last executing test programs: 25.612845487s ago: executing program 4 (id=3303): socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x8}}}}}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x8}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) 25.416244624s ago: executing program 4 (id=3306): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, 0x0) socket(0x11, 0x800000003, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffe9e}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='v', 0xfdef}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 25.173408614s ago: executing program 1 (id=3309): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) sendto(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000180), 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket(0x22, 0x2, 0x4) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000003) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800200600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="840200009078ff7e000000000000ff030000fe087301d734ec220000"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x6f, 0x1}]}, {0x0, [0x5f, 0x30, 0x30]}}, 0x0, 0x2d, 0x0, 0x3}, 0x20) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000640)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, 0x0) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000005c0)={0x0, @loopback, @multicast1}, &(0x7f00000002c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r9}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="07000000800000004bd0f87d00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0200006001000000e77a00a008000000abca602337b13d54"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140100000006030000000000000000000a000002f122ef75ecaf0a3bf77a5ac63a2414744572720be8f95adf1bdbdf50fc27684c273021c36f8c55e6bc2e6bf17ccb8dde3c51bfc24d5d322aebb2b1c89993172212246d4dc075bee31373733495b63affa75b37ddfda8fcb9dfbdf3764854769d967f1a1ae4292e499988d23e5f43fc86a1b878fc61c95b5b1bc5a3fbef4ee09863c8b4750bc112b36559490533826c057b791021aacc4b6e4f18bc15c8f1f2dcf3e504f263d1a5329b5af9f1ba9fee758b0074e3e1909a501b32f8"], 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 24.96829316s ago: executing program 1 (id=3310): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@loopback, @broadcast, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@bridge_newneigh={0x40, 0x1c, 0x400, 0x70bd29, 0x25dfdbfb, {0x1c, 0x0, 0x0, r1, 0x40, 0xf448a8084edd36c0, 0x9}, [@NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_PROTOCOL={0x5, 0xc, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 24.864942334s ago: executing program 4 (id=3312): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cdc00071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 24.807719562s ago: executing program 1 (id=3313): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x33ba, 0x7, 0x2}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x47, 0x7fffffff, 0x836, 0xffffff80, 0x6, "bbddd3", 0x5, [0x1, 0xc, 0x4, 0xcdd]}}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0x42, &(0x7f0000000540)=ANY=[@ANYBLOB="8000ffffffff0000000000002e3afc4ebd8c9b0e57e074865d601e1907000c2f00febd6ab6e800000000000000000000bbff0237d867b02bdf28e553418808ae50a688baa21b8c8589ff815d51ee6c926889d5bc7b37c4f496fc682a73092a9c7ac55cd453cd2f4a64df9517fd4076a23599fa5d066afd48ac3fe812c676c69b4bbeea32bf2d63fd52883286f2bf6bb7c132a50c1b59ee1f4de3f11e5dc1a0d361ded36666c67277a37d17cd0b07d0a749fee90600692565598bbba8d470fef92a867c6202a74a3baa7c3a887f1405fadaed71e93b15a633c396ba14967511fce55a"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r5, 0x0, 0x0, 0x2100, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'team_slave_0\x00'}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="034886dd010000000000140036cb6cc46000000003"], 0xfdef) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000045c0)) r6 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb816e4200000c010000e007030000297ade42f00add5d"], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) 24.614420063s ago: executing program 4 (id=3315): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x3}, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) 23.939861953s ago: executing program 1 (id=3320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@delqdisc={0x24, 0x25, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {0xfff1}, {0x1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x6, 0xffff, 0x4, @random="0a451d46392e", 'macvlan0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x140}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@delqdisc={0x24, 0x25, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {0xfff1}, {0x1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x6, 0xffff, 0x4, @random="0a451d46392e", 'macvlan0\x00'}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x140}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) (async) 23.663802143s ago: executing program 1 (id=3323): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x200480c0}, 0x20008011) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0xfffc, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0xfffffffffffffffd, 0x0, 0x80, 0x0, 0x0, 0x80000000000002, 0x0, 0x10000000000000}, {}, {}, 0x70bd2c, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1-neon)\x00'}}}]}, 0x13c}}, 0x4854) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x38}}, 0x0) 23.569030208s ago: executing program 4 (id=3325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) connect$vsock_stream(r4, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) socket$inet_mptcp(0x2, 0x1, 0x106) 23.473101828s ago: executing program 1 (id=3327): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003402000006000000040000000000000e0300000000000000030000000000000800000000000000000000000204000000000000000000000a02000000000000616100"], 0x0, 0x52}, 0x20) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xa808, 0x7ff, 0x3ce6, 0x10000, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0xf}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES32=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x40) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880), 0x4) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}}, 0x40800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006000005ea6cbb20060000000020000000200000005000084000800000500000001000000040020000c00000001000000050000000b000000030000000300000001000000050000009c24000000000000000000000203000000090000000000000c00"/126], 0x0, 0x7a, 0x0, 0x1}, 0x28) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f799f8f0b5bea607007175a7a2396eca8d", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf250c00000008000b000300000008000b00070000000c000600010000000100000008000100030000000c0006000100000001000000"], 0x44}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14e8e5b3", @ANYRES16=r1, @ANYBLOB="bc6227bd7000fbdbdf2536000000"], 0x14}}, 0x24000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100bd0000000000000001000000050005000000000008000300000000000500060000000000"], 0x2c}}, 0x0) (async, rerun: 32) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202c010}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) (rerun: 32) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r11, 0x541b, &(0x7f0000000840)) (async, rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) (rerun: 64) 23.447468781s ago: executing program 4 (id=3328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0xc800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x17, 0x0, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000ffff0100000000060000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c00028008000100000000000c000180080001400000000005000500020000000500010006000000"], 0x68}}, 0x0) r3 = socket$isdn(0x22, 0x2, 0x23) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=0x0], 0x7c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @broadcast}, &(0x7f00000001c0)=0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r7, 0x12504000) ioctl$SIOCAX25GETINFO(r7, 0x89ed, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000028000480240001800a00010071756575650000001400028006000140000800000600024000000000140000001100010000000000000000400000000a00"/124], 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) 21.98691264s ago: executing program 2 (id=3351): r0 = socket(0x10, 0x1, 0x7fffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3f}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x104000, 0x0, 0x4, 0x3}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 21.874453176s ago: executing program 0 (id=3352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1ff, 0x10000000, 0x0, 0x4}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x89, 0x7, 0x1, 0x0, "19acfd48f53124b0577ba88c6967bd669083e8c8447c0ccf66bfa5854b2ee0dd50d1c80ee5ac7e887f23a3b4dba652a4f31c575beec046df0570ec38a564aa731f59aa3391988d9a2a8f364a73fb44f721d8ea0bf24b1541581c642b202e2325051db913e7734d866fd39c5469c5f9387fcbc2ac4d4b8b85fecf37c28ef1cb05b31d00348d"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0) 21.801989884s ago: executing program 2 (id=3353): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0x43, 0xfffffffffffffffe}, 0x1d) (async) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x13, 0xb, 0x0, 0x0, @str='Sc@\xe6a6\xb2*\xd8f(\xa7\xdd\xf9\xb2'}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 21.700890811s ago: executing program 0 (id=3355): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x65}, @jmp={0x5, 0x1, 0x6, 0x9, 0xd, 0x2, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) 21.588522923s ago: executing program 2 (id=3357): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x5, 0x6, 0x2a000, r0, 0x4, '\x00', r1, r2, 0x3, 0x0, 0x1, 0x6, @value=r0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x5, 0x6, 0x2a000, r0, 0x4, '\x00', r1, r2, 0x3, 0x0, 0x1, 0x6, @value=r0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) (async) 21.587413666s ago: executing program 0 (id=3358): r0 = socket(0x1e, 0x4, 0x0) connect$llc(r0, &(0x7f0000000440)={0x1a, 0x304, 0x9, 0x3, 0x7, 0x7, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21.521432782s ago: executing program 0 (id=3359): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0xb0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x200}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x30000082}, 0x4008840) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x80, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x52, 0xac, "9cc51646dc1cb79f022a182380bd028324697373300b138ad6f3a83758fdde44c076b49e4328579f2d78012b9c7a7dcc6dc8d328a257ebadabe52e18828bb4c416373a7e23288788cd016983239a"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x121}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) (async) sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1418, 0x100, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 21.513847757s ago: executing program 2 (id=3361): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x48, 0x1c, 0x6}, 0x10) 21.375737076s ago: executing program 2 (id=3363): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x1e0, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x1ce, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @nested={0xce, 0x137, 0x0, 0x1, [@generic="706a77979c8987782b18a4de52941fc2bb5f7240e62e7e9465a5ad4fa333edc8c1fdb76607e5b0ee65f28324fd3bc9804e54814e2e3b719198f6f5c5095dbee0e5e2c73194b3d07a5774a16b594b7042bfc44046b2c7bd460b822077b210b6d0d45c78ebcac1aab6767221c2201b3a72837da0bd224ef4b3beb0451521373c8ccd446c99c867bd07df37d08446d2a5b72d147e0ca9c38072d84872e7720027b45e8d86e891c04dcc6ae75a9f17a8e55fc7d3c97e7f1623daa23843bbe27756e6a978", @typed={0x5, 0x20fd, 0x0, 0x0, @str='\x00'}]}]}]}, 0x1e0}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 21.371345348s ago: executing program 0 (id=3364): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x20000000) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005c80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, r5, {0x0, 0xfff3}, {0xe, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 21.333339396s ago: executing program 2 (id=3365): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'syz_tun\x00', 0x4}, 0x18) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000380)=""/108, 0x6c}], 0x5, &(0x7f0000000480)=""/4096, 0x1000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x854}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001840)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)={0x130, r3, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x6d}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d5c92c063a2d695029fbbeff513e048024b8f1d5ce321bce"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9a4ad97e8acb9d6d470316a9d1825c6f46ec0b0ef59bc7d5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a5827d8ca99ee50f539797324e3131978728a250690ada93"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001880)={r1, 0xded5, 0x7fff, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xe0, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x73d}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xbb7a}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x56e}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000001a80)=@alg, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001b00)=""/195, 0xc3}, {&(0x7f0000001c00)=""/10, 0xa}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/238, 0xee}, {&(0x7f0000002d40)=""/39, 0x27}, {&(0x7f0000002d80)=""/72, 0x48}], 0x6}, 0x1}], 0x1, 0x10100, &(0x7f0000002ec0)) r6 = openat$cgroup_ro(r5, &(0x7f0000002f00)='cpu.stat\x00', 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x31}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x70}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2000000000000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x54}}, 0x880) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) recvmmsg(r5, &(0x7f0000003440)=[{{&(0x7f00000031c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003240)=""/140, 0x8c}], 0x1, &(0x7f0000003340)=""/231, 0xe7}, 0x7}], 0x1, 0x101, &(0x7f0000003480)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000034c0)) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x54, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x8, 0xc, 0x7, 0x7a]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x39}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x1, 0x7e}, @value=@ver_80211n={0x0, 0x863, 0x2, 0x1, 0x0, 0x3}}, 0x5, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r8 = accept4(r7, 0x0, &(0x7f0000003640), 0x40000) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000003680)={@in6={{0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x29, 0x0, "4a909240a2d12fbc684d74aea0e79f1c4ad3095d1e2e289efb87d5fe3b18f735425aa16543ba82b8ede403b5775e475573a79d8b3766cfb082bab56a91d95f3e33b18f4c316198d7f2534cdd85a5dcea"}, 0xd8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x48, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x17}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x60, r3, 0x32, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10, 0x54}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf00}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x53b}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1373}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x24040840) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000004500)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000044c0)={&(0x7f0000003b40)={0x964, 0x1, 0x5, 0x201, 0x0, 0x0, {0xf, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0xd}, 0x0, 0x2, 0xc1aa, 0x2, 0x22, 'syz0\x00', "8f2b55122b4943cf8dfdd8800d3b7e3d923421ed88d30270e001154c06814a76", "5a9b18a9db680532123eab4e072c3bf9f9e83816c4d93750e23466278b834bfc", [{0x7, 0x6, {0x0, 0x80000000}}, {0x5, 0x3, {0x3, 0x9}}, {0x8e, 0x0, {0x3, 0x7}}, {0xc, 0xf6, {0x0, 0x3}}, {0x9, 0x2, {0x1, 0x2}}, {0x4, 0x5, {0x1, 0x40}}, {0x0, 0x40, {0x0, 0x772}}, {0x8, 0x9, {0x2, 0x2}}, {0x2, 0x4, {0x1, 0x1ff}}, {0x3ff, 0x4f99, {0x0, 0x4}}, {0x1, 0x5, {0x3, 0x2}}, {0x5, 0x5, {0x3, 0x8}}, {0x5, 0x9, {0x2, 0x5}}, {0x1, 0x100, {0x3, 0x5}}, {0x400, 0x2, {0x2, 0xf58}}, {0x7, 0x0, {0x1, 0xea5e}}, {0x2, 0x7, {0x2}}, {0xfd0, 0x200, {0x0, 0x6}}, {0x1ff, 0x5, {0x3, 0x6}}, {0x7, 0xfff, {0x2, 0x7}}, {0x7, 0x2, {0x1, 0x2}}, {0x81, 0x5, {0x3, 0xfffffbff}}, {0x2, 0x4, {0x2, 0xff}}, {0x9, 0x3, {0x0, 0x3}}, {0x3, 0x5, {0x0, 0x8}}, {0x10, 0x4, {0x2, 0x5}}, {0x31, 0x4, {0x1, 0x6}}, {0x40, 0x6, {0x1, 0x81}}, {0x6, 0x9a71, {0x3, 0x3ff}}, {0x6, 0x4, {0x3, 0x8}}, {0x4, 0x7, {0x0, 0x4}}, {0x5, 0x400, {0x2, 0x2}}, {0x5c18, 0x9, {0x2, 0x8}}, {0x4, 0x2ca, {0x3, 0x7}}, {0x8, 0x4, {0x2, 0x9}}, {0xfff8, 0x5, {0x0, 0x7}}, {0x4, 0x7, {0x3}}, {0x5, 0x9, {0x0, 0x1000}}, {0x1000, 0x3, {0x3, 0x7}}, {0x40, 0x3, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x3}, 0xa2, 0x60, 0x2, 0x7f, 0x3, 'syz0\x00', "0bf99f08cd6fc32f258ffe9fd1ed34c35e9f7e2df1e95f9afb3a99e13ec40bd5", "8a5ebb5e186fc68e781e688574b99d9a84705b4c87add969cb6a46405b881e5a", [{0x1, 0xfff7, {0x1, 0x4}}, {0x0, 0x8, {0x1, 0xbb}}, {0xa0fe, 0xc950, {0x2, 0x1}}, {0x2c6, 0x6, {0x0, 0x6}}, {0x0, 0x2, {0x0, 0x2}}, {0x10, 0x5}, {0x4, 0x0, {0x0, 0x4}}, {0x9, 0x8, {0x0, 0x7bc3}}, {0x7f, 0x5, {0x3, 0x4}}, {0x9, 0x501, {0x1, 0x10000}}, {0x0, 0xb, {0x0, 0x1}}, {0x40, 0x8, {0x3, 0x2}}, {0x1, 0x81, {0x3, 0xa}}, {0x62, 0x1, {0x3, 0x1}}, {0xe09, 0xff7f, {0x0, 0x9}}, {0x7ff, 0xfb80, {0x1, 0x401}}, {0xfff8, 0x49, {0x1, 0x8}}, {0x7, 0x8001, {0x3, 0x2}}, {0x1, 0x205, {0x3, 0x4}}, {0x3, 0x3, {0x2, 0x4}}, {0xbf, 0x5, {0x0, 0x8}}, {0x8, 0x0, {0x0, 0xa3b}}, {0x81, 0x8d6, {0x2, 0x452}}, {0x6000, 0x6, {0x2, 0x4}}, {0x6d, 0x40, {0x0, 0xc600}}, {0x5, 0x200, {0x1, 0x6f}}, {0x8, 0x4, {0x3, 0x1ff}}, {0x3, 0x3, {0x0, 0x2}}, {0x4, 0xa36, {0x0, 0x44}}, {0x7, 0x2, {0x8b85872093f571e, 0x7}}, {0x9, 0x800, {0x0, 0x1e}}, {0x9, 0xb, {0x2, 0xfff}}, {0x6, 0x9, {0x0, 0x81}}, {0x8e5, 0x5, {0x0, 0x5}}, {0xd4, 0x1ff, {0x3, 0xfff}}, {0x400, 0x8000, {0x3, 0xe3}}, {0x5, 0x9, {0x0, 0x2}}, {0x1, 0x1, {0x3, 0xfffffff9}}, {0x4, 0x6, {0x0, 0x3}}, {0x5, 0x5, {0x2, 0xb41d}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x6, 0x5, 0x8, 0x1, 0xb, 'syz1\x00', "af1cd1460a8fb0dafba039bc15abbe2a936463cf94a2e1f50dcaf8a9d970fb97", "48850763d87bd0d1334ec08cbc293e2d4032317bced495cd9ab43f3efe6ac836", [{0xde82, 0x592, {0x2, 0x7}}, {0x4, 0x8, {0x0, 0x6}}, {0x809, 0x2, {0x3, 0x1}}, {0x3, 0x3, {0x2}}, {0x3, 0x0, {0x0, 0xa2}}, {0x0, 0x9, {0x1, 0x37a373d3}}, {0xfff, 0x100, {0x1, 0x6}}, {0x2, 0x9, {0x1, 0x5}}, {0x5, 0x800, {0x1, 0x4}}, {0xd58d, 0x6, {0x3, 0x4}}, {0x800, 0xa1, {0x3, 0x6}}, {0x2, 0x2, {0x3, 0xc}}, {0x4, 0xd, {0x2, 0x7}}, {0x5dc, 0x21c, {0x0, 0x7}}, {0x1, 0x9, {0x0, 0x100}}, {0x5, 0x8, {0x2, 0x5}}, {0x3, 0x9, {0x0, 0x6}}, {0x9, 0xdf, {0x3, 0xa}}, {0x3ff, 0x1, {0x3, 0x16}}, {0x6, 0x0, {0x2, 0x6}}, {0x3653, 0xd, {0x3, 0x5}}, {0x8, 0xb, {0x0, 0x1000}}, {0xefc, 0xff, {0x3, 0x9}}, {0x100, 0x37e5, {0x3, 0x6}}, {0x6, 0x7f, {0x1, 0x7f}}, {0x4, 0xa, {0x1, 0x9}}, {0x9, 0x4, {0x0, 0x4}}, {0x7, 0x0, {0x3, 0x5}}, {0xff25, 0x7, {0x2, 0x9}}, {0x1000, 0xdecc, {0x3, 0xf}}, {0xde41, 0x0, {0x2, 0x5}}, {0x2, 0xd78, {0x1, 0x6}}, {0x2, 0x5, {0x0, 0x80}}, {0x8, 0x5, {0x2, 0x8001}}, {0x6, 0xdd5, {0x2, 0x2f}}, {0x3, 0xc, {0x1, 0x7}}, {0x3, 0x1000, {0x2, 0x6}}, {0x4, 0x0, {0x3, 0xef}}, {0x80, 0x2, {0x1, 0x8}}, {0x0, 0xfffe, {0x0, 0xff}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x3, 0x8, 0x9, 0xf, 0x3, 'syz0\x00', "8611e7f57a53cf6827d556b9e72fe587c2ddd18b81b5bad6074dbcdbebce998a", "612c420b0d9e847ccdc64d1db00c263a7062cfeb0a6dc0d70f772514364c7950", [{0x6, 0x5, {0x3, 0x5}}, {0x7, 0x100, {0x0, 0x8}}, {0xff01, 0x4, {0x0, 0x7}}, {0x5, 0x5, {0x0, 0x7c}}, {0x67cb, 0x5, {0x2, 0x37}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x1d, 0x2, {0x0, 0x78}}, {0x1, 0x101, {0x3, 0x5}}, {0x4, 0x3, {0x1, 0x83d3}}, {0x8000, 0x3, {0x1, 0x400}}, {0x8, 0x9, {0x3, 0x77}}, {0x4, 0x5, {0x1}}, {0x2, 0x8001, {0x3, 0x2}}, {0xc, 0xd, {0x0, 0xa328}}, {0x4, 0x1, {0x0, 0x1ff}}, {0x9, 0x8}, {0x9, 0xb, {0x2, 0xffffffff}}, {0x6, 0x7, {0x2, 0x1000}}, {0x0, 0x4, {0x2, 0xa3ad}}, {0x5, 0x9, {0x3, 0xbceb}}, {0xad2, 0x4000}, {0x3, 0xfffb, {0x2, 0x8000}}, {0x3, 0x2, {0x0, 0x9}}, {0x2, 0x8, {0x1, 0x606}}, {0x0, 0x6, {0x0, 0x8}}, {0xc000, 0x800, {0x1, 0x401}}, {0x9, 0x6, {0x0, 0xfff}}, {0xfffa, 0xb, {0x1, 0x1}}, {0xfff, 0x8, {0x0, 0x1c000000}}, {0x2, 0xe3, {0x3, 0xa}}, {0xf7, 0x7f, {0x3, 0x1}}, {0x0, 0x81e6, {0x0, 0x5}}, {0x2, 0xd20e, {0x1, 0x1}}, {0x1, 0x29, {0x2, 0x6}}, {0x121c, 0x0, {0x2, 0x3}}, {0x353f, 0x7f, {0x5, 0x2}}, {0x4, 0x7b, {0x1, 0xfff}}, {0xffff, 0x200, {0x2, 0x6}}, {0x8, 0xfff6, {0x1, 0x1}}, {0xd, 0x2, {0x2, 0xd8c4}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r11, &(0x7f0000004600)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x2028000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004580)={0x28, r3, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) 21.197738277s ago: executing program 0 (id=3366): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0x2, 0x2, 0x1, 0x86a}}], 0x18}, 0x4815) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003000000fddbdf250a00000000000000060007000800000008000500", @ANYRES32=r4, @ANYBLOB="10000880"], 0x38}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x810) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x10, 0x4, 0x0, 0x80, 0x79, 0x1, 0x200, {0x0, @in6={{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}}, 0x2, 0x7ff, 0x0, 0x7, 0xffffffff}}, &(0x7f0000000480)=0xb0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, 0x0, 0x0) getsockopt$packet_int(r8, 0x107, 0x7, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000004c0)={r7, 0x1, 0x2, [0xfffa, 0x1]}, &(0x7f0000000500)=0xc) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x400, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x4c20}}, 0x20}}, 0x24048020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f00000003c0)="58f6", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x3, 0x0, 0x3}, 0xe) shutdown(r11, 0x1) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r11, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) bind$ax25(r3, &(0x7f0000000540)={{0x3, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 16.743687726s ago: executing program 3 (id=3421): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000000)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x0, 0x4, 0x0, 0x3, 0x40, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0xca, &(0x7f0000000100)=""/202, 0x41100, 0xa, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0xf1f0, 0x7, 0x29ee, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x2, 0x5, 0x0, 0x5}], 0x10, 0x3}, 0x94) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000003c0)=0x3) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f00000006c0)={&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/255, 0xff}], 0x1, &(0x7f00000005c0)=""/202, 0xca}, 0x2000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%-010d \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x6, 0x1a, 0xf, 0x9, 0x0, @mcast2, @loopback, 0x7800, 0x26, 0x5071, 0x9}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x6, 0x7, 0x1, 0x40030, r3, 