last executing test programs: 3m51.79809091s ago: executing program 2 (id=1857): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4001) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000e2e2462df8e36ce3d396cf1a36f0d77e46c3fdd39f82ba", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf2502000000040006800c0001800500020010000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004840}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0x10}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000013c0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xffff, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x2, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x5, 0x0, 0xb7}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4001) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000e2e2462df8e36ce3d396cf1a36f0d77e46c3fdd39f82ba", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf2502000000040006800c0001800500020010000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004840}, 0x80) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={0x0, 0x10}) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000013c0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xffff, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x2, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x5, 0x0, 0xb7}}, 0xe8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) 3m51.525195187s ago: executing program 2 (id=1863): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c0000001e40da2dbf75d77d2be24deb31a36be0104d7643135d76247f32b0ecb50b60d20400851c5a9b685c1f80d5ff2025f12cb90700000093a2233029d32a23174fa504029f7e2378868a201128c35209729ed261253565f76958c5ca5a34add12aaad5cd90cd119e1afd943d910cdb7f8ea6ef5737d395df79216f25e2b2f48368d63d27c8f1018722f7e40443a46402489bd627aa81b8b6776767971d47", @ANYRES16=r2, @ANYBLOB="000827bd7000fddbdf254d00000008000300030000000600a800b58b000008000300000000000f00a8007365636f6e646e616d6500000f00a8007365636f6e646e616d6500000f00a8007365636f6e646e616d6500000e00a80066697273746e616d65000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8005}, 0x2000c040) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="400000009a7e92097ecf4a2762c217f04de5bb3e8190e5d374abb8bc83f055041223cc7f93f53b231f139655d79e142d12e3ac4e5ed7c927eadd7442ffd388acdcf4e576c7b66d1d6ccac9cb112ff84b26e5cc17509ae5cc4fbc476987d7a22fce795bbe90ae9d881edc4cd0902b79d51112882b2f039df6ec8d7d8712", @ANYRES16=r7, @ANYBLOB="00032abd7000fedbdf251300000008000300", @ANYRES32=r8, @ANYBLOB="040013000a000600080211000000000006001200832000000600b5002d01000004008100"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r10, &(0x7f0000002dc0), 0xf, 0x20003e90) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x0, 0x1000, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000003e0e0000000000000100000018110000", @ANYRES32, @ANYRESHEX=r10], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x1, 0x40, 0xfffffffe}, 0x10}, 0x94) ppoll(&(0x7f0000000200)=[{r9, 0x6600}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20000000000001d7, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$unix(r9, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}}) 3m51.13159082s ago: executing program 4 (id=1871): r0 = socket$inet6(0xa, 0x2, 0x3) socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @private1}, 0xf) 3m51.017312656s ago: executing program 3 (id=1872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg(r2, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000a00)}}], 0x1, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x83113193c2d18c9d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a32000000001400000011"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 3m50.75211402s ago: executing program 4 (id=1876): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x300, 0x8002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f00000003c0)={0x8, 'veth0_to_batadv\x00', {'veth0_to_bond\x00'}, 0x3}) write$cgroup_type(r4, &(0x7f0000000340), 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r8], 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0x4) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r5, 0xa}, {r3, 0x490}, {r3, 0x45}, {r2, 0x2002}, {r6, 0x210}, {r3, 0x8108}, {r6, 0x200}, {r2, 0x536}], 0x8, &(0x7f0000000140)={r9, r10+60000000}, &(0x7f0000000180)={[0x49e0]}, 0x8) 3m50.748060465s ago: executing program 3 (id=1877): socketpair(0x6, 0x2, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffc, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf2505"], 0x1618}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}}, 0x0) 3m50.456393161s ago: executing program 2 (id=1880): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000104000000040000000900000000000000f32b27a9df2cb855827dd108fdaf05ecca4c322b0de8b87832066380cef999ba297e2a30bc0d241e7292f2dde01e29255bb3a5e245212ff8c75c7a240a9eda90d60e80e4f305bfc450649d66cd0a90dfcba35488499238bbcb57f3f446ff2b0e0ccd5961f34ec23989ddcc5dd9178a5cdb1dcf00e9d4f99c166bd7b63c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x12}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x101}, {{0x0, 0x0, 0x0}, 0x400000d}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000001900)=""/213, 0xd5}, {&(0x7f0000001a00)=""/4097, 0x1001}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f00000004c0)=""/92, 0xfffffffffffffcee}, {&(0x7f0000000100)=""/83, 0x53}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x40010020, 0x0) 3m50.454547031s ago: executing program 3 (id=1881): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delrule={0x34, 0x21, 0x300, 0x70bd26, 0x25dfdbfe, {0x2, 0x80, 0x10, 0xff, 0xe, 0x0, 0x0, 0x8, 0x8}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7fff}, @FRA_FLOW={0x8, 0xb, 0x5}, @FRA_DST={0x8, 0x1, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) recvmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) (async) pipe(&(0x7f0000000000)) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delrule={0x34, 0x21, 0x300, 0x70bd26, 0x25dfdbfe, {0x2, 0x80, 0x10, 0xff, 0xe, 0x0, 0x0, 0x8, 0x8}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7fff}, @FRA_FLOW={0x8, 0xb, 0x5}, @FRA_DST={0x8, 0x1, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) (async) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) (async) 3m50.309696704s ago: executing program 2 (id=1882): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 3m50.309353979s ago: executing program 4 (id=1883): syz_emit_ethernet(0x11e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xe8, 0x3a, 0xff, @remote, @empty, {[@routing={0x2e, 0xe, 0x1, 0xfc, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @private2, @empty, @private1]}], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 3m50.139235613s ago: executing program 3 (id=1886): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000201900ebfffeffffff00000000e0000002400000000000000000000049c7256fd328853200000000000000000000000000000400000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000e700000000000043be04cb9e4bd2190000000000000000000001000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x3, 0x3, 0x301}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x714, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x20e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0xe}, @device_a, @device_b, @random="ea72f7633016", {0xf, 0x80}}, 0x100000001, @random=0x10, 0x251, @void, @val, @void, @val={0x4, 0x6, {0xc, 0x10, 0xffff, 0xffff}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x2, 0x35, 0x1000}}, [{0xdd, 0x9b, "89ea33dde5e4b09bfaec1cd46c616cfd359993b3c9f0b047185aa816908d6140edd9d4a513aef00488a6b0b20b09f41253a833a2aaa8ce86571f595b4f1b05d0ab5b89b81fcff5ca4155dc90b85f129713000e2006e4e62de531020affa40a6998766d246a39205032690c2815bf211158d4dd3cfb00f7f6d59d7b375e79cea150b78698d29dcfc7eff3e4b51c92c2a946927cd516fb2c8a007355"}, {0xdd, 0x8a, "99b71fc54d4f8a1a553711ccb61c9175701f9a529a2506eea5ac1cbaa3036164cf8760e19756c8124498f1da92828c4d8c588e6f70c697ba2e3eb17c9c45bf9ec760c4047a3fd76699e748d02e9c1b078b064c0843c22e2cd6d5bdbed0810841a57a77c66bf4f5fb376a9a0d93b0562dfb1ea01a25a4684756b296a5ff142af6e35f2c7dabb585bb0610"}, {0xdd, 0x8d, "62ef42bb9eae94561a734a53005dc6468173534aed3667f488f29f481c6583a8f08d52da0ebcff8cae78b6f78ed395766a9d6131dea9013a91bd745455999e8c80f60095691086cff2543af7beb8ee56913c300cff8ba54bdc07263eadcb391870a924d983e4e092f27f6768f58bbe884f3b5526375797c67860752dced10d50bd9b47878fcb93af29c86c3e09"}, {0xdd, 0xf, "d534d943acd74a87dbc3b4f1901f14"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x191, 0x7f, [@tim={0x5, 0xe3, {0x4, 0xe8, 0x0, "dc0000454a044b83fa705c37ba642db44dc845e6ab55d35b2eebdef5306397d967aed83775503c3767a4c742f0abc101b22c8bae0ac71b89d8964f9c6e8db161ed71b4ae1b1d48238136ba6bb41008d529a95a7a7711d8ff4b49c49623c9a9bc5beb7a3b525d0a985fb5c4797a6649f8ac19d345e9afdffd5c1f669772bb64f8f0dc72932952f17aef69e2cb095f66773db404816dbb6daf42b51c0d58408342e52ce2a1443f7f6568a0629a304260a7bf48f584d5ad95cd2594688baff484de6d98b2c17531a94b684e41af4eed3a3765b8cd5d47a312ffd3175062a6b02005"}}, @perr={0x84, 0x95, {0x0, 0x9, [{{0x0, 0x1}, @broadcast, 0x9, @value, 0x26}, {{0x0, 0x1}, @device_a, 0x2, @value, 0xf}, {{0x0, 0x1}, @device_a, 0x1000, @value=@broadcast, 0x5}, {{0x0, 0x1}, @device_b, 0x81, @value, 0x2b}, {{}, @device_a, 0x7f, @void, 0x1c}, {{}, @broadcast, 0x1, @void, 0x1e}, {{}, @device_a, 0x4, @void, 0x36}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x1e}, {{}, @broadcast, 0x0, @void, 0x14}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x3c, 0x8, 0x8}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x7, 0x9}}]}, @NL80211_ATTR_BEACON_TAIL={0x18, 0xf, [@mesh_chsw={0x76, 0x6, {0x6f, 0x4, 0x3b, 0xa0a}}, @perr={0x84, 0x2, {0x9}}, @cf={0x4, 0x6, {0x16, 0x2, 0x7fff, 0x9}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@cf={0x4, 0x6, {0x8, 0x1c, 0xe99}}]}, @NL80211_ATTR_BEACON_HEAD={0x1bb, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x6, 0x3}}, 0x1ff, @random=0xe, 0x100, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x30, 0x2}}, @void, @void, @val={0x2d, 0x1a, {0xc, 0x1, 0x6, 0x0, {0x5, 0x9, 0x0, 0x3cc, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x1f952335, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7, 0x1}}, @val={0x76, 0x6, {0x2, 0x6, 0x2f, 0x62}}, [{0xdd, 0x7a, "2463a401b9a41738665a2e3b407a295ff963e5966676cebc8f4e7d10bad1e6bd7bd6403394ddcff42b0a15809bdbce91fc6d76ea8a67cd63c60c4b234c09b79ccc2b47e3e16bab37cc6a2778e6b6e9230bce224153cbc028f58c0f7d86cbd4116143e42da4770a159f32b064443bed725c3426bd839099308d43"}, {0xdd, 0xe3, "fa7da57dd0aa3e65c4fdf7411fbba4f6bf31c38da35dbec48e1d0e3f810f2a09ac19b4925ef23e23b3681cba4c19a5c745ddb9758282fa3e7ac8f03e08788e98817aad714126d249d435a6979817a440f9f93c7d4d608e2bc6c62a360162e4244e240a062b5d8192eaa772e4c1963120b7c813e10ede06c8987cc457e25568c8abb3b669fc62462fb57692c5a6a66636eb553413048f3c3d2b9c8d7a18f66becccce38b0f172a73c3ba2db10eaf6f270835f77071c2bb674616f5d9d44738b81e1e5c33223d963d23494fa9314eb671d7b7ecd5393ad86424c74bdc2f5abcd8af54da6"}]}}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x6}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0d]}], @NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x36, 0x18, 0x4, 0x18, 0x16, 0xc, 0x60, 0x1b, 0x48, 0x24, 0x2, 0x48, 0x6c, 0x18, 0x5, 0x1b, 0x1b, 0x4, 0x1b, 0x4, 0x6, 0xc, 0x3, 0x18, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xffff, 0x6, 0x5, 0x9, 0x9, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x94, 0x9, 0x9, 0x13, 0x5, 0x7ff, 0x0, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x0, 0x18, 0xb, 0x30, 0x60, 0x60]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x5}, {0x1}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x3, 0x8}, {0x4, 0x9}, {0x3, 0x6}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0x4}, {0x2, 0x9}, {0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x8}, {}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x5}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0x9}, {0x2, 0x3}, {0x0, 0x7}, {0x0, 0x6}, {0x0, 0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0xa}, {0x5, 0x6}, {0x6, 0x3}, {0x4, 0x5}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0x5}]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x6}, {0x4, 0xa}, {0x1, 0xa}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x5}, {0x5, 0x5}, {0x7}, {0x4, 0x3}, {0x4}, {0x4}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x5, 0x1}, {0x4, 0x4}, {}, {0x6}, {0x5, 0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x4}, {0x2, 0x6}, {0x2}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x2}, {0x7, 0x9}, {}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x8}, {}, {0x4, 0xa}, {0x2, 0x9}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x7, 0x8}, {0x7, 0x9}, {0x7, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x4, 0x7}, {0x6, 0x7}, {0x5, 0x9}, {}, {0x2, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x30, 0xa, 0x8, 0x5, 0x48, 0x4, 0x30, 0x16, 0x36, 0x0, 0x18, 0x1, 0x60, 0x6, 0x6, 0x4, 0x3, 0x6, 0x16, 0x1b, 0x1b, 0x12, 0x60, 0x6c, 0x30, 0x24, 0x1c, 0x36, 0x9]}]}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}]}, 0x714}, 0x1, 0x0, 0x0, 0x4008882}, 0x4000) 3m50.138895282s ago: executing program 4 (id=1887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x33, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x3, 0x6, 0xb, 0xa, 0x1, 0xfffffffffffffff0}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@llu}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 3m50.068999024s ago: executing program 2 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000007c0)={@l2tp6={0xa, 0x0, 0x8, @empty, 0x3, 0x3}, {&(0x7f0000000700)=""/186, 0xba}, &(0x7f00000004c0), 0x10}, 0xa0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffcc7, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000001000007f05bba000007000007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r2, 0x200, 0x1}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040), 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0x2, 0x204, 0x459, 0x4903, r7}, 0x10) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={0xe4, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf81d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc1eb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x41}, 0x8800) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000040)=@x25, 0x80, 0x0}, 0x10) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, 0x0, 0x0) getsockopt$inet_mptcp_buf(r10, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt(r9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 3m50.055263379s ago: executing program 4 (id=1889): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000240)={0x5}, 0x10}, 0x94) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000685b6c5617ad066276a881fb623f809321d994e14deca4f6f9ba3ab88eef6a61"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000040)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000280)=r2, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000040)="05000000010000", 0x7) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x6bd, 0x4, 0xd}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) recvfrom$packet(r5, &(0x7f0000000100)=""/4, 0x4, 0x20, &(0x7f00000001c0)={0x11, 0x1c, r6, 0x1, 0x1, 0x6, @local}, 0x14) (async) pipe(&(0x7f0000000200)) 3m49.976069827s ago: executing program 3 (id=1890): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x541100, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000340)={'ip6_vti0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f571d9ec214627c11430c1", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) recvmmsg(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x54000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4881}, 0x8005) 3m49.458743594s ago: executing program 4 (id=1896): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x1000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 3m48.953266483s ago: executing program 32 (id=1896): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x1000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 3m48.902998763s ago: executing program 2 (id=1901): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x400000, 0xfffffffffffffc1e, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x20, 0xba08, 0x1704, 0x1000}}) 3m48.640771087s ago: executing program 33 (id=1901): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x400000, 0xfffffffffffffc1e, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x20, 0xba08, 0x1704, 0x1000}}) 3m48.627229297s ago: executing program 3 (id=1902): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3m48.450239305s ago: executing program 34 (id=1902): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 26.544349645s ago: executing program 6 (id=3506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000040)={@void, @val={0x1, 0x3, 0x1, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e23, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x7, 0x0, 0x13}, {"2244070000bc0be4bdf9da24708a4ec90000932b52c828de6f79d82439"}}}}}, 0x4f) 26.042901484s ago: executing program 5 (id=3510): syz_emit_ethernet(0x7a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a0d00", 0x44, 0x2f, 0xff, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x32}}}}}}}}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x10001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)=[r2, r3], &(0x7f0000000480)=[{0x2, 0x4, 0xd, 0x4}, {0x0, 0x3, 0xf, 0x5}, {0x4, 0x4, 0x5, 0xa}, {0x9, 0x4, 0x10, 0xa}, {0x5, 0x3, 0x8, 0x8}, {0x4, 0x2, 0x5, 0x8}, {0x4, 0x2, 0x1, 0x5}], 0x10, 0x4}, 0x94) 25.959782434s ago: executing program 6 (id=3511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40c, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}]}]}], {0x14}}, 0xbc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(0x3) r2 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) 25.884304258s ago: executing program 5 (id=3512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES16=r3, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7ff}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="d196fff80acf82211f31a8ebe1b9e55769c4de785a8658d1d60c1fb89fe0f237d691b25461788794c8ef8d683c6633edac6f68b62d89bd981f18fc63487318e600a81cd7be39978c3bc27def73bd6188c1b03a30ee37343374606c1e9326eee57d18b2cdba7c75af0bcc1adbe624963a5c8ae5f6281ddf1b8321cc5d6c5fa31629e09a10f66c94e3e71163e081710b09fdf9aa761990ba15443338c197defeacf23b9dfcc21f12b09e5b1cd8c6de65b0b5b85d46bd0e", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000b19870da17d562a4f59000000000000000704511e4261595ff95ed22baf0572c6c237e6653e00292da8a47eb5878df070d293c597b368789e22b669bc6582a946562d6fb8cc600"/94, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r5}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf, r8}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20020010) read(r9, &(0x7f0000000000)=""/149, 0xaa) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r11, 0x29, 0x3d, 0x0, &(0x7f00000001c0)) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x840) write$nci(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="50040101030d03"], 0x7) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r13, 0x952de000) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r14, 0xfca804a0, 0x0, 0xfffffffffffffe58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) 25.756140936s ago: executing program 6 (id=3515): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}}}, 0x24}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 25.02215444s ago: executing program 5 (id=3519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r2, 0x2e, 0x1, 0x9, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900000100000000000000008020000000110005000000000c00090008002000", @ANYRES32=0x0, @ANYBLOB="08d9445b711202"], 0x30}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x800) writev(r5, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x12, 0x0, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20004814}, 0x4000045) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x3}, {0x3}, 0x130, 0x0, 0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)="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", 0x1de, 0x0, &(0x7f0000000640)={0x2, 0x10d, {0x1, 0xc, 0xce, "ccdd2f17f343fb719567543e45b043f15334cf291b1d5b8b0c35cd08234c9097e84a959064b46ab5f4e7d61496e44f8d40edd23ea4280dcf9be104fe8dede175a52c45deb74b6517bd8f0f384115907e4a918531299ed42e60c51e4f00463dab143e90a504c59fb59b208aaee5a9e5143bd7e4021fcb8035616c12bf5046d1e94274c435b17c5d41a591b1115abea6017bb231431620172328884f10cdd71a09decbbec38225ee722ca7e3aec66c4f66ddfd3acbe36a4a3a3b2c5ecec11613ff97348e0c5174b92b0c263d26d73b", 0x32, "fca5a71608c5ca54100e452e3d62ebab59710cb3316ab8e10669159c09863544e85e2723bf131e13438cbe769848e7eec922"}, 0x38, "63335ecda01f372a38cdccde263bebee864473a36ceb5a62d17b55f5bb37e1ff4bda497072daa275dbeaf76f5f92e66bd1536f75f87c0504"}, 0x151}) 25.010751006s ago: executing program 5 (id=3523): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') connect$can_bcm(r0, &(0x7f0000000140), 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0x0, 0x3}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) r6 = socket$inet6(0xa, 0x3, 0x5) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f00000000c0)=0x7b, 0x4) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='P'], 0x10}}], 0x2, 0x0) 25.010457071s ago: executing program 6 (id=3524): bpf$MAP_CREATE(0x3fe, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x61, 0x8014) 24.904005602s ago: executing program 6 (id=3526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x12) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 24.544336895s ago: executing program 5 (id=3529): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@name, &(0x7f0000000340)=0x10, 0x800) mmap(&(0x7f0000807000/0x4000)=nil, 0x4000, 0xb635773f05ebbeef, 0x8031, r4, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, 0x0) r5 = socket(0x14, 0x2, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x42000004, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0), 0x0, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180), 0x4) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000001780)=""/4098, 0x1002}], 0x3}, 0x101}], 0x400000000000065, 0x40010020, 0x0) 24.407758826s ago: executing program 6 (id=3531): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="06005f37fa0ec82af600d4530336000000000000"], 0x14}}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x40000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0xc0000063) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x40) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[], 