last executing test programs: 18.102390016s ago: executing program 2 (id=2427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000140), 0x0, 0x5}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000000)=@hci={0x1f, 0x4, 0x3}, 0x80, 0x0}}], 0x1, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 18.094985736s ago: executing program 2 (id=2432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a9058f43a82"], 0x54}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYBLOB="8f59039bf17a50623963726705", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 17.99443761s ago: executing program 2 (id=2436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r0, @ANYBLOB="40005200060010"], 0x24}}, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) syz_emit_ethernet(0x4a, 0x0, 0x0) (rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000001c0), 0x8) 17.895846711s ago: executing program 0 (id=2437): sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="b7fa1baed703e6400e8f98f19c04ee3ce2a9fbcc3593f9a7115a786b7c17a389b857961a60de45d6648f1359130bf48e2dbb293b4b1447376fb2be21fc8f9a4ced9e2f8e9f7097b0c6a00b5dea1e5c7836cbef2c23e18d8feb05724f09496b294de23763865a18932aadc885164c9aee4a72744890b1b46197148bc72fab71f41fbd3e18ba16a2415f15a4805c38c98b8e7626f66d557f9f9f28c6062a3cdedee2f7d963cd406342e530c838628a66b1c77b850d1f72bba2328ca6e4248f9329794f0e0f10f81ca54b6bacaee410f4c44e9914357e779829483ed6b9736311961257c471246d600fd1d1deb01e3786179f", 0xf1}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2c4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc8, 0x3, "01ce4745c8a847050d1b734929e1cfd0503ae0d1b2632460d0a260b9f0757ba5448e9b3ea98de8c34589d1066e2431718e967842ba96918087817365a5def5fa9e87fd8d313c5f0998e9a9d9759d97aba3eb403ce7d0bafd7ce50824e24a104f0f59f6b5e5dc02c51804c752238873e696aca0aaf999234567fbc633aa068ad49aa79c1f1d8cef75d04934312f7ebe0f27dbc1a9e4a480597146fbd4b3eaed8cbb906c8b0505bfa53c1c5885e3cf2ee2e1310ce84be39b46648f2da61cc9eb3a078e083a"}, @TIPC_NLA_NODE_ID={0xa8, 0x3, "782700d5a47d994d070b093bdbbce6225aea3d50b3b637d36b5b70103e9200e171937d4021053b9a05029a1e557c6a06815fe680a5daf349151ad3c0d798b38d3eab1257d7d8f1bcf88390dcef7e74c0da9445b97c1bbeee696e7023fad42670aebda40ed2f3db107dc8628a1a78ae4afb200fb78f5abe70cedbc815ae25ab344af87cf279e44411fc451ee2f0c0a0ad757109200f8bca602a59f7fd73fc5d918988801a"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x96}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5e3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x85d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc25c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "343bb0ba5e71ba18107932d112b4f5"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "6e2c481abb9fa4bd"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x13, 0x4, "f8870554162e1e5ccf2a1172a45d03"}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "e4c83ae4cbefd9b76f4524173a"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) (async) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000740)=""/155, &(0x7f0000000800)=0x9b) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000840)={'pimreg\x00', {0x2, 0x0, @initdev}}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x3}, &(0x7f00000008c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000900)={r3, 0x5, 0x20}, 0xc) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x144, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x337}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0xfffa}, {0x8, 0x13, 0x4e49e75f}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xf}, {0x8, 0x13, 0x8001}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x7f}, {0x8, 0x13, 0x800}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000800}, 0x20060041) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000b80)={'icmp\x00'}, &(0x7f0000000bc0)=0x1e) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000c00)='batadv_slave_0\x00', 0x10) (async) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000c40), 0x80000) sendto$inet6(r5, &(0x7f0000000c80)="b8f8dae68a14fa1a9476d735ee11f85360281f12a30c50d78a0c3a6c7de0e5696f0e14a2289a4749c7f7703c5826e229e678d989d81b568186bc4e86254cef2f83d7e5b3e4c2e34de9b012b7a8b994797618e022e59a0edb77eab000731801aff7cb0508004e37e1cd2ee6ba2c32bda9d6617cce94f2efbfecd7e010e52708523d7040f2c8d0d12701d5d14ad1310d0b34b724dfba0acb105a27aa0b8592f1f3c1e6e40b26736ef9ebdb96b7b10f5d700997066d4bc936ab5f68cdbb7269023297e5fa01d65d5b566f907b964a53b1", 0xcf, 0x10, &(0x7f0000000d80)={0xa, 0x4e21, 0x401, @mcast2, 0x7}, 0x1c) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000dc0)={0x81c, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = accept$inet(r4, &(0x7f0000000f00)={0x2, 0x0, @local}, &(0x7f0000000f40)=0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r6) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x4c, r8, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000040) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001100)={0x2, 0xf, 0x44, 0x0, 0x25, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb3, 0x1fe3a09e, {0x6, 0x6c, 0x9, 0xaa, 0x0, 0x9, 0x0, @in=@local, @in=@local}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_key={0x18, 0x9, 0x5b0, 0x0, "e2427b6e5483a6b80a2e2022ecba11ece17d8963d9cb33db70df287bf972bfae856a06a4057e7a689f0b90fbcda6129aba275f882040da81a2bc325a926b8c21535ba5fc94280063313db53b414f3f9d6856b8cbab5912bb5178842dc3bfcc3b91953cc0678203291d610c130d5157950d33b21a069bca158234c59a711af048ba80c567b6fbb582df12011124c39138fffe7f0e5e4c3a3e41d054e3b3f0322cd2c7c5d5f5117757a3231544c10b1ecd13a9ebf65933"}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}]}, 0x128}}, 0x885) (rerun: 64) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x8) (async, rerun: 32) pwritev(r7, &(0x7f0000001480)=[{&(0x7f00000012c0)="662a7fe9fa5463eb0b5b983bd92a983c5bd4453a1f91123b787049354f1bbddc926741fdab814a7420c9479496ff04525ca4a29ffe398cea29a02501ed78b68b86039ee3f5859b011d23c4af9570c5dd75dfd93f7daa8ffbca07117cdffec9868dc80627ab45fbd38a4f4d71108f6532da38bbf7981ebf367aeee62615f4b2623f445b68290d9fba98797fe622bd1b71b04d75a32f08fa6723c44e253f6856987c35be", 0xa3}, {&(0x7f0000001380)="0532d8a3a47c1c61b0339590a28bc67d0e4ddb396259a8330e9c5ef98319a4b183e88f9cc0c02a432f352899b4d6fde85360d0cc27da2889ee9836915ae691d1ab3d57e7165eb47f3249a1ac1a379f879b0ef3ccdb05377cc86a3b114dc899a3c4b254b775d27b6cc5f6a27cbf5c4f82efbde2b242aaf9d95359ff6763f089e990f5611f312aca998dd48ad4e213f9ee6661660d61512135b057372cec79daea357de96840baeadfce829a6667ecd995c7c0eef993228b5f6297f018197050e2c4a4ee91c6b2a3703d7f68d043757c2fecb4ddb96f6f5ecaa1521358c21e", 0xde}], 0x2, 0x9, 0x1f4) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000001880)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x12400030}, 0xc, &(0x7f0000001840)={&(0x7f0000001540)={0x2ec, r9, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x78, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdb1c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2af}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52aa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89ee}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6d}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f00000018c0)={@broadcast, @broadcast, 0x1, "1ed42c8f049b0d7ccdb0e877ca2aaa0c9006609b6195b6e94520725e4358fafc", 0xff, 0x3, 0x2c6, 0x1}, 0x3c) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) sendmsg$nl_xfrm(r10, &(0x7f0000001bc0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a00)=@polexpire={0x148, 0x1b, 0x1, 0x70bd28, 0x25dfdbfd, {{{@in6=@empty, @in=@broadcast, 0x4e21, 0x9, 0x4e20, 0x101, 0xa, 0x20, 0x80, 0x2, r11}, {0x2, 0x5, 0x8000000000000001, 0xe41, 0xfffffffffffffe01, 0x1, 0x4a, 0x4}, {0x5, 0x5, 0x80, 0x7}, 0xecbb, 0x0, 0x0, 0x1, 0x3, 0x3}, 0x7}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @offload={0xc}, @etimer_thresh={0x8, 0xc, 0x800}, @algo_crypt={0x68, 0x2, {{'cbc(blowfish)\x00'}, 0x100, "4b81ba086f0bedf7e2c5223ec2794f152869c7ec68a7f54306000137b01b7b04"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x5) 17.776093736s ago: executing program 2 (id=2440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000a80)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, 'gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x4000000, {0x1, @broadcast, 'veth0_to_team\x00'}}) 17.628767333s ago: executing program 0 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000800090000bcdcb994662c54b4be352e5df6dccbcad094a3c9f4c31528f66a37167b0679"], 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000800090000bcdcb994662c54b4be352e5df6dccbcad094a3c9f4c31528f66a37167b0679"], 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 17.531246651s ago: executing program 2 (id=2446): socket$phonet(0x23, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/19, 0x13) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r4, @ANYRES8=r4, @ANYRES32=r3, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r7, 0x100, 0x70bd26, 0x0, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r9, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='caif0\x00'}) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r10 = socket$netlink(0x10, 0x3, 0x4) write(r10, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 17.462513363s ago: executing program 0 (id=2447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @mcast2, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @mcast1, 0x449}, 0x1c) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000180)={&(0x7f0000000080)=""/243, 0xf3, 0x9, 0x5d60}) r1 = accept$inet6(r0, 0x0, &(0x7f00000001c0)) getpeername$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000240)=0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000300)=r2, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x100, 0x2, {{0x37, 0x4, 0x2, 0xa, 0xdc, 0x68, 0x0, 0x8, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, {[@lsrr={0x83, 0x17, 0x87, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast]}, @timestamp_prespec={0x44, 0x4c, 0x90, 0x3, 0x2, [{@rand_addr=0x64010102, 0x2}, {@empty, 0x2}, {@broadcast, 0x401}, {@remote, 0x30}, {@private=0xa010102, 0x8}, {@private=0xa010101, 0x8001}, {@remote, 0x6}, {@empty, 0x8}, {@broadcast, 0x6}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x43, [@multicast2, @local]}, @noop, @timestamp_addr={0x44, 0x54, 0x39, 0x1, 0x1, [{@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@multicast1, 0xc}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}, {@multicast1, 0x40}, {@loopback, 0x6}, {@multicast2, 0x1bbc521f}, {@broadcast, 0xd1}, {@loopback, 0x2}, {@multicast2}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@local, @empty, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x5, 0x5, {{0x3a, 0x4, 0x3, 0x0, 0xe8, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @rr={0x7, 0x7, 0xb, [@private=0xa010100]}, @generic={0x94, 0x2}, @cipso={0x86, 0x4b, 0x3, [{0x2, 0x10, "4f13de6c1bd6d9535c769dd3d0eb"}, {0x7, 0x12, "e718ba9fc4f950c3a797e63b8c76a01c"}, {0x0, 0xb, "575bde50df25370007"}, {0x7, 0x10, "98f0788d96a4217335bb466fe9be"}, {0x0, 0x3, "eb"}, {0x5, 0x5, "af7458"}]}, @timestamp_addr={0x44, 0x54, 0xf8, 0x1, 0x4, [{@private=0xa010102, 0x10}, {@private=0xa010101, 0x6f}, {@remote, 0xe}, {@empty, 0x6}, {@multicast2, 0x8}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}, {@empty, 0x8}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xac3f}]}, @end, @rr={0x7, 0x23, 0x3f, [@rand_addr=0x64010102, @private=0xa010100, @remote, @loopback, @multicast2, @private=0xa010102, @multicast1, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x29, 0x64, 0x9, 0x7, 0x7a, @mcast1, @private1, 0x8, 0x40, 0xffff, 0x3ecd}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000780)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000007c0)={@private2, 0x0}, &(0x7f0000000800)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x2, 0xffffffff, {{0x15, 0x4, 0x1, 0x20, 0x54, 0x67, 0x0, 0x8, 0x6, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xee, 0x1, 0x6, [{@empty, 0x5}, {@empty, 0x7}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x14000}, {@broadcast, 0x7ff}, {@local, 0x8cd}, {@multicast2, 0x7fffffff}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x80, 0x800, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x66, 0x0, 0xf3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0xc, 0x26, 0x0, 0x9, [0x10, 0x1d0]}, @timestamp={0x44, 0xc, 0xb2, 0x0, 0xe, [0x7, 0xb]}, @generic={0x7, 0x2}, @noop, @rr={0x7, 0x1b, 0x4c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @multicast2]}, @rr={0x7, 0xb, 0xbf, [@multicast1, @private=0xa010101]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000000c00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e80)={'syzkaller1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xb5d8acd52f26ceca}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1bc, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001100)={r2, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000001140)=r2, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000011c0)=0x24) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001200)=@assoc_value={r17, 0x3}, 0x8) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000001240)="e3d7880ef3f19c7e30cec0d48cf05f0ffe5a93493386867cfc5c44b36d41f56065df6e5fd9caad1aaf13aee1abaff90c7c097c193f0860cd5b2eb2cda4ff6982aee0a0928b2695e3acbc5e42146a5889461ebafdf8cf1defa43684a999b09c49138cb7d1f94f3065442fe058dec614f32821c06ea3a417f4a48c424b6f757dda6e530dbd3f239fbf61fa58b71864b3e1a945174192b687fb4410f9f8e797ebbbec7f6ebf487304d8b7f71d63d6e0c88b39e0848ac0b5d8446dec4604cae9ccb4f475144387c8882248ba50e67ab9b46a00a0") getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001340)={r2, 0x3c, "59f7797ca40de644111b3e59805f522e6cced9adfee42944e9e70986ab8d7091e3b5118694eb4dac380c43a4d8ac1d99a37843ee6412c6467c255d20"}, &(0x7f00000013c0)=0x44) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001400)={0x7f, 0x7, 0x2, 0x9, 0xd, 0x8ef, 0x73, 0x6, r18}, &(0x7f0000001440)=0x20) 17.382500293s ago: executing program 0 (id=2449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70b52a, 0x2001, {0x0, 0x0, 0x0, r3, {0x7}, {0xffff, 0xffff}, {0x5, 0xffe0}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x94) 17.311528022s ago: executing program 2 (id=2451): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000068000100030000000000008000000000000000000c000200010000000600000008000500", @ANYRES32=0x0, @ANYBLOB="0eab6b5e6220ba0f2bc1bcb4025c2dc3393d183d767c65287f298e9741e82f98006dcc3a7445594bf504a9131ddbd0c1be044699a3d856f0bbb6bc502bae33c4a4f1b16e82686149b70427823e69d0245d13f18d8fbf4b2fa62ada975da787a6092d08a07c46f6fb6cd3fd25653d0cb28617783dece82b19f6e47d8f9114a20b2e51a0063cbb6c666d10af3d4ecf6f762075698ea3a8d3e6df2e559620eccf652f93b9d223551a39451ab5a45fe5387513a16720f20332b4d3b566007f103d0bb1cb97ee74fa9f7618e29cba04acf100cb6dedbe8216d434ad8d3301825b36d86a575c52c1cf6c4815bfb3c25efcdb9d7a8c12bb78462963cfdd1488dc688b9efda69cfb"], 0x2c}}, 0x40000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 17.163856494s ago: executing program 0 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x24048011}, 0x4044900) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0xf1, 0x8}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000580)={@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {&(0x7f00000003c0)=""/151, 0x97}, &(0x7f00000001c0), 0x50}, 0xa0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r6, r2, 0x0, 0x2, 0x3}, 0x50) setsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'xfrm0\x00'}) 16.927465175s ago: executing program 0 (id=2457): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 16.719508332s ago: executing program 1 (id=2462): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000400)="05d936", 0x3, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001200)={'syztnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r1, 0x29, 0x7, 0x5, 0xfff, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, 0x8, 0x700, 0xe7d, 0x2}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f00000013c0)="bd7ae4cebcf2cd8fcd522dabd93240295607cdeb12380f7098c57711c5167eeb2fe8b5bf72aac3825c860aabd9e71c74b1bb88b3c9e1310034bf15c1647422be118f6ae83c8c3bbe657a524a2e23a121b134f35c06e3e7d5348a8f5bc485412f8eaec805ac38d2341cbb7f981ba816bb7dd26d7f3db7e2f79f4e7ca85ae700ac2782bbe443a1afadc26e9dc4dd4d36623924c70324590d44a57cbab4e1462b653fbae39e9bf36e6b2664948e7ea91fb84863d82bd211cc915059e9cc7b76a0870b3cb1bacfb64f9f5c9822b931d100ee393c847de0c88d7537ba99ce291a299b6c1de5641d8199f6f32fdfa19be915e1bdf067c66b0481cb0fb951be41678e6f946cf6b8b6d650530a4d810d20a2c7f6b8f0ae90849e0c3050fd774bd2ae3443ce04dfc202843a78864499f4f4bb3286e32e3a36315bfc1f52da7a3376fe1a5f4cda5e0143767c042d2ae942301f941f6461a98bb72744d1b1da8f0247221e9a3514a0937595494a04b13ac6e5f42e181e5624bf189f9dcf95badacbeb0c6ec9e8154eea7ec608887105dcda3054bed20859989cf9c6530fd7cf2a625aa3a610f7bb69e2773c1de7ecb539eaef95ee826788bbc60341f57857c382d8c1c590e74478804df8d5c7f77f75bfb1b32376cd80129a5634cdf019cb31eb9816611ac38c9ca3a742edf25e5daa7a737c741d68fd2ae90d4c1fc10a83f1aa91e48a20c944cfb6b202b8ad0b76f83b0803e6e5991ce7bd77ece7e1b98d555d22340f5ee03d8556173af2ed9aadb07ead28739c5786d5570b997ba6b0e2b611db1cbf730b366a53dc6237bce6b216e478cd6277794974c2d22e8dfa481ce32fb04bac6a5199492f657e85b61124de866934874b74a10200b2cc8406e20f7bc2ffdc63e05d01d3159669db21f956a065b3b307811f8570c818cbb0c63d4887c6414f5213cf617241d4283485b8892a195986fbc55744eb176fc55f1151727b11fe6f31c57c31308d68ffd6761234d65c9e81d7800db9b1f8be05dacd6645fc1d1a98b4cf9d4f3cf6ddf7e37bb28869f5c8e64cc453e853a0c7014f3298da175e5cbaa8d95d23e0c98400ba8ae76e187f293a0443692d1dfa89c3cf4afd6560c4b67ea46ef1d6cda28c2d3b873e51af0e8ef434fd981cc10336dfc8672454477ea7c8520e08756c3a758d32719ae0c257adc431a130fc9e30bfe0e303cba003d425e05cd20ce6402d79a97ee104969ef04f5312a2234247d9b4048bb5060f9b29581768cb197881c5023706fc8c26a96fb6bb0feac48c3b0a47f265fa74d4d0d4dcb1cd67cefae3720b8f48b4f46831c9f761e47177310bfef9fc6d063693182c607ba496fa6ce57f8c050fa91602ac41f7f39e4ae3d355efa6089da60bcc0ea247abefa16822089c77840e633e6c22d74d6f5786d8f6e8d8efa44af35281b2cb4f6c8c5dbc0f513518041e371e4e14014ef1a82a41e6dfa7cdc6f632e1abf0f141efcbeb88e2ad6bf25e8bc6ca72241178d9f571ee037024d75a1d55526f3c4825f00ef88a34bf694524d226c4cfcfbbfb1be5bb0b335e7986944e3df58b8a543c37e5fbe500b35033788def79c3dc0cd80cc5f5eef4a3b719608b386e5af3c0245fb1f2dfa8985f14a6f12562b68d4952ccb3c051efd08d5e7edeb6df4238848c762e1a212edf186c7eae4cac8ab949a13e2947b042bcb6a1998990d1d797e214a3cb360bc160717c7eb27f2a15198160e8c61838fd6c974b110bf2b991c5ab1e5bd3fc4cb7e9ec59822a97fcac32c1554f2c0e26d9ea2068274b4cabc5336326a08227e74a38bd00242a037c7c9a0c514b31e4a2a826c1fb781670a99960127180b6245c717348a6a33c0967b8078e72186fd8a43ada6b71cd2bf10cc68f3faa2ca992c12afa4e1bbbd5d0ddbb64052e72b562e0ddd5876b95566b01dc2e2b75a3f543deecfce37a401e36ab0e0bb48f407b4e2803fa3d1402c38b54da88928b7c7ab7cbbc972fe455e7c9891e6882b4585d490ea1abcf3edd0d167aaa353411a4dabc36bd29461a91ef7996a199e549bd185f17bf5f9ff850817aedb05ede2afd10352df070355f207a8e2670c7e6352646ef78539a14750833b88ec63e7298c9b3e091b9c26ecf510d981963017c662d45988888c130dfbf7d9e6ccd800e7323b6fa08094cf6afb0dc3fb4dd8f2ac50a11fa58f34831b96e2a619695a9fb88f5e12c508727b3c60a212c7355db57050fca9af7b2611a50434a48d6755a4f3961b9d7fbadd652f07f306a5e2e9dddae01b28189aa02eaf366ae28519087b372bbcf71713113ee8b8acc75b916dd7c1d1dce3629be93caa9707300e29cff4ca35a2c0330d66eed9c9fc98dfd79eb016c80ee69bb3ce06e8a02ab3938c6668e72c350e77ecd0af1f41104d2e549653150f75fe6ef9536b0da69cee50421f6d61d2fb9fe5fcb1092178640fb3ec9bc37ebf0f3fe29d0a78995ea58e9e81a30eb46e618259711b2afbb672e966f1b10913e4c8a04cf624721edae08edda51e88df3944867c768a02eae8d0c2a282516214d9d6a673dc5c0ed8f3841ae174bbfa3cd91411dbbb965c5b06bed5576b01609e34e0e1a2abd1f72c4d2fddbbe3800fab2d90b1651e19fbb9c7adb46f40837b09f666fe0b1e6cd3f7a3ccbdc309192c47d30299accc267030e1d692aa5ec9dd8ffa49f721998f20e66a2fa750f19284ffdd3422ba89d063a6ee67adab9ea2b71651332d13d0b42dfbac791d5538db8962e1612b094b58afb295fd289f59ccc9500282530c4535575864b7c05ae1374dad4453a3ed2ec78b0f1f9a07af410d68517987de20159082594da1294d5c75c48b366a7bebbc0008cdf7cb3e207519ce544a32f27c743e1f18cc87da840a55022351908c0c2f9a861b3dc279f8f7437314b0bf360272607997f3008f9da8704411f5dd29857adfa1f0d0ac7681ede32f4ca1380b97056cedbcde4247c1cb523afd3962e9fd4ec2ceec4d16a163ec0b56627f871949e12117e7b191947137416abd3566078eafddc7cf0577b80b9bfbb57cf8f2b818e14f42172397e00bf4ee725cee1d1f0f9414bb91988ce6ecaea712d5ec76e3add09b7567eb82e5050133a65d21eeb2d7e145e325feb32ef03f16b6797e1989c5a96a07d62d88724197d503f51d09a9762d741e0ff52c0361c8c9091f8a27c63fc66b6212164fa8216f35c7adf449baeb86f47a4c45d68100ec1c8c8c8a2cf62fb9b2f8a8f8bb6eba86edf0fa8948badf5d234d502909b63f1a5d6a1199500f855f9aa83cb81c22bc1854a54600509532b37b81f20bf2c47c297beef31135cfc69ff37900965f3af824fc978dbe33918cb22058942fb7b94982c4662fb5d9bfe011b0e199ccdbf4468264ea8fb705f38fc3f41c00c8743416c2a9663483ebd9e3eaaea6cb5310592cb796389e910ade63bf4daa48d608ff5b0d658ca73dcfbfbad18b40f8c16638da7cbe423076adebf1b7cc554d159fe235888c4d9cb42ff9c134b53d86e2bc7628196b6e998c17b655ec29aaf9acb032d10b7554fe4f142b42f54e6a782fac7cf5044db8d653ace240103a025079b3fb36d4264c28d1115d8bafa4f016c5633bc9dc658f7dfdb526318859759ea6214ac877503e037cec54f014a48ba207f9649776580abe654d3d2e4cdaa9b7d6cfcb63c980a62eddee70aac335d4dfa3254020e1edf7255d8d217bd698c170dbd47fa011f340d1c0a0a015bac149252c0a3bb3ae94e7c7b041d5df8aa7dc1f6c36d4eb89f589ab3efd0865e04d8c0f014801ec8706bb6c11bd6154b38c9f8767c9a2471fd6e2d9d69ca1d3c09cfa888b1dcabaad3862b61a27ccfe8d90679e1f62ca24d5c310c1b78ff7dd22cfb406deaa012976f33972f2cbbe999f0c8432feaab81223cee8678c3430a7a52e30ce819cbc27bf7dc2431b5e13bf57a0eff30516892b9c1723a55d374ab2eb85a1edd36eb90c7a7a737e1793f93ed192daeed9f4637ae092eefd87877adfab803f93172862e29d8b454b0d1652727422b470de0b6b2d508f7784e63b8d0399befcb0077ee12aa9912e9a6888d9f7af3d822ab624262c4d7e7a814253bcdb3ecf41ba2c3a9f068e02edca2a7b800d390821623ed249561118a67117bfc7357a22d4843b8ef2ed303f4b99fbd42fbbe1723f9801d5c43b687609cc91d173f1483c9d35d692c1d733b764910d7819540429312a3034675d7f1358288fca17eebf7f2a346a03b94c99b042d7c7bb1fbbc13ec07c7b12c0c3d2ed37bd5edcbf993845c7e75357d77fa85c6d79625a97efe54f7706d780e7c99d4c24f012cb18f53aa899a1593de105d9ee479a534939028f30c2c77dc5944188b80737ae01553df40f19cd9b501c7cd64f2c6b154ddd66f95679ec5349f97e57f289945f286957c0eeaae42d4b006f7b0965db21c87b9d4dac0f7673f2b5c550f5ba0fbbb61489acaf54578de1ee0291ccec783678953524a45df7db67031656cc066ab67f7b94b1b4ba296ba369cfbe2bc71bce54ee140013eaab53f6f2cc6de65e19886c8ef2f1c641e2bd41f6a6296f9b5759b35d4a9a19ad691a5632d3ca84893531bd8dd4254d5e5d247bf815e256eb186a65a992868b8e867b3eef4342235b81d4c02100095d4dd1c48cff57da8e59496ac0216325d7cd2fb0f5aee7468b363416043e687cefc7f224a23b9501fff23f27dfc99695a236a9041362c6c8faa00f2a4b165bd24337a1618eff1b34b23b0a035c9af43a883218685362404bcea6b89f45e572853a250b791f71b8fc1a3594e272e7b108a0d1affab666ac869ebeb3027c8b5722ef99e2d53cff203fd463c193b4f4e61c778e2e4be15cce9570ca740fb14840b5544775104e499091ac17138118f1ffc766358834c6c0ca4f25a0ad474b6887d2fcc3e22a45219c5d9c80c6a262642e3083e10806e36e3424a3e0edbb069e8c19ebc3c9a3a95cc0e6b85eb3a0c1cab6ec46bf8d2f7dd2192e98d802c8319b13c56b1fca157e2c2f829dbd5756048c127248e54fa788c867cdd45afb2aeeb1699fb31da3b272ccd29ebb2c43bc2f684281ae0a08369bffbaa86a1882093fbe7905cfe6a0bccd600c871bc267ba39f6e79a92bfb2b43252c1f86c7f99d6b2f5c349f26f85704fc31aaca93819133725dac1fc30fc8c60e90ef5111a485ffb68225992422aedebbc408ade3901fc3b8f0a97e5a707b8697e87e8470c01c2f8e2f8f53635297e686e331dc1dbdfb1ed1841972f30aabf19bca1931b30664bea60b2de725a52d335263bd3a4f0d275c2e8a623d26347d4d00a728207ac3c7cc6ec10cd84db6ef9f4e5fff1112c1756503bb33077d3af30a6bfb39cfd1305231c567c6b96701b20993d8034f5a4a657b6459b27a01663b1183a8a05e0a735b3d4f78dd8c42ba2819e3ef1c7693bb4ae88395b734d1c27f9f556975727e05df13a039d8fe00b3e743ea1e211837282e7b2d244f4944651df9c00b22fd29da737db4a0044d874744fb38a2d5051b5ea59f8261bab1712207b1f3719a5d2ed5e2d419fa2ba89fe659ec7f5eb0ef750321829920dd4904b564e50b2853b2add634d1297514dcf971886a774b33a13411f6e5dfd1d71274ead8ce0a8a9f1b47a6b15a75f9d7bcc3ab9ba30c2a8bbc8a022e9239b6963b022551949d1acda8268035ef12a0b95bdc54884d4003a46f5c94fe171bcf8885bb3275056c38b60bb852bc8ae90f11787ecf3fd7a47416fa400941e251c2de2a12eb4d1f1637ca5e5a2fbe1c03e1897fb8230a8d2b4882686a759982803380", 