last executing test programs: 19.680871368s ago: executing program 0 (id=901): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xa, &(0x7f0000000200)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x80, 0x20, 0x7ff, 0x9072, {{0x24, 0x4, 0x2, 0x5, 0x90, 0x65, 0x0, 0x3, 0x0, 0x0, @local, @empty, {[@timestamp={0x44, 0x2c, 0x9d, 0x0, 0x4, [0x7, 0x3, 0xa4d, 0x9, 0x3, 0xfffffffa, 0x7fffffff, 0x542, 0x4, 0x9a23]}, @timestamp_prespec={0x44, 0x1c, 0x6, 0x3, 0x3, [{@remote, 0x4}, {@private=0xa010100, 0x6}, {@loopback, 0x7}]}, @generic={0x89, 0x8, "7fac1b275151"}, @cipso={0x86, 0x28, 0x3, [{0x1, 0x10, "a907cd15fed6994534d33e9c4bf9"}, {0x7, 0x6, "545a185c"}, {0x9516b11d428be9ef, 0x2}, {0x0, 0xa, "2fe48fbe4d945c6a"}]}, @noop]}}}}}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@private0, r3}, 0x14) 19.521682457s ago: executing program 0 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x0, 0x0, 0xe42f6d03b6524b1d, 0x9, 0x80}]}, &(0x7f0000000400)='GPL\x00', 0x7, 0x8a, &(0x7f0000000440)=""/138, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f00000005c0)=[{0x0, 0x1, 0x0, 0x9}, {0x3, 0x3, 0x6, 0x7}, {0x2, 0x1, 0x8, 0x3}, {0x4, 0x3, 0xc, 0x5}, {0x5, 0x5, 0xc, 0x6}], 0x10, 0xfff}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pI4 \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x8, 0x5c7, 0x1ff, 0x8a, 0x10041, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r11, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x19, 0x6, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x1c, '\x00', r2, @fallback=0x38, r3, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x2, &(0x7f0000000a00)=[r5, r6, r7, r8, r9, r10, r11], &(0x7f0000000a40)=[{0x5, 0x4, 0x10, 0x3}, {0x4, 0x3, 0xd, 0x8}]}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010000d2c1138d6f949a1b0c"], 0x24}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 19.077078166s ago: executing program 0 (id=907): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000200)=""/144, 0x90}], 0x2}, 0x1}], 0x400000000000032, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x48) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0xc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r2, &(0x7f0000000080)="240000001a007f0214f9f4070009040803004000000000050002000008000f40fe00000e", 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 18.076003575s ago: executing program 0 (id=922): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=@newqdisc={0x470, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x9, 0x3, 0x38, 0x8d, 0xffffffe0, 0x8, 0x4, 0x0, 0x1, 0x4, 0xfffff4bf, 0xa, 0x6, 0x6, 0x6, 0x6e5, 0x5, 0x9, 0x4, 0x401, 0x7ff, 0x8, 0x0, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0xf8, 0x3, 0x4, 0x2, 0x9e21, 0x7ecf, 0x2, 0xc, 0x8977, 0x4312, 0x5, 0x80000000, 0xa, 0x1, 0x4, 0xd9, 0x4, 0x3, 0x3, 0x2d, 0x7a8, 0x7, 0x0, 0x1000, 0x0, 0x1, 0xe, 0xfffffffb, 0x8000, 0x27, 0xffffffff, 0xffff, 0x5, 0x9, 0xfffffffe, 0x5, 0xe, 0x101, 0x9677, 0xffffffa2, 0x8000, 0xeeec, 0x60, 0xe35, 0x9, 0xfee, 0x81, 0x400, 0x81, 0x3, 0x3362, 0x8, 0x9b6, 0x400, 0x5, 0x9, 0x7fffffff, 0x1000, 0xe6d, 0x7fffffff, 0x4, 0x1, 0x7, 0xff, 0x6, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x3ff, 0xe2, 0x1, 0x8, 0x6, 0x0, 0x7fffffff, 0xfffffff9, 0x140, 0x2, 0x7, 0x81, 0x7, 0x5, 0x6, 0x69b, 0x9, 0x7fffffff, 0x7, 0xf, 0xd3bd, 0x453, 0x7, 0x8, 0x4, 0xf, 0x6, 0x400, 0x7, 0x7ff, 0x4, 0x0, 0x9, 0xdf60, 0x7, 0x10000000, 0xd, 0xfffffffc, 0x80000001, 0xfffffff8, 0xf, 0x7ff, 0x6, 0x2c8, 0x40, 0x9, 0xfffffffe, 0x0, 0x3, 0x9603, 0x719b, 0x5, 0x7, 0x10000, 0xfff, 0x5, 0x6, 0x6, 0x20000, 0xfffffff7, 0x49d, 0xf, 0x7fffffff, 0x200, 0x6, 0x0, 0x7, 0x6, 0xa, 0x2f28, 0x10000, 0x400, 0x8001, 0x6, 0x5, 0x5a2, 0x7, 0x800, 0x2, 0xaa, 0x7348fb54, 0x93a8, 0x5, 0x8000, 0x80000001, 0xfff, 0x5, 0x5, 0x3, 0xc, 0xc5, 0x4, 0x4, 0x7, 0x8001, 0x3, 0xfffffff8, 0x3ff, 0xff, 0x400, 0x8, 0x9, 0x3, 0x8, 0x8, 0x1be, 0xffffa9ab, 0x5868b5c9, 0x401, 0x1, 0x0, 0x3, 0x9, 0x7f, 0x200, 0x4b4975b4, 0xf39, 0x1, 0x101, 0x800, 0x4, 0x1000, 0xc, 0x80, 0x1dff, 0xc, 0x7, 0x8, 0xb390, 0x7f, 0xff, 0x8, 0x0, 0x8001, 0x1, 0x2, 0xddf5, 0x2, 0x5, 0xfffc0000, 0x6541, 0x5, 0x9, 0x69c, 0x2, 0x2, 0x7, 0x8001, 0x0, 0x8, 0x400, 0xfff, 0x474861a7, 0x8, 0x3, 0xd, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x2, 0x1, 0x8d}, {0x7, 0x0, 0x64, 0x40, 0x424, 0xe}, 0x0, 0x1, 0xdd8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x97bdea2cc2d43cda}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xef4f}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 17.861875195s ago: executing program 0 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) (async) 17.718194833s ago: executing program 0 (id=927): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) (async) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100"/71], 0x190) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r4, 0x0) (async) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r8, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r15 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 17.615462598s ago: executing program 2 (id=929): syz_emit_ethernet(0x126, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000f03a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000006009000000001100fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000150000000000000f003b0005020000008565fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f000e8b168e4b48529453d91cea424030070800"/294], 0x0) unshare(0x2000400) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xfffffffb}, 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x9, 0x100, 0x410d4073}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x9, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @generic={0x1, 0x5, 0x1, 0x4, 0x1000}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @generic={0x6, 0xc, 0xf, 0x0, 0x2744}, @map_fd], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x18, r2}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x0, 0xa, 0x7, 0x100, 0xf0c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0xc, 0x1, 0x0, r7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x4, 0xe9, &(0x7f0000000540)=""/233, 0x41100, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000780)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xc501, r1, 0x3, 0x0, &(0x7f00000007c0)=[{0x5, 0x4, 0xa, 0x8}, {0x0, 0x4, 0xd, 0x5}, {0x1, 0x1, 0x2, 0xa}]}, 0x94) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 17.446745948s ago: executing program 1 (id=930): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x53b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 17.199259306s ago: executing program 3 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f000952842ef510d7b01f407e8dd5a1aa7955456ff080f01f4466764fc43eb2d84127947f47e3db0ca6d76033367a1207499b98c3e039f041aecf80171d93a769577da2fe2bd8e688ff2ff45902189db7f5a917aa67d9468c3d419cc734a4ba01e5f75cf5fdb468302e82cb1e0542e337fd5b5ae1ddf8e5ae31ba2a46677f596969e6a37d1691a15638b53de3df5b69045666d50bb2932badcdd38e1391d4b25f9d456b88"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40044080) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000003800000126bd7000fb0100000000000007002b0029400000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x48004) 16.943130781s ago: executing program 3 (id=934): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) close(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r2) epoll_create1(0x80000) write$cgroup_int(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9b}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x80) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x14}], 0x1, 0x0, 0x0, 0x40811}, 0x1) 16.942729156s ago: executing program 4 (id=935): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x800, @loopback, 0x100}, 0x1c, 0x0}}], 0x1, 0x4000004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3b, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 16.718683266s ago: executing program 3 (id=936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000100)={&(0x7f00000014c0)=ANY=[@ANYBLOB="b41600000d0aed470000000000000000050000046c16038004000080141500800c0004400000000000000008ac000b80440001800c0001007061796c6f61640034000280080005400000000408000340000000c1080005400000001208000840000000010800024000000000080002400000000034000180090001006861736800000000240002800800014000000013080001400000001608000240000000120800024000000009200001800a00010071756f7461000000100002800c000140fffffffffffffffc100001800b0001007470726f787900000c000780080001006475700010120180180002800900020073797a300000000008000180fffffffe380002800900020073797a3200000000080001800000000208000180ffffffff08000180fffffffb08000180fffffffd08000180ffffffff04100100573004eb22bfb5029e6930d719ba2176bea613c4e1e6d649745c74dd2b887b5f4042d59a1bb3372bc9d51f4f8d9b8f82fc7301b531bacaf605d06a416c940307bfc90ee33b5b9874c3652f1d8d5ae1d1c67e0620b22fa49784d8327230f2d28aab20e31c5d7b2804090c2c54e1a9fca4f50d4cb687c6aba7aa324c6fd338a933a97338b35b8df6ded76c55faac77584491eb6d4c64245b784d447e62d87ac6efa451b0df95be51b56b34683b87a4e3f391864fbc3c7cd78923977ef475fb1291c35fadd09924292616b66660a2f1f13889aa0e7a9339e2c29a6a1445b36d1564d6bfc21539fdb55a0c6a55b6e1fbb3eb929d6f70dd45350e03ed242c140314865bf788ea06193ba0bfaf28ddcf25f9586b44819e353455c76f9b98bedee88acc1f57ade9a039da2961dda79c4302099ce320c2bd8f1c374d9ab38b12f6aca9f0138df1d53620e99ab566dd063db429377478af108e0ab1118ec28a2d088f96a35ce0e7ca418cbcfd5aecf96d33260f9e2aa53db28a55abeccc55e8b4ab3c75cdb1864a4199792c7f98d5ca9543bee372d508eb0bb6be3f1596f9d846e0a8c7483e0c667b91ec15971e0b60cf3af0cef1cdc5328ebb2cc0f3a91975f6975e8383474c6a9e2021f1aa9078f7a0c2494c5bae5a8765b66788f9942c7814b5349d626295df2711eaafb1e37e347683b15c292ff6b2edfebd103f92b0f0fd88d7e17763f6a3e96565a3047c23f8da51558678549a37e794afda3df6fa9ac30269875d03d070a0dd74899a5620d8ff4c50836b52c05e1939e4b0eff27ce3bd340bd81787bf14ddaaefc6c3c8728a33ff6663ca4530934ea188305c06ef524886ec7e81687864d1cf440d507abe99a4e72906554970a4c9b118d63059cec924f5af864fe100405865c28175c1eca4764f3bbf7241b33c7bfb6370324f0216372947c5a23ce3eb26664e32027ac61765a1c2798dc7452c19aa35849a70507d91c10d7a7a11b0e2900ae430c9ffd56d56a0930279909402f264cbc99bdcdce8cbd96c7cf5cee70ee2f3ac465f66e927258c0d792f4dcfe1434b6c62fdf561e00df04aa0007bdfd648ac50727c73fbeb78a26bcb73feb3b3e0653ceec69cfa176dd563e749d7026bd00bbdd6f1f45d5a3db5f3a11007114a04dac03723056b658b6c61b4592b15d59716ee3ebc5a4733c5b8e8f76bb4f62ff122dffecab1ed9f9e3613ecbec2ce1b9a67dc29ef0c2fcc226e8044eac5ea179a06240b7cec127d788d72f526acf75a44028b41370e016b0d27fe4b6a6fa4bdcf749c101b294cfe9b23f82cd3003389729ce5fd25982c0953eb537f3a1bebf47a311860c0c505f31ff53766d66daf0f6ea56733de866abdb1b7d1aca5204f626de5b5d0fd1fe88918931661b4ffdad59b6c904a6170a7722b89bcdf51feb9f2c5a032c2dd593e2f07cd5356b73bb44b73306104810956311bfdbf3b6ec6ad6e92746c431c95e9f282d625ef13c06951d30256e77f3f939bdab622bf95a35e67213893b76a1d6d711071525603a5e7385bee8a711aa23ae1e83dc98be450de02d355272dd16d4a45bc9c9a5f5a6258df9456c5e47aeda9c7f0f3bc8c4159f9b5af49411a20e9a7f3cf8bf5dd48ba368bf50e8fbf629cc412c9c810dd48e60b109329b27b33b4f2be9f18ff15d229848168bf3b60d88eb37ffe0286c2710493812afacc410414eb7590406ad4e7b380bdc3be3e68da7f5faadb49fc8db0461278c0877c978cad508eb2603e208da560a7c72f662a91eac45fd8545288a3683b56d1ffdcc39a6487de9c734f5e1b35e9e05813d3343ca371a4d0ca47e11efc68cef6a8b4fb75d186e7f228783a4d1fa83e7976a53643f1023f9316d89e7fa7c35bb69fcbf2c35b275f744733178d7cb2415ace7ef31d534492fd1dea82a4d3872a84c85187677c8347d233ddc907c42627ae23c7a3a0cd58c3e727680e5d0e153845d1458c807505179c54da056343c4cac06d1f330f7d43e4a8c22c05e559053a65b545b3c5cd02507f2b7d6a095dbba22782686fd57be8b777880f6bcac85975a347be0511c52d51b511ef45853f1f2de80623bb4d34e10de311845599d2ca1ac3e8cabb55edfcd7374d3f2239a7a1577b4bc8b3a68e195db5b1aca8903263301b643f8253dde95f82d1802588d6f1aef2b6fd025bc66edbc9eff28a7a07296411717394f94296909a08301d4ecd0cd6745ddb9282df8f389fc3d51e5a9c8215232e46a3552b7b1bd3a9778d9e5a7d5ec847ea2d636ace53e931268516476e77e28c905b4c5c834c605174a2bd591efb5ae5cdd290bdae9e45926e4c90b532b89c1a67e3398ac0db990d177ccec760e93a9cb8c4cb1411e0cdbf1370a9c2abe602542589517cee5355fb1930abcc926129ef276056ffafeb8d48b661bae85f8ff74faf3adc20c0a45411e76ace22a8eecc692c38f3bb8d1e44729d309e7ef4ce762a2143a4f427b099d9efcc0fcf5dbf2853a82c581900c5a0482b870844b834802ec7fc68994cb976b5c67ed215b3cbf057c51811075de7610894f2291b571ba8bef80217473cfe1b34c4da3dfac4ed2250da4e1359ed71da9695e0646146cc5df0f56840d26d4298dde463c4bb444a458a59d78d198b537025311bf5dab04e5ea40a8491eb496ac6389042bb0027c78bb5c1cdffbe015316a732929f262714a40fe042a417a5a0c7beccbc6b38f3ac2f4151aad53bc953f172ac962491231788058f7b20f273862701d6a1ed5b0406b4814843dd950fec71407dbd0333f7162a7b778eddd947821e6b12bd25e1100eb3bff3500735e3a8ccbd204579e35aedbf11f5adadf8d22a721f7701736248b53c965d30c1e8d9d073c5dfd426150ac3756e076dfa5a697ff11eb235e5c4e7dfb6e99e9d785151c341862191472c8a5713ae5cd6dd3e5813f8504d193148484022cc7a4637f855200fa0895ead071488d5ed0b2f3c103024bf19b8cf8705b8c21826a49bf6593023f34486759527eb5fae850dadb576790d25f04bb9f1e688a3055ca7664bffc6135ab9c30a49e4643938ff4abb10954e9b5c46c58160acfc9b7180a16321344f44649cdc2659ed4e16da75e4a6d650579dfc69ff4af1a1f0eb5e7232f2e6ee465cb74e86ede85bd3e69345dd95a060e2703de6e33b16212e52fbf74d084c8b788d148cb7a272589aac291aa32cdac8107db5e33aef0cdacd948977d6c0c1bfd9a0e9868f21c41f484b0a6220aeadaf3c2ecb8df68ba0b87634b29ccf5e6daa45f6c7a77f6c1d4554de2e66237abd39f5a6d528f0efb3ef1a56c03fe650916b5d9d859581ec982617bf6a44101f3b5ea9eef9fe6d992e0ac73ddc7e1a64483cd6d16ceaa1c1143f3a39f0df230c354312a7d9bac3598a48f2dbb6739d1eb4135ddb16b9e375d448023062fd5fbead87fee2471e9400050ed2878a124e5e14fd072932f22729e2a678598b66e8e2368f76e8224900a0e29d3893a1344d71c061a4c7c22e84f424a2ef4f9069f6c4de2f590c95479041ed10235f9c5413dc53a1b4f817707883613e36d261dc39f220f12c404be04923da6604c9ed7ac47868a41b01ef61795e802ff1559a18f3f6b3354500a1c0287c7cc825fdcd52a5fd44bc9cad6f494af9be98cfa0af2a2aad38b52c6362da65a54d2d53079e22b62bafa1e1c164f56e6ad30eddd968b5ec94496495d0bdfd97f54ee0db5456c874d107142e1db4d9d393ae39cd3cace4eb14beb2bcc7ef1e1f8686fb1ff0228e7c9b5d8706532dfa4b0a85159f068a134a7b5d0d26562c63d314be1d8924fddc4396b702a70d82d07d41081a97a77496428b6e4522c642ebc1ae2f9b6891802f02df3b66b2692da8bf95c7cefce618aee202e8396ec9b80ee775dbac45f4ab37d042c4a542b3c65851d926514a5c5ee7102372a23d103fddf1d82f5ed9a75203405b26703591dd2707a211297ddf3ed2209ac9bf41186beeac6bff711b4fc8cd0bdae5f992fc4f27ad10d850afb842aae7465d262cda945285611aedeaca98fd327739b04240f0197cd8fee7d97c21414e91f3c01e97a49ee47b44a0a367513e76ae5322047e564c1e5b14962ce5b6767721814443faaaaa64744b256d80d97c4259bf03a9846f6f8b3dcbdada4e5746093ad4532ddc7c1eeafffa9f6b60467063dce6baabacecad4f6b3bd5ddf3690dfb7ef460f1a10cf069ab4ccf5773258ffa8bc844178eb0e4add6ee69d45870a33c38234d0e8c24f1024adebaaab35ab6cd9715461584839b83bcbedddda8f20af67dc9c2878ad25a5957e8f8d9d46fad45242179cb6f026606d47fa7b8650e3be576ea9d5858daddc8e93f49bc1e148b44e1fc6d860446efe3d00defc0abb9be92e9093e062843df699a21fcaf4c0d55873be7121f444a0cd5e7a051bf4ba7d2ef526865f18d20393d573e03b1c7f6e6bab6360ec10ef81efc65ab35f63e80443529e39823a53e7ec99b243994f9385c73bbde1df2b243f5a3220c1bc61caa04297a0eeb670b5ed515d96a1fe179700e71b9dcb61491d1eb88bd0dd779d4153205ad407b8a68a983a29e4c162a33bbdddf0393237ea57adf8318e4190c045711a4b83d840c06add06b33d20d5af7e7ed3e9abf29a13b866ffc875f7ec134c7a5312aa43c9c41e856b041da4702db8435a0ad8071cf0a5a4f9c61717fa04e6ab138b46a43400e5bc415356fe7393895101b20dd9d0686009a728fb73c30d5cdf68e2d1b6a373e122d65be7d52e36ce38901568e4cf1cd8195b990ec6b580e331d79f9dd25225f213ce505457af8124ee72d16c29ef6ceb527db4e80bbe3ef9a1780837677272cfda589fbd6c685be0b8b1e1a23769572cdeb8fa1ebd3f2d6a320a2d1e20bf88605c957be0ff6e65e1add7b622b512b5725dbad13c1449b03bbbe9f6479fb4db930b666cd5eb13fca128be159cf45f9e1b4c8dfb73578fce1a933ff6048d61e284fde53cf3d529ae5809a6b63bce6097b76390d360ead5bb13df02813edec051d5a716ff627cbde07a42b8217e450e889ee38c2eb17b83b6be980b4950e7212dcfac3fbe831c9f3c6dd643c00f981d2f1f3089a049e4440aadbd2483e6eeb2a2b7802e4514a61f08b8b9b8ea47330efbad996ea239c5bfad677d907ca1816d6c427daeca189c53fc7bb79429a73a99525c6281065adfedf074d335e18b31bf6d1ac7d111b983ddaf77bdef97df1fc7c6d1ce07596ea97723e7d9e752859299ed8513786b19e9b20ff2c2b5b8ae302504293dab0f70fcf418d300a30e3c81cdf4c916232ec16720c92e97675d5733b0946d72c1c120255efbf0f47b5c5f2f2eb375f7e6303f0c971343d1deede7e3a88611df30160ea036f45eaaa157a4e23f167508b127855f026ccbfaea904c9027ed708e22f7dcea09ff33aaad8c3936fb8920c91d60e0141ecf749c88447b98c178cbc7edce0013ecd4ad8811c798405887fc15e3c6c11f83b28971a6c08680f27b09b748a44cf0b95b731bdc533e01071d7118ad8c56b9e367f0b1886883ce8213113c33c5d202a13aa79f32dacddb3b8f0eadb5d7f4de636751869543bb5baa2f76c1f0dc857c913a8ee0a0b14e7283b8f9b819ef3e9ce0455c77ef404754bf61f6d0ac7721cf6a9531ca62439b00661717e78dff67108e190755d20f381bfeb94746db1b3a8fa62a6a96afaec4d9a6806eb6128f2d88813fb4b2e62d83b8764b823ef204fd7e2a01555e0eed1e976c08d2b74b21056d0628922750c40cb7a7a1742fe9fd3bdf1f3e18b5e1322ff16bbae8e6fb08d2e0c00028008000180fffffffc9a0001002a4829cc1dd7b5676b104d19329c244ee543e4d8608d81feb9cf954a196daa7918c02d5af46e2c81220a6ab10fad123ae3b3d4aa83c9996010d375f07da70a1f00c0ae95fa4ec51cf50fab6d2613f0f10eb5f3262eafa4abf984dffcc48e90124761a7c226dfe51afa5070572a47549e437cae7f44d7e3152586a53a4ee4a47b2ece490d1b4c0f1ef95aab50385cbd65cc5e4097e24500002c00028008000180fffffffc0900020073797a320000000008000340000000020900020073797a3100000000ca0001009099c056bc02d95fb5f0a9a0beebf8e2cd40b06bd2d339b95368db6cc1e0985e92935248d55dabc60b7975ebb646c983dd570134865d095d93dbaa81b2e21dcc7af934e1f59af3c4b0ebbef039d5f83360b31926a706a639d35a6c70381da2e10ef8fabe33fc52f5d18acb47eb3a40396928c2c4f75d7345356451873952afa14ce4bc7668193b5ca6f2e7e17732699e53e78508672111db819ad1efadabf35ec9722b2f782bb62f660935f1f1f500b6282db46910d14d90808e84953f63bfff855b09af8f8f0000180002800900020073797a300000000008000340000000042d0006409a361603f70e2b732bc62899180f2c8eb16efcb81f4de013032cdfe891b7cf142458a4058554e1e18e0000000c020a80fc000100f9cdc0b71cbdb4954bfe7365ea1bd835ab38cc48d2ddcac228d4f0b445ca9449403a782b2894b0a8702d4751ed8121c61048f5039d5a3af61917a85c0c1c7cfeace79f0c0dc81c760e8840a2eb101ec73464470d7cc6097f2b0373053a8aad766938d0299f04dc2e21c4c83be5c40e1922d4a414dfb647bd612068e8647ff46aa9b6923af3687555ffc99b1152263ed7794691e8ea2249d042440d57048f06adb4e8359e7f0b5f9f79cee85b0f5e7efecfb38bf936a4ed76fae33830b332592917bfc815eec8b8e3a36571424b51d3ba5872328ea3dde06b3d14ec4c2039cdef452f9be2f4d2b9033d0e8940db360c74cc684d28777728670c00028008000180fffffffe61000100589be0181717f3276c08541972fa185db3fccc61055d45c7aad5c62edaf1eca76688544224e152c001751818a186f6d02f3dd64b294af7a9ed1627a50187b2d8ff190ef6dcb49c9040caf9c0fe434e38ac75be4ad81a9c40b4cf5d5f670000009c000100357482e3adbcdfe6ce600b79c5fcc243cd6badfd7e25c7c2d413375b5449ddfe73b91a95758274c960a8b5b3e2c2b959cc78aad4b2022007c52bde3a3ecb8a00e1fb7f3eb47d89ba4b9809a291ad526cd1c4333304133389548ec3dea0af98cd6eb5cf09a6aa8c213256368bea79aa6c62af3cf343223b4fd13f35b0401bc44ceffd554f648cd4ead36f2b6bc2f251ad849df55bede268da14010080140007800e000100696d6d656469617465000000200002801c0002800900020073797a32000000000900020073797a310000000010000780090001006d6574610000000008000340000000010c0005400000000000000009ab0006409096409dcb2107efaa7454acfd7f8e0cfdb6b322c84ef4f511e6e51291991f873b02749c876ee175aefb0ed5508f8e3f8e53cbb37ee409deb3a2011b7f02b8ed2be0b861665afd1fa0b9a1834b913f6f31f755cdd3d72000dcf2e12fc82a87f12e5240795538774b334f67548266e96d5dd1de76716085f498d847e3c97a46b5ae2bc7042e8d37176c62449a1202763120d29c3da0e944dbf5cedb2e45851f1483420844abcaf9000900090073797a30000000003c000080290006405350805424875551310b262e2c3d80cac915b5ee6b3e747cca8fa8e2d005b14c75086d88cc0000000900090073797a300000000008000440000000020900010073797a30000000000900020073797a300000000008000440000000020900010073797a3100000000"], 