0x1, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x22c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "c996a64844386d3ed98217a15614c54fb6f2e86c853d3c3dcfe031ce4ac98ad7f25175da2b54952564c136100d6f276906fbf0255984a791d33136178e4e5a18cf362dd24c1a2a8ae3e76dd974981e0403ddcfe8619420f29c36a92c71466a055641ccf7ad26d6c34b0d7ff5f0d35571ff7d73cad0f2db0a5f2161f7c6f8a244c2da5cf6e3f7458c385245bc00353a3587b6530e4ea29f16f75443bd9e44492cab70512e1d4e7f2b1c52b14e8f6065bda0058d1cb8af8f281d8baedd9886b2b26f4389237e37c3287c2c845f2b314e7609"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "263a222c5628054e92dc7c94f272ce6a22eb287046e1950c8867"}}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd6f6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb8ea}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x529d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4ad8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x565}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c40)={'sit0\x00', r4, 0x700, 0x1, 0xf9ef, 0x8, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x66, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@rr={0x7, 0x7, 0x10, [@empty]}]}}}}}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r6) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x58, r10, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2880}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@getchain={0x24, 0x66, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {0x0, 0xffe0}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc009}, 0x1) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x8c, r11, 0x500, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc044}, 0x8001) r12 = socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r12, 0x4004662b, &(0x7f0000001100)) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001140)={r2, 0x3, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r13, 0x84, 0x79, &(0x7f0000001180)={0x0, 0x1, 0xfff}, 0x8) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@struct={0x8, 0x5, 0x0, 0x4, 0x0, 0xfffffff7, [{0x10, 0x6, 0x4}, {0xa, 0x3, 0xff}, {0x6, 0x2, 0x6}, {0xa, 0x5, 0x8}, {0x5, 0x2, 0x8000}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @enum={0x1, 0x4, 0x0, 0x6, 0x4, [{0x10, 0xfffffff7}, {0xc, 0x9}, {0x7, 0x4}, {0x10, 0x6}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0xc}, {0x10, 0x5}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f0000001440)=""/160, 0xcb, 0xa0, 0x0, 0x2, 0x10000, @value=r13}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r13, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000015c0)=[0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000001640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={0x0, 0x6, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xc, 0x25, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @exit, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @jmp={0x5, 0x0, 0x4, 0x6, 0x4, 0xc, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001300)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x4, '\x00', r9, @fallback=0x6, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001540)={0x4, 0x5, 0xa, 0x4}, 0x10, r15, r1, 0x3, &(0x7f00000018c0)=[r3, r16, r13, r5, r6], &(0x7f0000001900)=[{0x0, 0x4, 0x3, 0x6}, {0x2, 0x3, 0xf, 0xb}, {0x0, 0x2, 0x0, 0x2}], 0x10, 0x8}, 0x94) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000001a00), &(0x7f0000001a40)=0x8) 15.921391432s ago: executing program 3 (id=3422): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000210000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8}, 0x20) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x44101) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x9, r2, 0x0, r6}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x800, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.853307608s ago: executing program 3 (id=3423): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 32) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x40) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890c, 0x0) (async, rerun: 32) close(r2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x6, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x4, 0xd}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x81, 0xe1, 0x2, 0x0, 0x80000000, 0x25, 0xfffffff8, 0x10001, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004890) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) (async) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x401, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (rerun: 64) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200080a}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00020079621bbd0b6b52b18950dea8c626b78f5608b0cc57a8175c8b306e28e2d3afa51e6f2a4f94a65d62eafa62406be8e51f00d74c57e39b9debe0c57f46c5acf84c72b83b941853787814e2885fe6fb6dafb4239ffec6e1051972e616d054a0b3a8fab42830f165e15209b95ada961dd68dd1ded7f97b0f4ab342f3c168045d154aa98d9612b41401", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf250300000014000700fc010000000000000000000000000004140007000000000000000000000000000000000014000700fe88000000000000000000000000010108000600ac1e010104000500"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x2000400) (async) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xe, &(0x7f0000000600)=@raw=[@exit, @initr0, @jmp={0x5, 0x1, 0x1, 0x7, 0x6, 0xfffffffffffffffe, 0xffffffffffffffef}, @generic={0x5, 0xa, 0x3, 0x8, 0x80}, @generic={0xf, 0x0, 0xc, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xd, 0x153, 0x81b}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x1, r2, r10, r9, 0xffffffffffffffff, r11], &(0x7f0000000780)=[{0x2, 0x2, 0xd, 0x2}, {0x2, 0x3, 0xd, 0xa}], 0x10, 0x80000001}, 0x94) 15.640731261s ago: executing program 3 (id=3424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40400c1) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 15.575508225s ago: executing program 3 (id=3425): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x28) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0xc9f6, 0x3ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 15.458918994s ago: executing program 3 (id=3426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r1}, 0x38) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xcc1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800008dfe238a0080000000abe02a64fb926a871b042573a3e9406b1551bfe566cd21cd3bd0720a570154b776ab3fe06073ce8cc365bbd4895a4dc5c0cc1893ebb981b45a", @ANYRES32=r1, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYBLOB="0100000002000000010000000000000000000000000000000000000003431be8b2661a1cc6902c83c8249aa8f1ceda6c89de530fb8ae4e866ec396ca82794e8b3d1a5c9259e3e734227ff5965a5374db91c200"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xe, &(0x7f0000000080)=@raw=[@generic={0x0, 0x5, 0x7, 0x9372, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000100)='syzkaller\x00', 0xb, 0xf5, &(0x7f0000000140)=""/245, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r5, r6], &(0x7f0000000480)=[{0x4, 0x2}], 0x10, 0x40}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000005c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x10140) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r18, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r17, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r9], 0x1c}}, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) 8.425274429s ago: executing program 32 (id=3327): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003402000006000000040000000000000e0300000000000000030000000000000800000000000000000000000204000000000000000000000a02000000000000616100"], 0x0, 0x52}, 0x20) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xa808, 0x7ff, 0x3ce6, 0x10000, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0xf}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES32=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x40) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880), 0x4) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}}, 0x40800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006000005ea6cbb20060000000020000000200000005000084000800000500000001000000040020000c00000001000000050000000b000000030000000300000001000000050000009c24000000000000000000000203000000090000000000000c00"/126], 0x0, 0x7a, 0x0, 0x1}, 0x28) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f799f8f0b5bea607007175a7a2396eca8d", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf250c00000008000b000300000008000b00070000000c000600010000000100000008000100030000000c0006000100000001000000"], 0x44}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14e8e5b3", @ANYRES16=r1, @ANYBLOB="bc6227bd7000fbdbdf2536000000"], 0x14}}, 0x24000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100bd0000000000000001000000050005000000000008000300000000000500060000000000"], 0x2c}}, 0x0) (async, rerun: 32) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202c010}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) (rerun: 32) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r11, 0x541b, &(0x7f0000000840)) (async, rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) (rerun: 64) 7.393163749s ago: executing program 33 (id=3328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0xc800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x17, 0x0, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000ffff0100000000060000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c00028008000100000000000c000180080001400000000005000500020000000500010006000000"], 0x68}}, 0x0) r3 = socket$isdn(0x22, 0x2, 0x23) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=0x0], 0x7c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @broadcast}, &(0x7f00000001c0)=0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r7, 0x12504000) ioctl$SIOCAX25GETINFO(r7, 0x89ed, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000028000480240001800a00010071756575650000001400028006000140000800000600024000000000140000001100010000000000000000400000000a00"/124], 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) 5.213851365s ago: executing program 34 (id=3366): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0x2, 0x2, 0x1, 0x86a}}], 0x18}, 0x4815) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003000000fddbdf250a00000000000000060007000800000008000500", @ANYRES32=r4, @ANYBLOB="10000880"], 0x38}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x810) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x10, 0x4, 0x0, 0x80, 0x79, 0x1, 0x200, {0x0, @in6={{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}}, 0x2, 0x7ff, 0x0, 0x7, 0xffffffff}}, &(0x7f0000000480)=0xb0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, 0x0, 0x0) getsockopt$packet_int(r8, 0x107, 0x7, 0x0, &(0x7f0000000500)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000004c0)={r7, 0x1, 0x2, [0xfffa, 0x1]}, &(0x7f0000000500)=0xc) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x400, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x4c20}}, 0x20}}, 0x24048020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f00000003c0)="58f6", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x3, 0x0, 0x3}, 0xe) shutdown(r11, 0x1) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r11, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) bind$ax25(r3, &(0x7f0000000540)={{0x3, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 5.020880184s ago: executing program 35 (id=3365): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'syz_tun\x00', 0x4}, 0x18) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000380)=""/108, 0x6c}], 0x5, &(0x7f0000000480)=""/4096, 0x1000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x854}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001840)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)={0x130, r3, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x6d}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d5c92c063a2d695029fbbeff513e048024b8f1d5ce321bce"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9a4ad97e8acb9d6d470316a9d1825c6f46ec0b0ef59bc7d5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a5827d8ca99ee50f539797324e3131978728a250690ada93"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001880)={r1, 0xded5, 0x7fff, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xe0, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x73d}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xbb7a}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x56e}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000001a80)=@alg, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001b00)=""/195, 0xc3}, {&(0x7f0000001c00)=""/10, 0xa}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/238, 0xee}, {&(0x7f0000002d40)=""/39, 0x27}, {&(0x7f0000002d80)=""/72, 0x48}], 0x6}, 0x1}], 0x1, 0x10100, &(0x7f0000002ec0)) r6 = openat$cgroup_ro(r5, &(0x7f0000002f00)='cpu.stat\x00', 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x31}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x70}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2000000000000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x54}}, 0x880) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) recvmmsg(r5, &(0x7f0000003440)=[{{&(0x7f00000031c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003240)=""/140, 0x8c}], 0x1, &(0x7f0000003340)=""/231, 0xe7}, 0x7}], 0x1, 0x101, &(0x7f0000003480)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000034c0)) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x54, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x8, 0xc, 0x7, 0x7a]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x39}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x1, 0x7e}, @value=@ver_80211n={0x0, 0x863, 0x2, 0x1, 0x0, 0x3}}, 0x5, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r8 = accept4(r7, 0x0, &(0x7f0000003640), 0x40000) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000003680)={@in6={{0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x29, 0x0, "4a909240a2d12fbc684d74aea0e79f1c4ad3095d1e2e289efb87d5fe3b18f735425aa16543ba82b8ede403b5775e475573a79d8b3766cfb082bab56a91d95f3e33b18f4c316198d7f2534cdd85a5dcea"}, 0xd8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x48, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x17}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x60, r3, 0x32, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10, 0x54}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf00}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x53b}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1373}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x24040840) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000004500)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000044c0)={&(0x7f0000003b40)={0x964, 0x1, 0x5, 0x201, 0x0, 0x0, {0xf, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0xd}, 0x0, 0x2, 0xc1aa, 0x2, 0x22, 'syz0\x00', "8f2b55122b4943cf8dfdd8800d3b7e3d923421ed88d30270e001154c06814a76", "5a9b18a9db680532123eab4e072c3bf9f9e83816c4d93750e23466278b834bfc", [{0x7, 0x6, {0x0, 0x80000000}}, {0x5, 0x3, {0x3, 0x9}}, {0x8e, 0x0, {0x3, 0x7}}, {0xc, 0xf6, {0x0, 0x3}}, {0x9, 0x2, {0x1, 0x2}}, {0x4, 0x5, {0x1, 0x40}}, {0x0, 0x40, {0x0, 0x772}}, {0x8, 0x9, {0x2, 0x2}}, {0x2, 0x4, {0x1, 0x1ff}}, {0x3ff, 0x4f99, {0x0, 0x4}}, {0x1, 0x5, {0x3, 0x2}}, {0x5, 0x5, {0x3, 0x8}}, {0x5, 0x9, {0x2, 0x5}}, {0x1, 0x100, {0x3, 0x5}}, {0x400, 0x2, {0x2, 0xf58}}, {0x7, 0x0, {0x1, 0xea5e}}, {0x2, 0x7, {0x2}}, {0xfd0, 0x200, {0x0, 0x6}}, {0x1ff, 0x5, {0x3, 0x6}}, {0x7, 0xfff, {0x2, 0x7}}, {0x7, 0x2, {0x1, 0x2}}, {0x81, 0x5, {0x3, 0xfffffbff}}, {0x2, 0x4, {0x2, 0xff}}, {0x9, 0x3, {0x0, 0x3}}, {0x3, 0x5, {0x0, 0x8}}, {0x10, 0x4, {0x2, 0x5}}, {0x31, 0x4, {0x1, 0x6}}, {0x40, 0x6, {0x1, 0x81}}, {0x6, 0x9a71, {0x3, 0x3ff}}, {0x6, 0x4, {0x3, 0x8}}, {0x4, 0x7, {0x0, 0x4}}, {0x5, 0x400, {0x2, 0x2}}, {0x5c18, 0x9, {0x2, 0x8}}, {0x4, 0x2ca, {0x3, 0x7}}, {0x8, 0x4, {0x2, 0x9}}, {0xfff8, 0x5, {0x0, 0x7}}, {0x4, 0x7, {0x3}}, {0x5, 0x9, {0x0, 0x1000}}, {0x1000, 0x3, {0x3, 0x7}}, {0x40, 0x3, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x3}, 0xa2, 0x60, 0x2, 0x7f, 0x3, 'syz0\x00', "0bf99f08cd6fc32f258ffe9fd1ed34c35e9f7e2df1e95f9afb3a99e13ec40bd5", "8a5ebb5e186fc68e781e688574b99d9a84705b4c87add969cb6a46405b881e5a", [{0x1, 0xfff7, {0x1, 0x4}}, {0x0, 0x8, {0x1, 0xbb}}, {0xa0fe, 0xc950, {0x2, 0x1}}, {0x2c6, 0x6, {0x0, 0x6}}, {0x0, 0x2, {0x0, 0x2}}, {0x10, 0x5}, {0x4, 0x0, {0x0, 0x4}}, {0x9, 0x8, {0x0, 0x7bc3}}, {0x7f, 0x5, {0x3, 0x4}}, {0x9, 0x501, {0x1, 0x10000}}, {0x0, 0xb, {0x0, 0x1}}, {0x40, 0x8, {0x3, 0x2}}, {0x1, 0x81, {0x3, 0xa}}, {0x62, 0x1, {0x3, 0x1}}, {0xe09, 0xff7f, {0x0, 0x9}}, {0x7ff, 0xfb80, {0x1, 0x401}}, {0xfff8, 0x49, {0x1, 0x8}}, {0x7, 0x8001, {0x3, 0x2}}, {0x1, 0x205, {0x3, 0x4}}, {0x3, 0x3, {0x2, 0x4}}, {0xbf, 0x5, {0x0, 0x8}}, {0x8, 0x0, {0x0, 0xa3b}}, {0x81, 0x8d6, {0x2, 0x452}}, {0x6000, 0x6, {0x2, 0x4}}, {0x6d, 0x40, {0x0, 0xc600}}, {0x5, 0x200, {0x1, 0x6f}}, {0x8, 0x4, {0x3, 0x1ff}}, {0x3, 0x3, {0x0, 0x2}}, {0x4, 0xa36, {0x0, 0x44}}, {0x7, 0x2, {0x8b85872093f571e, 0x7}}, {0x9, 0x800, {0x0, 0x1e}}, {0x9, 0xb, {0x2, 0xfff}}, {0x6, 0x9, {0x0, 0x81}}, {0x8e5, 0x5, {0x0, 0x5}}, {0xd4, 0x1ff, {0x3, 0xfff}}, {0x400, 0x8000, {0x3, 0xe3}}, {0x5, 0x9, {0x0, 0x2}}, {0x1, 0x1, {0x3, 0xfffffff9}}, {0x4, 0x6, {0x0, 0x3}}, {0x5, 0x5, {0x2, 0xb41d}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x6, 0x5, 0x8, 0x1, 0xb, 'syz1\x00', "af1cd1460a8fb0dafba039bc15abbe2a936463cf94a2e1f50dcaf8a9d970fb97", "48850763d87bd0d1334ec08cbc293e2d4032317bced495cd9ab43f3efe6ac836", [{0xde82, 0x592, {0x2, 0x7}}, {0x4, 0x8, {0x0, 0x6}}, {0x809, 0x2, {0x3, 0x1}}, {0x3, 0x3, {0x2}}, {0x3, 0x0, {0x0, 0xa2}}, {0x0, 0x9, {0x1, 0x37a373d3}}, {0xfff, 0x100, {0x1, 0x6}}, {0x2, 0x9, {0x1, 0x5}}, {0x5, 0x800, {0x1, 0x4}}, {0xd58d, 0x6, {0x3, 0x4}}, {0x800, 0xa1, {0x3, 0x6}}, {0x2, 0x2, {0x3, 0xc}}, {0x4, 0xd, {0x2, 0x7}}, {0x5dc, 0x21c, {0x0, 0x7}}, {0x1, 0x9, {0x0, 0x100}}, {0x5, 0x8, {0x2, 0x5}}, {0x3, 0x9, {0x0, 0x6}}, {0x9, 0xdf, {0x3, 0xa}}, {0x3ff, 0x1, {0x3, 0x16}}, {0x6, 0x0, {0x2, 0x6}}, {0x3653, 0xd, {0x3, 0x5}}, {0x8, 0xb, {0x0, 0x1000}}, {0xefc, 0xff, {0x3, 0x9}}, {0x100, 0x37e5, {0x3, 0x6}}, {0x6, 0x7f, {0x1, 0x7f}}, {0x4, 0xa, {0x1, 0x9}}, {0x9, 0x4, {0x0, 0x4}}, {0x7, 0x0, {0x3, 0x5}}, {0xff25, 0x7, {0x2, 0x9}}, {0x1000, 0xdecc, {0x3, 0xf}}, {0xde41, 0x0, {0x2, 0x5}}, {0x2, 0xd78, {0x1, 0x6}}, {0x2, 0x5, {0x0, 0x80}}, {0x8, 0x5, {0x2, 0x8001}}, {0x6, 0xdd5, {0x2, 0x2f}}, {0x3, 0xc, {0x1, 0x7}}, {0x3, 0x1000, {0x2, 0x6}}, {0x4, 0x0, {0x3, 0xef}}, {0x80, 0x2, {0x1, 0x8}}, {0x0, 0xfffe, {0x0, 0xff}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x3, 0x8, 0x9, 0xf, 0x3, 'syz0\x00', "8611e7f57a53cf6827d556b9e72fe587c2ddd18b81b5bad6074dbcdbebce998a", "612c420b0d9e847ccdc64d1db00c263a7062cfeb0a6dc0d70f772514364c7950", [{0x6, 0x5, {0x3, 0x5}}, {0x7, 0x100, {0x0, 0x8}}, {0xff01, 0x4, {0x0, 0x7}}, {0x5, 0x5, {0x0, 0x7c}}, {0x67cb, 0x5, {0x2, 0x37}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x1d, 0x2, {0x0, 0x78}}, {0x1, 0x101, {0x3, 0x5}}, {0x4, 0x3, {0x1, 0x83d3}}, {0x8000, 0x3, {0x1, 0x400}}, {0x8, 0x9, {0x3, 0x77}}, {0x4, 0x5, {0x1}}, {0x2, 0x8001, {0x3, 0x2}}, {0xc, 0xd, {0x0, 0xa328}}, {0x4, 0x1, {0x0, 0x1ff}}, {0x9, 0x8}, {0x9, 0xb, {0x2, 0xffffffff}}, {0x6, 0x7, {0x2, 0x1000}}, {0x0, 0x4, {0x2, 0xa3ad}}, {0x5, 0x9, {0x3, 0xbceb}}, {0xad2, 0x4000}, {0x3, 0xfffb, {0x2, 0x8000}}, {0x3, 0x2, {0x0, 0x9}}, {0x2, 0x8, {0x1, 0x606}}, {0x0, 0x6, {0x0, 0x8}}, {0xc000, 0x800, {0x1, 0x401}}, {0x9, 0x6, {0x0, 0xfff}}, {0xfffa, 0xb, {0x1, 0x1}}, {0xfff, 0x8, {0x0, 0x1c000000}}, {0x2, 0xe3, {0x3, 0xa}}, {0xf7, 0x7f, {0x3, 0x1}}, {0x0, 0x81e6, {0x0, 0x5}}, {0x2, 0xd20e, {0x1, 0x1}}, {0x1, 0x29, {0x2, 0x6}}, {0x121c, 0x0, {0x2, 0x3}}, {0x353f, 0x7f, {0x5, 0x2}}, {0x4, 0x7b, {0x1, 0xfff}}, {0xffff, 0x200, {0x2, 0x6}}, {0x8, 0xfff6, {0x1, 0x1}}, {0xd, 0x2, {0x2, 0xd8c4}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r11, &(0x7f0000004600)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x2028000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004580)={0x28, r3, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) 0s ago: executing program 36 (id=3426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r1}, 0x38) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xcc1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800008dfe238a0080000000abe02a64fb926a871b042573a3e9406b1551bfe566cd21cd3bd0720a570154b776ab3fe06073ce8cc365bbd4895a4dc5c0cc1893ebb981b45a", @ANYRES32=r1, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYBLOB="0100000002000000010000000000000000000000000000000000000003431be8b2661a1cc6902c83c8249aa8f1ceda6c89de530fb8ae4e866ec396ca82794e8b3d1a5c9259e3e734227ff5965a5374db91c200"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xe, &(0x7f0000000080)=@raw=[@generic={0x0, 0x5, 0x7, 0x9372, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000100)='syzkaller\x00', 0xb, 0xf5, &(0x7f0000000140)=""/245, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r5, r6], &(0x7f0000000480)=[{0x4, 0x2}], 0x10, 0x40}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000005c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x10140) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r18, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r17, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r9], 0x1c}}, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 293.832323][T12845] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 293.843794][T12845] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 294.071387][T12862] v: renamed from vlan0 [ 294.679240][T12900] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 294.699311][T12901] netlink: 'syz.2.1898': attribute type 11 has an invalid length. [ 294.730465][T12896] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 294.743185][T12901] __nla_validate_parse: 5 callbacks suppressed [ 294.743207][T12901] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1898'. [ 294.773179][T12906] Bluetooth: MGMT ver 1.23 [ 294.795451][T12906] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 294.841695][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 294.883626][T12901] netlink: 'syz.2.1898': attribute type 5 has an invalid length. [ 294.934286][T12901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1898'. [ 295.379949][T12936] netlink: 'syz.2.1905': attribute type 1 has an invalid length. [ 295.389963][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1904'. [ 295.446423][T12936] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 296.735610][T13002] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1919'. [ 296.798663][T13005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1918'. [ 296.894661][T13014] netlink: 'syz.1.1920': attribute type 10 has an invalid length. [ 296.999887][T13014] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.057184][T13014] bridge_slave_1: left allmulticast mode [ 297.063463][T13014] bridge_slave_1: left promiscuous mode [ 297.079273][T13014] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.138144][T13014] bridge_slave_1: entered promiscuous mode [ 297.145569][T13014] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 297.178325][T13011] pimreg3: entered allmulticast mode [ 297.206448][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 297.340590][T13034] vlan2: entered allmulticast mode [ 297.609331][T13046] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 