0x1000}, {&(0x7f0000000280)="285ffd25395a846f6bb4d1443374706cfc156c64d4fa5db912fcbf0efe44f6d3aac5657d08af9964ab472c697a0145e6bcffbbb934fed39f3abc3edcc493a281c0d082b57f1ab4cd0c91b61c5ceb8bad4a347f1d5c4c226998d85842140c48235019e82ae4527795971d6a2a7cdbb30f813be5d39910d92979d43fa21f40d825b4ae9697d2fb9ad27c25421471fe0bcceed4ffb555339cd8d923b721199bcc8b71a934fc7c9c611002e5155f50ba5db1030d58a6c8b1384544ede0bb1f13cc57da2035", 0xc3}, {&(0x7f00000001c0)="3079c38d46aa22ecd85318fbe89d14d4c9b3708d0f", 0x15}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000000000000082605f180000", @ANYRES32=r1, @ANYBLOB="ac1e00017f0000010000000054000000000000000000000007000000891bbd00000000e0000002e0000002ffffffffac141414ac1e00018313a7e00000010a010102e0000002ac1414aa94040000880dcc63f9fee010a1dfe47c67940400000000000000140000000000000000000000020000000300000000000000110000000000000000000000010000000000000000000000140000000000000000000000020000000300000000000000110000000000000000000000010000000700000000000000"], 0xd8}}, {{&(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000900)=[{&(0x7f00000006c0)="30673b3809431c7aa611c542ba73c141d009424608d1c3ea4da72e7443f0a6881c20ed506b9ced594072ff87fcc5e220127ee146991383087eadf31de3cab9822578f108e4ebf1a083939c05f2a85570c2960e35ab5975876d166e63f598188555c1526b6960bc26275ea35e1ebd97d6b021238588b95c7a7a0ee687e6c045b11dcdcd052d7a31cd2f38019f83b9ab2821d5bcbb507c989ba0719e8d60c1fc053c84b20edac3c5902b495ed7cb13c7004791cfaf7508ef9ed885be7e817ccb80", 0xc0}, {&(0x7f00000005c0)="dd289f74af6c923b9941b0db5094c8f37668c72692b81be3f22b5f", 0x1b}, {&(0x7f0000000780)="0f23882ac481b40bb05ebdb53705c9752a98c9f9f8b08241b387d45ae3c19aaa21b90372f0ed9464fd3c47107537e86bf5ccb840b9dc8026ed3e2ebdbbb9a7fed0c5fb7a06a4622509e60a38d7932848eda2a3d08651bb66d1281be4e851906a47fdffa3e535eda057053532f012dcd23f", 0x71}, {&(0x7f0000000800)="36638738a1fdc681ce5c65f2fe7ce2cfbc329f014156118236703d390358e93d65fb8ea34ca1b7cf1cc864c58521d8dabc5635549dc608a1828cd123c701c982c9dc41cf144d61ef3e175c2c2f2d628302b5dee08e5159ac748d53df5cb97196eff43e54b88f08fab8eb1a1942796cc449d1a30e6694c20087fef541caddd983f2a019775580ba4345801b6f354cc7e88332a81ea5c24912dc13d2117c4477f027f0b3f714f3ebc98408922cece995004515ab57b0238b210b92241112335f37181b9e7f3b61c20f76bce1c5a9923584a3b2db60368f1d1239223a9f3e792112ba78d23fb03e02733f245ec4", 0xec}], 0x4, &(0x7f0000002580)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="00000000ac1e0101000000001400000000d4c304f71bcf1a8e005ac4fa49274b0b9000000000000002000000"], 0x1c0}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000b40)="ca8ef655225d16a2bf7c5619e977fc8ffd0e165be3c5d951d430f68fe59fdae3428b4b9bd11e8f749ff95ffe626b16de979761c0ad1035200e2ff40bd48c5ee778ebac9e929d6860a87093f254c5d72f2c07e1cd4b3d07724e9fc53fddb17618e8f3073685f680087e2f535510b98d3a979182eb108e3ab7cbd747669977893777420b358672f2b5eb4f2cbd4e2884ec5e0d51bf51b1f64571fe1a92d7966930f0698ef5c4cb454a5bd718ea0d86f43ed9952d894d7755437a042a347cc72eac2d95f316f227429a07a729581b06c029cb1b2b21b208d335edd858b63f961ff4354a277be468", 0xe6}, {&(0x7f0000000c40)="cd21939fe38a6cde1f9319d51ef5d0c63c6fdfba1ae6619d3bee5f5b3932a2314708e25d3cdd2d990769d9fced18020184513861a521cfea01c06070b3ab8ec53e90cbfcffdfe429f1663fd636f84b6e281b544d53b207a3917a77f275340773254b9203ea3a24790788e8db5a9f8e816dbc45e7424159746523a5dc1b485b270e7017b8d2b6ea075795f7627693c4899d036c1143dc984978e1d9af9bae756d82f344bc853789c9fc922e3122d191a4cf3d5dd27dcd8cd8ea8fb1ec400df5f139874c4e", 0xc4}, {&(0x7f0000000d40)="1cb7ba38aee4c642f591420f2e364071eeb329774c131b3cd7e989add2eabb682636307c73a7cd7c1b6e452e50e6583b56795baab9c161b6b200748d5d6011cda26566608ba92039cd4ea5186acb84fc5fc82d914d05df8128bb08f90cf40857f6f0426860265d7e7a186c160b1bf563fbdcb08cb9a35cb9244deb7e21df93bcb321d8b10aa16fc8a7c0e1919e2e9bee4ad3923faff46a8e3a07b37f9facc82f69a5c460e50e7cbcd454e0b3d0b3d105b3705daa46f1fd5f0ad786a6bde4d23e688ac1076ab56d1c8c1e9e55b692b6f87653f26716f1eb32bde89c", 0xdb}, {&(0x7f0000000e40)="217430aa398feae5bcbda5628ec7d11a6caf74759b24cb9a82790138c19123aaacfa94b9b8dbef", 0x27}], 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="110000000000000000000000010000000e000000000000001400000000000000000000000100000008000000000000001c000000000000000000000007000000070bfe7f000001e000000100000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="00000000e0000002000000001400000000000000000000000157000000000000001c000000000000000000000008000000000000", @ANYRES32=r3, @ANYBLOB="ffffffff64010102000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0a010104ac1414aa00000000140000000000000000000000020000000700000000000000140000000000000000000000020000000000010000000000110000000000000000000000010000000900000000000000"], 0x110}}, {{&(0x7f0000000ec0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000f00)="ecbc1d1197b977c3870e955b807ad81fb860410a9e231cd816aa6b63cd44648c049eb12a", 0x24}, {&(0x7f0000000f40)="c8e7bdfb558799b1c42886c08852b353f38cf204260874373ce34a77472709cf3dd780f4ca1de32691b3650857fc43bc807e1b9269f492e36f023bb490ee72477e2ec956ddfac3a1222959d594e7d11988f23239c1f442636fc6aceb5ab5de9c1aeb517874f9e758218c4846462d9d5bcf119a6dc567ce5801e2205cd1aac279", 0x80}], 0x2, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa9}}, @ip_tos_u8={{0x11}}], 0x50}}], 0x4, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000024c0)=ANY=[@ANYBLOB="14000000130a0300000000000000000000000000a27890a894b9027a76702d8fbda95a7b34df4d036a72fcf4a85f5063a9f6300fbbdf27a5298da05ad2adfcc62fdcf4fca9d6a6b29dd1c1a47288cfe74a651033050443c119a2d3007bec69fcbdc6f9206ca814d8e61c3913e19a49d54ed458ba4654b642e2a1e61cf50261192e66dae596f32125b408c1605b840714f71578e7d57649fc94faf078de65"], 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r8, 0x8001}, 0x8) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYRES64=r8], 0x38}}, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r12, 0x891a, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x40000) socket$kcm(0x11, 0x3, 0x0) r14 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r14, 0x8982, &(0x7f0000000040)={0x8, 'vlan1\x00', {'syzkaller1\x00'}, 0xddc}) ioctl$sock_inet_SIOCSARP(r14, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x1, @local}, 0x5a, {0x2, 0x4e25, @private=0xa010102}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="620ac4ff0000000071109900000000009500000000000000dac4b89d3352289623347ad862ee246674633c23b318b81568347860db3ed34d8b0bcd36920d483e0cffc6120ab44cc88e8f55d33824159c094e343247e41ef40f4c54425f8b566ace7214abccded9c0d06db6176adf1c00ced2e0b083aa77e574a185b9c0bc22936db87e850ed0fbddd89037b1"], &(0x7f0000000480)='GPL\x00'}, 0x90) 16.518970196s ago: executing program 3 (id=2466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000140)=0x1006, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9}, [@RTA_METRICS={0x4}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000019"], 0x60}}, 0x0) 16.507983834s ago: executing program 1 (id=2467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x841, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x1, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x7f}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0xffffffffffffffcd, 0x1, 0x3}]}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040081}, 0x24000084) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 16.461962468s ago: executing program 4 (id=2468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaa9eaaaaaabb0800451900140065000001329078ac14142d64010102"], 0x26) 16.387123757s ago: executing program 1 (id=2469): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00 \x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newsa={0x1fc, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @algo_auth={0xac, 0x1, {{'blake2b-512\x00'}, 0x320, "abf1677e94acff1e5400408082215fe49cc707bc76f04c76b0e059eb04c919d9eb50f36dade14ff738b7534acb1a412d1cb92a5367f393622e90a595ab00ba070dae5d0aca8f1b57534294198ba17f9be5f3ba46526439bad3f21fb4175e8119c5ffe5a3"}}, @proto={0x5, 0x19, 0x3c}]}, 0x1fc}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) (async, rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x28) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x7, '\x00', 0x0, r5, 0x1, 0x1}, 0x50) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) 16.323705177s ago: executing program 4 (id=2470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000a80)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, 'gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x4000000, {0x1, @broadcast, 'veth0_to_team\x00'}}) 16.281335761s ago: executing program 1 (id=2471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="c0000000000803000000000000000000050000030600024088640000050003002f000000140004800800024000000003080001400000004605000300060000000900010073797a31000000000900010073797a3000fc0000060002400200000044000480080005400000000908000440000000020800084000000009080009400000038808000740fffffffd08000640ffff69cb080008400000000408000a40000000001c000480080001400000000808000240000000c10800024000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000044}, 0x4880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x3, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 16.19844167s ago: executing program 1 (id=2472): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) listen(r3, 0x8) (async, rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1000, 0x2}, 0x90) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x5, 0x0}}, {0x1, @random}, 0x14, {0x2, 0x4e22, @private=0xa010102}}) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x44010}, 0x20000010) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 16.196002094s ago: executing program 4 (id=2473): unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f00000003c0)=""/47, 0x2f}, 0x3}], 0x1, 0x22, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYBLOB="cc9fa261360818ed39032074a50698ab76e5219882fcd8c532a2661926e740ce09615707c91368b5406411", @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0x94) 16.089442982s ago: executing program 1 (id=2474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'veth1_to_batadv\x00', @link_local}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 15.641856244s ago: executing program 3 (id=2475): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff1, 0xfff3}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xfffffefe, 0xffffff00]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004804) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$alg(r11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmmsg(r11, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x83, &(0x7f0000000080)={r14, 0x2}, 0x8) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000500)) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x210, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e19, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4}, {0x40, 0xf9, 0x8}], 0x2, 0x3}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 15.529302454s ago: executing program 3 (id=2476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/5, 0x5, 0x0, &(0x7f0000000ac0)=""/4096, 0x1000}, &(0x7f0000000100)=0x40) 15.427971069s ago: executing program 3 (id=2477): r0 = socket(0x6, 0xa, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) (async) close(r3) (async) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="826d87688c04", 0x6}, {&(0x7f0000001a40)="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", 0xebb}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) (async) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) (async) socket$kcm(0xa, 0x3, 0x87) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = socket(0x1d, 0x2, 0x6) unshare(0x26020480) (async) ppoll(&(0x7f00000004c0)=[{r9, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f000000000014000100000000000000000000f7ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046ec70681bfc46b0449ade5ea0071971d6c0cb68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be2bd750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be0400e90000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x502c1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4080) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 15.421569153s ago: executing program 3 (id=2478): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0), 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) (async) r3 = socket(0x22, 0x3, 0x3) r4 = socket$inet(0x2, 0x80000, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) (async) accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000120000000000003516b3f9c170f57e3f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x40004) 15.321629134s ago: executing program 3 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) sendmsg$NL80211_CMD_DEL_MPATH(r3, 0x0, 0x24004801) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r10, @ANYBLOB="050003"], 0x28}}, 0x80) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) getsockopt$inet6_opts(r6, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000840)) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r12, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf254300000008000300", @ANYRES32=r13, @ANYBLOB='\f\x00X\x00w\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00?'], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x20000804) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3936, 0x7e}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xc2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x4000090) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 15.265337379s ago: executing program 4 (id=2480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x2f}, 0x80, 0x0}, 0x4) 15.257415484s ago: executing program 4 (id=2481): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="ab219ff417490221c2d955b8fcc2ed4d", 0x10}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x80) recvmsg$qrtr(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000009200)={0x77359400}) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl(r0, 0x8b29, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 15.14950497s ago: executing program 4 (id=2482): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d4e"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600100004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @typed={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r2, 0xe, 0x1, 0xac, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/100, 0x189, 0x64, 0x0, 0x2}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r7, &(0x7f0000000180)=[{}], 0x1, 0xdeb, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x58) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r10, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000200000006000f00b74b0000eb9e083212073b1aa8668b56ce573f02f71f1d7675cf39a0a75468da9b8f32d32b6ebb37a1cdbf244f58ce17dba33678d934c659258fb14ca66a3db560e606d395435813e79f668ec1a6d5f37d604b99a1f4c4a38eabeb0f4b0b3b94688b3015bc77795f1edb6d63aa61bf64cdb40e0adc068e85cd2331b5436a2f944ea1b460df480c9ba50946e07a3159684887bc83273ad7e96cb2b69405d17e6bed237dc8dcd5e9be8a8ee8ca3b9bf35779adc86acd065c2c15156c1bb13e2d9f994cfb34b5f2f6f85e445597ee562ce9ca45180ab9589a2c7f437801012d1f3a"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10}, {0x6, 0x0, 0x0, 0x8007}]}) 2.113686363s ago: executing program 32 (id=2451): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000068000100030000000000008000000000000000000c000200010000000600000008000500", @ANYRES32=0x0, @ANYBLOB="0eab6b5e6220ba0f2bc1bcb4025c2dc3393d183d767c65287f298e9741e82f98006dcc3a7445594bf504a9131ddbd0c1be044699a3d856f0bbb6bc502bae33c4a4f1b16e82686149b70427823e69d0245d13f18d8fbf4b2fa62ada975da787a6092d08a07c46f6fb6cd3fd25653d0cb28617783dece82b19f6e47d8f9114a20b2e51a0063cbb6c666d10af3d4ecf6f762075698ea3a8d3e6df2e559620eccf652f93b9d223551a39451ab5a45fe5387513a16720f20332b4d3b566007f103d0bb1cb97ee74fa9f7618e29cba04acf100cb6dedbe8216d434ad8d3301825b36d86a575c52c1cf6c4815bfb3c25efcdb9d7a8c12bb78462963cfdd1488dc688b9efda69cfb"], 0x2c}}, 0x40000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1.08775799s ago: executing program 33 (id=2457): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.057508227s ago: executing program 34 (id=2474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'veth1_to_batadv\x00', @link_local}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 37.776661ms ago: executing program 35 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) sendmsg$NL80211_CMD_DEL_MPATH(r3, 0x0, 0x24004801) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r10, @ANYBLOB="050003"], 0x28}}, 0x80) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) getsockopt$inet6_opts(r6, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000840)) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r12, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf254300000008000300", @ANYRES32=r13, @ANYBLOB='\f\x00X\x00w\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00?'], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x20000804) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3936, 0x7e}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xc2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x4000090) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 0s ago: executing program 36 (id=2482): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d4e"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600100004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @typed={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r2, 0xe, 0x1, 0xac, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000008000000000000000000000000000007000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000100000000000000000044010500ac1414bb000000000000000000000000000000086c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001009500fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000003200000002000000ac141400000000000000000000000000fffffffff0"], 0x1fc}}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/100, 0x189, 0x64, 0x0, 0x2}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r7, &(0x7f0000000180)=[{}], 0x1, 0xdeb, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x58) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r10, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000200000006000f00b74b0000eb9e083212073b1aa8668b56ce573f02f71f1d7675cf39a0a75468da9b8f32d32b6ebb37a1cdbf244f58ce17dba33678d934c659258fb14ca66a3db560e606d395435813e79f668ec1a6d5f37d604b99a1f4c4a38eabeb0f4b0b3b94688b3015bc77795f1edb6d63aa61bf64cdb40e0adc068e85cd2331b5436a2f944ea1b460df480c9ba50946e07a3159684887bc83273ad7e96cb2b69405d17e6bed237dc8dcd5e9be8a8ee8ca3b9bf35779adc86acd065c2c15156c1bb13e2d9f994cfb34b5f2f6f85e445597ee562ce9ca45180ab9589a2c7f437801012d1f3a"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10}, {0x6, 0x0, 0x0, 0x8007}]}) kernel console output (not intermixed with test programs): [ 92.664356][ T2122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.678789][ T5836] veth0_macvtap: entered promiscuous mode [ 92.723805][ T5836] veth1_macvtap: entered promiscuous mode [ 92.795242][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.820696][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.836338][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.875950][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.920378][ T80] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.945110][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.966358][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.974582][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.999066][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.010028][ T80] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.108393][ T5980] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9'. [ 93.480817][ T6002] netlink: 160 bytes leftover after parsing attributes in process `syz.0.13'. [ 93.503715][ T6002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13'. [ 93.521647][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 93.611105][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.640575][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.044333][ T5855] Bluetooth: hci0: command tx timeout [ 94.045584][ T5852] Bluetooth: hci2: command tx timeout [ 94.055321][ T5854] Bluetooth: hci1: command tx timeout [ 94.122274][ T5854] Bluetooth: hci4: command tx timeout [ 94.132642][ T5854] Bluetooth: hci3: command tx timeout [ 94.529043][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.561995][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.729243][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.987975][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.989034][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 95.036559][ T6031] syz.3.22 uses obsolete (PF_INET,SOCK_PACKET) [ 95.134940][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 95.206556][ T6025] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20'. [ 95.276469][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 95.813883][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 95.872040][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 95.881028][ T6069] Zero length message leads to an empty skb [ 96.115640][ T6079] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:0 [ 96.160411][ T6086] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 96.192202][ T6079] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 96.219172][ T6083] netlink: 'syz.0.38': attribute type 2 has an invalid length. [ 96.254554][ T6083] netlink: 'syz.0.38': attribute type 8 has an invalid length. [ 96.726979][ T6111] xt_CT: No such helper "pptp" [ 97.122456][ T6126] netlink: zone id is out of range [ 97.127635][ T6126] netlink: zone id is out of range [ 97.152175][ T6126] netlink: zone id is out of range [ 97.157340][ T6126] netlink: zone id is out of range [ 97.174729][ T6126] netlink: zone id is out of range [ 97.179950][ T6126] netlink: zone id is out of range [ 97.192955][ T6126] netlink: zone id is out of range [ 97.198103][ T6126] netlink: set zone limit has 4 unknown bytes [ 97.450974][ T6141] lo: entered promiscuous mode [ 97.482542][ T6141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.526471][ T6145] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 97.687602][ T6150] SET target dimension over the limit! [ 97.724752][ T30] audit: type=1800 audit(1765546116.938:2): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.57" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=60 res=0 errno=0 [ 97.758474][ T6153] xt_l2tp: wrong L2TP version: 0 [ 97.880744][ T6163] netlink: 'syz.1.59': attribute type 6 has an invalid length. [ 98.194922][ T6178] netlink: 'syz.1.64': attribute type 6 has an invalid length. [ 98.218901][ T6178] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 98.231723][ T6178] netlink: 'syz.1.64': attribute type 2 has an invalid length. [ 98.331272][ T6187] __nla_validate_parse: 13 callbacks suppressed [ 98.331293][ T6187] netlink: 32 bytes leftover after parsing attributes in process `syz.3.67'. [ 98.530644][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'. [ 98.540818][ T6197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.70'. [ 98.550747][ T6194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.71'. [ 98.560931][ T6195] hsr_slave_0: left promiscuous mode [ 98.570950][ T6195] hsr_slave_1: left promiscuous mode [ 98.693981][ T6209] netlink: 96 bytes leftover after parsing attributes in process `syz.1.74'. [ 98.705660][ T6162] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 98.726643][ T6208] sctp: [Deprecated]: syz.2.75 (pid 6208) Use of int in maxseg socket option. [ 98.726643][ T6208] Use struct sctp_assoc_value instead [ 98.805000][ T6211] syzkaller0: entered promiscuous mode [ 98.824595][ T6211] syzkaller0: entered allmulticast mode [ 98.864207][ T6215] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.76'. [ 98.953720][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 98.975289][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 99.015113][ T6218] bridge0: port 3(vlan2) entered blocking state [ 99.024073][ T6218] bridge0: port 3(vlan2) entered disabled state [ 99.041264][ T6218] vlan2: entered allmulticast mode [ 99.065126][ T6218] bridge0: entered allmulticast mode [ 99.079039][ T6218] vlan2: left allmulticast mode [ 99.085338][ T6218] bridge0: left allmulticast mode [ 99.883934][ T5854] Bluetooth: hci0: command 0x080f tx timeout [ 99.991835][ T6266] netlink: 'syz.0.88': attribute type 29 has an invalid length. [ 100.022713][ T6266] netlink: 'syz.0.88': attribute type 29 has an invalid length. [ 100.041679][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.92'. [ 100.055056][ T6266] netlink: 500 bytes leftover after parsing attributes in process `syz.0.88'. [ 100.130254][ T6276] net veth1_virt_wifi .: renamed from virt_wifi0 [ 100.218580][ T6281] netlink: 'syz.1.95': attribute type 6 has an invalid length. [ 100.377498][ T6284] bridge1: entered promiscuous mode [ 100.440552][ T6284] bridge1: entered allmulticast mode [ 100.772660][ T6307] 8021q: VLANs not supported on ip_vti0 [ 100.801965][ T6308] 8021q: VLANs not supported on ip_vti0 [ 101.465252][ T6356] warning: `syz.4.