0x16b4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xb}]}}]}, 0x3c}}, 0x2004c810) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r4, 0x8b2c, &(0x7f0000000040)) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16.66536794s ago: executing program 2 (id=937): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}], 0x1, 0x20000041) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000340), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc601000000010000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 16.533607133s ago: executing program 4 (id=938): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r2, 0x5, 0x43, &(0x7f0000000040)="66c5aaca2b5f07c4ec6db182c53255ca067f5abb4b7649f0470672e2bc7e78131fb9cd719f71277afb4a9fda025c1d7371f08d1d5f6e45279175984e0d673c8602fb17", 0x8, 0x2, 0x7fff, 0x2, 0xb, 0x1, 0x4, 'syz1\x00'}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x4e20, 0x0, 'rr\x00', 0x31, 0x2, 0x69}, 0x2c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x140b, 0x800, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000001) r4 = accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000300)=0x10, 0x80000) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x101, 0x1, 0x8, 0x2, 0x6, @multicast}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, 0xfffffffffffffffe, 0x3952506a7a784efa) r6 = accept(r3, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000400)=0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r8, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x33}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb9}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x83, 0x8c27}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x2, 0x5, 0x1]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1a0}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2c000008}, 0x15) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000006c0)=r11, 0x4) setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000700)={@rand_addr=0x64010102, @multicast1, 0x0, "a8e43bc17c19b5cb81cfa93e51250582d6655324384710ebf967916d45ea49c7", 0x7ff, 0x8000, 0x6, 0xf}, 0x3c) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d4, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5e}, @NL80211_ATTR_IE={0x1a7, 0x2a, [@measure_req={0x26, 0xd2, {0x6, 0x9, 0x2, "b626bf07f0d3365618c91a7311223d3e652502424aec50cb17351fc7b40ba334a7e9ff040672def9f384e76910232d690908a27257011a342946e711c15d9b39458c138c44102fbfc07e0087f3ec6b22de2de0ac55270462616df285964f288682f92f586f17b6c54ba1428868612597cb5b8e342c45b9a2d8b71736032ae3404f43d11d095c1df81428653de39e651b178eea6cff95cbbc00fe4a3457e8776a46d531d8288b04447f18c500a67c505f388953d02c6e6b2334cbe72ad240a71f3932698ec086c39ae0887a936f6ab8"}}, @preq={0x82, 0x36, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x9, 0x52, @device_a, 0xbf, @value=@device_b, 0x1, 0x4, 0x2, [{{0x1}, @device_b, 0x100000}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}]}}, @peer_mgmt={0x75, 0x6, {0x1, 0x4, @val=0x3, @void, @void}}, @mesh_chsw={0x76, 0x6, {0x6, 0x1, 0x31, 0x4}}, @cf={0x4, 0x6, {0x81, 0x0, 0x4, 0x81}}, @preq={0x82, 0x7d, {{0x1, 0x1, 0x1}, 0x4, 0x16, 0xfffffffe, @device_a, 0x6, @void, 0x3ff, 0xf, 0x9, [{{0x1, 0x0, 0x1}, @broadcast, 0xff}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @device_b, 0xa}, {{0x1, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0xffffffff}, {{0x1, 0x0, 0x1}, @broadcast, 0x9472}, {{0x0, 0x0, 0x1}, @broadcast, 0x5f42}, {{0x1}, @broadcast, 0xc}, {{}, @device_a, 0x5ff7}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) socket$tipc(0x1e, 0x5, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r12, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r8, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x25}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x0, 0x2, 0x0, {0x3, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x8, 0x3, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x48804) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40400c0) socketpair(0x5, 0x5, 0x2, &(0x7f0000000c40)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000000c80)) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r12) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc4, r14, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x737a}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000051) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r13, 0x10f, 0x84, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) 16.498757126s ago: executing program 2 (id=939): syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xfc, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}, @timestamp_addr={0x44, 0x1c, 0x73, 0x1, 0x3, [{@multicast2, 0x4}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x572}]}, @generic={0x94, 0x6, "a6988a95"}, @generic={0x44, 0xb, "a33fb2d4f24bb95333"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) close(r1) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7e1}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20001000) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4073, 0xfe9}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x21, 0x0, &(0x7f0000003c00)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0x1}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c001}, 0x0) 16.318780617s ago: executing program 1 (id=940): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13314}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0xba01}, 0x0) 16.318055967s ago: executing program 3 (id=941): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x4, 0x0) ppoll(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) recvmmsg$unix(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f0000000000)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket(0xa, 0x4, 0x0) (async) ppoll(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r2, 0x0, 0x0, 0x0) (async) sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) (async) recvmmsg$unix(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f0000000000)=0x8) (async) 16.300564575s ago: executing program 2 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000004e00)=""/4109, 0x100d}], 0x3}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000080)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4106, 0x100a}, {&(0x7f0000002e00)=""/4093, 0xffd}, {&(0x7f0000000000)=""/89, 0x59}], 0x5}, 0xb1}, {{0x0, 0x0, 0x0}, 0x4a}], 0x8, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000900)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x57, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x57, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}, "d2fad28f4e8783b636022538c67884f4fdc88e31c0e310e0fb2c39766ac58392a0f9653fdf9ec7e6972c9ece3042198c7a24f3ec2185138fe030170dda008bd7d42867c177d4e3"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000240)={r4, 0x9, 0x81c3, 0x1, 0xecc, 0xb46e, 0x5, 0x401, {r4, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x3cd}}, 0x8, 0x80000001, 0x6, 0x8, 0xc9fd}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000440)={r9, 0xe66, 0x1f}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 16.245958245s ago: executing program 1 (id=943): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r2], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r2], 0x1c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@delqdisc={0x17c, 0x25, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3, 0x5}, {0x9, 0x3}, {0xfff2, 0xffe0}}, [@TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0xfff7, 0x6, 0x0, 0x1, 0x9, 0x4}}, {0xc, 0x2, [0x0, 0x4, 0x99f3, 0x7]}}, {{0x1c, 0x1, {0x3c, 0x1b, 0x9, 0x6, 0x2, 0x8, 0xdc7e, 0x9}}, {0x16, 0x2, [0x2, 0x9, 0x8, 0x9, 0x9, 0x7, 0x7, 0x1, 0x5]}}, {{0x1c, 0x1, {0x4, 0xd, 0xff, 0x7, 0x0, 0x1000, 0xffffffff, 0x9}}, {0x16, 0x2, [0x0, 0x7, 0x1, 0xfff, 0x8, 0x2, 0x9, 0x7ff, 0x10]}}, {{0x1c, 0x1, {0x10, 0xc, 0x106, 0x4, 0x0, 0x9, 0xfffffffe, 0x2}}, {0x8, 0x2, [0x0, 0x6]}}, {{0x1c, 0x1, {0x3, 0x0, 0x5, 0xed, 0x1, 0xdb8, 0x2, 0x5}}, {0xe, 0x2, [0x1, 0x0, 0x1000, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x0, 0x3, 0xf, 0x80000000, 0x2, 0x4, 0x4, 0x3}}, {0xa, 0x2, [0xc2b, 0x6, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x1c}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0xd, 0xc1}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3}}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24000801}, 0x50) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) 16.196989089s ago: executing program 3 (id=944): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) 16.16921856s ago: executing program 4 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x78, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0x6}, [@NFTA_CHAIN_USERDATA={0x3f, 0xc, "51aaf9321b55248ac593a924c1adbe6080fce550adaa29cee16eb4a73b1b6a1a04486ff0ead4ea228960ca38d75d73f4f9e2f8fa479e0f1ff4a2cd"}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0xa82058094e8c1105, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0xc}, 0x20000000) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x2}, &(0x7f0000000080)=0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0xce4}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4044091}, 0x40001) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) (async) bind$phonet(r4, &(0x7f0000000500)={0x23, 0x0, 0xf, 0x8}, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x28, r5, 0xe17131a1c005744d, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x40010) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb40}}, 0x0) 15.933699917s ago: executing program 3 (id=946): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x3}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1, 0x1c16}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x9b}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9cdbd9d15d2dcd393701e"]}]}, 0x5c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x3, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0x4) ioctl$sock_ifreq(r5, 0x8919, &(0x7f00000002c0)={'ip6gre0\x00', @ifru_names='gre0\x00'}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 15.881370258s ago: executing program 1 (id=947): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_batadv\x00', {0x2}, 0x8}) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="674e6883a6537778de895c168af25e4293dad05de695165fdd311b11ef3874645f23d15fbc24c42aaba44fa9b26e23c5151581f678004490b5b7051ebe969c3dfe", 0x41) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140400fe4100040300"/20], 0x14}}, 0x1) 15.876353994s ago: executing program 4 (id=948): sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2d0, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2bc, 0x1, [@m_csum={0xcc, 0x12, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x41, 0x9a4}, 0x26}}]}, {0x84, 0x6, "939170c4bbc99b3723d35cb0beb9ea547783b23fe70f94f1ef170a502b932ac1227b6ed6e94626eb012966fa4793fb3d497f664818cbf70ab6860c9007aacd4c845c660688716712e7ae4a9dbba2cf68ac196047530161f258fa2f1b51dd01be94a21ea45df22edc5c2554901916061547dde309b4144291f2804eadbb0b612f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_csum={0xd4, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0xa5, 0x6, "376458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19020c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2c847f43df5275a12"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xa4, 0x5, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f7, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xd, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}]}, {0x29, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5b56034a46fe4468bd19b5780d1bd141230a65f0d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x74, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x4b, 0x6, "8850292e248ac4bb2ecd95dd3a5619db7af347b0687f0683db3cd63dedd7f9c3a5bb3167ac124dd18979a62419a29316d507e2a0abf181e4f9d6dc416b94912a7bf866cd425975"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) (async, rerun: 64) close(r0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000180)={0x24, @short}, 0xb) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) (async) accept4(r5, 0x0, 0x0, 0x0) (async) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xc15b8ee425a3f00f, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, 0xea51, 0x77889}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) poll(&(0x7f0000000280)=[{r7}], 0x1, 0x200000) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r8, 0x8b2c, &(0x7f0000000040)) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xc3}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15.73764507s ago: executing program 4 (id=949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0xef92, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000080)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x9, &(0x7f0000000040), 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000010400000000000000000800c28a", @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800b00010067656e6576650000040002800a0001000f"], 0x40}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x80000000, 0xffffffff) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x41424344}, 0x1, 0x0) write$tun(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="000060f1aaaaaaaaaaaabbbbbbbbbbbb81001600884800000000000000004d0810980065000006069078ffffffffac1e0001070f04ac1414aaffffffffac1414bb010288041a74441c9001ac1414bb0000ffffac1414bb00000004ac1e010100000008442c7b71e00000020000001d6401010180000000ac1414bb00000008ac1414bb00000008ffffffff000000050000004e224e23", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"], 0x10b6) r9 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x6a, 0x10, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900090000040000086bb02f23"], 0x24}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000340)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0xfffffdfe, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='R', 0x1, 0x20000080, 0x0, 0x0) 15.728069406s ago: executing program 1 (id=950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x78}}, 0x4008090) 15.6628835s ago: executing program 4 (id=951): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2a, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0xffffffff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}, 0x1, 0xf000}, 0x0) 15.635789767s ago: executing program 1 (id=952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000140001f4ffffff0000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000340)=0x3, 0x2) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 15.313836773s ago: executing program 2 (id=953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f0000000000)=0x9c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x121400, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000180)) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendfile(r4, r3, 0x0, 0xe25) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a8", 0x3}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000001c0)={r10, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) (async) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r13, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x30, r12, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x31}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) 15.242835301s ago: executing program 2 (id=954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1f000000000000000000000002000000f0ffffff", @ANYRES32, @ANYRES64, @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRES16=r0], 0x48) r3 = socket$kcm(0x1e, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1ffffffffffffe42}}, 0x40) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x80, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000000000009500000000000000000000000041ad7d8c5a98007d2d645d7a15"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.202777358s ago: executing program 32 (id=927): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) (async) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100"/71], 0x190) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r4, 0x0) (async) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r8, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r15 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 171.313814ms ago: executing program 33 (id=952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000140001f4ffffff0000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000340)=0x3, 0x2) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 123.639186ms ago: executing program 34 (id=954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1f000000000000000000000002000000f0ffffff", @ANYRES32, @ANYRES64, @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRES16=r0], 0x48) r3 = socket$kcm(0x1e, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1ffffffffffffe42}}, 0x40) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x80, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000000000009500000000000000000000000041ad7d8c5a98007d2d645d7a15"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 48.375557ms ago: executing program 35 (id=946): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x3}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1, 0x1c16}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x9b}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9cdbd9d15d2dcd393701e"]}]}, 