297.797970][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'. [ 298.109294][T13081] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 298.118247][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1932'. [ 298.159789][T13081] netlink: 'syz.4.1932': attribute type 2 has an invalid length. [ 298.191002][T13085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1935'. [ 298.394368][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 298.402845][ C1] lec:lec_tx_timeout: lec0 [ 298.407563][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.703623][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.711547][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.741692][T13103] bond0: (slave team0): Releasing backup interface [ 298.792855][T13103] bridge_slave_0: left promiscuous mode [ 298.799266][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.817207][T13103] bridge_slave_1: left allmulticast mode [ 298.822946][T13103] bridge_slave_1: left promiscuous mode [ 298.829725][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.841971][T13103] bond4: (slave veth0_to_bond): Releasing active interface [ 298.851251][T13097] netlink: 'syz.3.1938': attribute type 30 has an invalid length. [ 298.862333][T13103] bond0: (slave bond_slave_0): Releasing backup interface [ 298.882933][T13103] bond0: (slave bond_slave_1): Releasing backup interface [ 298.899475][T13103] team0: Port device team_slave_0 removed [ 298.915921][T13103] team0: Port device team_slave_1 removed [ 298.925486][T13103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.936013][T13103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.948511][T13103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.959318][T13103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.975319][T13103] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 299.191604][T13126] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 299.401941][T13128] bond4: (slave lo): Releasing backup interface [ 299.426642][T13128] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 299.545147][T13128] bond0: (slave dummy0): Releasing backup interface [ 299.612649][T13128] bridge_slave_0: left allmulticast mode [ 299.634976][T13128] bridge_slave_0: left promiscuous mode [ 299.649999][T13128] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.705663][T13152] netlink: 'syz.3.1951': attribute type 7 has an invalid length. [ 299.741206][T13128] bridge_slave_1: left allmulticast mode [ 299.752770][T13128] bridge_slave_1: left promiscuous mode [ 299.759608][T13154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1952'. [ 299.765626][T13128] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.802024][T13128] bond0: (slave bond_slave_0): Releasing backup interface [ 299.828899][T13128] bond0: (slave bond_slave_1): Releasing backup interface [ 299.877047][T13128] bond1: (slave gretap1): Releasing active interface [ 299.907278][T13128] bond2: (slave gretap2): Releasing active interface [ 299.923941][T13128] bond7: (slave bond8): Releasing backup interface [ 299.948978][ T794] lo speed is unknown, defaulting to 1000 [ 299.957449][T13165] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1952'. [ 299.966890][ T794] syz2: Port: 1 Link DOWN [ 299.988051][T13155] pim6reg: entered allmulticast mode [ 300.077434][T13168] netlink: 'syz.3.1953': attribute type 2 has an invalid length. [ 300.133083][T13175] netlink: 'syz.4.1955': attribute type 1 has an invalid length. [ 300.148624][T13173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1954'. [ 300.153133][T13175] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1955'. [ 300.251559][T13178] lo speed is unknown, defaulting to 1000 [ 300.277369][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 300.293761][T13181] netlink: 'syz.0.1957': attribute type 1 has an invalid length. [ 300.345128][T13182] bond10: option xmit_hash_policy: invalid value (64) [ 300.355944][T13182] bond10 (unregistering): Released all slaves [ 300.394436][T13178] lo speed is unknown, defaulting to 1000 [ 300.502221][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1961'. [ 300.519791][T13195] netlink: 'syz.3.1961': attribute type 4 has an invalid length. [ 300.615289][T13199] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1962'. [ 300.916047][T13217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1967'. [ 300.988710][T13219] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1968'. [ 301.014767][ T794] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 301.037245][ T794] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 301.048116][ T794] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 301.050286][T13225] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 301.065985][ T794] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 301.079588][ T794] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 301.099978][ T794] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 301.126120][ T794] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 301.163224][T13225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.215191][T13229] bond8: (slave geneve2): making interface the new active one [ 301.239340][T13229] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 301.422196][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 302.160130][T13282] syzkaller0: entered promiscuous mode [ 302.167994][T13282] syzkaller0: entered allmulticast mode [ 304.162073][T13287] dvmrp8: entered allmulticast mode [ 304.224125][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 304.232295][ C1] lec:lec_tx_timeout: lec0 [ 304.238108][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 304.255218][T13320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.334947][T13320] batadv0 (unregistering): left promiscuous mode [ 304.340152][T13325] xt_hashlimit: size too large, truncated to 1048576 [ 304.383275][T13322] vxcan0: entered allmulticast mode [ 304.646326][T13339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.037294][T13360] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 305.052717][T13360] netlink: 'syz.2.2008': attribute type 2 has an invalid length. [ 305.069096][T13364] __nla_validate_parse: 7 callbacks suppressed [ 305.069117][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 305.074736][T13360] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 305.391835][T13381] pim6reg: entered allmulticast mode [ 305.577182][T13387] syzkaller1: entered promiscuous mode [ 305.595890][T13387] syzkaller1: entered allmulticast mode [ 305.635273][T13393] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2017'. [ 305.742447][T13402] netlink: 'syz.2.2019': attribute type 1 has an invalid length. [ 305.930082][T13417] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2021'. [ 306.218921][T13431] netlink: 'syz.0.2025': attribute type 1 has an invalid length. [ 306.708621][T13455] netlink: 'syz.1.2028': attribute type 10 has an invalid length. [ 306.817151][T13455] team0: Port device dummy0 added [ 307.041907][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 307.065466][T13472] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2034'. [ 307.079951][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 307.089839][T13472] 8021q: VLANs not supported on gre0 [ 307.097267][T13472] xt_ecn: cannot match TCP bits for non-tcp packets [ 307.107711][T13472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'. [ 307.324355][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 307.503294][T13491] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 307.536395][T13491] tipc: Enabled bearer , priority 10 [ 307.641645][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'. [ 307.806365][T13512] vlan0: entered promiscuous mode [ 307.820374][T13512] vlan0: entered allmulticast mode [ 307.853811][T13512] veth0_vlan: entered allmulticast mode [ 307.977128][T13520] lo: entered promiscuous mode [ 307.995427][T13520] netlink: 'syz.3.2049': attribute type 2 has an invalid length. [ 308.011611][T13520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.110893][T13523] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.2050'. [ 308.372036][T13544] netlink: 'syz.2.2055': attribute type 63 has an invalid length. [ 308.467610][T13544] netlink: 'syz.2.2055': attribute type 63 has an invalid length. [ 308.523222][T13544] netlink: 'syz.2.2055': attribute type 63 has an invalid length. [ 308.556192][T13553] ipt_ECN: cannot use operation on non-tcp rule [ 309.063825][T13582] tc_dump_action: action bad kind [ 309.254151][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 309.262503][ C1] lec:lec_tx_timeout: lec0 [ 309.267801][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 309.298670][T13599] x_tables: duplicate underflow at hook 3 [ 309.300130][T13600] x_tables: duplicate underflow at hook 3 [ 309.337204][T13588] syzkaller0: entered promiscuous mode [ 309.349718][T13599] sctp: [Deprecated]: syz.2.2069 (pid 13599) Use of int in maxseg socket option. [ 309.349718][T13599] Use struct sctp_assoc_value instead [ 309.354231][T13588] syzkaller0: entered allmulticast mode [ 311.461008][T13594] 8021q: VLANs not supported on ipvlan1 [ 312.108249][T13656] __nla_validate_parse: 7 callbacks suppressed [ 312.108270][T13656] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2082'. [ 312.254664][T13662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.396381][T13662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.469269][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2087'. [ 312.586956][T13673] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 312.707657][T13681] Cannot find del_set index 49151 as target [ 312.715784][T13682] : renamed from bond_slave_0 (while UP) [ 312.791253][T13685] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2091'. [ 312.902881][T13692] validate_nla: 31 callbacks suppressed [ 312.903079][T13692] netlink: 'syz.3.2092': attribute type 1 has an invalid length. [ 312.956854][T13692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.005787][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 313.061738][T13694] xt_SECMARK: invalid mode: 9 [ 313.174508][T13697] sock: sock_timestamping_bind_phc: sock not bind to device [ 313.269606][T13697] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.2093'. [ 313.295536][T13697] openvswitch: netlink: Flow key attr not present in new flow. [ 313.470331][T13714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.550322][T13718] openvswitch: netlink: IP tunnel dst address not specified [ 313.573930][T13718] openvswitch: netlink: IP tunnel dst address not specified [ 313.606376][ T7727] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.621715][T13718] openvswitch: netlink: IP tunnel dst address not specified [ 313.649201][ T7727] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.665396][T13718] openvswitch: netlink: IP tunnel dst address not specified [ 313.688237][ T7727] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.695301][T13718] openvswitch: netlink: IP tunnel dst address not specified [ 313.728006][ T7727] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.746288][T13718] openvswitch: netlink: IP tunnel dst address not specified [ 313.805378][T13718] openvswitch: netlink: IP tunnel dst address not specified [ 313.884061][T13737] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 313.934857][T13737] netlink: 'syz.1.2103': attribute type 2 has an invalid length. [ 313.943145][T13737] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 314.277887][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 314.286363][ C1] lec:lec_tx_timeout: lec0 [ 314.291247][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.379663][T13762] ipt_REJECT: TCP_RESET invalid for non-tcp [ 314.488911][T13765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2109'. [ 314.577010][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'. [ 314.894664][T13786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2116'. [ 314.964936][T13786] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2116'. [ 314.982759][T13786] netlink: 'syz.2.2116': attribute type 6 has an invalid length. [ 315.013932][T13786] netlink: 'syz.2.2116': attribute type 5 has an invalid length. [ 315.023706][T13793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2117'. [ 315.482271][T13823] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 315.556864][T13828] netlink: 'syz.2.2121': attribute type 3 has an invalid length. [ 315.672777][T13831] netlink: 'syz.1.2124': attribute type 4 has an invalid length. [ 316.226885][T13856] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.239749][T13856] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.395221][T13856] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.466933][T13856] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.652964][T13886] xt_time: unknown flags 0xf4 [ 316.683928][T13856] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.722248][T13856] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.778029][T13885] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 316.787057][T13885] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 316.795622][T13893] syzkaller1: entered promiscuous mode [ 316.801574][T13893] syzkaller1: entered allmulticast mode [ 316.886990][T13856] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.904820][T13856] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.927708][T13899] netlink: 'syz.3.2142': attribute type 83 has an invalid length. [ 317.161078][ T151] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.180854][ T151] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.239017][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.251667][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.252421][T13914] __nla_validate_parse: 6 callbacks suppressed [ 317.252437][T13914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2147'. [ 317.385303][ T1110] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.397140][ T1110] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.451739][ T1110] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.496706][ T1110] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.525451][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.769676][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2156'. [ 317.855212][T13944] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002 [ 318.383490][T13965] sctp: [Deprecated]: syz.3.2162 (pid 13965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.383490][T13965] Use struct sctp_sack_info instead [ 318.463360][T13970] net_ratelimit: 62 callbacks suppressed [ 318.463383][T13970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.542856][T13977] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2165'. [ 318.585045][T13977] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2165'. [ 318.609598][T13976] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2165'. [ 318.639833][T13976] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2165'. [ 318.723426][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 318.752210][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 318.899978][T13997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2168'. [ 319.051054][T14002] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2169'. [ 319.152921][T14007] openvswitch: netlink: IPv4 tun info is not correct [ 319.256861][T14009] openvswitch: netlink: Flow key attr not present in new flow. [ 319.304376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 319.312506][ C1] lec:lec_tx_timeout: lec0 [ 319.317701][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.429895][T14025] netlink: 'syz.2.2175': attribute type 58 has an invalid length. [ 319.633946][T14033] netlink: 'syz.3.2176': attribute type 1 has an invalid length. [ 319.812440][T14039] x_tables: unsorted underflow at hook 4 [ 319.923257][T14046] xfrm1: entered promiscuous mode [ 319.955408][T14046] xfrm1: entered allmulticast mode [ 320.691102][T14083] netlink: 'syz.0.2189': attribute type 13 has an invalid length. [ 321.220894][T14083] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 321.228827][T14083] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 321.249105][T14083] bridge8: left promiscuous mode [ 321.256348][T14083] bridge8: left allmulticast mode [ 321.959077][T14109] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 322.024238][T14118] netlink: 'syz.2.2199': attribute type 13 has an invalid length. [ 322.024662][T14113] pim6reg1: entered promiscuous mode [ 322.033663][T14113] pim6reg1: entered allmulticast mode [ 322.113244][T14118] macvtap0: entered allmulticast mode [ 322.164833][T14118] macvtap0: refused to change device tx_queue_len [ 322.316754][T14118] __nla_validate_parse: 9 callbacks suppressed [ 322.316774][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2199'. [ 322.786844][T14138] ip6gre1: entered promiscuous mode [ 322.792670][T14138] ip6gre1: entered allmulticast mode [ 322.805932][T14142] netlink: 30 bytes leftover after parsing attributes in process `syz.3.2207'. [ 322.927667][T14147] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.093474][T14158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.223093][T14166] Illegal XDP return value 16128 on prog (id 374) dev syz_tun, expect packet loss! [ 323.326804][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2215'. [ 323.505539][T14173] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2216'. [ 323.588852][T14175] netlink: 'syz.0.2217': attribute type 29 has an invalid length. [ 323.615116][T14175] netlink: 'syz.0.2217': attribute type 29 has an invalid length. [ 323.896508][T14192] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 324.002367][T14192] bond7: (slave gretap1): making interface the new active one [ 324.012146][T14192] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 324.032523][T14188] vxlan0: entered promiscuous mode [ 324.044393][T14188] vxlan0: entered allmulticast mode [ 324.050340][ T151] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.060486][ T151] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.071769][ T151] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.080773][ T151] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.183018][T14208] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2228'. [ 324.231046][T14188] syzkaller0: entered promiscuous mode [ 324.247522][T14188] syzkaller0: entered allmulticast mode [ 324.276126][T14210] lo: left promiscuous mode [ 324.324167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 324.332347][ C1] lec:lec_tx_timeout: lec0 [ 324.337077][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.459611][T14210] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.507149][T14218] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 324.673570][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2232'. [ 324.725392][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 324.871305][T14234] 8021q: adding VLAN 0 to HW filter on device bond9 [ 324.883599][T14234] bond8: (slave bond9): Enslaving as an active interface with an up link [ 324.978786][T14231] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.990051][T14231] bond8: (slave bond10): Enslaving as an active interface with an up link [ 325.340158][T14252] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2236'. [ 325.462551][T14262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2240'. [ 325.509371][T14263] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 325.537241][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2242'. [ 325.768031][T14276] ip6t_rpfilter: unknown options [ 326.110916][T14291] nbd: must specify a size in bytes for the device [ 326.392536][T14307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.392610][T14308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.444708][T14310] netlink: 'syz.1.2259': attribute type 2 has an invalid length. [ 326.453138][T14311] netlink: 'syz.1.2259': attribute type 2 has an invalid length. [ 326.461506][T14310] netlink: 'syz.1.2259': attribute type 11 has an invalid length. [ 326.473484][T14311] netlink: 'syz.1.2259': attribute type 11 has an invalid length. [ 326.489101][T14311] netlink: 'syz.1.2259': attribute type 2 has an invalid length. [ 326.512446][T14311] netlink: 'syz.1.2259': attribute type 11 has an invalid length. [ 326.521302][T14311] netlink: 'syz.1.2259': attribute type 2 has an invalid length. [ 326.531973][T14311] netlink: 'syz.1.2259': attribute type 11 has an invalid length. [ 326.541157][T14311] netlink: 'syz.1.2259': attribute type 2 has an invalid length. [ 326.550074][T14311] netlink: 'syz.1.2259': attribute type 11 has an invalid length. [ 326.760729][T14324] nbd: illegal input index 2958377 [ 326.887527][T14328] Bluetooth: hci1: too big key_count value 32778 [ 327.542219][T14367] __nla_validate_parse: 69 callbacks suppressed [ 327.542241][T14367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2277'. [ 327.608443][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 327.645486][T14371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.680621][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 327.737263][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 327.753816][T14376] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 327.830205][T14371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.901628][T14371] bond4: (slave bond0): making interface the new active one [ 327.951117][T14371] bond4: (slave bond0): Enslaving as an active interface with an up link [ 327.995164][T14376] bridge0: port 1(syz_tun) entered blocking state [ 328.015297][T14376] bridge0: port 1(syz_tun) entered disabled state [ 328.026611][T14376] syz_tun: entered allmulticast mode [ 328.053637][T14376] syz_tun: entered promiscuous mode [ 328.148839][ T3735] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.176430][ T3735] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.208906][ T3735] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.220380][ T3735] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.276820][T14388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2280'. [ 328.422722][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2280'. [ 328.546791][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2288'. [ 328.570597][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'. [ 328.760949][T14412] SET target dimension over the limit! [ 328.836057][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 328.894665][T14418] IPVS: set_ctl: invalid protocol: 149 172.30.129.4:20001 [ 329.239333][T14437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2299'. [ 329.330724][T14439] ip6t_srh: unknown srh invflags 4000 [ 329.340528][T14439] openvswitch: netlink: IP tunnel dst address not specified [ 329.357003][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 329.365547][ C1] lec:lec_tx_timeout: lec0 [ 329.370867][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.960089][T14460] NCSI netlink: No device for ifindex 813332851 [ 329.977227][T14461] NCSI netlink: No device for ifindex 813332851 [ 330.529812][T14488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.554597][T14545] 0: reclassify loop, rule prio 0, protocol 800 [ 331.766798][T14558] validate_nla: 127 callbacks suppressed [ 331.766822][T14558] netlink: 'syz.4.2334': attribute