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.626483][ T6419] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 102.656395][ T6419] net_ratelimit: 2 callbacks suppressed [ 102.656413][ T6419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.099048][ T6451] netlink: 'syz.0.143': attribute type 32 has an invalid length. [ 103.250475][ T6451] bond1: option coupled_control: invalid value (52) [ 103.271135][ T6451] bond1 (unregistering): Released all slaves [ 103.351795][ T6474] __nla_validate_parse: 43 callbacks suppressed [ 103.351813][ T6474] netlink: 108 bytes leftover after parsing attributes in process `syz.1.144'. [ 103.391083][ T6457] syzkaller1: entered promiscuous mode [ 103.399124][ T6478] netlink: 'syz.3.147': attribute type 58 has an invalid length. [ 103.405454][ T6457] syzkaller1: entered allmulticast mode [ 103.408158][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 103.537125][ T6481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.746693][ T6488] block nbd1: NBD_DISCONNECT [ 103.948079][ T6501] netlink: 'syz.1.154': attribute type 21 has an invalid length. [ 103.956955][ T6501] netlink: 156 bytes leftover after parsing attributes in process `syz.1.154'. [ 104.229977][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 104.241157][ T6516] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 104.249558][ T6516] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 104.257913][ T6516] netlink: 'syz.1.157': attribute type 2 has an invalid length. [ 104.267481][ T6516] netlink: 68 bytes leftover after parsing attributes in process `syz.1.157'. [ 104.322732][ T6507] netlink: 324 bytes leftover after parsing attributes in process `syz.4.155'. [ 104.341344][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 104.499983][ T6529] netlink: 48 bytes leftover after parsing attributes in process `syz.3.158'. [ 104.564088][ T6527] netlink: 'syz.4.161': attribute type 83 has an invalid length. [ 104.779527][ T6541] netlink: 76 bytes leftover after parsing attributes in process `syz.4.166'. [ 104.810299][ T6541] netlink: 76 bytes leftover after parsing attributes in process `syz.4.166'. [ 104.856340][ T6544] lo speed is unknown, defaulting to 1000 [ 104.865948][ T6544] lo speed is unknown, defaulting to 1000 [ 104.876305][ T6544] lo speed is unknown, defaulting to 1000 [ 104.888676][ T6544] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.936228][ T6544] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.996624][ T6555] netlink: 'syz.4.169': attribute type 21 has an invalid length. [ 105.016974][ T6544] lo speed is unknown, defaulting to 1000 [ 105.038666][ T6544] lo speed is unknown, defaulting to 1000 [ 105.060102][ T6544] lo speed is unknown, defaulting to 1000 [ 105.069035][ T6544] lo speed is unknown, defaulting to 1000 [ 105.080250][ T6544] lo speed is unknown, defaulting to 1000 [ 105.155667][ T6561] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 105.245717][ T6562] pimreg: entered allmulticast mode [ 105.261470][ T6561] bridge0: port 3(team0) entered blocking state [ 105.280497][ T6561] bridge0: port 3(team0) entered disabled state [ 105.289522][ T6561] team0: entered allmulticast mode [ 105.296703][ T6561] team_slave_0: entered allmulticast mode [ 105.302964][ T6561] team_slave_1: entered allmulticast mode [ 105.311695][ T6561] team0: entered promiscuous mode [ 105.317294][ T6561] team_slave_0: entered promiscuous mode [ 105.327212][ T6561] team_slave_1: entered promiscuous mode [ 105.342979][ T6561] bridge0: port 3(team0) entered blocking state [ 105.349730][ T6561] bridge0: port 3(team0) entered forwarding state [ 105.396253][ T6571] syzkaller1: entered promiscuous mode [ 105.401853][ T6571] syzkaller1: entered allmulticast mode [ 105.418828][ T6571] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.425636][ T6571] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 105.954079][ T6601] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 106.205140][ T6615] nbd: socks must be embedded in a SOCK_ITEM attr [ 106.299947][ T6618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.304789][ T6615] bond2: (slave geneve2): making interface the new active one [ 106.318060][ T6615] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 106.334877][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.367237][ T5953] IPVS: starting estimator thread 0... [ 106.382882][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.429280][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.460230][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.512150][ T6621] IPVS: using max 33 ests per chain, 79200 per kthread [ 106.527523][ T6627] Bluetooth: MGMT ver 1.23 [ 107.579434][ T6677] IPVS: Error connecting to the multicast addr [ 107.899618][ T6689] delete_channel: no stack [ 107.920207][ T6689] syz_tun: entered allmulticast mode [ 107.953271][ T6687] syz_tun: left allmulticast mode [ 108.358160][ T6715] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 108.640583][ T6736] netlink: 'syz.2.217': attribute type 11 has an invalid length. [ 108.694193][ T6728] bridge0: port 3(team0) entered disabled state [ 108.700893][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.709287][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.829895][ T6726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.923842][ T6738] __nla_validate_parse: 12 callbacks suppressed [ 108.923864][ T6738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.218'. [ 108.965234][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 109.131478][ T6726] pim6reg: entered allmulticast mode [ 109.147505][ T6748] Illegal XDP return value 4294967289 on prog (id 35) dev N/A, expect packet loss! [ 109.229144][ T6753] validate_nla: 2 callbacks suppressed [ 109.229168][ T6753] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 109.356912][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 109.584031][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 109.741044][ T6776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.228'. [ 109.967356][ T6784] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 109.999434][ T6785] veth0_to_bond: entered allmulticast mode [ 110.057793][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 110.097369][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 110.137867][ T6797] netlink: 92 bytes leftover after parsing attributes in process `syz.1.235'. [ 110.326168][ T6809] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 111.213462][ T6827] syzkaller0: entered allmulticast mode [ 111.230391][ T6831] x_tables: duplicate entry at hook 2 [ 111.243847][ T6832] x_tables: duplicate entry at hook 2 [ 111.273168][ T6835] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 111.295322][ T6835] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 111.353012][ T6842] netlink: 204 bytes leftover after parsing attributes in process `syz.3.249'. [ 111.648666][ T5965] IPVS: starting estimator thread 0... [ 111.657485][ T6856] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 111.669322][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 111.685354][ T6856] netlink: 'syz.0.253': attribute type 19 has an invalid length. [ 111.762101][ T6858] IPVS: using max 28 ests per chain, 67200 per kthread [ 112.240260][ T6891] vxcan2: entered allmulticast mode [ 112.332199][ T6897] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 112.354947][ T6897] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 112.766627][ T6916] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 112.813471][ T6916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.919663][ T6919] netlink: 'syz.1.274': attribute type 2 has an invalid length. [ 113.017844][ T6925] veth0: entered promiscuous mode [ 113.359621][ T6949] Cannot find add_set index 65532 as target [ 113.444274][ T6955] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 113.488629][ T6955] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 113.502569][ T6955] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 113.522388][ T6955] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 113.543801][ T6955] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 113.552608][ T6955] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 113.602978][ T6962] delete_channel: no stack [ 113.641536][ T6962] Bluetooth: MGMT ver 1.23 [ 113.663445][ T6960] 0: reclassify loop, rule prio 0, protocol 800 [ 113.675701][ T6962] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 114.108382][ T6994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.251103][ T7004] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.262284][ T7004] validate_nla: 124 callbacks suppressed [ 114.262306][ T7004] netlink: 'syz.0.300': attribute type 5 has an invalid length. [ 114.391692][ T7012] __nla_validate_parse: 8 callbacks suppressed [ 114.391716][ T7012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'. [ 114.561150][ T7024] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.307'. [ 114.661778][ T7028] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 114.714437][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.309'. [ 114.725629][ T7028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.799420][ T7028] bond3: (slave ip6gretap1): making interface the new active one [ 114.809251][ T7028] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 114.924430][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 114.968779][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 115.053061][ T7049] pim6reg: entered allmulticast mode [ 115.146637][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 115.484363][ T7078] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 115.500137][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 115.510919][ T7079] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 115.530012][ T7081] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 115.574040][ T7081] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 115.587957][ T7081] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 115.599187][ T7081] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 115.609092][ T7081] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 115.953777][ T7105] netlink: 216 bytes leftover after parsing attributes in process `syz.3.331'. [ 115.965432][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 115.984331][ T7107] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 115.993574][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 116.331546][ T7132] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 116.832552][ T7169] pimreg: left allmulticast mode [ 116.957937][ T7179] sctp: [Deprecated]: syz.4.355 (pid 7179) Use of int in max_burst socket option. [ 116.957937][ T7179] Use struct sctp_assoc_value instead [ 117.057884][ T7177] bond1: entered promiscuous mode [ 117.064210][ T7177] bond1: entered allmulticast mode [ 117.070284][ T7177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.646981][ T7210] hsr_slave_1 (unregistering): left promiscuous mode [ 117.714806][ T7216] veth0: entered promiscuous mode [ 117.749820][ T7209] veth0: left promiscuous mode [ 117.869933][ T7227] bond2 (unregistering): Released all slaves [ 117.940991][ T7224] syzkaller0: entered promiscuous mode [ 117.946595][ T7224] syzkaller0: entered allmulticast mode [ 117.970369][ T7232] ip6tnl1: entered promiscuous mode [ 117.978210][ T7232] ip6tnl1: entered allmulticast mode [ 118.286540][ T6653] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.303467][ T6653] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.314447][ T7247] trusted_key: syz.0.375 sent an empty control message without MSG_MORE. [ 118.323925][ T6653] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.334260][ T6653] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.938816][ T7282] xt_addrtype: ipv6 does not support BROADCAST matching [ 119.377052][ T7312] Bluetooth: MGMT ver 1.23 [ 119.404227][ T7316] validate_nla: 6 callbacks suppressed [ 119.404250][ T7316] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 119.443213][ T7316] __nla_validate_parse: 24 callbacks suppressed [ 119.443235][ T7316] netlink: 228 bytes leftover after parsing attributes in process `syz.0.398'. [ 119.796719][ T7316] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 119.886968][ T7316] netlink: 228 bytes leftover after parsing attributes in process `syz.0.398'. [ 120.022296][ T7316] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 120.042569][ T7316] netlink: 228 bytes leftover after parsing attributes in process `syz.0.398'. [ 120.087145][ T7316] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 120.103875][ T7316] netlink: 228 bytes leftover after parsing attributes in process `syz.0.398'. [ 120.119277][ T7316] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 120.129292][ T7343] delete_channel: no stack [ 120.142349][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 120.162809][ T7316] netlink: 228 bytes leftover after parsing attributes in process `syz.0.398'. [ 120.181726][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 120.192492][ T7316] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 120.200265][ T7316] netlink: 228 bytes leftover after parsing attributes in process `syz.0.398'. [ 120.505314][ T7363] netlink: 'syz.2.408': attribute type 25 has an invalid length. [ 120.627855][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 121.081200][ T7390] xt_hashlimit: invalid rate [ 121.606996][ T7419] openvswitch: netlink: EtherType 50a is less than min 600 [ 121.613608][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 121.944104][ T7439] sctp: [Deprecated]: syz.1.432 (pid 7439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.944104][ T7439] Use struct sctp_sack_info instead [ 122.503300][ T7469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.425317][ T65] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.458750][ T65] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.523548][ T65] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.545041][ T7516] batadv_slave_1: entered promiscuous mode [ 123.607128][ T65] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.628688][ T7522] x_tables: duplicate underflow at hook 3 [ 123.703105][ T7514] batadv_slave_1: left promiscuous mode [ 124.181021][ T7544] netlink: 'syz.0.455': attribute type 33 has an invalid length. [ 124.493643][ T7557] lo speed is unknown, defaulting to 1000 [ 124.532102][ T7563] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 124.573126][ T7556] lo speed is unknown, defaulting to 1000 [ 124.683775][ T7563] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 124.758721][ T7568] __nla_validate_parse: 8 callbacks suppressed [ 124.758758][ T7568] netlink: 68 bytes leftover after parsing attributes in process `syz.2.460'. [ 124.843098][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 124.876036][ T7571] IPVS: ip_vs_add_dest(): server weight less than zero [ 124.886672][ T5840] IPVS: starting estimator thread 0... [ 125.008709][ T7575] IPVS: using max 31 ests per chain, 74400 per kthread [ 125.077190][ T7576] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 125.144630][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 125.217805][ T7590] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 125.557457][ T7602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.467617][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'. [ 126.567594][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 126.798299][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 126.883439][ T7673] bond2: Removing last arp target with arp_interval on [ 126.896562][ T7680] netlink: 'syz.2.490': attribute type 12 has an invalid length. [ 126.928528][ T7680] netlink: 'syz.2.490': attribute type 29 has an invalid length. [ 126.951177][ T7680] netlink: 148 bytes leftover after parsing attributes in process `syz.2.490'. [ 127.022390][ T7680] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 127.029625][ T7684] xt_HMARK: spi-set and port-set can't be combined [ 127.040101][ T7680] netlink: 'syz.2.490': attribute type 3 has an invalid length. [ 127.050384][ T7680] netlink: 15 bytes leftover after parsing attributes in process `syz.2.490'. [ 127.094769][ T7690] netlink: 'syz.1.492': attribute type 2 has an invalid length. [ 127.156449][ T7690] : entered promiscuous mode [ 127.184574][ T7684] syzkaller1: entered promiscuous mode [ 127.235983][ T7684] syzkaller1: entered allmulticast mode [ 127.446787][ T7721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.631462][ T7728] siw: device registration error -23 [ 127.649330][ T7723] geneve3: entered promiscuous mode [ 127.879632][ T7739] netlink: 'syz.1.503': attribute type 30 has an invalid length. [ 127.905251][ T7741] raw_sendmsg: syz.2.502 forgot to set AF_INET. Fix it! [ 127.985364][ T7736] bond2 (unregistering): Released all slaves [ 128.263403][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 128.297862][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 128.459727][ T7770] xfrm1: entered allmulticast mode [ 128.672657][ T7785] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 128.754446][ T7792] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.837309][ T7794] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 128.972663][ T7792] syz.1.514 (7792) used greatest stack depth: 15968 bytes left [ 129.131789][ T7805] netlink: 'syz.1.521': attribute type 7 has an invalid length. [ 129.149940][ T7805] netlink: 'syz.1.521': attribute type 8 has an invalid length. [ 129.510752][ T7826] macvlan0: entered promiscuous mode [ 129.518321][ T7822] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 129.528554][ T5889] IPVS: starting estimator thread 0... [ 129.545166][ T7822] xt_ecn: cannot match TCP bits for non-tcp packets [ 129.642686][ T7827] IPVS: using max 27 ests per chain, 64800 per kthread [ 129.684572][ T7836] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.772254][ T7840] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 130.267665][ T7856] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 130.321831][ T7856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.472137][ T7873] __nla_validate_parse: 8 callbacks suppressed [ 130.472158][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 130.536312][ T7875] netlink: 104 bytes leftover after parsing attributes in process `syz.3.543'. [ 130.545926][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.546'. [ 130.558643][ T7881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.547'. [ 130.595719][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 130.712712][ T7884] netlink: 184 bytes leftover after parsing attributes in process `syz.0.549'. [ 130.871303][ T7897] bond3: entered promiscuous mode [ 130.876549][ T7897] bond3: entered allmulticast mode [ 130.882791][ T7897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.608763][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 132.076502][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 132.105353][ T7942] validate_nla: 3 callbacks suppressed [ 132.105371][ T7942] netlink: 'syz.0.566': attribute type 5 has an invalid length. [ 132.122169][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.566'. [ 132.159080][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 133.128545][ T7969] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 133.155671][ T7977] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 133.181145][ T7969] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 133.240445][ T7980] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 133.257103][ T7980] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 133.326013][ T7980] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 133.526977][ T8001] syzkaller1: entered promiscuous mode [ 133.546969][ T8001] syzkaller1: entered allmulticast mode [ 133.654811][ T8010] x_tables: duplicate underflow at hook 1 [ 133.888851][ T8013] netlink: 'syz.2.586': attribute type 2 has an invalid length. [ 133.945548][ T8013] : entered promiscuous mode [ 134.013965][ T8036] ipt_REJECT: ECHOREPLY no longer supported. [ 134.377161][ T8050] macvtap0: Device is already in use. [ 134.408943][ T8053] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 134.512751][ T8053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.575230][ T8058] bond4: (slave geneve2): making interface the new active one [ 134.587095][ T8058] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 134.847432][ T8075] netlink: 'syz.2.600': attribute type 12 has an invalid length. [ 135.088737][ T8097] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 135.199760][ T8104] netlink: 'syz.4.608': attribute type 1 has an invalid length. [ 135.304534][ T8104] bond1: entered promiscuous mode [ 135.310796][ T8104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.345340][ T8104] bond1: (slave bridge1): making interface the new active one [ 135.353354][ T8104] bridge1: entered promiscuous mode [ 135.361257][ T8104] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 135.570709][ T8129] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 135.655651][ T8137] netlink: 'syz.4.617': attribute type 2 has an invalid length. [ 135.688952][ T8137] netlink: 'syz.4.617': attribute type 11 has an invalid length. [ 135.716888][ T8137] __nla_validate_parse: 12 callbacks suppressed [ 135.716907][ T8137] netlink: 132 bytes leftover after parsing attributes in process `syz.4.617'. [ 135.756734][ T8139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.988757][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 136.069814][ T8162] netlink: 1 bytes leftover after parsing attributes in process `syz.2.623'. [ 136.079378][ T8162] xt_policy: neither incoming nor outgoing policy selected [ 136.260475][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 136.621291][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 136.638695][ T8200] nbd: must specify a size in bytes for the device [ 136.731793][ T8204] netlink: 156 bytes leftover after parsing attributes in process `syz.4.637'. [ 136.743419][ T8204] netlink: 156 bytes leftover after parsing attributes in process `syz.4.637'. [ 136.914646][ T5840] lo speed is unknown, defaulting to 1000 [ 137.023732][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 137.058168][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 137.096820][ T8219] bridge_slave_1 (unregistering): left allmulticast mode [ 137.112204][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.131193][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 137.241310][ T8232] validate_nla: 1 callbacks suppressed [ 137.241332][ T8232] netlink: 'syz.0.643': attribute type 3 has an invalid length. [ 137.379757][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.387580][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.533503][ T8243] netlink: 'syz.2.649': attribute type 14 has an invalid length. [ 137.541306][ T8243] netlink: 'syz.2.649': attribute type 13 has an invalid length. [ 137.561718][ T8250] tipc: Enabling of bearer rejected, failed to enable media [ 137.581434][ T8250] netlink: 'syz.0.650': attribute type 4 has an invalid length. [ 137.810661][ T8267] netlink: 'syz.3.657': attribute type 4 has an invalid length. [ 138.053621][ T8282] netlink: 'syz.1.662': attribute type 11 has an invalid length. [ 138.075373][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.084826][ T8282] netlink: 'syz.1.662': attribute type 11 has an invalid length. [ 138.094136][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.119625][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.147037][ T8269] infiniband sy: set down [ 138.148479][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.172072][ T8269] infiniband sy: added bond_slave_0 [ 138.289771][ T8269] RDS/IB: sy: added [ 138.294764][ T8269] smc: adding ib device sy with port count 1 [ 138.301508][ T8269] smc: ib device sy port 1 has no pnetid [ 138.398034][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.404783][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.000396][ T8321] openvswitch: netlink: Multiple metadata blocks provided [ 139.208538][ T8335] bond2: ARP target 1.0.0.0 is already present [ 139.216633][ T8335] bond2: option arp_ip_target: invalid value (1) [ 139.234359][ T8335] bond2 (unregistering): Released all slaves [ 139.381278][ T8343] veth0: entered promiscuous mode [ 139.397448][ T8340] veth0: left promiscuous mode [ 139.581459][ T8353] xt_ipcomp: unknown flags 1D [ 139.592744][ T8349] tipc: Started in network mode [ 139.613907][ T8349] tipc: Node identity 8a03794ce027, cluster identity 4711 [ 139.681464][ T8349] tipc: Enabled bearer , priority 0 [ 139.705950][ T8351] syzkaller0: entered allmulticast mode [ 139.804193][ T8365] lo: entered promiscuous mode [ 139.809570][ T8365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.885168][ T8349] tipc: Resetting bearer [ 139.989804][ T8349] tipc: Disabling bearer [ 140.301834][ T8387] veth0_to_bridge: entered promiscuous mode [ 140.341064][ T8388] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 140.373308][ T8385] veth0_to_bridge: left promiscuous mode [ 140.530324][ T8394] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 141.041276][ T8420] openvswitch: netlink: Missing key (keys=40, expected=80) [ 141.313864][ T8439] __nla_validate_parse: 21 callbacks suppressed [ 141.313883][ T8439] netlink: 9 bytes leftover after parsing attributes in process `syz.1.706'. [ 141.856336][ T8463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.901146][ T8463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.960873][ T8477] wireguard: wg2: Could not create IPv4 socket [ 141.987993][ T8477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.717'. [ 142.337368][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 142.419986][ T8504] tipc: Started in network mode [ 142.452316][ T8504] tipc: Node identity 14a4ee1ee438, cluster identity 4711 [ 142.481558][ T8504] tipc: Enabled bearer , priority 2 [ 142.496557][ T8510] netlink: 'syz.3.726': attribute type 21 has an invalid length. [ 142.512099][ T8510] netlink: 'syz.3.726': attribute type 22 has an invalid length. [ 142.531748][ T8510] netlink: 'syz.3.726': attribute type 23 has an invalid length. [ 142.541048][ T8510] netlink: 'syz.3.726': attribute type 25 has an invalid length. [ 142.553589][ T8510] netlink: 'syz.3.726': attribute type 26 has an invalid length. [ 142.563020][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.726'. [ 142.577859][ T8510] tipc: Enabling of bearer rejected, failed to enable media [ 142.592849][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.727'. [ 142.596020][ T8516] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 142.602574][ T8512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.727'. [ 142.621436][ T8512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.727'. [ 142.624468][ T8516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.794018][ T8525] netlink: 72 bytes leftover after parsing attributes in process `syz.0.729'. [ 142.852709][ T8525] bond2 (unregistering): Released all slaves [ 142.889418][ T8530] netlink: 104 bytes leftover after parsing attributes in process `syz.1.730'. [ 142.993713][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'. [ 143.255205][ T8552] xt_hashlimit: size too large, truncated to 1048576 [ 143.594705][ T5965] tipc: Node number set to 4036816414 [ 143.914126][ T8575] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.546187][ T8624] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 145.055098][ T8659] netlink: 'syz.4.771': attribute type 3 has an invalid length. [ 145.290808][ T8675] vlan3: entered allmulticast mode [ 145.301182][ T8675] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 145.403823][ T8677] syzkaller0: entered promiscuous mode [ 145.409483][ T8677] syzkaller0: entered allmulticast mode [ 145.426947][ T8681] netlink: 'syz.0.782': attribute type 10 has an invalid length. [ 145.453025][ T8681] dummy0: entered promiscuous mode [ 145.461618][ T8681] bridge0: port 3(dummy0) entered blocking state [ 145.469266][ T8681] bridge0: port 3(dummy0) entered disabled state [ 145.486794][ T8681] dummy0: entered allmulticast mode [ 145.499418][ T8681] bridge0: port 3(dummy0) entered blocking state [ 145.506049][ T8681] bridge0: port 3(dummy0) entered forwarding state [ 145.574572][ T8692] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 146.050896][ T8720] sctp: [Deprecated]: syz.0.795 (pid 8720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.050896][ T8720] Use struct sctp_sack_info instead [ 146.352772][ T8731] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 146.454125][ T8733] __nla_validate_parse: 19 callbacks suppressed [ 146.454147][ T8733] netlink: 44 bytes leftover after parsing attributes in process `syz.3.801'. [ 146.488033][ T8733] netlink: 43 bytes leftover after parsing attributes in process `syz.3.801'. [ 146.498721][ T8733] netlink: 'syz.3.801': attribute type 6 has an invalid length. [ 146.512215][ T8733] netlink: 'syz.3.801': attribute type 5 has an invalid length. [ 146.524191][ T8733] netlink: 43 bytes leftover after parsing attributes in process `syz.3.801'. [ 146.779204][ T8756] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 146.832634][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 146.864315][ T8760] netlink: 666 bytes leftover after parsing attributes in process `syz.3.809'. [ 146.929814][ T8762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.810'. [ 147.173438][ T8781] netlink: 112 bytes leftover after parsing attributes in process `syz.3.816'. [ 147.215467][ T8781] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 147.227784][ T8783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.818'. [ 147.473905][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 147.498126][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 148.024824][ T8818] udevd[8818]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 148.049606][ T8818] udevd[8818]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 148.743132][ T8785] syzkaller0: entered allmulticast mode [ 148.775696][ T8810] : renamed from bond_slave_0 (while UP) [ 149.042918][ T8839] openvswitch: netlink: Message has 536 unknown bytes. [ 149.049865][ T8839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.564520][ T8886] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 149.671201][ T8886] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.798515][ T8894] bond5: (slave veth5): Enslaving as an active interface with a down link [ 149.829213][ T8901] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 149.865152][ T8894] vlan2: entered allmulticast mode [ 149.870584][ T8894] veth1: entered allmulticast mode [ 149.878548][ T8894] veth1: entered promiscuous mode [ 149.881205][ T8899] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 149.888484][ T8894] veth1: left promiscuous mode [ 149.898884][ T8894] bond5: (slave vlan2): making interface the new active one [ 149.908028][ T8894] veth1: entered promiscuous mode [ 149.914246][ T8894] vlan2: entered promiscuous mode [ 149.920020][ T8894] bond5: (slave vlan2): Enslaving as an active interface with an up link [ 150.655513][ T8943] bond0: entered promiscuous mode [ 150.660704][ T8943] bond_slave_0: entered promiscuous mode [ 150.671071][ T8943] bond_slave_1: entered promiscuous mode [ 150.693657][ T8943] bond0: left promiscuous mode [ 150.704276][ T8943] bond_slave_0: left promiscuous mode [ 150.725799][ T8943] bond_slave_1: left promiscuous mode [ 150.799837][ T8951] Bluetooth: hci1: too big key_count value 32778 [ 151.023492][ T8962] bond6: option resend_igmp: invalid value (32767) [ 151.030682][ T8962] bond6: option resend_igmp: allowed values 0 - 255 [ 151.053363][ T8962] bond6 (unregistering): Released all slaves [ 151.773321][ T9010] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 152.100885][ T9022] __nla_validate_parse: 11 callbacks suppressed [ 152.100905][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.874'. [ 152.217717][ T9028] netlink: 512 bytes leftover after parsing attributes in process `syz.0.876'. [ 152.515771][ T9044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.878'. [ 152.709923][ T9056] netlink: 'syz.2.882': attribute type 13 has an invalid length. [ 152.924899][ T9056] gretap0: refused to change device tx_queue_len [ 152.974987][ T9056] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 153.216352][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.885'. [ 153.274181][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 153.547658][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 154.009958][ T9134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.901'. [ 154.046492][ T9136] lo speed is unknown, defaulting to 1000 [ 154.366066][ T9153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.907'. [ 154.420555][ T9158] netlink: 388 bytes leftover after parsing attributes in process `syz.2.907'. [ 154.718333][ T9166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.909'. [ 155.044322][ T9192] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 155.074777][ T9192] netlink: 'syz.3.916': attribute type 2 has an invalid length. [ 155.087882][ T9190] can: request_module (can-proto-5) failed. [ 155.099560][ T9192] netlink: 'syz.3.916': attribute type 2 has an invalid length. [ 155.232730][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.262567][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.269841][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.356249][ T9212] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 155.806214][ T9244] smc: net device gre0 applied user defined pnetid SYZ1 [ 155.890085][ T9247] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 155.979616][ T9245] Cannot find add_set index 0 as target [ 155.985800][ T9248] tipc: Started in network mode [ 155.991749][ T9248] tipc: Node identity 1e6fe412f475, cluster identity 4711 [ 156.000733][ T9248] tipc: Enabled bearer , priority 0 [ 156.024470][ T9248] ip6tnl0: entered promiscuous mode [ 156.029806][ T9248] ip6tnl0: entered allmulticast mode [ 156.092665][ T9258] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 156.103225][ T9248] tipc: Resetting bearer [ 156.211539][ T9246] tipc: Disabling bearer [ 156.281764][ T9262] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 156.330184][ T9265] netlink: 'syz.1.940': attribute type 29 has an invalid length. [ 157.272170][ T9321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.435365][ T9316] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 157.457178][ T9316] bond2 (unregistering): Released all slaves [ 157.506585][ T9326] netlink: 'syz.4.956': attribute type 1 has an invalid length. [ 157.536942][ T9326] __nla_validate_parse: 7 callbacks suppressed [ 157.536960][ T9326] netlink: 224 bytes leftover after parsing attributes in process `syz.4.956'. [ 157.614114][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.958'. [ 157.623996][ T9335] netlink: 44 bytes leftover after parsing attributes in process `syz.1.958'. [ 157.684376][ T9331] team0 (unregistering): Port device team_slave_0 removed [ 157.699555][ T9331] team0 (unregistering): Port device team_slave_1 removed [ 157.716512][ T9342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.960'. [ 157.892659][ T9333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.055068][ T9351] syzkaller0: entered promiscuous mode [ 158.088089][ T9351] syzkaller0: entered allmulticast mode [ 158.146557][ T9362] team_slave_0: entered promiscuous mode [ 158.152435][ T9362] team_slave_1: entered promiscuous mode [ 158.160254][ T9362] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 158.169665][ T9362] team0: Device macvtap1 is already an upper device of the team interface [ 158.200184][ T9362] team_slave_0: left promiscuous mode [ 158.205750][ T9362] team_slave_1: left promiscuous mode [ 158.232709][ T9373] netlink: 'syz.2.967': attribute type 17 has an invalid length. [ 158.240704][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 158.250107][ T9373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'. [ 158.268991][ T9373] erspan0: entered promiscuous mode [ 158.297491][ T9373] gretap0: entered promiscuous mode [ 158.367174][ T9379] netlink: 'syz.2.967': attribute type 17 has an invalid length. [ 158.375856][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 158.384933][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'. [ 159.567604][ T9399] netlink: 'syz.0.972': attribute type 3 has an invalid length. [ 159.672666][ T9406] ipt_REJECT: TCP_RESET invalid for non-tcp [ 159.711103][ T9408] netlink: 52 bytes leftover after parsing attributes in process `syz.1.976'. [ 159.731860][ T9408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.976'. [ 160.955416][ T9468] vlan4: entered promiscuous mode [ 160.973002][ T9468] bridge0: entered promiscuous mode [ 161.252803][ T2122] vlan2: left promiscuous mode [ 161.293582][ T9482] Only authenc() type AEADs are supported by ESSIV [ 161.773635][ T9532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 161.857985][ T9534] syz.1.1010 uses old SIOCAX25GETINFO [ 161.934260][ T9541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.462902][ T9580] syzkaller1: entered promiscuous mode [ 162.468438][ T9580] syzkaller1: entered allmulticast mode [ 162.488582][ T9572] validate_nla: 2 callbacks suppressed [ 162.488600][ T9572] netlink: 'syz.1.1024': attribute type 1 has an invalid length. [ 162.532034][ T9572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.647604][ T9591] __nla_validate_parse: 10 callbacks suppressed [ 162.647624][ T9591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1030'. [ 162.661092][ T9593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.726516][ T9595] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.746593][ T9597] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 163.337841][ T9634] netlink: zone id is out of range [ 163.344671][ T9634] netlink: zone id is out of range [ 163.349882][ T9634] netlink: zone id is out of range [ 163.362380][ T9634] netlink: get zone limit has 4 unknown bytes [ 163.474312][ T9644] netlink: 'syz.0.1049': attribute type 21 has an invalid length. [ 163.484429][ T9644] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 163.494931][ T9641] netlink: 'syz.2.1048': attribute type 11 has an invalid length. [ 163.499606][ T9647] netlink: 'syz.1.1050': attribute type 29 has an invalid length. [ 163.573707][ T9649] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1051'. [ 163.588623][ T9649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1051'. [ 163.598483][ T9651] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 163.766011][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1058'. [ 163.776312][ T9666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1058'. [ 163.955269][ T9681] openvswitch: netlink: IP tunnel dst address not specified [ 163.982956][ T9677] netlink: 'syz.1.1059': attribute type 11 has an invalid length. [ 163.992048][ T9677] netlink: 'syz.1.1059': attribute type 11 has an invalid length. [ 164.002382][ T9677] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1059'. [ 164.068585][ T9685] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.1064'. [ 164.170649][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 164.201077][ T9689] macvlan0: left promiscuous mode [ 164.219442][ T9689] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 164.220249][ T9693] netlink: 'syz.0.1067': attribute type 4 has an invalid length. [ 164.252115][ T9689] netlink: 'syz.3.1065': attribute type 2 has an invalid length. [ 164.253776][ T9693] netlink: 'syz.0.1067': attribute type 4 has an invalid length. [ 164.289828][ T9693] netlink: 'syz.0.1067': attribute type 4 has an invalid length. [ 164.462998][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 164.473293][ T9709] bridge0: port 3(dummy0) entered disabled state [ 164.479895][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.488068][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.548243][ T9710] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 164.564680][ T9712] ipt_REJECT: TCP_RESET invalid for non-tcp [ 164.593999][ T9710] xt_SECMARK: invalid mode: 9 [ 164.776430][ T9718] bond2 (unregistering): Released all slaves [ 165.200340][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 165.300031][ T9752] lo speed is unknown, defaulting to 1000 [ 165.708024][ T9782] veth0: entered promiscuous mode [ 165.717192][ T9780] veth0: left promiscuous mode [ 165.967722][ T9789] bridge4: entered allmulticast mode [ 166.371135][ T9812] lo speed is unknown, defaulting to 1000 [ 166.516709][ T9825] openvswitch: netlink: Missing key (keys=40, expected=100) [ 166.618623][ T9838] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 4, id = 0 [ 166.878640][ T5854] block nbd0: Receive control failed (result -32) [ 167.220312][ T9862] nbd: couldn't find device at index 1 [ 167.295261][ T9862] rdma_op ffff88807c0da1f0 conn xmit_rdma 0000000000000000 [ 167.315714][ T9854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.413005][ T9859] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.423274][ T9859] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.436072][ T9859] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 167.555690][ T9866] gretap1: entered promiscuous mode [ 167.565015][ T9866] bond6: (slave gretap1): making interface the new active one [ 167.573372][ T9866] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 167.599150][ T9871] macvlan2: entered promiscuous mode [ 167.604713][ T9871] macvlan2: entered allmulticast mode [ 167.610832][ T9871] bond6: entered promiscuous mode [ 167.617792][ T9871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.628841][ T9871] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 167.641425][ T9871] bond6: left promiscuous mode [ 167.820113][ T9890] __nla_validate_parse: 13 callbacks suppressed [ 167.820132][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 168.107700][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1114'. [ 168.117614][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 168.146999][ T9901] bridge_slave_1: left allmulticast mode [ 168.159378][ T9901] bridge_slave_1: left promiscuous mode [ 168.165933][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.192322][ T9901] bridge_slave_0: left allmulticast mode [ 168.206948][ T9901] bridge_slave_0: left promiscuous mode [ 168.214811][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.414569][ T9923] validate_nla: 36 callbacks suppressed [ 168.414590][ T9923] netlink: 'syz.1.1120': attribute type 10 has an invalid length. [ 168.429364][ T9923] veth0_virt_wifi: entered allmulticast mode [ 168.462545][ T9923] team0: Port device veth0_virt_wifi added [ 168.604132][ T9934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1123'. [ 169.070960][ T9961] xt_hashlimit: overflow, try lower: 3/0 [ 169.157262][ T9969] netlink: 'syz.1.1135': attribute type 29 has an invalid length. [ 169.447256][ T9988] netlink: 'syz.2.1140': attribute type 24 has an invalid length. [ 169.611420][T10001] netlink: 'syz.1.1143': attribute type 13 has an invalid length. [ 169.730160][T10001] tipc: Resetting bearer [ 169.740406][T10001] tipc: Resetting bearer [ 169.959920][T10011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1148'. [ 169.979283][T10010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1148'. [ 169.995399][T10013] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 170.045140][T10016] syzkaller0: entered promiscuous mode [ 170.050759][T10016] syzkaller0: entered allmulticast mode [ 170.066370][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 170.235384][T10027] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.305000][ T9995] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 170.505020][T10037] netlink: 'syz.2.1157': attribute type 21 has an invalid length. [ 170.543020][T10037] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1157'. [ 170.584683][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 170.797969][T10060] netlink: 'syz.3.1165': attribute type 4 has an invalid length. [ 170.811518][T10060] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1165'. [ 171.007384][T10071] netlink: 'syz.2.1171': attribute type 7 has an invalid length. [ 171.040537][T10075] sctp: [Deprecated]: syz.1.1169 (pid 10075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.040537][T10075] Use struct sctp_sack_info instead [ 171.194701][T10081] openvswitch: netlink: Flow actions attr not