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48041}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 24.264479146s ago: executing program 5 (id=3534): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xf1, 0x0, 0xf}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 18.478439988s ago: executing program 1 (id=3600): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0x4000000}]}, {0xf, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) 18.26409958s ago: executing program 1 (id=3602): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) socket$inet6(0xa, 0x3, 0x84) (async) socket$inet6(0xa, 0x3, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="09000655030dc642e005d333a0efee0f99a200b114b4000000000000000000", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="09000655030dc642e005d333a0efee0f99a200b114b4000000000000000000", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = socket$inet(0xa, 0x801, 0x0) listen(r2, 0x8) (async) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES64=r1, @ANYRESDEC=r2], 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES64=r1, @ANYRESDEC=r2], 0x20) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@delchain={0x98, 0x65, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xd, 0xffe0}, {0x6, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}]}, @TCA_FW_MASK={0x8, 0x5, 0x81}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0x2}}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x44800}, 0x24004810) 18.225588344s ago: executing program 1 (id=3603): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) syz_genetlink_get_family_id$nfc(0x0, r4) (async) syz_genetlink_get_family_id$nfc(0x0, r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x44) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES8=r6, @ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0x200008c1}, 0x8801) 18.099684448s ago: executing program 1 (id=3606): r0 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x113, 0x0, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 18.053265432s ago: executing program 1 (id=3607): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="ced5b19efe2debe96ccbfaf50001cb4e43f5d547c077a0500c6125000000ad19c727d42eb5d9e4110000", @ANYRES16=r0, @ANYBLOB="df4800000000000000000c000000080003800400038018000180140002007369743000"/46], 0x34}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$xdp(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6b9c329a50d95eb82723641a7cdcb20a10068b5fde7f93c3ac3b2653dd2db5d3855a43ec44a301f0079ffe4437a5fe135d5fa92fa", 0xb1}, {&(0x7f00000007c0)="dba348f3686f64658eef3472e762256ef8a9583e6b06ed88c2ef46e6f984e69058e797f054e94bf370b74113ad8d0db3393d6d488248ca023e8aa857d2d69f24712bc88cbd2a39190c437931fd386fe3d82738f55e2268975f389b01d0603267672f7f2c80", 0x65}], 0x3, 0x0, 0x0, 0x20000080}, 0x440000d0) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12040) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0xffe0}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xfe}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x24000084) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3, 0xa, 0x6, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x7f}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={r7, 0x4, 0xfffe, 0x5, 0x5, 0x1041, 0x5, 0x4, {r7, @in={{0x2, 0x4e20, @loopback}}, 0x80000001, 0x9, 0x12, 0x8, 0x6}}, &(0x7f00000001c0)=0xb0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r9 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) sendmmsg$alg(r9, 0x0, 0x0, 0x80001) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7a0a00ff00000000711076000000000095000000000000001294f849df5896b6cb7c9819b6d509ce73b7a04681e75171b0404d250216abcc624d6eac23e7a4872d0da874d9570ae154945caf080becb58991a87ea62a5eae6fbff37d0680b098f22f8ea4e7990099cdabe47bfffffa9e907c434baf9b49"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17.928224247s ago: executing program 1 (id=3609): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) socket(0xa, 0x3, 0x3a) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x24000008}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="94000000e2ec4199c6177487a5e037fb81020ceab4c1ec71eb9213f5f208874f92e4e140ae28bfae613cbe2b7b4c0a879f7c05f9ebf6892cab9efab9c0", @ANYRES16=r6, @ANYBLOB="00042bbd7000ffdbdf25210000004c002d8008000200000000000800020003000000050004000100000008000300040000000800020001000000050001000000000000000200030000000500040001000000080002000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x85}, 0x40000) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000003e000701fcfffffffddbdf25027c0000040036800c000180060006008e0a00009a2d105f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r1, @ANYBLOB="1dfc8bf2a884fd4b811a39a33e2e85146cce9396018b5ee832277aa1377cfae77b1da2cffa938f4823a65cec05fb510e9a355182ad2bf0c72d6e4e3a433f8f12e7dce70477c4e4d90d9ceae9d39d49797b9845bbf2478717e1fe76c348fc6f39f963987bea0957783fe9502d197890d5c4603d2c4b13cf7c41a32c483cd6316f968454", @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040088}, 0x8004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r8], 0x4) write$nbd(r1, &(0x7f0000000400)=ANY=[], 0xb4) r9 = socket(0x10, 0x80002, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xd, 'wg2\x00'}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) pipe(&(0x7f0000000300)) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000000)={r9, 0x8, 0x0, 0x499}) sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYBLOB="24722b0db4fe892bdfb83e3a22c6c7ad8408783e1ceb4e65b9431d403ae3b60e45ef89e50605237b7bf4b2e4dd29866439392995a3338ae60fa0723544987f7069427798e004d3d962a2a824ccecbce031fed5365cea572fbc07025e2f8e04f284ff327b47950dcd5acf37e3371b2334bf1e3b03f3abec33408b86997644f8be8306130f05815e586783d4a3bd1df4bd"], 0x14c}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 17.769951735s ago: executing program 0 (id=3611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x70}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x72}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x90}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 17.668256409s ago: executing program 0 (id=3612): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) (async, rerun: 32) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000100), 0x4) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) (rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x16, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x4e, &(0x7f00000003c0)=""/78, 0x41100, 0x40, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xb, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[r5, r5, r0], &(0x7f00000007c0)=[{0x4, 0x2, 0xc, 0x6}, {0x5, 0x1, 0x5, 0xc}, {0x3, 0x2, 0xffff5016, 0x9}], 0x10, 0x4}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000008c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@loopback, @in=@remote, 0x4e21, 0xa, 0x4e20, 0x2, 0xa, 0x20, 0x0, 0x21, 0x0, r11}, {0x0, 0x7ff, 0x6, 0x9, 0x6, 0x7fff, 0x8, 0x3}, {0x7, 0x26b69044, 0x8000, 0x2}, 0x401, 0x6e6bb6, 0x0, 0x1, 0x5, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffff, 0x0, 0x2, 0x5, 0xd9, 0x7, 0x6}}, 0xe8) getsockname$l2tp(r10, 0x0, &(0x7f0000000100)) (async) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000000)={@loopback, 0x43}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.648175509s ago: executing program 0 (id=3613): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'veth0_macvtap\x00', 0x400}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x62) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f00000001c0)}, 0x10) setsockopt$packet_int(r1, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0xa08e}, {r1, 0x14c8}], 0x3, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000004740)=""/4080, 0xff0}, {&(0x7f0000003740)=""/4092, 0xffc}], 0x3}, 0x8}], 0x3, 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 17.557419274s ago: executing program 0 (id=3614): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="cd94677cbf6cf61f654a7bf1f984e4ed3cc729d29ce074c69a72bbbea2a4f9d3d234dc618288f831ca5cb43c690429de567ff024ae9b929ff232e1637090b27c39bb83dda696b9db3a505aee6cf465919371be2516800deb922cee00a00351bac25da8fd3c7955355cd02d5d7f738e2e382ebfb57dba1ad06a3afa2ed547eec0d50f15a52423ec68dc04bcf7808f8ef0d6760d7826e1c5a5c95da63761e49a3d737d031be16811cd68be0c32991d01904f88ea023da2", 0xb6) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x16, 0x0, &(0x7f00000001c0)) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r8, 0x891d, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5c07e6f933f04668dd250b26210467151bbf67743fea60f21105cf19ebc17dd9b4d26003ae1e22f7c65e495e1c63f5376b999c91208cee3e808517045c63c30d0628d93c2f847b7ff097558bc14d3f04e6e41b847bc1047923dc34a56116e83f82", @ANYRES16=r11, @ANYBLOB="000125bd7000ffdbdf2502000000480003800500080004000000080003000000000008000100000000000500080000000000080001000100000014000600ff010000000000000000000000000001080003000300000008000500070000003c0001800800050003000000070006006c63000014000300ac1414bb0000000000000000000000000c00070001000000080000000800080005000000"], 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x6c084}, 0x10) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000c80)=[{&(0x7f0000000580)="82575068d1884c8c3746f8e912a4c1673b0dec5d051da066ea1e361c87b6c285381760f338b0e11e4a37e046303a9e913afe85493ef6bf88f5de0ece371ca7c8b8597fcaaad090e4284143f13f295f04046c42cde2dae8cfe547f47f0fbd33b305e8ece75f771957578500d25776b5bfb7dc28bd5a63bebc161ea02757db70fa8e902bd0b9fecc981a32316430be481156cd649a35e7c8adbca66039bc82992e0e3ed4", 0xa3}, {&(0x7f0000000740)="152ce7232be2f6e5b5e1466140694bdae93e8b16a719f7f19e7af2bd5f46295a9f74064a29ce56ceb22d9e92c2cc00ad58032ad6fcd380f0cfb397cb41fa956246b261dcf245ffa118dac1ca1202622684c8b651bf2769b241304b899f5d3bd5c3ff54f070d1c6be2448aa4ff0692b473b8f7657ea08e6e430d6d1ff3b20a026e2be115b7ff0fb61344c20d79d86d3bb54504e29707bd8798472a3eee6d03912ab8d0e9412df032ca12944762cdc6e2434a1cb58bc3bf3cdf12c14", 0xbb}, {&(0x7f0000000640)="0eb9f02c3b9fad8ec0e97a750081d4b0d9b38e9d4e08869ee81017420378a8a8e27a83068e395c0afccc9aaa", 0x2c}, {&(0x7f0000000680)="6ce7c64debb6550156895493e8300032d0750a3d8cca4433869d925ab9709f308ead78da0b6ace8b1832df236d330a848790584ce0f8a114c9", 0x39}, {&(0x7f0000000800)="9fdf865578729d6f50119a84d3273af11ea583d237ed26b00289560205d58ac6cb6eb631d281fc4c67b601e40ee7f6089d2a7c82b77583fb269971c51e9b4ffbea8ab92c2bf520cad5b88d236d4c497640608d85583878003911d4e58e1be747c5afd732e0c5e6c0d658178fd19d71108b7e1492c04b99c7db9e0a8fea7c47c9295927e26284e96b31ec188ef55633d0238194dffe64bab06ce7c441cfe0b5342c3a0054134aaf1fdb4b71bc3445836fb38d60740c60bbd1d9d42f", 0xbb}, {&(0x7f00000008c0)="87a2524188c1e69fa10378e59c079327a3955204aaebe33d77ab762cfa46417fe958975473ce15aa5eda23d4bfc44243d14660a15d879006c7cf32906aa1e28fe79fdb4a5bc8dfeb4f1562ff98c96ca54d1c4a300b560e763e36898343ffb491704b48eb0a1d071eb5d36da9ea8fbf886fb8d4094322f38e9729348ae1e3daf39dd74fff6ae6ce915fc1873d418bbc1039c9eea7e90055859494d01fe15b793cfe7714d3225a8606907c2a100da8657fea9bdf91f0d2c8420b9822b24a5c8f73b54cd2569016f4e7d0617e2d5e31f89dbd7815b3f9841d3747", 0xd9}, {&(0x7f00000009c0)="5ce954b37b7b7a7371fe0a459f4926c4d1cd27b4108c062c7520f4392d6d3037cb62", 0x22}, {&(0x7f0000000a00)="d08f8a2ae747c8b50b200245aa27305df945412759fbf94b2f120df77b0bbfc9cddac931865908721977cee9353a0e71166d8e61a0ddce9b8b15c2814e852cbe4746e1750e614395641d3b16088af3a72aa253f204aa5a6f55a39b5ba3c53940f7476a69783ed4c329eddf8599890824587c481dda93125c42", 0x79}, {&(0x7f0000000d40)="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", 0x1a8}], 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x13, 0x8, &(0x7f0000000280)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x401, 0x61, 0x10, 0x8c}, [@map_fd={0x18, 0x2, 0x1, 0x0, r14}, @generic={0x4, 0x6, 0x5, 0x5, 0x6}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0xbb, &(0x7f0000000300)=""/187, 0x0, 0x2a, '\x00', 0x0, @fallback=0x15, r13, 0x8, &(0x7f0000000000)={0x0, 0x8000004}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x20000000, 0x8, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf2}, 0x94) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000380)='-', 0x1}], 0x1) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r15, 0x0) splice(r5, 0x0, r5, &(0x7f0000000100)=0x4, 0x7, 0x4) 17.448138267s ago: executing program 0 (id=3615): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt(r0, 0x1, 0x6, 0x0, &(0x7f00000008c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004090) 17.402517761s ago: executing program 0 (id=3617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x3}, &(0x7f00000003c0)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r3, 0x5}, 0x8) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0xfc}]}}}}}) 16.368207258s ago: executing program 7 (id=3628): unshare(0x20020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1f, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20a5, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x643}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x4f, &(0x7f0000000300)=""/79, 0x41100, 0x60, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x3, 0xffff, 0xfffffffd}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x5, 0x0, 0x3}], 0x10, 0x6}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c0001"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r6, 0x10, 0x3ff, &(0x7f0000000080)=""/212, &(0x7f0000000180)=0xd4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) sendmmsg$inet(r7, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d1fd6c", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0800a000fe08000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16.353153488s ago: executing program 7 (id=3629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 15.469924266s ago: executing program 7 (id=3630): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xf, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110880000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5a8}, 0x10}, 0x94) 15.352133602s ago: executing program 7 (id=3631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0x54}}}]}]}, 0xa8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x72}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x810) 15.350874989s ago: executing program 7 (id=3632): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000180), 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async, rerun: 32) r8 = openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (rerun: 32) write$cgroup_int(r8, &(0x7f0000000040)=0x8, 0x12) (async) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async) readv(r8, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x80}, 0x1, 0x7}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15.305198367s ago: executing program 7 (id=3633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) 9.27723043s ago: executing program 35 (id=3531): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="06005f37fa0ec82af600d4530336000000000000"], 0x14}}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x40000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0xc0000063) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x40) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[], 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48041}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 9.236774902s ago: executing program 36 (id=3534): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xf1, 0x0, 0xf}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2.502162816s ago: executing program 37 (id=3609): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) socket(0xa, 0x3, 0x3a) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x24000008}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="94000000e2ec4199c6177487a5e037fb81020ceab4c1ec71eb9213f5f208874f92e4e140ae28bfae613cbe2b7b4c0a879f7c05f9ebf6892cab9efab9c0", @ANYRES16=r6, @ANYBLOB="00042bbd7000ffdbdf25210000004c002d8008000200000000000800020003000000050004000100000008000300040000000800020001000000050001000000000000000200030000000500040001000000080002000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x85}, 0x40000) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000003e000701fcfffffffddbdf25027c0000040036800c000180060006008e0a00009a2d105f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r1, @ANYBLOB="1dfc8bf2a884fd4b811a39a33e2e85146cce9396018b5ee832277aa1377cfae77b1da2cffa938f4823a65cec05fb510e9a355182ad2bf0c72d6e4e3a433f8f12e7dce70477c4e4d90d9ceae9d39d49797b9845bbf2478717e1fe76c348fc6f39f963987bea0957783fe9502d197890d5c4603d2c4b13cf7c41a32c483cd6316f968454", @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040088}, 0x8004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r8], 0x4) write$nbd(r1, &(0x7f0000000400)=ANY=[], 0xb4) r9 = socket(0x10, 0x80002, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xd, 'wg2\x00'}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) pipe(&(0x7f0000000300)) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000000)={r9, 0x8, 0x0, 0x499}) sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYBLOB="24722b0db4fe892bdfb83e3a22c6c7ad8408783e1ceb4e65b9431d403ae3b60e45ef89e50605237b7bf4b2e4dd29866439392995a3338ae60fa0723544987f7069427798e004d3d962a2a824ccecbce031fed5365cea572fbc07025e2f8e04f284ff327b47950dcd5acf37e3371b2334bf1e3b03f3abec33408b86997644f8be8306130f05815e586783d4a3bd1df4bd"], 0x14c}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 1.478374944s ago: executing program 38 (id=3617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x3}, &(0x7f00000003c0)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r3, 0x5}, 0x8) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0xfc}]}}}}}) 0s ago: executing program 39 (id=3633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) kernel console output (not intermixed with test programs): s an invalid length. [ 256.179048][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 256.472160][T12720] bridge_slave_0: left allmulticast mode [ 256.520338][T12720] bridge_slave_0: left promiscuous mode [ 256.557269][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.627114][T12720] bridge_slave_1: left allmulticast mode [ 256.651654][T12720] bridge_slave_1: left promiscuous mode [ 256.657936][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.676652][T12720] bond0: (slave bond_slave_0): Releasing backup interface [ 256.699346][T12720] bond0: (slave bond_slave_1): Releasing backup interface [ 256.723211][T12720] team0: Port device team_slave_0 removed [ 256.740054][T12720] team0: Port device team_slave_1 removed [ 256.748649][T12720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.761050][T12720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.784099][T12720] bond2: (slave veth3): Releasing active interface [ 256.801927][T12720] bond3: (slave bond4): Releasing backup interface [ 257.110668][T12748] netlink: 'syz.0.1854': attribute type 29 has an invalid length. [ 257.243604][T12759] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1857'. [ 257.411274][T12772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1860'. [ 257.461933][T12772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1860'. [ 257.502703][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 257.516704][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 257.584452][T12781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1866'. [ 257.660079][T12787] netlink: 'syz.4.1866': attribute type 28 has an invalid length. [ 258.401848][T12817] veth0_to_team: entered promiscuous mode [ 258.415361][T12817] veth0_to_team: entered allmulticast mode [ 258.715154][T12844] bond0: option ad_select: unable to set because the bond device is up [ 259.057528][T12866] nftables ruleset with unbound set [ 259.283655][T12865] bridge0: port 4(syz_tun) entered disabled state [ 259.347942][T12865] syz_tun (unregistering): left allmulticast mode [ 259.363427][T12865] syz_tun (unregistering): left promiscuous mode [ 259.370017][T12865] bridge0: port 4(syz_tun) entered disabled state [ 259.553699][T12880] xt_l2tp: invalid flags combination: 0 [ 259.591718][ T1137] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.616297][ T1137] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.724313][ T1137] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.742614][ T1137] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.865997][ T1137] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.908728][ T1137] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.045715][ T1137] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.078904][T12885] netlink: 'syz.1.1900': attribute type 1 has an invalid length. [ 260.082577][ T1137] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.099333][T12885] netlink: 'syz.1.1900': attribute type 1 has an invalid length. [ 260.119579][T12885] netlink: 'syz.1.1900': attribute type 2 has an invalid length. [ 260.487286][T12892] lo: entered allmulticast mode [ 260.501313][T12892] tunl0: entered allmulticast mode [ 260.540794][T12892] gre0: entered allmulticast mode [ 260.613589][T12892] gretap0: entered allmulticast mode [ 260.622466][T12892] erspan0: entered allmulticast mode [ 260.656607][T12892] ip_vti0: entered allmulticast mode [ 260.690730][T12892] ip6_vti0: entered allmulticast mode [ 260.739223][T12892] sit0: left promiscuous mode [ 260.761330][T12892] sit0: entered allmulticast mode [ 260.793458][T12892] ip6tnl0: entered allmulticast mode [ 260.806332][T12892] ip6gre0: entered allmulticast mode [ 260.881387][T12892] ip6gretap0: entered allmulticast mode [ 260.909169][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.917063][T12892] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.956038][T12892] bridge0: entered allmulticast mode [ 260.966927][ T5186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.976947][ T5186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.994395][ T5186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.995011][T12892] vcan0: entered allmulticast mode [ 261.020448][ T5186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.028998][ T5186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.071839][T12892] bond0: entered allmulticast mode [ 261.089952][T12892] bond_slave_0: entered allmulticast mode [ 261.092779][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 261.096578][T12892] bond_slave_1: entered allmulticast mode [ 261.137162][T12892] team0: entered