last executing test programs: 23.101448524s ago: executing program 3 (id=2225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="5010000010001fdd2fa95af2a8a7c8e4adc0aaf9e794e63a00000080000002d7efcaaccc714e4f6c64ac222fb8bb7cba621dbc8e6292f94a6fad8089ec6ed7ec573c226f82e295517b2bc05979615a0b49f3625a944da7383cb3f48a34c472331acc83e4e9a4c6e0e8fbe3ed99a17a4c67f36cadfe9ec76db4264523d64a9d8fc341582db019de04f070adab13694c326f01ed66342a21e03da98759a0492abeb0e853f32880c1c5d626188dcce25bd3495ea818f2776951521892a00d3c4ce7f675186cdd96e956eafcd0f269680a8dff3bf515534a427cd29011066722a21cca6614b278b8adf84ca08a34c43c93822fbeed74adeab38d", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x0) r5 = socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) unshare(0x22020600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x44}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_eee={0x44, 0x6, 0x0, 0x5, 0x1, 0xf, 0x0, 0x0, [0x7, 0x7]}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01"], 0x3c}}, 0x0) 22.651536191s ago: executing program 3 (id=2226): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001080006040002aaaaaaaaaabbac148c70d5d0f5b5965b55"], 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dvmrp1\x00'}) (async) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 22.026929929s ago: executing program 3 (id=2231): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2200c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1d}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r5}, 0x8) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="3081d3d77e040000", @ANYRESHEX=r7, @ANYBLOB="00012cbd7000ffdbdf252d00000008000300", @ANYRES32=r9, @ANYRESOCT=r6], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000102}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x78, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "af0c2720fe9f84a3b9442e"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0xd, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x60}}, 0x4000010) r13 = gettid() ioctl$sock_FIOSETOWN(r11, 0x8901, &(0x7f0000000000)=r13) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r15, 0x0, 0x8008000000010, &(0x7f0000005e40)="1700000001a401000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5f, 0x33}}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40000000, 0x58}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0x5e}}, @NL80211_ATTR_PID={0x8, 0x52, r13}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040010}, 0xc000) 21.868626036s ago: executing program 3 (id=2232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1c75, 0x2f}}}}, ["", "", "", ""]}, 0x30}}, 0x880) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) 21.768198115s ago: executing program 3 (id=2233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4504", @ANYRES16=r1, @ANYBLOB="00022cbd7000fbdbdf250300000005002100000000000c000f006be0ffffffffffff06001c004b0000000c000f000a0000000000000008000c0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x3cb200ec0187404a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c60000003a0007012cbd7000fedbdf25037c00000400fc800c00018006000600800a0000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3b}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) (async) sendmsg$alg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x814) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x814) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="10002cbd7000fbdbdf25570000000c009900080000000900000006009500050000000600950071a000000600950002000000060095000700000006009500fdff000006009500c7000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x20004010) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="10002cbd7000fbdbdf25570000000c009900080000000900000006009500050000000600950071a000000600950002000000060095000700000006009500fdff000006009500c7000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x20004010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES16=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xc}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x66}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xc}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x66}, 0x28) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r9, &(0x7f00000009c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x40, 0x0, 0x1, 0x70bd26, 0xc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008010}, 0x4802) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 21.571047515s ago: executing program 3 (id=2234): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="1400508005000200000000000800030001ac0f00"], 0x30}}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f100"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}]}, 0x44}}, 0x20040081) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, 0x1411, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r5) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 18.384599656s ago: executing program 1 (id=2270): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010101, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045dd750e47e4acf8e33696473ec0690766ec8c6bd63758c22c1ad988a2b9eaf393e5bb0940e70740617b2435879d7c7263c81bcfee090f32f1336db0f6222bbc", 0xfd}, {0x0}, {&(0x7f0000001400)="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", 0xbd0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 18.331050707s ago: executing program 4 (id=2271): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x71}]}, &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="00007fffff7ff29cd8bcd1023da7531cfd52294e65cec95219dd00d5f1bf55d5f393339822aa30775de3c50caf87a57c2c3c045795ba0b60312c6e6651b0a49b8e6287d5b748468491fc75a7cf4b95506651bc475025e9cbef9dc289269b360a3a620faa41b713fd6525cafe0b6186d2ecf5d6cf569b7a1a1c531a1097d45ec7beb07f5b0a83839405d2798d", @ANYRES32=0x0, @ANYBLOB="5d5b00000000000014001a80100002800c000180080018000b0000001400350077673100"/48], 0x48}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x7}}, 0x20000005) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x304) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000000)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffa24b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @generic={0x1, 0x2, 0x9, 0x9, 0x87d}], &(0x7f00000000c0)='GPL\x00', 0xde1b, 0x9b, &(0x7f00000001c0)=""/155, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4, 0xc, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffff506}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340)=r6, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x2, 0x7ff, {{0x1b, 0x4, 0x1, 0x35, 0x6c, 0x64, 0x0, 0xa, 0x4, 0x0, @multicast2, @loopback, {[@generic={0x16, 0x2}, @generic={0x89, 0x10, "7d2136b65c5cbef71a452c6ec5f3"}, @timestamp={0x44, 0x24, 0x78, 0x0, 0xa, [0xfffffff7, 0x4, 0x8000, 0x2, 0x9, 0x9474, 0x9, 0x9]}, @timestamp_prespec={0x44, 0x14, 0xc2, 0x3, 0x5, [{@loopback, 0x6}, {@empty, 0x4}]}, @ssrr={0x89, 0xb, 0x31, [@broadcast, @private=0xa010101]}]}}}}}) 18.063015166s ago: executing program 1 (id=2274): pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2a, 0x4, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05a300000000000000000d"], 0x1c}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x40) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000040)) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x1, 0x0) shutdown(r5, 0x2) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x25}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (rerun: 32) 18.014016344s ago: executing program 4 (id=2275): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x6, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x4b, 0x8000, 0x6]}, 0xa) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) 17.959655502s ago: executing program 1 (id=2276): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (rerun: 32) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x5, 0x47}, &(0x7f0000000180)=0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x7, 0x0, &(0x7f00000001c0)="2590d16137ec7e", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 17.857353049s ago: executing program 1 (id=2278): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r0}, 0x38) socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x834) writev(r1, 0x0, 0x0) write$tun(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x8, 0x40, 0x10, r0, 0xd41, '\x00', 0x0, r1, 0x2, 0x4, 0x0, 0xe}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcff00b3e581d25af1b32166ff95fe12ff000100"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000802000001"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) close(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f00000014c0)=""/4088, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) 17.444390331s ago: executing program 2 (id=2280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x8a, 0x0, &(0x7f0000000480)="06000300020000000000208988a8e46686dd49cc64bb61019504861a2a8d6eeba4640fb504894673fb769069ba934c4fcb4baa09ef1b8c841f720cf81fe5272d756d6bfa630900000000f66bf0ac4a9971a1c8f808214d52155652e68951df1dde14280aa4cf1d37564b509345e1203d9572e6840e43fb43cdf9c589f18a8ac5782e005831c9b91c4c9e", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 17.322407203s ago: executing program 2 (id=2282): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x61f0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@deltclass={0xa4, 0x29, 0xf0a, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xd, 0x6}, {0x4, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0xbb, 0xf1}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x1c000, 0x1}}]}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x4}}, @tclass_kind_options=@c_ingress={0xc}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008080}, 0x880) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x7, &(0x7f00000001c0)=[{0x7fff, 0xf2, 0x1, 0x9}, {0x8, 0x36, 0xf0, 0x7}, {0x8, 0x1, 0x0, 0x200}, {0x8000, 0x6, 0x8, 0xffffffff}, {0xfd06, 0x4, 0xd}, {0x3, 0x75, 0xc3, 0x7}, {0xfff, 0xa8, 0xf7, 0x8}]}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200375f3fbd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) unshare(0x6a040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x4008814) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004de827d6c7f883ea400007ea3db22a8c81f0080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="f9ffffff080002000200000014000100"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) unshare(0x600) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782591dfe7817adb263d64bfc7375e68fdcf931661e39a48632335a659eb9daa52907a92dc55225767e2541ffc463faf51d612d874a01fe284b900dfc3ae07a718985e73a96ed4a67b31c6b0605afd89c2d306fac76c44f381bf9dba32f6ea259d1d51b02987b9e1bd3f39730976f1ddee002cb5d30ba518f5209d473fc8182e71a9531c1fec4a5caddef4734d49a16380f8a375c7cd4bced3999cb43da0b8d87ad5ab9f2d39fb4fc761ecfaaa9c0520a57f3c5fe25fea7df7bba7640f0aeb5e5901bee7f69b10a5485dc57ffa9c5328346a282cad3576d6b815e012865edfd25660ca63f7b67f029e31b8e601640983b5cdbb62616b9285f8054982a56ac5618c321b87234b66b10f827e6a1d3094093b75f73dff52cbe4b86e49f19266416804defe3d5488d5d7a1ec2f0276c57944c8064b1243df01c50f3225e87b7cf474becea28f905dd298e793fee5b996b86395c2cec08a1d85df43d855784502797e9de7d8f2fcd9745b9bd7aab3d4cd46d9e1ad3f6c137e9e78316fe0b8474146b27b3e857de06b3a64aa48bcbd185ea51eb83dece2e374be75167c915191a68", 0x999}], 0x1}}], 0x1, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000002c000000030a0102e300000000000000010000000900030073797a32000000000900010073797a310000000020000000000a01080000000000000000010000080900010073797a3100000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 17.024650419s ago: executing program 2 (id=2285): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) (async) r8 = gettid() r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r7, @ANYBLOB="049c01000750050008001300", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r8, r3, 0x0, 0xa, &(0x7f00000000c0)='tlb_flush\x00'}, 0x30) (async) pread64(r5, &(0x7f0000000200)=""/4096, 0x1000, 0x7f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 16.936735423s ago: executing program 0 (id=2286): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000600)={r7, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000180)={r7, 0x4}, &(0x7f0000000200)=0x8) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r9 = socket$pppoe(0x18, 0x1, 0x0) accept4(r9, &(0x7f0000000040)=@in={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x80, 0x80000) 16.858964806s ago: executing program 1 (id=2287): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) accept(r0, 0x0, &(0x7f0000000180)) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, 0x0, 0x620, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x409) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x0, 0x20}, &(0x7f0000000400)=0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x800}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0xfc4780eeffaf71cc) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x74cc0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x74cc0, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket(0x9, 0x5, 0x5) (async) r8 = socket(0x9, 0x5, 0x5) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x80d0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r9, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1c}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x48}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) (async) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r9, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1c}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x48}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r13 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r13, 0x0, 0x484, &(0x7f0000000a00)=""/58, &(0x7f0000000a40)=0x3a) (async) getsockopt$IP_VS_SO_GET_DESTS(r13, 0x0, 0x484, &(0x7f0000000a00)=""/58, &(0x7f0000000a40)=0x3a) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000ac0)={0x0, &(0x7f0000000a80)}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1bc, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c357d0f83b80218d5210fa459016b75e"}]}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a11c647e01b6c6fb44f076331efb8a59"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "63f6764bce6b6a912f0675b1c4e3652973a4f81300abae6ae6b138bcce0c7ada"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ac0a830505510bd9a84f08c086ae1248d210e6b1e461dd5c52b902bcccb8517a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bb88bd6e56f951c5bd635e5991257fe6"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0c47abeb702a9204f6491cd7fb5491f69d7888882535ccb6ef3f09649576a6c6"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fdcb3a13e8a9e10396560ae545b3ca4dbc5aa9f4f5dba687abc344fb6144ad9a"}]}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0xa4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9cdd014cd47564a0accfab684b5d7d4801809b4fc443eb1f61e4e9735f6fe38f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a3f512978a446717430568ca375a57c4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "497738c53ec0af6ceef6c93807768294236fb6924e43bdff8a233a2606dfd3aa"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000010) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r2, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040884}, 0x20084010) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r14 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r14, 0xf505, 0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r14, 0xf505, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000f00)) 16.858471175s ago: executing program 2 (id=2288): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="569a26c5058797f5f67a4bc6d631f80e89e6b9d7627f9dafc16524d58a5a1e13f9eabf1212c73168827243600068a3f6277aa8e51417387ec31176196bfb4d99145278036acf5e6508c5"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x1}, {0xfff1, 0xc}, {0x10, 0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000200)=@req={0xfffffffd, 0x191, 0x400, 0x1000009}, 0x10) socket$packet(0x11, 0x2, 0x300) 16.800287175s ago: executing program 1 (id=2289): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000040)={0xc}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x80) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="577a29be4c834fe105e3399e08de3d945090b935490a65b37419c3391c7a68c302f06f897abc0381c27dd32f", 0x2c}], 0x1, 0x48, 0x3) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0xfffffffd) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x9, 0xf, 0xc, 0x101, 0x7ff}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f030000000100000007000000", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004814) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16.685248594s ago: executing program 0 (id=2290): syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x10, 0x3a, 0x0, @mcast2, @mcast2, {[], @ni={0x1d0899e851774393, 0x0, 0x0, 0x9, 0x5, 0xba}}}}}}, 0x0) 16.559058983s ago: executing program 2 (id=2291): syz_emit_ethernet(0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r0, 0x47) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000200000001000007000080"], 0x1c}, 0x1, 0x0, 0x0, 0x802}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x8, @status={[0xfffffffffffffffe, 0x0, 0x100000000, 0x8, 0x4, 0xfb4]}, [0x7, 0x417, 0x1cde, 0x81, 0x5, 0x40, 0x7, 0x100000001, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0xd27, 0x6, 0x2, 0x480000000000000, 0xffbd, 0x1000, 0x7, 0xff, 0x4bd, 0x18000000, 0x8, 0x62, 0x8001, 0xb1b, 0x7, 0x9, 0x81, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x4, 0x800, 0x0, 0x2, 0xe, 0x3, 0x9, 0xffffffff, 0x1, 0x3, 0x6, 0x7fff, 0x401, 0x1, 0xfffffffffffffffd, 0xf, 0x100000001, 0x0, 0x6, 0x8]}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x88, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 16.558360805s ago: executing program 0 (id=2292): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x8a, 0x0, &(0x7f0000000480)="06000300020000000000208988a8e46686dd49cc64bb61019504861a2a8d6eeba4640fb504894673fb769069ba934c4fcb4baa09ef1b8c841f720cf81fe5272d756d6bfa630900000000f66bf0ac4a9971a1c8f808214d52155652e68951df1dde14280aa4cf1d37564b509345e1203d9572e6840e43fb43cdf9c589f18a8ac5782e005831c9b91c4c9e", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 16.449881044s ago: executing program 2 (id=2293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24004004) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xffffffffffffff4b, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd01200000200000000"], 0xb8}}, 0x4004) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}], 0x2) 16.441536719s ago: executing program 0 (id=2294): r0 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010800000000000000d53100000004"], 0x18}}, 0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) socket$unix(0x1, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010800000000000000d53100000004"], 0x18}}, 0x0) (async) bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) 16.331212257s ago: executing program 0 (id=2295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, &(0x7f00000000c0)) (async) 16.30108872s ago: executing program 0 (id=2296): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) sendmmsg(r0, &(0x7f0000001100)=[{{&(0x7f0000000340)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000000600)=[{0xb8, 0x111, 0x7, "750c78c9c466e066e1473d99f059f75ebea87de8565692e7e4c453ac68ba531e81ecfc4e2ea35833b5a02aeefd1749fd968adff41663e9fc45730548de97865d1afdf1b78a25d85981c463d73554d92dde867e0929f5e19be2523f7d5f9b6c41c5c33c37e93d6c96ce256b885fef03186fdb74c32cb03313a734d60ed179bc38bfbf4a1686fa42a3eb63b556df3ae78c5db4574f1643bf1658d710b31025871a89681749"}, {0x70, 0x102, 0x5, "f8de4aca25b9b6e65cce0d0b17de6b2ec34c73be4bd4873302f9f7655421c21b6342bfa2f63d450b2383942491661278a3874895e4d49faa1fd4e8a2b01974df42b38c2956fe00267964407e7a48ddc0f031e2c09090f1faad"}, {0xf8, 0x84, 0x800, "411133d1add09f7eea0dc77820b5af53fbda1bef354607cf698e62dc2373a86e65f1ca8da2e3e52dc63862894495c00be8137c9b344424cece83e5a661d703701546b87cee69cfa8fb59f91c1c4a2e4302b097afa7a12bdba795cf5c774c37df0742faa69a1f16823c73adb6ba61a9648282c3e8f7319f63daa8889eb82bf619cd56c58bc8b38f63590d678bd3b98770bf3cbe461d66f2c522707739a1cadeabe452d532e541bb3b26a06a400f7e4e95a5aeadc6d11acdd24a4cf67d1a24243976f0ef13bad5ed0ae8636a9caa3167dc00b1ae95fcba16062189e0cca94b85b1da2d"}], 0x220}}, {{&(0x7f0000000480)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)="b11b097afd74142cba4d683071e40b549b407be09001d11d1996a6d487f95e013721f6", 0x23}, {&(0x7f0000000840)="27cb0d87fcbe442db37fc8e05eafa3817ea6a70b754c63cb2d8f9f3ad5b8683c368105ce918e6aac39276aa38e02c98c25418a1b6d50cd357b271e5d36a66998555057dac4c8169a58427e946cf5d84362e8eede6348860eab9a2d5c3b49047f53bcab4d44419d7ae56bc02e6b36e741712fe5b8b61daea4f32e1f0c8c176799aee7946a5937919ab51d592870a66f25beddb9ff6507169421bf6c010bac439b16a483afeaf212c255e1c16d05f0dc", 0xaf}, {&(0x7f0000000540)="2e3cda6f3bbf713393", 0x9}], 0x3}}, {{&(0x7f0000000940)=@phonet={0x23, 0x2, 0xb5}, 0x80, &(0x7f0000000d80)=[{&(0x7f00000009c0)="ce3345b611dff8e252f376646909db269a8a2e9ff2be27215869a2d7782d0cb305f8180e4d92a6cf01521c3560d9399c11cc048184cc4587a09b28cb52561de193e3d8d253b1830fc81860c0593434cb4a63f2a6f4e0b9500145fc26b3e88f211f5ba7", 0x63}, {&(0x7f0000000a40)="f733a3f19df01b2b585091de684dd4eefdb4917660cd710d8a18c3f0b64877c49b3c5e67a53e0c6186d1ad78d8383d1041680f3ce2dd00400d5029b0f681a0055239056b271890bdbc2632f45c6f1d88dc3513c092ca04de989d3a413164c5fb544b4e04f41a540537440f598ec85a8c178de9b649cc5ee5594e7494853ed9f20c68ca852b62c25a33f33d9185fcfb478e81e45250ae1eaf81cf47f3b1898e2bdf99ee3a8f80b2c635bd472108779c529b3408f35eb774e75771cc48", 