type 17 has an invalid length. [ 331.802838][T14559] netlink: 'syz.4.2334': attribute type 17 has an invalid length. [ 331.838960][T14558] erspan0: entered promiscuous mode [ 331.884902][T14558] erspan0: left promiscuous mode [ 331.973868][T14559] erspan0: entered promiscuous mode [ 332.032065][T14559] erspan0: left promiscuous mode [ 332.565067][T14596] __nla_validate_parse: 16 callbacks suppressed [ 332.565091][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 332.611523][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2345'. [ 332.731408][T14603] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 333.022508][T14620] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2352'. [ 333.051690][T14620] nbd: illegal input index -8454144 [ 333.099290][T14623] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2353'. [ 333.109942][ T5847] Bluetooth: hci3: link tx timeout [ 333.116863][ T5847] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 333.129070][T14623] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2353'. [ 333.141289][T14623] netlink: 'syz.2.2353': attribute type 6 has an invalid length. [ 333.150532][T14623] netlink: 'syz.2.2353': attribute type 5 has an invalid length. [ 333.160546][T14623] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2353'. [ 333.383395][T14636] netlink: 'syz.2.2356': attribute type 1 has an invalid length. [ 333.421521][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2356'. [ 333.615258][T14647] openvswitch: netlink: IP tunnel dst address not specified [ 333.813297][T14651] delete_channel: no stack [ 333.967959][T14656] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 334.068453][T14669] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2367'. [ 334.091648][T14656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.162067][T14659] bond0: (slave geneve4): making interface the new active one [ 334.176967][T14659] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 334.204200][ T3506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.223652][T14656] tipc: Started in network mode [ 334.229699][T14656] tipc: Node identity 080211, cluster identity 4711 [ 334.247721][T14656] tipc: Enabled bearer , priority 0 [ 334.271443][ T3506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.301963][ T3506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.323123][T14656] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 334.342508][T14656] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 334.384670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.393268][ C1] lec:lec_tx_timeout: lec0 [ 334.398457][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.413605][ T3506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.441486][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'. [ 334.453584][T14656] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 334.545247][T14692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2372'. [ 334.692511][T14659] tipc: Resetting bearer [ 335.009700][T12621] udevd[12621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 335.185448][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 335.206257][T14724] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.227124][T14724] bond7: (slave bond8): Enslaving as an active interface with an up link [ 335.271929][ T24] tipc: Node number set to 134353152 [ 335.402170][T14744] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.549823][T14746] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 335.564951][T14746] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 335.713971][T14744] gretap2: entered promiscuous mode [ 335.728614][T14744] bond9: (slave gretap2): making interface the new active one [ 335.739435][T14744] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 335.790839][T14753] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 335.806262][T14753] bond4 (unregistering): Released all slaves [ 336.026863][T14773] netlink: 'syz.0.2392': attribute type 1 has an invalid length. [ 337.428038][T14806] netlink: 'syz.4.2398': attribute type 142 has an invalid length. [ 337.495833][T14815] veth0_to_team: entered promiscuous mode [ 337.718775][T14825] __nla_validate_parse: 8 callbacks suppressed [ 337.718796][T14825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2402'. [ 337.785972][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2402'. [ 337.806823][T14827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2405'. [ 337.889343][T14827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2405'. [ 338.357757][T14859] pim6reg527: entered allmulticast mode [ 338.448588][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2413'. [ 338.903718][T14887] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2421'. [ 339.096307][T14897] openvswitch: netlink: Message has 592 unknown bytes. [ 339.103528][T14897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.221437][T14909] netlink: 'syz.1.2427': attribute type 10 has an invalid length. [ 339.337672][T14903] syzkaller0: entered promiscuous mode [ 339.357299][T14903] syzkaller0: entered allmulticast mode [ 339.552960][T14930] netlink: 'syz.4.2434': attribute type 1 has an invalid length. [ 339.633076][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2434'. [ 339.660481][T14938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2436'. [ 339.688875][T14938] delete_channel: no stack [ 339.857283][T14947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2440'. [ 339.887183][T14948] netlink: 'syz.4.2439': attribute type 10 has an invalid length. [ 339.919006][T14948] team0: Device veth1_macvtap failed to register rx_handler [ 340.080403][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2441'. [ 340.224204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 340.232453][ C1] lec:lec_tx_timeout: lec0 [ 340.238080][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 340.256425][T14977] tipc: Enabled bearer , priority 0 [ 340.264320][T14977] syzkaller0: entered promiscuous mode [ 340.269849][T14977] syzkaller0: entered allmulticast mode [ 340.327828][T14977] tipc: Resetting bearer [ 340.358043][T14977] nbd: socks must be embedded in a SOCK_ITEM attr [ 340.374443][T14971] tipc: Resetting bearer [ 340.438884][T14971] tipc: Disabling bearer [ 340.547212][ T6729] bond0: (slave 32): link status definitely down, disabling slave [ 340.715155][T14994] IPVS: set_ctl: invalid protocol: 50 172.30.1.5:20002 [ 340.845291][T15003] siw: device registration error -23 [ 341.312163][T15026] vlan0: entered promiscuous mode [ 341.322889][T15026] erspan0: entered promiscuous mode [ 341.560389][T15035] nbd: must specify an index to disconnect [ 341.800140][T15043] netlink: 'syz.1.2467': attribute type 13 has an invalid length. [ 341.809929][T15043] netlink: 'syz.1.2467': attribute type 58 has an invalid length. [ 341.836180][T15053] xt_bpf: check failed: parse error [ 343.031300][T15123] __nla_validate_parse: 10 callbacks suppressed [ 343.031320][T15123] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2493'. [ 343.064235][T15123] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 343.171654][T15121] netlink: 'syz.3.2494': attribute type 4 has an invalid length. [ 343.221636][T15121] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2494'. [ 343.232050][T15132] tipc: Enabling of bearer rejected, already enabled [ 343.287237][T15121] `: renamed from bond0 (while UP) [ 343.424949][T15138] bond4: option miimon: invalid value (18446744073709551585) [ 343.432596][T15138] bond4: option miimon: allowed values 0 - 2147483647 [ 343.448602][T15138] bond4 (unregistering): Released all slaves [ 343.509797][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2498'. [ 343.680337][T15155] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20000 [ 343.818508][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'. [ 343.884766][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2503'. [ 343.887069][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2505'. [ 343.993932][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2505'. [ 344.134850][T15182] netlink: 'syz.4.2509': attribute type 3 has an invalid length. [ 344.166416][T15185] xt_ecn: cannot match TCP bits for non-tcp packets [ 344.176441][T15186] xt_ecn: cannot match TCP bits for non-tcp packets [ 344.218318][T15191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'. [ 344.260749][T15193] netlink: 'syz.0.2513': attribute type 18 has an invalid length. [ 344.410643][T15202] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2515'. [ 344.420936][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2515'. [ 344.606385][T15212] netlink: 'syz.0.2518': attribute type 9 has an invalid length. [ 345.216878][T15239] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 345.232565][T15239] bond10 (unregistering): Released all slaves [ 345.254612][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 345.262998][ C1] lec:lec_tx_timeout: lec0 [ 345.267716][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.277881][T15248] tipc: Enabling of bearer rejected, media not registered [ 345.445701][T15253] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 345.631343][T15274] syzkaller0: entered promiscuous mode [ 345.656102][T15274] syzkaller0: entered allmulticast mode [ 345.720890][T15278] batadv2: entered allmulticast mode [ 345.728297][T15278] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 346.056555][T15296] syzkaller0: entered promiscuous mode [ 346.062289][T15296] syzkaller0: entered allmulticast mode [ 346.381440][T15311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.705881][T15325] xt_hashlimit: invalid interval [ 346.711339][T15326] xt_hashlimit: invalid interval [ 347.201100][T15347] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 347.465422][T15369] netlink: 'syz.0.2565': attribute type 29 has an invalid length. [ 347.575930][T15372] netlink: 'syz.0.2568': attribute type 24 has an invalid length. [ 347.632408][T15378] netlink: 'syz.4.2569': attribute type 83 has an invalid length. [ 347.886951][T15395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.045942][T15401] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 348.147297][T15404] lo: entered allmulticast mode [ 348.176355][T15404] tunl0: entered allmulticast mode [ 348.181830][T15404] gre0: entered allmulticast mode [ 348.203977][T15404] gretap0: entered allmulticast mode [ 348.209844][T15404] erspan0: entered allmulticast mode [ 348.215441][T15404] ip_vti0: entered allmulticast mode [ 348.242641][T15404] ip6_vti0: entered allmulticast mode [ 348.255644][T15404] sit0: entered allmulticast mode [ 348.264931][T15404] ip6tnl0: entered allmulticast mode [ 348.271882][T15404] ip6gre0: entered allmulticast mode [ 348.295225][T15404] syz_tun: entered allmulticast mode [ 348.307535][T15404] ip6gretap0: entered allmulticast mode [ 348.317641][T15404] bridge0: entered allmulticast mode [ 348.329766][T15404] vcan0: entered allmulticast mode [ 348.347358][T15404] bond0: entered allmulticast mode [ 348.357095][T15404] team0: entered allmulticast mode [ 348.372658][T15404] dummy0: entered allmulticast mode [ 348.395381][T15404] nlmon0: entered allmulticast mode [ 348.409351][T15404] caif0: entered allmulticast mode [ 348.420033][T15426] __nla_validate_parse: 18 callbacks suppressed [ 348.420055][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2583'. [ 348.426121][T15404] batadv0: entered allmulticast mode [ 348.476543][T15404] veth0: entered allmulticast mode [ 348.482191][T15404] veth1: entered allmulticast mode [ 348.503244][T15404] wg1: entered allmulticast mode [ 348.528258][T15404] wg2: entered allmulticast mode [ 348.533442][T15404] veth0_to_bridge: entered allmulticast mode [ 348.547361][T15436] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2583'. [ 348.557657][T15404] veth1_to_bridge: entered allmulticast mode [ 348.564020][T15404] bridge_slave_1: entered allmulticast mode [ 348.588219][T15404] veth0_to_bond: entered allmulticast mode [ 348.595786][T15404] bond_slave_0: entered allmulticast mode [ 348.602411][T15404] veth1_to_bond: entered allmulticast mode [ 348.608775][T15404] bond_slave_1: entered allmulticast mode [ 348.618402][T15404] veth0_to_team: entered allmulticast mode [ 348.627661][T15438] netlink: zone id is out of range [ 348.633148][T15438] netlink: zone id is out of range [ 348.634315][T15404] team_slave_0: entered allmulticast mode [ 348.645004][T15438] netlink: zone id is out of range [ 348.655074][T15404] veth1_to_team: entered allmulticast mode [ 348.661483][T15404] team_slave_1: entered allmulticast mode [ 348.668049][T15404] veth0_to_batadv: entered allmulticast mode [ 348.683123][T15404] batadv_slave_0: entered allmulticast mode [ 348.691724][T15404] veth1_to_batadv: entered allmulticast mode [ 348.708377][T15404] batadv_slave_1: entered allmulticast mode [ 348.735004][T15404] xfrm0: entered allmulticast mode [ 348.740385][T15404] veth1_to_hsr: entered allmulticast mode [ 348.761526][T15404] hsr_slave_1: entered allmulticast mode [ 348.785736][T15404] hsr0: entered allmulticast mode [ 348.808311][T15404] veth1_virt_wifi: entered allmulticast mode [ 348.842199][T15404] veth0_virt_wifi: entered allmulticast mode [ 348.859865][T15404] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 348.873703][T15404] veth1_vlan: entered allmulticast mode [ 348.905160][T15404] veth0_vlan: entered allmulticast mode [ 348.946736][T15404] vlan0: entered allmulticast mode [ 348.952730][T15404] macvlan0: entered allmulticast mode [ 348.964160][T15404] macvlan1: entered allmulticast mode [ 348.986980][T15404] ipvlan0: entered allmulticast mode [ 348.992517][T15404] ipvlan1: entered allmulticast mode [ 349.004858][T15404] veth1_macvtap: entered allmulticast mode [ 349.011351][T15404] veth0_macvtap: entered allmulticast mode [ 349.023162][T15404] macvtap0: entered allmulticast mode [ 349.036326][T15404] macsec0: entered allmulticast mode [ 349.051198][T15404] geneve0: entered allmulticast mode [ 349.066789][T15404] geneve1: entered allmulticast mode [ 349.078509][T15404] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 349.088310][T15404] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 349.097165][T15404] macsec1: entered allmulticast mode [ 349.103271][T15404] ip6erspan0: entered allmulticast mode [ 349.114953][T15404] veth2: entered allmulticast mode [ 349.120475][T15404] veth3: entered allmulticast mode [ 349.126786][T15404] bond1: entered allmulticast mode [ 349.134929][T15404] bridge1: entered allmulticast mode [ 349.141025][T15404] gre1: entered allmulticast mode [ 349.184006][T15404] ip6erspan0.0: entered allmulticast mode [ 349.195888][T15404] @: entered allmulticast mode [ 349.204010][T15404] mac80211_hwsim hwsim10 pim6reg0: entered allmulticast mode [ 349.213322][T15404] veth4: entered allmulticast mode [ 349.222294][T15404] veth5: entered allmulticast mode [ 349.234634][T15404] bond2: entered allmulticast mode [ 349.242972][T15404] : entered allmulticast mode [ 349.248869][T15404] batadv1: entered allmulticast mode [ 349.256340][T15404] ip6tnl1: entered allmulticast mode [ 349.262092][T15404] bridge2: entered allmulticast mode [ 349.275658][T15404] nicvf0: entered allmulticast mode [ 349.281596][T15404] virt_wifi0.0: entered allmulticast mode [ 349.289556][T15404] veth6: entered allmulticast mode [ 349.302583][T15404] veth7: entered allmulticast mode [ 349.308460][T15404] mac80211_hwsim hwsim23 wlan2: entered allmulticast mode [ 349.316904][T15404] bond3: entered allmulticast mode [ 349.322237][T15404] bridge3: entered allmulticast mode [ 349.330258][T15404] vlan1: entered allmulticast mode [ 349.336955][T15404] bond4: entered allmulticast mode [ 349.347953][T15404] veth8: entered allmulticast mode [ 349.355945][T15404] veth9: entered allmulticast mode [ 349.362854][T15404] veth10: entered allmulticast mode [ 349.369653][T15404] veth11: entered allmulticast mode [ 349.380060][T15404] bond5: entered allmulticast mode [ 349.389270][T15404] veth12: entered allmulticast mode [ 349.395955][T15404] veth13: entered allmulticast mode [ 349.402885][T15404] vlan0.0: entered allmulticast mode [ 349.409339][T15404] bond6: entered allmulticast mode [ 349.415344][T15404] vlan1.3: entered allmulticast mode [ 349.421106][T15404] bond7: entered allmulticast mode [ 349.428561][T15404] mac80211_hwsim hwsim27 wlan3: entered allmulticast mode [ 349.441482][T15404] bond8: entered allmulticast mode [ 349.447946][T15404] geneve2: entered allmulticast mode [ 349.464670][T15404] macsec2: entered allmulticast mode [ 349.470486][T15404] netdevsim netdevsim4 eth0: entered allmulticast mode [ 349.481453][T15404] netdevsim netdevsim4 eth1: entered allmulticast mode [ 349.489257][T15404] netdevsim netdevsim4 eth2: entered allmulticast mode [ 349.496917][T15404] netdevsim netdevsim4 eth3: entered allmulticast mode [ 349.505277][T15404] vxcan0: entered allmulticast mode [ 349.511079][T15404] vxcan1: entered allmulticast mode [ 349.516906][T15404] syztnl1: entered allmulticast mode [ 349.522471][T15404] sit1: entered allmulticast mode [ 349.528351][T15404] bond9: entered allmulticast mode [ 349.533663][T15404] ipvlan2: entered allmulticast mode [ 349.540667][T15404] bridge4: entered allmulticast mode [ 349.551764][T15404] bridge5: entered allmulticast mode [ 349.565171][T15404] veth14: entered allmulticast mode [ 349.570643][T15404] veth15: entered allmulticast mode [ 349.578072][T15404] bond10: entered allmulticast mode [ 349.650277][T10744] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.685313][T10744] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.719682][T10744] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.753308][T10744] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.769400][T10744] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.788082][T10744] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.811200][T10744] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.830006][T10744] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.917853][T15469] netlink: 'syz.3.2591': attribute type 4 has an invalid length. [ 349.965264][T15473] netlink: 'syz.0.2593': attribute type 1 has an invalid length. [ 350.195561][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2598'. [ 350.274132][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 350.282197][ C1] lec:lec_tx_timeout: lec0 [ 350.286861][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.295617][T15496] bond4: option xmit_hash_policy: invalid value (64) [ 350.326692][T15496] bond4 (unregistering): Released all slaves [ 350.681812][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 350.714592][T15525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2607'. [ 351.228097][T15559] IPVS: Error connecting to the multicast addr [ 351.246381][T15559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.288505][T15564] netlink: 'syz.2.2617': attribute type 2 has an invalid length. [ 351.366925][T15564] 9: entered promiscuous mode [ 351.649330][T15589] netlink: 'syz.0.2629': attribute type 11 has an invalid length. [ 351.661684][T15589] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2629'. [ 351.661728][T15590] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 351.985600][T15608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2634'. [ 352.028419][T15608] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2634'. [ 352.071631][T15608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2634'. [ 352.148642][T15620] bond0: entered promiscuous mode [ 352.176143][T15620] batadv0: entered promiscuous mode [ 352.200229][T15620] batadv0: left promiscuous mode [ 352.213911][T15620] bond0: left promiscuous mode [ 352.239009][T15622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.282307][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2639'. [ 352.411891][T15635] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 352.623334][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888056cfd800: connection exists (00 02). last cmd: 10 [ 353.461168][T15694] netlink: 'syz.0.2651': attribute type 4 has an invalid length. [ 353.503774][T15694] __nla_validate_parse: 3 callbacks suppressed [ 353.503798][T15694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2651'. [ 353.702823][T15705] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 353.725555][T15705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2656'. [ 353.736772][T15708] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2656'. [ 353.967086][T15715] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2659'. [ 354.094811][T15724] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.2662'. [ 354.176676][T15715] syzkaller0: entered promiscuous mode [ 354.197102][T15715] syzkaller0: entered allmulticast mode [ 354.227932][T15720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.288844][T15730] netlink: 'syz.0.2663': attribute type 24 has an invalid length. [ 354.339913][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2663'. [ 354.425082][T15726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.299945][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 355.308181][ C1] lec:lec_tx_timeout: lec0 [ 355.313183][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 357.044339][T15747] syzkaller1: entered promiscuous mode [ 357.051850][T15747] syzkaller1: entered allmulticast mode [ 357.466135][T15771] netlink: 'syz.0.2676': attribute type 1 has an invalid length. [ 357.509977][T15771] netlink: 'syz.0.2676': attribute type 3 has an invalid length. [ 357.565480][T15771] netlink: 'syz.0.2676': attribute type 7 has an invalid length. [ 357.573369][T15771] netlink: 'syz.0.2676': attribute type 8 has an invalid length. [ 357.590240][T15771] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2676'. [ 357.600053][T15771] NCSI netlink: No device for ifindex 131092 [ 357.720698][T15782] sctp: [Deprecated]: syz.2.2679 (pid 15782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.720698][T15782] Use struct sctp_sack_info instead [ 358.406135][T15819] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2692'. [ 358.617742][T15829] tipc: Enabling of bearer rejected, media not registered [ 358.645083][T15831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2694'. [ 358.726040][T15839] netlink: 'syz.2.2697': attribute type 12 has an invalid length. [ 358.880542][T15839] bond10: option primary_reselect: invalid value (15) [ 358.959480][T15839] bond10 (unregistering): Released all slaves [ 359.020723][T15851] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2699'. [ 359.196679][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2701'. [ 359.486707][T15882] openvswitch: netlink: Duplicate key (type 1). [ 359.921225][T15906] nft_compat: unsupported protocol 0 [ 359.929054][T15909] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2715'. [ 360.096059][T15920] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 360.123059][T15913] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2716'. [ 360.132424][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2716'. [ 360.142279][T15913] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2716'. [ 360.153290][T15913] netlink: 'syz.0.2716': attribute type 3 has an invalid length. [ 360.172253][T15913] netlink: 'syz.0.2716': attribute type 2 has an invalid length. [ 