allmulticast mode [ 261.153156][T12892] team_slave_0: entered allmulticast mode [ 261.159061][T12892] team_slave_1: entered allmulticast mode [ 261.185774][T12892] dummy0: entered allmulticast mode [ 261.214367][T12892] nlmon0: entered allmulticast mode [ 261.221779][T12892] caif0: entered allmulticast mode [ 261.247264][ T5186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.264206][ T5186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.274076][ T5186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.282314][ T5186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.291425][ T5186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.306898][T12892] batadv0: entered allmulticast mode [ 261.338820][T12892] vxcan0: entered allmulticast mode [ 261.353777][T12892] vxcan1: entered allmulticast mode [ 261.369735][T12892] wg0: entered allmulticast mode [ 261.413628][T12892] wg1: entered allmulticast mode [ 261.430866][ T5186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.440452][T12892] wg2: entered allmulticast mode [ 261.440898][ T5186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.455090][T12892] veth0_to_bridge: entered allmulticast mode [ 261.458468][ T5186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.469591][ T5186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.477851][ T5186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.515447][T12892] veth1_to_bridge: entered allmulticast mode [ 261.528861][T12892] veth0_to_bond: entered allmulticast mode [ 261.553431][T12892] veth1_to_bond: entered allmulticast mode [ 261.567535][T12892] veth0_to_team: entered allmulticast mode [ 261.587858][T12892] veth1_to_team: entered allmulticast mode [ 261.610045][T12892] veth0_to_batadv: entered allmulticast mode [ 261.623822][T12892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.633566][T12892] batadv_slave_0: entered allmulticast mode [ 261.644253][T12892] veth1_to_batadv: entered allmulticast mode [ 261.657644][T12892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.671054][T12892] batadv_slave_1: entered allmulticast mode [ 261.691360][T12892] xfrm0: entered allmulticast mode [ 261.697980][T12892] veth0_to_hsr: entered allmulticast mode [ 261.724704][T12892] hsr_slave_0: entered allmulticast mode [ 261.737482][T12892] veth1_to_hsr: entered allmulticast mode [ 261.752760][T12892] hsr0: entered allmulticast mode [ 261.764226][T12892] veth1_virt_wifi: entered allmulticast mode [ 261.779485][T12892] veth0_virt_wifi: entered allmulticast mode [ 261.795418][T12892] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 261.812159][T12892] veth1_vlan: entered allmulticast mode [ 261.858148][T12892] vlan1: entered allmulticast mode [ 261.867374][T12892] macvlan0: entered allmulticast mode [ 261.874749][T12892] macvlan1: entered allmulticast mode [ 261.886207][T12892] ipvlan0: entered allmulticast mode [ 261.891741][T12892] ipvlan1: entered allmulticast mode [ 261.898685][T12892] veth1_macvtap: entered allmulticast mode [ 261.919609][T12892] veth0_macvtap: entered allmulticast mode [ 261.935441][T12892] macvtap0: entered allmulticast mode [ 261.945808][T12892] geneve0: entered allmulticast mode [ 261.964032][T12892] geneve1: entered allmulticast mode [ 261.983851][T12892] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered allmulticast mode [ 262.003993][T12892] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 262.020909][T12892] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 262.035304][T12892] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 262.054509][T12892] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 262.072066][T12892] bond1: entered allmulticast mode [ 262.082315][T12892] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 262.090705][T12892] vlan2: left promiscuous mode [ 262.103541][T12892] vlan3: entered allmulticast mode [ 262.109598][T12892] bond2: entered allmulticast mode [ 262.123030][T12892] bond3: entered allmulticast mode [ 262.133443][T12892] bond4: entered allmulticast mode [ 262.142948][T12892] xfrm1: entered allmulticast mode [ 262.154379][T12892] bond5: entered allmulticast mode [ 262.159671][T12892] gretap1: entered allmulticast mode [ 262.177093][T12892] ipvlan2: entered allmulticast mode [ 262.183455][T12892] bond6: entered allmulticast mode [ 262.188885][T12892] bridge1: entered allmulticast mode [ 262.196685][T12892] bridge2: entered allmulticast mode [ 262.216754][T12892] vlan0: left promiscuous mode [ 262.225963][T12892] macvtap1: left promiscuous mode [ 262.234796][T12892] bond7: entered allmulticast mode [ 262.240249][T12892] veth0: entered allmulticast mode [ 262.247971][T12892] veth1: entered allmulticast mode [ 262.255014][T12892] nicvf0: entered allmulticast mode [ 262.265386][T12892] vxlan0: entered allmulticast mode [ 262.277303][T12892] gre1: entered allmulticast mode [ 262.347009][T12892] macvlan2: entered allmulticast mode [ 262.356692][T12892] pim6reg0: entered allmulticast mode [ 262.363083][T12892] veth2: entered allmulticast mode [ 262.368605][T12892] veth3: entered allmulticast mode [ 262.374632][T12892] : entered allmulticast mode [ 262.379801][T12892] ip6tnl1: entered allmulticast mode [ 262.385509][T12892] macvlan3: entered allmulticast mode [ 262.391938][T12892] ipip0: entered allmulticast mode [ 262.418173][T12892] bond8: entered allmulticast mode [ 262.423590][T12892] geneve2: entered allmulticast mode [ 262.446866][T12892] bond9: entered allmulticast mode [ 262.454990][T12892] veth4: entered allmulticast mode [ 262.463005][T12892] veth5: entered allmulticast mode [ 262.469012][T12892] ip6gre1: entered allmulticast mode [ 262.476949][T12892] ip6erspan0: entered allmulticast mode [ 262.483714][T12892] geneve3: entered allmulticast mode [ 262.490368][T12892] gretap2: left promiscuous mode [ 262.501956][T12892] vlan4: entered allmulticast mode [ 262.549947][ T1154] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.581161][ T1154] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.624061][ T1154] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.653644][ T1154] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.693640][ T1154] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.734897][ T1154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.767882][ T1137] team0: left allmulticast mode [ 262.774787][ T1137] team_slave_0: left allmulticast mode [ 262.780349][ T1137] team_slave_1: left allmulticast mode [ 262.791335][ T1137] geneve0: left allmulticast mode [ 262.796930][ T1137] team0: left promiscuous mode [ 262.801824][ T1137] team_slave_0: left promiscuous mode [ 262.808867][ T1137] team_slave_1: left promiscuous mode [ 262.817792][ T1137] geneve0: left promiscuous mode [ 262.824883][ T1137] bridge0: port 3(team0) entered disabled state [ 262.854640][ T1137] bridge_slave_1: left allmulticast mode [ 262.860352][ T1137] bridge_slave_1: left promiscuous mode [ 262.871327][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.887441][ T1137] : left allmulticast mode [ 262.892152][ T1137] : left promiscuous mode [ 262.902206][ T1137] bridge0: port 1() entered disabled state [ 262.940228][T12920] __nla_validate_parse: 8 callbacks suppressed [ 262.940257][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 262.960383][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1911'. [ 263.093191][ T5878] Bluetooth: hci0: command tx timeout [ 263.245370][ T1137] team0: Port device geneve0 removed [ 263.277085][ T1137] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 263.403972][ T5878] Bluetooth: hci2: command tx timeout [ 263.567954][ T5878] Bluetooth: hci3: command tx timeout [ 263.643484][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.656817][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.667251][ T1137] bond0 (unregistering): Released all slaves [ 263.684371][ T1137] bond1 (unregistering): Released all slaves [ 263.700249][ T1137] bond2 (unregistering): Released all slaves [ 263.799679][ T1137] bond3 (unregistering): (slave veth1): Releasing active interface [ 263.810942][ T1137] bond3 (unregistering): Released all slaves [ 263.870468][ T1154] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.881269][ T1154] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.927925][T12915] vlan3: entered allmulticast mode [ 263.944816][T12915] bridge0: entered allmulticast mode [ 264.034357][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1913'. [ 264.205789][T12932] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1916'. [ 264.247747][T12932] netlink: 'syz.1.1916': attribute type 12 has an invalid length. [ 264.263952][T12903] syzkaller0 speed is unknown, defaulting to 1000 [ 264.387378][T12936] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 264.623568][T12945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1919'. [ 264.739447][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 264.900251][T12907] syzkaller0 speed is unknown, defaulting to 1000 [ 265.163348][ T5878] Bluetooth: hci0: command tx timeout [ 265.483029][ T5878] Bluetooth: hci2: command tx timeout [ 265.517050][ T1137] : left promiscuous mode [ 265.634850][ T1137] tipc: Disabling bearer [ 265.638786][T12909] syzkaller0 speed is unknown, defaulting to 1000 [ 265.653457][ T5878] Bluetooth: hci3: command tx timeout [ 265.665667][ T1137] tipc: Disabling bearer [ 265.697306][ T1137] tipc: Left network mode [ 265.814587][T12903] chnl_net:caif_netlink_parms(): no params data found [ 266.480073][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.499592][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.511704][T12903] bridge_slave_0: entered allmulticast mode [ 266.523843][T12903] bridge_slave_0: entered promiscuous mode [ 266.561979][T12997] openvswitch: netlink: Missing key (keys=40, expected=100) [ 266.591668][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.600794][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.614271][T12903] bridge_slave_1: entered allmulticast mode [ 266.622479][T12903] bridge_slave_1: entered promiscuous mode [ 266.811893][T13007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.907545][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.923076][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.935977][T13013] !€ÿ: renamed from bond_slave_0 [ 267.141583][T12907] chnl_net:caif_netlink_parms(): no params data found [ 267.229628][T13021] rdma_rxe: rxe_newlink: failed to add bond0 [ 267.245067][ T5878] Bluetooth: hci0: command tx timeout [ 267.268764][T13021] netlink: 'syz.0.1934': attribute type 13 has an invalid length. [ 267.493844][T13021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.573450][ T5878] Bluetooth: hci2: command tx timeout [ 267.594495][T12903] team0: Port device team_slave_0 added [ 267.610489][ T1137] hsr_slave_1: left promiscuous mode [ 267.615637][T13033] netlink: 'syz.1.1937': attribute type 1 has an invalid length. [ 267.619846][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.631330][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.645691][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.653982][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.689130][ T1137] veth0_macvtap: left promiscuous mode [ 267.695480][ T1137] veth1_vlan: left promiscuous mode [ 267.700900][ T1137] veth0_vlan: left promiscuous mode [ 267.723629][ T5878] Bluetooth: hci3: command tx timeout [ 267.851420][T13041] netlink: 'syz.0.1938': attribute type 1 has an invalid length. [ 267.859434][T13041] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1938'. [ 267.874889][T13041] netlink: 'syz.0.1938': attribute type 6 has an invalid length. [ 267.938399][T13042] netlink: 'syz.0.1938': attribute type 6 has an invalid length. [ 268.190081][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 268.233648][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 268.446988][ T9792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.627264][T12903] team0: Port device team_slave_1 added [ 268.653009][T13033] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 268.755082][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.783527][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.814923][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.924324][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.941087][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.966343][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.995841][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.135333][T12907] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.145140][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.165033][T12907] bridge_slave_0: entered allmulticast mode [ 269.176524][T12907] bridge_slave_0: entered promiscuous mode [ 269.191420][T12907] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.208982][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.236688][T12907] bridge_slave_1: entered allmulticast mode [ 269.253743][T12907] bridge_slave_1: entered promiscuous mode [ 269.311405][T13070] af_packet: tpacket_rcv: packet too big, clamped from 145 to 4294967272. macoff=96 [ 269.322872][ T5878] Bluetooth: hci0: command tx timeout [ 269.404865][T12903] hsr_slave_0: entered promiscuous mode [ 269.411735][T12903] hsr_slave_1: entered promiscuous mode [ 269.460303][T12909] chnl_net:caif_netlink_parms(): no params data found [ 269.595696][T12907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.626895][ T1137] IPVS: stop unused estimator thread 0... [ 269.642878][ T5878] Bluetooth: hci2: command tx timeout [ 269.733192][T12907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.803172][ T5878] Bluetooth: hci3: command tx timeout [ 269.863877][T13090] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1948'. [ 269.960025][T13102] netlink: 'syz.1.1950': attribute type 1 has an invalid length. [ 269.975151][T12907] team0: Port device team_slave_0 added [ 269.997068][T12909] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.004758][T12909] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.012174][T12909] bridge_slave_0: entered allmulticast mode [ 270.026899][T12909] bridge_slave_0: entered promiscuous mode [ 270.041191][T12909] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.049672][T12909] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.058095][T12909] bridge_slave_1: entered allmulticast mode [ 270.066799][T12909] bridge_slave_1: entered promiscuous mode [ 270.105775][T13102] 8021q: adding VLAN 0 to HW filter on device bond10 [ 270.114114][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.123343][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.135487][T12907] team0: Port device team_slave_1 added [ 270.169356][ T1137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.180975][ T1137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.211575][T13100] bond10: (slave gretap3): making interface the new active one [ 270.220247][T13100] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 270.368804][ T1137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.379869][ T1137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.393272][ T9784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.408630][T13105] tipc: Enabling of bearer rejected, failed to enable media [ 270.425458][T12909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.531548][ T1137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.542152][ T1137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.589104][T12909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.616891][T12907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.624273][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.651231][T12907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.671566][T12907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.679178][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.714909][T12907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.832377][ T1137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.851188][ T1137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.894879][T12909] team0: Port device team_slave_0 added [ 271.007101][T12909] team0: Port device team_slave_1 added [ 271.099108][T12907] hsr_slave_0: entered promiscuous mode [ 271.107626][T12907] hsr_slave_1: entered promiscuous mode [ 271.118410][T12907] debugfs: 'hsr0' already exists in 'hsr' [ 271.126822][T12907] Cannot create hsr debugfs directory [ 271.148929][T12909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.159898][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.191186][T12909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.206344][T12909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.213940][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.240713][T12909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.662028][T12903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.689161][T12903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.718322][T12909] hsr_slave_0: entered promiscuous mode [ 271.726986][T12909] hsr_slave_1: entered promiscuous mode [ 271.733825][T12909] debugfs: 'hsr0' already exists in 'hsr' [ 271.739678][T12909] Cannot create hsr debugfs directory [ 271.790029][ T1137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.827209][T12903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.832128][T13136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1961'. [ 271.906375][T12903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.965453][ T1137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.140781][ T1137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.165945][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'. [ 272.272284][ T1137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.445142][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 272.771720][T12907] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 272.853695][T12907] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 272.904714][T12907] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 273.966170][ T1137] bond0 (unregistering): Released all slaves [ 273.985095][ T1137] bond1 (unregistering): Released all slaves [ 274.108405][ T1137] bond2 (unregistering): Released all slaves [ 274.141473][ T1137] bond3 (unregistering): Released all slaves [ 274.172037][T13211] netlink: 'syz.0.1975': attribute type 26 has an invalid length. [ 274.182929][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 274.262081][ T1137] bond4 (unregistering): Released all slaves [ 274.283402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.384255][ T1137] bond5 (unregistering): Released all slaves [ 274.575449][ T1137] bond6 (unregistering): (slave gretap2): Releasing active interface [ 274.669477][ T1137] bond4 (unregistering): (slave geneve2): Releasing active interface [ 275.169207][ T1137] bond0 (unregistering): Released all slaves [ 275.170218][ T12] smc: removing ib device syz1 [ 275.276284][ T1137] bond1 (unregistering): Released all slaves [ 275.294727][ T1137] bond2 (unregistering): Released all slaves [ 275.310604][ T1137] bond3 (unregistering): Released all slaves [ 275.406429][ T1137] bond4 (unregistering): Released all slaves [ 275.421369][ T1137] bond5 (unregistering): Released all slaves [ 275.516597][ T1137] bond6 (unregistering): Released all slaves [ 275.534726][T12907] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.592420][T13211] netlink: 'syz.0.1975': attribute type 26 has an invalid length. [ 275.615668][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 275.881788][T13217] netlink: 'syz.1.1976': attribute type 3 has an invalid length. [ 276.068160][T13225] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 276.217386][T12909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.255056][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.282377][T12909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.322615][T12909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.355308][T12909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.475626][T13237] netlink: 'syz.0.1981': attribute type 17 has an invalid length. [ 276.502527][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1981'. [ 276.529519][T13237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1981'. [ 276.567122][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.675304][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.683684][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.727229][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.734961][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.889470][T12907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.990680][T12907] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.098570][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.105800][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.187134][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.194486][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.296555][T12909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.541812][T12909] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.583037][T13251] block nbd1: not configured, cannot reconfigure [ 277.590840][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.598055][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.690995][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.698305][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.934956][T12909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.092347][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.520814][T12907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.874233][T12909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.899400][ T1137] : left promiscuous mode [ 279.136225][ T1137] tipc: Disabling bearer [ 279.176590][ T1137] tipc: Left network mode [ 279.377803][ T1137] tipc: Left network mode [ 279.396386][T13306] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1992'. [ 279.401898][T12903] veth0_vlan: entered promiscuous mode [ 279.591373][T12903] veth1_vlan: entered promiscuous mode [ 279.850770][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 279.861190][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 279.872606][T13321] netlink: 'syz.0.1995': attribute type 15 has an invalid length. [ 280.067015][T12903] veth0_macvtap: entered promiscuous mode [ 280.141504][T12907] veth0_vlan: entered promiscuous mode [ 280.205719][T12903] veth1_macvtap: entered promiscuous mode [ 280.220362][T12907] veth1_vlan: entered promiscuous mode [ 280.365366][T13330] netlink: 