0xbc}, {&(0x7f0000000b00)="0c8cf96ba55f1ff29d51462af6e82bc82380b1b865bcb8df9140159cc27b9a7e3fe24ca8297cf4749ddccfbcc19a3f6efe6b102d34a31fd15a1409138d87a4c2fe5ab6c41672b6741c1800062baf4228f09c8734750fb787c100e04aefdf9f6eca288664b8416d556ecccf4676707f29", 0x70}, {&(0x7f0000000b80)="bddd0d4d4981aee99dda07777312c9aaa546bee7ab92cf78fc63d861252e071bc62aacb133fe0d895bad1c7bcd532f45cd6810e9a5c9a6ae379383aff932f1", 0x3f}, {&(0x7f0000000bc0)="ece2f8b74dbd52baf4bc2496d51c0d3c73f519a326f6c95a00466c4429f4aa3cb4111a7877e19830c0a508885ef51a9239e51878e7126afc110bb1fed14fbeac17488017cd4b5169e17578a7ffded01e97e1675fda6a332129f96275fd699d30ae8d5ccc0d8d069b297b2ae5adc49bdab0b3b23d1af609df323f87520aad64ef3a784b8601aa020177ab1e67e1bd03a3990c28ac81ae93412c7962ea1fb22067eeebe481d01ef91e39fdd5cebf9eda50", 0xb0}, {&(0x7f0000000c80)="c05e11ad4f71646cb451c8218c8394c4724f5fb21e49c431ade53c571e9d67817e4df84d9081fc572c62cbf0a16d72d03ab3efd4a44b4d1d1d61ab0d641bc7dd8c4e9f68c4faf06aca08c0bc2d3682f72fe1699feedcfb74946e4f9334eff8447f88fa352bf331cd66ffe558ef1a733527f350a7c0dca04bbe7e2f5fd15445ced79fa9d6f49fdd2de5bd72b5ad5c3ec4", 0x90}], 0x6, &(0x7f0000001bc0)=[{0xc8, 0x110, 0x6, "c76b4eb75cdca5e0313b019035e8951aebf6c6c0ae4effb96002eb6fdec8eec99270e88fc04a1e8c9725c3b9679117ec88ce63340d61eaba69c06a67ebf8e7f470ec3e804448cc0b7914feba9ce9b0615b0ef3801d4ef6cb369d86efe48b577f87e08936c8fa14e1490121557f770397098901d0d6fbd428e9efa34f01faf29e81f832a0420b204d5eb8c39cbd1271fa3d6ec296876086d43444fab1e327e16357e28ee83bba1a84e6733ebaa596201c1ba389"}, {0x1010, 0x1, 0x2, "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"}, {0x40, 0x0, 0x5, "ed9e6d31ac1658f3ab105b488b1ea5462edbfd88939eff32edc91c329a822d4b79004b2708e361d5f6a89cf8ba700211"}, {0x18, 0xff, 0x5, "00c5468b9b14a546"}, {0xa0, 0x104, 0x9, "130c2ae261e37c880a880a80bb18d264f06b8b296c1a7b9ecc936e87d208c02209f1e51b737892bc7d53e7fc27659da67fbede92701d8346684a3f6d1be5baa1f13a58d33fdf71c9244b2bc2acb937b779b67208de06726b63d737b8a969f08b7d142aadf1c5f03a739786967621a351418f5b66cfbd6a0204d9579a06cb9a93532b1a675321f520042dfddc3a"}, {0xd0, 0x10f, 0x72a3, "546ce8b5fc93879f525d755806e3e6a6eb08ac16a5982affc81cfd4407f529244b2ff4903a2d8dd40fe466994f058270b5d349a066c6165a412db328559a4b972cfdcf362286131799c5bae573acb66cea19c8c0bc54f13df44aae54f0e91c90e9f9faa0c1e589cda79dba7fc85420a59a9a72df7fba2f7059fc9aa91864dc9b7d99a784a072220ea06c76a50b2946be3a8524cd52ecbc1ad88bd564030682add83900ac7f54ec67f62ba5801dee0cb9a461fdedbea61a9e5a0a453b8edc5f"}, {0x40, 0x10f, 0x0, "b59b2e8b7d67cff79a8d984ce37f40f0a2d40ba6b6cf0db1d662f2798af3fa1a8425992b413bf79a70eb59c604"}], 0x12e0}}, {{&(0x7f0000000e00)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e80)="dc62cf82a1b25c8c102fe3811f5bd53329cd8ec471c5e7731727441638c9d70ffda6f933365e25902f3bfc4baddd6e13a6668d52626cb46ec04ac8d94b46709458f02940ac", 0x45}, {&(0x7f0000000f00)="1d352cddd254a8077a276388e1feeb248b624abc33cac5dc9ae5467f9521c5a4bb08f42f1d00f2d3283ad94ad0d8bc003100e2259085c6e80b6de29039a84b52a5b8b0342ab2ebec235ac7745907e020ee5b324095cf64a2d3074395a2a12c3f8bae9e7f8b4894f932fadf249832126b77be27918b01cad0fdff3e86ce4516e6e0aa77f20578159fa844473139fa1eebefa1ff5bafa23dc89bb368349189fa9ecb3517", 0xa3}, {&(0x7f0000000fc0)="3768866a37076c027581a8127f2a8d4b015c08d0c68c6d4f5b98e5bb21043bc311cd4ebb6941ee05899444ba99d30c9d70ffe11a927fffe55d6e098d49e76879583276cc6463363a377d2a360696df0109897afa878273669ab14afbd4b31c935f2ce337c27b1a692b61f78a1de1d966dc", 0x71}], 0x3, &(0x7f0000001080)=[{0x70, 0x107, 0x9, "61ccf4c4a5b7e38a878b4beaefeafc856a4b8dc6e20ca17299d55a2cb6044a828c579b202a39200ae5d3f4e37ea287e756b1c50385e915ace705bd4c0b0823f2fde9c1a1971db697858bbdbd2884a93f4171d161a1d0b55fecec53b805123006"}], 0x70}}], 0x4, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x2000000) r6 = accept4$nfc_llcp(r4, &(0x7f0000000080), &(0x7f0000000200)=0x60, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x41, 0x7fffffff, 0x68, 0x5, 0x2, 0x2000, 0x8, 0xd74c, 0x8, 0xa, 0x4, 0x5, 0x2, 0x7, 0xfffffffd, 0xb, 0x1, 0x0, 0x1ff, 0x4, 0x8, 0x5, 0x0, 0x4, 0x7fffffff, 0xf52, 0x2, 0x3, 0x9, 0x2, 0x2, 0x40, 0x1, 0x7, 0xb067, 0xd, 0x0, 0x3, 0x3, 0xb, 0x7, 0x1, 0x2, 0xff, 0x6, 0x5c, 0x400, 0x3, 0x3, 0x6, 0xda4, 0x201, 0x3, 0x8, 0xfffffff9, 0x1, 0x8, 0x9, 0x6, 0x0, 0x5, 0x2, 0x5, 0xc, 0x5, 0x101, 0x4, 0x9, 0xfffffffb, 0x3, 0x80000000, 0xfffdfff7, 0x7ff, 0x0, 0x4, 0x499, 0x8, 0x7, 0x0, 0xffffff7f, 0x3, 0x6, 0x2, 0xf633, 0xf1, 0xa, 0x2, 0xfffffff6, 0x2, 0xff, 0x40, 0x1, 0x3, 0x8000, 0x3, 0x9, 0x456, 0x0, 0xeb, 0xffffffff, 0x9, 0x8, 0x40, 0x3, 0x9, 0xe, 0x4962, 0x5, 0x76d, 0xb, 0x54b, 0x8, 0x7, 0x1, 0x9, 0x3, 0x81, 0x6, 0x6, 0x7, 0x1, 0x2, 0x2, 0x80000001, 0x8, 0xffffffff, 0x9aba, 0x1e3, 0xc, 0x80, 0x5, 0x8000, 0x4, 0x400, 0x401, 0x90, 0xa60, 0x6, 0xffffff25, 0x0, 0x2, 0x9a, 0x80, 0x0, 0x7f, 0x5, 0x9, 0x10000, 0x618a, 0x6, 0xfffffff3, 0x0, 0x80000000, 0xf, 0x3, 0x2, 0xd, 0x7fff, 0x8, 0xffff8001, 0x5, 0x9, 0x9, 0x8001, 0x0, 0x6, 0x9, 0x10001, 0xc, 0x1, 0xb, 0x98000000, 0x5, 0xfffffff7, 0x0, 0x4, 0x2, 0x6, 0x9, 0x4, 0x6, 0x10000, 0x200, 0x4, 0x6, 0x7fffffff, 0x1ff, 0x8, 0x7b4c, 0x4b7b, 0x8, 0x7fff, 0xe66d, 0x40, 0x1, 0xfffffff7, 0x6, 0x19c, 0x3, 0x101, 0x10000, 0x6, 0x9, 0xb2, 0x7, 0xfb1, 0x6, 0x8, 0x200000, 0x81, 0x3, 0xfffffffd, 0xfffffff9, 0x2, 0x0, 0x8001, 0x7fff, 0x1000, 0x8, 0x7fe00000, 0x4, 0x8, 0x1, 0xfffffff1, 0x7, 0x4, 0x8fad, 0xbb, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x0, 0x1, 0xb, 0x3, 0x8, 0x7, 0x2, 0x82a, 0x401, 0x50b, 0xfdb4, 0x8000, 0x4, 0x3, 0x586, 0x9, 0x1c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x2, 0xd, 0x50000000, 0x1ff, 0x8530, 0x3ff, 0xc0, 0x3, 0x2, 0x8, 0x8276, 0x6, 0x9cb6, 0x44bd4947, 0x9, 0x7, 0x10001, 0x200, 0xfff, 0xffff7360, 0xf, 0xb, 0x5, 0x4, 0xfffeffff, 0xfff, 0xffff, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x2, 0xffff0000, 0x3, 0x0, 0x3, 0x6, 0x2, 0xa, 0x3, 0x6509, 0x4, 0x8, 0xd83, 0xff, 0x8000, 0x101, 0x6, 0x20000000, 0x3, 0xa77, 0xa64d, 0x8, 0x1c1a, 0x0, 0x8, 0x40, 0x0, 0x2, 0x9, 0x4c, 0xd55, 0x5068f63a, 0x7, 0x5b, 0x40, 0x9, 0xfffffffd, 0x9, 0xb6d, 0x2e, 0x31, 0x9, 0x9e4, 0x1, 0x1, 0x10000, 0x401, 0x3, 0x7ff, 0xe31d, 0x400, 0xfc40, 0x5, 0x2, 0x10, 0x7, 0x7fff, 0x3, 0x2, 0x1, 0xa, 0x6, 0x81, 0xd0, 0x1, 0xe, 0xe0, 0xc0000, 0x8, 0x6, 0x6, 0x0, 0x200006, 0x2, 0x80, 0x1, 0x8, 0x0, 0x9, 0x8, 0x3, 0xfffffff8, 0x9, 0xe85, 0x8000, 0x7, 0x5, 0x1, 0x2, 0x2, 0x2, 0x3, 0x4, 0x0, 0xf274, 0x4, 0x3, 0x1, 0x8, 0x0, 0x6, 0x10, 0x5, 0x1000, 0x5, 0x4, 0x4, 0x8, 0x2, 0x0, 0x3, 0x4ef, 0x81b1c8ea, 0x1, 0x2, 0x6, 0x7, 0x1, 0x0, 0x35, 0x1, 0x401, 0x3, 0xff, 0xd7, 0x2, 0x9, 0x1, 0xba1c, 0x5, 0x0, 0x1, 0xfff, 0x3, 0x4, 0x67c36367, 0x6, 0x7, 0x2, 0x83a, 0x942, 0x10, 0x1, 0x10001, 0x8, 0x3, 0x254, 0xffffffff, 0xecdb, 0x9, 0x200, 0x1000, 0x5, 0x2, 0x8, 0x100, 0x7fffffff, 0x78, 0xfffffffa, 0x0, 0x0, 0xc, 0x1ff, 0xee48, 0x0, 0x9, 0x1, 0x1, 0x1, 0x2, 0xe, 0x8, 0x3, 0x1000, 0xd0e, 0xc6, 0x1, 0xcf5, 0xb20, 0x4, 0x9a51, 0x8bd0, 0xce, 0x7e, 0x0, 0x9, 0xd6, 0xc81, 0xfff, 0x4, 0x200, 0x0, 0x6, 0x8, 0x101, 0x32, 0x9dd, 0x7, 0x100, 0x38, 0xe, 0x6, 0xe, 0x6, 0x100, 0x6, 0x8, 0xb, 0xffff3583, 0x7, 0x9, 0x5, 0xfffffff9, 0x9db, 0x80000001, 0x5, 0x6ac6, 0x1000, 0x1, 0xfb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x43a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x0, 0x2, 0x6, {0x4, 0x0, 0x7ff, 0x1, 0x5, 0x78b}, {0x5, 0x0, 0x3, 0xa, 0x1, 0x7}, 0xba, 0x6, 0x40}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r10, r9, 0x0, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd5a960000df25022000cb", @ANYRES32, @ANYBLOB="08000400640101020800080000010000080002"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) ioctl$SIOCAX25GETUID(r11, 0x89e0, &(0x7f00000002c0)={0x3, @null, 0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x1000}, {0x8, 0xf, 0x0, 0x0, 0x10}, {0x8, 0xe, 0x0, 0x0, 0xfffffff2}, {0x8, 0x16, 0x0, 0x0, 0x9}]}}]}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x6c}}, 0x440088c4) 15.572064572s ago: executing program 4 (id=2297): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x20007ff}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x5, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x6, 0x7ff}, 0x28) 15.495012367s ago: executing program 4 (id=2298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="78560000052c5a200bcae20430d4ff0c133b86075d9aadc11d54afa11f08000000fcd56af726a4d7057d0646a73d44105b27399778072eccba52a545cfa33910ba91e2fe9d", @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf253800000008000300", @ANYRES32=r1, @ANYBLOB="0400580067000000000000000c00580076000000000000000c0058002f000001000000000c00580010000000000000000c00580073000000000000000c00583c9767756186ef298117e439001b0000000000100000f1ffffffff0b0058002c000000000000000c00580004000000f01200a6239e26816088192cee23320ab111000c0058001700000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x404c804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0xf, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91020000000000b7020000000000006d00000084000000b7000000000000009500000000000000"], &(0x7f0000001200)='GPL\x00', 0xc, 0x51, &(0x7f0000001240)=""/81, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x1, 0x1, 0x6, 0xd}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1e85544879f9448a}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x80, 0x8000, 0x6b, 0x9, {{0x23, 0x4, 0x1, 0x25, 0x8c, 0x65, 0x0, 0x55, 0x6, 0x0, @loopback, @empty, {[@ssrr={0x89, 0x7, 0xa4, [@loopback]}, @timestamp={0x44, 0x18, 0x43, 0x0, 0x8, [0x9d0f, 0x7, 0x0, 0x5, 0x4]}, @timestamp_addr={0x44, 0x24, 0x53, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x9630}, {@private=0xa010102, 0x3}, {@multicast2, 0xffffffff}, {@multicast1, 0x80000000}]}, @lsrr={0x83, 0x27, 0xac, [@rand_addr=0x64010102, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @multicast1]}, @timestamp={0x44, 0xc, 0x9d, 0x0, 0xe, [0x4, 0x99d]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r7, 0x4) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe040001", @ANYRES8=r9], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11, r10}, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRES8=r8], 0x110}, 0x1, 0x0, 0x0, 0x4001}, 0x40) 15.484758596s ago: executing program 4 (id=2299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async, rerun: 64) listen(r1, 0x5) (async, rerun: 64) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x18, 0xb3, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x3, @remote, 0x8}}]}, 0x38}}, 0x8040) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) shutdown(0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) (async) socket$netlink(0x10, 0x3, 0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000000)={{r6}, 0x2a, 0x80000007ff, 0x2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={r4}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 15.20532348s ago: executing program 4 (id=2300): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="1408000014000100000000002000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x200000c0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400004477a90416e829dfe10fa71400000000000000000000000000000400000000000000000000665cc5d10cc80b0b0847d1284ad4962dd416ed52a054bd8b09a9cf7cdf"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) unshare(0x6020480) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x100}) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000005c0)={'bridge0\x00', 0x400}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000080)=0x2) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r9, @ANYBLOB="3bed899c5b84421465dc2cd27b25ba1d11866f9ee07100f89032f1757af9da323f442723ff31f66c0d8542c96c3ecde9fbfd24d5027cce75decee1739879e4987118f89a39336de7cfe3e938ccdbccb1645c78f0c528fae56a69fcfcdefddc6c187af7ccdc5d6d68a0e83d9104b83dd8a32d084dbbbc7b90ba53c1e0f760a277d4a217d54200dbf9277de8645f2e3117c80a79cdf0f2db775a32e67828cd0d8f265f50c4ed268f6dec"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) 6.110740003s ago: executing program 32 (id=2234): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="1400508005000200000000000800030001ac0f00"], 0x30}}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f100"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}]}, 0x44}}, 0x20040081) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, 0x1411, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r5) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.107087093s ago: executing program 33 (id=2296): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) sendmmsg(r0, &(0x7f0000001100)=[{{&(0x7f0000000340)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000000600)=[{0xb8, 0x111, 0x7, "750c78c9c466e066e1473d99f059f75ebea87de8565692e7e4c453ac68ba531e81ecfc4e2ea35833b5a02aeefd1749fd968adff41663e9fc45730548de97865d1afdf1b78a25d85981c463d73554d92dde867e0929f5e19be2523f7d5f9b6c41c5c33c37e93d6c96ce256b885fef03186fdb74c32cb03313a734d60ed179bc38bfbf4a1686fa42a3eb63b556df3ae78c5db4574f1643bf1658d710b31025871a89681749"}, {0x70, 0x102, 0x5, "f8de4aca25b9b6e65cce0d0b17de6b2ec34c73be4bd4873302f9f7655421c21b6342bfa2f63d450b2383942491661278a3874895e4d49faa1fd4e8a2b01974df42b38c2956fe00267964407e7a48ddc0f031e2c09090f1faad"}, {0xf8, 0x84, 0x800, "411133d1add09f7eea0dc77820b5af53fbda1bef354607cf698e62dc2373a86e65f1ca8da2e3e52dc63862894495c00be8137c9b344424cece83e5a661d703701546b87cee69cfa8fb59f91c1c4a2e4302b097afa7a12bdba795cf5c774c37df0742faa69a1f16823c73adb6ba61a9648282c3e8f7319f63daa8889eb82bf619cd56c58bc8b38f63590d678bd3b98770bf3cbe461d66f2c522707739a1cadeabe452d532e541bb3b26a06a400f7e4e95a5aeadc6d11acdd24a4cf67d1a24243976f0ef13bad5ed0ae8636a9caa3167dc00b1ae95fcba16062189e0cca94b85b1da2d"}], 0x220}}, {{&(0x7f0000000480)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)="b11b097afd74142cba4d683071e40b549b407be09001d11d1996a6d487f95e013721f6", 0x23}, {&(0x7f0000000840)="27cb0d87fcbe442db37fc8e05eafa3817ea6a70b754c63cb2d8f9f3ad5b8683c368105ce918e6aac39276aa38e02c98c25418a1b6d50cd357b271e5d36a66998555057dac4c8169a58427e946cf5d84362e8eede6348860eab9a2d5c3b49047f53bcab4d44419d7ae56bc02e6b36e741712fe5b8b61daea4f32e1f0c8c176799aee7946a5937919ab51d592870a66f25beddb9ff6507169421bf6c010bac439b16a483afeaf212c255e1c16d05f0dc", 0xaf}, {&(0x7f0000000540)="2e3cda6f3bbf713393", 0x9}], 0x3}}, {{&(0x7f0000000940)=@phonet={0x23, 0x2, 0xb5}, 0x80, &(0x7f0000000d80)=[{&(0x7f00000009c0)="ce3345b611dff8e252f376646909db269a8a2e9ff2be27215869a2d7782d0cb305f8180e4d92a6cf01521c3560d9399c11cc048184cc4587a09b28cb52561de193e3d8d253b1830fc81860c0593434cb4a63f2a6f4e0b9500145fc26b3e88f211f5ba7", 0x63}, {&(0x7f0000000a40)="f733a3f19df01b2b585091de684dd4eefdb4917660cd710d8a18c3f0b64877c49b3c5e67a53e0c6186d1ad78d8383d1041680f3ce2dd00400d5029b0f681a0055239056b271890bdbc2632f45c6f1d88dc3513c092ca04de989d3a413164c5fb544b4e04f41a540537440f598ec85a8c178de9b649cc5ee5594e7494853ed9f20c68ca852b62c25a33f33d9185fcfb478e81e45250ae1eaf81cf47f3b1898e2bdf99ee3a8f80b2c635bd472108779c529b3408f35eb774e75771cc48", 0xbc}, {&(0x7f0000000b00)="0c8cf96ba55f1ff29d51462af6e82bc82380b1b865bcb8df9140159cc27b9a7e3fe24ca8297cf4749ddccfbcc19a3f6efe6b102d34a31fd15a1409138d87a4c2fe5ab6c41672b6741c1800062baf4228f09c8734750fb787c100e04aefdf9f6eca288664b8416d556ecccf4676707f29", 0x70}, {&(0x7f0000000b80)="bddd0d4d4981aee99dda07777312c9aaa546bee7ab92cf78fc63d861252e071bc62aacb133fe0d895bad1c7bcd532f45cd6810e9a5c9a6ae379383aff932f1", 0x3f}, {&(0x7f0000000bc0)="ece2f8b74dbd52baf4bc2496d51c0d3c73f519a326f6c95a00466c4429f4aa3cb4111a7877e19830c0a508885ef51a9239e51878e7126afc110bb1fed14fbeac17488017cd4b5169e17578a7ffded01e97e1675fda6a332129f96275fd699d30ae8d5ccc0d8d069b297b2ae5adc49bdab0b3b23d1af609df323f87520aad64ef3a784b8601aa020177ab1e67e1bd03a3990c28ac81ae93412c7962ea1fb22067eeebe481d01ef91e39fdd5cebf9eda50", 0xb0}, {&(0x7f0000000c80)="c05e11ad4f71646cb451c8218c8394c4724f5fb21e49c431ade53c571e9d67817e4df84d9081fc572c62cbf0a16d72d03ab3efd4a44b4d1d1d61ab0d641bc7dd8c4e9f68c4faf06aca08c0bc2d3682f72fe1699feedcfb74946e4f9334eff8447f88fa352bf331cd66ffe558ef1a733527f350a7c0dca04bbe7e2f5fd15445ced79fa9d6f49fdd2de5bd72b5ad5c3ec4", 0x90}], 0x6, &(0x7f0000001bc0)=[{0xc8, 0x110, 0x6, "c76b4eb75cdca5e0313b019035e8951aebf6c6c0ae4effb96002eb6fdec8eec99270e88fc04a1e8c9725c3b9679117ec88ce63340d61eaba69c06a67ebf8e7f470ec3e804448cc0b7914feba9ce9b0615b0ef3801d4ef6cb369d86efe48b577f87e08936c8fa14e1490121557f770397098901d0d6fbd428e9efa34f01faf29e81f832a0420b204d5eb8c39cbd1271fa3d6ec296876086d43444fab1e327e16357e28ee83bba1a84e6733ebaa596201c1ba389"}, {0x1010, 0x1, 0x2, "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"}, {0x40, 0x0, 0x5, "ed9e6d31ac1658f3ab105b488b1ea5462edbfd88939eff32edc91c329a822d4b79004b2708e361d5f6a89cf8ba700211"}, {0x18, 0xff, 0x5, "00c5468b9b14a546"}, {0xa0, 0x104, 0x9, "130c2ae261e37c880a880a80bb18d264f06b8b296c1a7b9ecc936e87d208c02209f1e51b737892bc7d53e7fc27659da67fbede92701d8346684a3f6d1be5baa1f13a58d33fdf71c9244b2bc2acb937b779b67208de06726b63d737b8a969f08b7d142aadf1c5f03a739786967621a351418f5b66cfbd6a0204d9579a06cb9a93532b1a675321f520042dfddc3a"}, {0xd0, 0x10f, 0x72a3, "546ce8b5fc93879f525d755806e3e6a6eb08ac16a5982affc81cfd4407f529244b2ff4903a2d8dd40fe466994f058270b5d349a066c6165a412db328559a4b972cfdcf362286131799c5bae573acb66cea19c8c0bc54f13df44aae54f0e91c90e9f9faa0c1e589cda79dba7fc85420a59a9a72df7fba2f7059fc9aa91864dc9b7d99a784a072220ea06c76a50b2946be3a8524cd52ecbc1ad88bd564030682add83900ac7f54ec67f62ba5801dee0cb9a461fdedbea61a9e5a0a453b8edc5f"}, {0x40, 0x10f, 0x0, "b59b2e8b7d67cff79a8d984ce37f40f0a2d40ba6b6cf0db1d662f2798af3fa1a8425992b413bf79a70eb59c604"}], 0x12e0}}, {{&(0x7f0000000e00)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e80)="dc62cf82a1b25c8c102fe3811f5bd53329cd8ec471c5e7731727441638c9d70ffda6f933365e25902f3bfc4baddd6e13a6668d52626cb46ec04ac8d94b46709458f02940ac", 0x45}, {&(0x7f0000000f00)="1d352cddd254a8077a276388e1feeb248b624abc33cac5dc9ae5467f9521c5a4bb08f42f1d00f2d3283ad94ad0d8bc003100e2259085c6e80b6de29039a84b52a5b8b0342ab2ebec235ac7745907e020ee5b324095cf64a2d3074395a2a12c3f8bae9e7f8b4894f932fadf249832126b77be27918b01cad0fdff3e86ce4516e6e0aa77f20578159fa844473139fa1eebefa1ff5bafa23dc89bb368349189fa9ecb3517", 0xa3}, {&(0x7f0000000fc0)="3768866a37076c027581a8127f2a8d4b015c08d0c68c6d4f5b98e5bb21043bc311cd4ebb6941ee05899444ba99d30c9d70ffe11a927fffe55d6e098d49e76879583276cc6463363a377d2a360696df0109897afa878273669ab14afbd4b31c935f2ce337c27b1a692b61f78a1de1d966dc", 0x71}], 0x3, &(0x7f0000001080)=[{0x70, 0x107, 0x9, "61ccf4c4a5b7e38a878b4beaefeafc856a4b8dc6e20ca17299d55a2cb6044a828c579b202a39200ae5d3f4e37ea287e756b1c50385e915ace705bd4c0b0823f2fde9c1a1971db697858bbdbd2884a93f4171d161a1d0b55fecec53b805123006"}], 0x70}}], 0x4, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x2000000) r6 = accept4$nfc_llcp(r4, &(0x7f0000000080), &(0x7f0000000200)=0x60, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x41, 0x7fffffff, 0x68, 0x5, 0x2, 0x2000, 0x8, 0xd74c, 0x8, 0xa, 0x4, 0x5, 0x2, 0x7, 0xfffffffd, 0xb, 0x1, 0x0, 0x1ff, 0x4, 0x8, 0x5, 0x0, 0x4, 0x7fffffff, 0xf52, 0x2, 0x3, 0x9, 0x2, 0x2, 0x40, 0x1, 0x7, 0xb067, 0xd, 0x0, 0x3, 0x3, 0xb, 0x7, 0x1, 0x2, 0xff, 0x6, 0x5c, 0x400, 0x3, 0x3, 0x6, 0xda4, 0x201, 0x3, 0x8, 0xfffffff9, 0x1, 0x8, 0x9, 0x6, 0x0, 0x5, 0x2, 0x5, 0xc, 0x5, 0x101, 0x4, 0x9, 0xfffffffb, 0x3, 0x80000000, 0xfffdfff7, 0x7ff, 0x0, 0x4, 0x499, 0x8, 0x7, 0x0, 0xffffff7f, 0x3, 0x6, 0x2, 0xf633, 0xf1, 0xa, 0x2, 0xfffffff6, 0x2, 0xff, 0x40, 0x1, 0x3, 0x8000, 0x3, 0x9, 0x456, 0x0, 0xeb, 0xffffffff, 0x9, 0x8, 0x40, 0x3, 0x9, 0xe, 0x4962, 0x5, 0x76d, 0xb, 0x54b, 0x8, 0x7, 0x1, 0x9, 0x3, 0x81, 0x6, 0x6, 0x7, 0x1, 0x2, 0x2, 0x80000001, 0x8, 0xffffffff, 0x9aba, 0x1e3, 0xc, 0x80, 0x5, 0x8000, 0x4, 0x400, 0x401, 0x90, 0xa60, 0x6, 0xffffff25, 0x0, 0x2, 0x9a, 0x80, 0x0, 0x7f, 0x5, 0x9, 0x10000, 0x618a, 0x6, 0xfffffff3, 0x0, 0x80000000, 0xf, 0x3, 0x2, 0xd, 0x7fff, 0x8, 0xffff8001, 0x5, 0x9, 0x9, 0x8001, 0x0, 0x6, 0x9, 0x10001, 0xc, 0x1, 0xb, 0x98000000, 0x5, 0xfffffff7, 0x0, 0x4, 0x2, 0x6, 0x9, 0x4, 0x6, 0x10000, 0x200, 0x4, 0x6, 0x7fffffff, 0x1ff, 0x8, 0x7b4c, 0x4b7b, 0x8, 0x7fff, 0xe66d, 0x40, 0x1, 0xfffffff7, 0x6, 0x19c, 0x3, 0x101, 0x10000, 0x6, 0x9, 0xb2, 0x7, 0xfb1, 0x6, 0x8, 0x200000, 0x81, 0x3, 0xfffffffd, 0xfffffff9, 0x2, 0x0, 0x8001, 0x7fff, 0x1000, 0x8, 0x7fe00000, 0x4, 0x8, 0x1, 0xfffffff1, 0x7, 0x4, 0x8fad, 0xbb, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x0, 0x1, 0xb, 0x3, 0x8, 0x7, 0x2, 0x82a, 0x401, 0x50b, 0xfdb4, 0x8000, 0x4, 0x3, 0x586, 0x9, 0x1c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x2, 0xd, 0x50000000, 0x1ff, 0x8530, 0x3ff, 0xc0, 0x3, 0x2, 0x8, 0x8276, 0x6, 0x9cb6, 0x44bd4947, 0x9, 0x7, 0x10001, 0x200, 0xfff, 0xffff7360, 0xf, 0xb, 0x5, 0x4, 0xfffeffff, 0xfff, 0xffff, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x2, 0xffff0000, 0x3, 0x0, 0x3, 0x6, 0x2, 0xa, 0x3, 0x6509, 0x4, 0x8, 0xd83, 0xff, 0x8000, 0x101, 0x6, 0x20000000, 0x3, 0xa77, 0xa64d, 0x8, 0x1c1a, 0x0, 0x8, 0x40, 0x0, 0x2, 0x9, 0x4c, 0xd55, 0x5068f63a, 0x7, 0x5b, 0x40, 0x9, 0xfffffffd, 0x9, 0xb6d, 0x2e, 0x31, 0x9, 0x9e4, 0x1, 0x1, 0x10000, 0x401, 0x3, 0x7ff, 0xe31d, 0x400, 0xfc40, 0x5, 0x2, 0x10, 0x7, 0x7fff, 0x3, 0x2, 0x1, 0xa, 0x6, 0x81, 0xd0, 0x1, 0xe, 0xe0, 0xc0000, 0x8, 0x6, 0x6, 0x0, 0x200006, 0x2, 0x80, 0x1, 0x8, 0x0, 0x9, 0x8, 0x3, 0xfffffff8, 0x9, 0xe85, 0x8000, 0x7, 0x5, 0x1, 0x2, 0x2, 0x2, 0x3, 0x4, 0x0, 0xf274, 0x4, 0x3, 0x1, 0x8, 0x0, 0x6, 0x10, 0x5, 0x1000, 0x5, 0x4, 0x4, 0x8, 0x2, 0x0, 0x3, 0x4ef, 0x81b1c8ea, 0x1, 0x2, 0x6, 0x7, 0x1, 0x0, 0x35, 0x1, 0x401, 0x3, 0xff, 0xd7, 0x2, 0x9, 0x1, 0xba1c, 0x5, 0x0, 0x1, 0xfff, 0x3, 0x4, 0x67c36367, 0x6, 0x7, 0x2, 0x83a, 0x942, 0x10, 0x1, 0x10001, 0x8, 0x3, 0x254, 0xffffffff, 0xecdb, 0x9, 0x200, 0x1000, 0x5, 0x2, 0x8, 0x100, 0x7fffffff, 0x78, 0xfffffffa, 0x0, 0x0, 0xc, 0x1ff, 0xee48, 0x0, 0x9, 0x1, 0x1, 0x1, 0x2, 0xe, 0x8, 0x3, 0x1000, 0xd0e, 0xc6, 0x1, 0xcf5, 0xb20, 0x4, 0x9a51, 0x8bd0, 0xce, 0x7e, 0x0, 0x9, 0xd6, 0xc81, 0xfff, 0x4, 0x200, 0x0, 0x6, 0x8, 0x101, 0x32, 0x9dd, 0x7, 0x100, 0x38, 0xe, 0x6, 0xe, 0x6, 0x100, 0x6, 0x8, 