0x5c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x3, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0x4) ioctl$sock_ifreq(r5, 0x8919, &(0x7f00000002c0)={'ip6gre0\x00', @ifru_names='gre0\x00'}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 36 (id=951): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2a, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0xffffffff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}, 0x1, 0xf000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 85.280029][ T5851] cgroup: Unknown subsys name 'net' [ 85.394517][ T5851] cgroup: Unknown subsys name 'cpuset' [ 85.403796][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.206131][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.797938][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.810436][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.818633][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.830488][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.838451][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.868588][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.876983][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.889596][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.898076][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.906346][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.006115][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.014173][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.031320][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.041148][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.049915][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.058005][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.072212][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.081764][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.124353][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.133130][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.159139][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.173114][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.181102][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.200871][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.208776][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.607646][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 90.736093][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 90.925201][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.949595][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.958250][ T5861] bridge_slave_0: entered allmulticast mode [ 90.968029][ T5861] bridge_slave_0: entered promiscuous mode [ 91.033362][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.040943][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.048105][ T5861] bridge_slave_1: entered allmulticast mode [ 91.055579][ T5861] bridge_slave_1: entered promiscuous mode [ 91.100373][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 91.143077][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 91.169466][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.183598][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.285284][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 91.297560][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.304897][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.312175][ T5865] bridge_slave_0: entered allmulticast mode [ 91.320425][ T5865] bridge_slave_0: entered promiscuous mode [ 91.372018][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.379182][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.386983][ T5865] bridge_slave_1: entered allmulticast mode [ 91.394569][ T5865] bridge_slave_1: entered promiscuous mode [ 91.421661][ T5861] team0: Port device team_slave_0 added [ 91.473646][ T5861] team0: Port device team_slave_1 added [ 91.482300][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.547652][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.608013][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.615610][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.623001][ T5869] bridge_slave_0: entered allmulticast mode [ 91.631552][ T5869] bridge_slave_0: entered promiscuous mode [ 91.671801][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.678988][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.686321][ T5870] bridge_slave_0: entered allmulticast mode [ 91.693787][ T5870] bridge_slave_0: entered promiscuous mode [ 91.702876][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.710272][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.717688][ T5870] bridge_slave_1: entered allmulticast mode [ 91.726039][ T5870] bridge_slave_1: entered promiscuous mode [ 91.738644][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.746355][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.754411][ T5869] bridge_slave_1: entered allmulticast mode [ 91.765690][ T5869] bridge_slave_1: entered promiscuous mode [ 91.774310][ T5865] team0: Port device team_slave_0 added [ 91.783214][ T5865] team0: Port device team_slave_1 added [ 91.790578][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.797541][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.823907][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.900558][ T5872] Bluetooth: hci0: command tx timeout [ 91.909444][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.916904][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.943264][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.979934][ T5872] Bluetooth: hci1: command tx timeout [ 91.988201][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.995681][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.003212][ T5875] bridge_slave_0: entered allmulticast mode [ 92.010722][ T5875] bridge_slave_0: entered promiscuous mode [ 92.051818][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.058809][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.084880][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.099040][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.108504][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.116151][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.124515][ T5875] bridge_slave_1: entered allmulticast mode [ 92.132130][ T5875] bridge_slave_1: entered promiscuous mode [ 92.140441][ T5872] Bluetooth: hci2: command tx timeout [ 92.146601][ T1980] cfg80211: failed to load regulatory.db [ 92.152234][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.157830][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.203447][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.211251][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.237379][ T5872] Bluetooth: hci3: command tx timeout [ 92.244082][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.257545][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.309912][ T5872] Bluetooth: hci4: command tx timeout [ 92.316539][ T5861] hsr_slave_0: entered promiscuous mode [ 92.323866][ T5861] hsr_slave_1: entered promiscuous mode [ 92.354671][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.370373][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.397141][ T5869] team0: Port device team_slave_0 added [ 92.456645][ T5869] team0: Port device team_slave_1 added [ 92.478010][ T5870] team0: Port device team_slave_0 added [ 92.487115][ T5870] team0: Port device team_slave_1 added [ 92.562664][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.569802][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.595807][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.623381][ T5875] team0: Port device team_slave_0 added [ 92.635315][ T5865] hsr_slave_0: entered promiscuous mode [ 92.642156][ T5865] hsr_slave_1: entered promiscuous mode [ 92.648317][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 92.654571][ T5865] Cannot create hsr debugfs directory [ 92.690186][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.697236][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.724433][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.759600][ T5875] team0: Port device team_slave_1 added [ 92.808008][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.817166][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.843736][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.897600][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.905082][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.931213][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.010377][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.017454][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.044250][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.096706][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.103853][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.130579][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.160339][ T5869] hsr_slave_0: entered promiscuous mode [ 93.166796][ T5869] hsr_slave_1: entered promiscuous mode [ 93.173152][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 93.178901][ T5869] Cannot create hsr debugfs directory [ 93.266860][ T5870] hsr_slave_0: entered promiscuous mode [ 93.273580][ T5870] hsr_slave_1: entered promiscuous mode [ 93.280172][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 93.285926][ T5870] Cannot create hsr debugfs directory [ 93.476184][ T5875] hsr_slave_0: entered promiscuous mode [ 93.483156][ T5875] hsr_slave_1: entered promiscuous mode [ 93.489374][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 93.495868][ T5875] Cannot create hsr debugfs directory [ 93.682870][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.724414][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.750982][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.778343][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.861506][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.898628][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.911736][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.926142][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.980381][ T5872] Bluetooth: hci0: command tx timeout [ 94.040929][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.052941][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.059990][ T5872] Bluetooth: hci1: command tx timeout [ 94.078958][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.110691][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.207760][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.219945][ T5872] Bluetooth: hci2: command tx timeout [ 94.230498][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.241530][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.255258][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.300209][ T5872] Bluetooth: hci3: command tx timeout [ 94.306601][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.381589][ T5872] Bluetooth: hci4: command tx timeout [ 94.396049][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.419738][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.439383][ T5875] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.459259][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.466546][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.491489][ T5875] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.502456][ T5875] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.518545][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.525724][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.546962][ T5875] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.594008][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.644015][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.651227][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.736320][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.743522][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.767286][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.847466][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.866883][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.884212][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.948060][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.965739][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.972964][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.008190][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.015402][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.028518][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.035707][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.088301][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.133615][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.140849][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.153825][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.161054][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.179419][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.186652][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.307517][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.541312][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.552241][ T5865] veth0_vlan: entered promiscuous mode [ 95.594417][ T5865] veth1_vlan: entered promiscuous mode [ 95.703469][ T5865] veth0_macvtap: entered promiscuous mode [ 95.739204][ T5865] veth1_macvtap: entered promiscuous mode [ 95.768840][ T5861] veth0_vlan: entered promiscuous mode [ 95.825026][ T5861] veth1_vlan: entered promiscuous mode [ 95.838417][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.934140][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.997305][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.043108][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.060548][ T5872] Bluetooth: hci0: command tx timeout [ 96.066787][ T5861] veth0_macvtap: entered promiscuous mode [ 96.075146][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.105070][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.127177][ T5861] veth1_macvtap: entered promiscuous mode [ 96.142865][ T5872] Bluetooth: hci1: command tx timeout [ 96.159522][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.177386][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.218566][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.255835][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.289379][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.302887][ T5872] Bluetooth: hci2: command tx timeout [ 96.369305][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.380353][ T5872] Bluetooth: hci3: command tx timeout [ 96.427550][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.438825][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.461022][ T5872] Bluetooth: hci4: command tx timeout [ 96.492009][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.515133][ T5870] veth0_vlan: entered promiscuous mode [ 96.544915][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.581376][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.591516][ T5870] veth1_vlan: entered promiscuous mode [ 96.610756][ T5869] veth0_vlan: entered promiscuous mode [ 96.658400][ T5869] veth1_vlan: entered promiscuous mode [ 96.716513][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.735179][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.761880][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.775784][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.806379][ T5870] veth0_macvtap: entered promiscuous mode [ 96.863572][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.886143][ T5869] veth0_macvtap: entered promiscuous mode [ 96.894497][ T5870] veth1_macvtap: entered promiscuous mode [ 96.903415][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.914864][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.971465][ T5869] veth1_macvtap: entered promiscuous mode [ 97.023772][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.039374][ T5981] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.061032][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.077683][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.082215][ T5875] veth0_vlan: entered promiscuous mode [ 97.103763][ T5980] smc: net device erspan0 applied user defined pnetid SYZ0 [ 97.114665][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.134361][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.174933][ T5875] veth1_vlan: entered promiscuous mode [ 97.189075][ T5985] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.237240][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.260677][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.291705][ T3583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.301479][ T5988] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6'. [ 97.329357][ T5985] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.356080][ T3583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.387544][ T3583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.428229][ T3583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.493603][ T3583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.506661][ T3583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.540181][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 97.571636][ T5994] Zero length message leads to an empty skb [ 97.643898][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 97.672005][ T5875] veth0_macvtap: entered promiscuous mode [ 97.681145][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'. [ 97.702558][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.731407][ T5875] veth1_macvtap: entered promiscuous mode [ 97.740970][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.840467][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.848408][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.884893][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.981567][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.006886][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.007850][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.105682][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.106295][ T1342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.142313][ T5872] Bluetooth: hci0: command tx timeout [ 98.147808][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.194822][ T3538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.214715][ T3538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.223943][ T5872] Bluetooth: hci1: command tx timeout [ 98.240596][ T3538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.324391][ T6014] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 98.383074][ T5872] Bluetooth: hci2: command tx timeout [ 98.460477][ T5872] Bluetooth: hci3: command tx timeout [ 98.540795][ T5872] Bluetooth: hci4: command tx timeout [ 98.674672][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.727086][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.841297][ T6028] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.884123][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.917309][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.918794][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.142017][ T6039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19'. [ 99.217545][ T6042] netlink: 'syz.0.20': attribute type 11 has an invalid length. [ 99.273362][ T6042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20'. [ 99.351428][ T6042] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 99.421105][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 99.465481][ T30] audit: type=1804 audit(1755609466.209:2): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.22" name="/newroot/2/cgroup.controllers" dev="tmpfs" ino=28 res=1 errno=0 [ 99.563458][ T30] audit: type=1800 audit(1755609466.209:3): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22" name="cgroup.controllers" dev="tmpfs" ino=28 res=0 errno=0 [ 100.841855][ T6120] netlink: 'syz.2.40': attribute type 2 has an invalid length. [ 101.172891][ T6134] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 101.309393][ T6141] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 101.568608][ T6150] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 101.633524][ T6150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.521612][ T6196] __nla_validate_parse: 7 callbacks suppressed [ 102.521647][ T6196] netlink: 72 bytes leftover after parsing attributes in process `syz.4.61'. [ 102.563786][ T6196] netlink: 72 bytes leftover after parsing attributes in process `syz.4.61'. [ 102.649701][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 102.796934][ T6209] netlink: 144 bytes leftover after parsing attributes in process `syz.2.65'. [ 102.912004][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.67'. [ 103.156587][ T6223] FAULT_INJECTION: forcing a failure. [ 103.156587][ T6223] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.161625][ T6222] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 103.208963][ T6223] CPU: 1 UID: 0 PID: 6223 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT(full) [ 103.209001][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.209022][ T6223] Call Trace: [ 103.209031][ T6223] [ 103.209040][ T6223] dump_stack_lvl+0x189/0x250 [ 103.209076][ T6223] ? __pfx____ratelimit+0x10/0x10 [ 103.209106][ T6223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.209132][ T6223] ? __pfx__printk+0x10/0x10 [ 103.209163][ T6223] ? __might_fault+0xb0/0x130 [ 103.209205][ T6223] should_fail_ex+0x414/0x560 [ 103.209239][ T6223] _copy_from_iter+0x1db/0x16f0 [ 103.209265][ T6223] ? rcu_is_watching+0x15/0xb0 [ 103.209289][ T6223] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 103.209320][ T6223] ? __pfx__copy_from_iter+0x10/0x10 [ 103.209343][ T6223] ? __build_skb_around+0x257/0x3e0 [ 103.209380][ T6223] ? netlink_sendmsg+0x642/0xb30 [ 103.209410][ T6223] ? skb_put+0x11b/0x210 [ 103.209446][ T6223] netlink_sendmsg+0x6b2/0xb30 [ 103.209488][ T6223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.209524][ T6223] ? aa_sock_msg_perm+0xf1/0x1d0 [ 103.209559][ T6223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 103.209582][ T6223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.209619][ T6223] __sock_sendmsg+0x219/0x270 [ 103.209648][ T6223] ____sys_sendmsg+0x505/0x830 [ 103.209675][ T6223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.209705][ T6223] ? import_iovec+0x74/0xa0 [ 103.209732][ T6223] ___sys_sendmsg+0x21f/0x2a0 [ 103.209756][ T6223] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.209816][ T6223] ? __fget_files+0x2a/0x420 [ 103.209855][ T6223] ? __fget_files+0x3a0/0x420 [ 103.209897][ T6223] __x64_sys_sendmsg+0x19b/0x260 [ 103.209920][ T6223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.209952][ T6223] ? __pfx_ksys_write+0x10/0x10 [ 103.209977][ T6223] ? rcu_is_watching+0x15/0xb0 [ 103.210003][ T6223] ? do_syscall_64+0xbe/0x3b0 [ 103.210038][ T6223] do_syscall_64+0xfa/0x3b0 [ 103.210067][ T6223] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.210095][ T6223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.210115][ T6223] ? clear_bhb_loop+0x60/0xb0 [ 103.210141][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.210161][ T6223] RIP: 0033:0x7f1cba38ebe9 [ 103.210187][ T6223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.210204][ T6223] RSP: 002b:00007f1cbb20d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.210226][ T6223] RAX: ffffffffffffffda RBX: 00007f1cba5b5fa0 RCX: 00007f1cba38ebe9 [ 103.210242][ T6223] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 103.210255][ T6223] RBP: 00007f1cbb20d090 R08: 0000000000000000 R09: 0000000000000000 [ 103.210267][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.210279][ T6223] R13: 00007f1cba5b6038 R14: 00007f1cba5b5fa0 R15: 00007ffdb65b0358 [ 103.210311][ T6223] [ 103.540724][ T6228] gretap1: entered promiscuous mode [ 103.813777][ T6240] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.945729][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 103.954908][ T6249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.75'. [ 103.993860][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.002242][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.200670][ T6261] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.80'. [ 104.233700][ T6261] netlink: 252 bytes leftover after parsing attributes in process `syz.4.80'. [ 104.660423][ T6276] FAULT_INJECTION: forcing a failure. [ 104.660423][ T6276] name failslab, interval 1, probability 0, space 0, times 1 [ 104.716920][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(full) [ 104.716949][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.716962][ T6276] Call Trace: [ 104.716970][ T6276] [ 104.716980][ T6276] dump_stack_lvl+0x189/0x250 [ 104.717011][ T6276] ? __pfx____ratelimit+0x10/0x10 [ 104.717041][ T6276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.717067][ T6276] ? __pfx__printk+0x10/0x10 [ 104.717100][ T6276] ? __lock_acquire+0xab9/0xd20 [ 104.717142][ T6276] should_fail_ex+0x414/0x560 [ 104.717176][ T6276] should_failslab+0xa8/0x100 [ 104.717210][ T6276] kmem_cache_alloc_noprof+0x73/0x3c0 [ 104.717238][ T6276] ? skb_clone+0x212/0x3a0 [ 104.717266][ T6276] skb_clone+0x212/0x3a0 [ 104.717293][ T6276] __netlink_deliver_tap+0x404/0x850 [ 104.717339][ T6276] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.717372][ T6276] netlink_deliver_tap+0x19c/0x1b0 [ 104.717405][ T6276] netlink_unicast+0x7fa/0x9e0 [ 104.717443][ T6276] ? __pfx_netlink_unicast+0x10/0x10 [ 104.717473][ T6276] ? netlink_sendmsg+0x642/0xb30 [ 104.717502][ T6276] ? skb_put+0x11b/0x210 [ 104.717539][ T6276] netlink_sendmsg+0x805/0xb30 [ 104.717582][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.717617][ T6276] ? aa_sock_msg_perm+0xf1/0x1d0 [ 104.717653][ T6276] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.717676][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.717708][ T6276] __sock_sendmsg+0x219/0x270 [ 104.717748][ T6276] ____sys_sendmsg+0x505/0x830 [ 104.717777][ T6276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.717809][ T6276] ? import_iovec+0x74/0xa0 [ 104.717838][ T6276] ___sys_sendmsg+0x21f/0x2a0 [ 104.717863][ T6276] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.717926][ T6276] ? __fget_files+0x2a/0x420 [ 104.717961][ T6276] ? __fget_files+0x3a0/0x420 [ 104.718006][ T6276] __x64_sys_sendmsg+0x19b/0x260 [ 104.718031][ T6276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.718064][ T6276] ? __pfx_ksys_write+0x10/0x10 [ 104.718089][ T6276] ? rcu_is_watching+0x15/0xb0 [ 104.718117][ T6276] ? do_syscall_64+0xbe/0x3b0 [ 104.718152][ T6276] do_syscall_64+0xfa/0x3b0 [ 104.718181][ T6276] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.718209][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.718230][ T6276] ? clear_bhb_loop+0x60/0xb0 [ 104.718257][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.718278][ T6276] RIP: 0033:0x7fb96bf8ebe9 [ 104.718296][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.718314][ T6276] RSP: 002b:00007fb96cd1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.718337][ T6276] RAX: ffffffffffffffda RBX: 00007fb96c1b5fa0 RCX: 00007fb96bf8ebe9 [ 104.718352][ T6276] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 104.718366][ T6276] RBP: 00007fb96cd1c090 R08: 0000000000000000 R09: 0000000000000000 [ 104.718379][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.718391][ T6276] R13: 00007fb96c1b6038 R14: 00007fb96c1b5fa0 R15: 00007ffd477edea8 [ 104.718425][ T6276] [ 105.327104][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 105.736786][ T6325] netlink: 'syz.0.97': attribute type 23 has an invalid length. [ 105.971188][ T6333] FAULT_INJECTION: forcing a failure. [ 105.971188][ T6333] name failslab, interval 1, probability 0, space 0, times 0 [ 106.048937][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(full) [ 106.048967][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.048980][ T6333] Call Trace: [ 106.048988][ T6333] [ 106.048996][ T6333] dump_stack_lvl+0x189/0x250 [ 106.049026][ T6333] ? __pfx____ratelimit+0x10/0x10 [ 106.049055][ T6333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.049080][ T6333] ? __pfx__printk+0x10/0x10 [ 106.049116][ T6333] ? __pfx___might_resched+0x10/0x10 [ 106.049135][ T6333] ? fs_reclaim_acquire+0x7d/0x100 [ 106.049172][ T6333] should_fail_ex+0x414/0x560 [ 106.049206][ T6333] should_failslab+0xa8/0x100 [ 106.049239][ T6333] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 106.049268][ T6333] ? __alloc_skb+0x112/0x2d0 [ 106.049305][ T6333] __alloc_skb+0x112/0x2d0 [ 106.049342][ T6333] netlink_ack+0x146/0xa50 [ 106.049399][ T6333] netlink_rcv_skb+0x28c/0x470 [ 106.049432][ T6333] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 106.049461][ T6333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.049503][ T6333] ? bpf_lsm_capable+0x9/0x20 [ 106.049532][ T6333] ? security_capable+0x7e/0x2e0 [ 106.049583][ T6333] nfnetlink_rcv+0x26a/0x2520 [ 106.049611][ T6333] ? __dev_queue_xmit+0x1d79/0x3b50 [ 106.049647][ T6333] ? __dev_queue_xmit+0x27b/0x3b50 [ 106.049683][ T6333] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 106.049708][ T6333] ? __pfx___dev_queue_xmit+0x10/0x10 [ 106.049746][ T6333] ? ref_tracker_free+0x63a/0x7d0 [ 106.049775][ T6333] ? __asan_memcpy+0x40/0x70 [ 106.049798][ T6333] ? __pfx_ref_tracker_free+0x10/0x10 [ 106.049824][ T6333] ? __skb_clone+0x63/0x7a0 [ 106.049849][ T6333] ? __skb_clone+0x483/0x7a0 [ 106.049877][ T6333] ? skb_clone+0x246/0x3a0 [ 106.049902][ T6333] ? __netlink_deliver_tap+0x807/0x850 [ 106.049931][ T6333] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.049968][ T6333] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.050005][ T6333] netlink_unicast+0x82c/0x9e0 [ 106.050042][ T6333] ? __pfx_netlink_unicast+0x10/0x10 [ 106.050071][ T6333] ? netlink_sendmsg+0x642/0xb30 [ 106.050099][ T6333] ? skb_put+0x11b/0x210 [ 106.050134][ T6333] netlink_sendmsg+0x805/0xb30 [ 106.050174][ T6333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.050209][ T6333] ? aa_sock_msg_perm+0xf1/0x1d0 [ 106.050243][ T6333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.050281][ T6333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.050314][ T6333] __sock_sendmsg+0x219/0x270 [ 106.050344][ T6333] ____sys_sendmsg+0x505/0x830 [ 106.050372][ T6333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.050411][ T6333] ? import_iovec+0x74/0xa0 [ 106.050439][ T6333] ___sys_sendmsg+0x21f/0x2a0 [ 106.050463][ T6333] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.050524][ T6333] ? __fget_files+0x2a/0x420 [ 106.050556][ T6333] ? __fget_files+0x3a0/0x420 [ 106.050600][ T6333] __x64_sys_sendmsg+0x19b/0x260 [ 106.050625][ T6333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.050658][ T6333] ? __pfx_ksys_write+0x10/0x10 [ 106.050683][ T6333] ? rcu_is_watching+0x15/0xb0 [ 106.050710][ T6333] ? do_syscall_64+0xbe/0x3b0 [ 106.050745][ T6333] do_syscall_64+0xfa/0x3b0 [ 106.050774][ T6333] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.050802][ T6333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.050823][ T6333] ? clear_bhb_loop+0x60/0xb0 [ 106.050849][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.050870][ T6333] RIP: 0033:0x7f1cba38ebe9 [ 106.050889][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.050907][ T6333] RSP: 002b:00007f1cbb20d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.050929][ T6333] RAX: ffffffffffffffda RBX: 00007f1cba5b5fa0 RCX: 00007f1cba38ebe9 [ 106.050944][ T6333] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 106.050958][ T6333] RBP: 00007f1cbb20d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.050970][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.050982][ T6333] R13: 00007f1cba5b6038 R14: 00007f1cba5b5fa0 R15: 00007ffdb65b0358 [ 106.051014][ T6333] [ 106.727694][ T6355] netlink: 'syz.4.103': attribute type 11 has an invalid length. [ 107.017670][ T6363] trusted_key: syz.2.109 sent an empty control message without MSG_MORE. [ 107.890431][ T6399] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.347686][ T6417] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 108.367252][ T6414] tunl0: entered promiscuous mode [ 108.400076][ T6414] netlink: 'syz.2.122': attribute type 3 has an invalid length. [ 108.407775][ T6414] __nla_validate_parse: 6 callbacks suppressed [ 108.407791][ T6414] netlink: 9 bytes leftover after parsing attributes in process `syz.2.122'. [ 108.463534][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 108.476082][ T6422] FAULT_INJECTION: forcing a failure. [ 108.476082][ T6422] name failslab, interval 1, probability 0, space 0, times 0 [ 108.495246][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: syz.3.125 Not tainted syzkaller #0 PREEMPT(full) [ 108.495273][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.495285][ T6422] Call Trace: [ 108.495293][ T6422] [ 108.495302][ T6422] dump_stack_lvl+0x189/0x250 [ 108.495332][ T6422] ? __pfx____ratelimit+0x10/0x10 [ 108.495359][ T6422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.495383][ T6422] ? __pfx__printk+0x10/0x10 [ 108.495407][ T6422] ? nfnetlink_rcv+0x26a/0x2520 [ 108.495432][ T6422] ? ____sys_sendmsg+0x505/0x830 [ 108.495451][ T6422] ? __x64_sys_sendmsg+0x19b/0x260 [ 108.495492][ T6422] should_fail_ex+0x414/0x560 [ 108.495523][ T6422] should_failslab+0xa8/0x100 [ 108.495555][ T6422] kmem_cache_alloc_noprof+0x73/0x3c0 [ 108.495582][ T6422] ? skb_clone+0x212/0x3a0 [ 108.495607][ T6422] skb_clone+0x212/0x3a0 [ 108.495633][ T6422] __netlink_deliver_tap+0x404/0x850 [ 108.495678][ T6422] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.495710][ T6422] netlink_deliver_tap+0x19c/0x1b0 [ 108.495742][ T6422] netlink_sendskb+0x68/0x140 [ 108.495771][ T6422] netlink_unicast+0x397/0x9e0 [ 108.495796][ T6422] ? __asan_memcpy+0x40/0x70 [ 108.495829][ T6422] ? __pfx_netlink_unicast+0x10/0x10 [ 108.495866][ T6422] netlink_rcv_skb+0x28c/0x470 [ 108.495895][ T6422] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 108.495920][ T6422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.495957][ T6422] ? bpf_lsm_capable+0x9/0x20 [ 108.495983][ T6422] ? security_capable+0x7e/0x2e0 [ 108.496018][ T6422] nfnetlink_rcv+0x26a/0x2520 [ 108.496045][ T6422] ? __dev_queue_xmit+0x1d79/0x3b50 [ 108.496075][ T6422] ? __dev_queue_xmit+0x27b/0x3b50 [ 108.496107][ T6422] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 108.496130][ T6422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 108.496164][ T6422] ? ref_tracker_free+0x63a/0x7d0 [ 108.496191][ T6422] ? __asan_memcpy+0x40/0x70 [ 108.496213][ T6422] ? __pfx_ref_tracker_free+0x10/0x10 [ 108.496255][ T6422] ? skb_clone+0x246/0x3a0 [ 108.496279][ T6422] ? __netlink_deliver_tap+0x807/0x850 [ 108.496308][ T6422] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.496346][ T6422] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.496385][ T6422] netlink_unicast+0x82c/0x9e0 [ 108.496423][ T6422] ? __pfx_netlink_unicast+0x10/0x10 [ 108.496453][ T6422] ? netlink_sendmsg+0x642/0xb30 [ 108.496488][ T6422] ? skb_put+0x11b/0x210 [ 108.496525][ T6422] netlink_sendmsg+0x805/0xb30 [ 108.496561][ T6422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.496590][ T6422] ? aa_sock_msg_perm+0xf1/0x1d0 [ 108.496621][ T6422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.496643][ T6422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.496675][ T6422] __sock_sendmsg+0x219/0x270 [ 108.496705][ T6422] ____sys_sendmsg+0x505/0x830 [ 108.496732][ T6422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.496763][ T6422] ? import_iovec+0x74/0xa0 [ 108.496791][ T6422] ___sys_sendmsg+0x21f/0x2a0 [ 108.496813][ T6422] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.496870][ T6422] ? __fget_files+0x2a/0x420 [ 108.496902][ T6422] ? __fget_files+0x3a0/0x420 [ 108.496945][ T6422] __x64_sys_sendmsg+0x19b/0x260 [ 108.496970][ T6422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.497003][ T6422] ? __pfx_ksys_write+0x10/0x10 [ 108.497029][ T6422] ? rcu_is_watching+0x15/0xb0 [ 108.497057][ T6422] ? do_syscall_64+0xbe/0x3b0 [ 108.497093][ T6422] do_syscall_64+0xfa/0x3b0 [ 108.497122][ T6422] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.497150][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.497172][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 108.497199][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.497218][ T6422] RIP: 0033:0x7fb96bf8ebe9 [ 108.497239][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.497257][ T6422] RSP: 002b:00007fb96cd1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.497279][ T6422] RAX: ffffffffffffffda RBX: 00007fb96c1b5fa0 RCX: 00007fb96bf8ebe9 [ 108.497294][ T6422] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 108.497307][ T6422] RBP: 00007fb96cd1c090 R08: 0000000000000000 R09: 0000000000000000 [ 108.497320][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.497332][ T6422] R13: 00007fb96c1b6038 R14: 00007fb96c1b5fa0 R15: 00007ffd477edea8 [ 108.497367][ T6422] [ 108.516242][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.123'. [ 109.151807][ T6425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.359087][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 109.577448][ T6460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.133'. [ 109.782332][ T6464] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 109.797282][ T6467] FAULT_INJECTION: forcing a failure. [ 109.797282][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.820077][ T6464] bridge0: port 3(team0) entered blocking state [ 109.849398][ T6464] bridge0: port 3(team0) entered disabled state [ 109.850791][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.1.137 Not tainted syzkaller #0 PREEMPT(full) [ 109.850821][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.850837][ T6467] Call Trace: [ 109.850846][ T6467] [ 109.850856][ T6467] dump_stack_lvl+0x189/0x250 [ 109.850893][ T6467] ? __pfx____ratelimit+0x10/0x10 [ 109.850927][ T6467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.850958][ T6467] ? __pfx__printk+0x10/0x10 [ 109.851011][ T6467] should_fail_ex+0x414/0x560 [ 109.851051][ T6467] _copy_to_user+0x31/0xb0 [ 109.851078][ T6467] simple_read_from_buffer+0xe1/0x170 [ 109.851119][ T6467] proc_fail_nth_read+0x1b3/0x220 [ 109.851152][ T6467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.851182][ T6467] ? rw_verify_area+0x2a6/0x4d0 [ 109.851222][ T6467] ? __lock_acquire+0xab9/0xd20 [ 109.851256][ T6467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.851285][ T6467] vfs_read+0x200/0xa30 [ 109.851317][ T6467] ? fdget_pos+0x247/0x320 [ 109.851344][ T6467] ? __pfx___mutex_lock+0x10/0x10 [ 109.851380][ T6467] ? __pfx_vfs_read+0x10/0x10 [ 109.851413][ T6467] ? __fget_files+0x2a/0x420 [ 109.851455][ T6467] ? __fget_files+0x3a0/0x420 [ 109.851490][ T6467] ? __fget_files+0x2a/0x420 [ 109.851540][ T6467] ksys_read+0x145/0x250 [ 109.851573][ T6467] ? __pfx_ksys_read+0x10/0x10 [ 109.851601][ T6467] ? rcu_is_watching+0x15/0xb0 [ 109.851634][ T6467] ? do_syscall_64+0xbe/0x3b0 [ 109.851681][ T6467] do_syscall_64+0xfa/0x3b0 [ 109.851713][ T6467] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.851745][ T6467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.851769][ T6467] ? clear_bhb_loop+0x60/0xb0 [ 109.851798][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.851822][ T6467] RIP: 0033:0x7f1cba38d5fc [ 109.851843][ T6467] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 109.851863][ T6467] RSP: 002b:00007f1cbb20d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.851888][ T6467] RAX: ffffffffffffffda RBX: 00007f1cba5b5fa0 RCX: 00007f1cba38d5fc [ 109.851905][ T6467] RDX: 000000000000000f RSI: 00007f1cbb20d0a0 RDI: 0000000000000004 [ 109.851920][ T6467] RBP: 00007f1cbb20d090 R08: 0000000000000000 R09: 0000000000000000 [ 109.851934][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.851948][ T6467] R13: 00007f1cba5b6038 R14: 00007f1cba5b5fa0 R15: 00007ffdb65b0358 [ 109.851984][ T6467] [ 110.170601][ T6464] team0: entered allmulticast mode [ 110.175881][ T6464] team_slave_0: entered allmulticast mode [ 110.186874][ T6480] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 110.207020][ T6464] team_slave_1: entered allmulticast mode [ 110.216157][ T6464] team0: entered promiscuous mode [ 110.227637][ T6464] team_slave_0: entered promiscuous mode [ 110.234302][ T6464] team_slave_1: entered promiscuous mode [ 110.244956][ T6464] bridge0: port 3(team0) entered blocking state [ 110.252025][ T6464] bridge0: port 3(team0) entered forwarding state [ 110.309422][ T6480] bridge0: port 3(team0) entered disabled state [ 110.316052][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.324603][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.391181][ T6490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.142'. [ 110.417019][ T6480] bridge0: port 3(team0) entered blocking state [ 110.423513][ T6480] bridge0: port 3(team0) entered forwarding state [ 110.425849][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.141'. [ 110.430380][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.446266][ T6480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.447593][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 110.453828][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.454690][ T6480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.495753][ T6480] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 110.512988][ T6490] unsupported nlmsg_type 40 [ 110.794733][ T6503] netlink: 'syz.2.145': attribute type 8 has an invalid length. [ 110.816294][ T6503] netlink: 'syz.2.145': attribute type 8 has an invalid length. [ 111.127632][ T6518] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 111.163270][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.224204][ T6518] bridge_slave_1: left allmulticast mode [ 111.263355][ T6518] bridge_slave_1: left promiscuous mode [ 111.304219][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.356332][ T6518] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 111.617104][ T6533] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 112.359258][ T6569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.164'. [ 113.024798][ T6570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.041865][ T6570] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 113.148100][ T6570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.153548][ T6604] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 113.173086][ T6607] veth1_to_bond: entered allmulticast mode [ 113.181876][ T6570] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 113.206520][ T6607] netlink: 46 bytes leftover after parsing attributes in process `syz.4.169'. [ 113.256965][ T6605] veth1_to_bond: left allmulticast mode [ 113.340902][ T6570] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.364548][ T6570] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 113.469148][ T6570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.500130][ T6570] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 113.501282][ T6614] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 113.556139][ T6570] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 113.562713][ T6614] nbd: error processing sock list [ 113.568213][ T6614] block nbd0: shutting down sockets [ 113.578897][ T6570] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 113.873481][ T6626] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.179'. [ 114.422006][ T6645] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.232570][ T6699] geneve2: entered promiscuous mode [ 115.252227][ T6699] geneve2: entered allmulticast mode [ 115.274518][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 115.313524][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 115.353282][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 115.375276][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 115.438496][ T6703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.198'. [ 116.281687][ T6733] netlink: 71 bytes leftover after parsing attributes in process `syz.2.202'. [ 116.580621][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 116.602979][ T6746] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 116.679022][ T6748] C: renamed from lo (while UP) [ 116.704634][ T6748] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 116.744832][ T6750] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 116.792628][ T6750] netlink: 'syz.2.208': attribute type 2 has an invalid length. [ 117.467028][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.217'. [ 117.500869][ T6785] netlink: 48 bytes leftover after parsing attributes in process `syz.4.217'. [ 117.645706][ T6792] netlink: 'syz.0.219': attribute type 2 has an invalid length. [ 117.703223][ T6792] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 117.724155][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 117.753324][ T6792] netlink: 'syz.0.219': attribute type 2 has an invalid length. [ 117.779807][ T6792] netlink: 'syz.0.219': attribute type 2 has an invalid length. [ 118.328365][ T6820] bridge1: entered promiscuous mode [ 118.348346][ T6820] bridge1: entered allmulticast mode [ 118.379206][ T6830] netlink: 176 bytes leftover after parsing attributes in process `syz.2.227'. [ 118.405941][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.227'. [ 118.461639][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.227'. [ 118.826780][ T6847] bridge0: port 3(batadv1) entered blocking state [ 118.900398][ T6847] bridge0: port 3(batadv1) entered disabled state [ 118.907103][ T6847] batadv1: entered allmulticast mode [ 118.965414][ T6847] batadv1: entered promiscuous mode [ 119.255228][ T6861] netlink: 'syz.2.238': attribute type 4 has an invalid length. [ 119.290190][ T3583] batman_adv: batadv1: IGMP Querier appeared [ 119.296437][ T3583] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 119.308449][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 119.327870][ T6863] netlink: 'syz.2.238': attribute type 4 has an invalid length. [ 119.486459][ T6861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.512623][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 119.682464][ T6880] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 119.766007][ T6880] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 120.375216][ T6907] netlink: 80 bytes leftover after parsing attributes in process `syz.3.252'. [ 120.419225][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 121.378223][ T6948] veth0_to_team: entered promiscuous mode [ 121.435253][ T6948] veth0_to_team: entered allmulticast mode [ 121.511005][ T6964] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 121.518713][ T6964] netlink: 128 bytes leftover after parsing attributes in process `syz.1.264'. [ 121.575474][ T6964] netlink: 'syz.1.264': attribute type 2 has an invalid length. [ 121.591290][ T6964] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 121.760281][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 121.821363][ T6980] netlink: 1 bytes leftover after parsing attributes in process `syz.0.269'. [ 121.837229][ T6980] xt_policy: neither incoming nor outgoing policy selected [ 121.842839][ T6977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.866386][ T6977] bond0: (slave rose0): Enslaving as an active interface with an up link [ 121.886324][ T6987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.267'. [ 121.930114][ T6971] netlink: 108 bytes leftover after parsing attributes in process `syz.4.267'. [ 122.342160][ T7002] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 122.390511][ T7002] netlink: 180 bytes leftover after parsing attributes in process `syz.3.275'. [ 122.827415][ T7005] bond2 (unregistering): Released all slaves [ 123.139129][ T7041] netlink: 'syz.2.284': attribute type 4 has an invalid length. [ 123.277250][ T7044] tipc: Started in network mode [ 123.315700][ T7044] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 123.370670][ T7044] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 123.379985][ T7044] tipc: Enabled bearer , priority 10 [ 123.600388][ T7059] netlink: 'syz.3.291': attribute type 4 has an invalid length. [ 123.756108][ T30] audit: type=1804 audit(1755609490.499:4): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.292" name="/newroot/51/cgroup.controllers" dev="tmpfs" ino=277 res=1 errno=0 [ 123.867788][ T30] audit: type=1800 audit(1755609490.529:5): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.292" name="cgroup.controllers" dev="tmpfs" ino=277 res=0 errno=0 [ 123.954886][ T7078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.094518][ T7078] team0: Device wireguard0 is of different type [ 124.499913][ T5971] tipc: Node number set to 1 [ 124.846595][ T7115] __nla_validate_parse: 4 callbacks suppressed [ 124.846617][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'. [ 125.141264][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 125.161474][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 125.357600][ T7143] netlink: 284 bytes leftover after parsing attributes in process `syz.4.309'. [ 125.537578][ T7148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'. [ 125.578412][ T7148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'. [ 125.653689][ T7153] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 126.590845][ T7208] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 126.622174][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 126.685532][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 126.757772][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 126.797166][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 127.208252][ T7238] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 127.297616][ T7240] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 127.723074][ T7252] tipc: Started in network mode [ 127.728024][ T7252] tipc: Node identity 6a93acc9fa28, cluster identity 4711 [ 127.769305][ T7252] tipc: Enabled bearer , priority 0 [ 127.811605][ T7252] syzkaller0: entered promiscuous mode [ 127.817163][ T7252] syzkaller0: entered allmulticast mode [ 127.871326][ T7252] tipc: Resetting bearer [ 127.893846][ T7251] tipc: Resetting bearer [ 128.002793][ T7251] tipc: Disabling bearer [ 128.664431][ T7301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.245929][ T7329] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 129.629586][ T7340] syzkaller0: entered promiscuous mode [ 129.635405][ T7340] syzkaller0: entered allmulticast mode [ 130.396013][ T7371] __nla_validate_parse: 7 callbacks suppressed [ 130.396035][ T7371] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.361'. [ 130.437294][ T7372] netlink: 816 bytes leftover after parsing attributes in process `syz.4.360'. [ 130.606144][ T7379] netlink: 'syz.1.363': attribute type 83 has an invalid length. [ 130.754672][ T7387] sctp: [Deprecated]: syz.1.363 (pid 7387) Use of int in max_burst socket option deprecated. [ 130.754672][ T7387] Use struct sctp_assoc_value instead [ 131.755578][ T7396] sctp: [Deprecated]: syz.4.367 (pid 7396) Use of int in max_burst socket option. [ 131.755578][ T7396] Use struct sctp_assoc_value instead [ 132.079264][ T7410] sctp: Trying to GSO but underlying device doesn't support it. [ 132.262429][ T7418] netlink: 'syz.2.375': attribute type 4 has an invalid length. [ 132.307573][ T7421] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.377'. [ 132.918128][ T7445] x_tables: ip_tables: udp match: only valid for protocol 17 [ 132.999137][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 133.018854][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 133.019397][ T7441] syzkaller1: entered promiscuous mode [ 133.063739][ T7441] syzkaller1: entered allmulticast mode [ 133.105870][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.114848][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.177209][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 133.225812][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.252081][ T7453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 133.270507][ T7460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.290254][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.311557][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.333841][ T1342] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.476293][ T7464] team0: Device gtp0 is of different type [ 133.796833][ T7484] openvswitch: netlink: Duplicate or invalid key (type 0). [ 133.816808][ T7484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.941216][ T7491] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 134.288193][ T7496] dvmrp0: entered allmulticast mode [ 134.303836][ T7496] dvmrp0: left allmulticast mode [ 134.470200][ T7508] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 134.531035][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 134.570117][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.402'. [ 134.579143][ T7512] netlink: 'syz.4.402': attribute type 7 has an invalid length. [ 134.620310][ T7512] netlink: 'syz.4.402': attribute type 8 has an invalid length. [ 134.685590][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 134.761641][ T7512] gretap0: entered promiscuous mode [ 134.768265][ T7512] batadv_slave_1: entered promiscuous mode [ 134.811650][ T7512] erspan0: entered promiscuous mode [ 135.094930][ T7541] nbd: illegal input index -8454144 [ 135.375323][ T7546] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 136.269433][ T7582] nbd: must specify an index to disconnect [ 136.623974][ T7598] __nla_validate_parse: 43 callbacks suppressed [ 136.623994][ T7598] netlink: 32 bytes leftover after parsing attributes in process `syz.4.424'. [ 136.661224][ T7598] netlink: 96 bytes leftover after parsing attributes in process `syz.4.424'. [ 137.036791][ T7618] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 137.303120][ T7629] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (10) [ 137.851334][ T7653] netlink: 'syz.4.438': attribute type 2 has an invalid length. [ 138.217670][ T7678] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 138.236658][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 138.261523][ T7672] bond0: entered promiscuous mode [ 138.266625][ T7672] bond_slave_0: entered promiscuous mode [ 138.276503][ T7672] bond_slave_1: entered promiscuous mode [ 138.303021][ T7672] bond0: left promiscuous mode [ 138.324243][ T7672] bond_slave_0: left promiscuous mode [ 138.338337][ T7672] bond_slave_1: left promiscuous mode [ 138.371942][ T7678] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 138.542553][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.446'. [ 138.825159][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.448'. [ 139.227383][ T7729] IPVS: set_ctl: invalid protocol: 26 2.0.0.0:21 [ 139.374405][ T7740] netlink: 152 bytes leftover after parsing attributes in process `syz.0.459'. [ 139.383775][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 139.405922][ T7740] openvswitch: netlink: Key type 75 is out of range max 32 [ 139.564355][ T7747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.461'. [ 139.598749][ T7747] IPv6: sit1: Disabled Multicast RS [ 139.615338][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 139.638676][ T7749] netlink: 'syz.1.462': attribute type 3 has an invalid length. [ 139.834536][ T7758] Bluetooth: MGMT ver 1.23 [ 140.293265][ T7779] tipc: Started in network mode [ 140.324797][ T7779] tipc: Node identity ae43a3b8fe2b, cluster identity 4711 [ 140.337529][ T7779] tipc: Enabled bearer , priority 0 [ 140.471417][ T7779] syzkaller0: entered promiscuous mode [ 140.488500][ T7779] syzkaller0: entered allmulticast mode [ 140.496962][ T7779] tipc: Resetting bearer [ 140.584259][ T7787] netlink: 76 bytes leftover after parsing attributes in process `syz.1.476'. [ 140.708333][ T7777] tipc: Resetting bearer [ 141.412443][ T10] tipc: Node number set to 1349034936 [ 141.848558][ T7777] tipc: Disabling bearer [ 141.859099][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.479'. [ 141.868538][ T7810] tipc: Invalid UDP bearer configuration [ 141.868599][ T7810] tipc: Enabling of bearer rejected, failed to enable media [ 142.087158][ T7818] sch_fq: defrate 1 ignored. [ 142.139123][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 142.686417][ T7847] IPVS: length: 8 != 1152 [ 142.704361][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.491'. [ 143.167098][ T7867] netlink: 'syz.3.497': attribute type 64 has an invalid length. [ 143.214302][ T7871] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:0 [ 143.218277][ T7868] netlink: 'syz.3.497': attribute type 64 has an invalid length. [ 143.248500][ T7867] netlink: 5 bytes leftover after parsing attributes in process `syz.3.497'. [ 143.302530][ T7868] netlink: 5 bytes leftover after parsing attributes in process `syz.3.497'. [ 143.586647][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.503'. [ 144.000116][ T7904] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20003 [ 144.058447][ T7908] netlink: 44 bytes leftover after parsing attributes in process `syz.0.507'. [ 144.155884][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 144.650881][ T7933] batman_adv: batadv0: Adding interface: wlan1 [ 144.657620][ T7933] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.706994][ T7933] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 144.925044][ T7946] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 144.933221][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 144.998372][ T7950] netlink: 52 bytes leftover after parsing attributes in process `syz.3.520'. [ 145.097236][ T7951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.127994][ T7951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.153658][ T7951] bond0 (unregistering): Released all slaves [ 145.713429][ T7977] nbd: must specify at least one socket [ 145.729248][ T7978] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 145.990644][ T7991] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 146.725260][ T24] IPVS: starting estimator thread 0... [ 146.819859][ T8027] IPVS: using max 26 ests per chain, 62400 per kthread [ 147.121871][ T8039] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004 [ 147.233379][ T8042] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 147.295606][ T8050] netlink: 'syz.1.550': attribute type 4 has an invalid length. [ 147.580792][ T8063] __nla_validate_parse: 9 callbacks suppressed [ 147.580814][ T8063] netlink: 68 bytes leftover after parsing attributes in process `syz.2.554'. [ 147.903669][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806d809c00: rx timeout, send abort [ 147.913615][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d809c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 148.026291][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'. [ 148.058232][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 148.374545][ T8098] netlink: 52 bytes leftover after parsing attributes in process `syz.1.564'. [ 148.408036][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 149.039793][ T24] IPVS: starting estimator thread 0... [ 149.148166][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 149.200799][ T8126] IPVS: using max 25 ests per chain, 60000 per kthread [ 149.209943][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 149.280712][ T8132] bond3: entered promiscuous mode [ 149.286395][ T8132] bond3: entered allmulticast mode [ 149.353428][ T8132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.364868][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.575'. [ 149.456594][ T8143] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 149.635758][ T8149] netlink: 68 bytes leftover after parsing attributes in process `syz.1.580'. [ 149.993813][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.587'. [ 150.407952][ T8188] tipc: Enabled bearer , priority 0 [ 150.473340][ T8188] syzkaller0: entered promiscuous mode [ 150.479133][ T8188] syzkaller0: entered allmulticast mode [ 150.618217][ T8188] tipc: Resetting bearer [ 150.700728][ T8186] tipc: Resetting bearer [ 150.816345][ T8186] tipc: Disabling bearer [ 150.985925][ T8213] tipc: Enabled bearer , priority 0 [ 151.153185][ T8213] tipc: Disabling bearer [ 151.438771][ T8232] netlink: 'syz.1.607': attribute type 1 has an invalid length. [ 151.457918][ T8242] netlink: 'syz.4.611': attribute type 19 has an invalid length. [ 151.638950][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.646805][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.947369][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.966212][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.213822][ T8255] sctp: [Deprecated]: syz.1.614 (pid 8255) Use of int in maxseg socket option. [ 152.213822][ T8255] Use struct sctp_assoc_value instead [ 152.239152][ T3583] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.264929][ T3583] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.319214][ T3583] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.335918][ T3583] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.532520][ T8261] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.557387][ T8273] openvswitch: netlink: Duplicate or invalid key (type 0). [ 152.571336][ T8261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.581215][ T8273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.597206][ T8262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.614123][ T8264] netlink: 'syz.3.616': attribute type 3 has an invalid length. [ 152.623080][ T8264] __nla_validate_parse: 7 callbacks suppressed [ 152.623097][ T8264] netlink: 766 bytes leftover after parsing attributes in process `syz.3.616'. [ 152.641465][ T8266] vxcan1: tx address claim with dlc 0 [ 152.659488][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'. [ 152.670641][ T8270] netlink: 'syz.4.618': attribute type 1 has an invalid length. [ 152.678480][ T8270] netlink: 108 bytes leftover after parsing attributes in process `syz.4.618'. [ 153.262123][ T8298] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 153.332456][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.626'. [ 153.368781][ T8304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.413402][ T8309] netlink: 'syz.4.628': attribute type 6 has an invalid length. [ 153.556441][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 153.636280][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 153.665568][ T8320] netlink: 244 bytes leftover after parsing attributes in process `syz.2.632'. [ 153.696695][ T8321] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20002 [ 153.831664][ T8327] syz.4.634 uses old SIOCAX25GETINFO [ 153.916377][ T8329] netlink: 128 bytes leftover after parsing attributes in process `syz.3.635'. [ 153.941729][ T8333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.637'. [ 153.957035][ T8333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.637'. [ 154.009546][ T8329] netlink: 'syz.3.635': attribute type 142 has an invalid length. [ 154.249440][ T8342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.763181][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.077355][ T8381] syz_tun: entered allmulticast mode [ 155.173472][ T8381] syz_tun (unregistering): left allmulticast mode [ 155.482091][ T8397] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 155.663655][ T8409] netlink: 'syz.3.661': attribute type 1 has an invalid length. [ 155.781341][ T8412] gretap1: entered promiscuous mode [ 155.829090][ T8412] bond1: (slave gretap1): making interface the new active one [ 155.844519][ T8412] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 156.343093][ T8444] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 156.424155][ T8451] netlink: 'syz.1.673': attribute type 62 has an invalid length. [ 156.625334][ T8464] IPVS: stopping master sync thread 7991 ... [ 157.445827][ T8503] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 157.710048][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.727604][ T8514] __nla_validate_parse: 13 callbacks suppressed [ 157.727624][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 157.807701][ T8516] netlink: zone id is out of range [ 157.842745][ T8516] netlink: zone id is out of range [ 157.854909][ T8516] netlink: zone id is out of range [ 157.890566][ T8516] netlink: zone id is out of range [ 157.897837][ T8516] netlink: zone id is out of range [ 157.913114][ T8516] netlink: zone id is out of range [ 157.923817][ T8521] netlink: 'syz.3.695': attribute type 1 has an invalid length. [ 157.947178][ T8516] netlink: zone id is out of range [ 157.986341][ T8516] netlink: zone id is out of range [ 158.034921][ T8516] netlink: zone id is out of range [ 158.041088][ T8516] netlink: zone id is out of range [ 158.132065][ T8529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.144857][ T8529] bond3: (slave bond4): making interface the new active one [ 158.153393][ T8529] bond3: (slave bond4): Enslaving as an active interface with an up link [ 158.166467][ T8521] bridge0: Device is already in use. [ 158.256945][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 158.363070][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.697'. [ 158.377116][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.697'. [ 159.004146][ T8574] sctp: [Deprecated]: syz.4.707 (pid 8574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.004146][ T8574] Use struct sctp_sack_info instead [ 159.042034][ T8580] netlink: 'syz.3.709': attribute type 30 has an invalid length. [ 159.110817][ T8583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 159.384325][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 159.655119][ T8606] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 159.703855][ T8608] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 159.759465][ T8606] netlink: 100 bytes leftover after parsing attributes in process `syz.3.721'. [ 159.807157][ T8611] pim6reg1: entered promiscuous mode [ 159.826274][ T8611] pim6reg1: entered allmulticast mode [ 159.854512][ T8616] netlink: 'syz.2.722': attribute type 29 has an invalid length. [ 159.879887][ T8617] netlink: 'syz.2.722': attribute type 29 has an invalid length. [ 160.141814][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 160.540726][ T8640] bridge_slave_0: invalid flags given to default FDB implementation [ 160.580726][ T8640] 8021q: VLANs not supported on lo [ 160.702190][ T8648] netlink: 'syz.1.731': attribute type 83 has an invalid length. [ 160.956903][ T8655] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 160.993257][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.477376][ T8682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.742'. [ 161.645528][ T8685] netem: incorrect gi model size [ 161.668026][ T8685] netem: change failed [ 161.686533][ T8682] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 162.095632][ T8697] : entered promiscuous mode [ 162.154695][ T8701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.162285][ T8701] IPv6: NLM_F_CREATE should be set when creating new route [ 162.411661][ T8713] syzkaller1: entered promiscuous mode [ 162.417196][ T8713] syzkaller1: entered allmulticast mode [ 162.717843][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.756'. [ 162.996125][ T8748] batadv_slave_1: entered allmulticast mode [ 163.043322][ T8748] __nla_validate_parse: 1 callbacks suppressed [ 163.043341][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 163.074295][ T8752] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.247943][ T8762] sctp: [Deprecated]: syz.1.763 (pid 8762) Use of int in maxseg socket option. [ 163.247943][ T8762] Use struct sctp_assoc_value instead [ 163.276112][ T8762] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 163.292925][ T8747] batadv_slave_1: left allmulticast mode [ 163.312250][ T8762] veth0_vlan: entered allmulticast mode [ 163.483090][ T8762] veth0_vlan: left promiscuous mode [ 163.520080][ T8762] veth0_vlan: entered promiscuous mode [ 163.546059][ T8762] team0: Device veth0_vlan failed to register rx_handler [ 163.588743][ T8776] netlink: 72 bytes leftover after parsing attributes in process `syz.4.766'. [ 163.666178][ T8771] netlink: 'syz.3.765': attribute type 19 has an invalid length. [ 163.694971][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 163.882894][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'. [ 163.883057][ T8771] netlink: 'syz.3.765': attribute type 19 has an invalid length. [ 163.936887][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.938287][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 163.976561][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.008018][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.058742][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.110847][ T8798] netlink: 9 bytes leftover after parsing attributes in process `syz.1.775'. [ 164.229528][ T8798] gretap0: entered promiscuous mode [ 164.345999][ T8810] netlink: 96 bytes leftover after parsing attributes in process `syz.0.778'. [ 164.393240][ T8808] nbd: must specify a size in bytes for the device [ 164.623949][ T8812] syzkaller0: entered promiscuous mode [ 164.636309][ T8812] syzkaller0: entered allmulticast mode [ 164.776742][ T8833] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 164.985980][ T8842] bond4: (slave bridge3): making interface the new active one [ 164.999177][ T8842] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 165.194691][ T8855] net_ratelimit: 3 callbacks suppressed [ 165.194721][ T8855] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 165.311227][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 165.352046][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 165.818942][ T8884] smc: net device bond0 applied user defined pnetid SYZ2 [ 165.868993][ T8884] netlink: 14 bytes leftover after parsing attributes in process `syz.4.797'. [ 165.943454][ T8890] vxcan1: tx address claim with dest, not broadcast [ 166.201477][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.223371][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.263711][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.293242][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.323390][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.357694][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.377059][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.395192][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.406883][ T8905] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.505035][ T8884] smc: removing net device bond0 with user defined pnetid SYZ2 [ 166.548449][ T8884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.594490][ T8884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.617491][ T8884] bond0 (unregistering): Released all slaves [ 167.134375][ T8932] bond0: (slave bridge_slave_1): Releasing backup interface [ 167.963684][ T8976] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 168.023758][ T8976] bridge_slave_1: left allmulticast mode [ 168.040476][ T8976] bridge_slave_1: left promiscuous mode [ 168.055353][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.113641][ T8978] vlan2: entered allmulticast mode [ 168.154340][ T8978] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 168.197864][ T8985] __nla_validate_parse: 11 callbacks suppressed [ 168.197888][ T8985] netlink: 164 bytes leftover after parsing attributes in process `syz.3.825'. [ 168.321615][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 168.343006][ T8990] netlink: 100 bytes leftover after parsing attributes in process `syz.0.827'. [ 168.365622][ T8987] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 168.459114][ T8987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.508762][ T8987] vlan2: entered promiscuous mode [ 168.514011][ T8987] bond3: entered promiscuous mode [ 168.519421][ T8987] vlan2: entered allmulticast mode [ 168.526852][ T8987] bond3: entered allmulticast mode [ 168.598625][ T8987] bond3: (slave gretap1): making interface the new active one [ 168.630719][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 168.645947][ T8987] gretap1: entered promiscuous mode [ 168.666876][ T8987] gretap1: entered allmulticast mode [ 168.683996][ T8987] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 168.780502][ T9000] "syz.4.829" (9000) uses obsolete ecb(arc4) skcipher [ 168.809985][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.831'. [ 168.894304][ T9013] ieee802154 phy0 wpan0: encryption failed: -90 [ 168.976278][ T9018] netlink: 108 bytes leftover after parsing attributes in process `syz.4.834'. [ 169.014235][ T9018] netlink: 108 bytes leftover after parsing attributes in process `syz.4.834'. [ 169.060206][ T9018] netlink: 84 bytes leftover after parsing attributes in process `syz.4.834'. [ 169.150338][ T9027] nft_compat: unsupported protocol 1 [ 169.194829][ T9028] tipc: Enabling of bearer rejected, failed to enable media [ 169.296524][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'. [ 169.387793][ T9041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 170.218884][ T9067] net_ratelimit: 26 callbacks suppressed [ 170.218906][ T9067] openvswitch: netlink: IPv4 tun info is not correct [ 170.262522][ T9069] netlink: zone id is out of range [ 170.277965][ T9069] netlink: zone id is out of range [ 170.298192][ T9069] netlink: zone id is out of range [ 170.318406][ T9069] netlink: zone id is out of range [ 170.335237][ T9069] netlink: zone id is out of range [ 170.342058][ T9069] netlink: zone id is out of range [ 170.347226][ T9069] netlink: get zone limit has 8 unknown bytes [ 170.587695][ T9084] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 170.687361][ T9087] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 170.697000][ T9080] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 171.185604][ T9110] netlink: 