'syz.0.1998': attribute type 6 has an invalid length. [ 280.378001][T13330] tipc: Enabling of bearer rejected, already enabled [ 280.448990][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.486613][T12909] veth0_vlan: entered promiscuous mode [ 280.565790][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.586276][T12907] veth0_macvtap: entered promiscuous mode [ 280.616612][T12909] veth1_vlan: entered promiscuous mode [ 280.658160][T12907] veth1_macvtap: entered promiscuous mode [ 280.671137][ T3488] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.693675][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.764534][T13344] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 280.773787][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.800390][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.038679][T13348] 8021q: adding VLAN 0 to HW filter on device bond11 [ 281.061790][T12909] veth0_macvtap: entered promiscuous mode [ 281.099566][T12907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.123638][ T1137] hsr_slave_0: left promiscuous mode [ 281.136484][ T1137] hsr_slave_0: left promiscuous mode [ 281.145828][ T1137] hsr_slave_1: left promiscuous mode [ 281.174073][ T1137] veth1_macvtap: left promiscuous mode [ 281.179742][ T1137] veth0_macvtap: left promiscuous mode [ 281.185816][ T1137] veth1_vlan: left promiscuous mode [ 282.725696][T12907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.737745][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 282.773177][T12909] veth1_macvtap: entered promiscuous mode [ 282.790153][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.807765][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.842827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.885412][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.927174][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.954706][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.978173][T12909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.985647][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.054677][T12909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.111164][ T3488] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.150627][ T3488] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.166560][T13361] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2008'. [ 283.179508][ T8609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.198863][ T8609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.227860][ T3488] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.274006][ T3488] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.356902][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.388306][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.481727][ T8609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.525244][ T8609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.594418][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.635727][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.747827][ T1137] IPVS: stop unused estimator thread 0... [ 283.783431][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.791320][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.039128][T13376] netlink: 'syz.7.1905': attribute type 1 has an invalid length. [ 284.219086][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 284.314809][T13393] netlink: 'syz.5.2015': attribute type 83 has an invalid length. [ 284.615369][T13404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.674396][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 284.889152][T13412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2022'. [ 284.900624][T13412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2022'. [ 285.088033][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 285.600226][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2034'. [ 285.648225][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2034'. [ 285.685770][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2034'. [ 285.748596][T13457] netlink: 'syz.5.2034': attribute type 12 has an invalid length. [ 285.871023][T13467] netlink: 'syz.1.2038': attribute type 16 has an invalid length. [ 285.879089][T13467] netlink: 'syz.1.2038': attribute type 17 has an invalid length. [ 285.887949][T13469] gre2: entered promiscuous mode [ 285.891116][T13471] netlink: 'syz.7.2039': attribute type 5 has an invalid length. [ 285.893464][T13469] gre2: entered allmulticast mode [ 285.923168][T13473] netlink: 'syz.1.2038': attribute type 8 has an invalid length. [ 285.965350][T13467] lo: left allmulticast mode [ 285.988536][T13467] tunl0: left allmulticast mode [ 286.017973][T13467] gre0: left allmulticast mode [ 286.030961][T13467] erspan0: left allmulticast mode [ 286.058143][T13467] ip_vti0: left allmulticast mode [ 286.071218][T13467] ip6_vti0: left allmulticast mode [ 286.080617][T13467] sit0: left allmulticast mode [ 286.131264][T13478] netlink: 'syz.7.2041': attribute type 1 has an invalid length. [ 286.134133][T13467] ip6tnl0: left allmulticast mode [ 286.180792][T13467] ip6gre0: left allmulticast mode [ 286.189807][T13467] ip6gretap0: left allmulticast mode [ 286.198960][T13467] bond0: left allmulticast mode [ 286.205284][T13467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.214784][T13467] team0: left allmulticast mode [ 286.220754][T13467] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.229245][T13467] dummy0: left allmulticast mode [ 286.235032][T13467] nlmon0: left allmulticast mode [ 286.245445][T13467] caif0: left allmulticast mode [ 286.255024][T13467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.285137][T13475] ip6erspan0: entered promiscuous mode [ 287.277888][T13524] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 287.655483][T13548] Bluetooth: MGMT ver 1.23 [ 287.877438][T13557] __nla_validate_parse: 7 callbacks suppressed [ 287.877460][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2069'. [ 287.895734][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2066'. [ 287.909967][T13557] bridge1: entered promiscuous mode [ 287.916378][T13557] bridge1: entered allmulticast mode [ 288.081874][T13562] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 288.099542][T13562] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 288.104973][T13566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2072'. [ 288.109686][T13562] tipc: Resetting bearer [ 288.153227][T13565] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.340877][T13565] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.397720][T13568] tipc: Enabling of bearer rejected, already enabled [ 288.411796][T13571] tap0: tun_chr_ioctl cmd 1074025678 [ 288.446457][T13571] tap0: group set to 0 [ 288.477147][T13578] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 288.494014][T13565] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.526289][T13570] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 288.569135][T13570] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 288.581532][T13570] tipc: Resetting bearer [ 288.603416][ T5878] Bluetooth: hci3: command tx timeout [ 288.618283][T13565] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.833950][T13585] IPVS: set_ctl: invalid protocol: 135 172.30.1.1:20000 [ 288.842856][ T751] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.876780][T13585] netlink: 'syz.0.2079': attribute type 17 has an invalid length. [ 288.905364][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 288.912220][ T751] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.917611][T13589] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20007 [ 288.939879][T13585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2079'. [ 288.982188][ T30] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.021909][ T30] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.322099][T13606] netlink: 'syz.6.2085': attribute type 1 has an invalid length. [ 289.331043][T13606] netlink: 'syz.6.2085': attribute type 2 has an invalid length. [ 289.493047][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2088'. [ 289.599376][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2088'. [ 289.608884][ T8609] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.638865][ T8609] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.728003][ T9775] IPVS: starting estimator thread 0... [ 289.769665][ T8609] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.805339][ T1137] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.815837][T13632] openvswitch: netlink: Multiple metadata blocks provided [ 289.835678][T13630] IPVS: using max 25 ests per chain, 60000 per kthread [ 290.401953][T13653] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2096'. [ 290.426457][T13654] netlink: 'syz.5.2097': attribute type 11 has an invalid length. [ 291.042713][T13687] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2103'. [ 291.058897][T13687] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2103'. [ 291.171963][T13691] netlink: 'syz.6.2106': attribute type 1 has an invalid length. [ 291.614815][T13707] bridge_slave_1 (unregistering): left promiscuous mode [ 291.629437][T13707] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.148098][T13732] : entered promiscuous mode [ 292.419209][T13746] netlink: 'syz.5.2126': attribute type 4 has an invalid length. [ 292.698368][T13762] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 292.722073][T13765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.729416][T13765] IPv6: NLM_F_CREATE should be set when creating new route [ 292.732466][T13767] Bluetooth: MGMT ver 1.23 [ 293.151588][T13790] __nla_validate_parse: 8 callbacks suppressed [ 293.151610][T13790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2140'. [ 293.200799][T13791] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2141'. [ 293.212435][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2141'. [ 293.253776][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2141'. [ 293.494760][T13800] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 293.535385][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2143'. [ 293.618702][T13800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.695994][T13803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.722112][T13803] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 293.744718][T13803] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 293.768246][T13804] netlink: 'syz.6.2144': attribute type 11 has an invalid length. [ 294.147910][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2149'. [ 294.319239][T13833] netlink: 'syz.0.2151': attribute type 4 has an invalid length. [ 294.608585][T13849] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2155'. [ 294.834408][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2158'. [ 294.867098][T13855] block nbd0: not configured, cannot reconfigure [ 294.901146][T13859] delete_channel: no stack [ 294.935743][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 295.240120][T13867] bond12 (unregistering): Released all slaves [ 295.845574][T13897] netlink: 'syz.7.2173': attribute type 1 has an invalid length. [ 295.877942][T13895] pim6reg: entered allmulticast mode [ 296.004237][T13903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2175'. [ 296.350188][T13913] netlink: 'syz.5.2179': attribute type 75 has an invalid length. [ 296.513387][ T31] audit: type=1800 audit(1759362900.531:2): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2180" name="memory.events" dev="tmpfs" ino=227 res=0 errno=0 [ 297.600267][ T9792] IPVS: starting estimator thread 0... [ 297.702674][T13970] IPVS: using max 25 ests per chain, 60000 per kthread [ 297.799734][T13976] sctp: [Deprecated]: syz.0.2196 (pid 13976) Use of int in max_burst socket option. [ 297.799734][T13976] Use struct sctp_assoc_value instead [ 297.835230][T13973] bond2: Invalid ad_actor_system MAC address. [ 297.841374][T13973] bond2: option ad_actor_system: invalid value (1) [ 297.866256][T13973] bond2 (unregistering): Released all slaves [ 297.890668][T13987] netlink: 'syz.0.2199': attribute type 13 has an invalid length. [ 297.901963][T13987] netlink: 'syz.0.2199': attribute type 58 has an invalid length. [ 297.910302][T13988] netlink: 'syz.0.2199': attribute type 13 has an invalid length. [ 297.918570][T13988] netlink: 'syz.0.2199': attribute type 58 has an invalid length. [ 298.343984][T14002] __nla_validate_parse: 11 callbacks suppressed [ 298.344006][T14002] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2204'. [ 298.383587][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2205'. [ 298.499513][T14009] netlink: 'syz.7.2206': attribute type 25 has an invalid length. [ 298.513771][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2205'. [ 298.721574][T14016] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2208'. [ 298.921074][T14022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.040516][T14028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2214'. [ 299.357635][T14046] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.2219'. [ 299.589277][T14057] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2222'. [ 299.729030][T14061] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 300.010609][T14070] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 300.269002][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2230'. [ 300.477810][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2231'. [ 300.511837][T14093] netlink: 'syz.0.2233': attribute type 10 has an invalid length. [ 300.568167][T14098] netlink: 'syz.1.2234': attribute type 10 has an invalid length. [ 300.608861][T14093] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 300.620878][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.644944][T14098] veth0_vlan: left promiscuous mode [ 300.678392][T14098] veth0_vlan: entered promiscuous mode [ 300.717480][T14098] team0: Device veth0_vlan failed to register rx_handler [ 300.750257][T14111] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2237'. [ 300.763042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.777292][ T751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.796281][ T751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.848671][ T751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.972398][T14116] netlink: 'syz.5.2240': attribute type 32 has an invalid length. [ 300.996492][T14117] netlink: 'syz.7.2241': attribute type 1 has an invalid length. [ 301.037392][T14116] bond1: Setting coupled_control to off (0) [ 301.856716][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.697819][T14196] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.735694][T14197] netlink: 'syz.6.2259': attribute type 4 has an invalid length. [ 302.786877][T14199] netlink: 'syz.1.2262': attribute type 3 has an invalid length. [ 303.412359][T14227] pim6reg1: entered allmulticast mode [ 303.633581][T14240] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 303.706601][T14246] netlink: 'syz.1.2277': attribute type 1 has an invalid length. [ 303.767564][T14249] __nla_validate_parse: 9 callbacks suppressed [ 303.767584][T14249] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2278'. [ 303.949606][T14257] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2281'. [ 303.991658][T14257] ip6gre1: entered allmulticast mode [ 304.026679][T14267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.033259][T14263] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2283'. [ 304.087521][T14267] syzkaller1: entered promiscuous mode [ 304.112623][T14267] syzkaller1: entered allmulticast mode [ 304.416832][T14280] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2288'. [ 304.480093][T14248] syzkaller0 speed is unknown, defaulting to 1000 [ 304.914818][T14296] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2291'. [ 305.013269][T14300] bond5 (unregistering): Released all slaves [ 305.082798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.278708][T14246] syzkaller0 speed is unknown, defaulting to 1000 [ 305.311422][T14311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.594639][T14308] team0: Cannot enslave team device to itself [ 305.776521][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 305.880205][T14334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.902845][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2302'. [ 306.032799][T14341] dummy0: entered promiscuous mode [ 306.056874][T14340] netlink: 'syz.6.2303': attribute type 12 has an invalid length. [ 306.079727][T14340] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2303'. [ 306.122712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.305522][T14355] tc_dump_action: action bad kind [ 306.577390][T14360] veth5: entered promiscuous mode [ 306.583842][T14360] veth5: entered allmulticast mode [ 306.618629][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2310'. [ 306.645776][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2310'. [ 306.965157][T14382] netlink: 'syz.6.2316': attribute type 2 has an invalid length. [ 307.045352][T14385] tipc: Started in network mode [ 307.050650][T14385] tipc: Node identity 460255067459, cluster identity 4711 [ 307.058433][T14385] tipc: Enabled bearer , priority 0 [ 307.106148][T14386] syzkaller0: entered promiscuous mode [ 307.125730][T14389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.126814][T14386] syzkaller0: entered allmulticast mode [ 307.210468][T14385] tipc: Resetting bearer [ 307.242279][T14383] tipc: Resetting bearer [ 307.313199][T14383] tipc: Disabling bearer [ 307.370168][T14395] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 307.386735][T14394] tipc: Started in network mode [ 307.394818][T14394] tipc: Node identity , cluster identity 4711 [ 307.401020][T14394] tipc: Failed to obtain node identity [ 307.409245][T14394] tipc: Enabling of bearer rejected, failed to enable media [ 307.646812][ T49] tipc: Subscription rejected, illegal request [ 307.675274][T14417] netlink: 'syz.6.2324': attribute type 4 has an invalid length. [ 307.990493][T14440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.028479][T14445] netlink: 'syz.7.2335': attribute type 39 has an invalid length. [ 308.613752][T14480] dvmrp0: entered allmulticast mode [ 308.864941][T14493] __nla_validate_parse: 14 callbacks suppressed [ 308.864964][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2351'. [ 308.994200][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 309.179402][T14510] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 309.323270][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2359'. [ 309.350471][T14516] bond5: (slave bridge3): making interface the new active one [ 309.365917][T14516] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 309.784820][T14538] 8021q: adding VLAN 0 to HW filter on device bond12 [ 309.915936][T14534] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 311.047345][T14579] netlink: 'syz.5.2376': attribute type 10 has an invalid length. [ 311.073794][T14579] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 311.120235][T14579] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 311.321073][T14591] netlink: 'syz.6.2378': attribute type 21 has an invalid length. [ 311.351681][T14591] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2378'. [ 311.521070][T14597] tipc: Started in network mode [ 311.537502][T14597] tipc: Node identity , cluster identity 4711 [ 311.547133][T14597] tipc: Failed to set node id, please configure manually [ 311.556567][T14597] tipc: Enabling of bearer rejected, failed to enable media [ 311.571927][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2379'. [ 311.588457][T14599] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 311.678054][T14603] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2381'. [ 311.965565][T14620] netlink: 'syz.5.2388': attribute type 29 has an invalid length. [ 311.973793][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2388'. [ 311.986559][T14620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2388'. [ 312.300488][T14637] netlink: 'syz.5.2394': attribute type 10 has an invalid length. [ 312.328576][T14637] batman_adv: batadv0: Adding interface: team0 [ 312.340144][T14637] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.361522][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2395'. [ 312.374805][T14637] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 312.381182][T14643] vxcan1: tx address claim with different name [ 312.737784][T14659] openvswitch: netlink: Key 6 has unexpected len 418 expected 2 [ 312.891280][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2404'. [ 314.796941][T14691] tipc: Enabling of bearer rejected, failed to enable media [ 314.944533][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2411'. [ 315.009176][T14712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.214390][T14727] netlink: 'syz.1.2418': attribute type 1 has an invalid length. [ 315.257870][T14728] netlink: zone id is out of range [ 315.274087][T14728] netlink: zone id is out of range [ 315.279551][T14728] netlink: zone id is out of range [ 315.284972][T14728] netlink: zone id is out of range [ 315.290208][T14728] netlink: zone id is out of range [ 315.296996][T14728] netlink: zone id is out of range [ 315.304664][T14728] netlink: zone id is out of range [ 315.345196][T14727] veth9: entered promiscuous mode [ 315.374566][T14727] bond13: (slave veth9): Enslaving as a backup interface with a down link [ 315.728374][T14747] netlink: 'syz.1.2424': attribute type 6 has an invalid length. [ 315.789370][T14763] netlink: 'syz.5.2427': attribute type 10 has an invalid length. [ 315.819326][T14747] netlink: 'syz.1.2424': attribute type 6 has an invalid length. [ 316.039122][T14771] IPVS: Unknown mcast interface: pim6reg0 [ 322.536375][ T1303] net_ratelimit: 7 callbacks suppressed [ 322.536398][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 322.553731][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 334.682811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.011844][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2438'. [ 339.140305][T14790] netlink: 51 bytes leftover after parsing attributes in process `syz.7.2438'. [ 340.809657][T14834] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2445'. [ 341.048765][T14842] syzkaller0: entered promiscuous mode [ 341.054518][T14842] syzkaller0: entered allmulticast mode [ 341.069571][T14842] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 341.111447][ T31] audit: type=1804 