360.190928][T15913] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2716'. [ 360.324133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 360.332195][ C1] lec:lec_tx_timeout: lec0 [ 360.337334][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.460079][T15934] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 360.521262][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2725'. [ 360.902193][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2729'. [ 360.908663][T15956] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 361.634173][T15985] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 362.335893][T16013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.354513][T16016] netlink: 'syz.0.2747': attribute type 1 has an invalid length. [ 362.369902][T16013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.390379][T16016] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 362.704260][T16041] 8021q: VLANs not supported on gre0 [ 362.763630][T16045] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 362.780837][T16041] 8021q: VLANs not supported on gre0 [ 362.791187][T16041] 8021q: VLANs not supported on gre0 [ 362.816267][T16041] 8021q: VLANs not supported on gre0 [ 362.822308][T16041] 8021q: VLANs not supported on gre0 [ 362.829261][T16041] 8021q: VLANs not supported on gre0 [ 362.835446][T16041] 8021q: VLANs not supported on gre0 [ 362.846698][T16041] 8021q: VLANs not supported on gre0 [ 362.852272][T16041] 8021q: VLANs not supported on gre0 [ 362.862770][T16041] 8021q: VLANs not supported on gre0 [ 362.915334][T16041] 8021q: VLANs not supported on gre0 [ 362.930686][T16041] 8021q: VLANs not supported on gre0 [ 363.011525][T16053] geneve4: entered promiscuous mode [ 363.023677][T16053] geneve4: entered allmulticast mode [ 363.053115][T16041] 8021q: VLANs not supported on gre0 [ 363.066729][T16041] 8021q: VLANs not supported on gre0 [ 363.080151][T16041] 8021q: VLANs not supported on gre0 [ 363.114422][T16041] 8021q: VLANs not supported on gre0 [ 363.128533][T16041] 8021q: VLANs not supported on gre0 [ 363.136063][T16041] 8021q: VLANs not supported on gre0 [ 363.141570][T16041] 8021q: VLANs not supported on gre0 [ 363.198529][T16041] 8021q: VLANs not supported on gre0 [ 363.231869][T16041] 8021q: VLANs not supported on gre0 [ 363.278016][T16041] 8021q: VLANs not supported on gre0 [ 363.314024][T16041] 8021q: VLANs not supported on gre0 [ 363.356308][T16041] 8021q: VLANs not supported on gre0 [ 363.375907][T16041] 8021q: VLANs not supported on gre0 [ 363.404347][T16041] 8021q: VLANs not supported on gre0 [ 363.411616][T16041] 8021q: VLANs not supported on gre0 [ 363.445274][T16041] 8021q: VLANs not supported on gre0 [ 363.748443][T16089] __nla_validate_parse: 8 callbacks suppressed [ 363.748465][T16089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2769'. [ 363.817233][T16092] delete_channel: no stack [ 363.908445][T16092] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2769'. [ 364.029781][T16107] openvswitch: netlink: IP tunnel dst address not specified [ 364.160671][T16110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2774'. [ 364.214773][T16110] netlink: 'syz.0.2774': attribute type 7 has an invalid length. [ 364.225323][T16110] netlink: 'syz.0.2774': attribute type 8 has an invalid length. [ 364.253068][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2774'. [ 364.273999][T16119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 364.477259][T16127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2780'. [ 364.509552][T16127] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 364.567459][T16131] netlink: 'syz.0.2781': attribute type 1 has an invalid length. [ 364.583296][T16131] netlink: 'syz.0.2781': attribute type 2 has an invalid length. [ 364.601991][T16131] netlink: 'syz.0.2781': attribute type 1 has an invalid length. [ 364.612444][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 364.623248][T16131] netlink: 'syz.0.2781': attribute type 3 has an invalid length. [ 364.653135][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'. [ 364.730064][T16136] netlink: 'syz.2.2783': attribute type 1 has an invalid length. [ 364.966205][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 365.013761][T16139] bridge_slave_0: left allmulticast mode [ 365.021220][T16139] bridge_slave_0: left promiscuous mode [ 365.028526][T16139] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.045846][T16139] bridge_slave_1: left allmulticast mode [ 365.051870][T16139] bridge_slave_1: left promiscuous mode [ 365.067081][T16139] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.099432][T16139] `: (slave 32): Releasing backup interface [ 365.123846][T16139] `: (slave bond_slave_1): Releasing backup interface [ 365.156688][T16139] team0: Port device team_slave_0 removed [ 365.211154][T16139] team0: Port device team_slave_1 removed [ 365.227608][T16139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.235591][T16139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.245030][T16139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.252664][T16139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.264666][T16139] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 365.344733][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 365.353024][ C1] lec:lec_tx_timeout: lec0 [ 365.358477][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.779266][T16175] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2795'. [ 366.733340][T16221] ipvlan2: entered promiscuous mode [ 367.008526][T16236] netlink: 'syz.1.2810': attribute type 2 has an invalid length. [ 367.086799][T16236] 9: entered promiscuous mode [ 367.326891][T16251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.378037][T16256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.450091][T16251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.737243][T16275] syzkaller1: entered promiscuous mode [ 367.750056][T16275] syzkaller1: entered allmulticast mode [ 368.048511][T16281] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 368.062446][T16281] bond4 (unregistering): Released all slaves [ 368.528414][T16315] netlink: 'syz.1.2833': attribute type 11 has an invalid length. [ 368.754478][T16321] netlink: 'syz.4.2834': attribute type 1 has an invalid length. [ 368.808861][T16325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.837305][T16321] __nla_validate_parse: 11 callbacks suppressed [ 368.837326][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2834'. [ 368.965141][T16335] netlink: 'syz.1.2837': attribute type 4 has an invalid length. [ 368.975023][T16335] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2837'. [ 369.048833][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 369.146802][T16346] rose0: entered allmulticast mode [ 369.276083][T16342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2840'. [ 369.298288][T16342] clip:clip_setentry: non-CLIP VCC [ 369.316080][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 369.348677][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 369.380019][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 369.664316][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 370.374147][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 370.382517][ C1] lec:lec_tx_timeout: lec0 [ 370.387273][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 370.694009][T16414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2861'. [ 370.755834][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2861'. [ 370.946951][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.959612][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.972795][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.982005][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.990498][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.045875][T16427] lo speed is unknown, defaulting to 1000 [ 371.370372][T16445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2868'. [ 371.543253][ T5836] syz_tun (unregistering): left allmulticast mode [ 371.566459][ T5836] syz_tun (unregistering): left promiscuous mode [ 371.573584][ T5836] bridge0: port 1(syz_tun) entered disabled state [ 371.669552][T16456] 8021q: adding VLAN 0 to HW filter on device bond12 [ 371.786149][T16427] chnl_net:caif_netlink_parms(): no params data found [ 372.180990][T16427] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.189374][T16427] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.201806][T16427] bridge_slave_0: entered allmulticast mode [ 372.211178][T16427] bridge_slave_0: entered promiscuous mode [ 372.222898][T16427] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.241636][T16427] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.249154][T16427] bridge_slave_1: entered allmulticast mode [ 372.259029][T16427] bridge_slave_1: entered promiscuous mode [ 372.367626][T16505] validate_nla: 1 callbacks suppressed [ 372.367649][T16505] netlink: 'syz.0.2885': attribute type 1 has an invalid length. [ 372.402879][T16427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.445958][T16505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.477114][T16427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.504662][T16511] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 372.565320][T16511] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 372.622753][T16518] ip6t_srh: unknown srh invflags 4000 [ 372.636973][T16518] netlink: 'syz.0.2888': attribute type 10 has an invalid length. [ 372.681050][T16427] team0: Port device team_slave_0 added [ 372.689656][T16514] 8021q: VLANs not supported on syzkaller1 [ 372.731902][T16427] team0: Port device team_slave_1 added [ 372.733216][T16525] netlink: 'syz.0.2890': attribute type 6 has an invalid length. [ 372.749343][T16526] netlink: 'syz.0.2890': attribute type 6 has an invalid length. [ 372.857751][T16427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.874317][T16427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.902776][T16427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.953150][T16534] bond11 (unregistering): Released all slaves [ 372.986410][T16427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.993471][T16427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.022141][T16427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.027493][ T5847] Bluetooth: hci5: command tx timeout [ 373.240398][T16427] hsr_slave_0: entered promiscuous mode [ 373.280071][T16427] hsr_slave_1: entered promiscuous mode [ 373.290367][T16427] debugfs: 'hsr0' already exists in 'hsr' [ 373.296532][T16427] Cannot create hsr debugfs directory [ 373.408040][T16552] syzkaller0: entered allmulticast mode [ 373.735359][T16427] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.898436][T16427] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.027185][T16427] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.236016][T16427] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.258360][T16608] veth0: entered promiscuous mode [ 374.264803][T16608] veth0: left promiscuous mode [ 374.397577][T16619] netlink: 'syz.3.2915': attribute type 24 has an invalid length. [ 374.568228][T16427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.581921][T16630] __nla_validate_parse: 3 callbacks suppressed [ 374.581944][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 374.610866][T16427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.629165][T16427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.656383][T16636] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.657557][T16427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.686556][T16636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.693822][T16636] IPv6: NLM_F_CREATE should be set when creating new route [ 374.850298][T16652] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 374.862939][T16427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.882653][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'. [ 374.948711][T16427] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.966601][T16599] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.973861][T16599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.995337][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.002699][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.104286][ T5847] Bluetooth: hci5: command tx timeout [ 375.384802][T16660] netlink: 'syz.1.2928': attribute type 5 has an invalid length. [ 375.394224][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.402487][ C1] lec:lec_tx_timeout: lec0 [ 375.408214][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.511149][T16427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.673066][T16427] veth0_vlan: entered promiscuous mode [ 375.732316][T16427] veth1_vlan: entered promiscuous mode [ 375.750108][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2939'. [ 375.910511][T16427] veth0_macvtap: entered promiscuous mode [ 375.936421][T16427] veth1_macvtap: entered promiscuous mode [ 376.046486][T16427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.112177][T16427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.114394][T16715] netlink: 'syz.1.2943': attribute type 16 has an invalid length. [ 376.150090][T16715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2943'. [ 376.188617][T16711] netlink: 'syz.1.2943': attribute type 16 has an invalid length. [ 376.200731][T16598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.226712][T16711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2943'. [ 376.236364][T16598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.264405][T16598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.286913][T16598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.587521][T16734] netlink: 'syz.0.2950': attribute type 1 has an invalid length. [ 376.609854][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.636771][T16734] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2950'. [ 376.646332][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.716073][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 376.726867][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 376.738654][T16598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.774245][T16598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.184164][ T5847] Bluetooth: hci5: command tx timeout [ 377.447831][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.461283][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.471287][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.483485][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.493654][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.560601][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'. [ 377.570737][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 377.582146][T16782] netlink: 'syz.2.2964': attribute type 6 has an invalid length. [ 377.602993][T16594] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.603139][T16782] netlink: 'syz.2.2964': attribute type 6 has an invalid length. [ 377.648376][T16594] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.674920][T16594] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.698626][T16779] lo speed is unknown, defaulting to 1000 [ 377.704754][T16594] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.208390][T16798] syz_tun: entered allmulticast mode [ 378.281634][T16779] chnl_net:caif_netlink_parms(): no params data found [ 378.383602][T16801] dvmrp6: entered allmulticast mode [ 378.862154][T16779] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.891663][T16779] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.905232][T16838] netlink: 'syz.1.2981': attribute type 33 has an invalid length. [ 378.911995][T16779] bridge_slave_0: entered allmulticast mode [ 378.927442][T16779] bridge_slave_0: entered promiscuous mode [ 378.938271][T16779] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.948061][T16779] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.956139][T16779] bridge_slave_1: entered allmulticast mode [ 378.969688][T16779] bridge_slave_1: entered promiscuous mode [ 379.018871][T16838] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 379.129621][T16779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.195340][T16779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.268003][ T5847] Bluetooth: hci5: command tx timeout [ 379.361934][T16779] team0: Port device team_slave_0 added [ 379.386580][T16779] team0: Port device team_slave_1 added [ 379.412666][T16870] sock: sock_set_timeout: `syz.2.2992' (pid 16870) tries to set negative timeout [ 379.470174][T16779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.480703][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.509060][T16779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.543408][T16779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.561701][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.585827][ T5847] Bluetooth: hci4: command tx timeout [ 379.638740][T16779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.902955][T16779] hsr_slave_0: entered promiscuous mode [ 379.945663][T16779] hsr_slave_1: entered promiscuous mode [ 379.989104][T16779] debugfs: 'hsr0' already exists in 'hsr' [ 380.032825][T16779] Cannot create hsr debugfs directory [ 380.213251][T16912] __nla_validate_parse: 7 callbacks suppressed [ 380.213272][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3000'. [ 381.013264][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'. [ 381.119008][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3010'. [ 381.184131][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 381.192343][ C1] lec:lec_tx_timeout: lec0 [ 381.198247][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 381.287076][T16779] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 381.318958][T16779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.344952][ T5847] Bluetooth: hci5: command tx timeout [ 381.352798][T16779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 381.411438][T16779] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 381.444805][T16952] pim6reg1: entered promiscuous mode [ 381.461273][T16952] pim6reg1: entered allmulticast mode [ 381.486800][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 381.520443][T16951] Cannot find set identified by id 3 to match [ 381.583338][T16951] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3013'. [ 381.665519][ T5847] Bluetooth: hci4: command tx timeout [ 381.919939][T16779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.075649][T16779] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.076163][T16982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3020'. [ 382.102807][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.104033][T16982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.110053][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.185679][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.193059][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.359418][T16991] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 382.499255][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3025'. [ 382.701236][T16779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.261101][T16779] veth0_vlan: entered promiscuous mode [ 383.305916][T16779] veth1_vlan: entered promiscuous mode [ 383.432658][T16779] veth0_macvtap: entered promiscuous mode [ 383.463671][T16779] veth1_macvtap: entered promiscuous mode [ 383.530439][T16779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.571286][T16779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.588211][T17044] syz.2.3037: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 383.595484][T16597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.617530][T16597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.637050][T16597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.646755][T17044] CPU: 1 UID: 0 PID: 17044 Comm: syz.2.3037 Not tainted syzkaller #0 PREEMPT(full) [ 383.646787][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.646799][T17044] Call Trace: [ 383.646807][T17044] [ 383.646816][T17044] dump_stack_lvl+0x189/0x250 [ 383.646851][T17044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.646875][T17044] ? __pfx__printk+0x10/0x10 [ 383.646905][T17044] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 383.646928][T17044] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 383.646953][T17044] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 383.646978][T17044] warn_alloc+0x214/0x310 [ 383.647002][T17044] ? stack_trace_save+0x9c/0xe0 [ 383.647035][T17044] ? __pfx_warn_alloc+0x10/0x10 [ 383.647066][T17044] ? kasan_save_track+0x4f/0x80 [ 383.647085][T17044] ? kasan_save_track+0x3e/0x80 [ 383.647102][T17044] ? __kasan_kmalloc+0x93/0xb0 [ 383.647122][T17044] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 383.647139][T17044] ? xskq_create+0x56/0x170 [ 383.647166][T17044] ? xsk_setsockopt+0x4dc/0x8d0 [ 383.647190][T17044] ? do_sock_setsockopt+0x17c/0x1b0 [ 383.647211][T17044] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 383.647229][T17044] ? do_syscall_64+0xfa/0xf80 [ 383.647253][T17044] __vmalloc_node_range_noprof+0x134/0x16a0 [ 383.647318][T17044] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 383.647346][T17044] ? __kasan_kmalloc+0x93/0xb0 [ 383.647376][T17044] vmalloc_user_noprof+0xad/0xf0 [ 383.647396][T17044] ? xskq_create+0xbf/0x170 [ 383.647424][T17044] xskq_create+0xbf/0x170 [ 383.647463][T17044] xsk_init_queue+0xb0/0x110 [ 383.647493][T17044] xsk_setsockopt+0x4dc/0x8d0 [ 383.647521][T17044] ? __pfx_xsk_setsockopt+0x10/0x10 [ 383.647552][T17044] ? __pfx_aa_sk_perm+0x10/0x10 [ 383.647577][T17044] ? aa_sock_opt_perm+0xff/0x1a0 [ 383.647605][T17044] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 383.647624][T17044] ? __pfx_xsk_setsockopt+0x10/0x10 [ 383.647652][T17044] do_sock_setsockopt+0x17c/0x1b0 [ 383.647681][T17044] __x64_sys_setsockopt+0x13f/0x1b0 [ 383.647711][T17044] do_syscall_64+0xfa/0xf80 [ 383.647732][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.647752][T17044] ? clear_bhb_loop+0x60/0xb0 [ 383.647779][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.647797][T17044] RIP: 0033:0x7fd42658f749 [ 383.647818][T17044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.647835][T17044] RSP: 002b:00007fd4273d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.647858][T17044] RAX: ffffffffffffffda RBX: 00007fd4267e5fa0 RCX: 00007fd42658f749 [ 383.647873][T17044] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 383.647886][T17044] RBP: 00007fd426613f91 R08: 0000000000000004 R09: 0000000000000000 [ 383.647899][T17044] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.647911][T17044] R13: 00007fd4267e6038 R14: 00007fd4267e5fa0 R15: 00007fffd9e46a18 [ 383.647948][T17044] [ 383.648728][T17044] Mem-Info: [ 383.657142][T16597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.698263][T17044] active_anon:4823 inactive_anon:12 isolated_anon:0 [ 383.698263][T17044] active_file:2377 inactive_file:40418 isolated_file:0 [ 383.698263][T17044] unevictable:768 dirty:42 writeback:0 [ 383.698263][T17044] slab_reclaimable:12639 slab_unreclaimable:197449 [ 383.698263][T17044] mapped:29128 shmem:1378 pagetables:1309 [ 383.698263][T17044] sec_pagetables:0 bounce:0 [ 383.698263][T17044] kernel_misc_reclaimable:0 [ 383.698263][T17044] free:1227794 