'syz.4.862': attribute type 10 has an invalid length. [ 171.232559][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.260730][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.312868][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.335421][ T3538] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.560653][ T9136] netlink: 'syz.2.869': attribute type 2 has an invalid length. [ 171.879507][ T9149] "syz.3.872" (9149) uses obsolete ecb(arc4) skcipher [ 172.421890][ T9175] dvmrp0: entered allmulticast mode [ 172.470115][ T9173] dvmrp0: left allmulticast mode [ 172.580934][ T9177] batadv_slave_0: entered promiscuous mode [ 172.638518][ T9179] batadv_slave_0: left promiscuous mode [ 172.665932][ T9187] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 172.704540][ T5872] Bluetooth: hci0: command tx timeout [ 173.051463][ T9203] nbd: must specify an index to disconnect [ 173.248176][ T9212] __nla_validate_parse: 17 callbacks suppressed [ 173.248199][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 173.286468][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'. [ 173.297823][ T9212] vlan0: entered allmulticast mode [ 173.331019][ T9212] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 173.601838][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 173.645944][ T9235] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 173.695545][ T9238] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 173.720848][ T9235] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 173.746595][ T9235] gretap1: entered promiscuous mode [ 173.764043][ T9235] gretap1: entered allmulticast mode [ 173.773687][ T9240] netlink: 596 bytes leftover after parsing attributes in process `syz.4.899'. [ 174.061297][ T9247] netlink: 108 bytes leftover after parsing attributes in process `syz.1.903'. [ 174.306914][ T9259] batadv2: entered allmulticast mode [ 174.616069][ T9272] netlink: 'syz.1.909': attribute type 8 has an invalid length. [ 175.203742][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 175.253610][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 175.512455][ T9318] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 175.547998][ T9316] netlink: 'syz.3.920': attribute type 32 has an invalid length. [ 175.561263][ T9316] netlink: 60 bytes leftover after parsing attributes in process `syz.3.920'. [ 175.627404][ T9322] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.923'. [ 175.716340][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 175.847234][ T9331] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 175.878256][ T9331] netlink: 'syz.4.926': attribute type 3 has an invalid length. [ 175.911686][ T9338] tipc: Enabled bearer , priority 10 [ 176.065370][ T9347] bridge_slave_0: left allmulticast mode [ 176.105936][ T9347] bridge_slave_0: left promiscuous mode [ 176.127791][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.165511][ T9347] bridge_slave_1: left allmulticast mode [ 176.212163][ T9347] bridge_slave_1: left promiscuous mode [ 176.233693][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.333787][ T9347] bond0: (slave bond_slave_0): Releasing backup interface [ 176.403003][ T9347] bond0: (slave bond_slave_1): Releasing backup interface [ 176.430496][ T9347] team0: Port device team_slave_0 removed [ 176.471271][ T9347] team0: Port device team_slave_1 removed [ 176.488544][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.507709][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.532679][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.551052][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.594000][ T9347] batman_adv: batadv0: Removing interface: wlan1 [ 176.626429][ T9347] bond4: (slave bridge3): Releasing active interface [ 176.722631][ T9349] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 177.036395][ T9375] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 177.517024][ T9400] netlink: 'syz.4.945': attribute type 1 has an invalid length. [ 177.527801][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.587861][ T9406] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 177.668920][ T9407] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544017][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.550686][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.984387][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.991306][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.424146][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.431138][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.860687][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 330.868296][ T31] Not tainted syzkaller #0 [ 330.873362][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.882609][ T31] task:kworker/1:0 state:D stack:23944 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 330.894736][ T31] Workqueue: events rfkill_sync_work [ 330.900133][ T31] Call Trace: [ 330.903444][ T31] [ 330.906401][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.911329][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 330.916982][ T31] ? __pfx___schedule+0x10/0x10 [ 330.932244][ T31] ? schedule+0x91/0x360 [ 330.936580][ T31] schedule+0x165/0x360 [ 330.941257][ T31] schedule_preempt_disabled+0x13/0x30 [ 330.946761][ T31] __mutex_lock+0x7e6/0x1360 [ 330.951615][ T31] ? __mutex_lock+0x5b6/0x1360 [ 330.956446][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 330.966392][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 330.971922][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.978415][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 331.000125][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.006547][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 331.025192][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 331.039775][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 331.045577][ T31] rfkill_set_block+0x1d2/0x440 [ 331.072296][ T31] rfkill_sync_work+0x114/0x200 [ 331.077234][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.086393][ T31] process_scheduled_works+0xae1/0x17b0 [ 331.092536][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.098575][ T31] worker_thread+0x8a0/0xda0 [ 331.103568][ T31] kthread+0x711/0x8a0 [ 331.107689][ T31] ? __pfx_worker_thread+0x10/0x10 [ 331.112888][ T31] ? __pfx_kthread+0x10/0x10 [ 331.117512][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.123164][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.128406][ T31] ? __pfx_kthread+0x10/0x10 [ 331.133205][ T31] ret_from_fork+0x3f9/0x770 [ 331.138005][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.143274][ T31] ? __switch_to_asm+0x39/0x70 [ 331.148114][ T31] ? __switch_to_asm+0x33/0x70 [ 331.153283][ T31] ? __pfx_kthread+0x10/0x10 [ 331.157917][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.163003][ T31] [ 331.166073][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 331.173852][ T31] Not tainted syzkaller #0 [ 331.178809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.188152][ T31] task:kworker/1:1 state:D stack:23144 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 331.200351][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 331.207090][ T31] Call Trace: [ 331.210950][ T31] [ 331.213924][ T31] __schedule+0x1798/0x4cc0 [ 331.218490][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 331.224243][ T31] ? __pfx___schedule+0x10/0x10 [ 331.229146][ T31] ? schedule+0x91/0x360 [ 331.233481][ T31] schedule+0x165/0x360 [ 331.237675][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.243592][ T31] __mutex_lock+0x7e6/0x1360 [ 331.248226][ T31] ? __mutex_lock+0x5b6/0x1360 [ 331.253067][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 331.259348][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.264472][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.270580][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.276332][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 331.282522][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.288270][ T31] process_scheduled_works+0xae1/0x17b0 [ 331.294118][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.300528][ T31] worker_thread+0x8a0/0xda0 [ 331.305170][ T31] kthread+0x711/0x8a0 [ 331.309251][ T31] ? __pfx_worker_thread+0x10/0x10 [ 331.314425][ T31] ? __pfx_kthread+0x10/0x10 [ 331.319050][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.324365][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.329976][ T31] ? __pfx_kthread+0x10/0x10 [ 331.334606][ T31] ret_from_fork+0x3f9/0x770 [ 331.339228][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.344785][ T31] ? __switch_to_asm+0x39/0x70 [ 331.349637][ T31] ? __switch_to_asm+0x33/0x70 [ 331.354447][ T31] ? __pfx_kthread+0x10/0x10 [ 331.359070][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.364300][ T31] [ 331.367469][ T31] INFO: task syz.0.927:9332 blocked for more than 143 seconds. [ 331.375078][ T31] Not tainted syzkaller #0 [ 331.380066][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.388748][ T31] task:syz.0.927 state:D stack:25096 pid:9332 tgid:9332 ppid:5865 task_flags:0x400040 flags:0x00004006 [ 331.401307][ T31] Call Trace: [ 331.404621][ T31] [ 331.407570][ T31] __schedule+0x1798/0x4cc0 [ 331.412197][ T31] ? validate_chain+0x897/0x2140 [ 331.417171][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.422139][ T31] ? __pfx___schedule+0x10/0x10 [ 331.427045][ T31] ? schedule+0x91/0x360 [ 331.431583][ T31] schedule+0x165/0x360 [ 331.435756][ T31] schedule_timeout+0x9a/0x270 [ 331.440642][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 331.446051][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.451317][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.456550][ T31] ? wait_for_completion+0x267/0x5d0 [ 331.462261][ T31] wait_for_completion+0x2bf/0x5d0 [ 331.467437][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 331.473183][ T31] ? __flush_work+0xd2/0xbc0 [ 331.477815][ T31] ? __flush_work+0xd2/0xbc0 [ 331.482550][ T31] __flush_work+0x9b9/0xbc0 [ 331.487085][ T31] ? __flush_work+0xd2/0xbc0 [ 331.492123][ T31] ? __pfx___flush_work+0x10/0x10 [ 331.497186][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 331.502650][ T31] ? __pfx___cancel_work+0x10/0x10 [ 331.507803][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 331.513719][ T31] __cancel_work_sync+0xbe/0x110 [ 331.518703][ T31] rfkill_unregister+0x92/0x220 [ 331.524054][ T31] nfc_unregister_device+0x96/0x2a0 [ 331.529378][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 331.535522][ T31] virtual_ncidev_close+0x56/0x90 [ 331.540640][ T31] __fput+0x44c/0xa70 [ 331.544669][ T31] task_work_run+0x1d1/0x260 [ 331.549293][ T31] ? __pfx_task_work_run+0x10/0x10 [ 331.554489][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 331.560407][ T31] exit_to_user_mode_loop+0xec/0x110 [ 331.565730][ T31] do_syscall_64+0x2bd/0x3b0 [ 331.570389][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.575623][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.581819][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.586533][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.592802][ T31] RIP: 0033:0x7f47e878ebe9 [ 331.597264][ T31] RSP: 002b:00007fff0a1bac58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 331.605793][ T31] RAX: 0000000000000000 RBX: 00007f47e89b7da0 RCX: 00007f47e878ebe9 [ 331.613833][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 331.622357][ T31] RBP: 00007f47e89b7da0 R08: 0000000000000000 R09: 0000001d0a1baf4f [ 331.630431][ T31] R10: 00007f47e89b7cb0 R11: 0000000000000246 R12: 000000000002b209 [ 331.638415][ T31] R13: 00007f47e89b6090 R14: ffffffffffffffff R15: 00007fff0a1bad70 [ 331.646775][ T31] [ 331.650092][ T31] INFO: task syz.3.946:9406 blocked for more than 144 seconds. [ 331.657663][ T31] Not tainted syzkaller #0 [ 331.666547][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.675402][ T31] task:syz.3.946 state:D stack:24392 pid:9406 tgid:9405 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 331.687611][ T31] Call Trace: [ 331.692383][ T31] [ 331.695350][ T31] __schedule+0x1798/0x4cc0 [ 331.699989][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.704894][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.710071][ T31] ? __pfx___schedule+0x10/0x10 [ 331.714993][ T31] ? schedule+0x91/0x360 [ 331.719277][ T31] schedule+0x165/0x360 [ 331.723938][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.729474][ T31] __mutex_lock+0x7e6/0x1360 [ 331.734309][ T31] ? __mutex_lock+0x5b6/0x1360 [ 331.739116][ T31] ? rfkill_register+0x37/0x8e0 [ 331.744096][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.749247][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 331.754669][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.760059][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 331.765382][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 331.771127][ T31] rfkill_register+0x37/0x8e0 [ 331.775849][ T31] wiphy_register+0x214c/0x28d0 [ 331.781169][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 331.786495][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 331.791830][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 331.797974][ T31] ieee80211_register_hw+0x3425/0x4080 [ 331.803622][ T31] ? ieee80211_register_hw+0x1481/0x4080 [ 331.809304][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 331.815498][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.822068][ T31] ? __hrtimer_setup+0x187/0x210 [ 331.827042][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 331.832990][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 331.838791][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 331.845354][ T31] ? trace_kmalloc+0x1f/0xd0 [ 331.850074][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 331.856707][ T31] ? kstrndup+0xbf/0x160 [ 331.861053][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 331.866200][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 331.872366][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 331.877962][ T31] ? __nla_parse+0x40/0x60 [ 331.882533][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 331.888905][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 331.894640][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 331.901171][ T31] ? bpf_lsm_capable+0x9/0x20 [ 331.905890][ T31] ? security_capable+0x7e/0x2e0 [ 331.910930][ T31] genl_rcv_msg+0x60e/0x790 [ 331.915477][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.920658][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 331.926329][ T31] netlink_rcv_skb+0x205/0x470 [ 331.931548][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.936445][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.941568][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.946909][ T31] ? down_read+0x1ad/0x2e0 [ 331.951434][ T31] genl_rcv+0x28/0x40 [ 331.955445][ T31] netlink_unicast+0x82c/0x9e0 [ 331.960708][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 331.966074][ T31] ? netlink_sendmsg+0x642/0xb30 [ 331.971119][ T31] ? skb_put+0x11b/0x210 [ 331.975438][ T31] netlink_sendmsg+0x805/0xb30 [ 331.980354][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.985711][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.991123][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.996450][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.002012][ T31] __sock_sendmsg+0x219/0x270 [ 332.006738][ T31] ____sys_sendmsg+0x505/0x830 [ 332.011574][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.016900][ T31] ? import_iovec+0x74/0xa0 [ 332.021851][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 332.026590][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.031934][ T31] ? __fget_files+0x2a/0x420 [ 332.036562][ T31] ? __fget_files+0x3a0/0x420 [ 332.041403][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 332.046503][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.052408][ T31] ? rcu_is_watching+0x15/0xb0 [ 332.057209][ T31] ? do_syscall_64+0xbe/0x3b0 [ 332.062004][ T31] do_syscall_64+0xfa/0x3b0 [ 332.066551][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.071893][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.077989][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.083159][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.089086][ T31] RIP: 0033:0x7fb96bf8ebe9 [ 332.093588][ T31] RSP: 002b:00007fb96cd1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.102128][ T31] RAX: ffffffffffffffda RBX: 00007fb96c1b5fa0 RCX: 00007fb96bf8ebe9 [ 332.110623][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 332.118642][ T31] RBP: 00007fb96c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 332.126767][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.134800][ T31] R13: 00007fb96c1b6038 R14: 00007fb96c1b5fa0 R15: 00007ffd477edea8 [ 332.143256][ T31] [ 332.146345][ T31] INFO: task syz.4.951:9420 blocked for more than 144 seconds. [ 332.154389][ T31] Not tainted syzkaller #0 [ 332.159362][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.168965][ T31] task:syz.4.951 state:D stack:28328 pid:9420 tgid:9419 ppid:5875 task_flags:0x400140 flags:0x00004004 [ 332.181107][ T31] Call Trace: [ 332.184415][ T31] [ 332.187354][ T31] __schedule+0x1798/0x4cc0 [ 332.193530][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.198461][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.203525][ T31] ? __pfx___schedule+0x10/0x10 [ 332.208466][ T31] ? schedule+0x91/0x360 [ 332.212802][ T31] schedule+0x165/0x360 [ 332.216992][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.222833][ T31] __mutex_lock+0x7e6/0x1360 [ 332.227450][ T31] ? __mutex_lock+0x5b6/0x1360 [ 332.232318][ T31] ? genl_rcv_msg+0x10d/0x790 [ 332.237040][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.242195][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 332.247367][ T31] ? radix_tree_lookup+0x240/0x290 [ 332.252985][ T31] genl_rcv_msg+0x10d/0x790 [ 332.257531][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.262654][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 332.267716][ T31] ? __asan_memcpy+0x40/0x70 [ 332.272533][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.277969][ T31] netlink_rcv_skb+0x205/0x470 [ 332.283190][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.288092][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.293247][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.298588][ T31] ? down_read+0x1ad/0x2e0 [ 332.303344][ T31] genl_rcv+0x28/0x40 [ 332.307367][ T31] netlink_unicast+0x82c/0x9e0 [ 332.312536][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 332.317861][ T31] ? netlink_sendmsg+0x642/0xb30 [ 332.322937][ T31] ? skb_put+0x11b/0x210 [ 332.327227][ T31] netlink_sendmsg+0x805/0xb30 [ 332.332092][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.337424][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.342754][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.348077][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.353448][ T31] __sock_sendmsg+0x219/0x270 [ 332.358163][ T31] __sys_sendto+0x3bd/0x520 [ 332.362797][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 332.367885][ T31] ? count_memcg_event_mm+0x21/0x260 [ 332.373603][ T31] ? exc_page_fault+0x76/0xf0 [ 332.378321][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 332.383784][ T31] __x64_sys_sendto+0xde/0x100 [ 332.388784][ T31] do_syscall_64+0xfa/0x3b0 [ 332.393405][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.398636][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.405192][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.410180][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.416114][ T31] RIP: 0033:0x7fb97c390a7c [ 332.420602][ T31] RSP: 002b:00007fb97d2a4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 332.429053][ T31] RAX: ffffffffffffffda RBX: 00007fb97d2a4fc0 RCX: 00007fb97c390a7c [ 332.437400][ T31] RDX: 0000000000000020 RSI: 00007fb97d2a5010 RDI: 0000000000000004 [ 332.445436][ T31] RBP: 0000000000000000 R08: 00007fb97d2a4f14 R09: 000000000000000c [ 332.453482][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 332.461868][ T31] R13: 00007fb97d2a4f68 R14: 00007fb97d2a5010 R15: 0000000000000000 [ 332.469936][ T31] [ 332.473007][ T31] INFO: task syz.1.952:9422 blocked for more than 144 seconds. [ 332.481612][ T31] Not tainted syzkaller #0 [ 332.486586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.495620][ T31] task:syz.1.952 state:D stack:22728 pid:9422 tgid:9421 ppid:5870 task_flags:0x400140 flags:0x00004004 [ 332.507630][ T31] Call Trace: [ 332.511073][ T31] [ 332.514038][ T31] __schedule+0x1798/0x4cc0 [ 332.518619][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.524081][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.528973][ T31] ? __pfx___schedule+0x10/0x10 [ 332.533919][ T31] ? schedule+0x91/0x360 [ 332.538226][ T31] schedule+0x165/0x360 [ 332.542481][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.547975][ T31] __mutex_lock+0x7e6/0x1360 [ 332.552955][ T31] ? __mutex_lock+0x5b6/0x1360 [ 332.557832][ T31] ? genl_rcv_msg+0x10d/0x790 [ 332.562596][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.567655][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 332.572853][ T31] ? radix_tree_lookup+0x240/0x290 [ 332.577997][ T31] genl_rcv_msg+0x10d/0x790 [ 332.582907][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.587968][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 332.593083][ T31] ? __asan_memcpy+0x40/0x70 [ 332.597710][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.603348][ T31] netlink_rcv_skb+0x205/0x470 [ 332.608157][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.613374][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.618508][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.624019][ T31] ? down_read+0x1ad/0x2e0 [ 332.628489][ T31] genl_rcv+0x28/0x40 [ 332.632715][ T31] netlink_unicast+0x82c/0x9e0 [ 332.637554][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 332.643362][ T31] ? netlink_sendmsg+0x642/0xb30 [ 332.648366][ T31] ? skb_put+0x11b/0x210 [ 332.652694][ T31] netlink_sendmsg+0x805/0xb30 [ 332.657537][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.662904][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.667915][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.673574][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.678884][ T31] __sock_sendmsg+0x219/0x270 [ 332.683694][ T31] __sys_sendto+0x3bd/0x520 [ 332.688241][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 332.693388][ T31] ? count_memcg_event_mm+0x21/0x260 [ 332.698715][ T31] ? exc_page_fault+0x76/0xf0 [ 332.703985][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 332.709330][ T31] __x64_sys_sendto+0xde/0x100 [ 332.714392][ T31] do_syscall_64+0xfa/0x3b0 [ 332.718970][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.724307][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.730793][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.735517][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.741677][ T31] RIP: 0033:0x7f1cba390a7c [ 332.746128][ T31] RSP: 002b:00007f1cbb20bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 332.754742][ T31] RAX: ffffffffffffffda RBX: 00007f1cbb20bfc0 RCX: 00007f1cba390a7c [ 332.763185][ T31] RDX: 0000000000000020 RSI: 00007f1cbb20c010 RDI: 0000000000000006 [ 332.771241][ T31] RBP: 0000000000000000 R08: 00007f1cbb20bf14 R09: 000000000000000c [ 332.779269][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 332.791520][ T31] R13: 00007f1cbb20bf68 R14: 00007f1cbb20c010 R15: 0000000000000000 [ 332.799705][ T31] [ 332.802781][ T31] INFO: task syz.2.954:9431 blocked for more than 145 seconds. [ 332.810427][ T31] Not tainted syzkaller #0 [ 332.815391][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.824457][ T31] task:syz.2.954 state:D stack:27880 pid:9431 tgid:9430 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 332.836503][ T31] Call Trace: [ 332.839947][ T31] [ 332.842918][ T31] __schedule+0x1798/0x4cc0 [ 332.847538][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.853046][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.857963][ T31] ? __pfx___schedule+0x10/0x10 [ 332.863083][ T31] ? schedule+0x91/0x360 [ 332.867383][ T31] schedule+0x165/0x360 [ 332.871626][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.877117][ T31] __mutex_lock+0x7e6/0x1360 [ 332.882155][ T31] ? __mutex_lock+0x5b6/0x1360 [ 332.886979][ T31] ? genl_rcv_msg+0x10d/0x790 [ 332.891733][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.896792][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 332.902298][ T31] ? radix_tree_lookup+0x240/0x290 [ 332.907452][ T31] genl_rcv_msg+0x10d/0x790 [ 332.912757][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.917833][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 332.923372][ T31] ? __asan_memcpy+0x40/0x70 [ 332.928001][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.933876][ T31] netlink_rcv_skb+0x205/0x470 [ 332.938688][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.944391][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.949468][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.955080][ T31] ? down_read+0x1ad/0x2e0 [ 332.959921][ T31] genl_rcv+0x28/0x40 [ 332.963947][ T31] netlink_unicast+0x82c/0x9e0 [ 332.968758][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 332.975061][ T31] ? netlink_sendmsg+0x642/0xb30 [ 332.980383][ T31] ? skb_put+0x11b/0x210 [ 332.984682][ T31] netlink_sendmsg+0x805/0xb30 [ 332.989494][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.999030][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.004771][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.014955][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.021712][ T31] __sock_sendmsg+0x219/0x270 [ 333.026450][ T31] __sys_sendto+0x3bd/0x520 [ 333.036340][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 333.041861][ T31] ? count_memcg_event_mm+0x21/0x260 [ 333.047206][ T31] ? exc_page_fault+0x76/0xf0 [ 333.052506][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 333.057847][ T31] __x64_sys_sendto+0xde/0x100 [ 333.063461][ T31] do_syscall_64+0xfa/0x3b0 [ 333.068018][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.074681][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.081226][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.085955][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.092572][ T31] RIP: 0033:0x7f8199190a7c [ 333.097025][ T31] RSP: 002b:00007f8199fafec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 333.106054][ T31] RAX: ffffffffffffffda RBX: 00007f8199faffc0 RCX: 00007f8199190a7c [ 333.114368][ T31] RDX: 0000000000000020 RSI: 00007f8199fb0010 RDI: 0000000000000004 [ 333.123011][ T31] RBP: 0000000000000000 R08: 00007f8199faff14 R09: 000000000000000c [ 333.131378][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 333.139387][ T31] R13: 00007f8199faff68 R14: 00007f8199fb0010 R15: 0000000000000000 [ 333.147863][ T31] [ 333.151667][ T31] [ 333.151667][ T31] Showing all locks held in the system: [ 333.159411][ T31] 4 locks held by kworker/1:0/24: [ 333.165363][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 333.176742][ T31] #1: ffffc900001e7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 333.190059][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 333.200575][ T31] #3: ffff888031c18100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 333.210601][ T31] 1 lock held by khungtaskd/31: [ 333.215476][ T31] #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 333.226195][ T31] 3 locks held by kworker/1:1/43: [ 333.231522][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 333.242880][ T31] #1: ffffc90000b37bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 333.257090][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 333.268898][ T31] 2 locks held by getty/5625: [ 333.273873][ T31] #0: ffff88814d8860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.284419][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 333.295806][ T31] 2 locks held by kworker/0:3/5934: [ 333.301498][ T31] 1 lock held by syz.0.927/9332: [ 333.306462][ T31] #0: ffff888031c18100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 333.317091][ T31] 3 locks held by syz.3.946/9406: [ 333.322503][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.331050][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 333.340704][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.351094][ T31] 2 locks held by syz.4.951/9420: [ 333.356149][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.364859][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 333.374306][ T31] 2 locks held by syz.1.952/9422: [ 333.379351][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.387600][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 333.396662][ T31] 2 locks held by syz.2.954/9431: [ 333.402133][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.410623][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 333.420193][ T31] 2 locks held by syz-executor/9437: [ 333.425520][ T31] #0: ffff88807b57e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.435969][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.446482][ T31] 2 locks held by syz-executor/9443: [ 333.451860][ T31] #0: ffff888020be0918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.462371][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.472448][ T31] 2 locks held by syz-executor/9444: [ 333.477769][ T31] #0: ffff888020be2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.487959][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.498274][ T31] 2 locks held by syz-executor/9445: [ 333.503719][ T31] #0: ffff888020be6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.514032][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.524638][ T31] 2 locks held by syz-executor/9446: [ 333.530032][ T31] #0: ffff8880227b8918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.540140][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.550475][ T31] 2 locks held by syz-executor/9449: [ 333.555881][ T31] #0: ffff8880580d2918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.566051][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.576093][ T31] 2 locks held by syz-executor/9457: [ 333.581780][ T31] #0: ffff88805734a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.591941][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.602027][ T31] 2 locks held by syz-executor/9458: [ 333.607338][ T31] #0: ffff888079798918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.617795][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.627818][ T31] 2 locks held by syz-executor/9459: [ 333.633293][ T31] #0: ffff888076d3c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.643764][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.653802][ T31] 2 locks held by syz-executor/9460: [ 333.659103][ T31] #0: ffff888076d3d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.669217][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.679467][ T31] 2 locks held by syz-executor/9462: [ 333.684873][ T31] #0: ffff88807d3d2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.694987][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.705299][ T31] 2 locks held by syz-executor/9468: [ 333.710708][ T31] #0: ffff88806c8f6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.720870][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.731318][ T31] 2 locks held by syz-executor/9469: [ 333.736646][ T31] #0: ffff88806c8f4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.747277][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.757333][ T31] 2 locks held by syz-executor/9470: [ 333.763065][ T31] #0: ffff8880772d3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.773191][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.783268][ T31] 2 locks held by syz-executor/9471: [ 333.788574][ T31] #0: ffff888057a74918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 333.798975][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.809066][ T31] [ 333.811774][ T31] ============================================= [ 333.811774][ T31] [ 333.820635][ T31] NMI backtrace for cpu 1 [ 333.820659][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 333.820682][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.820695][ T31] Call Trace: [ 333.820710][ T31] [ 333.820719][ T31] dump_stack_lvl+0x189/0x250 [ 333.820754][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.820779][ T31] ? __pfx__printk+0x10/0x10 [ 333.820824][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 333.820852][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 333.820880][ T31] ? __pfx__printk+0x10/0x10 [ 333.820915][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.820950][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 333.820978][ T31] watchdog+0xf93/0xfe0 [ 333.821014][ T31] ? watchdog+0x1de/0xfe0 [ 333.821050][ T31] kthread+0x711/0x8a0 [ 333.821080][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.821109][ T31] ? __pfx_kthread+0x10/0x10 [ 333.821138][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.821164][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.821190][ T31] ? __pfx_kthread+0x10/0x10 [ 333.821218][ T31] ret_from_fork+0x3f9/0x770 [ 333.821244][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.821272][ T31] ? __switch_to_asm+0x39/0x70 [ 333.821298][ T31] ? __switch_to_asm+0x33/0x70 [ 333.821324][ T31] ? __pfx_kthread+0x10/0x10 [ 333.821351][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.821397][ T31] [ 333.821404][ T31] Sending NMI from CPU 1 to CPUs 0: [ 333.968180][ C0] NMI backtrace for cpu 0 [ 333.968199][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 333.968218][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.968229][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 333.968259][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c6 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 333.968274][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 333.968289][ C0] RAX: 0a8eb6828d8e1400 RBX: ffffffff819683a8 RCX: 0a8eb6828d8e1400 [ 333.968303][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b6a5a RDI: ffffffff8be33300 [ 333.968315][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 333.968328][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa37e30 [ 333.968340][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 333.968352][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 333.968365][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.968377][ C0] CR2: 0000557ca96056e8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 333.968392][ C0] Call Trace: [ 333.968400][ C0] [ 333.968407][ C0] default_idle+0x13/0x20 [ 333.968423][ C0] default_idle_call+0x74/0xb0 [ 333.968441][ C0] do_idle+0x1e8/0x510 [ 333.968457][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 333.968480][ C0] ? __pfx_do_idle+0x10/0x10 [ 333.968501][ C0] ? do_idle+0x10/0x510 [ 333.968519][ C0] cpu_startup_entry+0x44/0x60 [ 333.968536][ C0] rest_init+0x2de/0x300 [ 333.968554][ C0] start_kernel+0x3a9/0x410 [ 333.968575][ C0] x86_64_start_reservations+0x24/0x30 [ 333.968600][ C0] x86_64_start_kernel+0x143/0x1c0 [ 333.968641][ C0] common_startup_64+0x13e/0x147 [ 333.968673][ C0] [ 333.969225][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 334.160330][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 334.169456][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.179519][ T31] Call Trace: [ 334.182819][ T31] [ 334.185761][ T31] dump_stack_lvl+0x99/0x250 [ 334.190365][ T31] ? __asan_memcpy+0x40/0x70 [ 334.194970][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.200185][ T31] ? __pfx__printk+0x10/0x10 [ 334.204808][ T31] vpanic+0x281/0x750 [ 334.208814][ T31] ? __pfx_vpanic+0x10/0x10 [ 334.213328][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 334.218889][ T31] ? preempt_schedule+0xae/0xc0 [ 334.223760][ T31] ? preempt_schedule_common+0x83/0xd0 [ 334.229240][ T31] panic+0xb9/0xc0 [ 334.232976][ T31] ? __pfx_panic+0x10/0x10 [ 334.237414][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 334.242813][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 334.248981][ T31] watchdog+0xfd2/0xfe0 [ 334.253167][ T31] ? watchdog+0x1de/0xfe0 [ 334.257517][ T31] kthread+0x711/0x8a0 [ 334.261619][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.266315][ T31] ? __pfx_kthread+0x10/0x10 [ 334.270920][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.276135][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.281366][ T31] ? __pfx_kthread+0x10/0x10 [ 334.285973][ T31] ret_from_fork+0x3f9/0x770 [ 334.290581][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.295727][ T31] ? __switch_to_asm+0x39/0x70 [ 334.300507][ T31] ? __switch_to_asm+0x33/0x70 [ 334.305300][ T31] ? __pfx_kthread+0x10/0x10 [ 334.310078][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.314876][ T31] [ 334.318278][ T31] Kernel Offset: disabled [ 334.322608][ T31] Rebooting in 86400 seconds..