audit(1759362945.131:3): pid=14843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2449" name="/newroot/102/cgroup.controllers" dev="tmpfs" ino=538 res=1 errno=0 [ 341.143272][T14849] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 341.174590][ T31] audit: type=1800 audit(1759362945.141:4): pid=14843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2449" name="cgroup.controllers" dev="tmpfs" ino=538 res=0 errno=0 [ 341.318769][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2453'. [ 341.545603][T14871] netlink: 'syz.0.2458': attribute type 1 has an invalid length. [ 341.574872][T14871] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2458'. [ 341.615112][T14871] netlink: 'syz.0.2458': attribute type 1 has an invalid length. [ 341.705026][T14874] delete_channel: no stack [ 341.822711][T14880] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2462'. [ 341.927919][T14892] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2464'. [ 342.399193][T14916] siw: device registration error -23 [ 342.618530][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2474'. [ 342.679220][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2476'. [ 343.079898][T14951] syzkaller0: entered promiscuous mode [ 343.099523][T14951] syzkaller0: entered allmulticast mode [ 343.310776][T14971] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2489'. [ 343.320527][T14971] netlink: zone id is out of range [ 343.327170][T14971] netlink: zone id is out of range [ 343.332678][T14971] netlink: zone id is out of range [ 343.338391][T14971] netlink: zone id is out of range [ 343.344141][T14971] netlink: zone id is out of range [ 343.349865][T14971] netlink: zone id is out of range [ 343.355837][T14971] netlink: zone id is out of range [ 343.361274][T14971] netlink: zone id is out of range [ 343.367298][T14971] netlink: zone id is out of range [ 343.376543][T14971] netlink: zone id is out of range [ 343.396652][T14972] netlink: 'syz.1.2491': attribute type 11 has an invalid length. [ 343.427545][T14976] netlink: 'syz.1.2491': attribute type 11 has an invalid length. [ 345.041713][T14984] netlink: 'syz.0.2495': attribute type 2 has an invalid length. [ 345.064359][T14985] IPVS: set_ctl: invalid protocol: 109 224.0.0.1:20001 [ 345.088505][T14984] netlink: 'syz.0.2495': attribute type 1 has an invalid length. [ 345.380065][T15007] bond6: Unable to set up delay as MII monitoring is disabled [ 345.400623][T15007] bond6 (unregistering): Released all slaves [ 345.428439][T15020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2501'. [ 345.651116][T15027] netlink: 'syz.0.2505': attribute type 13 has an invalid length. [ 345.809726][T15029] sctp: [Deprecated]: syz.1.2503 (pid 15029) Use of int in max_burst socket option deprecated. [ 345.809726][T15029] Use struct sctp_assoc_value instead [ 346.093037][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 346.179624][T15060] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2513'. [ 347.146778][T15109] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2526'. [ 347.186389][T15109] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2526'. [ 347.437250][T15119] : renamed from bridge_slave_0 [ 347.499445][T15123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2531'. [ 347.537233][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2531'. [ 347.650502][T14809] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.806355][T15136] netlink: 'syz.6.2537': attribute type 12 has an invalid length. [ 347.834022][T15136] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2537'. [ 347.947990][T15143] : renamed from bridge_slave_0 (while UP) [ 365.564810][ T5878] Bluetooth: hci4: command 0x0406 tx timeout [ 369.795740][T15164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'. [ 369.922419][T15172] net_ratelimit: 4 callbacks suppressed [ 369.949520][T15172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.136933][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'. [ 370.147896][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'. [ 371.910655][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2560'. [ 371.945871][T15209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2560'. [ 372.354809][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 372.565184][T15244] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.610462][T15248] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2571'. [ 372.637850][T15250] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2571'. [ 372.807594][T15263] netlink: 'syz.5.2574': attribute type 26 has an invalid length. [ 372.828846][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2574'. [ 372.843924][T15263] netlink: 'syz.5.2574': attribute type 26 has an invalid length. [ 372.882981][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2574'. [ 372.941293][T15267] netlink: 'syz.0.2575': attribute type 2 has an invalid length. [ 372.982089][T15268] netlink: 'syz.0.2575': attribute type 2 has an invalid length. [ 373.176283][T15282] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 373.336461][T15296] netlink: 'syz.5.2581': attribute type 11 has an invalid length. [ 373.535441][T15307] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004 [ 373.636200][T15314] tipc: Enabling of bearer rejected, failed to enable media [ 373.877145][T15322] Unsupported ieee802154 address type: 0 [ 374.233971][T15336] netlink: 'syz.1.2592': attribute type 1 has an invalid length. [ 374.490826][T15336] 8021q: adding VLAN 0 to HW filter on device bond16 [ 375.279245][T15363] syzkaller0: entered promiscuous mode [ 375.294423][T15363] syzkaller0: entered allmulticast mode [ 375.540274][T15383] __nla_validate_parse: 5 callbacks suppressed [ 375.540294][T15383] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2606'. [ 375.589290][T15385] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 375.871341][T15396] netlink: 'syz.1.2609': attribute type 11 has an invalid length. [ 375.898343][T15396] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2609'. [ 375.914147][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2608'. [ 375.923342][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2608'. [ 375.932324][T15398] netlink: 'syz.7.2608': attribute type 20 has an invalid length. [ 375.966115][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2608'. [ 375.977363][T15400] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.2608'. [ 375.984541][T14800] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.999769][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2608'. [ 376.013880][T15398] netlink: 'syz.7.2608': attribute type 20 has an invalid length. [ 376.018184][T14800] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.085675][T14800] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.135492][T14800] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.287181][T15411] netlink: 'syz.5.2613': attribute type 12 has an invalid length. [ 376.308631][T15406] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 376.670228][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2616'. [ 376.812087][T15436] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2620'. [ 376.836564][T15436] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 376.855577][T15436] gretap1: entered promiscuous mode [ 376.867295][T15436] gretap1: entered allmulticast mode [ 377.378645][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2625'. [ 377.600533][T15461] netlink: 'syz.7.2627': attribute type 32 has an invalid length. [ 377.651550][T15461] bond2: option coupled_control: invalid value (104) [ 377.672345][T15461] bond2 (unregistering): Released all slaves [ 377.771585][T15472] vlan5: entered promiscuous mode [ 377.785936][T15472] bond0: entered promiscuous mode [ 377.798816][T15472] bond_slave_0: entered promiscuous mode [ 377.843899][T15472] bond_slave_1: entered promiscuous mode [ 378.157246][T15483] netlink: 'syz.1.2635': attribute type 1 has an invalid length. [ 378.169513][T15483] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 378.178626][T15485] netlink: 'syz.1.2635': attribute type 1 has an invalid length. [ 378.190314][T15485] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 379.370898][T15302] Set syz1 is full, maxelem 65536 reached [ 383.968671][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 383.979655][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 386.042726][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 402.220604][T15509] tipc: Started in network mode [ 402.237595][T15509] tipc: Node identity fe11ca634fa4, cluster identity 4711 [ 402.247459][T15509] tipc: Enabled bearer , priority 0 [ 402.416992][T15509] tipc: Disabling bearer [ 402.507162][T15531] __nla_validate_parse: 5 callbacks suppressed [ 402.507183][T15531] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2643'. [ 402.586390][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 403.250848][T15563] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 403.266776][T15564] sctp: [Deprecated]: syz.5.2653 (pid 15564) Use of int in max_burst socket option. [ 403.266776][T15564] Use struct sctp_assoc_value instead [ 403.297670][T15566] tc_dump_action: action bad kind [ 403.439873][T15572] netlink: 'syz.6.2655': attribute type 1 has an invalid length. [ 403.589161][T15576] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 404.107696][T15603] bond6: ARP target 1.0.0.0 is already present [ 404.117226][T15603] bond6: option arp_ip_target: invalid value (1) [ 404.162269][T15603] bond6 (unregistering): Released all slaves [ 404.188504][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2664'. [ 404.237155][T15614] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2662'. [ 404.274054][T15614] netlink: 'syz.0.2662': attribute type 1 has an invalid length. [ 404.448651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.488610][T15618] netlink: 'syz.1.2666': attribute type 4 has an invalid length. [ 404.502094][T15624] syz_tun: entered allmulticast mode [ 404.690298][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2668'. [ 404.715364][T15636] batman_adv: batadv0: Adding interface: netdevsim0 [ 404.748623][T15636] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.829931][T15636] batman_adv: batadv0: Interface activated: netdevsim0 [ 404.869049][T15631] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2668'. [ 405.017021][T15648] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2673'. [ 405.169869][T15654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2676'. [ 405.195082][T15650] netlink: 'syz.5.2675': attribute type 4 has an invalid length. [ 405.321323][T15622] syz_tun: left allmulticast mode [ 405.684330][T15675] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2686'. [ 406.014054][T15689] netlink: 'syz.5.2689': attribute type 10 has an invalid length. [ 406.375056][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.384414][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.395489][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.405224][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.414429][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.545721][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2694'. [ 406.559807][T15707] bridge_slave_1: left allmulticast mode [ 406.567969][T15707] bridge_slave_1: left promiscuous mode [ 406.579423][T15707] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.659810][T15707] bridge_slave_0: left allmulticast mode [ 406.665752][T15707] bridge_slave_0: left promiscuous mode [ 406.684709][T15707] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.922104][T15698] syzkaller0 speed is unknown, defaulting to 1000 [ 407.116489][T15718] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 407.147445][T15729] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.639206][T15698] chnl_net:caif_netlink_parms(): no params data found [ 408.008771][T15775] xt_time: unknown flags 0xf4 [ 408.019617][T15698] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.034648][T15698] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.045679][T15778] __nla_validate_parse: 1 callbacks suppressed [ 408.045699][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2715'. [ 408.061817][T15698] bridge_slave_0: entered allmulticast mode [ 408.087361][T15698] bridge_slave_0: entered promiscuous mode [ 408.141446][T15698] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.161740][T15698] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.178668][T15698] bridge_slave_1: entered allmulticast mode [ 408.187105][T15698] bridge_slave_1: entered promiscuous mode [ 408.265731][T15788] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2718'. [ 408.317928][T15791] netlink: 'syz.5.2719': attribute type 29 has an invalid length. [ 408.333992][T15791] netlink: 'syz.5.2719': attribute type 29 has an invalid length. [ 408.356700][T15698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.385704][T15698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.447289][ T5878] Bluetooth: hci4: command tx timeout [ 408.472075][T15698] team0: Port device team_slave_0 added [ 408.488967][T15698] team0: Port device team_slave_1 added [ 408.541539][T15698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.548714][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.575546][T15698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.597350][T15698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.605224][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.631969][T15698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.751658][T15698] hsr_slave_0: entered promiscuous mode [ 408.760331][T15698] hsr_slave_1: entered promiscuous mode [ 408.767164][T15698] debugfs: 'hsr0' already exists in 'hsr' [ 408.775200][T15698] Cannot create hsr debugfs directory [ 409.234377][T15822] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 409.310679][T15698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.398461][T15834] syzkaller0: entered promiscuous mode [ 409.417494][T15841] netlink: 1524 bytes leftover after parsing attributes in process `syz.5.2732'. [ 409.443100][T15834] syzkaller0: entered allmulticast mode [ 409.450306][T15841] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2732'. [ 409.479982][T15841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2732'. [ 409.514047][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2732'. [ 409.538266][T15698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.581001][T15837] "syz.6.2731" (15837) uses obsolete ecb(arc4) skcipher [ 409.701932][T15850] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2735'. [ 409.741846][T15698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.894528][T15860] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2739'. [ 409.911311][T15698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.963742][T15860] team0: Device wireguard0 is of different type [ 410.343881][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2745'. [ 410.407228][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 410.431216][T15698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.510652][T15698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.522915][ T5878] Bluetooth: hci4: command tx timeout [ 410.549889][T15894] netem: unknown loss type 0 [ 410.561120][T15894] netem: change failed [ 410.567294][T15698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.622009][T15897] bond2 (unregistering): Released all slaves [ 410.659189][T15698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.912067][T15927] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 410.975424][T15698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.041581][T15925] can: request_module (can-proto-0) failed. [ 411.058269][T15698] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.111427][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.118785][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.139604][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.146870][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.797158][T15698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.947364][T15698] veth0_vlan: entered promiscuous mode [ 411.961289][T15698] veth1_vlan: entered promiscuous mode [ 412.027199][T15977] netlink: 'syz.5.2767': attribute type 1 has an invalid length. [ 412.035446][T15977] netlink: 'syz.5.2767': attribute type 2 has an invalid length. [ 412.044614][ T5878] block nbd0: Receive control failed (result -32) [ 412.126019][T15698] veth0_macvtap: entered promiscuous mode [ 412.179835][T15698] veth1_macvtap: entered promiscuous mode [ 412.321418][T15698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.370382][T15698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.399324][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.428327][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.457015][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.480309][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.603240][ T5878] Bluetooth: hci4: command tx timeout [ 412.791529][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.823217][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.905206][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.914352][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.953870][T16013] netlink: 'syz.1.2778': attribute type 4 has an invalid length. [ 413.384487][T16032] __nla_validate_parse: 4 callbacks suppressed [ 413.384508][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2783'. [ 413.386123][T16030] netlink: 'syz.6.2782': attribute type 1 has an invalid length. [ 413.471856][T16030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.481764][T16037] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2783'. [ 413.582573][T16030] bond2: (slave gretap1): making interface the new active one [ 413.604229][T16030] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 413.674700][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2788'. [ 413.751280][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2788'. [ 414.018834][T16060] netlink: 'syz.0.2792': attribute type 10 has an invalid length. [ 414.050733][T16062] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2793'. [ 414.072697][T16062] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2793'. [ 414.108221][T16060] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 414.121723][T16060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.232679][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'. [ 414.346920][T16076] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2796'. [ 414.387615][T16076] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 414.452679][T16076] openvswitch: netlink: Duplicate key (type 0). [ 414.620635][T16089] netlink: 'syz.0.2800': attribute type 4 has an invalid length. [ 414.695295][ T5878] Bluetooth: hci4: command tx timeout [ 415.097086][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2806'. [ 415.158143][T16104] netlink: 'syz.7.2806': attribute type 1 has an invalid length. [ 415.191398][T16104] netlink: 'syz.7.2806': attribute type 2 has an invalid length. [ 415.247115][T16112] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2810'. [ 415.558344][T16134] netlink: 'syz.5.2816': attribute type 1 has an invalid length. [ 415.839719][T16145] sctp: [Deprecated]: syz.6.2822 (pid 16145) Use of int in max_burst socket option. [ 415.839719][T16145] Use struct sctp_assoc_value instead [ 415.892694][T16151] netlink: 'syz.7.2824': attribute type 5 has an invalid length. [ 415.959332][T16151] geneve3: entered promiscuous mode [ 415.981409][T16151] geneve3: entered allmulticast mode [ 415.995156][T14800] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 416.009040][T14800] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 416.031979][T14800] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 416.059006][T14800] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 416.361561][T16166] team0: Port device dummy0 added [ 416.669333][T16184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.790270][T16184] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 416.866578][T16210] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 416.993180][T16219] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 417.472237][T16245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.472739][T16243] delete_channel: no stack [ 417.966526][T16268] can: request_module (can-proto-5) failed. [ 418.081305][T16282] 8021q: VLANs not supported on ip6_vti0 [ 419.147355][T16320] syzkaller0 speed is unknown, defaulting to 1000 [ 419.726517][T16376] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 419.883518][T16382] dvmrp0: entered allmulticast mode [ 419.923667][T16382] dvmrp0: left allmulticast mode [ 419.997789][T16391] __nla_validate_parse: 14 callbacks suppressed [ 419.997813][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 420.384088][T16413] validate_nla: 7 callbacks suppressed [ 420.384107][T16413] netlink: 'syz.0.2906': attribute type 2 has an invalid length. [ 420.546336][T16426] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2908'. [ 420.578716][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2906'. [ 421.005244][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2915'. [ 421.036375][T16450] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2915'. [ 421.065285][T16450] netlink: 'syz.5.2915': attribute type 5 has an invalid length. [ 421.094954][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2916'. [ 421.112253][T16460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2915'. [ 421.122777][T16460] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2915'. [ 421.129762][T16455] netlink: 'syz.7.2916': attribute type 1 has an invalid length. [ 421.131927][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2915'. [ 421.267536][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'. [ 421.294866][T16469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.600018][T16491] netlink: 'syz.6.2922': attribute type 3 has an invalid length. [ 421.864262][T16504] netlink: 'syz.1.2929': attribute type 10 has an invalid length. [ 421.973302][T16504] batadv0: entered promiscuous mode [ 421.979224][T16504] bridge0: port 2(batadv0) entered blocking state [ 421.997306][T16504] bridge0: port 2(batadv0) entered disabled state [ 422.109871][T16521] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 422.512417][T14807] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 