0xb, 0xffff3583, 0x7, 0x9, 0x5, 0xfffffff9, 0x9db, 0x80000001, 0x5, 0x6ac6, 0x1000, 0x1, 0xfb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x43a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x0, 0x2, 0x6, {0x4, 0x0, 0x7ff, 0x1, 0x5, 0x78b}, {0x5, 0x0, 0x3, 0xa, 0x1, 0x7}, 0xba, 0x6, 0x40}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r10, r9, 0x0, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd5a960000df25022000cb", @ANYRES32, @ANYBLOB="08000400640101020800080000010000080002"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) ioctl$SIOCAX25GETUID(r11, 0x89e0, &(0x7f00000002c0)={0x3, @null, 0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x1000}, {0x8, 0xf, 0x0, 0x0, 0x10}, {0x8, 0xe, 0x0, 0x0, 0xfffffff2}, {0x8, 0x16, 0x0, 0x0, 0x9}]}}]}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x6c}}, 0x440088c4) 1.075773628s ago: executing program 34 (id=2289): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000040)={0xc}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x80) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="577a29be4c834fe105e3399e08de3d945090b935490a65b37419c3391c7a68c302f06f897abc0381c27dd32f", 0x2c}], 0x1, 0x48, 0x3) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0xfffffffd) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x9, 0xf, 0xc, 0x101, 0x7ff}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f030000000100000007000000", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004814) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.026437858s ago: executing program 35 (id=2293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24004004) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xffffffffffffff4b, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd01200000200000000"], 0xb8}}, 0x4004) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}], 0x2) 0s ago: executing program 36 (id=2300): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="1408000014000100000000002000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x200000c0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400004477a90416e829dfe10fa71400000000000000000000000000000400000000000000000000665cc5d10cc80b0b0847d1284ad4962dd416ed52a054bd8b09a9cf7cdf"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) unshare(0x6020480) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x100}) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000005c0)={'bridge0\x00', 0x400}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000080)=0x2) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r9, @ANYBLOB="3bed899c5b84421465dc2cd27b25ba1d11866f9ee07100f89032f1757af9da323f442723ff31f66c0d8542c96c3ecde9fbfd24d5027cce75decee1739879e4987118f89a39336de7cfe3e938ccdbccb1645c78f0c528fae56a69fcfcdefddc6c187af7ccdc5d6d68a0e83d9104b83dd8a32d084dbbbc7b90ba53c1e0f760a277d4a217d54200dbf9277de8645f2e3117c80a79cdf0f2db775a32e67828cd0d8f265f50c4ed268f6dec"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): ooth: hci3: Opcode 0x0c1a failed: -4 [ 253.721740][ T8831] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 253.749501][ T8831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.763035][ T8831] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 253.826067][ T8831] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.852304][ T8831] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 254.011302][ T8857] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 254.079043][ T8857] __nla_validate_parse: 5 callbacks suppressed [ 254.079062][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 254.131869][ T8868] syzkaller1: entered promiscuous mode [ 254.161056][ T8868] syzkaller1: entered allmulticast mode [ 254.349573][ T8868] "syz.2.688" (8868) uses obsolete ecb(arc4) skcipher [ 254.407639][ T8879] netlink: 6 bytes leftover after parsing attributes in process `syz.0.690'. [ 254.526419][ T8879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.768290][ T8902] netlink: 'syz.4.695': attribute type 16 has an invalid length. [ 254.867284][ T8906] netlink: 48 bytes leftover after parsing attributes in process `syz.2.696'. [ 254.887830][ T8902] netlink: 'syz.4.695': attribute type 17 has an invalid length. [ 255.020096][ T8902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.051935][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 255.063630][ T5839] lo speed is unknown, defaulting to 1000 [ 255.073284][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 255.074971][ T5839] syz2: Port: 1 Link ACTIVE [ 255.093643][ T8908] netlink: 104 bytes leftover after parsing attributes in process `syz.3.697'. [ 255.231011][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.701'. [ 255.245678][ T8916] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 255.367734][ T8924] syzkaller1: entered promiscuous mode [ 255.373255][ T8924] syzkaller1: entered allmulticast mode [ 255.389255][ T8923] syzkaller1: left promiscuous mode [ 255.394623][ T8923] syzkaller1: left allmulticast mode [ 255.445656][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 255.692816][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.699470][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.731316][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 255.935938][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 256.074073][ T8973] tun0: tun_chr_ioctl cmd 1074025675 [ 256.080533][ T8973] tun0: persist disabled [ 256.086594][ T8973] netlink: 'syz.1.716': attribute type 1 has an invalid length. [ 256.301745][ T8990] tipc: Started in network mode [ 256.317304][ T8990] tipc: Node identity eaf006cf73c7, cluster identity 4711 [ 256.334128][ T8990] tipc: Enabled bearer , priority 0 [ 256.353409][ T8990] syzkaller0: entered promiscuous mode [ 256.372976][ T8990] syzkaller0: entered allmulticast mode [ 256.400383][ T8990] sch_tbf: peakrate 5 is lower than or equals to rate 10693665246381377253 ! [ 256.428359][ T8990] tipc: Resetting bearer [ 256.474665][ T8987] tipc: Resetting bearer [ 256.540722][ T8987] tipc: Disabling bearer [ 256.632373][ T9007] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 256.726395][ T9010] syzkaller1: entered promiscuous mode [ 256.736078][ T9010] syzkaller1: entered allmulticast mode [ 257.003960][ T9029] xt_HMARK: proto mask must be zero with L3 mode [ 257.028650][ T9035] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 257.312654][ T9050] netlink: 'syz.0.737': attribute type 5 has an invalid length. [ 257.321817][ T9050] netlink: 'syz.0.737': attribute type 8 has an invalid length. [ 257.380580][ T9050] geneve3: entered promiscuous mode [ 257.399641][ T9050] geneve3: entered allmulticast mode [ 257.429182][ T9050] bridge_slave_0: left allmulticast mode [ 257.435380][ T9050] bridge_slave_0: left promiscuous mode [ 257.457872][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.481441][ T9050] bridge_slave_1: left allmulticast mode [ 257.487959][ T9050] bridge_slave_1: left promiscuous mode [ 257.493759][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.527212][ T9050] bond0: (slave bond_slave_0): Releasing backup interface [ 257.556069][ T9050] bond0: (slave bond_slave_1): Releasing backup interface [ 257.602042][ T9050] team0: Port device team_slave_0 removed [ 257.647747][ T9050] team0: Port device team_slave_1 removed [ 257.654478][ T9050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.691294][ T9050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.700699][ T9050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.710252][ T9050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.733360][ T9050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.796781][ T7530] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 257.805464][ T7530] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 257.878120][ T7530] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 257.894312][ T9074] netlink: 'syz.3.742': attribute type 2 has an invalid length. [ 257.898610][ T7530] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 257.973025][ T9078] lo speed is unknown, defaulting to 1000 [ 257.991863][ T9081] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 258.001272][ T9081] netlink: 'syz.1.743': attribute type 21 has an invalid length. [ 258.203518][ T9092] tipc: Enabled bearer , priority 0 [ 258.211834][ T9091] tipc: Enabling of bearer rejected, already enabled [ 258.237631][ T9092] syzkaller0: entered promiscuous mode [ 258.243133][ T9092] syzkaller0: entered allmulticast mode [ 258.309010][ T9106] bridge0: port 1(erspan0) entered blocking state [ 258.315759][ T9106] bridge0: port 1(erspan0) entered disabled state [ 258.324349][ T9103] netlink: 'syz.3.749': attribute type 16 has an invalid length. [ 258.327710][ T9106] erspan0: entered allmulticast mode [ 258.361398][ T9106] erspan0: entered promiscuous mode [ 258.370347][ T9106] bridge0: port 1(erspan0) entered blocking state [ 258.373714][ T9103] netlink: 'syz.3.749': attribute type 3 has an invalid length. [ 258.377635][ T9106] bridge0: port 1(erspan0) entered forwarding state [ 258.479698][ T9092] tipc: Resetting bearer [ 258.486483][ T9113] erspan0: left allmulticast mode [ 258.491699][ T9113] erspan0: left promiscuous mode [ 258.497037][ T9113] bridge0: port 1(erspan0) entered disabled state [ 258.554982][ T9090] tipc: Resetting bearer [ 258.588649][ T9090] tipc: Disabling bearer [ 258.693051][ T9121] sctp: [Deprecated]: syz.1.750 (pid 9121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.693051][ T9121] Use struct sctp_sack_info instead [ 258.751429][ T9123] bond5 (unregistering): Released all slaves [ 259.487563][ T9157] __nla_validate_parse: 23 callbacks suppressed [ 259.487583][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 259.499323][ T9159] netlink: 'syz.1.762': attribute type 9 has an invalid length. [ 259.951835][ T9183] openvswitch: netlink: ufid size 19 bytes exceeds the range (1, 16) [ 259.989528][ T9179] lo speed is unknown, defaulting to 1000 [ 260.000561][ T9183] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 260.167667][ T9192] veth0: entered promiscuous mode [ 260.195056][ T9186] lo speed is unknown, defaulting to 1000 [ 260.317144][ T9190] netlink: 260 bytes leftover after parsing attributes in process `syz.1.765'. [ 260.394250][ T9205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.771'. [ 260.406371][ T9205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.771'. [ 260.690530][ T9192] veth0: left promiscuous mode [ 260.725896][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 260.834135][ T9233] netlink: 216 bytes leftover after parsing attributes in process `syz.2.775'. [ 260.864535][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.775'. [ 260.882980][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'. [ 260.918490][ T9242] netlink: 104 bytes leftover after parsing attributes in process `syz.1.777'. [ 261.502198][ T9273] netlink: 'syz.3.785': attribute type 12 has an invalid length. [ 261.523915][ T9273] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.785'. [ 261.581465][ T9275] syzkaller1: entered promiscuous mode [ 261.587441][ T9275] syzkaller1: entered allmulticast mode [ 261.677496][ T9282] bond5: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 261.687506][ T9282] bond5: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 261.736206][ T9278] tipc: Enabled bearer , priority 0 [ 261.745437][ T9277] syzkaller0: entered promiscuous mode [ 261.751737][ T9277] syzkaller0: entered allmulticast mode [ 261.785709][ T9277] tipc: Resetting bearer [ 261.806355][ T9276] tipc: Resetting bearer [ 261.854111][ T9276] tipc: Disabling bearer [ 261.930411][ T9294] can: request_module (can-proto-3) failed. [ 261.982101][ T9300] netlink: 'syz.0.794': attribute type 10 has an invalid length. [ 262.020447][ T9300] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 262.239520][ T9268] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 262.493403][ T9334] netlink: 'syz.0.801': attribute type 6 has an invalid length. [ 262.610907][ T9339] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 263.050969][ T9356] netlink: 'syz.2.809': attribute type 2 has an invalid length. [ 263.065798][ T9356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.073407][ T9356] IPv6: NLM_F_CREATE should be set when creating new route [ 263.080699][ T9356] IPv6: NLM_F_CREATE should be set when creating new route [ 263.140664][ T9356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.274518][ T9366] tipc: Failed to remove unknown binding: 66,1,1/0:1783137486/1783137488 [ 263.363307][ T9370] tipc: Failed to remove unknown binding: 66,1,1/0:1783137486/1783137488 [ 263.417529][ T9366] tipc: Failed to remove unknown binding: 66,1,1/0:1783137486/1783137488 [ 263.440790][ T9366] tipc: Failed to remove unknown binding: 66,1,1/0:1783137486/1783137488 [ 264.262667][ T9408] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 264.622900][ T9424] sctp: [Deprecated]: syz.2.828 (pid 9424) Use of int in max_burst socket option deprecated. [ 264.622900][ T9424] Use struct sctp_assoc_value instead [ 264.651267][ T9426] veth1_to_bond: entered allmulticast mode [ 264.658033][ T9426] __nla_validate_parse: 8 callbacks suppressed [ 264.658049][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 264.699951][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 264.717942][ T9425] veth1_to_bond: left allmulticast mode [ 264.822356][ T9428] bond2 (unregistering): Released all slaves [ 265.090810][ T9449] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 265.131355][ T9446] netlink: 256 bytes leftover after parsing attributes in process `syz.4.833'. [ 265.257997][ T9458] syz_tun: entered allmulticast mode [ 265.266214][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.837'. [ 265.267544][ T9446] tipc: Failed to remove unknown binding: 66,1,1/0:119542337/119542339 [ 265.283589][ T9446] tipc: Failed to remove unknown binding: 66,1,1/0:119542337/119542339 [ 265.338668][ T9458] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 265.361718][ T9457] syz_tun: left allmulticast mode [ 265.483199][ T9465] lo speed is unknown, defaulting to 1000 [ 265.488809][ T9467] netlink: 36 bytes leftover after parsing attributes in process `syz.4.840'. [ 265.500799][ T9468] netlink: zone id is out of range [ 265.505942][ T9468] netlink: zone id is out of range [ 265.513594][ T9468] netlink: del zone limit has 8 unknown bytes [ 265.648736][ T9476] netlink: 100 bytes leftover after parsing attributes in process `syz.3.841'. [ 265.909062][ T9488] netlink: 'syz.4.846': attribute type 142 has an invalid length. [ 266.278499][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.848'. [ 266.289857][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.847'. [ 266.409254][ T9504] netlink: 'syz.2.849': attribute type 4 has an invalid length. [ 266.463420][ T9508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.848'. [ 266.520398][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.848'. [ 266.823918][ T9519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.017588][ T9519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.071166][ T9538] tipc: Enabled bearer , priority 0 [ 267.086159][ T9538] syzkaller0: entered promiscuous mode [ 267.104307][ T9538] syzkaller0: entered allmulticast mode [ 267.164783][ T9519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.216613][ T9531] pim6reg99999999: entered allmulticast mode [ 267.223701][ T9537] tipc: Resetting bearer [ 267.279643][ T9537] tipc: Disabling bearer [ 267.343398][ T9519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.452226][ T9555] tipc: Enabled bearer , priority 0 [ 267.465555][ T9555] syzkaller0: entered promiscuous mode [ 267.491146][ T9555] syzkaller0: entered allmulticast mode [ 267.520988][ T7530] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.545957][ T9555] tipc: Resetting bearer [ 267.554326][ T7530] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.578216][ T7523] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.587949][ T9554] tipc: Resetting bearer [ 267.601645][ T9554] tipc: Disabling bearer [ 267.636255][ T7530] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.768986][ T9573] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.791528][ T9572] ip6gre1: entered allmulticast mode [ 267.968593][ T9587] tipc: Enabled bearer , priority 0 [ 268.151843][ T9590] sctp: [Deprecated]: syz.2.872 (pid 9590) Use of int in maxseg socket option. [ 268.151843][ T9590] Use struct sctp_assoc_value instead [ 268.194471][ T9586] bond6: entered promiscuous mode [ 268.200456][ T9586] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.263014][ T9586] tipc: Disabling bearer [ 268.277168][ T9604] syzkaller0: entered promiscuous mode [ 268.285837][ T9604] syzkaller0: entered allmulticast mode [ 268.293774][ T9603] tipc: Enabled bearer , priority 0 [ 268.313323][ T9604] tipc: Resetting bearer [ 268.333326][ T9602] tipc: Resetting bearer [ 268.363395][ T9602] tipc: Disabling bearer [ 268.513777][ T9620] vlan1: entered allmulticast mode [ 268.527498][ T9620] veth0_vlan: entered allmulticast mode [ 268.585260][ T9617] netlink: 'syz.4.880': attribute type 16 has an invalid length. [ 268.610450][ T9617] netlink: 'syz.4.880': attribute type 17 has an invalid length. [ 269.345000][ T5914] lo speed is unknown, defaulting to 1000 [ 269.358670][ T5914] syz2: Port: 1 Link DOWN [ 269.392569][ T9631] macsec1: entered promiscuous mode [ 269.398679][ T9631] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 269.420834][ T9631] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 269.505520][ T9644] tap0: tun_chr_ioctl cmd 1074025680 [ 269.512143][ T9651] tipc: Enabled bearer , priority 0 [ 269.541655][ T7523] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.550762][ T7523] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.562590][ T9657] D: renamed from syzkaller0 [ 269.579539][ T9657] tipc: Disabling bearer [ 269.614910][ T7523] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.651698][ T7523] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.692802][ T9668] __nla_validate_parse: 5 callbacks suppressed [ 269.692820][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 269.792310][ T9669] netlink: 'syz.2.887': attribute type 29 has an invalid length. [ 269.960182][ T9685] netlink: 'syz.1.890': attribute type 13 has an invalid length. [ 269.968332][ T9685] netlink: 'syz.1.890': attribute type 17 has an invalid length. [ 270.179533][ T9685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.269253][ T9687] lo speed is unknown, defaulting to 1000 [ 270.486437][ T9704] vlan2: entered promiscuous mode [ 270.491742][ T9704] ip6gretap0: entered promiscuous mode [ 270.827794][ T9710] netlink: 52 bytes leftover after parsing attributes in process `syz.4.896'. [ 271.057375][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 271.474275][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 271.480874][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.488873][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.496718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.504663][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.512532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.520507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.528416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.536378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.544245][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.552214][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.560174][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.568146][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.575962][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.583935][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.591780][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.599790][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.607639][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.615672][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.623535][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.631509][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.639367][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.647342][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.655166][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.663134][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.670973][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.678951][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.686791][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.694737][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.702616][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.710601][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.718463][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.726415][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.734282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.742259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.750120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.758091][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.765910][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.773904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.781756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.789727][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.797988][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.901178][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 271.962606][ T9737] netlink: 'syz.0.903': attribute type 5 has an invalid length. [ 271.989442][ T9737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.903'. [ 272.036336][ T9737] geneve4: entered promiscuous mode [ 272.051065][ T9737] geneve4: entered allmulticast mode [ 272.187476][ T9751] netlink: 108 bytes