free_pcp:13518 free_cma:0 [ 383.758736][ T5847] Bluetooth: hci4: command tx timeout [ 383.765076][T17044] Node 0 active_anon:19292kB inactive_anon:48kB active_file:9508kB inactive_file:161472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116512kB dirty:168kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14540kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 384.061674][T17044] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 384.097647][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3036'. [ 384.118151][T17044] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.225350][T17052] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3039'. [ 384.245097][T17044] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 384.251025][T17044] Node 0 DMA32 free:1004788kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19184kB inactive_anon:48kB active_file:9508kB inactive_file:161472kB unevictable:1536kB writepending:168kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:34988kB local_pcp:20968kB free_cma:0kB [ 384.291245][T17052] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3039'. [ 384.313078][T17044] lowmem_reserve[]: 0 0 1 1 1 [ 384.320514][T17044] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.358127][T17044] lowmem_reserve[]: 0 0 0 0 0 [ 384.363116][T17044] Node 1 Normal free:3889044kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20020kB local_pcp:10144kB free_cma:0kB [ 384.474894][T17044] lowmem_reserve[]: 0 0 0 0 0 [ 384.479722][T17044] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 384.499919][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.519722][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.534668][T17044] Node 0 DMA32: 7193*4kB (UME) 4392*8kB (UME) 2235*16kB (UM) 910*32kB (UM) 726*64kB (UM) 482*128kB (UM) 386*256kB (UM) 283*512kB (UM) 113*1024kB (UM) 15*2048kB (UM) 92*4096kB (UM) = 1003924kB [ 384.606382][T17044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 384.620443][T16599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.630433][T17044] Node 1 Normal: 213*4kB (UME) 46*8kB (UME) 43*16kB (UME) 59*32kB (UME) 19*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3889044kB [ 384.644101][T16599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.652245][T17044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 384.678740][T17065] syzkaller1: entered promiscuous mode [ 384.684523][T17065] syzkaller1: entered allmulticast mode [ 384.694942][T17044] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 384.697173][T17067] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 384.748947][T17044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 384.804242][T17044] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 384.813675][T17044] 44170 total pagecache pages [ 384.840820][T17044] 0 pages in swap cache [ 384.850072][T17044] Free swap = 124996kB [ 384.863051][T17044] Total swap = 124996kB [ 384.883823][T17044] 2097051 pages RAM [ 384.888055][T17044] 0 pages HighMem/MovableOnly [ 384.892868][T17044] 425122 pages reserved [ 384.897322][T17044] 0 pages cma reserved [ 384.913649][T17074] bond11 (unregistering): Released all slaves [ 385.477194][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.489966][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.511151][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.525833][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.540683][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.669940][T17100] lo speed is unknown, defaulting to 1000 [ 385.824315][ T5847] Bluetooth: hci4: command tx timeout [ 385.956002][T17115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.042754][T17112] syzkaller0: entered promiscuous mode [ 386.052115][T17112] syzkaller0: entered allmulticast mode [ 386.102953][T17112] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.224502][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 386.232875][ C1] lec:lec_tx_timeout: lec0 [ 386.238698][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.248866][T17130] __nla_validate_parse: 1 callbacks suppressed [ 386.248931][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'. [ 386.286909][ T7627] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.323544][ T7627] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.351854][T17112] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.371875][T17135] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3061'. [ 386.606604][ T7627] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.644368][ T7627] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.691003][T17138] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3063'. [ 386.807862][ T7627] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.842677][ T7627] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.896508][T17165] xt_hashlimit: size too large, truncated to 1048576 [ 386.900801][T17100] chnl_net:caif_netlink_parms(): no params data found [ 387.026040][T17171] netlink: 'syz.2.3071': attribute type 2 has an invalid length. [ 387.137937][ T7627] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.163078][ T7627] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.356492][T17184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3073'. [ 387.411997][T17167] veth11: entered promiscuous mode [ 387.417412][T17167] veth11: entered allmulticast mode [ 387.538325][T17188] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 387.557174][T17188] bond1 (unregistering): Released all slaves [ 387.563646][T17192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3076'. [ 387.584847][ T5847] Bluetooth: hci3: command tx timeout [ 387.613327][T17193] netlink: 'syz.1.3077': attribute type 2 has an invalid length. [ 387.694680][T17193] nbd0: detected capacity change from 0 to 127 [ 387.746762][ T5847] block nbd0: Receive control failed (result -104) [ 389.664603][ T5847] Bluetooth: hci3: command tx timeout [ 390.386251][T17100] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.425153][T17100] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.432575][T17100] bridge_slave_0: entered allmulticast mode [ 390.462615][T17100] bridge_slave_0: entered promiscuous mode [ 390.488794][T17226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.521764][T17229] x_tables: duplicate underflow at hook 1 [ 390.531983][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 390.542910][T17100] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.556101][T17231] x_tables: duplicate underflow at hook 1 [ 390.564733][T17100] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.572194][T17100] bridge_slave_1: entered allmulticast mode [ 390.611025][T17100] bridge_slave_1: entered promiscuous mode [ 390.700287][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 390.725684][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 390.768293][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'. [ 390.768897][T17241] SET target dimension over the limit! [ 390.782798][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'. [ 390.787303][T17241] x_tables: duplicate underflow at hook 2 [ 390.853651][T17100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.898724][T17100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.076514][T17100] team0: Port device team_slave_0 added [ 391.090570][ T7627] team0: left allmulticast mode [ 391.101441][ T7627] team_slave_0: left allmulticast mode [ 391.125679][ T7627] team_slave_1: left allmulticast mode [ 391.138555][ T7627] team0: left promiscuous mode [ 391.151232][ T7627] team_slave_0: left promiscuous mode [ 391.158417][ T7627] team_slave_1: left promiscuous mode [ 391.166246][ T7627] bridge0: port 3(team0) entered disabled state [ 391.179191][ T7627] bridge_slave_1: left allmulticast mode [ 391.186622][ T7627] bridge_slave_1: left promiscuous mode [ 391.192489][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.211106][ T7627] bridge_slave_0: left allmulticast mode [ 391.218599][ T7627] bridge_slave_0: left promiscuous mode [ 391.228944][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.254417][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 391.262659][ C1] lec:lec_tx_timeout: lec0 [ 391.267600][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.581854][ T7627] dvmrp0 (unregistering): left allmulticast mode [ 391.614623][ T7627] bond0 (unregistering): (slave geneve4): Releasing active interface [ 391.653912][ T7627] bond1 (unregistering): (slave geneve2): Releasing active interface [ 391.744268][ T5847] Bluetooth: hci3: command tx timeout [ 391.847501][T17254] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 391.857351][T17254] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 392.481191][ T7627] bond1 (unregistering): Released all slaves [ 392.605100][ T7627] bond2 (unregistering): Released all slaves [ 392.729304][ T7627] bond3 (unregistering): Released all slaves [ 392.908481][ T7627] bond0 (unregistering): Released all slaves [ 392.932027][T17100] team0: Port device team_slave_1 added [ 393.112615][T17287] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 393.124562][T17289] netlink: 'syz.3.3105': attribute type 1 has an invalid length. [ 393.132469][T17289] netlink: 'syz.3.3105': attribute type 4 has an invalid length. [ 393.176814][T17289] __nla_validate_parse: 2 callbacks suppressed [ 393.176836][T17289] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.3105'. [ 393.209472][ T7627] tipc: Disabling bearer [ 393.226051][ T7627] tipc: Left network mode [ 393.226921][T17100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.259577][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.309886][T17296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3107'. [ 393.320568][T17100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.433417][T17100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.464276][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.527706][T17100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.641942][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'. [ 393.825481][ T5847] Bluetooth: hci3: command tx timeout [ 393.871004][T17320] netlink: 'syz.1.3112': attribute type 2 has an invalid length. [ 393.939080][T17320] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3112'. [ 394.091639][T17100] hsr_slave_0: entered promiscuous mode [ 394.115776][T17100] hsr_slave_1: entered promiscuous mode [ 394.122876][T17100] debugfs: 'hsr0' already exists in 'hsr' [ 394.130156][T17100] Cannot create hsr debugfs directory [ 394.141942][T17335] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 394.173366][T17335] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 394.182942][T17335] gretap3: entered promiscuous mode [ 394.188679][T17335] gretap3: entered allmulticast mode [ 394.397807][T17348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.826965][T17365] netlink: zone id is out of range [ 394.843588][T17365] netlink: zone id is out of range [ 394.863854][T17365] netlink: zone id is out of range [ 394.872677][T17365] netlink: zone id is out of range [ 394.889838][T17369] netlink: zone id is out of range [ 394.909922][T17365] netlink: zone id is out of range [ 394.922037][T17365] netlink: del zone limit has 4 unknown bytes [ 394.938394][T17369] netlink: zone id is out of range [ 395.204478][T17377] netlink: 'syz.4.3126': attribute type 6 has an invalid length. [ 395.229532][ T7627] hsr_slave_0: left promiscuous mode [ 395.255576][ T7627] hsr_slave_1: left promiscuous mode [ 395.385473][T17387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3130'. [ 395.395978][ T7627] pim6reg527 (unregistering): left allmulticast mode [ 395.834022][ T7627] team0 (unregistering): Port device team_slave_1 removed [ 395.882852][ T7627] team0 (unregistering): Port device team_slave_0 removed [ 396.274626][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 396.283089][ C1] lec:lec_tx_timeout: lec0 [ 396.288023][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 396.512858][T16600] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.548725][T16600] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.571671][T17402] netlink: 'syz.3.3131': attribute type 10 has an invalid length. [ 396.592594][T17402] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 396.605568][T17402] net_ratelimit: 4 callbacks suppressed [ 396.605590][T17402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.858641][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3139'. [ 397.073973][T17420] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3143'. [ 397.234320][T17425] pim6reg1: entered promiscuous mode [ 397.239728][T17425] pim6reg1: entered allmulticast mode [ 397.342603][T17430] netlink: 'syz.2.3145': attribute type 1 has an invalid length. [ 397.397019][T17430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.427841][T17434] bond1: (slave geneve2): making interface the new active one [ 397.443418][T17434] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 397.469749][ T7627] IPVS: stop unused estimator thread 0... [ 397.671215][T17441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3149'. [ 397.703511][T17100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.719044][T17100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 397.749659][T17100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 397.767934][T17100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 397.792614][T17447] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3151'. [ 397.792614][T17448] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3151'. [ 397.940676][T17461] xt_hashlimit: size too large, truncated to 1048576 [ 398.179081][T17100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.265799][T17100] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.292534][T17477] netlink: zone id is out of range [ 398.298575][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.298747][ T7627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.333719][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.334236][T17477] netlink: zone id is out of range [ 398.341347][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.365908][T17477] netlink: zone id is out of range [ 398.376467][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3156'. [ 398.413987][T17477] netlink: zone id is out of range [ 398.450937][T17477] netlink: zone id is out of range [ 398.476977][T17477] netlink: zone id is out of range [ 398.496794][T17477] netlink: zone id is out of range [ 398.515098][T17479] hsr_slave_0: left promiscuous mode [ 398.538019][T17477] netlink: zone id is out of range [ 398.543284][T17477] netlink: zone id is out of range [ 398.565170][T17479] hsr_slave_1: left promiscuous mode [ 398.707434][T17496] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3162'. [ 398.758226][T17496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3162'. [ 398.983305][T17508] xt_hashlimit: overflow, rate too high: 0 [ 399.038610][T17512] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 399.111682][T17100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.277041][T17100] veth0_vlan: entered promiscuous mode [ 399.323599][T17100] veth1_vlan: entered promiscuous mode [ 399.426649][T17100] veth0_macvtap: entered promiscuous mode [ 399.467440][T17100] veth1_macvtap: entered promiscuous mode [ 399.495656][T17537] wlan0 speed is unknown, defaulting to 1000 [ 399.503839][T17538] tipc: Started in network mode [ 399.509180][T17538] tipc: Node identity 9, cluster identity 4711 [ 399.516092][T17538] tipc: Node number set to 9 [ 399.535568][T17537] wlan0 speed is unknown, defaulting to 1000 [ 399.551427][T17100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.567749][T17537] wlan0 speed is unknown, defaulting to 1000 [ 399.575503][T17100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.600347][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.611271][T17537] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 399.617917][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.656775][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.679615][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.811623][T17537] wlan0 speed is unknown, defaulting to 1000 [ 399.852643][T17537] wlan0 speed is unknown, defaulting to 1000 [ 399.892855][T17537] wlan0 speed is unknown, defaulting to 1000 [ 399.917501][ T6047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.932798][ T6047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.953463][T17537] wlan0 speed is unknown, defaulting to 1000 [ 399.983378][T17557] netlink: 'syz.4.3180': attribute type 1 has an invalid length. [ 400.007353][T17537] wlan0 speed is unknown, defaulting to 1000 [ 400.035789][T17537] wlan0 speed is unknown, defaulting to 1000 [ 400.044411][T17556] netlink: 'syz.4.3180': attribute type 3 has an invalid length. [ 400.069111][T17556] netlink: 'syz.4.3180': attribute type 1 has an invalid length. [ 400.087077][T16598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.107955][T16598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.111934][T17556] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3180'. [ 400.136054][T17537] wlan0 speed is unknown, defaulting to 1000 [ 400.355639][T17578] Bluetooth: MGMT ver 1.23 [ 400.805570][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'. [ 400.816643][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 400.828054][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 400.838581][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 400.847584][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 400.858668][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 400.980836][T17589] lo speed is unknown, defaulting to 1000 [ 401.019513][T17598] netlink: 211588 bytes leftover after parsing attributes in process `syz.0.3190'. [ 401.039219][T17589] wlan0 speed is unknown, defaulting to 1000 [ 401.203303][T17602] Bluetooth: MGMT ver 1.23 [ 401.230208][T17602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3193'. [ 401.249655][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 401.304806][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 401.312971][ C1] lec:lec_tx_timeout: lec0 [ 401.317575][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.362806][T17609] x_tables: duplicate entry at hook 1 [ 401.662341][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.677639][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.689449][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'. [ 401.775173][T17634] netlink: 'syz.4.3196': attribute type 6 has an invalid length. [ 401.842414][T17614] netlink: 'syz.4.3196': attribute type 6 has an invalid length. [ 402.026185][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.038379][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.090226][T17589] chnl_net:caif_netlink_parms(): no params data found [ 402.216984][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.231080][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.439915][T17652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3206'. [ 402.462244][T17647] net_ratelimit: 52 callbacks suppressed [ 402.462266][T17647] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 402.484550][T17654] xt_CONNSECMARK: invalid mode: 0 [ 402.718314][T17669] sctp: [Deprecated]: syz.0.3210 (pid 17669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.718314][T17669] Use struct sctp_sack_info instead [ 402.946722][ T5847] Bluetooth: hci0: command tx timeout [ 404.744885][T17680] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 404.754400][T17680] __nla_validate_parse: 2 callbacks suppressed [ 404.754421][T17680] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3212'. [ 404.762573][T17682] pim6reg1: entered promiscuous mode [ 404.770888][T17680] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3212'. [ 404.778135][T17682] pim6reg1: entered allmulticast mode [ 404.786031][T17680] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3212'. [ 404.961821][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3219'. [ 405.024613][ T5847] Bluetooth: hci0: command tx timeout [ 405.052793][T17589] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.062187][T17589] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.084348][T17589] bridge_slave_0: entered allmulticast mode [ 405.092673][T17589] bridge_slave_0: entered promiscuous mode [ 405.115526][T17700] veth1_to_bridge: entered promiscuous mode [ 405.130155][T17589] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.133099][T17700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3220'. [ 405.144250][T17589] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.158386][T17589] bridge_slave_1: entered allmulticast mode [ 405.166842][T17700] netlink: 'syz.1.3220': attribute type 7 has an invalid length. [ 405.170454][T17705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3221'. [ 405.176369][T17700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3220'. [ 405.197805][T17589] bridge_slave_1: entered promiscuous mode [ 405.226393][T17705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3221'. [ 405.348579][T17589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.415731][T17589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.482642][ T50] tipc: Resetting bearer [ 405.499099][T17718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3226'. [ 405.745684][ T50] tipc: Disabling bearer [ 405.813045][ T50] bond2 (unregistering): (slave gretap1): Releasing active interface [ 405.844567][ T50] bond9 (unregistering): (slave gretap2): Releasing active interface [ 406.001159][ T50] dvmrp0 (unregistering): left allmulticast mode [ 406.168147][ T50] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 406.177082][ T50] bridge1 (unregistering): left promiscuous mode [ 406.227842][ T50] bond2 (unregistering): (slave bridge2): Releasing active interface [ 406.324148][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.332251][ C1] lec:lec_tx_timeout: lec0 [ 406.336923][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.589598][ T50] ` (unregistering): Released all slaves [ 406.722681][ T50] bond1 (unregistering): Released all slaves [ 406.738106][ T50] bond2 (unregistering): Released all slaves [ 406.865848][ T50] bond3 (unregistering): left allmulticast mode [ 406.872127][ T50] bond3 (unregistering): left promiscuous mode [ 406.889303][ T50] team0: Port device macvlan2 removed [ 406.901068][ T50] bond3 (unregistering): Released all slaves [ 406.985979][T17733] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3232'. [ 407.072120][ T50] bond4 (unregistering): Released all slaves [ 407.092807][ T50] bond5 (unregistering): Released all slaves [ 407.108414][ T5847] Bluetooth: hci0: command tx timeout [ 407.245891][ T50] bond6 (unregistering): Released all slaves [ 407.261460][ T50] bond7 (unregistering): (slave bond8): Releasing backup interface [ 407.272252][ T50] bond7 (unregistering): Released all slaves [ 407.407016][ T50] bond8 (unregistering): Released all slaves [ 407.421566][ T50] bond9 (unregistering): Released all slaves [ 407.436416][ T50] bond0 (unregistering): Released all slaves [ 407.451085][ T50] bond10 (unregistering): Released all slaves [ 407.487403][T17719] ip_vti0: entered promiscuous mode [ 407.536060][T17589] team0: Port device team_slave_0 added [ 407.561026][T17589] team0: Port device team_slave_1 added [ 407.723452][T17747] netlink: 'syz.2.3237': attribute type 1 has an invalid length. [ 407.821353][ T50] : left promiscuous mode [ 407.996435][T17755] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 408.016302][T17753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.090041][T17589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.114778][T17589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.176407][T17589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.194689][ T50] tipc: Disabling bearer [ 408.205400][ T50] tipc: Left network mode [ 408.220885][T17589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.230426][T17589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.291075][T17589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.551417][T17589] hsr_slave_0: entered promiscuous mode [ 408.585692][T17589] hsr_slave_1: entered promiscuous mode [ 409.187617][ T5847] Bluetooth: hci0: command tx timeout [ 410.659846][T17823] netlink: 'syz.0.3267': attribute type 1 has an invalid length. [ 410.889240][T17836] __nla_validate_parse: 5 callbacks suppressed [ 410.889261][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3271'. [ 411.021143][T17839] lo speed is unknown, defaulting to 1000 [ 411.093081][T17843] netlink: 'syz.2.3273': attribute type 13 has an invalid length. [ 411.152273][T17843] veth0_macvtap: left promiscuous mode [ 411.169782][T17843] macvtap0: entered allmulticast mode [ 411.190743][T17843] macvtap0: refused to change device tx_queue_len [ 411.203705][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3273'. [ 411.318371][T17854] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3276'. [ 411.344736][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 411.352998][ C1] lec:lec_tx_timeout: lec0 [ 411.358101][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.400410][ T50] IPVS: stop unused estimator thread 0... [ 411.557257][T17862] syzkaller0: entered promiscuous mode [ 411.577473][T17862] syzkaller0: entered allmulticast mode [ 411.625180][T17866] nbd: must specify at least one socket [ 411.658156][T17869] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 411.673192][T17869] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3282'. [ 411.785640][T17876] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 411.816569][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 411.903716][T17874] bridge2: entered promiscuous mode [ 411.909757][T17874] bridge2: entered allmulticast mode [ 411.945298][T17589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 411.976836][T17589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.006120][T17589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 412.049721][T17589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 412.081400][T17881] lo speed is unknown, defaulting to 1000 [ 412.125182][T17891] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 412.396070][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3293'. [ 412.440421][T17908] netlink: 'syz.0.3294': attribute type 4 has an invalid length. [ 412.466537][T17589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.519624][T17910] netlink: 'syz.0.3294': attribute type 4 has an invalid length. [ 412.629374][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3296'. [ 412.704729][T17589] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.756552][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.763908][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.846889][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.851561][T17928] netlink: 'syz.0.3300': attribute type 39 has an invalid length. [ 412.854162][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.902353][T17929] ipt_rpfilter: unknown options [ 413.212556][T17940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3304'. [ 413.288362][T17949] netlink: 'syz.2.3307': attribute type 1 has an invalid length. [ 413.789621][T17589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.916350][T17589] veth0_vlan: entered promiscuous mode [ 413.956975][T17589] veth1_vlan: entered promiscuous mode [ 414.081827][T17975] Cannot find add_set index 2 as target [ 414.276770][T17589] veth0_macvtap: entered promiscuous mode [ 414.336644][T17589] veth1_macvtap: entered promiscuous mode [ 414.386918][T17589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.420752][T17589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.468435][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.487382][ T151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.541669][ T151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.581907][ T151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.616869][T17991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3318'. [ 414.719012][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3318'. [ 414.817234][T17991] macvtap1: entered promiscuous mode [ 414.822723][T17991] vlan0: entered promiscuous mode [ 414.829734][T17991] macvtap1: entered allmulticast mode [ 414.836128][T17991] vlan0: entered allmulticast mode [ 414.841289][T17991] veth0_vlan: entered allmulticast mode [ 414.868700][ T6047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.893937][ T6047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.906437][T18003] Cannot find map_set index 0 as target [ 415.006268][T16597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.034540][T16597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.265615][T18027] delete_channel: no stack [ 415.397478][T18030] erspan0: entered allmulticast mode [ 415.532427][ T5903] IPVS: starting estimator thread 0... [ 415.635672][T18045] openvswitch: netlink: Unknown key attributes 2 [ 415.644443][T18039] IPVS: using max 23 ests per chain, 55200 per kthread [ 415.747189][T18048] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 415.765988][T18048] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 415.777525][T18048] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 415.821831][T18048] syz.0.3335 (18048) used greatest stack depth: 17688 bytes left [ 415.903086][T18009] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 415.953855][T18059] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3339'. [ 416.037871][T18027] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.070479][T18027] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 416.223044][T18027] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 416.250927][T18027] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 416.374158][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 416.382635][ C1] lec:lec_tx_timeout: lec0 [ 416.388034][T18027] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 416.388128][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 416.403205][T18076] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3345'. [ 416.407068][T18027] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 416.530980][T18086] bridge1: entered promiscuous mode [ 416.539177][T18086] bridge1: entered allmulticast mode [ 416.612407][T18087] syzkaller0: entered promiscuous mode [ 416.613778][T18027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.630251][T18027] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 416.638343][T18087] syzkaller0: entered allmulticast mode [ 416.663727][T18097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3351'. [ 416.676082][T18097] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3351'. [ 416.687742][T18097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3351'. [ 416.742854][T18027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 416.751586][T18027] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 416.778067][T18099] netlink: 'syz.0.3352': attribute type 3 has an invalid length. [ 416.881076][T18101] netlink: 'syz.3.3354': attribute type 1 has an invalid length. [ 416.892421][T18104] openvswitch: netlink: Key 11 has unexpected len 15 expected 2 [ 417.988794][ T11] block nbd0: Possible stuck request ffff888025820000: control (read@0,1024B). Runtime 30 seconds [ 418.001283][ T11] block nbd0: Possible stuck request ffff888025820200: control (read@1024,1024B). Runtime 30 seconds [ 418.012690][ T11] block nbd0: Possible stuck request ffff888025820400: control (read@2048,1024B). Runtime 30 seconds [ 418.023668][ T11] block nbd0: Possible stuck request ffff888025820600: control (read@3072,1024B). Runtime 30 seconds [ 418.228867][T18145] No such timeout policy "syz0" [ 418.917263][T18181] dvmrp0: entered allmulticast mode [ 419.029257][T18190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3389'. [ 419.228956][T18199] x_tables: duplicate underflow at hook 2 [ 419.398469][T18207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 419.411196][T18207] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3395'. [ 419.940224][T18233] sctp: [Deprecated]: syz.3.3404 (pid 18233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.940224][T18233] Use struct sctp_sack_info instead [ 419.957301][T18233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3404'. [ 420.125848][T18245] tipc: Started in network mode [ 420.130804][T18245] tipc: Node identity ac1414aa, cluster identity 4711 [ 420.139131][T18245] tipc: Enabled bearer , priority 10 [ 420.253096][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3411'. [ 420.378751][T18260] netlink: 'syz.3.3413': attribute type 9 has an invalid length. [ 420.432024][T18261] block nbd1: Unsupported socket: should be TCP or UNIX. [ 421.254225][ T5995] tipc: Node number set to 2886997162 [ 421.404141][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 421.412182][ C1] lec:lec_tx_timeout: lec0 [ 421.416815][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 421.739685][T18280] netlink: 'syz.3.3419': attribute type 24 has an invalid length. [ 422.787036][T18291] syzkaller0: entered promiscuous mode [ 422.792549][T18291] syzkaller0: entered allmulticast mode [ 422.955618][T18295] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.965037][T18295] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.033432][T18297] __nla_validate_parse: 3 callbacks suppressed [ 423.033448][T18297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3425'. [ 427.584133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6170 ms [ 427.592270][ C1] lec:lec_tx_timeout: lec0 [ 427.599293][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 433.344116][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 433.352189][ C1] lec:lec_tx_timeout: lec0 [ 433.359693][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 438.374205][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 438.382523][ C1] lec:lec_tx_timeout: lec0 [ 438.387664][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 443.394283][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 443.402318][ C1] lec:lec_tx_timeout: lec0 [ 443.407357][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 448.066232][ T11] block nbd0: Possible stuck request ffff888025820000: control (read@0,1024B). Runtime 60 seconds [ 448.077195][ T11] block nbd0: Possible stuck request ffff888025820200: control (read@1024,1024B). Runtime 60 seconds [ 448.090214][ T11] block nbd0: Possible stuck request ffff888025820400: control (read@2048,1024B). Runtime 60 seconds [ 448.101376][ T11] block nbd0: Possible stuck request ffff888025820600: control (read@3072,1024B). Runtime 60 seconds [ 448.422382][ T5199] udevd[5199]: worker [16731] /devices/virtual/block/nbd0 is taking a long time [ 449.184132][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 449.192176][ C1] lec:lec_tx_timeout: lec0 [ 449.197147][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 454.224457][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 454.232506][ C1] lec:lec_tx_timeout: lec0 [ 454.237161][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 459.244152][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 459.252350][ C1] lec:lec_tx_timeout: lec0 [ 459.257364][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 464.264119][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 464.272173][ C1] lec:lec_tx_timeout: lec0 [ 464.277282][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 469.284108][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 469.292273][ C1] lec:lec_tx_timeout: lec0 [ 469.296874][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 474.304863][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 474.312894][ C1] lec:lec_tx_timeout: lec0 [ 474.317541][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 478.146537][ T11] block nbd0: Possible stuck request ffff888025820000: control (read@0,1024B). Runtime 90 seconds [ 478.157680][ T11] block nbd0: Possible stuck request ffff888025820200: control (read@1024,1024B). Runtime 90 seconds [ 478.168739][ T11] block nbd0: Possible stuck request ffff888025820400: control (read@2048,1024B). Runtime 90 seconds [ 478.179976][ T11] block nbd0: Possible stuck request ffff888025820600: control (read@3072,1024B). Runtime 90 seconds [ 479.324143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 479.332206][ C1] lec:lec_tx_timeout: lec0 [ 501.830927][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 507.184315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 507.192375][ C1] lec:lec_tx_timeout: lec0 [ 508.224878][ T11] block nbd0: Possible stuck request ffff888025820000: control (read@0,1024B). Runtime 120 seconds [ 508.236016][ T11] block nbd0: Possible stuck request ffff888025820200: control (read@1024,1024B). Runtime 120 seconds [ 508.247300][ T11] block nbd0: Possible stuck request ffff888025820400: control (read@2048,1024B). Runtime 120 seconds [ 508.259313][ T11] block nbd0: Possible stuck request ffff888025820600: control (read@3072,1024B). Runtime 120 seconds [ 538.307270][ T11] block nbd0: Possible stuck request ffff888025820000: control (read@0,1024B). Runtime 150 seconds [ 538.318316][ T11] block nbd0: Possible stuck request ffff888025820200: control (read@1024,1024B). Runtime 150 seconds [ 538.329896][ T11] block nbd0: Possible stuck request ffff888025820400: control (read@2048,1024B). Runtime 150 seconds [ 538.341827][ T11] block nbd0: Possible stuck request ffff888025820600: control (read@3072,1024B). Runtime 150 seconds [ 563.271184][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 568.284090][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.292220][ C1] lec:lec_tx_timeout: lec0 [ 568.385172][ T11] block nbd0: Possible stuck request ffff888025820000: control (read@0,1024B). Runtime 180 seconds [ 568.396277][ T11] block nbd0: Possible stuck request ffff888025820200: control (read@1024,1024B). Runtime 180 seconds [ 568.407339][ T11] block nbd0: Possible stuck request ffff888025820400: control (read@2048,1024B). Runtime 180 seconds [ 568.418694][ T11] block nbd0: Possible stuck request ffff888025820600: control (read@3072,1024B). Runtime 180 seconds [ 568.645237][ T5199] udevd[5199]: worker [16731] /devices/virtual/block/nbd0 timeout; kill it [ 568.653947][ T5199] udevd[5199]: seq 20940 '/devices/virtual/block/nbd0' killed [ 574.148550][ T31] INFO: task syz-executor:5828 blocked for more than 143 seconds. [ 574.156695][ T31] Not tainted syzkaller #0 [ 574.161655][ T31] Blocked by coredump. [ 574.166507][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.175882][ T31] task:syz-executor state:D stack:21432 pid:5828 tgid:5828 ppid:1 task_flags:0x40054c flags:0x00080003 [ 574.188089][ T31] Call Trace: [ 574.191404][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 574.194620][ T31] __schedule+0x14bc/0x5000 [ 574.199285][ T31] ? __pfx___schedule+0x10/0x10 [ 574.205095][ T31] ? schedule+0x91/0x360 [ 574.209933][ T31] schedule+0x165/0x360 [ 574.214544][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.220132][ T31] __mutex_lock+0x7e6/0x1350 [ 574.264348][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.269203][ T31] ? rfkill_unregister+0xc8/0x220 [ 574.280892][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.286551][ T31] ? __pfx_device_del+0x10/0x10 [ 574.291438][ T31] ? hci_sock_dev_event+0x42d/0x630 [ 574.297238][ T31] ? __cancel_work_sync+0x5c/0x110 [ 574.302435][ T31] rfkill_unregister+0xc8/0x220 [ 574.308380][ T31] hci_unregister_dev+0x374/0x5b0 [ 574.313462][ T31] vhci_release+0x152/0x1a0 [ 574.319850][ T31] ? __pfx_vhci_release+0x10/0x10 [ 574.325230][ T31] __fput+0x44c/0xa70 [ 574.329293][ T31] task_work_run+0x1d4/0x260 [ 574.335005][ T31] ? __pfx_task_work_run+0x10/0x10 [ 574.340167][ T31] ? kmem_cache_free+0x197/0x620 [ 574.345241][ T31] ? do_exit+0x6c0/0x2310 [ 574.349707][ T31] do_exit+0x6c5/0x2310 [ 574.354559][ T31] ? do_raw_spin_lock+0x121/0x290 [ 574.359707][ T31] ? __pfx_do_exit+0x10/0x10 [ 574.364752][ T31] ? cgroup1_freezing+0x20/0x350 [ 574.369732][ T31] do_group_exit+0x21c/0x2d0 [ 574.374529][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 574.379974][ T31] get_signal+0x1285/0x1340 [ 574.385187][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 574.390929][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 574.398115][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 574.403673][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 574.409005][ T31] ? rcu_is_watching+0x15/0xb0 [ 574.413805][ T31] do_syscall_64+0x2d0/0xf80 [ 574.418799][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.425222][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.429921][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.435969][ T31] RIP: 0033:0x7f85fd585897 [ 574.440422][ T31] RSP: 002b:00007fff7b44d560 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 574.449540][ T31] RAX: fffffffffffffe00 RBX: 000000000000080b RCX: 00007f85fd585897 [ 574.457797][ T31] RDX: 0000000040000000 RSI: 00007fff7b44d5cc RDI: 00000000ffffffff [ 574.466496][ T31] RBP: 00007fff7b44d5cc R08: 0000000000000000 R09: 0000000000000000 [ 574.474942][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000002a3 [ 574.483016][ T31] R13: 000055556a53b590 R14: 00000000000655d1 R15: 00007fff7b44d620 [ 574.491271][ T31] [ 574.494411][ T31] INFO: task kworker/1:7:5951 blocked for more than 143 seconds. [ 574.502279][ T31] Not tainted syzkaller #0 [ 574.507509][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.516789][ T31] task:kworker/1:7 state:D stack:23640 pid:5951 tgid:5951 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 574.529174][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 574.536257][ T31] Call Trace: [ 574.539821][ T31] [ 574.542787][ T31] __schedule+0x14bc/0x5000 [ 574.547762][ T31] ? __pfx___schedule+0x10/0x10 [ 574.552910][ T31] ? schedule+0x91/0x360 [ 574.557220][ T31] schedule+0x165/0x360 [ 574.561396][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.567106][ T31] __mutex_lock+0x7e6/0x1350 [ 574.572258][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.577561][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 574.583905][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.588980][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 574.594881][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 574.600606][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 574.607134][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 574.612876][ T31] process_scheduled_works+0xad1/0x1770 [ 574.618516][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.624975][ T31] worker_thread+0x8a0/0xda0 [ 574.629904][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.636506][ T31] ? __kthread_parkme+0x7b/0x200 [ 574.641475][ T31] kthread+0x711/0x8a0 [ 574.645605][ T31] ? __pfx_worker_thread+0x10/0x10 [ 574.650822][ T31] ? __pfx_kthread+0x10/0x10 [ 574.656375][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.661626][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 574.667198][ T31] ? __pfx_kthread+0x10/0x10 [ 574.671833][ T31] ret_from_fork+0x599/0xb30 [ 574.676493][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.681651][ T31] ? __switch_to_asm+0x39/0x70 [ 574.686713][ T31] ? __switch_to_asm+0x33/0x70 [ 574.691519][ T31] ? __pfx_kthread+0x10/0x10 [ 574.696511][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.701332][ T31] [ 574.704582][ T31] INFO: task syz.1.3327:18016 blocked for more than 143 seconds. [ 574.712325][ T31] Not tainted syzkaller #0 [ 574.717642][ T31] Blocked by coredump. [ 574.722248][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.731153][ T31] task:syz.1.3327 state:D stack:25800 pid:18016 tgid:18014 ppid:5828 task_flags:0x40054c flags:0x00080001 [ 574.743212][ T31] Call Trace: [ 574.746774][ T31] [ 574.749798][ T31] __schedule+0x14bc/0x5000 [ 574.754748][ T31] ? __pfx___schedule+0x10/0x10 [ 574.760343][ T31] ? schedule+0x91/0x360 [ 574.764764][ T31] schedule+0x165/0x360 [ 574.768992][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.774716][ T31] __mutex_lock+0x7e6/0x1350 [ 574.779350][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.786290][ T31] ? rfkill_unregister+0xc8/0x220 [ 574.791473][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.796605][ T31] ? __pfx_device_del+0x10/0x10 [ 574.801501][ T31] ? __cancel_work_sync+0x5c/0x110 [ 574.806912][ T31] rfkill_unregister+0xc8/0x220 [ 574.811768][ T31] nfc_unregister_device+0x96/0x300 [ 574.817324][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 574.823074][ T31] virtual_ncidev_close+0x56/0x90 [ 574.828244][ T31] __fput+0x44c/0xa70 [ 574.832259][ T31] task_work_run+0x1d4/0x260 [ 574.837220][ T31] ? __pfx_task_work_run+0x10/0x10 [ 574.842337][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 574.847799][ T31] do_exit+0x6c5/0x2310 [ 574.852084][ T31] ? cgroup1_freezing+0x20/0x350 [ 574.857088][ T31] ? __pfx_do_exit+0x10/0x10 [ 574.861718][ T31] ? cgroup1_freezing+0x20/0x350 [ 574.867123][ T31] ? cgroup1_freezing+0x20/0x350 [ 574.872080][ T31] do_group_exit+0x21c/0x2d0 [ 574.876938][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 574.882167][ T31] get_signal+0x1285/0x1340 [ 574.886777][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 574.892367][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 574.899029][ T31] ? do_sys_openat2+0x15a/0x200 [ 574.904366][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 574.909842][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 574.915188][ T31] ? rcu_is_watching+0x15/0xb0 [ 574.920081][ T31] do_syscall_64+0x2d0/0xf80 [ 574.924950][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.931048][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.936147][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.942163][ T31] RIP: 0033:0x7f85fd58f749 [ 574.946823][ T31] RSP: 002b:00007f85fb7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 574.955460][ T31] RAX: 0000000000000006 RBX: 00007f85fd7e6090 RCX: 00007f85fd58f749 [ 574.963606][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 574.971819][ T31] RBP: 00007f85fd613f91 R08: 0000000000000000 R09: 0000000000000000 [ 574.979852][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.988249][ T31] R13: 00007f85fd7e6128 R14: 00007f85fd7e6090 R15: 00007fff7b44d208 [ 574.996448][ T31] [ 574.999478][ T31] INFO: task syz.4.3328:18027 blocked for more than 144 seconds. [ 575.014122][ T31] Not tainted syzkaller #0 [ 575.019187][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.028351][ T31] task:syz.4.3328 state:D stack:24648 pid:18027 tgid:18017 ppid:16779 