422.521930][T14807] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 422.680274][ T5866] syz_tun (unregistering): left allmulticast mode [ 422.741533][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 422.755593][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 422.764178][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 422.773243][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 422.785230][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 423.118778][T16548] veth7: entered promiscuous mode [ 423.128178][T16550] IPv6: addrconf: prefix option has invalid lifetime [ 423.140681][T16548] veth7: entered allmulticast mode [ 423.331758][T16539] syzkaller0 speed is unknown, defaulting to 1000 [ 423.334204][T16562] netem: invalid attributes len -24 [ 423.349580][T16562] netem: change failed [ 423.638978][T16574] netlink: 'syz.0.2949': attribute type 2 has an invalid length. [ 423.669592][T16539] chnl_net:caif_netlink_parms(): no params data found [ 423.943092][T16586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.959714][T16539] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.969183][T16539] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.976665][T16539] bridge_slave_0: entered allmulticast mode [ 423.984697][T16539] bridge_slave_0: entered promiscuous mode [ 424.025721][T16539] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.039452][T16539] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.055464][T16539] bridge_slave_1: entered allmulticast mode [ 424.063903][T16539] bridge_slave_1: entered promiscuous mode [ 424.153068][T16539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.182923][T16539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.271172][T16539] team0: Port device team_slave_0 added [ 424.300159][T16539] team0: Port device team_slave_1 added [ 424.307298][T16594] tipc: Enabled bearer , priority 0 [ 424.411255][T16594] syzkaller0: entered promiscuous mode [ 424.417116][T16594] syzkaller0: entered allmulticast mode [ 424.445671][T16539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.470133][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.535987][T16539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.573840][T16594] tipc: Resetting bearer [ 424.609986][T16539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.629413][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.668423][T16539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.724134][T16593] tipc: Resetting bearer [ 424.743341][T16593] tipc: Disabling bearer [ 424.756063][T16615] netlink: 'syz.7.2960': attribute type 1 has an invalid length. [ 424.780698][T16616] netlink: 'syz.6.2959': attribute type 12 has an invalid length. [ 424.845061][ T5878] Bluetooth: hci1: command tx timeout [ 424.853187][T16615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.906073][T16620] bond3: (slave geneve4): making interface the new active one [ 424.921245][T16620] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 424.947381][T16539] hsr_slave_0: entered promiscuous mode [ 424.955853][T16539] hsr_slave_1: entered promiscuous mode [ 424.963845][T16539] debugfs: 'hsr0' already exists in 'hsr' [ 424.970124][T16539] Cannot create hsr debugfs directory [ 425.038888][T16624] __nla_validate_parse: 10 callbacks suppressed [ 425.038909][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2962'. [ 425.075909][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2962'. [ 425.110724][T16624] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2962'. [ 425.125333][T16634] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2965'. [ 425.140310][T16632] tipc: New replicast peer: 255.255.255.255 [ 425.147832][T16632] tipc: Enabled bearer , priority 10 [ 425.684922][T16656] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2973'. [ 425.706258][T16654] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2973'. [ 425.742592][T16656] openvswitch: netlink: Actions may not be safe on all matching packets [ 425.761962][T16654] openvswitch: netlink: Actions may not be safe on all matching packets [ 425.960725][T16539] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.966879][T16667] sctp: [Deprecated]: syz.0.2976 (pid 16667) Use of int in max_burst socket option deprecated. [ 425.966879][T16667] Use struct sctp_assoc_value instead [ 425.986726][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2977'. [ 425.993906][T16539] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 426.028883][T16539] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 426.052205][T16539] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 426.134713][T16678] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 426.263759][ T24] tipc: Node number set to 844846342 [ 426.277241][T16539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.310640][T16539] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.328452][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.335775][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.359744][T14810] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.367038][T14810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.559263][T16689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.839907][T16539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.923299][ T5878] Bluetooth: hci1: command tx timeout [ 426.954197][T16539] veth0_vlan: entered promiscuous mode [ 426.969550][T16539] veth1_vlan: entered promiscuous mode [ 426.992601][T16711] netlink: 'syz.5.2988': attribute type 1 has an invalid length. [ 427.007539][T16539] veth0_macvtap: entered promiscuous mode [ 427.029440][T16539] veth1_macvtap: entered promiscuous mode [ 427.071801][T16539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.098889][T16539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.121149][T14810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.133045][T14810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.152084][T14810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.167440][T14810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.190051][T16715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2991'. [ 427.191480][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2991'. [ 427.371352][T14807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.386948][T14807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.451086][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.484746][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.709407][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2997'. [ 427.719823][T16738] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 428.127926][T16755] veth0: entered promiscuous mode [ 428.133998][T16755] veth0: left promiscuous mode [ 428.234604][T16754] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.242660][T16754] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.500108][T16780] hsr_slave_0: left promiscuous mode [ 428.564291][T16780] hsr_slave_1: left promiscuous mode [ 428.637796][T16789] C: renamed from lo (while UP) [ 428.652366][T16789] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 428.671926][T16788] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 428.691747][T16788] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 428.793378][T16794] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 429.002969][ T5878] Bluetooth: hci1: command tx timeout [ 429.324688][T16814] wg2: entered promiscuous mode [ 429.332192][T16814] wg2: entered allmulticast mode [ 429.551556][T16836] netlink: 'syz.1.3021': attribute type 4 has an invalid length. [ 429.589295][T16836] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 430.193538][T16873] __nla_validate_parse: 11 callbacks suppressed [ 430.193581][T16873] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3034'. [ 430.315506][T16878] openvswitch: netlink: Message has 20 unknown bytes. [ 430.322363][T16878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.462628][T16883] netlink: 'syz.0.3037': attribute type 10 has an invalid length. [ 430.488073][T16883] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 430.510184][T16883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.546951][T16885] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3039'. [ 430.603512][T16885] netlink: 77 bytes leftover after parsing attributes in process `syz.1.3039'. [ 430.796556][T16907] netlink: 'syz.0.3045': attribute type 10 has an invalid length. [ 430.817041][T16907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3045'. [ 430.842180][T16909] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3044'. [ 430.905639][T16907] team0: Port device geneve0 added [ 430.944523][T16909] erspan0: entered promiscuous mode [ 430.982877][T16912] IPv6: sit1: Disabled Multicast RS [ 431.083492][ T5878] Bluetooth: hci1: command tx timeout [ 431.128135][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3049'. [ 431.425971][T16931] tipc: Started in network mode [ 431.449478][T16931] tipc: Node identity d25365d3adc1, cluster identity 4711 [ 431.474092][T16931] tipc: Enabled bearer , priority 0 [ 431.527027][T16930] tipc: Disabling bearer [ 431.621941][T16946] syzkaller1: entered promiscuous mode [ 431.627445][T16948] netlink: 'syz.6.3059': attribute type 1 has an invalid length. [ 431.655678][T16950] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3058'. [ 431.665363][T16946] syzkaller1: entered allmulticast mode [ 431.718416][T16954] netlink: 'syz.0.3060': attribute type 1 has an invalid length. [ 431.743701][T16948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.919915][T16952] bond4: (slave veth5): Enslaving as an active interface with a down link [ 431.981963][T16955] vlan3: entered allmulticast mode [ 432.000512][T16955] bond4: entered allmulticast mode [ 432.011494][T16955] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 432.110214][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'. [ 432.285989][T16979] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3068'. [ 432.319679][T16979] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3068'. [ 432.857505][T17003] netlink: 'syz.5.3075': attribute type 12 has an invalid length. [ 432.866377][T17000] Bluetooth: MGMT ver 1.23 [ 432.895006][T17003] netlink: 'syz.5.3075': attribute type 29 has an invalid length. [ 432.969216][T17008] netlink: 'syz.7.3077': attribute type 6 has an invalid length. [ 433.953278][T17049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.046987][T17066] openvswitch: netlink: EtherType 50a is less than min 600 [ 434.077269][T17067] netlink: 'syz.5.3088': attribute type 29 has an invalid length. [ 434.094280][T17049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.494480][T17091] team0: No ports can be present during mode change [ 434.556980][T17095] netlink: 'syz.7.3096': attribute type 3 has an invalid length. [ 434.923128][ T5878] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 434.923968][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 435.230300][T17136] __nla_validate_parse: 17 callbacks suppressed [ 435.230323][T17136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3106'. [ 435.396683][T17141] sock: sock_timestamping_bind_phc: sock not bind to device [ 435.571204][T17153] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 436.112260][T17184] : left allmulticast mode [ 436.130758][T17184] : left promiscuous mode [ 436.156393][T17184] bridge0: port 1() entered disabled state [ 436.186014][T17184] bridge_slave_1: left allmulticast mode [ 436.203536][T17184] bridge_slave_1: left promiscuous mode [ 436.210189][T17184] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.246293][T17184] bond3: (slave veth0_to_bond): Releasing backup interface [ 436.298069][T17184] bond0: (slave bond_slave_0): Releasing backup interface [ 436.351094][T17184] bond0: (slave bond_slave_1): Releasing backup interface [ 436.430046][T17184] team0: Port device team_slave_0 removed [ 436.501962][T17184] team0: Port device team_slave_1 removed [ 436.531290][T17184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.543904][T17184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.565920][T17184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.585977][T17184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.778879][T17184] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 437.226944][T17217] netlink: 'syz.0.3127': attribute type 11 has an invalid length. [ 437.272824][T17217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3127'. [ 437.499492][T17233] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3130'. [ 437.551751][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'. [ 437.665098][T17238] sctp: [Deprecated]: syz.1.3134 (pid 17238) Use of int in max_burst socket option. [ 437.665098][T17238] Use struct sctp_assoc_value instead [ 437.704714][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3136'. [ 438.254400][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3143'. [ 438.293175][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3143'. [ 438.304400][T17285] netlink: 'syz.5.3144': attribute type 10 has an invalid length. [ 438.316887][T17285] team0: Port device dummy0 added [ 438.431889][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3147'. [ 438.474320][T17290] netlink: 'syz.7.3148': attribute type 1 has an invalid length. [ 438.504982][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3149'. [ 438.548036][T17294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3150'. [ 438.709423][T17302] bond4: option resend_igmp: invalid value (32767) [ 438.730894][T17302] bond4: option resend_igmp: allowed values 0 - 255 [ 438.890949][T17302] bond4 (unregistering): Released all slaves [ 439.177207][T17314] gre4: entered promiscuous mode [ 439.182237][T17314] gre4: entered allmulticast mode [ 439.360422][T17326] netlink: 'syz.6.3159': attribute type 1 has an invalid length. [ 439.374847][T17326] netlink: 'syz.6.3159': attribute type 4 has an invalid length. [ 439.922866][T17352] netlink: 'syz.1.3173': attribute type 1 has an invalid length. [ 439.974041][T17352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.107943][T17352] bond1: (slave veth3): Enslaving as an active interface with a down link [ 440.194718][T17352] bond1: (slave veth0_to_bond): making interface the new active one [ 440.214605][T17352] veth0_to_bond: entered promiscuous mode [ 440.221499][T17352] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 440.495319][T17352] bond1: (slave veth5): Enslaving as an active interface with a down link [ 440.647871][T17382] macvlan0: entered promiscuous mode [ 440.670509][T17382] batadv0: entered promiscuous mode [ 440.681992][T17382] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 440.712569][T17382] hsr1: entered allmulticast mode [ 440.717667][T17382] macvlan0: entered allmulticast mode [ 440.732317][T17382] batadv0: entered allmulticast mode [ 440.741956][T17382] macvlan0: left promiscuous mode [ 440.746695][T17392] __nla_validate_parse: 7 callbacks suppressed [ 440.746721][T17392] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3185'. [ 440.767723][T17382] batadv0: left promiscuous mode [ 440.921633][T17385] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3182'. [ 441.449252][T17423] can: request_module (can-proto-0) failed. [ 441.539132][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3193'. [ 441.925413][T17451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.598712][T17494] netlink: 'syz.6.3212': attribute type 7 has an invalid length. [ 442.632339][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 442.651021][T17494] : entered promiscuous mode [ 442.687485][T17493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.691286][T17494] openvswitch: netlink: IP tunnel dst address not specified [ 442.705480][T17493] bond1: (slave veth0_to_bond): Releasing active interface [ 442.721165][T17493] veth0_to_bond: left promiscuous mode [ 442.794013][T17504] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3677 [ 442.889023][T17509] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3217'. [ 442.911858][T17509] netlink: 'syz.1.3217': attribute type 21 has an invalid length. [ 442.928791][T17509] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3217'. [ 443.088093][ T9784] IPVS: starting estimator thread 0... [ 443.193041][T17523] IPVS: using max 24 ests per chain, 57600 per kthread [ 443.281237][T17531] sctp: [Deprecated]: syz.7.3225 (pid 17531) Use of int in max_burst socket option. [ 443.281237][T17531] Use struct sctp_assoc_value instead [ 443.553372][T17550] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 443.577872][T17552] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 443.710941][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 443.841768][T17544] syzkaller0 speed is unknown, defaulting to 1000 [ 443.890068][T17561] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3233'. [ 444.221894][T17576] netlink: 'syz.6.3237': attribute type 1 has an invalid length. [ 444.263644][T17576] netlink: 5624 bytes leftover after parsing attributes in process `syz.6.3237'. [ 444.303597][T17581] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3237'. [ 444.570581][T17596] netlink: 'syz.6.3245': attribute type 27 has an invalid length. [ 444.679133][T17604] tipc: Started in network mode [ 444.691752][T17604] tipc: Node identity , cluster identity 4711 [ 444.698115][T17604] tipc: Failed to obtain node identity [ 444.703734][T17604] tipc: Enabling of bearer rejected, failed to enable media [ 444.916899][T17608] pim6reg1: entered promiscuous mode [ 444.952955][T17608] pim6reg1: entered allmulticast mode [ 445.310536][T17633] : renamed from bridge_slave_0 (while UP) [ 445.347265][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.369788][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.378160][ T9792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.411144][ T9792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.422047][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 445.435368][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 445.450648][T17642] netlink: 'syz.5.3257': attribute type 10 has an invalid length. [ 445.500211][T17642] batman_adv: batadv0: Removing interface: team0 [ 445.543620][T17642] bridge0: port 3(team0) entered blocking state [ 445.571889][T17642] bridge0: port 3(team0) entered disabled state [ 445.598727][T17642] team0: entered allmulticast mode [ 445.618787][T17642] team_slave_0: entered allmulticast mode [ 445.629650][T17642] team_slave_1: entered allmulticast mode [ 445.647571][T17642] dummy0: entered allmulticast mode [ 445.672827][T17642] team0: entered promiscuous mode [ 445.683289][T17642] team_slave_0: entered promiscuous mode [ 445.701793][T17642] team_slave_1: entered promiscuous mode [ 445.729333][T17642] dummy0: entered promiscuous mode [ 445.808137][T17651] __nla_validate_parse: 4 callbacks suppressed [ 445.808166][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3260'. [ 445.958873][ T5983] IPVS: starting estimator thread 0... [ 446.058440][T17670] IPVS: using max 27 ests per chain, 64800 per kthread [ 446.122949][ T9792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.321366][T17688] IPv6: sit2: Disabled Multicast RS [ 446.336145][T17688] sit2: entered allmulticast mode [ 446.362788][ T5186] Bluetooth: hci1: command tx timeout [ 446.686762][T17714] ªªªªªª: renamed from vlan0 (while UP) [ 446.742714][T17714] netlink: 'syz.0.3275': attribute type 1 has an invalid length. [ 447.060542][T17727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3277'. [ 447.092886][T17727] openvswitch: netlink: Flow key attr not present in new flow. [ 447.111401][T17730] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3278'. [ 447.134455][T17730] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3278'. [ 447.135015][T17733] xt_time: unknown flags 0xf4 [ 447.154467][T17731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3277'. [ 447.178392][T17733] netlink: 'syz.0.3279': attribute type 1 has an invalid length. [ 447.330608][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3282'. [ 447.432969][T17733] bond2: (slave gretap2): making interface the new active one [ 447.471453][T17733] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 447.502148][T17756] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 447.667935][T17769] netlink: 'syz.1.3289': attribute type 1 has an invalid length. [ 447.692326][T17769] netlink: 'syz.1.3289': attribute type 11 has an invalid length. [ 448.012029][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3294'. [ 448.046303][T17789] netlink: 'syz.5.3296': attribute type 1 has an invalid length. [ 448.119362][T17789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.223460][T17800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.240798][T17800] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 448.254932][T17800] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 448.288563][T17786] macvlan2: entered promiscuous mode [ 448.294385][T17786] macvlan2: entered allmulticast mode [ 448.300778][T17786] bond5: (slave macvlan2): Opening slave failed [ 448.530712][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3302'. [ 448.653098][T17824] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3301'. [ 448.749118][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3306'. [ 448.859271][T17811] syzkaller0 speed is unknown, defaulting to 1000 [ 449.215172][T17839] macvtap1: entered promiscuous mode [ 449.227001][T17839] macvtap1: entered allmulticast mode [ 449.255953][T17839] bond0: entered allmulticast mode [ 449.281383][T17839] bond0: entered promiscuous mode [ 449.295855][T17839] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 449.311874][T17839] team0: Device macvtap1 failed to register rx_handler [ 449.326495][T17839] bond0: left allmulticast mode [ 449.331415][T17839] bond0: left promiscuous mode [ 449.530977][T17852] sctp: [Deprecated]: syz.1.3315 (pid 17852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.530977][T17852] Use struct sctp_sack_info instead [ 449.562783][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.737247][T17856] syzkaller0: entered allmulticast mode [ 449.776863][T17856] netlink: 'syz.1.3317': attribute type 10 has an invalid length. [ 449.824036][T17863] nbd: must specify at least one socket [ 449.825133][T17856] team0: Port device dummy0 added [ 450.970757][T17919] __nla_validate_parse: 4 callbacks suppressed [ 450.970777][T17919] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3339'. [ 