leftover after parsing attributes in process `syz.3.906'. [ 272.202050][ T9751] netlink: 108 bytes leftover after parsing attributes in process `syz.3.906'. [ 272.219243][ T9751] netlink: 84 bytes leftover after parsing attributes in process `syz.3.906'. [ 272.232117][ T9743] pim6reg1: entered promiscuous mode [ 272.238207][ T9743] pim6reg1: entered allmulticast mode [ 272.371253][ T9758] lo speed is unknown, defaulting to 1000 [ 272.436615][ T9767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.912'. [ 272.449613][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.912'. [ 272.778600][ T9792] sch_tbf: burst 2 is lower than device lo mtu (61420) ! [ 272.826435][ T9792] macsec2: entered promiscuous mode [ 272.832567][ T9792] macsec2: entered allmulticast mode [ 273.164041][ T9810] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.233054][ T9815] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.260565][ T9815] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 273.322181][ T9818] lo speed is unknown, defaulting to 1000 [ 273.486302][ T9815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.497880][ T9815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 273.622962][ T30] audit: type=1800 audit(1759645023.553:3): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.925" name="memory.events" dev="tmpfs" ino=943 res=0 errno=0 [ 273.714529][ T9815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.732644][ T9815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 273.873033][ T9846] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.884821][ T9846] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.924532][ T9815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.936442][ T9815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 274.015754][ T9846] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.026362][ T9846] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.139331][ T9846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.149849][ T9846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.244572][ T9846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.256287][ T9846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.289992][ T9861] gretap0: entered promiscuous mode [ 274.297842][ T9861] gretap0: left promiscuous mode [ 274.321451][ T7523] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 274.333269][ T7523] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.371840][ T9865] gretap0: entered promiscuous mode [ 274.380229][ T9865] gretap0: left promiscuous mode [ 274.397432][ T7523] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 274.405835][ T7523] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.430373][ T7530] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 274.441627][ T7530] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.493791][ T7530] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 274.510538][ T7530] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.563639][ T7530] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.584472][ T7530] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.640344][ T7533] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.649020][ T7533] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.689456][ T7533] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.697867][ T7533] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.716905][ T7533] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.730969][ T7533] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.784678][ T9883] team0: Mode changed to "activebackup" [ 274.950383][ T9901] tipc: Enabling of bearer rejected, failed to enable media [ 274.962501][ T9898] __nla_validate_parse: 7 callbacks suppressed [ 274.962520][ T9898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.945'. [ 275.126456][ T9918] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 275.136142][ T9919] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 275.153548][ T9916] lo speed is unknown, defaulting to 1000 [ 275.193291][ T9918] bond5: entered promiscuous mode [ 275.199029][ T9918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.379759][ T9928] syzkaller0: entered promiscuous mode [ 275.385727][ T9928] syzkaller0: entered allmulticast mode [ 275.579570][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 275.592590][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 275.608853][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 275.798889][ T9953] syzkaller0: entered promiscuous mode [ 275.804379][ T9953] syzkaller0: entered allmulticast mode [ 276.437595][ T9960] netlink: 56 bytes leftover after parsing attributes in process `syz.1.962'. [ 276.447309][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 277.449366][ T9977] Bluetooth: MGMT ver 1.23 [ 277.781794][T10010] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 277.802646][T10005] veth5: entered promiscuous mode [ 277.842480][T10009] netlink: 'syz.4.976': attribute type 12 has an invalid length. [ 277.873308][T10014] netlink: 536 bytes leftover after parsing attributes in process `syz.3.977'. [ 277.883608][T10016] netlink: 536 bytes leftover after parsing attributes in process `syz.3.977'. [ 277.898642][T10014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.977'. [ 277.930428][T10014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.977'. [ 278.004884][T10021] lo speed is unknown, defaulting to 1000 [ 278.316088][T10045] tipc: Enabling of bearer rejected, failed to enable media [ 278.588445][T10058] netlink: 'syz.3.989': attribute type 13 has an invalid length. [ 279.087958][T10086] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 279.218181][T10065] hsr0: entered promiscuous mode [ 279.234270][T10069] hsr_slave_0: left promiscuous mode [ 279.241392][T10069] hsr_slave_1: left promiscuous mode [ 279.278043][T10069] hsr0 (unregistering): left promiscuous mode [ 279.318327][T10086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.342811][T10090] bond3: (slave gretap1): making interface the new active one [ 279.352895][T10090] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 279.506040][T10105] netlink: 'syz.1.1001': attribute type 6 has an invalid length. [ 279.573091][T10102] lo speed is unknown, defaulting to 1000 [ 279.585618][T10111] lo speed is unknown, defaulting to 1000 [ 279.599599][T10101] lo speed is unknown, defaulting to 1000 [ 280.160695][T10146] lo speed is unknown, defaulting to 1000 [ 280.243653][T10151] __nla_validate_parse: 10 callbacks suppressed [ 280.243672][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 280.607559][T10160] lo speed is unknown, defaulting to 1000 [ 280.891790][T10176] lo speed is unknown, defaulting to 1000 [ 280.900119][T10189] lo speed is unknown, defaulting to 1000 [ 280.999393][T10189] lo speed is unknown, defaulting to 1000 [ 281.010619][T10189] lo speed is unknown, defaulting to 1000 [ 281.085602][T10194] lo speed is unknown, defaulting to 1000 [ 281.093597][T10194] lo speed is unknown, defaulting to 1000 [ 281.129069][T10189] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 281.374133][T10189] lo speed is unknown, defaulting to 1000 [ 281.416162][T10189] lo speed is unknown, defaulting to 1000 [ 281.444067][T10189] lo speed is unknown, defaulting to 1000 [ 281.473988][T10189] lo speed is unknown, defaulting to 1000 [ 281.482732][T10189] lo speed is unknown, defaulting to 1000 [ 281.502980][T10189] lo speed is unknown, defaulting to 1000 [ 281.511226][T10189] lo speed is unknown, defaulting to 1000 [ 281.682108][T10223] lo: entered allmulticast mode [ 281.689240][T10223] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1029'. [ 281.705574][T10223] unsupported nlmsg_type 40 [ 281.956215][T10238] netlink: 'syz.0.1031': attribute type 42 has an invalid length. [ 282.209338][T10252] syzkaller0: entered promiscuous mode [ 282.214993][T10252] syzkaller0: entered allmulticast mode [ 282.315659][T10258] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1037'. [ 282.327299][T10219] lo: left allmulticast mode [ 282.467813][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 282.468479][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 282.522032][T10265] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1040'. [ 282.528932][T10267] lo speed is unknown, defaulting to 1000 [ 282.549774][T10267] lo speed is unknown, defaulting to 1000 [ 282.841966][T10286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1045'. [ 282.869843][T10288] netlink: 'syz.0.1045': attribute type 10 has an invalid length. [ 282.905810][T10287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1045'. [ 283.015292][T10290] lo speed is unknown, defaulting to 1000 [ 283.038534][T10290] lo speed is unknown, defaulting to 1000 [ 283.569063][T10306] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1050'. [ 283.865137][T10327] netlink: 'syz.1.1053': attribute type 2 has an invalid length. [ 283.897600][T10327] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 283.916953][T10327] netlink: 'syz.1.1053': attribute type 2 has an invalid length. [ 283.935297][T10327] netlink: 'syz.1.1053': attribute type 2 has an invalid length. [ 283.995989][T10327] netlink: 'syz.1.1053': attribute type 2 has an invalid length. [ 284.017305][T10318] lo speed is unknown, defaulting to 1000 [ 284.050026][T10327] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 284.052875][T10318] lo speed is unknown, defaulting to 1000 [ 284.064714][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 284.077060][T10327] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 284.118730][T10327] netlink: 'syz.1.1053': attribute type 2 has an invalid length. [ 284.409073][T10362] veth1_to_hsr: entered promiscuous mode [ 284.415326][T10362] macvtap1: entered promiscuous mode [ 284.424694][T10362] macvtap1: entered allmulticast mode [ 284.431044][T10362] veth1_to_hsr: entered allmulticast mode [ 284.833049][T10390] lo speed is unknown, defaulting to 1000 [ 284.845380][T10390] lo speed is unknown, defaulting to 1000 [ 285.050289][T10384] lo speed is unknown, defaulting to 1000 [ 285.076087][T10384] lo speed is unknown, defaulting to 1000 [ 285.093130][T10389] lo speed is unknown, defaulting to 1000 [ 285.142384][T10389] lo speed is unknown, defaulting to 1000 [ 285.471745][T10417] __nla_validate_parse: 3 callbacks suppressed [ 285.471764][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 285.526523][T10406] lo speed is unknown, defaulting to 1000 [ 285.536364][T10406] lo speed is unknown, defaulting to 1000 [ 286.252266][T10429] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 286.264298][T10429] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 286.287088][T10432] bond7: (slave gretap2): making interface the new active one [ 286.295092][T10432] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 286.309656][T10435] macvlan2: entered promiscuous mode [ 286.315014][T10435] macvlan2: entered allmulticast mode [ 286.321637][T10435] bond7: entered promiscuous mode [ 286.329021][T10435] gretap2: entered promiscuous mode [ 286.334956][T10435] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.344768][T10435] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 286.359050][T10435] bond7: left promiscuous mode [ 286.363847][T10435] gretap2: left promiscuous mode [ 286.401989][T10445] tipc: Enabled bearer , priority 0 [ 286.431086][T10442] syzkaller0: entered promiscuous mode [ 286.436605][T10442] syzkaller0: entered allmulticast mode [ 286.578810][T10441] tipc: Resetting bearer [ 286.655576][T10441] tipc: Disabling bearer [ 286.681411][T10465] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1089'. [ 287.039903][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 287.052196][T10477] validate_nla: 3 callbacks suppressed [ 287.052213][T10477] netlink: 'syz.0.1094': attribute type 11 has an invalid length. [ 287.169945][T10490] xfrm1: entered allmulticast mode [ 287.331145][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 287.373370][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 287.398161][T10497] netlink: 'syz.0.1099': attribute type 14 has an invalid length. [ 287.409457][T10497] netlink: 'syz.0.1099': attribute type 13 has an invalid length. [ 287.483571][T10509] tipc: Enabled bearer , priority 0 [ 287.560856][T10510] syzkaller0: entered promiscuous mode [ 287.573487][T10510] syzkaller0: entered allmulticast mode [ 287.645696][T10510] tipc: Resetting bearer [ 287.690816][T10510] tipc: Disabling bearer [ 287.713057][T10523] »»»»»»: renamed from vlan1 [ 287.781546][T10527] macsec1: entered promiscuous mode [ 287.807813][T10527] macvlan0: entered promiscuous mode [ 287.834366][T10527] macvlan0: left promiscuous mode [ 287.899232][T10531] 8021q: VLANs not supported on wg0 [ 287.909711][T10525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1105'. [ 287.947602][T10535] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1109'. [ 288.676425][T10573] lo speed is unknown, defaulting to 1000 [ 288.688841][T10549] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1110'. [ 288.753342][T10584] syzkaller0: entered promiscuous mode [ 288.788481][T10584] syzkaller0: entered allmulticast mode [ 288.841723][T10573] lo speed is unknown, defaulting to 1000 [ 288.855868][T10583] tipc: Enabled bearer , priority 0 [ 288.973684][T10583] tipc: Resetting bearer [ 289.043377][T10583] tipc: Disabling bearer [ 289.105867][T10599] netlink: 'syz.0.1118': attribute type 11 has an invalid length. [ 289.246220][T10605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1118'. [ 289.508495][T10599] xfrm0: left promiscuous mode [ 289.517047][T10599] xfrm0: left allmulticast mode [ 289.567844][T10599] »»»»»»: left allmulticast mode [ 289.572834][T10599] veth0_vlan: left allmulticast mode [ 289.679828][T10599] bridge2: left allmulticast mode [ 289.693512][T10599] bond3: left promiscuous mode [ 289.699583][T10599] bond4: left promiscuous mode [ 289.711059][T10599] vlan2: left promiscuous mode [ 289.715876][T10599] geneve1: left promiscuous mode [ 289.721725][T10599] vlan2: left allmulticast mode [ 289.726605][T10599] geneve1: left allmulticast mode [ 289.738092][T10599] team1: left promiscuous mode [ 289.742991][T10599] team1: left allmulticast mode [ 289.752317][T10599] geneve3: left promiscuous mode [ 289.758704][T10599] geneve3: left allmulticast mode [ 289.770391][T10599] bond6: left promiscuous mode [ 289.778656][T10599] geneve4: left promiscuous mode [ 289.783787][T10599] geneve4: left allmulticast mode [ 289.793913][T10599] veth5: left promiscuous mode [ 289.822314][ T9640] lo speed is unknown, defaulting to 1000 [ 289.837640][ T9640] syz1: Port: 1 Link DOWN [ 289.878617][ T7525] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.892869][ T7525] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.902327][ T7525] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 289.912110][ T7525] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.921626][ T7525] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.937330][ T7525] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 289.957063][T10602] lo speed is unknown, defaulting to 1000 [ 289.965967][T10602] lo speed is unknown, defaulting to 1000 [ 290.080619][ T7525] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.084120][T10620] netlink: 'syz.1.1123': attribute type 6 has an invalid length. [ 290.098384][ T7525] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.098415][ T7525] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 290.098472][ T7525] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.129808][ T7525] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.139018][ T7525] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 290.293590][T10623] lo speed is unknown, defaulting to 1000 [ 290.309993][T10623] lo speed is unknown, defaulting to 1000 [ 290.521239][T10635] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1127'. [ 290.594161][T10645] sctp: [Deprecated]: syz.4.1130 (pid 10645) Use of int in max_burst socket option. [ 290.594161][T10645] Use struct sctp_assoc_value instead [ 290.648574][T10639] netlink: 'syz.3.1128': attribute type 12 has an invalid length. [ 290.656544][T10639] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1128'. [ 290.705991][T10643] lo speed is unknown, defaulting to 1000 [ 290.762844][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 290.786833][T10643] lo speed is unknown, defaulting to 1000 [ 290.826517][T10652] syzkaller0: entered promiscuous mode [ 290.832939][T10652] syzkaller0: entered allmulticast mode [ 290.842121][T10651] tipc: Enabled bearer , priority 0 [ 290.888086][T10651] tipc: Resetting bearer [ 290.909395][T10650] tipc: Resetting bearer [ 290.931907][T10650] tipc: Disabling bearer [ 290.942974][T10659] lo speed is unknown, defaulting to 1000 [ 290.976057][T10659] lo speed is unknown, defaulting to 1000 [ 291.077479][T10667] Àÿ: renamed from team_slave_1 [ 291.249998][T10675] can: request_module (can-proto-0) failed. [ 291.443813][T10691] netlink: 648 bytes leftover after parsing attributes in process `syz.3.1143'. [ 291.508549][T10698] lo speed is unknown, defaulting to 1000 [ 291.519339][T10698] lo speed is unknown, defaulting to 1000 [ 291.571740][T10692] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 291.685835][T10703] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 291.694306][ T9650] IPVS: starting estimator thread 0... [ 291.718882][T10704] gretap1: entered allmulticast mode [ 291.776937][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 291.813725][T10711] netlink: 'syz.0.1149': attribute type 4 has an invalid length. [ 291.816486][T10709] IPVS: using max 36 ests per chain, 86400 per kthread [ 291.897360][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 291.935711][T10722] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 292.010468][T10721] erspan0: left allmulticast mode [ 292.142037][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 292.301759][T10721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.339030][T10721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.376637][T10750] netlink: zone id is out of range [ 292.387870][T10750] netlink: zone id is out of range [ 292.393142][T10750] netlink: zone id is out of range [ 292.400814][T10750] netlink: zone id is out of range [ 292.406138][T10750] netlink: zone id is out of range [ 292.415408][T10750] netlink: zone id is out of range [ 292.420969][T10750] netlink: zone id is out of range [ 292.426135][T10750] netlink: zone id is out of range [ 292.433076][T10750] netlink: zone id is out of range [ 292.482071][T10721] hsr1: left promiscuous mode [ 292.489033][T10721] geneve2: left promiscuous mode [ 292.494012][T10721] geneve2: left allmulticast mode [ 292.513938][T10721] macsec2: left promiscuous mode [ 292.519076][T10721] macsec2: left allmulticast mode [ 292.525631][T10721] bond5: left promiscuous mode [ 292.559699][T10722] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 292.663479][T10749] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1155'. [ 292.691333][ T7531] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 292.706754][ T7531] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 292.732387][ T7531] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 292.759614][ T7531] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 292.779490][T10764] veth1_to_bond: entered allmulticast mode [ 292.812739][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 292.814529][T10762] lo speed is unknown, defaulting to 1000 [ 292.851417][T10764] bond0: (slave bond_slave_1): Releasing backup interface [ 292.870871][T10764] veth1_to_bond (unregistering): left allmulticast mode [ 292.913839][ T7531] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 292.931410][ T7531] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 292.941139][T10762] lo speed is unknown, defaulting to 1000 [ 292.944835][ T7531] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 292.973350][ T7531] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 293.178800][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 293.264890][T10785] netlink: 'syz.1.1165': attribute type 3 has an invalid length. [ 294.398897][T10858] veth1_to_team: entered promiscuous mode [ 294.407142][T10858] veth1_to_team: left promiscuous mode [ 294.659079][T10860] netlink: 'syz.2.1181': attribute type 3 has an invalid length. [ 294.992546][T10868] lo speed is unknown, defaulting to 1000 [ 295.022654][T10868] lo speed is unknown, defaulting to 1000 [ 295.310416][T10884] bond3: (slave erspan0): Releasing active interface [ 295.918076][T10898] __nla_validate_parse: 2 callbacks suppressed [ 295.918095][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 296.189418][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 296.205617][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 296.283836][T10926] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 296.294839][T10915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.372507][ T9650] IPVS: starting estimator thread 0... [ 296.421852][T10926] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.470825][T10929] bond8: (slave gretap3): making interface the new active one [ 296.479876][T10932] IPVS: using max 28 ests per chain, 67200 per kthread [ 296.495443][T10929] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 296.655500][T10939] syzkaller1: entered promiscuous mode [ 296.663403][T10939] syzkaller1: entered allmulticast mode [ 296.837362][T10963] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1206'. [ 296.840867][T10956] lo speed is unknown, defaulting to 1000 [ 296.854175][T10963] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1206'. [ 296.868124][T10956] lo speed is unknown, defaulting to 1000 [ 297.000463][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1206'. [ 