present in new flow. [ 171.251572][T10081] bond4: option all_slaves_active: invalid value (255) [ 171.264159][T10081] bond4 (unregistering): Released all slaves [ 171.512894][T10098] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 171.731349][T10109] netlink: 'syz.1.1181': attribute type 1 has an invalid length. [ 171.786369][T10113] syzkaller0: entered allmulticast mode [ 172.526728][T10155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.585484][T10168] netlink: 'syz.1.1202': attribute type 3 has an invalid length. [ 172.628147][T10166] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 172.692251][T10176] sctp: [Deprecated]: syz.0.1203 (pid 10176) Use of int in maxseg socket option. [ 172.692251][T10176] Use struct sctp_assoc_value instead [ 172.736672][T10155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.891659][T10155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.010054][T10155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.101361][T10197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.145900][T10204] netlink: 'syz.2.1208': attribute type 7 has an invalid length. [ 173.174909][T10204] dvmrp0: entered allmulticast mode [ 173.545818][T10220] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.629128][T10219] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.676841][T10219] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.694814][T10232] __nla_validate_parse: 7 callbacks suppressed [ 173.694833][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1215'. [ 173.718823][T10219] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.748389][T10234] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1216'. [ 173.920417][T10242] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 173.948549][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 174.027949][T10249] x_tables: duplicate underflow at hook 1 [ 174.256119][T10263] netlink: 'syz.1.1225': attribute type 3 has an invalid length. [ 174.265362][T10263] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1225'. [ 174.275021][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 174.288327][T10263] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1225'. [ 174.312091][T10263] netlink: 'syz.1.1225': attribute type 2 has an invalid length. [ 174.332260][T10263] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1225'. [ 174.640988][T10278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.667267][T10283] TCP: TCP_TX_DELAY enabled [ 175.028519][T10291] tipc: Resetting bearer [ 175.095979][T10291] tipc: Disabling bearer [ 175.150058][T10293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1235'. [ 175.162674][T10293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1235'. [ 175.174956][T10293] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 175.208318][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 176.149048][T10360] GUP no longer grows the stack in syz.2.1255 (10360): 200000003000-20000000a000 (200000001000) [ 176.160399][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.2.1255 Not tainted syzkaller #0 PREEMPT(full) [ 176.160431][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.160452][T10360] Call Trace: [ 176.160466][T10360] [ 176.160476][T10360] dump_stack_lvl+0x189/0x250 [ 176.160511][T10360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.160536][T10360] ? __pfx__printk+0x10/0x10 [ 176.160562][T10360] ? find_vma+0xe7/0x160 [ 176.160603][T10360] __get_user_pages+0x2470/0x2a00 [ 176.160634][T10360] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 176.160684][T10360] ? rcu_is_watching+0x15/0xb0 [ 176.160716][T10360] __gup_longterm_locked+0xde4/0x1660 [ 176.160747][T10360] ? try_grab_folio_fast+0x1bf/0x6a0 [ 176.160784][T10360] ? gup_fast_fallback+0x1b86/0x22d0 [ 176.160812][T10360] gup_fast_fallback+0x1d65/0x22d0 [ 176.160877][T10360] ? __pfx_gup_fast_fallback+0x10/0x10 [ 176.160899][T10360] ? __mutex_lock+0x335/0x1350 [ 176.160938][T10360] ? is_valid_gup_args+0x11f/0x200 [ 176.160964][T10360] ? get_user_pages_fast+0x4d/0xb0 [ 176.160991][T10360] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 176.161030][T10360] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 176.161051][T10360] ? wait_for_space+0x248/0x2d0 [ 176.161074][T10360] iov_iter_get_pages2+0x5e/0xa0 [ 176.161107][T10360] __se_sys_vmsplice+0x548/0x10d0 [ 176.161136][T10360] ? __lock_acquire+0x6b6/0x2cf0 [ 176.161169][T10360] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 176.161200][T10360] ? bpf_send_signal_common+0x3b4/0x540 [ 176.161232][T10360] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 176.161292][T10360] ? bpf_trace_run2+0x322/0x4c0 [ 176.161345][T10360] ? rcu_is_watching+0x15/0xb0 [ 176.161381][T10360] do_syscall_64+0xfa/0xf80 [ 176.161411][T10360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.161433][T10360] ? clear_bhb_loop+0x60/0xb0 [ 176.161460][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.161480][T10360] RIP: 0033:0x7f5a1218f749 [ 176.161510][T10360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.161528][T10360] RSP: 002b:00007f5a13104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 176.161552][T10360] RAX: ffffffffffffffda RBX: 00007f5a123e5fa0 RCX: 00007f5a1218f749 [ 176.161568][T10360] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 176.161581][T10360] RBP: 00007f5a12213f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.161594][T10360] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 176.161606][T10360] R13: 00007f5a123e6038 R14: 00007f5a123e5fa0 R15: 00007ffcca2bafd8 [ 176.161643][T10360] [ 177.158049][T10374] syzkaller0: entered promiscuous mode [ 177.170794][T10374] syzkaller0: entered allmulticast mode [ 177.416995][T10386] netlink: 'syz.1.1264': attribute type 10 has an invalid length. [ 177.911746][T10401] !: renamed from bond_slave_0 (while UP) [ 177.974881][ T3723] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.983686][T10409] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 177.984048][ T3723] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.032054][ T3723] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.049570][T10414] xt_l2tp: missing protocol rule (udp|l2tpip) [ 178.052077][ T3723] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.362362][T10173] IPVS: starting estimator thread 0... [ 178.446625][T10436] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 178.505498][T10432] IPVS: using max 26 ests per chain, 62400 per kthread [ 178.673034][T10447] ip6gre2: entered allmulticast mode [ 199.816538][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.825696][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 206.752229][T10477] __nla_validate_parse: 15 callbacks suppressed [ 206.752252][T10477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1287'. [ 206.808354][T10480] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 206.869028][T10493] xt_cluster: node mask cannot exceed total number of nodes [ 206.987443][T10501] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1294'. [ 207.007115][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 207.024322][T10502] syzkaller1: entered allmulticast mode [ 207.030126][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1294'. [ 207.056629][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 207.147390][T10507] tipc: Started in network mode [ 207.153298][T10507] tipc: Node identity e0000002, cluster identity 4711 [ 207.160526][T10507] tipc: Enabling of bearer rejected, failed to enable media [ 207.343979][T10518] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 207.646989][T10535] tc_dump_action: action bad kind [ 207.976726][T10556] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1310'. [ 207.992963][T10556] 0{X: renamed from gretap0 [ 208.018953][T10556] 0{X: entered allmulticast mode [ 208.048671][T10558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1312'. [ 208.050827][T10556] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 208.102301][T10558] netlink: 'syz.3.1312': attribute type 2 has an invalid length. [ 208.117817][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 208.140690][T10558] syzkaller0: entered promiscuous mode [ 208.147037][T10558] syzkaller0: entered allmulticast mode [ 208.248010][T10566] netem: incorrect gi model size [ 208.254426][T10566] netem: change failed [ 208.386762][T10574] pim6reg: entered allmulticast mode [ 208.469279][T10570] xt_CT: No such helper "pptp" [ 208.622678][T10585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1323'. [ 208.637567][T10589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1325'. [ 208.811852][T10598] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 209.008443][T10605] netlink: 'syz.4.1330': attribute type 2 has an invalid length. [ 209.089893][T10605] 9: entered promiscuous mode [ 209.317731][T10614] bond5: option resend_igmp: invalid value (32767) [ 209.325319][T10614] bond5: option resend_igmp: allowed values 0 - 255 [ 209.335730][T10614] bond5 (unregistering): Released all slaves [ 210.095768][T10653] openvswitch: netlink: IP tunnel dst address not specified [ 210.113966][T10653] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 210.510672][T10663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.523321][T10663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.678172][T10663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.712435][T10663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.828198][T10663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.863217][T10663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.985867][T10663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.012073][T10663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.138153][ T4277] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.148038][ T4277] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.169225][ T4277] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.177821][ T4277] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.208216][T10216] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.220587][T10216] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.240257][T10216] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.248941][T10216] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.130065][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 212.131843][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 212.137274][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 212.412143][T10746] __nla_validate_parse: 4 callbacks suppressed [ 212.412167][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 212.452032][T10746] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 212.472456][T10746] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1365'. [ 212.472537][T10749] netlink: zone id is out of range [ 212.498436][T10749] netlink: zone id is out of range [ 212.504209][T10749] netlink: zone id is out of range [ 212.509894][T10749] netlink: zone id is out of range [ 212.517395][T10749] netlink: zone id is out of range [ 212.523276][T10749] netlink: zone id is out of range [ 212.528613][T10749] netlink: zone id is out of range [ 212.534461][T10749] netlink: set zone limit has 4 unknown bytes [ 212.541599][T10749] xt_policy: output policy not valid in PREROUTING and INPUT [ 212.556144][T10746] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1365'. [ 212.602792][T10746] openvswitch: netlink: EtherType 50a is less than min 600 [ 212.753651][T10766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1370'. [ 212.814761][T10769] IPVS: length: 28 != 8 [ 212.902308][T10777] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1375'. [ 212.959241][T10777] bond5: (slave gre0): Device is not bonding slave [ 213.004509][T10777] bond5: option active_slave: invalid value (gre0) [ 213.035086][T10777] bond5 (unregistering): Released all slaves [ 213.125077][T10777] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1375'. [ 213.132533][T10791] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1378'. [ 213.222234][T10777] bond5: (slave gre0): Device is not bonding slave [ 213.244779][T10777] bond5: option active_slave: invalid value (gre0) [ 213.265888][T10777] bond5 (unregistering): Released all slaves [ 213.327651][T10777] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1375'. [ 213.373925][T10777] bond5: (slave gre0): Device is not bonding slave [ 213.380767][T10777] bond5: option active_slave: invalid value (gre0) [ 213.392851][T10777] bond5 (unregistering): Released all slaves [ 213.447585][T10777] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1375'. [ 213.501742][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 213.509373][T10777] bond5: (slave gre0): Device is not bonding slave [ 213.518052][T10777] bond5: option active_slave: invalid value (gre0) [ 213.527169][T10777] bond5 (unregistering): Released all slaves [ 213.554044][T10800] bridge_slave_0: left allmulticast mode [ 213.564489][T10800] bridge_slave_0: left promiscuous mode [ 213.570407][T10800] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.682234][T10777] bond5: (slave gre0): Device is not bonding slave [ 213.688928][T10777] bond5: option active_slave: invalid value (gre0) [ 213.703071][T10777] bond5 (unregistering): Released all slaves [ 213.822100][T10810] hsr_slave_0: left promiscuous mode [ 213.832985][T10810] hsr_slave_1: left promiscuous mode [ 213.910110][T10812] Cannot find map_set index 0 as target [ 214.156407][T10827] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 214.277487][T10832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.445426][T10840] x_tables: duplicate underflow at hook 1 [ 214.460236][T10840] pimreg: entered allmulticast mode [ 214.755244][T10845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.097991][T10864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.470384][T10859] bond0: (slave bond_slave_0): Releasing backup interface [ 215.495146][T10859] bond0: (slave bond_slave_1): Releasing backup interface [ 215.517898][T10859] team0: Port device team_slave_0 removed [ 215.553224][T10859] team0: Port device team_slave_1 removed [ 215.578080][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.607764][T10859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.628361][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.656190][T10859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.717315][T10859] team0: Port device veth0_virt_wifi removed [ 215.844438][T10859] bond2: (slave geneve2): Releasing active interface [ 215.876898][T10859] bond3: (slave ip6gretap1): Releasing active interface [ 215.918501][ T43] lo speed is unknown, defaulting to 1000 [ 215.940704][ T43] syz2: Port: 1 Link DOWN [ 216.008475][ T3723] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.040253][ T3723] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.062477][ T3723] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 20004 - 0 [ 216.071229][ T3723] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.111512][ T3723] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.128051][ T3723] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 216.160511][ T3723] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.192029][ T3723] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.214630][ T3723] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 216.264493][ T3723] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.290431][ T3723] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.301151][ T3723] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 216.559477][T10923] netlink: 'syz.4.1410': attribute type 58 has an invalid length. [ 216.590884][T10929] netlink: 'syz.4.1410': attribute type 58 has an invalid length. [ 217.095823][T10962] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.104307][T10962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.111959][T10962] IPv6: NLM_F_CREATE should be set when creating new route [ 217.263414][T10970] tipc: Enabled bearer , priority 0 [ 217.410379][T10966] syzkaller0: entered promiscuous mode [ 217.423675][T10966] syzkaller0: entered allmulticast mode [ 217.438628][T10966] tipc: Resetting bearer [ 217.452296][T10965] tipc: Resetting bearer [ 217.844111][T11008] __nla_validate_parse: 14 callbacks suppressed [ 217.844134][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'. [ 218.973687][T10965] tipc: Disabling bearer [ 219.098354][ T5930] tipc: Node number set to 1780775244 [ 219.138654][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 219.276733][T11023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1439'. [ 219.314205][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 219.382206][T11015] netlink: 412 bytes leftover after parsing attributes in process `syz.1.1436'. [ 219.400550][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 219.409904][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1440'. [ 219.422344][T11025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.465251][T11025] netlink: 'syz.4.1440': attribute type 10 has an invalid length. [ 219.514821][T11036] netlink: 'syz.2.1443': attribute type 6 has an invalid length. [ 219.550082][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.587934][T11027] bond3: (slave bond0): making interface the new active one [ 219.604870][T11027] bond3: (slave bond0): Enslaving as an active interface with an up link [ 219.629177][T11025] bridge0: port 3(team0) entered blocking state [ 219.635771][T11025] bridge0: port 3(team0) entered forwarding state [ 219.642739][T11025] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.649978][T11025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.657548][T11025] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.664820][T11025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.695196][T11025] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 219.729902][T11042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1445'. [ 219.769302][T10219] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.946639][T11060] netlink: 'syz.0.1449': attribute type 1 has an invalid length. [ 219.982509][T11060] netlink: 'syz.0.1449': attribute type 7 has an invalid length. [ 220.031678][T11060] netlink: 'syz.0.1449': attribute type 8 has an invalid length. [ 220.044319][T11060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1449'. [ 220.266079][T11088] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1457'. [ 220.790113][T11116] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 221.021284][T11116] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.031356][T11139] netlink: 'syz.4.1467': attribute type 23 has an invalid length. [ 221.121426][T11131] bond6: (slave veth5): Enslaving as an active interface with a down link [ 221.143178][T11142] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 221.158599][T11115] bond6: (slave veth0_to_bond): making interface the new active one [ 221.193011][T11115] veth0_to_bond: entered promiscuous mode [ 221.199311][T11115] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 221.222809][T11146] openvswitch: netlink: IP tunnel dst address not specified [ 221.525423][T11163] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 221.601642][T11163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.623473][T11164] bond2: entered promiscuous mode [ 221.639033][T11164] bond2: entered allmulticast mode [ 221.985492][T11191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.029859][T11195] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.059702][T11196] 8021q: VLANs not supported on lo [ 222.678306][T11234] xfrm1: entered promiscuous mode [ 222.716327][T11234] xfrm1: entered allmulticast mode [ 222.903824][T11252] __nla_validate_parse: 12 callbacks suppressed [ 222.903848][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 223.030018][T11259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1505'. [ 223.062578][T11259] sit0: entered promiscuous mode [ 223.067728][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 223.264662][T11269] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1509'. [ 223.420866][T11284] netlink: 'syz.2.1512': attribute type 29 has an invalid length. [ 223.443940][T11284] netlink: 'syz.2.1512': attribute type 29 has an invalid length. [ 223.484796][T11284] netlink: 'syz.2.1512': attribute type 3 has an invalid length. [ 223.506308][T11284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1512'. [ 223.534387][T11284] netlink: 'syz.2.1512': attribute type 11 has an invalid length. [ 223.547245][T11284] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1512'. [ 223.582633][T11284] netlink: 'syz.2.1512': attribute type 29 has an invalid length. [ 223.597121][T11284] netlink: 'syz.2.1512': attribute type 29 has an invalid length. [ 223.617232][T11284] netlink: 'syz.2.1512': attribute type 29 has an invalid length. [ 223.639942][T11292] : entered promiscuous mode [ 223.646850][T11284] netlink: 'syz.2.1512': attribute type 29 has an invalid length. [ 223.684439][T11292] netlink: 'syz.0.1515': attribute type 2 has an invalid length. [ 223.904291][T11301] netlink: 'syz.3.1517': attribute type 1 has an invalid length. [ 224.537667][T11328] tap0: tun_chr_ioctl cmd 1074025678 [ 224.559177][T11328] tap0: group set to 0 [ 224.574332][T11338] netlink: 'syz.3.1527': attribute type 1 has an invalid length. [ 224.582570][T11338] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1527'. [ 224.678979][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1530'. [ 224.715678][T11348] vlan4: entered promiscuous mode [ 224.720800][T11348] bridge0: entered promiscuous mode [ 224.959146][T11360] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1534'. [ 224.996808][T11360] xt_policy: neither incoming nor outgoing policy selected [ 225.181232][T11375] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1538'. [ 225.339926][T11381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.633008][T11383] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 226.652108][T11383] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 226.692861][T11383] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 226.829176][T11399] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 226.841774][T11399] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 226.992352][T11406] bridge_slave_1: left allmulticast mode [ 226.998216][T11406] bridge_slave_1: left promiscuous mode [ 227.012441][T11406] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.026870][T11406] bridge_slave_0: left allmulticast mode [ 227.040221][T11406] bridge_slave_0: left promiscuous mode [ 227.050404][T11406] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.178221][T11420] syz_tun: entered allmulticast mode [ 227.331301][T11408] lo speed is unknown, defaulting to 1000 [ 227.696878][T11440] bond7: entered promiscuous mode [ 227.702571][T11440] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.806278][T11440] bond7: (slave bridge0): making interface the new active one [ 227.822006][T11440] bridge0: entered promiscuous mode [ 227.830150][T11440] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 228.005146][T11454] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 228.050150][T11418] syz_tun: left allmulticast mode [ 228.449595][T11488] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 228.803028][T11502] __nla_validate_parse: 8 callbacks suppressed [ 228.803059][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 228.834102][T11502] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1574'. [ 