450.995361][T17919] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3339'. [ 451.010937][T17922] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3339'. [ 451.114727][T17922] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3339'. [ 451.130036][T17924] syzkaller0: entered promiscuous mode [ 451.149943][T17924] syzkaller0: entered allmulticast mode [ 451.182312][T17924] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 451.356591][T17941] tipc: Enabled bearer , priority 0 [ 451.371105][T17941] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 451.390160][T17941] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 451.416195][T17941] tipc: Resetting bearer [ 451.549272][T17957] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3350'. [ 451.824161][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3353'. [ 451.834612][T17975] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.3356'. [ 451.854974][ T59] tipc: Subscription rejected, illegal request [ 451.876322][T17975] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 451.907864][T17977] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3357'. [ 452.011680][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3356'. [ 452.053310][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3356'. [ 452.162000][T17993] netlink: 'syz.5.3361': attribute type 1 has an invalid length. [ 452.178928][T17993] netlink: 'syz.5.3361': attribute type 1 has an invalid length. [ 452.227330][T17990] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 452.329699][T18003] netlink: 'syz.5.3364': attribute type 5 has an invalid length. [ 452.376932][T17996] netlink: 'syz.7.3362': attribute type 1 has an invalid length. [ 452.392975][T17996] netlink: 'syz.7.3362': attribute type 2 has an invalid length. [ 452.416150][T18011] netlink: 'syz.0.3366': attribute type 27 has an invalid length. [ 453.059538][T18043] batadv0: default FDB implementation only supports local addresses [ 453.607430][T18077] gretap0: entered promiscuous mode [ 455.272909][T18165] syzkaller0: entered allmulticast mode [ 455.533831][T18176] netlink: 'syz.1.3417': attribute type 2 has an invalid length. [ 456.063800][T18194] nbd3: detected capacity change from 0 to 127 [ 456.090211][ T5186] block nbd3: Receive control failed (result -32) [ 456.133170][T18197] __nla_validate_parse: 13 callbacks suppressed [ 456.133192][T18197] netlink: 560 bytes leftover after parsing attributes in process `syz.0.3424'. [ 456.209670][T18197] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3424'. [ 456.471128][T18216] netlink: 'syz.7.3429': attribute type 10 has an invalid length. [ 456.505046][T18216] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3429'. [ 456.589526][T18216] team0: Port device geneve0 added [ 456.882275][T18236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.898150][T18233] netlink: 'syz.6.3436': attribute type 10 has an invalid length. [ 456.905484][T18238] netlink: 'syz.0.3440': attribute type 1 has an invalid length. [ 456.913101][T18232] netlink: 'syz.6.3436': attribute type 10 has an invalid length. [ 456.932241][T18238] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3440'. [ 456.949951][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'. [ 456.996557][T18236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3439'. [ 457.047949][T18241] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3439'. [ 457.192949][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3444'. [ 457.513249][T18270] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3449'. [ 457.539831][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3450'. [ 457.562681][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.715386][T18274] netlink: 'syz.0.3451': attribute type 2 has an invalid length. [ 457.850146][T18279] netlink: 'syz.6.3453': attribute type 1 has an invalid length. [ 458.058238][T18291] bridge_slave_1: default FDB implementation only supports local addresses [ 458.596099][T18313] netlink: 'syz.7.3462': attribute type 10 has an invalid length. [ 458.633808][T18313] pim6reg: entered allmulticast mode [ 458.889776][T18313] pim6reg: left allmulticast mode [ 459.189533][T18336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.808353][T18371] netlink: 'syz.0.3478': attribute type 11 has an invalid length. [ 459.837715][T18371] netlink: 'syz.0.3478': attribute type 11 has an invalid length. [ 459.841634][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.865757][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.877156][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.903131][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.120541][T18382] bond7: option min_links: invalid value (18446744073709551614) [ 460.129220][T18382] bond7: option min_links: allowed values 0 - 2147483647 [ 460.159913][T18382] bond7 (unregistering): Released all slaves [ 460.576056][T18402] tipc: Started in network mode [ 460.590037][T18402] tipc: Node identity 86664a5b1de8, cluster identity 4711 [ 460.610218][T18402] tipc: Enabled bearer , priority 0 [ 460.636571][T18402] syzkaller0: entered promiscuous mode [ 460.648826][T18402] syzkaller0: entered allmulticast mode [ 460.715266][T18402] tipc: Resetting bearer [ 460.901847][T18414] netlink: 'syz.6.3486': attribute type 21 has an invalid length. [ 461.360111][T18429] netlink: 'syz.7.3490': attribute type 8 has an invalid length. [ 461.380105][T18401] tipc: Resetting bearer [ 461.411502][T18430] __nla_validate_parse: 15 callbacks suppressed [ 461.411522][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3490'. [ 461.482270][T18430] netlink: 'syz.7.3490': attribute type 8 has an invalid length. [ 461.501170][T18401] tipc: Disabling bearer [ 461.544246][T18403] syzkaller0 speed is unknown, defaulting to 1000 [ 461.947581][T18448] syzkaller0: entered promiscuous mode [ 461.996560][T18448] syzkaller0: entered allmulticast mode [ 462.172977][T18459] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 462.494573][T18479] netlink: 'syz.5.3507': attribute type 10 has an invalid length. [ 462.518919][T18479] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.527444][T18479] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.669044][T18479] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.676372][T18479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.683989][T18479] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.691229][T18479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.724779][T18479] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 462.746979][T18477] syzkaller1: entered promiscuous mode [ 462.755187][T18477] syzkaller1: entered allmulticast mode [ 462.856383][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 463.265950][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3514'. [ 463.304458][T18520] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3516'. [ 463.338267][T18522] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3515'. [ 463.369784][T18516] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 463.415178][T18516] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 463.463402][T18521] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 463.521775][T18521] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 463.583042][T18522] bond0 (unregistering): Released all slaves [ 463.757410][T18541] netlink: 'syz.0.3521': attribute type 1 has an invalid length. [ 463.806448][T18546] netlink: 'syz.7.3522': attribute type 1 has an invalid length. [ 463.833282][T18541] bond3: entered promiscuous mode [ 463.838962][T18541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.945525][T18547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.958006][T18547] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 463.981145][T18547] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 463.998017][T18547] bond3: (slave wireguard0): making interface the new active one [ 464.016704][T18547] wireguard0: entered promiscuous mode [ 464.031794][T18547] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 464.087639][T18550] macvlan2: entered promiscuous mode [ 464.098626][T18550] macvlan2: entered allmulticast mode [ 464.106357][T18550] bond5: entered promiscuous mode [ 464.112313][T18550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.131758][T18550] bond5: left promiscuous mode [ 464.190390][T18568] bridge_slave_0: invalid flags given to default FDB implementation [ 464.200359][T18568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3527'. [ 464.221802][T18569] tipc: Enabled bearer , priority 0 [ 464.241969][T18565] syzkaller0: entered promiscuous mode [ 464.257522][T18565] syzkaller0: entered allmulticast mode [ 464.304356][T18565] tipc: Resetting bearer [ 464.318980][T18563] tipc: Resetting bearer [ 464.364430][T18563] tipc: Disabling bearer [ 464.616029][T18585] netlink: 'syz.7.3532': attribute type 33 has an invalid length. [ 464.797289][T18597] netlink: 159784 bytes leftover after parsing attributes in process `syz.7.3536'. [ 464.821912][T18599] netlink: 159784 bytes leftover after parsing attributes in process `syz.7.3536'. [ 464.841941][T18592] tipc: Resetting bearer [ 465.202173][T18605] syzkaller0 speed is unknown, defaulting to 1000 [ 465.509700][T18592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.539534][T18592] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 465.631854][T18592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.642799][T18592] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 465.901214][T18592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 465.918204][T18592] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 466.088602][T18592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 466.096335][T18634] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3545'. [ 466.111446][T18592] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 466.114459][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3546'. [ 466.420834][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.436327][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.448090][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.460959][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.917766][T18673] __nla_validate_parse: 6 callbacks suppressed [ 466.917790][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'. [ 466.942044][T18673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3559'. [ 467.302745][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3566'. [ 467.417439][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3567'. [ 467.827626][T18719] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3573'. [ 467.837593][T18719] xt_policy: neither incoming nor outgoing policy selected [ 468.005539][T18729] netlink: 'syz.7.3575': attribute type 2 has an invalid length. [ 468.541799][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3577'. [ 468.552052][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3577'. [ 468.580993][T18734] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 468.599636][T18734] bond4 (unregistering): Released all slaves [ 468.630610][T18736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3577'. [ 468.640178][T18736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3577'. [ 468.770157][T18736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3577'. [ 468.869094][T18746] netlink: 'syz.7.3580': attribute type 4 has an invalid length. [ 469.077720][T18755] tipc: Enabling of bearer rejected, failed to enable media [ 469.265528][T18765] netlink: 'syz.7.3586': attribute type 1 has an invalid length. [ 470.035504][T18785] bond0: (slave bond_slave_0): Releasing backup interface [ 470.059835][T18785] bond0: (slave bond_slave_1): Releasing backup interface [ 470.090650][T18785] team0: Port device team_slave_0 removed [ 470.107771][T18785] team0: Port device team_slave_1 removed [ 470.129035][T18785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.189617][T18785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.223582][T18785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.236207][T18785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.321593][T18785] team0: Port device geneve0 removed [ 470.334455][T18785] ip6erspan0: left promiscuous mode [ 470.344041][T18785] A link change request failed with some changes committed already. Interface veth4 may have been left with an inconsistent configuration, please check. [ 470.511422][T18808] netlink: 'syz.1.3600': attribute type 4 has an invalid length. [ 470.557565][T18812] netlink: 'syz.0.3599': attribute type 2 has an invalid length. [ 470.838634][T18831] syzkaller0: entered promiscuous mode [ 470.844422][T18831] syzkaller0: entered allmulticast mode [ 470.858085][T18831] openvswitch: netlink: Flow actions attr not present in new flow. [ 471.397168][T12905] IPVS: starting estimator thread 0... [ 471.493515][T18861] IPVS: using max 24 ests per chain, 57600 per kthread [ 471.957213][T18889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.014919][T18891] __nla_validate_parse: 15 callbacks suppressed [ 472.014934][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3625'. [ 472.034450][T18891] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3625'. [ 472.044207][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3625'. [ 472.475653][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3627'. [ 473.517034][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3631'. [ 473.526614][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3631'. [ 473.562779][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.634949][T18913] netlink: 'syz.7.3633': attribute type 2 has an invalid length. [ 473.645558][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3633'. [ 481.255028][ T8609] batadv1: left allmulticast mode [ 481.260185][ T8609] batadv1: left promiscuous mode [ 481.266259][ T8609] bridge0: port 1(batadv1) entered disabled state [ 481.527454][ T8609] bond1 (unregistering): (slave gretap1): Releasing active interface [ 481.621412][ T8609] dvmrp0 (unregistering): left allmulticast mode [ 481.643836][ T8609] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 481.920420][ T8609] bond5 (unregistering): (slave bridge3): Releasing active interface [ 481.981546][ T8609] bond0 (unregistering): Released all slaves [ 481.998746][ T8609] bond1 (unregistering): Released all slaves [ 482.018811][ T8609] bond2 (unregistering): Released all slaves [ 482.038654][ T8609] bond3 (unregistering): Released all slaves [ 482.057499][ T8609] bond4 (unregistering): Released all slaves [ 482.078292][ T8609] bond5 (unregistering): Released all slaves [ 482.178463][ T8609] tipc: Disabling bearer [ 482.195850][ T8609] tipc: Left network mode [ 503.642763][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.847534][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 506.860950][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.162703][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.286370][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 568.298229][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 618.842697][ T32] INFO: task kworker/0:7:9775 blocked for more than 143 seconds. [ 618.850571][ T32] Not tainted syzkaller #0 [ 618.856291][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.865050][ T32] task:kworker/0:7 state:D stack:22152 pid:9775 tgid:9775 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 618.877251][ T32] Workqueue: events rfkill_uevent_work [ 618.883747][ T32] Call Trace: [ 618.887063][ T32] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 618.890198][ T32] __schedule+0x1798/0x4cc0 [ 618.895270][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 618.900996][ T32] ? __pfx___schedule+0x10/0x10 [ 618.906112][ T32] ? schedule+0x91/0x360 [ 618.910396][ T32] schedule+0x165/0x360 [ 618.915091][ T32] schedule_preempt_disabled+0x13/0x30 [ 618.920685][ T32] __mutex_lock+0x7e6/0x1350 [ 618.925581][ T32] ? __mutex_lock+0x5bb/0x1350 [ 618.930486][ T32] ? rfkill_uevent_work+0x1d/0xa0 [ 618.943073][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 618.948194][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.982645][ T32] rfkill_uevent_work+0x1d/0xa0 [ 618.987958][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 618.996571][ T32] process_scheduled_works+0xae1/0x17b0 [ 619.002219][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 619.009264][ T32] worker_thread+0x8a0/0xda0 [ 619.021682][ T32] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 619.042967][ T32] ? __kthread_parkme+0x7b/0x200 [ 619.048002][ T32] kthread+0x70e/0x8a0 [ 619.052114][ T32] ? __pfx_worker_thread+0x10/0x10 [ 619.058588][ T32] ? __pfx_kthread+0x10/0x10 [ 619.063596][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.068933][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.074681][ T32] ? __pfx_kthread+0x10/0x10 [ 619.079336][ T32] ret_from_fork+0x439/0x7d0 [ 619.084534][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 619.089695][ T32] ? __switch_to_asm+0x39/0x70 [ 619.095362][ T32] ? __switch_to_asm+0x33/0x70 [ 619.100184][ T32] ? __pfx_kthread+0x10/0x10 [ 619.104899][ T32] ret_from_fork_asm+0x1a/0x30 [ 619.109709][ T32] [ 619.112927][ T32] INFO: task kworker/0:15:9784 blocked for more than 143 seconds. [ 619.120752][ T32] Not tainted syzkaller #0 [ 619.126266][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.135041][ T32] task:kworker/0:15 state:D stack:22152 pid:9784 tgid:9784 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 619.147161][ T32] Workqueue: events rfkill_global_led_trigger_worker [ 619.154286][ T32] Call Trace: [ 619.158040][ T32] [ 619.161030][ T32] __schedule+0x1798/0x4cc0 [ 619.166208][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 619.171718][ T32] ? __pfx___schedule+0x10/0x10 [ 619.176760][ T32] ? schedule+0x91/0x360 [ 619.181043][ T32] schedule+0x165/0x360 [ 619.185578][ T32] schedule_preempt_disabled+0x13/0x30 [ 619.191061][ T32] __mutex_lock+0x7e6/0x1350 [ 619.195751][ T32] ? __mutex_lock+0x5bb/0x1350 [ 619.200551][ T32] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 619.207056][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 619.212165][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 619.218298][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 619.224118][ T32] rfkill_global_led_trigger_worker+0x27/0xd0 [ 619.230233][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 619.236119][ T32] process_scheduled_works+0xae1/0x17b0 [ 619.241725][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 619.248183][ T32] worker_thread+0x8a0/0xda0 [ 619.252880][ T32] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 619.259237][ T32] ? __kthread_parkme+0x7b/0x200 [ 619.264264][ T32] kthread+0x70e/0x8a0 [ 619.268380][ T32] ? __pfx_worker_thread+0x10/0x10 [ 619.275733][ T32] ? __pfx_kthread+0x10/0x10 [ 619.280390][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.286066][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.291406][ T32] ? __pfx_kthread+0x10/0x10 [ 619.296649][ T32] ret_from_fork+0x439/0x7d0 [ 619.301289][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 619.306555][ T32] ? __switch_to_asm+0x39/0x70 [ 619.311365][ T32] ? __switch_to_asm+0x33/0x70 [ 619.316369][ T32] ? __pfx_kthread+0x10/0x10 [ 619.321009][ T32] ret_from_fork_asm+0x1a/0x30 [ 619.326517][ T32] [ 619.329641][ T32] INFO: task syz.6.3531:18583 blocked for more than 143 seconds. [ 619.340872][ T32] Not tainted syzkaller #0 [ 619.346509][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.355295][ T32] task:syz.6.3531 state:D stack:25096 pid:18583 tgid:18583 ppid:12909 task_flags:0x400040 flags:0x00004004 [ 619.367362][ T32] Call Trace: [ 619.370664][ T32] [ 619.374063][ T32] __schedule+0x1798/0x4cc0 [ 619.378640][ T32] ? __lock_acquire+0xab9/0xd20 [ 619.383857][ T32] ? __lock_acquire+0xab9/0xd20 [ 619.388760][ T32] ? __pfx___schedule+0x10/0x10 [ 619.393724][ T32] ? schedule+0x91/0x360 [ 619.398010][ T32] schedule+0x165/0x360 [ 619.402198][ T32] schedule_preempt_disabled+0x13/0x30 [ 619.408186][ T32] __mutex_lock+0x7e6/0x1350 [ 619.412941][ T32] ? __mutex_lock+0x5bb/0x1350 [ 619.417742][ T32] ? rfkill_unregister+0xc8/0x220 [ 619.423070][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 619.428160][ T32] ? __pfx_device_del+0x10/0x10 [ 619.433444][ T32] rfkill_unregister+0xc8/0x220 [ 619.438414][ T32] nfc_unregister_device+0x96/0x2a0 [ 619.443733][ T32] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 619.449583][ T32] virtual_ncidev_close+0x56/0x90 [ 619.454773][ T32] __fput+0x44c/0xa70 [ 619.458817][ T32] task_work_run+0x1d1/0x260 [ 619.464051][ T32] ? __pfx_task_work_run+0x10/0x10 [ 619.469645][ T32] ? exit_to_user_mode_loop+0x40/0x110 [ 619.475228][ T32] exit_to_user_mode_loop+0xec/0x110 [ 619.480554][ T32] do_syscall_64+0x2bd/0x3b0 [ 619.485457][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.491568][ T32] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.498081][ T32] ? clear_bhb_loop+0x60/0xb0 [ 619.502948][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.508918][ T32] RIP: 0033:0x7f1a03d8eec9 [ 619.513505][ T32] RSP: 002b:00007ffcfa7b7f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 619.521959][ T32] RAX: 0000000000000000 RBX: 00007f1a03fe7da0 RCX: 00007f1a03d8eec9 [ 619.530366][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 619.538534][ T32] RBP: 00007f1a03fe7da0 R08: 000000000000022c R09: 0000001efa7b828f [ 619.546632][ T32] R10: 00007f1a03fe7cb0 R11: 0000000000000246 R12: 00000000000719e1 [ 619.555003][ T32] R13: 00007ffcfa7b8090 R14: ffffffffffffffff R15: 00007ffcfa7b80b0 [ 619.563129][ T32] [ 619.566195][ T32] INFO: task syz.5.3534:18592 blocked for more than 144 seconds. [ 619.578950][ T32] Not tainted syzkaller #0 [ 619.584084][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.593713][ T32] task:syz.5.3534 state:D stack:25048 pid:18592 tgid:18591 ppid:12903 task_flags:0x400040 flags:0x00004006 [ 619.606345][ T32] Call Trace: [ 619.609684][ T32] [ 619.612708][ T32] __schedule+0x1798/0x4cc0 [ 619.617250][ T32] ? __lock_acquire+0xab9/0xd20 [ 619.622131][ T32] ? __lock_acquire+0xab9/0xd20 [ 619.627478][ T32] ? __pfx___schedule+0x10/0x10 [ 619.632575][ T32] ? schedule+0x91/0x360 [ 619.636866][ T32] schedule+0x165/0x360 [ 619.641060][ T32] schedule_preempt_disabled+0x13/0x30 [ 619.647474][ T32] __mutex_lock+0x7e6/0x1350 [ 619.652324][ T32] ? __mutex_lock+0x5bb/0x1350 [ 619.657732][ T32] ? nfc_rfkill_set_block+0x50/0x2e0 [ 619.663311][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 619.668390][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.673706][ T32] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 619.679670][ T32] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 619.686605][ T32] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 619.692485][ T32] nfc_rfkill_set_block+0x50/0x2e0 [ 619.697642][ T32] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 619.703737][ T32] rfkill_set_block+0x1cf/0x440 [ 619.708694][ T32] rfkill_fop_write+0x44b/0x570 [ 619.713958][ T32] ? __pfx_rfkill_fop_write+0x10/0x10 [ 619.719385][ T32] ? security_file_permission+0x60/0x290 [ 619.725430][ T32] ? rw_verify_area+0x255/0x4d0 [ 619.730379][ T32] ? __lock_acquire+0xab9/0xd20 [ 619.735355][ T32] ? __pfx_rfkill_fop_write+0x10/0x10 [ 619.740776][ T32] vfs_write+0x27e/0xb30 [ 619.745527][ T32] ? __pfx_vfs_write+0x10/0x10 [ 619.750362][ T32] ? __fget_files+0x2a/0x420 [ 619.755183][ T32] ? __fget_files+0x2a/0x420 [ 619.759808][ T32] ? __fget_files+0x3a0/0x420 [ 619.764612][ T32] ? __fget_files+0x2a/0x420 [ 619.769248][ T32] ksys_write+0x145/0x250 [ 619.774006][ T32] ? __pfx_ksys_write+0x10/0x10 [ 619.778916][ T32] ? rcu_is_watching+0x15/0xb0 [ 619.783844][ T32] ? do_syscall_64+0xbe/0x3b0 [ 619.788572][ T32] do_syscall_64+0xfa/0x3b0 [ 619.793197][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.798441][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.808925][ T32] ? clear_bhb_loop+0x60/0xb0 [ 619.814214][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.820144][ T32] RIP: 0033:0x7fcced58eec9 [ 619.824690][ T32] RSP: 002b:00007fccee3f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 619.833542][ T32] RAX: ffffffffffffffda RBX: 00007fcced7e5fa0 RCX: 00007fcced58eec9 [ 619.841554][ T32] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 619.849880][ T32] RBP: 00007fcced611f91 R08: 0000000000000000 R09: 0000000000000000 [ 619.858039][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.866503][ T32] R13: 00007fcced7e6038 R14: 00007fcced7e5fa0 R15: 00007ffc5a8282e8 [ 619.874602][ T32] [ 619.877650][ T32] INFO: task syz.1.3609:18836 blocked for more than 144 seconds. [ 619.885823][ T32] Not tainted syzkaller #0 [ 619.890785][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.899849][ T32] task:syz.1.3609 state:D stack:26504 pid:18836 tgid:18834 ppid:16539 task_flags:0x400140 flags:0x00004004 [ 619.911917][ T32] Call Trace: [ 619.915322][ T32] [ 619.918295][ T32] __schedule+0x1798/0x4cc0 [ 619.923603][ T32] ? __lock_acquire+0xab9/0xd20 [ 619.928522][ T32] ? __lock_acquire+0xab9/0xd20 [ 619.933727][ T32] ? __pfx___schedule+0x10/0x10 [ 619.938632][ T32] ? schedule+0x91/0x360 [ 619.943154][ T32] schedule+0x165/0x360 [ 619.947350][ T32] schedule_preempt_disabled+0x13/0x30 [ 619.953299][ T32] __mutex_lock+0x7e6/0x1350 [ 619.957931][ T32] ? __mutex_lock+0x5bb/0x1350 [ 619.962867][ T32] ? rfkill_register+0x37/0x8e0 [ 619.967762][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 619.972908][ T32] ? __init_waitqueue_head+0xa9/0x150 [ 619.978317][ T32] ? device_initialize+0x24b/0x440 [ 619.983906][ T32] rfkill_register+0x37/0x8e0 [ 619.988624][ T32] nfc_register_device+0x14a/0x320 [ 619.993838][ T32] nci_register_device+0x87f/0x9d0 [ 619.998994][ T32] ? __pfx_nci_register_device+0x10/0x10 [ 620.004805][ T32] ? __raw_spin_lock_init+0x45/0x100 [ 620.010135][ T32] ? __init_waitqueue_head+0xa9/0x150 [ 620.015998][ T32] virtual_ncidev_open+0x129/0x1a0 [ 620.021164][ T32] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 620.026919][ T32] misc_open+0x2b9/0x330 [ 620.031210][ T32] chrdev_open+0x4c9/0x5e0 [ 620.035733][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 620.040742][ T32] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 620.047813][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 620.053344][ T32] do_dentry_open+0x950/0x13f0 [ 620.058270][ T32] vfs_open+0x3b/0x340 [ 620.062516][ T32] ? path_openat+0x2ecd/0x3830 [ 620.067412][ T32] path_openat+0x2ee5/0x3830 [ 620.072300][ T32] ? arch_stack_walk+0xfc/0x150 [ 620.077666][ T32] ? stack_depot_save_flags+0x40/0x860 [ 620.083264][ T32] ? __pfx_path_openat+0x10/0x10 [ 620.088233][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.094443][ T32] do_filp_open+0x1fa/0x410 [ 620.098980][ T32] ? __lock_acquire+0xab9/0xd20 [ 620.104257][ T32] ? __pfx_do_filp_open+0x10/0x10 [ 620.109343][ T32] ? _raw_spin_unlock+0x28/0x50 [ 620.114307][ T32] ? alloc_fd+0x64c/0x6c0 [ 620.118686][ T32] do_sys_openat2+0x121/0x1c0 [ 620.123853][ T32] ? __se_sys_futex+0x36f/0x400 [ 620.128746][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 620.134414][ T32] ? rcu_is_watching+0x15/0xb0 [ 620.139215][ T32] __x64_sys_openat+0x138/0x170 [ 620.144194][ T32] do_syscall_64+0xfa/0x3b0 [ 620.148741][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.154336][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.160434][ T32] ? clear_bhb_loop+0x60/0xb0 [ 620.165565][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.171493][ T32] RIP: 0033:0x7f85a498eec9 [ 620.176026][ T32] RSP: 002b:00007f85a5814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 620.184567][ T32] RAX: ffffffffffffffda RBX: 00007f85a4be5fa0 RCX: 00007f85a498eec9 [ 620.192977][ T32] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 620.200990][ T32] RBP: 00007f85a4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 620.210433][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.218529][ T32] R13: 00007f85a4be6038 R14: 00007f85a4be5fa0 R15: 00007ffe34ff1cc8 [ 620.227044][ T32] [ 620.230139][ T32] INFO: task syz.0.3617:18870 blocked for more than 144 seconds. [ 620.238012][ T32] Not tainted syzkaller #0 [ 620.243130][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.251908][ T32] task:syz.0.3617 state:D stack:27808 pid:18870 tgid:18869 ppid:15698 task_flags:0x400040 flags:0x00004004 [ 620.264627][ T32] Call Trace: [ 620.267932][ T32] [ 620.270875][ T32] __schedule+0x1798/0x4cc0 [ 620.275516][ T32] ? kasan_save_free_info+0x46/0x50 [ 620.280842][ T32] ? __lock_acquire+0xab9/0xd20 [ 620.285861][ T32] ? __lock_acquire+0xab9/0xd20 [ 620.290794][ T32] ? __pfx___schedule+0x10/0x10 [ 620.296065][ T32] ? schedule+0x91/0x360 [ 620.300428][ T32] schedule+0x165/0x360 [ 620.304703][ T32] schedule_preempt_disabled+0x13/0x30 [ 620.310204][ T32] __mutex_lock+0x7e6/0x1350 [ 620.314887][ T32] ? __mutex_lock+0x5bb/0x1350 [ 620.319667][ T32] ? misc_open+0x51/0x330 [ 620.324493][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 620.329570][ T32] misc_open+0x51/0x330 [ 620.333808][ T32] chrdev_open+0x4c9/0x5e0 [ 620.338259][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 620.343280][ T32] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 620.349668][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 620.355031][ T32] do_dentry_open+0x950/0x13f0 [ 620.359857][ T32] vfs_open+0x3b/0x340 [ 620.364029][ T32] ? path_openat+0x2ecd/0x3830 [ 620.368838][ T32] path_openat+0x2ee5/0x3830 [ 620.373837][ T32] ? arch_stack_walk+0xfc/0x150 [ 620.379287][ T32] ? stack_depot_save_flags+0x40/0x860 [ 620.385203][ T32] ? __pfx_path_openat+0x10/0x10 [ 620.390193][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.396667][ T32] do_filp_open+0x1fa/0x410 [ 620.401292][ T32] ? __lock_acquire+0xab9/0xd20 [ 620.406313][ T32] ? __pfx_do_filp_open+0x10/0x10 [ 620.411395][ T32] ? _raw_spin_unlock+0x28/0x50 [ 620.416659][ T32] ? alloc_fd+0x64c/0x6c0 [ 620.421024][ T32] do_sys_openat2+0x121/0x1c0 [ 620.425843][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 620.431086][ T32] ? exc_page_fault+0x76/0xf0 [ 620.435883][ T32] ? do_user_addr_fault+0xc8a/0x1390 [ 620.441236][ T32] __x64_sys_openat+0x138/0x170 [ 620.446548][ T32] do_syscall_64+0xfa/0x3b0 [ 620.451133][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.456439][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.462616][ T32] ? clear_bhb_loop+0x60/0xb0 [ 620.467357][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.473650][ T32] RIP: 0033:0x7ff0b358eec9 [ 620.478107][ T32] RSP: 002b:00007ff0b44f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 620.486864][ T32] RAX: ffffffffffffffda RBX: 00007ff0b37e5fa0 RCX: 00007ff0b358eec9 [ 620.495468][ T32] RDX: 0000000000000500 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 620.504114][ T32] RBP: 00007ff0b3611f91 R08: 0000000000000000 R09: 0000000000000000 [ 620.512120][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.520322][ T32] R13: 00007ff0b37e6038 R14: 00007ff0b37e5fa0 R15: 00007ffe75bd22c8 [ 620.528561][ T32] [ 620.531645][ T32] INFO: task syz.7.3633:18914 blocked for more than 145 seconds. [ 620.540459][ T32] Not tainted syzkaller #0 [ 620.545581][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.554345][ T32] task:syz.7.3633 state:D stack:27808 pid:18914 tgid:18912 ppid:12907 task_flags:0x400040 flags:0x00004004 [ 620.566741][ T32] Call Trace: [ 620.570059][ T32] [ 620.573570][ T32] __schedule+0x1798/0x4cc0 [ 620.578126][ T32] ? kasan_save_free_info+0x46/0x50 [ 620.583550][ T32] ? __lock_acquire+0xab9/0xd20 [ 620.588451][ T32] ? __lock_acquire+0xab9/0xd20 [ 620.594014][ T32] ? __pfx___schedule+0x10/0x10 [ 620.598905][ T32] ? schedule+0x91/0x360 [ 620.603394][ T32] schedule+0x165/0x360 [ 620.607581][ T32] schedule_preempt_disabled+0x13/0x30 [ 620.613425][ T32] __mutex_lock+0x7e6/0x1350 [ 620.618073][ T32] ? __mutex_lock+0x5bb/0x1350 [ 620.623494][ T32] ? misc_open+0x51/0x330 [ 620.627899][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 620.633275][ T32] misc_open+0x51/0x330 [ 620.637491][ T32] chrdev_open+0x4c9/0x5e0 [ 620.641939][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 620.647091][ T32] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 620.653969][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 620.659133][ T32] do_dentry_open+0x950/0x13f0 [ 620.664059][ T32] vfs_open+0x3b/0x340 [ 620.668176][ T32] ? path_openat+0x2ecd/0x3830 [ 620.673070][ T32] path_openat+0x2ee5/0x3830 [ 620.677683][ T32] ? arch_stack_walk+0xfc/0x150 [ 620.683467][ T32] ? stack_depot_save_flags+0x40/0x860 [ 620.689193][ T32] ? __pfx_path_openat+0x10/0x10 [ 620.694357][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.700500][ T32] do_filp_open+0x1fa/0x410 [ 620.705105][ T32] ? __lock_acquire+0xab9/0xd20 [ 620.709999][ T32] ? __pfx_do_filp_open+0x10/0x10 [ 620.715640][ T32] ? _raw_spin_unlock+0x28/0x50 [ 620.720543][ T32] ? alloc_fd+0x64c/0x6c0 [ 620.725026][ T32] do_sys_openat2+0x121/0x1c0 [ 620.729739][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 620.735009][ T32] ? exc_page_fault+0x76/0xf0 [ 620.739720][ T32] ? do_user_addr_fault+0xc8a/0x1390 [ 620.745559][ T32] __x64_sys_openat+0x138/0x170 [ 620.750488][ T32] do_syscall_64+0xfa/0x3b0 [ 620.755121][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.760442][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.767899][ T32] ? clear_bhb_loop+0x60/0xb0 [ 620.773117][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.779054][ T32] RIP: 0033:0x7ff21df8eec9 [ 620.783615][ T32] RSP: 002b:00007ff21ee8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 620.792190][ T32] RAX: ffffffffffffffda RBX: 00007ff21e1e6090 RCX: 00007ff21df8eec9 [ 620.800365][ T32] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 620.808655][ T32] RBP: 00007ff21e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 620.816752][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.825142][ T32] R13: 00007ff21e1e6128 R14: 00007ff21e1e6090 R15: 00007fff99d90c18 [ 620.833584][ T32] [ 620.836662][ T32] [ 620.836662][ T32] Showing all locks held in the system: [ 620.845483][ T32] 1 lock held by khungtaskd/32: [ 620.850464][ T32] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 620.861314][ T32] 4 locks held by kworker/u8:6/1137: [ 620.867204][ T32] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 620.877507][ T32] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 620.887240][ T32] #2: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 620.897843][ T32] #3: ffffffff99d01458 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 620.908264][ T32] 2 locks held by getty/5627: [ 620.913178][ T32] #0: ffff8880339c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 620.923637][ T32] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 620.933957][ T32] 4 locks held by kworker/u8:11/8609: [ 620.939388][ T32] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 620.950566][ T32] #1: ffffc9001ab67bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 620.961425][ T32] #2: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 620.971017][ T32] #3: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 620.981484][ T32] 3 locks held by kworker/0:7/9775: [ 620.987107][ T32] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 620.998202][ T32] #1: ffffc9001b5d7bc0 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 621.010972][ T32] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x1d/0xa0 [ 621.021744][ T32] 3 locks held by kworker/0:15/9784: [ 621.027138][ T32] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 621.038218][ T32] #1: ffffc9001b09fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 621.052228][ T32] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 621.064389][ T32] 2 locks held by syz.6.3531/18583: [ 621.069624][ T32] #0: ffff8880227f7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 621.080101][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 621.090618][ T32] 2 locks held by syz.5.3534/18592: [ 621.096052][ T32] #0: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 621.106804][ T32] #1: ffff8880227f7100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 621.116639][ T32] 3 locks held by syz.1.3609/18836: [ 621.121946][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.130714][ T32] #1: ffff8880287ad100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 621.140897][ T32] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 621.151037][ T32] 1 lock held by syz.0.3617/18870: [ 621.156548][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.165636][ T32] 1 lock held by syz.7.3633/18914: [ 621.170786][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.179375][ T32] 1 lock held by syz-executor/18918: [ 621.184774][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.193709][ T32] 1 lock held by syz-executor/18919: [ 621.199026][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.207689][ T32] 1 lock held by syz-executor/18921: [ 621.213096][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.221636][ T32] 1 lock held by syz-executor/18923: [ 621.227454][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.236135][ T32] 1 lock held by syz-executor/18925: [ 621.241442][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.250065][ T32] 1 lock held by syz-executor/18928: [ 621.255776][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.264691][ T32] 1 lock held by syz-executor/18929: [ 621.270007][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.278665][ T32] 1 lock held by syz-executor/18931: [ 621.284555][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.293172][ T32] 1 lock held by syz-executor/18933: [ 621.298481][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.307208][ T32] 1 lock held by syz-executor/18935: [ 621.312927][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.321444][ T32] 1 lock held by syz-executor/18938: [ 621.327055][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.335635][ T32] 1 lock held by syz-executor/18939: [ 621.340934][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.349819][ T32] 1 lock held by syz-executor/18941: [ 621.355309][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.364097][ T32] 1 lock held by syz-executor/18943: [ 621.369451][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.378816][ T32] 1 lock held by syz-executor/18945: [ 621.384228][ T32] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 621.392925][ T32] [ 621.395276][ T32] ============================================= [ 621.395276][ T32] [ 621.404535][ T32] NMI backtrace for cpu 1 [ 621.404561][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 621.404586][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 621.404599][ T32] Call Trace: [ 621.404608][ T32] [ 621.404617][ T32] dump_stack_lvl+0x189/0x250 [ 621.404664][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.404691][ T32] ? __pfx__printk+0x10/0x10 [ 621.404736][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 621.404774][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 621.404817][ T32] ? __pfx__printk+0x10/0x10 [ 621.404854][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 621.404893][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 621.404929][ T32] watchdog+0xf93/0xfe0 [ 621.404964][ T32] ? watchdog+0x1de/0xfe0 [ 621.404998][ T32] kthread+0x70e/0x8a0 [ 621.405029][ T32] ? __pfx_watchdog+0x10/0x10 [ 621.405056][ T32] ? __pfx_kthread+0x10/0x10 [ 621.405083][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.405103][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.405123][ T32] ? __pfx_kthread+0x10/0x10 [ 621.405149][ T32] ret_from_fork+0x439/0x7d0 [ 621.405173][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 621.405201][ T32] ? __switch_to_asm+0x39/0x70 [ 621.405229][ T32] ? __switch_to_asm+0x33/0x70 [ 621.405248][ T32] ? __pfx_kthread+0x10/0x10 [ 621.405269][ T32] ret_from_fork_asm+0x1a/0x30 [ 621.405302][ T32] [ 621.405308][ T32] Sending NMI from CPU 1 to CPUs 0: [ 621.553515][ C0] NMI backtrace for cpu 0 [ 621.553533][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 621.553555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 621.553567][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 621.553593][ C0] RIP: 0010:unwind_next_frame+0xad1/0x2390 [ 621.553618][ C0] Code: 03 0f 84 f3 01 00 00 83 fe 02 0f 85 a1 07 00 00 4c 89 7c 24 28 4d 8d 7e 08 4c 89 fd 48 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <80> 7c 05 00 00 74 08 4c 89 ff e8 80 60 b0 00 4c 89 7c 24 60 48 89 [ 621.553634][ C0] RSP: 0018:ffffc900001174d8 EFLAGS: 00000a02 [ 621.553649][ C0] RAX: dffffc0000000000 RBX: ffffffff90326ad3 RCX: ffffffff8fb6c578 [ 621.553664][ C0] RDX: ffffffff90326ace RSI: 0000000000000002 RDI: ffffffff8be33f20 [ 621.553677][ C0] RBP: 1ffff92000022eb6 R08: 0000000000000003 R09: ffffffff8172c195 [ 621.553689][ C0] R10: ffffc900001175f8 R11: ffffffff81ac3c30 R12: ffffc90000117f58 [ 621.553710][ C0] R13: ffffc900001175f8 R14: ffffc900001175a8 R15: ffffc900001175b0 [ 621.553724][ C0] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 621.553739][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.553751][ C0] CR2: 0000557aeb9f5fb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 621.553767][ C0] Call Trace: [ 621.553774][ C0] [ 621.553786][ C0] ? unwind_next_frame+0xa5/0x2390 [ 621.553808][ C0] ? ret_from_fork+0x439/0x7d0 [ 621.553829][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 621.553852][ C0] arch_stack_walk+0x11c/0x150 [ 621.553878][ C0] ? ret_from_fork+0x439/0x7d0 [ 621.553898][ C0] stack_trace_save+0x9c/0xe0 [ 621.553919][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 621.553940][ C0] ? kfree+0x18e/0x440 [ 621.553966][ C0] ? __lock_acquire+0xab9/0xd20 [ 621.553995][ C0] kasan_save_track+0x3e/0x80 [ 621.554018][ C0] ? kasan_save_track+0x3e/0x80 [ 621.554039][ C0] ? kasan_save_free_info+0x46/0x50 [ 621.554057][ C0] ? __kasan_slab_free+0x5b/0x80 [ 621.554081][ C0] ? kmem_cache_free+0x18f/0x400 [ 621.554104][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 621.554123][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 621.554141][ C0] ? worker_thread+0x8a0/0xda0 [ 621.554158][ C0] ? kthread+0x70e/0x8a0 [ 621.554178][ C0] ? ret_from_fork+0x439/0x7d0 [ 621.554223][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 621.554243][ C0] kasan_save_free_info+0x46/0x50 [ 621.554262][ C0] __kasan_slab_free+0x5b/0x80 [ 621.554286][ C0] kmem_cache_free+0x18f/0x400 [ 621.554315][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 621.554345][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 621.554364][ C0] process_scheduled_works+0xae1/0x17b0 [ 621.554399][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.554427][ C0] worker_thread+0x8a0/0xda0 [ 621.554461][ C0] kthread+0x70e/0x8a0 [ 621.554485][ C0] ? __pfx_worker_thread+0x10/0x10 [ 621.554504][ C0] ? __pfx_kthread+0x10/0x10 [ 621.554527][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.554545][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.554564][ C0] ? __pfx_kthread+0x10/0x10 [ 621.554587][ C0] ret_from_fork+0x439/0x7d0 [ 621.554606][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 621.554650][ C0] ? __switch_to_asm+0x39/0x70 [ 621.554674][ C0] ? __switch_to_asm+0x33/0x70 [ 621.554701][ C0] ? __pfx_kthread+0x10/0x10 [ 621.554725][ C0] ret_from_fork_asm+0x1a/0x30 [ 621.554759][ C0] [ 621.555705][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 621.898314][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 621.907440][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 621.917511][ T32] Call Trace: [ 621.920801][ T32] [ 621.923745][ T32] dump_stack_lvl+0x99/0x250 [ 621.928349][ T32] ? __asan_memcpy+0x40/0x70 [ 621.932956][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.938168][ T32] ? __pfx__printk+0x10/0x10 [ 621.942784][ T32] vpanic+0x281/0x750 [ 621.946779][ T32] ? __pfx_vpanic+0x10/0x10 [ 621.951298][ T32] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 621.956973][ T32] ? preempt_schedule+0xae/0xc0 [ 621.961954][ T32] ? preempt_schedule_common+0x83/0xd0 [ 621.967451][ T32] panic+0xb9/0xc0 [ 621.971202][ T32] ? __pfx_panic+0x10/0x10 [ 621.975633][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 621.981043][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 621.987242][ T32] watchdog+0xfd2/0xfe0 [ 621.991425][ T32] ? watchdog+0x1de/0xfe0 [ 621.995781][ T32] kthread+0x70e/0x8a0 [ 621.999957][ T32] ? __pfx_watchdog+0x10/0x10 [ 622.004670][ T32] ? __pfx_kthread+0x10/0x10 [ 622.009283][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.014751][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.019984][ T32] ? __pfx_kthread+0x10/0x10 [ 622.024594][ T32] ret_from_fork+0x439/0x7d0 [ 622.029282][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 622.034518][ T32] ? __switch_to_asm+0x39/0x70 [ 622.039357][ T32] ? __switch_to_asm+0x33/0x70 [ 622.044142][ T32] ? __pfx_kthread+0x10/0x10 [ 622.048854][ T32] ret_from_fork_asm+0x1a/0x30 [ 622.053747][ T32] [ 622.057132][ T32] Kernel Offset: disabled [ 622.061464][ T32] Rebooting in 86400 seconds..