297.037543][T10976] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 297.070888][T10976] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 297.272800][T10981] lo speed is unknown, defaulting to 1000 [ 297.288477][T10981] lo speed is unknown, defaulting to 1000 [ 297.350477][T10986] lo speed is unknown, defaulting to 1000 [ 297.362824][T10986] lo speed is unknown, defaulting to 1000 [ 297.570832][T10993] lo speed is unknown, defaulting to 1000 [ 297.594251][T10993] lo speed is unknown, defaulting to 1000 [ 297.810419][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 298.092377][T11025] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 298.103693][T11023] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 298.113282][T11023] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1218'. [ 298.122961][T11023] unsupported nla_type 58 [ 298.514715][T11039] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 298.563541][T11039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1224'. [ 298.629311][T11041] sctp: [Deprecated]: syz.3.1225 (pid 11041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.629311][T11041] Use struct sctp_sack_info instead [ 298.860394][T11051] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1227'. [ 299.120134][T11062] netlink: 'syz.0.1230': attribute type 10 has an invalid length. [ 299.283321][T11074] tipc: Enabled bearer , priority 10 [ 299.339663][T11079] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 299.455748][T11088] syzkaller1: entered promiscuous mode [ 299.489189][T11088] syzkaller1: entered allmulticast mode [ 299.545304][T11092] netlink: 'syz.3.1238': attribute type 2 has an invalid length. [ 299.567102][T11092] netlink: 'syz.3.1238': attribute type 2 has an invalid length. [ 299.580892][T11098] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 299.600425][T11098] block nbd0: Unsupported socket: should be TCP or UNIX. [ 299.647758][T11101] nbd: must specify at least one socket [ 300.277340][ T9650] tipc: Node number set to 337892443 [ 300.770936][T11157] lo speed is unknown, defaulting to 1000 [ 300.786006][T11157] lo speed is unknown, defaulting to 1000 [ 300.861419][ T30] audit: type=1800 audit(1759645050.793:4): pid=11154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1253" name="memory.events" dev="tmpfs" ino=1193 res=0 errno=0 [ 301.014524][T11170] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 301.204256][T11183] __nla_validate_parse: 11 callbacks suppressed [ 301.204275][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 301.431561][T11190] lo speed is unknown, defaulting to 1000 [ 301.451480][T11190] lo speed is unknown, defaulting to 1000 [ 302.327226][T11224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1273'. [ 302.497614][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 302.689418][T11233] lo speed is unknown, defaulting to 1000 [ 302.702686][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1275'. [ 302.706063][T11237] lo speed is unknown, defaulting to 1000 [ 302.780261][T11233] lo speed is unknown, defaulting to 1000 [ 302.836391][T11237] lo speed is unknown, defaulting to 1000 [ 302.859945][T11250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1279'. [ 303.786547][T11291] netlink: 'syz.0.1293': attribute type 3 has an invalid length. [ 303.800866][T11291] syz_tun: entered allmulticast mode [ 303.830878][T11291] infiniband syz*: RDMA CMA: cma_listen_on_dev, error -98 [ 303.915879][T11290] syz_tun: left allmulticast mode [ 304.224448][T11305] net_ratelimit: 40 callbacks suppressed [ 304.224468][T11305] openvswitch: netlink: Flow actions attr not present in new flow. [ 304.244979][T11304] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 304.252318][T11304] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 304.324827][T11307] lo speed is unknown, defaulting to 1000 [ 304.405025][T11313] geneve3: entered promiscuous mode [ 304.415523][T11313] geneve3: entered allmulticast mode [ 304.449056][T11315] bond2: option lp_interval: invalid value (0) [ 304.455321][T11315] bond2: option lp_interval: allowed values 1 - 2147483647 [ 304.467958][T11315] bond2 (unregistering): Released all slaves [ 304.507632][T11307] lo speed is unknown, defaulting to 1000 [ 304.513517][ T7525] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 304.531519][ T7525] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 304.577784][ T7525] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 304.598287][ T7525] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 304.814891][T11339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1305'. [ 304.841499][T11320] lo speed is unknown, defaulting to 1000 [ 304.850224][T11325] lo speed is unknown, defaulting to 1000 [ 304.880652][T11320] lo speed is unknown, defaulting to 1000 [ 304.973677][T11325] lo speed is unknown, defaulting to 1000 [ 305.085272][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1308'. [ 305.108142][T11349] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1308'. [ 305.286174][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1312'. [ 305.320972][T11365] xfrm1: entered promiscuous mode [ 305.326044][T11365] xfrm1: entered allmulticast mode [ 305.345635][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1312'. [ 305.474007][T11377] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 305.476607][T11378] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 305.561443][T11371] bond6 (unregistering): Released all slaves [ 305.625097][T11377] gretap2: entered promiscuous mode [ 306.415990][ T9648] IPVS: starting estimator thread 0... [ 306.527630][T11407] IPVS: using max 33 ests per chain, 79200 per kthread [ 307.325247][T11416] __nla_validate_parse: 2 callbacks suppressed [ 307.325265][T11416] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1324'. [ 307.331924][T11414] netlink: 'syz.2.1326': attribute type 9 has an invalid length. [ 307.834789][T11441] veth7: entered promiscuous mode [ 308.143028][T11465] netlink: 'syz.3.1340': attribute type 13 has an invalid length. [ 308.171932][T11465] netlink: 'syz.3.1340': attribute type 17 has an invalid length. [ 308.292593][T11479] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 308.304847][T11479] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1342'. [ 308.341187][T11465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.350167][T11465] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.374386][T11465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.398843][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 308.417487][T11483] tc_dump_action: action bad kind [ 308.485364][T11488] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:19997 [ 308.741159][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1349'. [ 308.854665][T11517] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1350'. [ 308.908396][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 309.237050][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 309.249562][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 309.321359][T11555] lo speed is unknown, defaulting to 1000 [ 309.330176][T11555] lo speed is unknown, defaulting to 1000 [ 309.348879][T11552] netlink: 320 bytes leftover after parsing attributes in process `syz.3.1362'. [ 309.378583][T11551] netlink: 320 bytes leftover after parsing attributes in process `syz.3.1362'. [ 309.420423][T11559] lo speed is unknown, defaulting to 1000 [ 309.450957][T11559] lo speed is unknown, defaulting to 1000 [ 309.503226][T11566] lo speed is unknown, defaulting to 1000 [ 309.542596][T11566] lo speed is unknown, defaulting to 1000 [ 309.763157][T11583] netlink: 'syz.4.1369': attribute type 4 has an invalid length. [ 309.802852][T11584] netlink: 'syz.4.1369': attribute type 4 has an invalid length. [ 310.326430][T11604] tipc: Enabled bearer , priority 0 [ 310.396310][T11606] syzkaller0: entered promiscuous mode [ 310.412468][T11606] syzkaller0: entered allmulticast mode [ 310.656188][T11606] tipc: Resetting bearer [ 310.675230][T11606] tipc: Disabling bearer [ 310.848310][T11644] veth7: entered promiscuous mode [ 310.874910][T11644] veth7: entered allmulticast mode [ 310.884214][T11644] team0: Device veth7 is up. Set it down before adding it as a team port [ 311.037086][T11651] wg1 speed is unknown, defaulting to 1000 [ 311.080465][T11651] wg1 speed is unknown, defaulting to 1000 [ 311.098576][T11651] wg1 speed is unknown, defaulting to 1000 [ 311.171198][T11651] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 311.251063][T11669] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 311.269411][T11651] wg1 speed is unknown, defaulting to 1000 [ 311.275390][T11671] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 311.317057][T11669] 8021q: adding VLAN 0 to HW filter on device bond9 [ 311.324506][T11651] wg1 speed is unknown, defaulting to 1000 [ 311.356551][T11675] bond9: (slave ip6gretap1): making interface the new active one [ 311.366463][T11675] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 311.382168][T11651] wg1 speed is unknown, defaulting to 1000 [ 311.421214][T11669] veth7: entered promiscuous mode [ 311.446441][T11669] bond9: (slave veth7): Enslaving as an active interface with a down link [ 311.462228][T11651] wg1 speed is unknown, defaulting to 1000 [ 311.472770][T11671] erspan0: entered allmulticast mode [ 311.501241][T11671] bond9: (slave erspan0): Enslaving as an active interface with an up link [ 311.513803][T11651] wg1 speed is unknown, defaulting to 1000 [ 311.574353][T11669] bond9: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 311.948303][T11709] netlink: 'syz.0.1400': attribute type 3 has an invalid length. [ 312.049973][T11719] lo speed is unknown, defaulting to 1000 [ 312.058684][T11719] lo speed is unknown, defaulting to 1000 [ 312.097854][T11719] wg1 speed is unknown, defaulting to 1000 [ 312.330639][T11733] __nla_validate_parse: 5 callbacks suppressed [ 312.330662][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 312.404684][T11733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1406'. [ 312.670497][T11746] netlink: 'syz.0.1409': attribute type 5 has an invalid length. [ 312.680774][T11746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1409'. [ 312.772956][T11750] vlan1: entered allmulticast mode [ 312.778415][T11750] batadv0: entered allmulticast mode [ 312.792087][T11752] vlan2: entered allmulticast mode [ 312.797702][T11752] gretap0: entered allmulticast mode [ 312.817747][ T7523] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 312.924718][T11759] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1414'. [ 313.023717][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1415'. [ 313.036956][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1415'. [ 313.129274][T11769] lo speed is unknown, defaulting to 1000 [ 313.136307][T11769] lo speed is unknown, defaulting to 1000 [ 313.146205][T11769] wg1 speed is unknown, defaulting to 1000 [ 313.561979][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 313.574359][T11783] netlink: 'syz.3.1421': attribute type 5 has an invalid length. [ 313.588019][T11783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1421'. [ 313.623475][T11783] geneve2: entered promiscuous mode [ 313.647794][T11783] geneve2: entered allmulticast mode [ 313.664496][ T7528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 313.696628][ T7528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 313.725092][ T7528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 313.745039][ T7528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 313.861122][T11783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 313.905601][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 314.032244][T11783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.182397][T11807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1429'. [ 314.256324][T11783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.544793][T11805] lo speed is unknown, defaulting to 1000 [ 314.581143][T11783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.702315][T11805] lo speed is unknown, defaulting to 1000 [ 314.712792][T11824] lo speed is unknown, defaulting to 1000 [ 314.748139][T11805] wg1 speed is unknown, defaulting to 1000 [ 314.799060][T11824] lo speed is unknown, defaulting to 1000 [ 314.871360][T11824] wg1 speed is unknown, defaulting to 1000 [ 314.913711][ T7525] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 314.945038][ T7525] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 314.981514][T11846] lo speed is unknown, defaulting to 1000 [ 315.003688][ T7525] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 315.039887][T11846] lo speed is unknown, defaulting to 1000 [ 315.110044][T11846] wg1 speed is unknown, defaulting to 1000 [ 315.196400][ T7525] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 316.182236][T11874] netlink: 'syz.2.1442': attribute type 18 has an invalid length. [ 316.360941][T11883] sctp: [Deprecated]: syz.4.1445 (pid 11883) Use of int in max_burst socket option. [ 316.360941][T11883] Use struct sctp_assoc_value instead [ 316.715174][T11910] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 316.723446][T11910] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 316.739140][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.026337][T11927] nbd: socks must be embedded in a SOCK_ITEM attr [ 317.157893][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.224595][T11946] netlink: 'syz.3.1460': attribute type 1 has an invalid length. [ 317.270763][T11946] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 317.294877][T11949] tipc: Enabled bearer , priority 0 [ 317.332283][T11949] syzkaller0: entered promiscuous mode [ 317.347988][T11949] syzkaller0: entered allmulticast mode [ 317.417456][T11949] tipc: Resetting bearer [ 317.457872][T11947] tipc: Resetting bearer [ 317.505964][T11947] tipc: Disabling bearer [ 317.719091][T11972] tipc: Enabled bearer , priority 0 [ 317.727351][T11972] syzkaller0: entered promiscuous mode [ 317.732954][T11972] syzkaller0: entered allmulticast mode [ 317.751942][T11972] tipc: Resetting bearer [ 317.763484][T11971] tipc: Resetting bearer [ 317.831891][T11971] tipc: Disabling bearer [ 318.030509][T11988] sctp: [Deprecated]: syz.3.1473 (pid 11988) Use of int in max_burst socket option deprecated. [ 318.030509][T11988] Use struct sctp_assoc_value instead [ 318.078446][T11992] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 318.115585][T11994] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 318.397952][T12003] __nla_validate_parse: 12 callbacks suppressed [ 318.397972][T12003] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1477'. [ 318.422885][T12016] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.493823][T12016] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.582587][T12016] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.631710][T12033] tipc: Enabled bearer , priority 0 [ 318.673019][T12016] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.698628][T12033] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 318.711869][T12033] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 318.802660][T12050] tipc: Resetting bearer [ 318.907723][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 318.920627][ T7523] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 318.929139][ T7523] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 318.963013][T12054] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 319.002442][ T7528] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 319.019975][ T7528] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 319.149452][T12072] netlink: 'syz.2.1495': attribute type 15 has an invalid length. [ 319.301834][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 319.335083][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 319.505916][T12094] netlink: 'syz.4.1501': attribute type 8 has an invalid length. [ 319.627614][T12102] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.644384][T12110] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20002 [ 319.655607][T12105] bond7: option mode: unable to set because the bond device is up [ 319.965397][T12126] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.984622][T12130] nbd: must specify a size in bytes for the device [ 320.068298][T12126] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.149662][T12126] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.160690][T12126] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.235251][T12134] lo speed is unknown, defaulting to 1000 [ 320.275048][T12126] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.285988][T12126] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.316082][T12134] lo speed is unknown, defaulting to 1000 [ 320.342718][T12134] wg1 speed is unknown, defaulting to 1000 [ 320.378136][T12126] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.392364][T12126] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.764875][ T7526] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.794652][ T7526] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.805351][T12152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1516'. [ 320.857529][T12153] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 320.874893][ T7526] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.894253][ T7526] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.913151][ T7526] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.937043][ T7526] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.974159][ T7526] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.985561][ T7526] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.075822][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'. [ 321.192638][T12161] lo speed is unknown, defaulting to 1000 [ 321.231327][T12161] lo speed is unknown, defaulting to 1000 [ 321.351983][T12161] wg1 speed is unknown, defaulting to 1000 [ 321.435164][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'. [ 321.560512][T12179] vlan3: entered promiscuous mode [ 321.565668][T12179] batadv0: entered promiscuous mode [ 321.811753][T12164] netlink: 'syz.3.1520': attribute type 17 has an invalid length. [ 321.822836][T12198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1529'. [ 321.860070][T12164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.892923][T12203] netlink: 'syz.1.1530': attribute type 1 has an invalid length. [ 322.076564][T12207] bond8: (slave gretap2): making interface the new active one [ 322.088159][T12207] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 322.241870][T12220] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.298871][T12225] pim6reg1: entered promiscuous mode [ 322.304703][T12225] pim6reg1: entered allmulticast mode [ 323.113755][T12271] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1547'. [ 323.505867][T12287] lo speed is unknown, defaulting to 1000 [ 323.516182][T12286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1552'. [ 323.541277][T12287] lo speed is unknown, defaulting to 1000 [ 323.554601][T12287] wg1 speed is unknown, defaulting to 1000 [ 323.831056][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 323.864452][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 324.121346][T12303] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 324.140775][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 324.191352][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'. [ 324.228272][T12303] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1558'. [ 324.345116][T12303] bond10: option lacp_rate: invalid value (180) [ 324.392768][T12303] bond10 (unregistering): Released all slaves [ 324.448746][T12317] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 324.462898][T12317] netlink: 'syz.3.1561': attribute type 2 has an invalid length. [ 324.473128][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 324.613160][T12325] netlink: 'syz.4.1563': attribute type 17 has an invalid length. [ 324.626616][T12325] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1563'. [ 324.673675][T12330] vlan3: entered allmulticast mode [ 324.690483][T12330] ip6gretap0: entered allmulticast mode [ 324.782160][T12333] lo speed is unknown, defaulting to 1000 [ 324.789989][T12333] lo speed is unknown, defaulting to 1000 [ 324.806948][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 324.842671][T12333] wg1 speed is unknown, defaulting to 1000 [ 324.855798][T12343] lo speed is unknown, defaulting to 1000 [ 324.887171][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 324.902571][T12343] lo speed is unknown, defaulting to 1000 [ 324.924926][T12343] wg1 speed is unknown, defaulting to 1000 [ 324.973774][T12353] bond1: option miimon: invalid value (18446744073709551607) [ 324.981807][T12353] bond1: option miimon: allowed values 0 - 2147483647 [ 324.990941][T12353] bond1 (unregistering): Released all slaves [ 325.068478][T12356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1572'. [ 325.819224][T12391] bond0: (slave rose0): Enslaving as an active interface with an up link [ 325.955088][T12399] netlink: 'syz.3.1583': attribute type 33 has an invalid length. [ 325.985614][T12399] netlink: 'syz.3.1583': attribute type 17 has an invalid length. [ 326.004395][T12399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.080462][ T7531] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 326.102934][T12411] netlink: 'syz.0.1588': attribute type 39 has an invalid length. [ 326.254720][T12414] lo speed is unknown, defaulting to 1000 [ 326.261628][T12414] lo speed is unknown, defaulting to 1000 [ 326.272856][T12414] wg1 speed is unknown, defaulting to 1000 [ 326.475027][T12424] syz_tun: entered allmulticast mode [ 326.548267][T12424] syz_tun: left allmulticast