task_flags:0x400140 flags:0x00080002 [ 575.040608][ T31] Call Trace: [ 575.044069][ T31] [ 575.047045][ T31] __schedule+0x14bc/0x5000 [ 575.051643][ T31] ? __pfx___schedule+0x10/0x10 [ 575.056943][ T31] ? schedule+0x91/0x360 [ 575.061203][ T31] schedule+0x165/0x360 [ 575.065588][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.071114][ T31] __mutex_lock+0x7e6/0x1350 [ 575.075957][ T31] ? __mutex_lock+0x5bb/0x1350 [ 575.080767][ T31] ? nfc_dev_down+0x3b/0x290 [ 575.085818][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.091045][ T31] ? do_raw_spin_lock+0x121/0x290 [ 575.096477][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 575.102581][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 575.112382][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 575.118561][ T31] nfc_dev_down+0x3b/0x290 [ 575.123016][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 575.128814][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 575.134021][ T31] rfkill_set_block+0x1d2/0x440 [ 575.138949][ T31] rfkill_fop_write+0x44b/0x570 [ 575.143800][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 575.149795][ T31] ? security_kernfs_init_security+0x220/0x290 [ 575.156304][ T31] ? rw_verify_area+0x255/0x4d0 [ 575.161194][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 575.167190][ T31] vfs_write+0x27e/0xb30 [ 575.171557][ T31] ? __pfx_vfs_write+0x10/0x10 [ 575.177086][ T31] ? __fget_files+0x2a/0x420 [ 575.181719][ T31] ? __fget_files+0x2a/0x420 [ 575.186866][ T31] ? __fget_files+0x3a0/0x420 [ 575.191549][ T31] ? __fget_files+0x2a/0x420 [ 575.196199][ T31] ksys_write+0x145/0x250 [ 575.200551][ T31] ? __pfx_ksys_write+0x10/0x10 [ 575.205992][ T31] ? do_syscall_64+0xbe/0xf80 [ 575.210707][ T31] do_syscall_64+0xfa/0xf80 [ 575.215350][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.221526][ T31] ? clear_bhb_loop+0x60/0xb0 [ 575.226247][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.232296][ T31] RIP: 0033:0x7f71e6d8f749 [ 575.237186][ T31] RSP: 002b:00007f71e7cc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 575.245779][ T31] RAX: ffffffffffffffda RBX: 00007f71e6fe6090 RCX: 00007f71e6d8f749 [ 575.253864][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008 [ 575.262301][ T31] RBP: 00007f71e6e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.270860][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.279003][ T31] R13: 00007f71e6fe6128 R14: 00007f71e6fe6090 R15: 00007fff87544818 [ 575.287132][ T31] [ 575.290204][ T31] INFO: task syz.2.3365:18131 blocked for more than 144 seconds. [ 575.298887][ T31] Not tainted syzkaller #0 [ 575.303833][ T31] Blocked by coredump. [ 575.308530][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.317236][ T31] task:syz.2.3365 state:D stack:25728 pid:18131 tgid:18130 ppid:16427 task_flags:0x40044c flags:0x00080001 [ 575.329556][ T31] Call Trace: [ 575.332842][ T31] [ 575.335872][ T31] __schedule+0x14bc/0x5000 [ 575.340502][ T31] ? __pfx___schedule+0x10/0x10 [ 575.345590][ T31] ? schedule+0x91/0x360 [ 575.350038][ T31] schedule+0x165/0x360 [ 575.354718][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.360196][ T31] __mutex_lock+0x7e6/0x1350 [ 575.364879][ T31] ? __mutex_lock+0x5bb/0x1350 [ 575.369679][ T31] ? rfkill_unregister+0xc8/0x220 [ 575.374844][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.379901][ T31] ? __pfx_device_del+0x10/0x10 [ 575.385300][ T31] ? hci_sock_dev_event+0x42d/0x630 [ 575.390542][ T31] ? __cancel_work_sync+0x5c/0x110 [ 575.395725][ T31] rfkill_unregister+0xc8/0x220 [ 575.400605][ T31] hci_unregister_dev+0x374/0x5b0 [ 575.405721][ T31] vhci_release+0x152/0x1a0 [ 575.410345][ T31] ? __pfx_vhci_release+0x10/0x10 [ 575.415893][ T31] __fput+0x44c/0xa70 [ 575.420015][ T31] task_work_run+0x1d4/0x260 [ 575.425081][ T31] ? __pfx_task_work_run+0x10/0x10 [ 575.430503][ T31] ? kmem_cache_free+0x197/0x620 [ 575.435593][ T31] ? do_exit+0x6c0/0x2310 [ 575.439959][ T31] do_exit+0x6c5/0x2310 [ 575.444750][ T31] ? cgroup1_freezing+0x20/0x350 [ 575.449926][ T31] ? __pfx_do_exit+0x10/0x10 [ 575.454657][ T31] ? cgroup1_freezing+0x20/0x350 [ 575.459921][ T31] ? cgroup1_freezing+0x20/0x350 [ 575.464947][ T31] do_group_exit+0x21c/0x2d0 [ 575.469578][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 575.475197][ T31] get_signal+0x1285/0x1340 [ 575.479819][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 575.486035][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 575.492333][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 575.498058][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 575.503385][ T31] ret_from_fork+0x616/0xb30 [ 575.508892][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.514187][ T31] ? __switch_to_asm+0x39/0x70 [ 575.520116][ T31] ? __switch_to_asm+0x33/0x70 [ 575.525519][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.530303][ T31] [ 575.533365][ T31] INFO: task syz.0.3366:18133 blocked for more than 144 seconds. [ 575.542156][ T31] Not tainted syzkaller #0 [ 575.547680][ T31] Blocked by coredump. [ 575.552281][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.561764][ T31] task:syz.0.3366 state:D stack:26552 pid:18133 tgid:18132 ppid:17100 task_flags:0x40044c flags:0x00080001 [ 575.573846][ T31] Call Trace: [ 575.577666][ T31] [ 575.580602][ T31] __schedule+0x14bc/0x5000 [ 575.585379][ T31] ? __pfx___schedule+0x10/0x10 [ 575.590265][ T31] ? schedule+0x91/0x360 [ 575.594602][ T31] schedule+0x165/0x360 [ 575.598802][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.604974][ T31] __mutex_lock+0x7e6/0x1350 [ 575.609694][ T31] ? __mutex_lock+0x5bb/0x1350 [ 575.614533][ T31] ? rfkill_unregister+0xc8/0x220 [ 575.619595][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.624835][ T31] ? __pfx_device_del+0x10/0x10 [ 575.629826][ T31] ? hci_sock_dev_event+0x42d/0x630 [ 575.635507][ T31] ? __cancel_work_sync+0x5c/0x110 [ 575.640752][ T31] rfkill_unregister+0xc8/0x220 [ 575.645701][ T31] hci_unregister_dev+0x374/0x5b0 [ 575.650792][ T31] vhci_release+0x152/0x1a0 [ 575.655649][ T31] ? __pfx_vhci_release+0x10/0x10 [ 575.660708][ T31] __fput+0x44c/0xa70 [ 575.665388][ T31] task_work_run+0x1d4/0x260 [ 575.670042][ T31] ? __pfx_task_work_run+0x10/0x10 [ 575.675311][ T31] ? kmem_cache_free+0x197/0x620 [ 575.680291][ T31] ? do_exit+0x6c0/0x2310 [ 575.684791][ T31] do_exit+0x6c5/0x2310 [ 575.689004][ T31] ? cgroup1_freezing+0x20/0x350 [ 575.694052][ T31] ? __pfx_do_exit+0x10/0x10 [ 575.698680][ T31] ? cgroup1_freezing+0x20/0x350 [ 575.703863][ T31] ? cgroup1_freezing+0x20/0x350 [ 575.709427][ T31] do_group_exit+0x21c/0x2d0 [ 575.714120][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 575.719439][ T31] get_signal+0x1285/0x1340 [ 575.724211][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 575.730059][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 575.736636][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 575.742204][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 575.747577][ T31] ret_from_fork+0x616/0xb30 [ 575.752265][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.757462][ T31] ? __switch_to_asm+0x39/0x70 [ 575.762369][ T31] ? __switch_to_asm+0x33/0x70 [ 575.767610][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.772401][ T31] [ 575.775638][ T31] INFO: task syz.3.3426:18301 blocked for more than 144 seconds. [ 575.783403][ T31] Not tainted syzkaller #0 [ 575.788406][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.798104][ T31] task:syz.3.3426 state:D stack:25920 pid:18301 tgid:18300 ppid:17589 task_flags:0x400140 flags:0x00080002 [ 575.810161][ T31] Call Trace: [ 575.813502][ T31] [ 575.816638][ T31] __schedule+0x14bc/0x5000 [ 575.821207][ T31] ? __pfx___schedule+0x10/0x10 [ 575.827070][ T31] ? schedule+0x91/0x360 [ 575.831466][ T31] schedule+0x165/0x360 [ 575.835826][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.841392][ T31] __mutex_lock+0x7e6/0x1350 [ 575.846052][ T31] ? __mutex_lock+0x5bb/0x1350 [ 575.850842][ T31] ? rfkill_register+0x37/0x8e0 [ 575.856223][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.861350][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 575.866796][ T31] ? device_initialize+0x24b/0x440 [ 575.871939][ T31] rfkill_register+0x37/0x8e0 [ 575.876821][ T31] nfc_register_device+0x14a/0x390 [ 575.881989][ T31] nci_register_device+0x87f/0x9d0 [ 575.887570][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 575.893308][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 575.898676][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 575.904326][ T31] virtual_ncidev_open+0x129/0x1a0 [ 575.909475][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 575.915593][ T31] misc_open+0x2d5/0x350 [ 575.919884][ T31] chrdev_open+0x4cc/0x5e0 [ 575.924582][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 575.929571][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 575.936112][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 575.941091][ T31] do_dentry_open+0x7ce/0x1420 [ 575.946283][ T31] vfs_open+0x3b/0x340 [ 575.950364][ T31] ? path_openat+0x33f3/0x3dd0 [ 575.955197][ T31] path_openat+0x340e/0x3dd0 [ 575.959833][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 575.965481][ T31] ? stack_depot_save_flags+0x40/0x850 [ 575.970980][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 575.977206][ T31] ? getname_flags+0xb8/0x540 [ 575.982071][ T31] ? __pfx_path_openat+0x10/0x10 [ 575.987161][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 575.992234][ T31] do_filp_open+0x1fa/0x410 [ 575.996822][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 576.001968][ T31] ? _raw_spin_unlock+0x28/0x50 [ 576.007301][ T31] ? alloc_fd+0x64c/0x6c0 [ 576.011655][ T31] do_sys_openat2+0x121/0x200 [ 576.016797][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 576.022133][ T31] ? fput_close_sync+0x113/0x220 [ 576.027179][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 576.032419][ T31] __x64_sys_openat+0x138/0x170 [ 576.037801][ T31] do_syscall_64+0xfa/0xf80 [ 576.042450][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.048787][ T31] ? clear_bhb_loop+0x60/0xb0 [ 576.053596][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.059561][ T31] RIP: 0033:0x7fa032b8f749 [ 576.064523][ T31] RSP: 002b:00007fa033a9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 576.072963][ T31] RAX: ffffffffffffffda RBX: 00007fa032de5fa0 RCX: 00007fa032b8f749 [ 576.081084][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 576.089328][ T31] RBP: 00007fa032c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 576.097874][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.105914][ T31] R13: 00007fa032de6038 R14: 00007fa032de5fa0 R15: 00007ffe2f1293c8 [ 576.113930][ T31] [ 576.117040][ T31] INFO: task syz-executor:18308 blocked for more than 145 seconds. [ 576.125311][ T31] Not tainted syzkaller #0 [ 576.130426][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.139142][ T31] task:syz-executor state:D stack:27608 pid:18308 tgid:18308 ppid:1 task_flags:0x400040 flags:0x00080000 [ 576.151545][ T31] Call Trace: [ 576.156778][ T31] [ 576.159742][ T31] __schedule+0x14bc/0x5000 [ 576.164472][ T31] ? __pfx___schedule+0x10/0x10 [ 576.169350][ T31] ? schedule+0x91/0x360 [ 576.173590][ T31] schedule+0x165/0x360 [ 576.177920][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.183442][ T31] __mutex_lock+0x7e6/0x1350 [ 576.188355][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 576.193428][ T31] ? __mutex_lock+0x5bb/0x1350 [ 576.198578][ T31] ? misc_open+0x51/0x350 [ 576.203036][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.208460][ T31] misc_open+0x51/0x350 [ 576.212664][ T31] chrdev_open+0x4cc/0x5e0 [ 576.218278][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 576.223572][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 576.231134][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 576.236453][ T31] do_dentry_open+0x7ce/0x1420 [ 576.241307][ T31] vfs_open+0x3b/0x340 [ 576.245487][ T31] ? path_openat+0x33f3/0x3dd0 [ 576.250268][ T31] path_openat+0x340e/0x3dd0 [ 576.255306][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 576.261133][ T31] ? __pfx_path_openat+0x10/0x10 [ 576.267154][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 576.272137][ T31] do_filp_open+0x1fa/0x410 [ 576.277057][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 576.282151][ T31] ? _raw_spin_unlock+0x28/0x50 [ 576.287200][ T31] ? alloc_fd+0x64c/0x6c0 [ 576.291695][ T31] do_sys_openat2+0x121/0x200 [ 576.296796][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 576.302121][ T31] ? fd_install+0x95/0x3d0 [ 576.306912][ T31] ? fd_install+0x307/0x3d0 [ 576.311647][ T31] __x64_sys_openat+0x138/0x170 [ 576.316605][ T31] do_syscall_64+0xfa/0xf80 [ 576.321395][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.327740][ T31] ? clear_bhb_loop+0x60/0xb0 [ 576.332434][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.338643][ T31] RIP: 0033:0x7f2e9298df11 [ 576.343162][ T31] RSP: 002b:00007fff08cbccf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 576.351868][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2e9298df11 [ 576.360120][ T31] RDX: 0000000000000002 RSI: 00007f2e92a149b7 RDI: 00000000ffffff9c [ 576.368480][ T31] RBP: 00007f2e92a149b7 R08: 0000000000000000 R09: 00007f2e9371d6c0 [ 576.376759][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 576.385081][ T31] R13: 0000000000000003 R14: 00007fff08cbd0c8 R15: 0000000000000000 [ 576.393109][ T31] [ 576.396465][ T31] [ 576.396465][ T31] Showing all locks held in the system: [ 576.404371][ T31] 1 lock held by khungtaskd/31: [ 576.409242][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 576.419528][ T31] 2 locks held by getty/5590: [ 576.424409][ T31] #0: ffff8880344c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 576.434297][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 576.444661][ T31] 1 lock held by syz-executor/5828: [ 576.449874][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 576.460394][ T31] 3 locks held by kworker/1:7/5951: [ 576.465945][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 576.477213][ T31] #1: ffffc90004b97b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 576.491627][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 576.503583][ T31] 1 lock held by udevd/16731: [ 576.508596][ T31] #0: ffff888141fa2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 576.518329][ T31] 2 locks held by syz.1.3327/18016: [ 576.523560][ T31] #0: ffff888044e60100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 576.533476][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 576.543887][ T31] 2 locks held by syz.4.3328/18027: [ 576.549735][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 576.560115][ T31] #1: ffff888044e60100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 576.569746][ T31] 1 lock held by syz.2.3365/18131: [ 576.575290][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 576.585940][ T31] 1 lock held by syz.0.3366/18133: [ 576.591232][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 576.601872][ T31] 3 locks held by syz.3.3426/18301: [ 576.607292][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.615819][ T31] #1: ffff888029da7100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x390 [ 576.625696][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 576.635972][ T31] 1 lock held by syz-executor/18308: [ 576.641306][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.649893][ T31] 1 lock held by syz-executor/18310: [ 576.655608][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.664530][ T31] 1 lock held by syz-executor/18312: [ 576.670014][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.678543][ T31] 1 lock held by syz-executor/18314: [ 576.683835][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.692538][ T31] 1 lock held by syz-executor/18316: [ 576.698033][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.706704][ T31] 1 lock held by syz-executor/18318: [ 576.712086][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.721023][ T31] 1 lock held by syz-executor/18320: [ 576.726801][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.735601][ T31] 1 lock held by syz-executor/18323: [ 576.740965][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.750091][ T31] 1 lock held by syz-executor/18324: [ 576.755913][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.764543][ T31] 1 lock held by syz-executor/18326: [ 576.769997][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.778886][ T31] 1 lock held by syz-executor/18328: [ 576.784815][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.793431][ T31] 1 lock held by syz-executor/18330: [ 576.798789][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.807601][ T31] 1 lock held by syz-executor/18333: [ 576.812967][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.821720][ T31] 1 lock held by syz-executor/18334: [ 576.827116][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.835855][ T31] 1 lock held by syz-executor/18336: [ 576.841169][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 576.849948][ T31] [ 576.852299][ T31] ============================================= [ 576.852299][ T31] [ 576.860999][ T31] NMI backtrace for cpu 1 [ 576.861016][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.861046][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.861057][ T31] Call Trace: [ 576.861064][ T31] [ 576.861073][ T31] dump_stack_lvl+0x189/0x250 [ 576.861105][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.861129][ T31] ? __pfx__printk+0x10/0x10 [ 576.861169][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 576.861199][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 576.861228][ T31] ? __pfx__printk+0x10/0x10 [ 576.861262][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.861292][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 576.861315][ T31] sys_info+0x135/0x170 [ 576.861337][ T31] watchdog+0xf95/0xfe0 [ 576.861369][ T31] ? watchdog+0x20a/0xfe0 [ 576.861403][ T31] kthread+0x711/0x8a0 [ 576.861432][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.861457][ T31] ? __pfx_kthread+0x10/0x10 [ 576.861484][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.861512][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 576.861529][ T31] ? __pfx_kthread+0x10/0x10 [ 576.861554][ T31] ret_from_fork+0x599/0xb30 [ 576.861577][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.861608][ T31] ? __switch_to_asm+0x39/0x70 [ 576.861630][ T31] ? __switch_to_asm+0x33/0x70 [ 576.861652][ T31] ? __pfx_kthread+0x10/0x10 [ 576.861678][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.861722][ T31] [ 576.861728][ T31] Sending NMI from CPU 1 to CPUs 0: [ 577.014680][ C0] NMI backtrace for cpu 0 [ 577.014699][ C0] CPU: 0 UID: 0 PID: 16598 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 577.014718][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.014728][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 577.014755][ C0] RIP: 0010:__asan_memset+0x15/0x50 [ 577.014773][ C0] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 <48> 89 d6 ba 01 00 00 00 e8 7e e4 ff ff 84 c0 74 11 4c 89 f7 89 ee [ 577.014786][ C0] RSP: 0018:ffffc9001a97f3b8 EFLAGS: 00000246 [ 577.014800][ C0] RAX: ffffc9001a97f838 RBX: 0000000000000010 RCX: ffffffff81744d8e [ 577.014812][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9001a97f4f8 [ 577.014823][ C0] RBP: 0000000000000000 R08: 0000000000000004 R09: ffffffff8df41a20 [ 577.014832][ C0] R10: ffffc9001a97f4f8 R11: ffffffff81ada120 R12: ffffc9001a97f4f8 [ 577.014843][ C0] R13: 1ffff9200352fe97 R14: ffffc9001a97f4f8 R15: ffffc9001a97f4f0 [ 577.014855][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 577.014868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.014880][ C0] CR2: 00007fb2eb317d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 577.014896][ C0] Call Trace: [ 577.014902][ C0] [ 577.014911][ C0] unwind_next_frame+0xeae/0x23d0 [ 577.014933][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 577.014950][ C0] ? kasan_save_free_info+0x46/0x50 [ 577.014973][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 577.014996][ C0] arch_stack_walk+0x11c/0x150 [ 577.015015][ C0] ? __kasan_slab_free+0x5c/0x80 [ 577.015033][ C0] stack_trace_save+0x9c/0xe0 [ 577.015053][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 577.015074][ C0] ? chacha_block_generic+0x53/0xc80 [ 577.015097][ C0] kasan_save_track+0x3e/0x80 [ 577.015111][ C0] ? kasan_save_track+0x3e/0x80 [ 577.015125][ C0] ? kasan_save_free_info+0x46/0x50 [ 577.015168][ C0] kasan_save_free_info+0x46/0x50 [ 577.015186][ C0] __kasan_slab_free+0x5c/0x80 [ 577.015202][ C0] ? skb_release_data+0x62d/0x7c0 [ 577.015219][ C0] kfree+0x1c0/0x660 [ 577.015242][ C0] skb_release_data+0x62d/0x7c0 [ 577.015263][ C0] consume_skb+0x9e/0xf0 [ 577.015288][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 577.015315][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 577.015332][ C0] process_scheduled_works+0xad1/0x1770 [ 577.015359][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 577.015383][ C0] worker_thread+0x8a0/0xda0 [ 577.015410][ C0] kthread+0x711/0x8a0 [ 577.015430][ C0] ? __pfx_worker_thread+0x10/0x10 [ 577.015445][ C0] ? __pfx_kthread+0x10/0x10 [ 577.015464][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.015487][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 577.015501][ C0] ? __pfx_kthread+0x10/0x10 [ 577.015519][ C0] ret_from_fork+0x599/0xb30 [ 577.015536][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 577.015555][ C0] ? __switch_to_asm+0x39/0x70 [ 577.015575][ C0] ? __switch_to_asm+0x33/0x70 [ 577.015592][ C0] ? __pfx_kthread+0x10/0x10 [ 577.015610][ C0] ret_from_fork_asm+0x1a/0x30 [ 577.015636][ C0] [ 577.335759][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 577.342666][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.352046][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.362308][ T31] Call Trace: [ 577.365624][ T31] [ 577.368570][ T31] dump_stack_lvl+0x99/0x250 [ 577.373163][ T31] ? __asan_memcpy+0x40/0x70 [ 577.377835][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.383027][ T31] ? __pfx__printk+0x10/0x10 [ 577.387730][ T31] vpanic+0x237/0x6d0 [ 577.391746][ T31] ? __pfx_vpanic+0x10/0x10 [ 577.396249][ T31] ? preempt_schedule_common+0x83/0xd0 [ 577.401727][ T31] panic+0xb9/0xc0 [ 577.405443][ T31] ? __pfx_panic+0x10/0x10 [ 577.409851][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 577.415230][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 577.421414][ T31] watchdog+0xfdf/0xfe0 [ 577.425588][ T31] ? watchdog+0x20a/0xfe0 [ 577.429924][ T31] kthread+0x711/0x8a0 [ 577.434080][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.438917][ T31] ? __pfx_kthread+0x10/0x10 [ 577.443558][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.448954][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 577.454269][ T31] ? __pfx_kthread+0x10/0x10 [ 577.458866][ T31] ret_from_fork+0x599/0xb30 [ 577.463468][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.468597][ T31] ? __switch_to_asm+0x39/0x70 [ 577.473549][ T31] ? __switch_to_asm+0x33/0x70 [ 577.478408][ T31] ? __pfx_kthread+0x10/0x10 [ 577.483211][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.488364][ T31] [ 577.491919][ T31] Kernel Offset: disabled [ 577.496339][ T31] Rebooting in 86400 seconds..