 locks held by kworker/u8:4/59: [ 394.340138][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 394.350324][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 394.365782][ T31] 4 locks held by kworker/0:2/979: [ 394.370940][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 394.382023][ T31] #1: ffffc9000392fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 394.394479][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 394.404572][ T31] #3: ffff8880247b8100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 394.414347][ T31] 2 locks held by getty/5623: [ 394.419023][ T31] #0: ffff888032e610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 394.428871][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 394.439079][ T31] 3 locks held by kworker/0:3/5934: [ 394.444342][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 394.455420][ T31] #1: ffffc9000454fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 394.469237][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 394.480736][ T31] 6 locks held by kworker/u8:9/7332: [ 394.486106][ T31] 1 lock held by syz.1.868/9057: [ 394.491088][ T31] #0: ffff8880247b8100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 394.501010][ T31] 3 locks held by syz.3.870/9070: [ 394.506121][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.515100][ T31] #1: ffff88807ee6e100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 394.524974][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 394.535042][ T31] 1 lock held by syz.2.879/9116: [ 394.539996][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.548559][ T31] 1 lock held by syz.0.880/9120: [ 394.553584][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.562086][ T31] 1 lock held by syz.4.887/9137: [ 394.567101][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.575770][ T31] 1 lock held by syz-executor/9148: [ 394.580999][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.589507][ T31] 1 lock held by syz-executor/9149: [ 394.594925][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.603527][ T31] 1 lock held by syz-executor/9152: [ 394.608745][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.617297][ T31] 1 lock held by syz-executor/9153: [ 394.622514][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.631045][ T31] 1 lock held by syz-executor/9155: [ 394.636339][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.645003][ T31] 1 lock held by syz-executor/9162: [ 394.650248][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.658771][ T31] 1 lock held by syz-executor/9163: [ 394.664050][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.672561][ T31] 1 lock held by syz-executor/9166: [ 394.677879][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.686624][ T31] 1 lock held by syz-executor/9167: [ 394.691847][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.700794][ T31] 1 lock held by syz-executor/9169: [ 394.706300][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.714856][ T31] 1 lock held by syz-executor/9175: [ 394.720060][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.728587][ T31] 1 lock held by syz-executor/9176: [ 394.733874][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.742362][ T31] 1 lock held by syz-executor/9180: [ 394.747614][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.756153][ T31] 1 lock held by syz-executor/9181: [ 394.761353][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.769888][ T31] 1 lock held by syz-executor/9183: [ 394.775173][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 394.783758][ T31] [ 394.786108][ T31] ============================================= [ 394.786108][ T31] [ 394.794825][ T31] NMI backtrace for cpu 1 [ 394.794854][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 394.794877][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.794896][ T31] Call Trace: [ 394.794905][ T31] [ 394.794914][ T31] dump_stack_lvl+0x189/0x250 [ 394.794949][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.794976][ T31] ? __pfx__printk+0x10/0x10 [ 394.795021][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 394.795050][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 394.795078][ T31] ? __pfx__printk+0x10/0x10 [ 394.795113][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.795150][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 394.795179][ T31] watchdog+0xf93/0xfe0 [ 394.795214][ T31] ? watchdog+0x1de/0xfe0 [ 394.795250][ T31] kthread+0x711/0x8a0 [ 394.795281][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.795310][ T31] ? __pfx_kthread+0x10/0x10 [ 394.795339][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.795366][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.795392][ T31] ? __pfx_kthread+0x10/0x10 [ 394.795420][ T31] ret_from_fork+0x3f9/0x770 [ 394.795445][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 394.795474][ T31] ? __switch_to_asm+0x39/0x70 [ 394.795501][ T31] ? __switch_to_asm+0x33/0x70 [ 394.795528][ T31] ? __pfx_kthread+0x10/0x10 [ 394.795556][ T31] ret_from_fork_asm+0x1a/0x30 [ 394.795601][ T31] [ 394.795609][ T31] Sending NMI from CPU 1 to CPUs 0: [ 394.941385][ C0] NMI backtrace for cpu 0 [ 394.941402][ C0] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 394.941421][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.941431][ C0] Workqueue: 0x0 (events_unbound) [ 394.941456][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x70 [ 394.941482][ C0] Code: 5b e9 73 98 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 50 a0 92 <65> 8b 15 e8 a3 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 394.941497][ C0] RSP: 0018:ffffc9000210f390 EFLAGS: 00000093 [ 394.941510][ C0] RAX: ffffffff816ac358 RBX: ffff8880b863a0f0 RCX: ffff888020ef3c00 [ 394.941523][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.941533][ C0] RBP: 0000000000000000 R08: ffffc9000210f71f R09: 0000000000000000 [ 394.941543][ C0] R10: ffffc9000210f6c8 R11: fffff52000421ee4 R12: 0000000000000000 [ 394.941555][ C0] R13: ffff8880b863a0f8 R14: ffff8880b8639f80 R15: 00000000000001ea [ 394.941567][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 394.941580][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.941591][ C0] CR2: 00007ffd781c5e1c CR3: 000000000df36000 CR4: 00000000003526f0 [ 394.941605][ C0] Call Trace: [ 394.941612][ C0] [ 394.941618][ C0] arch_scale_cpu_capacity+0x18/0xb0 [ 394.941639][ C0] sched_balance_rq+0xb15/0x57a0 [ 394.941685][ C0] ? __pfx_sched_balance_rq+0x10/0x10 [ 394.941712][ C0] ? __lock_acquire+0xab9/0xd20 [ 394.941739][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 394.941782][ C0] ? __lock_acquire+0xab9/0xd20 [ 394.941821][ C0] sched_balance_newidle+0x6b6/0x1030 [ 394.941842][ C0] ? sched_balance_newidle+0x2a6/0x1030 [ 394.941863][ C0] ? do_raw_spin_lock+0x121/0x290 [ 394.941888][ C0] pick_next_task_fair+0x40/0xba0 [ 394.941909][ C0] __pick_next_task+0xe4/0x450 [ 394.941934][ C0] __schedule+0x7a4/0x4cc0 [ 394.941968][ C0] ? __lock_acquire+0xab9/0xd20 [ 394.941992][ C0] ? __pfx___schedule+0x10/0x10 [ 394.942021][ C0] ? schedule+0x91/0x360 [ 394.942043][ C0] schedule+0x165/0x360 [ 394.942065][ C0] worker_thread+0xa82/0xda0 [ 394.942084][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 394.942110][ C0] ? __kthread_parkme+0x7b/0x200 [ 394.942149][ C0] kthread+0x711/0x8a0 [ 394.942169][ C0] ? __pfx_worker_thread+0x10/0x10 [ 394.942185][ C0] ? __pfx_kthread+0x10/0x10 [ 394.942205][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.942224][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.942244][ C0] ? __pfx_kthread+0x10/0x10 [ 394.942263][ C0] ret_from_fork+0x3f9/0x770 [ 394.942298][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 394.942318][ C0] ? __switch_to_asm+0x39/0x70 [ 394.942340][ C0] ? __switch_to_asm+0x33/0x70 [ 394.942362][ C0] ? __pfx_kthread+0x10/0x10 [ 394.942383][ C0] ret_from_fork_asm+0x1a/0x30 [ 394.942414][ C0] [ 394.944042][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 394.944063][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 394.944090][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.944106][ T31] Call Trace: [ 394.944116][ T31] [ 394.944127][ T31] dump_stack_lvl+0x99/0x250 [ 394.944160][ T31] ? __asan_memcpy+0x40/0x70 [ 394.944190][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.944220][ T31] ? __pfx__printk+0x10/0x10 [ 394.944272][ T31] vpanic+0x281/0x750 [ 394.944306][ T31] ? __pfx_vpanic+0x10/0x10 [ 394.944335][ T31] ? preempt_schedule+0xae/0xc0 [ 394.944370][ T31] ? preempt_schedule_common+0x83/0xd0 [ 394.944412][ T31] panic+0xb9/0xc0 [ 394.944440][ T31] ? __pfx_panic+0x10/0x10 [ 394.944471][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 394.944518][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 394.944552][ T31] watchdog+0xfd2/0xfe0 [ 394.944597][ T31] ? watchdog+0x1de/0xfe0 [ 394.944639][ T31] kthread+0x711/0x8a0 [ 394.944677][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.944710][ T31] ? __pfx_kthread+0x10/0x10 [ 394.944744][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.944774][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.944806][ T31] ? __pfx_kthread+0x10/0x10 [ 394.944839][ T31] ret_from_fork+0x3f9/0x770 [ 394.944868][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 394.944910][ T31] ? __switch_to_asm+0x39/0x70 [ 394.944941][ T31] ? __switch_to_asm+0x33/0x70 [ 394.944973][ T31] ? __pfx_kthread+0x10/0x10 [ 394.945005][ T31] ret_from_fork_asm+0x1a/0x30 [ 394.945058][ T31] [ 395.385479][ T31] Kernel Offset: disabled [ 395.389805][ T31] Rebooting in 86400 seconds..