mode [ 326.979742][T12450] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 327.033392][T12451] lo speed is unknown, defaulting to 1000 [ 327.048329][T12451] lo speed is unknown, defaulting to 1000 [ 327.059182][T12451] wg1 speed is unknown, defaulting to 1000 [ 327.165861][T12453] lo speed is unknown, defaulting to 1000 [ 327.184569][T12453] lo speed is unknown, defaulting to 1000 [ 327.243593][T12453] wg1 speed is unknown, defaulting to 1000 [ 327.748833][T12467] lo speed is unknown, defaulting to 1000 [ 327.779907][T12474] lo speed is unknown, defaulting to 1000 [ 327.829019][T12474] lo speed is unknown, defaulting to 1000 [ 327.874423][T12467] lo speed is unknown, defaulting to 1000 [ 327.883387][T12474] wg1 speed is unknown, defaulting to 1000 [ 327.994800][T12467] wg1 speed is unknown, defaulting to 1000 [ 328.212136][T12496] tipc: Enabling of bearer rejected, already enabled [ 328.619137][T12512] __nla_validate_parse: 14 callbacks suppressed [ 328.619158][T12512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1613'. [ 328.730178][T12518] syzkaller0: entered promiscuous mode [ 328.735842][T12518] syzkaller0: entered allmulticast mode [ 328.768668][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1617'. [ 328.858599][T12520] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 328.866510][T12520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1616'. [ 328.876947][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 328.885933][T12518] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 328.894915][T12518] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1616'. [ 328.904916][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 328.925155][T12526] lo speed is unknown, defaulting to 1000 [ 328.960675][T12526] lo speed is unknown, defaulting to 1000 [ 328.984162][T12524] lo speed is unknown, defaulting to 1000 [ 329.095934][T12526] wg1 speed is unknown, defaulting to 1000 [ 329.102233][T12524] lo speed is unknown, defaulting to 1000 [ 329.144703][T12524] wg1 speed is unknown, defaulting to 1000 [ 329.551983][T12567] nbd: must specify at least one socket [ 329.681177][T12578] netlink: 'syz.4.1633': attribute type 6 has an invalid length. [ 329.869423][T12582] lo speed is unknown, defaulting to 1000 [ 329.880147][T12592] syzkaller0: entered promiscuous mode [ 329.893332][T12592] syzkaller0: entered allmulticast mode [ 329.903365][T12590] tipc: Enabled bearer , priority 0 [ 329.912037][T12582] lo speed is unknown, defaulting to 1000 [ 330.078410][ T9650] wg1 speed is unknown, defaulting to 1000 [ 330.081969][T12582] wg1 speed is unknown, defaulting to 1000 [ 330.165949][T12587] tipc: Resetting bearer [ 330.200905][T12587] tipc: Disabling bearer [ 330.246952][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 330.254541][T12605] lo speed is unknown, defaulting to 1000 [ 330.290477][T12605] lo speed is unknown, defaulting to 1000 [ 330.388950][T12605] wg1 speed is unknown, defaulting to 1000 [ 330.730302][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1651'. [ 330.768702][T12628] lo speed is unknown, defaulting to 1000 [ 330.798179][T12628] lo speed is unknown, defaulting to 1000 [ 330.838639][T12628] wg1 speed is unknown, defaulting to 1000 [ 331.020021][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 331.067503][T12655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1656'. [ 331.270277][T12674] netlink: 'syz.2.1660': attribute type 1 has an invalid length. [ 331.512782][T12670] team0 (unregistering): Port device team_slave_0 removed [ 331.521493][T12670] team0 (unregistering): Port device team_slave_1 removed [ 331.622556][T12680] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 331.633714][T12680] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 331.665869][T12686] bond6: (slave bridge1): Enslaving as an active interface with a down link [ 331.676302][T12671] syzkaller0: entered promiscuous mode [ 331.682695][T12671] syzkaller0: entered allmulticast mode [ 331.698476][T12688] gretap3: entered promiscuous mode [ 331.703819][T12688] gretap3: entered allmulticast mode [ 331.712542][T12688] bond6: (slave gretap3): making interface the new active one [ 331.722413][T12688] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 331.785692][T12679] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 331.804745][T12679] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1657'. [ 331.820581][T12694] bond1: (slave bond_slave_1): Device is not bonding slave [ 331.828468][T12694] bond1: option active_slave: invalid value (bond_slave_1) [ 331.838195][T12694] bond1 (unregistering): Released all slaves [ 332.132680][T12699] lo speed is unknown, defaulting to 1000 [ 332.141171][T12699] lo speed is unknown, defaulting to 1000 [ 332.153476][T12699] wg1 speed is unknown, defaulting to 1000 [ 332.633444][T12746] lo speed is unknown, defaulting to 1000 [ 332.837628][T12746] lo speed is unknown, defaulting to 1000 [ 333.035881][T12746] wg1 speed is unknown, defaulting to 1000 [ 333.548423][T12797] netlink: 'syz.2.1683': attribute type 1 has an invalid length. [ 333.761501][T12812] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 333.799370][T12812] batman_adv: batadv0: Adding interface: gretap4 [ 333.805857][T12812] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.833497][T12812] batman_adv: batadv0: Interface activated: gretap4 [ 333.858112][T12810] __nla_validate_parse: 5 callbacks suppressed [ 333.858132][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1688'. [ 333.964692][T12818] netlink: 'syz.2.1692': attribute type 13 has an invalid length. [ 333.973172][T12818] netlink: 'syz.2.1692': attribute type 17 has an invalid length. [ 334.024366][T12818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.033475][T12818] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.043054][T12818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.064397][T12820] gtp0: entered promiscuous mode [ 334.070861][T12820] gtp0: entered allmulticast mode [ 334.147902][T12826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1695'. [ 334.224706][T12828] tipc: Enabled bearer , priority 0 [ 334.234878][T12828] syzkaller0: entered promiscuous mode [ 334.241534][T12828] syzkaller0: entered allmulticast mode [ 334.277555][T12830] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1695'. [ 334.299031][T12830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.341401][T12827] tipc: Resetting bearer [ 334.370148][T12827] tipc: Disabling bearer [ 334.605072][T12837] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1697'. [ 334.672742][T12841] vlan3: entered allmulticast mode [ 335.497843][T12874] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1709'. [ 335.523003][T12875] lo speed is unknown, defaulting to 1000 [ 335.529504][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'. [ 335.544036][T12881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1711'. [ 335.551443][T12875] lo speed is unknown, defaulting to 1000 [ 335.602736][T12875] wg1 speed is unknown, defaulting to 1000 [ 335.932507][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1717'. [ 336.300019][T12908] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 336.891929][T12920] lo speed is unknown, defaulting to 1000 [ 336.928949][T12920] lo speed is unknown, defaulting to 1000 [ 336.958194][T12920] wg1 speed is unknown, defaulting to 1000 [ 337.851565][T12970] netlink: 'syz.4.1737': attribute type 2 has an invalid length. [ 337.880631][T12970] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 337.937036][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 338.000182][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 338.141718][T12987] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 338.160213][T12987] bond10 (unregistering): Released all slaves [ 338.362754][T13004] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 338.402620][T13006] sctp: [Deprecated]: syz.2.1746 (pid 13006) Use of int in maxseg socket option. [ 338.402620][T13006] Use struct sctp_assoc_value instead [ 338.765817][T13033] netlink: 'syz.1.1752': attribute type 16 has an invalid length. [ 338.774940][T13033] netlink: 'syz.1.1752': attribute type 17 has an invalid length. [ 338.826588][T13033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.886866][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 338.983703][T13049] __nla_validate_parse: 5 callbacks suppressed [ 338.992193][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 339.137858][T13049] bond0: (slave bridge0): Releasing backup interface [ 339.327658][T13057] lo speed is unknown, defaulting to 1000 [ 339.339865][T13059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1760'. [ 339.349855][T13059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1760'. [ 339.361372][T13057] lo speed is unknown, defaulting to 1000 [ 339.371462][T13057] wg1 speed is unknown, defaulting to 1000 [ 339.701034][T13072] netlink: 'syz.4.1768': attribute type 5 has an invalid length. [ 339.947637][T13084] netlink: 'syz.2.1771': attribute type 1 has an invalid length. [ 340.146070][T13088] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 340.166885][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.278312][T13085] lo speed is unknown, defaulting to 1000 [ 340.296471][T13085] lo speed is unknown, defaulting to 1000 [ 340.307086][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 340.388851][T13098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.439283][T13100] bond8: (slave macsec3): Error -34 calling dev_set_mtu [ 340.450357][T13102] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 340.471606][T13085] wg1 speed is unknown, defaulting to 1000 [ 340.700182][T13113] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 340.732598][T13113] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1775'. [ 341.126573][T13129] bond1: option updelay: invalid value (18446744072065443590) [ 341.186504][T13129] bond1: option updelay: allowed values 0 - 2147483647 [ 341.376354][T13129] bond1 (unregistering): Released all slaves [ 341.486864][T13160] vxcan1: entered allmulticast mode [ 341.618356][T13164] netlink: 'syz.1.1789': attribute type 13 has an invalid length. [ 341.636477][T13164] netlink: 'syz.1.1789': attribute type 17 has an invalid length. [ 341.755964][T13164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.878494][T13169] lo speed is unknown, defaulting to 1000 [ 341.886076][T13169] lo speed is unknown, defaulting to 1000 [ 341.939538][T13169] wg1 speed is unknown, defaulting to 1000 [ 342.594956][T13197] ipvlan2: entered promiscuous mode [ 342.694432][T13210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1797'. [ 342.722342][T13210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1797'. [ 342.747595][T13210] netlink: 'syz.1.1797': attribute type 4 has an invalid length. [ 342.755716][T13213] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 342.922876][T13224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1800'. [ 343.050513][T13215] lo speed is unknown, defaulting to 1000 [ 343.051616][T13228] syz_tun: entered allmulticast mode [ 343.063138][T13215] lo speed is unknown, defaulting to 1000 [ 343.073515][T13228] dvmrp8: entered allmulticast mode [ 343.103549][T13215] wg1 speed is unknown, defaulting to 1000 [ 343.163551][T13228] lo speed is unknown, defaulting to 1000 [ 343.178812][T13230] netlink: 'syz.0.1801': attribute type 23 has an invalid length. [ 343.202787][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 343.228618][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 343.240470][T13228] lo speed is unknown, defaulting to 1000 [ 343.272489][T13228] wg1 speed is unknown, defaulting to 1000 [ 343.499480][T13227] syz_tun: left allmulticast mode [ 343.507943][T13227] dvmrp8: left allmulticast mode [ 343.675075][T13244] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 343.802111][T13250] netlink: 'syz.4.1807': attribute type 13 has an invalid length. [ 343.833915][T13250] netlink: 'syz.4.1807': attribute type 17 has an invalid length. [ 343.923618][T13250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.944187][T13250] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.961170][T13250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.011911][ T9650] lo speed is unknown, defaulting to 1000 [ 344.036940][ T9650] syz2: Port: 1 Link ACTIVE [ 344.212107][T13276] tipc: Enabled bearer , priority 0 [ 344.296031][T13276] syzkaller0: entered promiscuous mode [ 344.305715][T13276] syzkaller0: entered allmulticast mode [ 344.314048][T13276] tipc: Resetting bearer [ 344.321916][T13280] batadv_slave_1: entered promiscuous mode [ 344.336535][T13285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.399150][T13274] tipc: Resetting bearer [ 344.424360][T13282] __nla_validate_parse: 6 callbacks suppressed [ 344.424381][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'. [ 344.733267][T13302] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1818'. [ 345.259346][ T5936] tipc: Node number set to 546105229 [ 345.824795][T13274] tipc: Disabling bearer [ 345.833544][T13279] batadv_slave_1: left promiscuous mode [ 345.896232][T13308] lo speed is unknown, defaulting to 1000 [ 345.919970][T13308] lo speed is unknown, defaulting to 1000 [ 345.932543][T13308] wg1 speed is unknown, defaulting to 1000 [ 346.005681][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 346.058776][T13322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1823'. [ 346.098161][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'. [ 346.331582][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 347.071261][T13371] lo speed is unknown, defaulting to 1000 [ 347.089651][T13371] lo speed is unknown, defaulting to 1000 [ 347.116637][T13371] wg1 speed is unknown, defaulting to 1000 [ 347.232323][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 347.317084][T13390] lo speed is unknown, defaulting to 1000 [ 347.368098][T13390] lo speed is unknown, defaulting to 1000 [ 347.410096][T13390] wg1 speed is unknown, defaulting to 1000 [ 347.688018][T13399] bond0: entered promiscuous mode [ 347.695632][T13399] bond_slave_0: entered promiscuous mode [ 347.834530][T13399] batadv0: entered promiscuous mode [ 347.849301][T13399] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 347.879692][T13399] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 348.400598][T13428] lo speed is unknown, defaulting to 1000 [ 348.414803][T13430] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1853'. [ 348.433220][T13428] lo speed is unknown, defaulting to 1000 [ 348.448574][T13428] wg1 speed is unknown, defaulting to 1000 [ 348.560728][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 348.772854][T13439] lo speed is unknown, defaulting to 1000 [ 348.780503][T13439] lo speed is unknown, defaulting to 1000 [ 348.872679][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1859'. [ 348.979213][T13439] wg1 speed is unknown, defaulting to 1000 [ 348.986357][T13447] lo speed is unknown, defaulting to 1000 [ 349.056458][T13447] lo speed is unknown, defaulting to 1000 [ 349.079054][T13454] lo speed is unknown, defaulting to 1000 [ 349.136372][T13454] lo speed is unknown, defaulting to 1000 [ 349.231691][T13447] wg1 speed is unknown, defaulting to 1000 [ 349.243028][T13454] wg1 speed is unknown, defaulting to 1000 [ 349.713190][T13491] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 349.765354][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 349.909644][T13497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1871'. [ 349.954708][T13504] lo speed is unknown, defaulting to 1000 [ 349.983644][T13497] bond9: (slave erspan0): Releasing active interface [ 349.996752][T13497] ip6gretap1: entered promiscuous mode [ 350.032311][T13497] bond0: (slave bond2): Releasing backup interface [ 350.033973][T13506] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 350.050583][T13497] bond3: (slave bond4): Releasing backup interface [ 350.062878][T13497] bond7: (slave gretap2): Releasing active interface [ 350.091224][T13497] bond8: (slave gretap3): Releasing active interface [ 350.123159][T13497] bond9: (slave ip6gretap1): Releasing active interface [ 350.137033][T13497] bond9: (slave ip6gretap1): the permanent HWaddr of slave - fa:45:8f:40:f7:cc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 350.179417][T13497] ip6gretap1: left promiscuous mode [ 350.219406][T13497] bond9: (slave veth7): Releasing active interface [ 350.245011][T13523] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.258961][T13497] batman_adv: batadv0: Interface deactivated: gretap4 [ 350.265769][T13497] batman_adv: batadv0: Removing interface: gretap4 [ 350.293553][T13504] lo speed is unknown, defaulting to 1000 [ 350.388088][T13506] bond2: entered promiscuous mode [ 350.422215][T13506] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.525030][T13512] bond2: (slave bridge0): making interface the new active one [ 350.532970][T13512] bridge0: entered promiscuous mode [ 350.541569][T13512] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 350.545580][T13535] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1875'. [ 350.618533][T13504] wg1 speed is unknown, defaulting to 1000 [ 350.822216][T13523] lo speed is unknown, defaulting to 1000 [ 350.967277][T13523] lo speed is unknown, defaulting to 1000 [ 351.000374][T13523] wg1 speed is unknown, defaulting to 1000 [ 351.402279][T13571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1885'. [ 351.862482][T13600] pimreg: entered allmulticast mode [ 351.894704][T13608] netlink: 'syz.4.1896': attribute type 10 has an invalid length. [ 351.936501][T13600] pimreg: left allmulticast mode [ 352.060853][T13610] lo speed is unknown, defaulting to 1000 [ 352.075196][T13610] lo speed is unknown, defaulting to 1000 [ 352.086242][T13610] wg1 speed is unknown, defaulting to 1000 [ 352.690569][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 353.238995][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1911'. [ 353.373032][T13676] lo speed is unknown, defaulting to 1000 [ 353.402040][T13676] lo speed is unknown, defaulting to 1000 [ 353.425053][T13676] wg1 speed is unknown, defaulting to 1000 [ 353.499646][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1915'. [ 354.077975][T13701] lo speed is unknown, defaulting to 1000 [ 354.085481][T13701] lo speed is unknown, defaulting to 1000 [ 354.148857][T13701] wg1 speed is unknown, defaulting to 1000 [ 354.357993][T13724] netlink: 'syz.0.1928': attribute type 12 has an invalid length. [ 354.412401][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1928'. [ 354.444569][T13728] netlink: 'syz.3.1929': attribute type 13 has an invalid length. [ 354.458039][T13728] netlink: 'syz.3.1929': attribute type 17 has an invalid length. [ 354.539171][T13728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.600659][T13734] lo speed is unknown, defaulting to 1000 [ 354.610103][T13734] lo speed is unknown, defaulting to 1000 [ 354.620106][T13734] wg1 speed is unknown, defaulting to 1000 [ 354.886849][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 354.966089][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1935'. [ 355.249043][T13766] lo speed is unknown, defaulting to 1000 [ 355.258555][T13766] lo speed is unknown, defaulting to 1000 [ 355.298330][T13766] wg1 speed is unknown, defaulting to 1000 [ 355.436130][T13769] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1938'. [ 355.796421][T13784] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1941'. [ 355.869473][T13781] lo speed is unknown, defaulting to 1000 [ 355.887521][T13781] lo speed is unknown, defaulting to 1000 [ 355.899406][T13781] wg1 speed is unknown, defaulting to 1000 [ 355.899514][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1944'. [ 356.164769][T13786] lo speed is unknown, defaulting to 1000 [ 356.269775][T13786] lo speed is unknown, defaulting to 1000 [ 356.299217][T13786] wg1 speed is unknown, defaulting to 1000 [ 356.365881][T13811] netlink: 'syz.0.1949': attribute type 1 has an invalid length. [ 356.446304][T13811] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.499133][T13817] netlink: 'syz.1.1950': attribute type 10 has an invalid length. [ 356.564564][T13814] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 356.578075][T13814] bond10: (slave batadv2): making interface the new active one [ 356.589047][T13814] bond10: (slave batadv2): Enslaving as an active interface with an up link [ 356.636875][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 356.780903][T13827] openvswitch: netlink: Message has 1 unknown bytes. [ 356.799529][T13827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.923610][T13811] bond10 (unregistering): (slave batadv2): Releasing active interface [ 356.935166][T13811] bond10 (unregistering): Released all slaves [ 357.139488][T13838] lo speed is unknown, defaulting to 1000 [ 357.159369][T13835] lo speed is unknown, defaulting to 1000 [ 357.186622][T13838] lo speed is unknown, defaulting to 1000 [ 357.194419][T13848] tipc: Enabling of bearer rejected, failed to enable media [ 357.220130][T13838] wg1 speed is unknown, defaulting to 1000 [ 357.229802][T13835] lo speed is unknown, defaulting to 1000 [ 357.246353][T13854] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1961'. [ 357.256143][T13835] wg1 speed is unknown, defaulting to 1000 [ 357.766456][T13874] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 357.779700][T13874] netlink: 'syz.0.1965': attribute type 3 has an invalid length. [ 357.787983][T13874] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1965'. [ 357.852166][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1966'. [ 358.040591][T13883] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 358.396520][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 