228.850363][T11502] validate_nla: 3 callbacks suppressed [ 228.850382][T11502] netlink: 'syz.3.1574': attribute type 12 has an invalid length. [ 229.015705][T11516] mac80211_hwsim hwsim3 : renamed from wlan1 [ 229.017135][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1579'. [ 229.046335][T11514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1578'. [ 229.059869][T11514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1578'. [ 229.070134][T11514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1578'. [ 229.079949][T11514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1578'. [ 229.093045][T11514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1578'. [ 229.122391][T11514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1578'. [ 229.132412][T11514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1578'. [ 229.197324][T11525] x_tables: duplicate underflow at hook 2 [ 229.246115][T11525] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 230.225615][T11585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.305493][T11590] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 230.590614][T11595] syzkaller0: entered promiscuous mode [ 230.612860][T11595] syzkaller0: entered allmulticast mode [ 230.716480][T11605] tipc: Enabled bearer , priority 0 [ 232.336084][T11603] tipc: Disabling bearer [ 232.432358][ T13] veth0_to_bond: left promiscuous mode [ 232.473968][T11638] syz.0.1614 (11638) used obsolete PPPIOCDETACH ioctl [ 232.798705][T11654] x_tables: duplicate entry at hook 2 [ 232.942165][T11665] netlink: 'syz.4.1624': attribute type 1 has an invalid length. [ 232.961308][T11665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.016454][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.044328][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.086852][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.384833][T11691] netlink: 'syz.3.1629': attribute type 17 has an invalid length. [ 233.437070][T11693] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 233.629893][T11704] tipc: Started in network mode [ 233.649782][T11704] tipc: Node identity 0264d5dde02, cluster identity 4711 [ 233.658966][T11704] tipc: Enabled bearer , priority 0 [ 233.700574][T11704] syzkaller1: entered promiscuous mode [ 233.719171][T11704] syzkaller1: entered allmulticast mode [ 233.730376][T11711] openvswitch: netlink: IP tunnel dst address not specified [ 233.753631][T11704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 233.813766][T11704] tipc: Resetting bearer [ 233.940432][T11722] __nla_validate_parse: 41 callbacks suppressed [ 233.940458][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 234.032375][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 234.298358][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 234.443452][T11743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1647'. [ 234.552789][T11753] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1651'. [ 234.608999][T11760] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 234.672435][ T5889] tipc: Node number set to 3796162013 [ 234.739099][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1657'. [ 234.768049][T11772] netlink: 'syz.0.1656': attribute type 2 has an invalid length. [ 234.862996][T11772] 9: entered promiscuous mode [ 234.877946][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 234.923213][ T5854] Bluetooth: hci4: command tx timeout [ 235.139461][T11791] netlink: 'syz.2.1663': attribute type 10 has an invalid length. [ 235.148192][T11791] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1663'. [ 235.768087][T11820] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 235.826529][T11820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.834408][T11825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1673'. [ 235.850517][T11826] bond3: entered promiscuous mode [ 236.014052][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 236.653874][T11879] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 236.731826][T11888] xt_l2tp: missing protocol rule (udp|l2tpip) [ 236.745819][T11880] bond4: (slave gretap1): making interface the new active one [ 236.754555][T11880] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 236.798610][T11877] bridge6: entered promiscuous mode [ 236.812117][T11877] bridge6: entered allmulticast mode [ 236.872630][T11892] openvswitch: netlink: Flow key attr not present in new flow. [ 237.226176][T11923] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 237.383182][T11923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.405831][T11923] bond4: (slave bond5): making interface the new active one [ 237.415182][T11923] bond4: (slave bond5): Enslaving as an active interface with an up link [ 237.424118][T11929] bond0: (slave caif0): Error: Device type is different from other slaves [ 237.428708][T11937] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.576404][T11941] tipc: Enabled bearer , priority 10 [ 237.583065][T11942] tipc: Enabling of bearer rejected, already enabled [ 237.801523][T11957] netlink: 'syz.2.1713': attribute type 1 has an invalid length. [ 238.325506][T11991] vlan1: entered allmulticast mode [ 238.340047][T11991] veth0_vlan: entered allmulticast mode [ 238.606806][T11954] openvswitch: netlink: EtherType 50a is less than min 600 [ 238.692906][T12006] geneve2: entered promiscuous mode [ 238.748152][T12015] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 238.918029][ T30] audit: type=1804 audit(1765546258.138:3): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1732" name="/newroot/332/cgroup.controllers" dev="tmpfs" ino=1697 res=1 errno=0 [ 238.971414][ T30] audit: type=1800 audit(1765546258.138:4): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1732" name="cgroup.controllers" dev="tmpfs" ino=1697 res=0 errno=0 [ 239.206837][T12044] __nla_validate_parse: 17 callbacks suppressed [ 239.206860][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 239.226234][T12028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1733'. [ 239.498838][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1741'. [ 239.538075][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1741'. [ 239.827394][T12068] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1742'. [ 241.060315][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1744'. [ 241.070936][T12070] netlink: 'syz.3.1744': attribute type 29 has an invalid length. [ 241.097100][T12073] netlink: 'syz.3.1744': attribute type 29 has an invalid length. [ 241.125975][T12070] netlink: 'syz.3.1744': attribute type 29 has an invalid length. [ 241.156650][T12081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1743'. [ 241.201124][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'. [ 241.727463][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1753'. [ 242.234248][T12132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1760'. [ 242.398544][T12145] netlink: 'syz.4.1765': attribute type 4 has an invalid length. [ 242.410290][T12146] netlink: 'syz.4.1765': attribute type 3 has an invalid length. [ 242.419108][T12146] netlink: 'syz.4.1765': attribute type 3 has an invalid length. [ 242.429299][T12146] netlink: 'syz.4.1765': attribute type 3 has an invalid length. [ 242.439386][T12146] netlink: 'syz.4.1765': attribute type 3 has an invalid length. [ 242.448707][T12146] netlink: 'syz.4.1765': attribute type 3 has an invalid length. [ 242.457284][T12146] netlink: 'syz.4.1765': attribute type 3 has an invalid length. [ 242.633144][T12158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.658981][T12158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.684962][T12158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.697083][T12158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.119680][T12157] syzkaller1: entered promiscuous mode [ 243.133491][T12157] syzkaller1: entered allmulticast mode [ 243.373564][T12189] syz_tun: entered allmulticast mode [ 243.381616][T12189] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 243.429600][T12196] nftables ruleset with unbound set [ 244.042756][T12234] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 244.559910][T12263] __nla_validate_parse: 13 callbacks suppressed [ 244.559933][T12263] netlink: 558 bytes leftover after parsing attributes in process `syz.4.1797'. [ 244.587770][T12264] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 244.647402][T12263] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.997190][T12278] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1801'. [ 245.207157][T12292] veth0: entered promiscuous mode [ 245.247904][T12292] veth0: left promiscuous mode [ 245.438572][T12303] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 246.049533][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1816'. [ 246.219132][T12320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1816'. [ 246.291521][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1818'. [ 246.553869][T12335] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1822'. [ 246.597524][T12335] syzkaller1: entered promiscuous mode [ 246.606467][T12335] syzkaller1: entered allmulticast mode [ 246.932228][T12359] validate_nla: 33 callbacks suppressed [ 246.932250][T12359] netlink: 'syz.0.1828': attribute type 8 has an invalid length. [ 246.976970][T12359] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1828'. [ 247.199079][T12374] team0: Device gtp1 is up. Set it down before adding it as a team port [ 247.221451][T12375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1833'. [ 247.264909][T12377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.322282][T12377] netlink: 'syz.2.1834': attribute type 5 has an invalid length. [ 247.477316][T12385] nbd: nbd0 already in use [ 247.852783][T12406] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 247.924246][T12408] lo: left promiscuous mode [ 248.109220][T12419] netlink: 'syz.1.1845': attribute type 24 has an invalid length. [ 248.115020][T12408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.134791][T12408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.234224][T12408] bond3: left promiscuous mode [ 248.239170][T12408] bond3: left allmulticast mode [ 248.262370][T12408] vlan2: left allmulticast mode [ 248.267311][T12408] veth1: left allmulticast mode [ 248.277098][T12408] bridge4: left allmulticast mode [ 248.285411][T12408] gretap1: left promiscuous mode [ 248.299016][T12408] bond7: left promiscuous mode [ 248.304030][T12408] bridge0: left promiscuous mode [ 248.316446][T12408] bridge6: left promiscuous mode [ 248.321439][T12408] bridge6: left allmulticast mode [ 248.340322][ T3723] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.349942][ T3723] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.359129][ T3723] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.367944][ T3723] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.377987][ T3723] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.387368][ T3723] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.398701][ T3723] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.408739][ T3723] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.470449][T12426] rdma_op ffff88805509b1f0 conn xmit_rdma 0000000000000000 [ 248.768775][T12440] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1852'. [ 249.391723][T12479] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1861'. [ 249.581402][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.652087][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.887974][T12458] tipc: Resetting bearer [ 250.172384][T12458] tipc: Resetting bearer [ 250.180756][T12458] syzkaller0: left promiscuous mode [ 250.300565][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.333811][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.351994][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.360422][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.389270][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.410477][T12482] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 250.426308][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.452690][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.471629][T12482] netlink: 'syz.2.1862': attribute type 3 has an invalid length. [ 250.479803][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.491635][T12482] netlink: 'syz.2.1862': attribute type 7 has an invalid length. [ 250.500684][T12482] netlink: 'syz.2.1862': attribute type 8 has an invalid length. [ 250.509491][T12482] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1862'. [ 250.519811][T12482] NCSI netlink: No device for ifindex 131092 [ 250.527203][T12491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.574377][T12494] netlink: 'syz.0.1866': attribute type 5 has an invalid length. [ 250.712636][T12501] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.1868'. [ 250.895322][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 251.162269][T12530] block nbd2: server does not support multiple connections per device. [ 251.172756][T12530] block nbd2: shutting down sockets [ 251.284273][T12543] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 251.444364][T12552] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 251.485455][T12555] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 251.499035][T12555] syzkaller1: linktype set to 823 [ 251.554676][T12559] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 251.917196][T12580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1886'. [ 251.929446][T12580] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 252.138996][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 252.278826][T12603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1893'. [ 252.326920][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 252.346255][T12592] hsr_slave_0 (unregistering): left promiscuous mode [ 252.356767][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 252.486731][T12613] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 253.802247][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 261.245626][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.255925][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 281.509192][T12624] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1899'. [ 281.536169][T12624] geneve3: entered promiscuous mode [ 281.541442][T12624] geneve3: entered allmulticast mode [ 281.549008][T12631] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1898'. [ 281.578029][T10218] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.600654][T10218] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.643585][T10218] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.652694][T10218] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.698843][T12638] vlan1: left allmulticast mode [ 281.730371][T12638] veth0_vlan: left allmulticast mode [ 281.737544][T12638] syz_tun: left allmulticast mode [ 281.864967][T12640] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1907'. [ 281.903166][T12640] netlink: 19672 bytes leftover after parsing attributes in process `syz.4.1907'. [ 281.919835][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1904'. [ 282.079207][T12655] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 282.198884][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 282.471002][T12648] veth0_to_bond: left allmulticast mode [ 283.102606][T12648] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 283.221579][T12648] bond1: left promiscuous mode [ 283.226677][T12648] bond1: left allmulticast mode [ 283.324442][T12648] bond2: left promiscuous mode [ 283.329322][T12648] bond2: left allmulticast mode [ 283.334975][T12648] xfrm1: left promiscuous mode [ 283.339988][T12648] xfrm1: left allmulticast mode [ 283.345677][T12648] bond3: left promiscuous mode [ 283.386644][T12655] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 283.493939][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.515087][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.536354][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.546763][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.577782][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.599479][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.632853][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.641804][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.646395][T12682] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1914'. [ 283.664982][T12680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1915'. [ 283.665085][T12680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1915'. [ 283.707658][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1913'. [ 284.046390][T12705] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 284.593857][T12742] netlink: 'syz.4.1933': attribute type 4 has an invalid length. [ 284.839383][T12760] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 284.968821][T12764] hsr_slave_1 (unregistering): left promiscuous mode [ 286.078586][T12808] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 286.140571][T12808] bond5: entered promiscuous mode [ 286.152037][T12808] bond5: entered allmulticast mode [ 286.163576][T12808] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.332577][T12823] netlink: 'syz.0.1960': attribute type 1 has an invalid length. [ 286.371571][T12825] syzkaller0: entered promiscuous mode [ 286.393953][T12825] syzkaller0: entered allmulticast mode [ 286.452673][T12825] tipc: Enabled bearer , priority 0 [ 286.521582][T12825] tipc: Resetting bearer [ 286.568287][T12824] tipc: Resetting bearer [ 286.595405][T12824] tipc: Disabling bearer [ 286.622915][T12823] __nla_validate_parse: 10 callbacks suppressed [ 286.622939][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 286.648480][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 286.660688][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 286.682606][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 286.813839][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 286.906481][T12855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 287.342473][T12833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.431107][T12886] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 287.597641][T12895] netlink: 'syz.4.1985': attribute type 3 has an invalid length. [ 287.605861][T12895] netlink: 'syz.4.1985': attribute type 1 has an invalid length. [ 287.614901][T12895] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1985'. [ 287.624360][T12895] NCSI netlink: No device for ifindex 813332851 [ 287.705789][T12901] netlink: 'syz.4.1988': attribute type 2 has an invalid length. [ 287.714188][T12901] netlink: 'syz.4.1988': attribute type 1 has an invalid length. [ 287.830262][T12905] syzkaller1: entered promiscuous mode [ 287.836382][T12905] syzkaller1: entered allmulticast mode [ 287.900962][T12908] : entered promiscuous mode [ 287.923204][T12908] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 287.931444][T12908] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 287.954243][T12908] xt_l2tp: invalid flags combination: 0 [ 288.118540][T12917] netlink: 'syz.2.1996': attribute type 3 has an invalid length. [ 288.127027][T12917] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 288.142335][T12917] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1996'. [ 288.266334][T12928] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1999'. [ 288.322734][T12928] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1999'. [ 288.423831][T12939] syzkaller0: left allmulticast mode [ 288.459493][T12938] netlink: 'syz.2.2002': attribute type 29 has an invalid length. [ 288.470178][T12945] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2004'. [ 288.488748][T12946] netlink: 'syz.2.2002': attribute type 29 has an invalid length. [ 288.798972][T12968] tipc: Enabling of bearer rejected, already enabled [ 288.815784][T12968] syzkaller0: entered promiscuous mode [ 288.821333][T12968] syzkaller0: entered allmulticast mode [ 288.857826][T12972] xt_TPROXY: Can be used only with -p tcp or -p udp [ 288.903017][T12977] ip6tnl1: entered promiscuous mode [ 288.922382][T12981] nbd: must specify an index to disconnect [ 289.239776][T13003] netlink: 'syz.3.2022': attribute type 12 has an invalid length. [ 289.731150][T12979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.927265][T13036] netlink: 'syz.4.2031': attribute type 17 has an invalid length. [ 290.822139][T13095] xt_HMARK: spi-set and port-set can't be combined [ 290.993968][T13106] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 291.052222][T13106] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 291.060163][T13106] gretap2: entered promiscuous mode [ 291.065626][T13106] gretap2: entered allmulticast mode [ 291.485186][T13140] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 291.571015][T13140] bond6: (slave vcan1): Error -95 calling set_mac_address [ 291.633984][T13130] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 291.946467][ T30] audit: type=1107 audit(1765546311.168:5): pid=13158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 292.049023][T13164] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 292.176185][T13183] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.199202][T13183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.206633][T13183] IPv6: NLM_F_CREATE should be set when creating new route [ 292.213956][T13183] IPv6: NLM_F_CREATE should be set when creating new route [ 292.221220][T13183] IPv6: NLM_F_CREATE should be set when creating new route [ 292.322898][T13191] __nla_validate_parse: 61 callbacks suppressed [ 292.322919][T13191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2080'. [ 292.403431][T13193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2081'. [ 292.413587][T13193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2081'. [ 292.465760][T13193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.797420][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 292.807979][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2087'. [ 292.835485][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 292.946563][T13219] validate_nla: 7 callbacks suppressed [ 292.946584][T13219] netlink: 'syz.4.2090': attribute type 1 has an invalid length. [ 292.960512][T13219] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2090'. [ 293.016930][T13222] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2092'. [ 293.020423][T13223] netlink: 'syz.2.2091': attribute type 21 has an invalid length. [ 293.033052][T13222] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 293.053286][T13222] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20004 [ 293.071493][T13228] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2093'. [ 293.220880][T13237] syzkaller0: entered promiscuous mode [ 293.230283][T13237] syzkaller0: entered allmulticast mode [ 293.242024][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 293.398412][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 294.277524][T13301] tunl0: entered promiscuous mode [ 294.285841][T13301] netlink: 'syz.0.2121': attribute type 3 has an invalid length. [ 294.500066][T13320] xt_l2tp: v2 sid > 0xffff: 1114112 [ 295.434644][T13373] syzkaller0: entered promiscuous mode [ 295.452850][T13373] syzkaller0: entered allmulticast mode [ 295.462033][T13371] tipc: Enabled bearer , priority 0 [ 295.484497][T13366] tipc: Resetting bearer [ 295.550154][T13366] tipc: Disabling bearer [ 