358.645110][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 358.698082][T13908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.631719][T13965] lo speed is unknown, defaulting to 1000 [ 359.679560][T13965] lo speed is unknown, defaulting to 1000 [ 359.790885][T13965] wg1 speed is unknown, defaulting to 1000 [ 360.151544][T13995] __nla_validate_parse: 39 callbacks suppressed [ 360.151564][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2006'. [ 360.206426][T13994] tipc: Enabled bearer , priority 0 [ 360.237513][T13994] syzkaller0: entered promiscuous mode [ 360.244072][T13994] syzkaller0: entered allmulticast mode [ 360.385669][T14008] netlink: 'syz.4.2006': attribute type 4 has an invalid length. [ 360.439100][T14009] tipc: Resetting bearer [ 360.456086][T13989] netlink: 'syz.4.2006': attribute type 4 has an invalid length. [ 360.471226][T14007] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 360.506931][ T9652] lo speed is unknown, defaulting to 1000 [ 360.539436][T13990] tipc: Resetting bearer [ 360.598844][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 360.620032][T13990] tipc: Disabling bearer [ 360.644841][T14016] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 360.654413][ T9650] lo speed is unknown, defaulting to 1000 [ 360.962526][T14016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.788035][T14045] lo speed is unknown, defaulting to 1000 [ 361.800442][T14045] lo speed is unknown, defaulting to 1000 [ 361.812456][T14045] wg1 speed is unknown, defaulting to 1000 [ 361.819055][T14049] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 361.988880][T14053] lo speed is unknown, defaulting to 1000 [ 362.001486][T14053] lo speed is unknown, defaulting to 1000 [ 362.011749][T14053] wg1 speed is unknown, defaulting to 1000 [ 362.188724][T14071] syz_tun: entered allmulticast mode [ 362.470038][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 362.650528][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 362.759436][T14087] bond2: (slave bridge0): Releasing backup interface [ 362.767315][T14092] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.775181][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 362.775856][T14087] bridge0 (unregistering): left promiscuous mode [ 362.964517][T14071] syz_tun: left allmulticast mode [ 363.829968][T14103] lo speed is unknown, defaulting to 1000 [ 363.880171][T14103] lo speed is unknown, defaulting to 1000 [ 363.903342][T14103] wg1 speed is unknown, defaulting to 1000 [ 364.089542][T14123] lo speed is unknown, defaulting to 1000 [ 364.098145][T14123] lo speed is unknown, defaulting to 1000 [ 364.192946][T14123] wg1 speed is unknown, defaulting to 1000 [ 364.346041][T14135] lo speed is unknown, defaulting to 1000 [ 364.396844][T14135] lo speed is unknown, defaulting to 1000 [ 364.476523][T14141] lo speed is unknown, defaulting to 1000 [ 364.505919][T14135] wg1 speed is unknown, defaulting to 1000 [ 364.536544][T14141] lo speed is unknown, defaulting to 1000 [ 364.670291][T14141] wg1 speed is unknown, defaulting to 1000 [ 364.839044][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2048'. [ 365.228592][T14174] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2055'. [ 365.238122][T14174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'. [ 365.276885][T14174] tipc: Cannot configure node identity twice [ 365.287065][T14174] tipc: Cannot configure node identity twice [ 365.356582][T14179] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 365.391120][T14181] tipc: Enabled bearer , priority 0 [ 365.404182][T14181] syzkaller0: entered promiscuous mode [ 365.415996][T14181] syzkaller0: entered allmulticast mode [ 365.434331][T14179] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 365.565369][T14186] netlink: 'syz.3.2060': attribute type 14 has an invalid length. [ 365.574977][T14186] netem: change failed [ 365.616308][T14179] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 365.642979][T14191] tipc: Resetting bearer [ 365.720468][T14179] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 365.761538][T14180] tipc: Resetting bearer [ 365.792796][T14180] tipc: Disabling bearer [ 365.908979][ T7525] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 365.937280][ T7525] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 365.945610][ T7525] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.022524][ T7525] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 366.181709][T14216] syz.3.2068: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 366.215981][T14216] CPU: 1 UID: 0 PID: 14216 Comm: syz.3.2068 Not tainted syzkaller #0 PREEMPT(full) [ 366.216011][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.216030][T14216] Call Trace: [ 366.216046][T14216] [ 366.216055][T14216] dump_stack_lvl+0x189/0x250 [ 366.216089][T14216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.216114][T14216] ? __pfx__printk+0x10/0x10 [ 366.216144][T14216] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 366.216170][T14216] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 366.216198][T14216] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 366.216226][T14216] warn_alloc+0x214/0x310 [ 366.216260][T14216] ? __pfx_warn_alloc+0x10/0x10 [ 366.216296][T14216] ? __get_vm_area_node+0x28f/0x300 [ 366.216322][T14216] ? fq_pie_init+0x430/0x840 [ 366.216354][T14216] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 366.216416][T14216] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 366.216449][T14216] ? rcu_is_watching+0x15/0xb0 [ 366.216473][T14216] ? fq_pie_init+0x430/0x840 [ 366.216499][T14216] ? fq_pie_init+0x430/0x840 [ 366.216522][T14216] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 366.216548][T14216] ? fq_pie_init+0x430/0x840 [ 366.216573][T14216] ? tcf_block_get+0x67/0xa0 [ 366.216591][T14216] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 366.216616][T14216] fq_pie_init+0x430/0x840 [ 366.216646][T14216] ? __pfx_fq_pie_init+0x10/0x10 [ 366.216674][T14216] qdisc_create+0x7a9/0xea0 [ 366.216708][T14216] tc_modify_qdisc+0x1538/0x20e0 [ 366.216752][T14216] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 366.216811][T14216] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 366.216845][T14216] rtnetlink_rcv_msg+0x77c/0xb70 [ 366.216871][T14216] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 366.216889][T14216] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.216906][T14216] ? ref_tracker_free+0x63a/0x7d0 [ 366.216936][T14216] ? __asan_memcpy+0x40/0x70 [ 366.216955][T14216] ? __pfx_ref_tracker_free+0x10/0x10 [ 366.216992][T14216] netlink_rcv_skb+0x208/0x470 [ 366.217015][T14216] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.217043][T14216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.217077][T14216] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.217113][T14216] netlink_unicast+0x82c/0x9e0 [ 366.217152][T14216] ? __pfx_netlink_unicast+0x10/0x10 [ 366.217183][T14216] ? netlink_sendmsg+0x642/0xb30 [ 366.217201][T14216] ? skb_put+0x11b/0x210 [ 366.217228][T14216] netlink_sendmsg+0x805/0xb30 [ 366.217259][T14216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.217282][T14216] ? aa_sock_msg_perm+0xf1/0x1d0 [ 366.217312][T14216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.217341][T14216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.217363][T14216] __sock_sendmsg+0x21c/0x270 [ 366.217395][T14216] ____sys_sendmsg+0x505/0x830 [ 366.217425][T14216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.217459][T14216] ? import_iovec+0x74/0xa0 [ 366.217486][T14216] ___sys_sendmsg+0x21f/0x2a0 [ 366.217512][T14216] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.217578][T14216] ? __fget_files+0x2a/0x420 [ 366.217602][T14216] ? __fget_files+0x3a0/0x420 [ 366.217640][T14216] __x64_sys_sendmsg+0x19b/0x260 [ 366.217666][T14216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.217702][T14216] ? rcu_is_watching+0x15/0xb0 [ 366.217730][T14216] ? do_syscall_64+0xbe/0x3b0 [ 366.217756][T14216] do_syscall_64+0xfa/0x3b0 [ 366.217773][T14216] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.217803][T14216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.217822][T14216] ? clear_bhb_loop+0x60/0xb0 [ 366.217846][T14216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.217865][T14216] RIP: 0033:0x7f49a318eec9 [ 366.217890][T14216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.217907][T14216] RSP: 002b:00007f49a405b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.217926][T14216] RAX: ffffffffffffffda RBX: 00007f49a33e5fa0 RCX: 00007f49a318eec9 [ 366.217940][T14216] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 000000000000000a [ 366.217952][T14216] RBP: 00007f49a3211f91 R08: 0000000000000000 R09: 0000000000000000 [ 366.217963][T14216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.217975][T14216] R13: 00007f49a33e6038 R14: 00007f49a33e5fa0 R15: 00007ffd2cc7b588 [ 366.218006][T14216] [ 366.653106][T14216] Mem-Info: [ 366.656250][T14216] active_anon:4777 inactive_anon:0 isolated_anon:0 [ 366.656250][T14216] active_file:3205 inactive_file:39981 isolated_file:0 [ 366.656250][T14216] unevictable:768 dirty:173 writeback:0 [ 366.656250][T14216] slab_reclaimable:12359 slab_unreclaimable:198961 [ 366.656250][T14216] mapped:29214 shmem:1361 pagetables:1166 [ 366.656250][T14216] sec_pagetables:0 bounce:0 [ 366.656250][T14216] kernel_misc_reclaimable:0 [ 366.656250][T14216] free:1220781 free_pcp:17388 free_cma:0 [ 366.725709][T14216] Node 0 active_anon:19308kB inactive_anon:0kB active_file:12820kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116856kB dirty:692kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13984kB pagetables:4512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 366.758792][T14216] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 366.790300][T14216] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.821832][T14216] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 366.828462][T14216] Node 0 DMA32 free:969004kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19168kB inactive_anon:0kB active_file:12820kB inactive_file:159400kB unevictable:1536kB writepending:692kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:51136kB local_pcp:21448kB free_cma:0kB [ 366.862320][T14216] lowmem_reserve[]: 0 0 0 0 0 [ 366.867721][T14216] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.898076][T14216] lowmem_reserve[]: 0 0 0 0 0 [ 366.902827][T14216] Node 1 Normal free:3900284kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16292kB local_pcp:8672kB free_cma:0kB [ 366.935742][T14216] lowmem_reserve[]: 0 0 0 0 0 [ 366.936645][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 366.940951][T14216] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 366.963861][T14216] Node 0 DMA32: 1060*4kB (UME) 1159*8kB (UME) 434*16kB (UME) 562*32kB (UME) 439*64kB (UME) 189*128kB (UME) 107*256kB (UM) 66*512kB (UM) 28*1024kB (UM) 4*2048kB (UME) 191*4096kB (UM) = 971112kB [ 366.984105][T14216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 366.997428][T14216] Node 1 Normal: 175*4kB (UE) 42*8kB (UME) 37*16kB (UME) 107*32kB (UME) 33*64kB (UME) 7*128kB (UME) 4*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3900284kB [ 367.053177][T14216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.063532][T14216] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.079099][T14216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.089556][T14216] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.099395][T14216] 44543 total pagecache pages [ 367.104096][T14216] 0 pages in swap cache [ 367.109339][T14216] Free swap = 124996kB [ 367.113510][T14216] Total swap = 124996kB [ 367.118414][T14216] 2097051 pages RAM [ 367.122230][T14216] 0 pages HighMem/MovableOnly [ 367.127058][T14216] 423781 pages reserved [ 367.131216][T14216] 0 pages cma reserved [ 367.413827][T14268] netlink: 'syz.1.2077': attribute type 1 has an invalid length. [ 367.423293][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2077'. [ 367.430070][T14271] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 367.441638][T14268] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2077'. [ 367.462525][T14272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'. [ 367.499115][T14271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2076'. [ 367.515553][T14273] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2079'. [ 367.551312][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2076'. [ 367.619075][T14271] pim6reg1: entered promiscuous mode [ 367.624442][T14271] pim6reg1: entered allmulticast mode [ 367.878463][T14309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2087'. [ 368.678107][T14350] 8021q: adding VLAN 0 to HW filter on device bond10 [ 368.689515][T14354] netlink: 'syz.1.2101': attribute type 11 has an invalid length. [ 368.711699][T14350] macsec1: entered promiscuous mode [ 368.717130][T14350] bond10: entered promiscuous mode [ 368.722424][T14350] macsec1: entered allmulticast mode [ 368.734432][T14350] bond10: entered allmulticast mode [ 368.741780][T14350] bond10: left allmulticast mode [ 368.747168][T14350] bond10: left promiscuous mode [ 368.911072][T14361] netlink: 'syz.4.2103': attribute type 13 has an invalid length. [ 368.922767][T14359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.150615][ T5936] lo speed is unknown, defaulting to 1000 [ 369.156451][ T5936] syz2: Port: 1 Link DOWN [ 369.164092][ T7530] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.172992][ T7530] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.185739][ T7530] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.204990][ T7530] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.408789][T14399] netlink: 'syz.3.2112': attribute type 9 has an invalid length. [ 369.922174][T14431] tipc: Failed to remove unknown binding: 66,1,1/337892443:2116425091/2116425093 [ 369.933456][T14431] tipc: Failed to remove unknown binding: 66,1,1/337892443:2116425091/2116425093 [ 369.991070][T14436] netlink: 'syz.2.2123': attribute type 3 has an invalid length. [ 370.120702][T14447] tipc: Enabling of bearer rejected, already enabled [ 370.430791][T14466] __nla_validate_parse: 12 callbacks suppressed [ 370.430811][T14466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2131'. [ 370.598238][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 370.702678][T14470] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 370.717339][T14470] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 370.727317][T14470] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 370.739246][ T7528] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 370.775566][ T7528] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 370.813733][ T7531] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 370.833885][ T7531] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 370.912859][T14487] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 371.017505][T14495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 371.085926][T14497] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 371.168789][T14501] bond2 (unregistering): Released all slaves [ 371.228362][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2141'. [ 371.283212][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 371.480422][T14504] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2141'. [ 371.599047][T14521] GUP no longer grows the stack in syz.0.2144 (14521): 200000003000-20000000a000 (200000001000) [ 371.641272][T14521] CPU: 0 UID: 0 PID: 14521 Comm: syz.0.2144 Not tainted syzkaller #0 PREEMPT(full) [ 371.641300][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.641312][T14521] Call Trace: [ 371.641320][T14521] [ 371.641328][T14521] dump_stack_lvl+0x189/0x250 [ 371.641361][T14521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.641385][T14521] ? __pfx__printk+0x10/0x10 [ 371.641411][T14521] ? find_vma+0xe7/0x160 [ 371.641452][T14521] __get_user_pages+0x24d0/0x2ce0 [ 371.641470][T14521] ? __lock_acquire+0xab9/0xd20 [ 371.641519][T14521] ? __gup_longterm_locked+0xc63/0x1660 [ 371.641549][T14521] __gup_longterm_locked+0xde4/0x1660 [ 371.641587][T14521] ? sanity_check_pinned_pages+0x123a/0x1300 [ 371.641619][T14521] gup_fast_fallback+0x1e6a/0x2010 [ 371.641679][T14521] ? __pfx_gup_fast_fallback+0x10/0x10 [ 371.641698][T14521] ? stack_trace_save+0x9c/0xe0 [ 371.641724][T14521] ? __pfx_stack_trace_save+0x10/0x10 [ 371.641761][T14521] ? pin_user_pages_fast+0x4d/0xb0 [ 371.641785][T14521] iov_iter_extract_pages+0x35a/0x5e0 [ 371.641822][T14521] extract_iter_to_sg+0xe46/0x24e0 [ 371.641872][T14521] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 371.641924][T14521] ? __asan_memset+0x22/0x50 [ 371.641946][T14521] af_alg_get_rsgl+0x436/0x810 [ 371.641998][T14521] aead_recvmsg+0x4d5/0x13b0 [ 371.642025][T14521] ? finish_task_switch+0x266/0x950 [ 371.642059][T14521] ? aa_sk_perm+0x81e/0x950 [ 371.642092][T14521] ? __schedule+0x17ae/0x4cc0 [ 371.642124][T14521] ? __pfx_aead_recvmsg+0x10/0x10 [ 371.642154][T14521] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 371.642185][T14521] ? __pfx_aead_recvmsg+0x10/0x10 [ 371.642212][T14521] sock_recvmsg_nosec+0x183/0x1c0 [ 371.642246][T14521] ____sys_recvmsg+0x3aa/0x460 [ 371.642280][T14521] ? __pfx_____sys_recvmsg+0x10/0x10 [ 371.642323][T14521] ? import_iovec+0x74/0xa0 [ 371.642350][T14521] ___sys_recvmsg+0x1b5/0x510 [ 371.642381][T14521] ? __pfx____sys_recvmsg+0x10/0x10 [ 371.642444][T14521] ? __might_fault+0xb0/0x130 [ 371.642473][T14521] do_recvmmsg+0x307/0x770 [ 371.642508][T14521] ? __pfx_do_recvmmsg+0x10/0x10 [ 371.642547][T14521] ? __pfx_do_futex+0x10/0x10 [ 371.642594][T14521] __x64_sys_recvmmsg+0x190/0x240 [ 371.642623][T14521] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 371.642645][T14521] ? rcu_is_watching+0x15/0xb0 [ 371.642674][T14521] ? do_syscall_64+0xbe/0x3b0 [ 371.642699][T14521] do_syscall_64+0xfa/0x3b0 [ 371.642717][T14521] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.642745][T14521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.642764][T14521] ? clear_bhb_loop+0x60/0xb0 [ 371.642789][T14521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.642808][T14521] RIP: 0033:0x7f9f0678eec9 [ 371.642825][T14521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.642843][T14521] RSP: 002b:00007f9f0759b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 371.642864][T14521] RAX: ffffffffffffffda RBX: 00007f9f069e6180 RCX: 00007f9f0678eec9 [ 371.642879][T14521] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008 [ 371.642892][T14521] RBP: 00007f9f06811f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.642904][T14521] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 371.642915][T14521] R13: 00007f9f069e6218 R14: 00007f9f069e6180 R15: 00007ffcbf052ec8 [ 371.642950][T14521] [ 372.033844][T14516] netlink: 'syz.4.2143': attribute type 10 has an invalid length. [ 372.045674][T14516] bond0: (slave 0!): Enslaving as an active interface with an up link [ 372.171279][T14535] netlink: 'syz.0.2149': attribute type 12 has an invalid length. [ 372.676068][T14566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2159'. [ 372.696336][T14583] netlink: 'syz.0.2158': attribute type 12 has an invalid length. [ 372.704377][T14583] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2158'. [ 372.707645][T14566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2159'. [ 372.770429][T14566] netlink: 'syz.4.2159': attribute type 10 has an invalid length. [ 372.796455][T14566] bond0: (slave wlan1): Opening slave failed [ 372.951393][T14599] netlink: 'syz.2.2164': attribute type 1 has an invalid length. [ 372.960550][T14599] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2164'. [ 373.068705][T14608] netlink: 'syz.1.2167': attribute type 7 has an invalid length. [ 373.068717][T14607] netlink: 'syz.1.2167': attribute type 7 has an invalid length. [ 373.610096][T14641] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.730633][T14644] netlink: 'syz.0.2178': attribute type 2 has an invalid length. [ 373.761343][T14649] lo speed is unknown, defaulting to 1000 [ 373.769371][T14649] lo speed is unknown, defaulting to 1000 [ 373.791272][T14649] wg1 speed is unknown, defaulting to 1000 [ 373.912203][T14663] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 373.931427][T14663] netlink: 'syz.1.2182': attribute type 2 has an invalid length. [ 373.942615][T14663] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 373.982761][T14665] bond4: option min_links: invalid value (18446744073709551612) [ 373.994330][T14665] bond4: option min_links: allowed values 0 - 2147483647 [ 374.005503][T14665] bond4 (unregistering): Released all slaves [ 374.312259][T14685] netlink: del zone limit has 8 unknown bytes [ 375.304815][T14741] : renamed from bond_slave_0 [ 375.382780][T14738] lo speed is unknown, defaulting to 1000 [ 375.434392][T14747] trusted_key: syz.3.2206 sent an empty control message without MSG_MORE. [ 375.599214][T14738] lo speed is unknown, defaulting to 1000 [ 375.611561][T14738] wg1 speed is unknown, defaulting to 1000 [ 375.742262][T14745] lo speed is unknown, defaulting to 1000 [ 375.779062][T14745] lo speed is unknown, defaulting to 1000 [ 375.828768][T14762] __nla_validate_parse: 10 callbacks suppressed [ 375.828788][T14762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2209'. [ 375.851443][T14745] wg1 speed is unknown, defaulting to 1000 [ 375.869232][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2211'. [ 375.894430][T14771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2211'. [ 375.905720][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'. [ 376.040839][T14778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2213'. [ 376.284042][T14791] netlink: 'syz.1.2215': attribute type 3 has an invalid length. [ 