295.559356][T13381] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 295.883075][T13402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.894408][T13402] syzkaller0: entered promiscuous mode [ 295.899998][T13402] syzkaller0: entered allmulticast mode [ 296.192771][T13416] netlink: 'syz.4.2154': attribute type 6 has an invalid length. [ 296.413790][T13432] bond0: (slave bridge0): Releasing backup interface [ 296.446594][T13432] bridge0: port 3(team0) entered disabled state [ 296.454169][T13432] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.494703][T13432] bond3: (slave bond0): Releasing active interface [ 296.516023][T13432] team0: left allmulticast mode [ 296.521064][T13432] team_slave_0: left allmulticast mode [ 296.528012][T13432] team_slave_1: left allmulticast mode [ 296.534513][T13432] team0: left promiscuous mode [ 296.540185][T13432] team_slave_0: left promiscuous mode [ 296.546862][T13432] team_slave_1: left promiscuous mode [ 296.553972][T13432] bridge0: port 3(team0) entered disabled state [ 296.598380][T13432] bridge_slave_0: left allmulticast mode [ 296.617059][T13432] bridge_slave_0: left promiscuous mode [ 296.632524][T13432] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.647653][T13432] bridge_slave_1: left allmulticast mode [ 296.656289][T13432] bridge_slave_1: left promiscuous mode [ 296.662230][T13432] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.696763][T13432] bond0: (slave 1!): Releasing backup interface [ 296.716038][T13432] bond0: (slave bond_slave_1): Releasing backup interface [ 296.749915][T13432] team0: Port device team_slave_0 removed [ 296.764306][T13432] team0: Port device team_slave_1 removed [ 296.770742][T13432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.786273][T13432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.796026][T13432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.803828][T13432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.817797][T13432] bond1: (slave bridge1): Releasing backup interface [ 296.825185][T13432] bridge1: left promiscuous mode [ 296.841088][T13432] bond4: (slave bond5): Releasing backup interface [ 296.861123][T13435] netlink: 'syz.3.2161': attribute type 29 has an invalid length. [ 296.921549][T13454] bridge8: entered promiscuous mode [ 296.949382][T13454] bridge8: entered allmulticast mode [ 297.030929][T13458] tipc: Enabling of bearer rejected, failed to enable media [ 297.094954][T13458] netlink: 'syz.1.2167': attribute type 21 has an invalid length. [ 297.124791][T13458] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 297.162640][T13458] bond8 (unregistering): Released all slaves [ 297.241074][T13477] netlink: 'syz.0.2168': attribute type 1 has an invalid length. [ 297.318383][T13476] bridge9: entered promiscuous mode [ 297.330036][T13476] bridge9: entered allmulticast mode [ 297.346583][T13481] __nla_validate_parse: 19 callbacks suppressed [ 297.346604][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 297.363167][T13476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.376979][T13479] team_slave_0: mtu less than device minimum [ 297.445672][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 297.609038][T10212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.627439][T10212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.706253][T13502] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2176'. [ 297.826844][T13504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2176'. [ 298.224375][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2177'. [ 298.248734][T13521] netlink: 'syz.0.2182': attribute type 10 has an invalid length. [ 298.258041][T13521] netlink: 'syz.0.2182': attribute type 21 has an invalid length. [ 298.315869][T13526] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 298.351403][T13526] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 298.622233][T13550] sctp: [Deprecated]: syz.1.2189 (pid 13550) Use of int in maxseg socket option. [ 298.622233][T13550] Use struct sctp_assoc_value instead [ 298.652947][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'. [ 298.847821][T13568] netem: change failed [ 299.208931][T13589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2201'. [ 299.291304][T13596] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2202'. [ 299.381245][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'. [ 299.571338][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 299.794717][T13632] netlink: 'syz.2.2214': attribute type 4 has an invalid length. [ 299.871156][T13637] tipc: Enabling of bearer rejected, failed to enable media [ 300.012728][T13646] netlink: 'syz.3.2219': attribute type 3 has an invalid length. [ 301.147719][T13705] lo: entered allmulticast mode [ 301.268278][T13713] nbd: must specify a size in bytes for the device [ 301.602751][T13737] netlink: 'syz.2.2247': attribute type 10 has an invalid length. [ 302.006529][T13769] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 302.226345][T13784] delete_channel: no stack [ 302.446509][T13799] xt_hashlimit: size too large, truncated to 1048576 [ 302.601758][T13807] __nla_validate_parse: 15 callbacks suppressed [ 302.601779][T13807] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2273'. [ 302.650136][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2274'. [ 302.655233][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2272'. [ 302.669608][T13807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2273'. [ 302.721747][T13812] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2275'. [ 302.817348][T13819] netlink: 'syz.1.2278': attribute type 12 has an invalid length. [ 302.883066][T13819] netlink: 'syz.1.2278': attribute type 12 has an invalid length. [ 303.090446][T13842] netlink: 'syz.1.2282': attribute type 10 has an invalid length. [ 303.125285][T13842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2282'. [ 303.176685][T13842] team0: Port device geneve0 added [ 303.192753][ T138] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0 [ 303.210596][ T138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.250171][ T138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.277910][ T138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.471730][T13869] IPVS: length: 172 != 24 [ 303.556497][T13873] netlink: 'syz.4.2291': attribute type 11 has an invalid length. [ 303.721149][T13879] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2294'. [ 303.874185][T13885] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2297'. [ 303.916957][T13885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2297'. [ 304.422697][T13913] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2305'. [ 304.543894][T13917] bond7: entered allmulticast mode [ 304.549662][T13917] 8021q: adding VLAN 0 to HW filter on device bond7 [ 304.580551][T13931] netlink: 'syz.2.2307': attribute type 1 has an invalid length. [ 306.529813][T14055] netlink: 'syz.0.2335': attribute type 29 has an invalid length. [ 306.613136][T14055] netlink: 'syz.0.2335': attribute type 6 has an invalid length. [ 306.652055][T14055] netlink: 'syz.0.2335': attribute type 29 has an invalid length. [ 307.036248][T14088] netlink: 'syz.0.2345': attribute type 83 has an invalid length. [ 307.233624][T14102] netlink: 'syz.1.2349': attribute type 7 has an invalid length. [ 307.267989][T14102] netlink: 'syz.1.2349': attribute type 8 has an invalid length. [ 307.504180][T14115] netlink: 'syz.0.2352': attribute type 2 has an invalid length. [ 307.529882][T14117] netlink: 'syz.0.2352': attribute type 2 has an invalid length. [ 307.669716][T14127] lo speed is unknown, defaulting to 1000 [ 308.195014][T14151] netlink: 'syz.3.2359': attribute type 12 has an invalid length. [ 308.442567][T14166] __nla_validate_parse: 11 callbacks suppressed [ 308.442586][T14166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2365'. [ 308.533070][T14172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2365'. [ 308.831044][T14187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.904974][T14187] bond0: (slave rose0): Enslaving as an active interface with an up link [ 309.264365][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 309.501120][T14229] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2381'. [ 309.532841][T14229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2381'. [ 309.879068][T14244] bond10: option min_links: invalid value (18446744073709551614) [ 309.906717][T14244] bond10: option min_links: allowed values 0 - 2147483647 [ 309.918686][T14253] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2388'. [ 309.937992][T14244] bond10 (unregistering): Released all slaves [ 310.166789][T14263] validate_nla: 2 callbacks suppressed [ 310.166812][T14263] netlink: 'syz.0.2391': attribute type 29 has an invalid length. [ 310.203735][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'. [ 310.272435][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 310.282635][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 310.350453][T14284] netlink: 'syz.2.2396': attribute type 23 has an invalid length. [ 310.490944][T14290] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 310.782424][T14309] sctp: [Deprecated]: syz.4.2403 (pid 14309) Use of int in max_burst socket option deprecated. [ 310.782424][T14309] Use struct sctp_assoc_value instead [ 310.837700][T14311] tipc: Trying to set illegal importance in message [ 310.859762][T14307] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2403'. [ 310.907891][T14307] netlink: 'syz.4.2403': attribute type 5 has an invalid length. [ 311.081702][T14333] netlink: 'syz.2.2408': attribute type 4 has an invalid length. [ 311.537535][T14367] netlink: 'syz.1.2418': attribute type 1 has an invalid length. [ 311.710323][T14368] bond8: (slave gretap2): making interface the new active one [ 311.773508][T14368] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 311.833110][T14384] SET target dimension over the limit! [ 311.996702][T14397] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 312.053025][T14397] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 312.079422][T14397] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 312.112522][T14397] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 312.178623][T14397] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 312.313641][T14418] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 314.122140][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 322.685971][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.694373][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 335.154019][T14484] validate_nla: 60 callbacks suppressed [ 335.154038][T14484] netlink: 'syz.1.2431': attribute type 26 has an invalid length. [ 335.192940][T14488] __nla_validate_parse: 13 callbacks suppressed [ 335.192960][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 335.214778][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2431'. [ 335.659818][ T3723] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.680193][ T3723] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.698082][ T3723] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.723617][ T3723] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.768800][T14532] bond0: (slave caif0): Error: Device type is different from other slaves [ 335.821751][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 335.848243][T14539] xfrm1: entered promiscuous mode [ 335.858227][T14539] xfrm1: entered allmulticast mode [ 335.876274][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 335.974960][T14554] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 335.998420][T14554] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 336.005617][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 336.015259][T14554] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 336.022758][T14554] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 336.029696][T14554] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 336.036632][T14554] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 336.036824][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 336.044151][T14554] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 336.059673][T14554] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 336.076460][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 336.087997][T14565] netlink: 'syz.3.2455': attribute type 29 has an invalid length. [ 336.110040][T14565] netlink: 'syz.3.2455': attribute type 29 has an invalid length. [ 336.122704][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 336.124935][T14565] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2455'. [ 336.132376][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 336.330944][T14579] tipc: Enabling of bearer rejected, already enabled [ 337.015395][T14573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.022754][T14573] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 337.030258][T14629] xt_ecn: cannot match TCP bits for non-tcp packets [ 337.047143][T14573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.058241][T14573] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 337.070293][T14573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 337.076622][T14573] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 337.086719][T14573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.093176][T14573] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 337.102657][T14573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.108764][T14573] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 337.626674][T14635] netlink: 'syz.3.2476': attribute type 2 has an invalid length. [ 337.635502][T14635] netlink: 'syz.3.2476': attribute type 1 has an invalid length. [ 337.681787][T14638] syzkaller0: left promiscuous mode [ 337.687361][T14638] syzkaller0: left allmulticast mode [ 337.895764][T14653] netlink: 'syz.4.2481': attribute type 12 has an invalid length. [ 384.125469][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.133723][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 445.575715][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.584391][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 490.362655][ T31] INFO: task kworker/1:10:10873 blocked for more than 143 seconds. [ 490.370664][ T31] Not tainted syzkaller #0 [ 490.375968][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.384752][ T31] task:kworker/1:10 state:D stack:24376 pid:10873 tgid:10873 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 490.397183][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 490.404516][ T31] Call Trace: [ 490.407813][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 490.410754][ T31] __schedule+0x14bc/0x5000 [ 490.415990][ T31] ? __pfx___schedule+0x10/0x10 [ 490.420920][ T31] ? schedule+0x91/0x360 [ 490.425916][ T31] schedule+0x165/0x360 [ 490.431024][ T31] schedule_preempt_disabled+0x13/0x30 [ 490.436676][ T31] __mutex_lock+0x7e6/0x1350 [ 490.481842][ T31] ? __mutex_lock+0x5bb/0x1350 [ 490.486710][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 490.515464][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 490.520577][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 490.527008][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 490.532905][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 490.539000][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 490.544789][ T31] process_scheduled_works+0xad1/0x1770 [ 490.550374][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 490.556499][ T31] worker_thread+0x8a0/0xda0 [ 490.561233][ T31] kthread+0x711/0x8a0 [ 490.565466][ T31] ? __pfx_worker_thread+0x10/0x10 [ 490.570595][ T31] ? __pfx_kthread+0x10/0x10 [ 490.575270][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.580495][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 490.585773][ T31] ? __pfx_kthread+0x10/0x10 [ 490.590390][ T31] ret_from_fork+0x599/0xb30 [ 490.595023][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 490.600158][ T31] ? __switch_to_asm+0x39/0x70 [ 490.605112][ T31] ? __switch_to_asm+0x33/0x70 [ 490.609999][ T31] ? __pfx_kthread+0x10/0x10 [ 490.614659][ T31] ret_from_fork_asm+0x1a/0x30 [ 490.619451][ T31] [ 490.622553][ T31] INFO: task syz.2.2451:14545 blocked for more than 143 seconds. [ 490.630294][ T31] Not tainted syzkaller #0 [ 490.635278][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.644072][ T31] task:syz.2.2451 state:D stack:25784 pid:14545 tgid:14545 ppid:5841 task_flags:0x400040 flags:0x00080002 [ 490.656116][ T31] Call Trace: [ 490.659424][ T31] [ 490.662410][ T31] __schedule+0x14bc/0x5000 [ 490.666965][ T31] ? __pfx___schedule+0x10/0x10 [ 490.671946][ T31] ? schedule+0x91/0x360 [ 490.676222][ T31] schedule+0x165/0x360 [ 490.680389][ T31] schedule_preempt_disabled+0x13/0x30 [ 490.686047][ T31] __mutex_lock+0x7e6/0x1350 [ 490.690696][ T31] ? __mutex_lock+0x5bb/0x1350 [ 490.695664][ T31] ? rfkill_unregister+0xc8/0x220 [ 490.700728][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 490.705915][ T31] ? __pfx_device_del+0x10/0x10 [ 490.710783][ T31] ? __cancel_work_sync+0x5c/0x110 [ 490.715948][ T31] rfkill_unregister+0xc8/0x220 [ 490.720811][ T31] nfc_unregister_device+0x96/0x2a0 [ 490.726090][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 490.731911][ T31] virtual_ncidev_close+0x56/0x90 [ 490.736966][ T31] __fput+0x44c/0xa70 [ 490.740967][ T31] task_work_run+0x1d4/0x260 [ 490.745671][ T31] ? __pfx_task_work_run+0x10/0x10 [ 490.750808][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 490.756249][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 490.761765][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 490.767080][ T31] ? rcu_is_watching+0x15/0xb0 [ 490.771919][ T31] do_syscall_64+0x2e3/0xf80 [ 490.776553][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.782664][ T31] ? clear_bhb_loop+0x60/0xb0 [ 490.787354][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.793318][ T31] RIP: 0033:0x7f5a1218f749 [ 490.797783][ T31] RSP: 002b:00007ffcca2bb138 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 490.806348][ T31] RAX: 0000000000000000 RBX: 00007f5a123e7da0 RCX: 00007f5a1218f749 [ 490.814387][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 490.822404][ T31] RBP: 00007f5a123e7da0 R08: 0000000000000188 R09: 00000017ca2bb42f [ 490.830395][ T31] R10: 00007f5a123e7cb0 R11: 0000000000000246 R12: 000000000005232b [ 490.838428][ T31] R13: 00007f5a123e6090 R14: ffffffffffffffff R15: 00007ffcca2bb250 [ 490.846490][ T31] [ 490.849535][ T31] INFO: task syz.0.2457:14573 blocked for more than 143 seconds. [ 490.857487][ T31] Not tainted syzkaller #0 [ 490.862516][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.871226][ T31] task:syz.0.2457 state:D stack:25984 pid:14573 tgid:14568 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 490.883272][ T31] Call Trace: [ 490.886561][ T31] [ 490.889499][ T31] __schedule+0x14bc/0x5000 [ 490.894075][ T31] ? __pfx___schedule+0x10/0x10 [ 490.898947][ T31] ? schedule+0x91/0x360 [ 490.903237][ T31] schedule+0x165/0x360 [ 490.907413][ T31] schedule_preempt_disabled+0x13/0x30 [ 490.912908][ T31] __mutex_lock+0x7e6/0x1350 [ 490.917608][ T31] ? __mutex_lock+0x5bb/0x1350 [ 490.922660][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 490.927994][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 490.933076][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 490.938296][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 490.944310][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 490.950674][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 490.956485][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 490.961711][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 490.967525][ T31] rfkill_set_block+0x1d2/0x440 [ 490.972488][ T31] rfkill_fop_write+0x44b/0x570 [ 490.977416][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 490.982941][ T31] ? security_kernfs_init_security+0x270/0x290 [ 490.989141][ T31] ? rw_verify_area+0x255/0x4d0 [ 490.994092][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 490.999521][ T31] vfs_write+0x27e/0xb30 [ 491.003901][ T31] ? __pfx_vfs_write+0x10/0x10 [ 491.008723][ T31] ? __fget_files+0x2a/0x420 [ 491.013362][ T31] ? __fget_files+0x2a/0x420 [ 491.017966][ T31] ? __fget_files+0x3a0/0x420 [ 491.022695][ T31] ? __fget_files+0x2a/0x420 [ 491.027306][ T31] ksys_write+0x145/0x250 [ 491.031679][ T31] ? __pfx_ksys_write+0x10/0x10 [ 491.036637][ T31] ? do_syscall_64+0xbe/0xf80 [ 491.041337][ T31] do_syscall_64+0xfa/0xf80 [ 491.046106][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.052253][ T31] ? clear_bhb_loop+0x60/0xb0 [ 491.056966][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.062945][ T31] RIP: 0033:0x7fa9e9d8f749 [ 491.067374][ T31] RSP: 002b:00007fa9e7ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 491.075847][ T31] RAX: ffffffffffffffda RBX: 00007fa9e9fe6090 RCX: 00007fa9e9d8f749 [ 491.083899][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 491.091929][ T31] RBP: 00007fa9e9e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 491.099925][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.108021][ T31] R13: 00007fa9e9fe6128 R14: 00007fa9e9fe6090 R15: 00007ffc04141b58 [ 491.116121][ T31] [ 491.119190][ T31] INFO: task syz.1.2474:14628 blocked for more than 144 seconds. [ 491.130900][ T31] Not tainted syzkaller #0 [ 491.135906][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.144605][ T31] task:syz.1.2474 state:D stack:22720 pid:14628 tgid:14627 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 491.156706][ T31] Call Trace: [ 491.160003][ T31] [ 491.163000][ T31] __schedule+0x14bc/0x5000 [ 491.167549][ T31] ? __pfx___schedule+0x10/0x10 [ 491.172482][ T31] ? schedule+0x91/0x360 [ 491.176769][ T31] schedule+0x165/0x360 [ 491.180955][ T31] schedule_preempt_disabled+0x13/0x30 [ 491.186513][ T31] __mutex_lock+0x7e6/0x1350 [ 491.191330][ T31] ? rcu_is_watching+0x15/0xb0 [ 491.196161][ T31] ? __mutex_lock+0x5bb/0x1350 [ 491.200951][ T31] ? rfkill_register+0x37/0x8e0 [ 491.205860][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 491.211013][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 491.215994][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 491.221225][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 491.226591][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 491.232316][ T31] rfkill_register+0x37/0x8e0 [ 491.237015][ T31] wiphy_register+0x246a/0x2d20 [ 491.241952][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 491.247192][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 491.252619][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 491.257770][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 491.263924][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 491.269409][ T31] ? ieee80211_register_hw+0x13f1/0x40d0 [ 491.275104][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 491.280921][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 491.286888][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 491.292904][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 491.299260][ T31] ? __hrtimer_setup+0x181/0x200 [ 491.304256][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 491.310080][ T31] mac80211_hwsim_new_radio+0x2f8b/0x5240 [ 491.315867][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 491.322084][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 491.327679][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 491.332859][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 491.337992][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 491.343778][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 491.349425][ T31] ? rcu_is_watching+0x15/0xb0 [ 491.354227][ T31] ? __nla_parse+0x40/0x60 [ 491.358682][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 491.365138][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 491.370743][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 491.376908][ T31] ? bpf_lsm_capable+0x9/0x20 [ 491.381602][ T31] ? security_capable+0x7e/0x2e0 [ 491.386653][ T31] genl_rcv_msg+0x60e/0x790 [ 491.391207][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.396330][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 491.405739][ T31] netlink_rcv_skb+0x208/0x470 [ 491.410547][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.415643][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.420956][ T31] ? down_read+0x274/0x2e0 [ 491.425423][ T31] ? genl_rcv+0xd/0x40 [ 491.429503][ T31] genl_rcv+0x28/0x40 [ 491.433522][ T31] netlink_unicast+0x82f/0x9e0 [ 491.438311][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 491.443649][ T31] ? netlink_sendmsg+0x642/0xb30 [ 491.448595][ T31] ? skb_put+0x11b/0x210 [ 491.452922][ T31] netlink_sendmsg+0x805/0xb30 [ 491.457706][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.463037][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 491.467983][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.473295][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.478588][ T31] __sock_sendmsg+0x21c/0x270 [ 491.483372][ T31] ____sys_sendmsg+0x505/0x820 [ 491.488184][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.493565][ T31] ? import_iovec+0x74/0xa0 [ 491.498102][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 491.502829][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.508046][ T31] ? futex_wait+0x285/0x360 [ 491.512647][ T31] ? __fget_files+0x2a/0x420 [ 491.517246][ T31] ? __fget_files+0x3a0/0x420 [ 491.521982][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 491.526971][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.532529][ T31] ? do_syscall_64+0xbe/0xf80 [ 491.537239][ T31] do_syscall_64+0xfa/0xf80 [ 491.541815][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.547912][ T31] ? clear_bhb_loop+0x60/0xb0 [ 491.552652][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.558547][ T31] RIP: 0033:0x7fbfe3d8f749 [ 491.563029][ T31] RSP: 002b:00007fbfe4bba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.571624][ T31] RAX: ffffffffffffffda RBX: 00007fbfe3fe5fa0 RCX: 00007fbfe3d8f749 [ 491.579658][ T31] RDX: 0000000004000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 491.587705][ T31] RBP: 00007fbfe3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 491.595725][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.603739][ T31] R13: 00007fbfe3fe6038 R14: 00007fbfe3fe5fa0 R15: 00007ffc708f2d48 [ 491.611764][ T31] [ 491.614816][ T31] INFO: task syz.3.2479:14649 blocked for more than 144 seconds. [ 491.622631][ T31] Not tainted syzkaller #0 [ 491.627587][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.636404][ T31] task:syz.3.2479 state:D stack:28008 pid:14649 tgid:14648 ppid:5838 task_flags:0x400040 flags:0x00080002 [ 491.648483][ T31] Call Trace: [ 491.651884][ T31] [ 491.654878][ T31] __schedule+0x14bc/0x5000 [ 491.659439][ T31] ? __pfx___schedule+0x10/0x10 [ 491.664350][ T31] ? schedule+0x91/0x360 [ 491.668612][ T31] schedule+0x165/0x360 [ 491.672828][ T31] schedule_preempt_disabled+0x13/0x30 [ 491.678325][ T31] __mutex_lock+0x7e6/0x1350 [ 491.682986][ T31] ? __mutex_lock+0x5bb/0x1350 [ 491.687770][ T31] ? genl_rcv_msg+0x10d/0x790 [ 491.692502][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 491.697539][ T31] ? stack_trace_save+0x9c/0xe0 [ 491.702457][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 491.707536][ T31] ? radix_tree_lookup+0x240/0x290 [ 491.712712][ T31] genl_rcv_msg+0x10d/0x790 [ 491.717256][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.722377][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 491.727376][ T31] netlink_rcv_skb+0x208/0x470 [ 491.732250][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.737301][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.742674][ T31] ? down_read+0x274/0x2e0 [ 491.747111][ T31] ? genl_rcv+0xd/0x40 [ 491.751195][ T31] genl_rcv+0x28/0x40 [ 491.755255][ T31] netlink_unicast+0x82f/0x9e0 [ 491.760048][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 491.765408][ T31] ? netlink_sendmsg+0x642/0xb30 [ 491.770386][ T31] ? skb_put+0x11b/0x210 [ 491.774700][ T31] netlink_sendmsg+0x805/0xb30 [ 491.779482][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.784800][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 491.789752][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.795177][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.800559][ T31] __sock_sendmsg+0x21c/0x270 [ 491.805323][ T31] __sys_sendto+0x3bd/0x520 [ 491.809888][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 491.814967][ T31] ? count_memcg_event_mm+0x21/0x260 [ 491.820284][ T31] ? exc_page_fault+0x82/0x100 [ 491.825120][ T31] __x64_sys_sendto+0xde/0x100 [ 491.829899][ T31] do_syscall_64+0xfa/0xf80 [ 491.834506][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.840585][ T31] ? clear_bhb_loop+0x60/0xb0 [ 491.845434][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.851344][ T31] RIP: 0033:0x7f2a835915dc [ 491.855843][ T31] RSP: 002b:00007f2a817f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 491.864425][ T31] RAX: ffffffffffffffda RBX: 00007f2a817f4fc0 RCX: 00007f2a835915dc [ 491.872463][ T31] RDX: 0000000000000020 RSI: 00007f2a817f5010 RDI: 0000000000000003 [ 491.880465][ T31] RBP: 0000000000000000 R08: 00007f2a817f4f14 R09: 000000000000000c [ 491.888501][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 491.896528][ T31] R13: 00007f2a817f4f68 R14: 00007f2a817f5010 R15: 0000000000000000 [ 491.904547][ T31] [ 491.907615][ T31] INFO: task syz.3.2479:14654 blocked for more than 144 seconds. [ 491.915422][ T31] Not tainted syzkaller #0 [ 491.920390][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.929155][ T31] task:syz.3.2479 state:D stack:28008 pid:14654 tgid:14648 ppid:5838 task_flags:0x400040 flags:0x00080002 [ 491.941187][ T31] Call Trace: [ 491.944508][ T31] [ 491.947458][ T31] __schedule+0x14bc/0x5000 [ 491.952062][ T31] ? __pfx___schedule+0x10/0x10 [ 491.956951][ T31] ? schedule+0x91/0x360 [ 491.961209][ T31] schedule+0x165/0x360 [ 491.965514][ T31] schedule_preempt_disabled+0x13/0x30 [ 491.971012][ T31] __mutex_lock+0x7e6/0x1350 [ 491.975687][ T31] ? __mutex_lock+0x5bb/0x1350 [ 491.980468][ T31] ? genl_rcv_msg+0x10d/0x790 [ 491.985203][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 491.990239][ T31] ? stack_trace_save+0x9c/0xe0 [ 491.995140][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 492.000090][ T31] ? radix_tree_lookup+0x240/0x290 [ 492.005255][ T31] genl_rcv_msg+0x10d/0x790 [ 492.009776][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.014882][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 492.019843][ T31] netlink_rcv_skb+0x208/0x470 [ 492.024647][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.029685][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.035075][ T31] ? down_read+0x274/0x2e0 [ 492.039537][ T31] ? genl_rcv+0xd/0x40 [ 492.043877][ T31] genl_rcv+0x28/0x40 [ 492.047913][ T31] netlink_unicast+0x82f/0x9e0 [ 492.052761][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 492.058074][ T31] ? netlink_sendmsg+0x642/0xb30 [ 492.063046][ T31] ? skb_put+0x11b/0x210 [ 492.067310][ T31] netlink_sendmsg+0x805/0xb30 [ 492.072140][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.077453][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.082486][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.087805][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.093244][ T31] __sock_sendmsg+0x21c/0x270 [ 492.097934][ T31] __sys_sendto+0x3bd/0x520 [ 492.102522][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 492.107815][ T31] ? fd_install+0x95/0x3d0 [ 492.112306][ T31] ? fd_install+0x307/0x3d0 [ 492.116854][ T31] __x64_sys_sendto+0xde/0x100 [ 492.121636][ T31] do_syscall_64+0xfa/0xf80 [ 492.126214][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.132352][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.137073][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.142996][ T31] RIP: 0033:0x7f2a835915dc [ 492.147417][ T31] RSP: 002b:00007f2a817d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 492.155953][ T31] RAX: ffffffffffffffda RBX: 00007f2a817d3fc0 RCX: 00007f2a835915dc [ 492.163995][ T31] RDX: 0000000000000020 RSI: 00007f2a817d4010 RDI: 0000000000000006 [ 492.172067][ T31] RBP: 0000000000000000 R08: 00007f2a817d3f14 R09: 000000000000000c [ 492.180086][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 492.188130][ T31] R13: 00007f2a817d3f68 R14: 00007f2a817d4010 R15: 0000000000000000 [ 492.196434][ T31] [ 492.199513][ T31] INFO: task syz.3.2479:14657 blocked for more than 145 seconds. [ 492.207312][ T31] Not tainted syzkaller #0 [ 492.212298][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.220974][ T31] task:syz.3.2479 state:D stack:25984 pid:14657 tgid:14648 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 492.232965][ T31] Call Trace: [ 492.236253][ T31] [ 492.239189][ T31] __schedule+0x14bc/0x5000 [ 492.243768][ T31] ? __pfx___schedule+0x10/0x10 [ 492.248669][ T31] ? schedule+0x91/0x360 [ 492.252981][ T31] schedule+0x165/0x360 [ 492.257157][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.262665][ T31] __mutex_lock+0x7e6/0x1350 [ 492.267271][ T31] ? __mutex_lock+0x5bb/0x1350 [ 492.272080][ T31] ? genl_rcv_msg+0x10d/0x790 [ 492.276800][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.282007][ T31] ? stack_trace_save+0x9c/0xe0 [ 492.286910][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 492.291938][ T31] ? radix_tree_lookup+0x240/0x290 [ 492.297091][ T31] genl_rcv_msg+0x10d/0x790 [ 492.301614][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.306713][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 492.311708][ T31] netlink_rcv_skb+0x208/0x470 [ 492.316559][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.321629][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.327029][ T31] ? down_read+0x274/0x2e0 [ 492.331474][ T31] ? genl_rcv+0xd/0x40 [ 492.335628][ T31] genl_rcv+0x28/0x40 [ 492.339627][ T31] netlink_unicast+0x82f/0x9e0 [ 492.344458][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 492.349769][ T31] ? netlink_sendmsg+0x642/0xb30 [ 492.354793][ T31] ? skb_put+0x11b/0x210 [ 492.359060][ T31] netlink_sendmsg+0x805/0xb30 [ 492.363877][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.369175][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.374152][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.379458][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.384792][ T31] __sock_sendmsg+0x21c/0x270 [ 492.389484][ T31] __sys_sendto+0x3bd/0x520 [ 492.394064][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 492.399116][ T31] ? fd_install+0x95/0x3d0 [ 492.403577][ T31] ? fd_install+0x307/0x3d0 [ 492.408098][ T31] __x64_sys_sendto+0xde/0x100 [ 492.412930][ T31] do_syscall_64+0xfa/0xf80 [ 492.417473][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.423608][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.428331][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.434314][ T31] RIP: 0033:0x7f2a835915dc [ 492.438750][ T31] RSP: 002b:00007f2a817b2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 492.450867][ T31] RAX: ffffffffffffffda RBX: 00007f2a817b2fc0 RCX: 00007f2a835915dc [ 492.458921][ T31] RDX: 0000000000000020 RSI: 00007f2a817b3010 RDI: 0000000000000009 [ 492.466954][ T31] RBP: 0000000000000000 R08: 00007f2a817b2f14 R09: 000000000000000c [ 492.474996][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 492.483010][ T31] R13: 00007f2a817b2f68 R14: 00007f2a817b3010 R15: 0000000000000000 [ 492.491009][ T31] [ 492.494114][ T31] INFO: task syz.4.2482:14659 blocked for more than 145 seconds. [ 492.501942][ T31] Not tainted syzkaller #0 [ 492.506903][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.515660][ T31] task:syz.4.2482 state:D stack:27608 pid:14659 tgid:14658 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 492.527641][ T31] Call Trace: [ 492.530925][ T31] [ 492.533923][ T31] __schedule+0x14bc/0x5000 [ 492.538489][ T31] ? __pfx___schedule+0x10/0x10 [ 492.543416][ T31] ? schedule+0x91/0x360 [ 492.547698][ T31] schedule+0x165/0x360 [ 492.552125][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.557631][ T31] __mutex_lock+0x7e6/0x1350 [ 492.562324][ T31] ? __mutex_lock+0x5bb/0x1350 [ 492.567130][ T31] ? genl_rcv_msg+0x10d/0x790 [ 492.571859][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.577320][ T31] ? radix_tree_lookup+0x240/0x290 [ 492.582509][ T31] genl_rcv_msg+0x10d/0x790 [ 492.587117][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.592205][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 492.597183][ T31] netlink_rcv_skb+0x208/0x470 [ 492.602026][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.607090][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.612452][ T31] ? down_read+0x274/0x2e0 [ 492.616923][ T31] ? genl_rcv+0xd/0x40 [ 492.621002][ T31] genl_rcv+0x28/0x40 [ 492.625078][ T31] netlink_unicast+0x82f/0x9e0 [ 492.629869][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 492.635232][ T31] ? netlink_sendmsg+0x642/0xb30 [ 492.640182][ T31] ? skb_put+0x11b/0x210 [ 492.644473][ T31] netlink_sendmsg+0x805/0xb30 [ 492.649253][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.654584][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.659526][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.664865][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.670158][ T31] __sock_sendmsg+0x21c/0x270 [ 492.674896][ T31] ____sys_sendmsg+0x505/0x820 [ 492.679685][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.685111][ T31] ? import_iovec+0x74/0xa0 [ 492.689661][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 492.694410][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.699650][ T31] ? futex_wait+0x285/0x360 [ 492.704223][ T31] ? __fget_files+0x2a/0x420 [ 492.708841][ T31] ? __fget_files+0x3a0/0x420 [ 492.713590][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 492.718571][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.724106][ T31] ? do_syscall_64+0xbe/0xf80 [ 492.728799][ T31] do_syscall_64+0xfa/0xf80 [ 492.733368][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.739438][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.744159][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.750062][ T31] RIP: 0033:0x7f92ba58f749 [ 492.754522][ T31] RSP: 002b:00007f92bb43c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.763003][ T31] RAX: ffffffffffffffda RBX: 00007f92ba7e5fa0 RCX: 00007f92ba58f749 [ 492.771005][ T31] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 492.779040][ T31] RBP: 00007f92ba613f91 R08: 0000000000000000 R09: 0000000000000000 [ 492.787070][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.795115][ T31] R13: 00007f92ba7e6038 R14: 00007f92ba7e5fa0 R15: 00007ffd68b2c188 [ 492.803179][ T31] [ 492.806264][ T31] [ 492.806264][ T31] Showing all locks held in the system: [ 492.814114][ T31] 1 lock held by khungtaskd/31: [ 492.818961][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.828909][ T31] 2 locks held by kworker/u8:12/3723: [ 492.834357][ T31] 2 locks held by getty/5601: [ 492.839060][ T31] #0: ffff88814c92a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.848914][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 492.859106][ T31] 3 locks held by kworker/1:10/10873: [ 492.864517][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 492.875541][ T31] #1: ffffc9001b1b7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 492.889092][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 492.900503][ T31] 2 locks held by syz.2.2451/14545: [ 492.905737][ T31] #0: ffff888056988100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 492.915549][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 492.925814][ T31] 2 locks held by syz.0.2457/14573: [ 492.931017][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 492.941192][ T31] #1: ffff888056988100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 492.950957][ T31] 3 locks held by syz.1.2474/14628: [ 492.956231][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.964502][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 492.973549][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 492.983526][ T31] 2 locks held by syz.3.2479/14649: [ 492.988732][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.996958][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.006092][ T31] 2 locks held by syz.3.2479/14654: [ 493.011305][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.019554][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.028561][ T31] 2 locks held by syz.3.2479/14657: [ 493.033797][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.042052][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.051070][ T31] 2 locks held by syz.4.2482/14659: [ 493.056327][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.064571][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.073657][ T31] 2 locks held by syz-executor/14666: [ 493.079057][ T31] #0: ffff8880543b6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.089344][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.099404][ T31] 2 locks held by syz-executor/14669: [ 493.104861][ T31] #0: ffff888027f6d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.114958][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.124947][ T31] 2 locks held by syz-executor/14670: [ 493.130318][ T31] #0: ffff88807c839118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.140405][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.150528][ T31] 2 locks held by syz-executor/14673: [ 493.155958][ T31] #0: ffff888144685918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.166099][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.176108][ T31] 2 locks held by syz-executor/14674: [ 493.181487][ T31] #0: ffff8880775fd918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.191838][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.201884][ T31] 2 locks held by syz-executor/14680: [ 493.207281][ T31] #0: ffff88807b40d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.217410][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.227442][ T31] 2 locks held by syz-executor/14683: [ 493.232917][ T31] #0: ffff8880335db118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.243018][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.253009][ T31] 2 locks held by syz-executor/14684: [ 493.258381][ T31] #0: ffff888052c0e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.268505][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.278565][ T31] 2 locks held by syz-executor/14687: [ 493.283982][ T31] #0: ffff8880291fd918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.294068][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.304152][ T31] 2 locks held by syz-executor/14688: [ 493.309530][ T31] #0: ffff88814337b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.319625][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.329706][ T31] 2 locks held by syz-executor/14694: [ 493.335150][ T31] #0: ffff888052c0c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.345314][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.355337][ T31] 2 locks held by syz-executor/14697: [ 493.360709][ T31] #0: ffff888054c50918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.370784][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.380786][ T31] 2 locks held by syz-executor/14698: [ 493.386217][ T31] #0: ffff888054c52918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.396285][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.406318][ T31] 2 locks held by syz-executor/14701: [ 493.411814][ T31] #0: ffff8880223a8918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.421957][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.432028][ T31] 2 locks held by syz-executor/14702: [ 493.437420][ T31] #0: ffff8880223ac918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 493.447500][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 493.457515][ T31] [ 493.459864][ T31] ============================================= [ 493.459864][ T31] [ 493.468356][ T31] NMI backtrace for cpu 0 [ 493.468381][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 493.468398][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.468408][ T31] Call Trace: [ 493.468415][ T31] [ 493.468423][ T31] dump_stack_lvl+0x189/0x250 [ 493.468447][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.468464][ T31] ? __pfx__printk+0x10/0x10 [ 493.468495][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 493.468513][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 493.468530][ T31] ? __pfx__printk+0x10/0x10 [ 493.468554][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 493.468579][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 493.468596][ T31] watchdog+0xf3c/0xf80 [ 493.468619][ T31] ? watchdog+0x1e2/0xf80 [ 493.468643][ T31] kthread+0x711/0x8a0 [ 493.468664][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.468682][ T31] ? __pfx_kthread+0x10/0x10 [ 493.468702][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.468720][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 493.468738][ T31] ? __pfx_kthread+0x10/0x10 [ 493.468757][ T31] ret_from_fork+0x599/0xb30 [ 493.468782][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.468813][ T31] ? __switch_to_asm+0x39/0x70 [ 493.468830][ T31] ? __switch_to_asm+0x33/0x70 [ 493.468846][ T31] ? __pfx_kthread+0x10/0x10 [ 493.468865][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.468896][ T31] [ 493.468901][ T31] Sending NMI from CPU 0 to CPUs 1: [ 493.614261][ C1] NMI backtrace for cpu 1 [ 493.614280][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 493.614301][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.614312][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 493.614341][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 493.614358][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 493.614374][ C1] RAX: 2451706870b02700 RBX: ffffffff8197438a RCX: 2451706870b02700 [ 493.614388][ C1] RDX: 0000000000000001 RSI: ffffffff8d76be8f RDI: ffffffff8bbfc660 [ 493.614401][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 493.614415][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 493.614428][ C1] R13: 1ffff11003951b70 R14: 0000000000000001 R15: 0000000000000001 [ 493.614440][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 493.614454][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.614466][ C1] CR2: 000055d971d0a000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 493.614483][ C1] Call Trace: [ 493.614490][ C1] [ 493.614497][ C1] default_idle+0x13/0x20 [ 493.614523][ C1] default_idle_call+0x73/0xb0 [ 493.614550][ C1] do_idle+0x1ea/0x520 [ 493.614568][ C1] ? irqentry_exit+0x5ba/0x660 [ 493.614594][ C1] ? __pfx_do_idle+0x10/0x10 [ 493.614621][ C1] cpu_startup_entry+0x44/0x60 [ 493.614640][ C1] start_secondary+0x101/0x110 [ 493.614665][ C1] common_startup_64+0x13e/0x147 [ 493.614694][ C1]