376.465877][T14795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2217'. [ 376.939217][T14780] lo speed is unknown, defaulting to 1000 [ 376.953235][T14801] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2218'. [ 376.962599][T14780] lo speed is unknown, defaulting to 1000 [ 376.975334][T14801] block nbd0: not configured, cannot reconfigure [ 377.020035][T14780] wg1 speed is unknown, defaulting to 1000 [ 377.075280][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 377.481078][T14817] can: request_module (can-proto-0) failed. [ 377.577865][T14824] lo speed is unknown, defaulting to 1000 [ 377.585784][T14824] lo speed is unknown, defaulting to 1000 [ 377.609590][T14821] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2224'. [ 377.720346][T14821] veth13: entered promiscuous mode [ 377.780595][T14824] wg1 speed is unknown, defaulting to 1000 [ 377.792339][T14835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'. [ 377.803698][T14835] 8021q: adding VLAN 0 to HW filter on device bond4 [ 378.404170][T14860] IPv6: sit2: Disabled Multicast RS [ 378.448352][T14860] validate_nla: 1 callbacks suppressed [ 378.448372][T14860] netlink: 'syz.4.2229': attribute type 1 has an invalid length. [ 378.574183][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.916999][T14876] netlink: 'syz.3.2233': attribute type 2 has an invalid length. [ 378.931736][T14875] netlink: 'syz.3.2233': attribute type 2 has an invalid length. [ 379.463776][T14893] tipc: Enabled bearer , priority 0 [ 379.478611][T14893] syzkaller0: entered promiscuous mode [ 379.487710][T14893] syzkaller0: entered allmulticast mode [ 379.579366][T14896] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 379.607797][T14896] tipc: Resetting bearer [ 380.025681][T14911] gretap0: entered promiscuous mode [ 380.032379][T14911] vlan0: entered promiscuous mode [ 380.140816][T14917] sctp: [Deprecated]: syz.4.2243 (pid 14917) Use of int in maxseg socket option. [ 380.140816][T14917] Use struct sctp_assoc_value instead [ 380.269367][T14891] tipc: Resetting bearer [ 380.293194][T14891] tipc: Disabling bearer [ 380.770102][T14956] lo speed is unknown, defaulting to 1000 [ 380.778435][T14956] lo speed is unknown, defaulting to 1000 [ 380.791507][T14956] wg1 speed is unknown, defaulting to 1000 [ 380.833530][T14959] veth0: entered promiscuous mode [ 380.853373][T14961] __nla_validate_parse: 4 callbacks suppressed [ 380.853390][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 381.184969][T14959] veth0: left promiscuous mode [ 381.309186][T14974] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2262'. [ 381.739142][T14989] bond10: option lp_interval: invalid value (0) [ 381.770039][T14989] bond10: option lp_interval: allowed values 1 - 2147483647 [ 381.801568][T14989] bond10 (unregistering): Released all slaves [ 381.972845][T14998] lo speed is unknown, defaulting to 1000 [ 381.999413][T14998] lo speed is unknown, defaulting to 1000 [ 382.020681][T14998] wg1 speed is unknown, defaulting to 1000 [ 382.415156][T15017] syzkaller0: entered allmulticast mode [ 382.817482][ T30] audit: type=1800 audit(1759645132.743:5): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2273" name="cgroup.controllers" dev="tmpfs" ino=2580 res=0 errno=0 [ 383.044975][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 383.067952][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 383.078837][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 383.089004][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 383.101474][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 383.112286][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 383.122301][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 383.132446][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 383.143720][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055398800: rx timeout, send abort [ 383.416478][T15056] lo speed is unknown, defaulting to 1000 [ 383.424715][T15056] lo speed is unknown, defaulting to 1000 [ 383.435501][T15056] wg1 speed is unknown, defaulting to 1000 [ 383.514271][T15062] netlink: 'syz.2.2282': attribute type 10 has an invalid length. [ 383.538882][T15062] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 383.643862][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055399800: rx timeout, send abort [ 383.653402][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055398800: abort rx timeout. Force session deactivation [ 383.666290][T15063] can: request_module (can-proto-3) failed. [ 383.819843][T15074] netlink: 'syz.0.2286': attribute type 1 has an invalid length. [ 383.896413][T15077] netlink: 'syz.2.2288': attribute type 13 has an invalid length. [ 384.019702][T15088] netlink: 'syz.1.2289': attribute type 1 has an invalid length. [ 384.027728][T15088] netlink: 'syz.1.2289': attribute type 2 has an invalid length. [ 384.036485][T15088] netlink: 'syz.1.2289': attribute type 1 has an invalid length. [ 384.063833][T15088] netlink: 'syz.1.2289': attribute type 2 has an invalid length. [ 384.090226][T15090] netlink: 'syz.2.2291': attribute type 10 has an invalid length. [ 384.152140][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055399800: abort rx timeout. Force session deactivation [ 385.120161][T15117] tipc: Enabling of bearer rejected, failed to enable media [ 385.185047][T15120] lo speed is unknown, defaulting to 1000 [ 385.192286][T15120] lo speed is unknown, defaulting to 1000 [ 385.200684][T15120] wg1 speed is unknown, defaulting to 1000 [ 440.009320][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449358][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.207441][ T31] INFO: task kworker/0:14:9648 blocked for more than 143 seconds. [ 523.215718][ T31] Not tainted syzkaller #0 [ 523.221707][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.230734][ T31] task:kworker/0:14 state:D stack:24232 pid:9648 tgid:9648 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 523.243305][ T31] Workqueue: events rfkill_sync_work [ 523.249295][ T31] Call Trace: [ 523.252583][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 523.255506][ T31] __schedule+0x1798/0x4cc0 [ 523.260226][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 523.265670][ T31] ? __pfx___schedule+0x10/0x10 [ 523.270744][ T31] ? schedule+0x91/0x360 [ 523.275016][ T31] schedule+0x165/0x360 [ 523.280120][ T31] schedule_preempt_disabled+0x13/0x30 [ 523.297221][ T31] __mutex_lock+0x7e6/0x1350 [ 523.301872][ T31] ? __mutex_lock+0x5bb/0x1350 [ 523.327284][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 523.332634][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 523.355027][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.360783][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 523.367547][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 523.373888][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 523.380062][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 523.385170][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 523.391368][ T31] rfkill_set_block+0x1d2/0x440 [ 523.396217][ T31] rfkill_sync_work+0x114/0x200 [ 523.401873][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 523.408062][ T31] process_scheduled_works+0xade/0x17b0 [ 523.413634][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 523.420226][ T31] worker_thread+0x8a0/0xda0 [ 523.424851][ T31] kthread+0x711/0x8a0 [ 523.429781][ T31] ? __pfx_worker_thread+0x10/0x10 [ 523.434975][ T31] ? __pfx_kthread+0x10/0x10 [ 523.440100][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.445325][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.451037][ T31] ? __pfx_kthread+0x10/0x10 [ 523.455631][ T31] ret_from_fork+0x436/0x7d0 [ 523.461037][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 523.466152][ T31] ? __switch_to_asm+0x39/0x70 [ 523.471457][ T31] ? __switch_to_asm+0x33/0x70 [ 523.476244][ T31] ? __pfx_kthread+0x10/0x10 [ 523.481223][ T31] ret_from_fork_asm+0x1a/0x30 [ 523.485996][ T31] [ 523.489945][ T31] INFO: task kworker/0:16:9650 blocked for more than 143 seconds. [ 523.498159][ T31] Not tainted syzkaller #0 [ 523.503110][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.512297][ T31] task:kworker/0:16 state:D stack:24072 pid:9650 tgid:9650 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 523.525111][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 523.532537][ T31] Call Trace: [ 523.535820][ T31] [ 523.539184][ T31] __schedule+0x1798/0x4cc0 [ 523.543801][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 523.549984][ T31] ? __pfx___schedule+0x10/0x10 [ 523.554856][ T31] ? schedule+0x91/0x360 [ 523.559160][ T31] schedule+0x165/0x360 [ 523.563351][ T31] schedule_preempt_disabled+0x13/0x30 [ 523.568963][ T31] __mutex_lock+0x7e6/0x1350 [ 523.573565][ T31] ? __mutex_lock+0x5bb/0x1350 [ 523.579077][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 523.585316][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 523.590906][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 523.596638][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 523.602854][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 523.609760][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 523.615476][ T31] process_scheduled_works+0xade/0x17b0 [ 523.621472][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 523.627961][ T31] worker_thread+0x8a0/0xda0 [ 523.632585][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 523.639796][ T31] ? __kthread_parkme+0x7b/0x200 [ 523.644737][ T31] kthread+0x711/0x8a0 [ 523.649290][ T31] ? __pfx_worker_thread+0x10/0x10 [ 523.654397][ T31] ? __pfx_kthread+0x10/0x10 [ 523.659435][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.664633][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.670777][ T31] ? __pfx_kthread+0x10/0x10 [ 523.675367][ T31] ret_from_fork+0x436/0x7d0 [ 523.680403][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 523.685522][ T31] ? __switch_to_asm+0x39/0x70 [ 523.690964][ T31] ? __switch_to_asm+0x33/0x70 [ 523.695744][ T31] ? __pfx_kthread+0x10/0x10 [ 523.701140][ T31] ret_from_fork_asm+0x1a/0x30 [ 523.705911][ T31] [ 523.709489][ T31] INFO: task syz.3.2234:14882 blocked for more than 143 seconds. [ 523.718134][ T31] Not tainted syzkaller #0 [ 523.723081][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.733087][ T31] task:syz.3.2234 state:D stack:26760 pid:14882 tgid:14881 ppid:5845 task_flags:0x400140 flags:0x00080002 [ 523.745444][ T31] Call Trace: [ 523.749142][ T31] [ 523.752069][ T31] __schedule+0x1798/0x4cc0 [ 523.756571][ T31] ? validate_chain+0x897/0x2140 [ 523.762391][ T31] ? __lock_acquire+0xab9/0xd20 [ 523.767838][ T31] ? __pfx___schedule+0x10/0x10 [ 523.772722][ T31] ? schedule+0x91/0x360 [ 523.777331][ T31] schedule+0x165/0x360 [ 523.781485][ T31] schedule_timeout+0x9a/0x270 [ 523.786234][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 523.792560][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.798153][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.803353][ T31] ? wait_for_completion+0x267/0x5d0 [ 523.809156][ T31] wait_for_completion+0x2bf/0x5d0 [ 523.814283][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 523.820778][ T31] ? __flush_work+0xd2/0xbc0 [ 523.825394][ T31] ? __flush_work+0xd2/0xbc0 [ 523.830500][ T31] __flush_work+0x9b9/0xbc0 [ 523.835012][ T31] ? __flush_work+0xd2/0xbc0 [ 523.839744][ T31] ? __pfx___flush_work+0x10/0x10 [ 523.844789][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 523.850949][ T31] ? __pfx___cancel_work+0x10/0x10 [ 523.856065][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 523.861784][ T31] __cancel_work_sync+0xbe/0x110 [ 523.867270][ T31] rfkill_unregister+0x92/0x220 [ 523.872156][ T31] nfc_unregister_device+0x96/0x2a0 [ 523.878194][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 523.883917][ T31] virtual_ncidev_close+0x56/0x90 [ 523.889431][ T31] __fput+0x44c/0xa70 [ 523.893418][ T31] fput_close_sync+0x119/0x200 [ 523.898601][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 523.903927][ T31] __x64_sys_close+0x7f/0x110 [ 523.909464][ T31] do_syscall_64+0xfa/0x3b0 [ 523.913963][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.919591][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.925651][ T31] ? clear_bhb_loop+0x60/0xb0 [ 523.931115][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.938350][ T31] RIP: 0033:0x7f49a318eec9 [ 523.942781][ T31] RSP: 002b:00007f49a405b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 523.951619][ T31] RAX: ffffffffffffffda RBX: 00007f49a33e5fa0 RCX: 00007f49a318eec9 [ 523.959970][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 523.969003][ T31] RBP: 00007f49a3211f91 R08: 0000000000000000 R09: 0000000000000000 [ 523.977371][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.985334][ T31] R13: 00007f49a33e6038 R14: 00007f49a33e5fa0 R15: 00007ffd2cc7b588 [ 523.993808][ T31] [ 523.997718][ T31] [ 523.997718][ T31] Showing all locks held in the system: [ 524.005452][ T31] 1 lock held by khungtaskd/31: [ 524.013269][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 524.023493][ T31] 2 locks held by getty/5597: [ 524.029026][ T31] #0: ffff888033d200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 524.039123][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 524.049768][ T31] 1 lock held by kworker/1:5/5931: [ 524.054883][ T31] #0: ffff8880b8939fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 524.065252][ T31] 4 locks held by kworker/u8:29/7531: [ 524.070717][ T31] #0: ffff8880b8939fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 524.080802][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 524.090131][ T31] #2: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 524.099251][ T31] #3: ffffffff998073f8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 524.109773][ T31] 4 locks held by kworker/0:14/9648: [ 524.115093][ T31] #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 524.127176][ T31] #1: ffffc9001d567bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 524.139594][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 524.149722][ T31] #3: ffff888053a57100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 524.160131][ T31] 3 locks held by kworker/0:16/9650: [ 524.165403][ T31] #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 524.176969][ T31] #1: ffffc9001d547bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 524.191269][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 524.203141][ T31] 1 lock held by syz.3.2234/14882: [ 524.208621][ T31] #0: ffff888053a57100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 524.219306][ T31] 3 locks held by syz.1.2289/15082: [ 524.224513][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.233478][ T31] #1: ffff88807e070100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 524.243524][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 524.254208][ T31] 1 lock held by syz.2.2293/15102: [ 524.259761][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.268588][ T31] 1 lock held by syz.0.2296/15111: [ 524.273710][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.283044][ T31] 1 lock held by syz.4.2300/15125: [ 524.288515][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.297386][ T31] 1 lock held by syz-executor/15130: [ 524.302657][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.311950][ T31] 1 lock held by syz-executor/15134: [ 524.317679][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.326133][ T31] 1 lock held by syz-executor/15135: [ 524.331859][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.341135][ T31] 1 lock held by syz-executor/15136: [ 524.346415][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.355313][ T31] 1 lock held by syz-executor/15138: [ 524.361137][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.370353][ T31] 1 lock held by syz-executor/15140: [ 524.375631][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.384621][ T31] 1 lock held by syz-executor/15143: [ 524.390330][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.399597][ T31] 1 lock held by syz-executor/15144: [ 524.404874][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.413772][ T31] 1 lock held by syz-executor/15146: [ 524.419475][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.428513][ T31] 1 lock held by syz-executor/15148: [ 524.433787][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.442390][ T31] 1 lock held by syz-executor/15150: [ 524.447705][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.456139][ T31] 1 lock held by syz-executor/15153: [ 524.462359][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.471244][ T31] 1 lock held by syz-executor/15154: [ 524.476526][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.485512][ T31] 1 lock held by syz-executor/15156: [ 524.491636][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.500628][ T31] 1 lock held by syz-executor/15158: [ 524.505902][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 524.514891][ T31] [ 524.518049][ T31] ============================================= [ 524.518049][ T31] [ 524.526494][ T31] NMI backtrace for cpu 1 [ 524.526505][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 524.526517][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.526524][ T31] Call Trace: [ 524.526530][ T31] [ 524.526536][ T31] dump_stack_lvl+0x189/0x250 [ 524.526555][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.526568][ T31] ? __pfx__printk+0x10/0x10 [ 524.526589][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 524.526641][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 524.526663][ T31] ? __pfx__printk+0x10/0x10 [ 524.526690][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 524.526707][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 524.526733][ T31] watchdog+0xf93/0xfe0 [ 524.526754][ T31] ? watchdog+0x1de/0xfe0 [ 524.526775][ T31] kthread+0x711/0x8a0 [ 524.526801][ T31] ? __pfx_watchdog+0x10/0x10 [ 524.526816][ T31] ? __pfx_kthread+0x10/0x10 [ 524.526842][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.526869][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.526894][ T31] ? __pfx_kthread+0x10/0x10 [ 524.526917][ T31] ret_from_fork+0x436/0x7d0 [ 524.526938][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 524.526963][ T31] ? __switch_to_asm+0x39/0x70 [ 524.526985][ T31] ? __switch_to_asm+0x33/0x70 [ 524.527007][ T31] ? __pfx_kthread+0x10/0x10 [ 524.527032][ T31] ret_from_fork_asm+0x1a/0x30 [ 524.527058][ T31] [ 524.667724][ T31] Sending NMI from CPU 1 to CPUs 0: [ 524.673019][ C0] NMI backtrace for cpu 0 [ 524.673036][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 524.673056][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.673068][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 524.673101][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c9 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 524.673116][ C0] RSP: 0018:ffffffff8da07d80 EFLAGS: 000002c6 [ 524.673132][ C0] RAX: d42c245cafda2f00 RBX: ffffffff81953917 RCX: d42c245cafda2f00 [ 524.673146][ C0] RDX: 0000000000000001 RSI: ffffffff8d50d356 RDI: ffffffff8b9ec4e0 [ 524.673160][ C0] RBP: ffffffff8da07eb8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 524.673173][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f5b8630 [ 524.673187][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b52a28 [ 524.673199][ C0] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 524.673213][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.673226][ C0] CR2: 0000561a21cfb000 CR3: 000000007c34e000 CR4: 00000000003526f0 [ 524.673242][ C0] Call Trace: [ 524.673249][ C0] [ 524.673256][ C0] default_idle+0x13/0x20 [ 524.673275][ C0] default_idle_call+0x73/0xb0 [ 524.673296][ C0] do_idle+0x1e7/0x510 [ 524.673318][ C0] ? __pfx_do_idle+0x10/0x10 [ 524.673346][ C0] cpu_startup_entry+0x44/0x60 [ 524.673365][ C0] rest_init+0x2de/0x300 [ 524.673386][ C0] start_kernel+0x3ae/0x410 [ 524.673412][ C0] x86_64_start_reservations+0x24/0x30 [ 524.673430][ C0] x86_64_start_kernel+0x143/0x1c0 [ 524.673448][ C0] common_startup_64+0x13e/0x147 [ 524.673482][ C0] [ 524.674073][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 524.854300][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 524.863403][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.873466][ T31] Call Trace: [ 524.876737][ T31] [ 524.879674][ T31] dump_stack_lvl+0x99/0x250 [ 524.884262][ T31] ? __asan_memcpy+0x40/0x70 [ 524.888917][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.894108][ T31] ? __pfx__printk+0x10/0x10 [ 524.898702][ T31] vpanic+0x281/0x750 [ 524.902688][ T31] ? __pfx_vpanic+0x10/0x10 [ 524.907177][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 524.912737][ T31] ? preempt_schedule+0xae/0xc0 [ 524.917628][ T31] ? preempt_schedule_common+0x83/0xd0 [ 524.923097][ T31] panic+0xb9/0xc0 [ 524.926820][ T31] ? __pfx_panic+0x10/0x10 [ 524.931247][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 524.936625][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 524.942793][ T31] watchdog+0xfd2/0xfe0 [ 524.946960][ T31] ? watchdog+0x1de/0xfe0 [ 524.951292][ T31] kthread+0x711/0x8a0 [ 524.955378][ T31] ? __pfx_watchdog+0x10/0x10 [ 524.960060][ T31] ? __pfx_kthread+0x10/0x10 [ 524.964652][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.969856][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.975060][ T31] ? __pfx_kthread+0x10/0x10 [ 524.979648][ T31] ret_from_fork+0x436/0x7d0 [ 524.984329][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 524.989437][ T31] ? __switch_to_asm+0x39/0x70 [ 524.994192][ T31] ? __switch_to_asm+0x33/0x70 [ 524.998952][ T31] ? __pfx_kthread+0x10/0x10 [ 525.003548][ T31] ret_from_fork_asm+0x1a/0x30 [ 525.008317][ T31] [ 525.011467][ T31] Kernel Offset: disabled [ 525.015781][ T31] Rebooting in 86400 seconds..