last executing test programs: 20.952658025s ago: executing program 0 (id=2174): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x880) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20) (async) syz_emit_ethernet(0x5ee, &(0x7f0000000600)=ANY=[], 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r9, 0x25, 0x5, @val=@uprobe_multi={&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=[0x7ff, 0x6, 0x5, 0x7b97, 0x1, 0xf, 0x4], &(0x7f00000002c0)=[0x0], 0x1, 0x7, 0x1, r10}}, 0x40) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f0000000040)={0xf0400000, 0x0, 0x0, 0xfffffffe, 0x2007}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010127bd7000fddbdf2567fffc0008000300", @ANYRES32=r12, @ANYBLOB="1400c700030402014000870789300d1006d898c7"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24044004) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r13, 0x0, 0x0, 0x0, 0x0) 20.805177488s ago: executing program 0 (id=2178): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x20000004) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x13, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 20.713829131s ago: executing program 0 (id=2180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3e, 0x0, &(0x7f00000017c0)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) ioctl$NS_GET_NSTYPE(r1, 0x8008b705, 0x0) 20.565413053s ago: executing program 0 (id=2181): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x12c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @filter_kind_options=@f_bpf={{0x8}, {0xf0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd8, 0x1, [@m_tunnel_key={0x60, 0x16, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}]}, {0x26, 0x6, "fce60200000000000000d54ce7b327590167c0cce575afc96427000002000000525b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x74, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x41, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) r1 = socket(0x10, 0x803, 0x0) connect$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0xff, 0x1}, 0x20) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000380)=""/87, 0x55}, {&(0x7f0000000fc0)=""/4079, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0xb9}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 20.41995782s ago: executing program 2 (id=2183): r0 = socket(0x1a, 0x805, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x68, 0x0, &(0x7f0000000100)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000002c0), 0x4) (async) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r5, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) (async) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) 20.417734121s ago: executing program 0 (id=2184): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x899, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 20.26205336s ago: executing program 2 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x28}}, 0x240008c0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x28}}, 0x240008c0) (async) 20.142558064s ago: executing program 2 (id=2190): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f0000000100)=r1, 0x4) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYBLOB="0000000006"], 0x24}}, 0x0) r4 = socket(0x2b, 0x80000, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x124, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x9f, 0xc, "ee7234a11ce8f47fd7befcfd495c9b9e7b6c970b6d1239d652a122a8233796d79bbbefaa873496245d1b67a3be6c0e86ad2c0aefe4fd8ba32b213de16466d0dbebec86802f8b8b3ece3671aa15a3346b613f989a4bf6cbdba8eb7d5247583e63a77a609259e8f54a75d407f4edb063803e19ae03e8bee9a5fdeb946a4ad03496841f983eaa138bd5db49000addb55796a2edcdcd146521474f011b"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1346c69f}]}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x14c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 20.013203836s ago: executing program 2 (id=2192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(r0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)={0x10cc, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@nested={0x10a0, 0x10, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @fd=r1}, @typed={0x92, 0x135, 0x0, 0x0, @str='\x00\x80\xf2\xe9k\x84\t\x00\x00\xdd$\x89\xd5P\x90\xaco\xb0\xc5ek)\x86\xfb\xd7T\x91\xe8\x81\tq\xcc<\xaa\xad|\xad1\xddSw r2\x04\"\x15\x88\xe6\x88d\f7\x96\x1b\xda\xaeA\xa4\xb9\xdd\xd5\x1ae\xa6\xd0\xc6q\x11\xfb\xb2\xc3=\x9f\xf0r\xfe\xfe\fC\xd2\x92\x88\xed%\x18\x10O=\xd2\x11\\2\x93\xdd8\x9aIG>X`\xd4d\x88\x81\x12\f\x9c\xbf\xd1mw\xed\xb3\x1c\xc9\xcd\xba{\x9bP`.0\xc79\xe9\xaeI\x12\vQ\xbe\x13\xd8\xce\x12PJ\x83\xae'}, @generic="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"]}, @generic="9a1bff62591ba5e8285fff1e47072e46debccec975980c"]}, 0x10cc}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x19}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x814}, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x6}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000088000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) 19.796828953s ago: executing program 0 (id=2193): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000040)={0xe09, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000100)={0x1f, @none}, 0x8) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, &(0x7f0000000140)=""/160, 0xa0, 0x40020100, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipmr_delroute={0x44, 0x19, 0x8, 0x70bd2b, 0x25dfdbfc, {0x80, 0x20, 0x0, 0x86, 0xfd, 0x0, 0xfe, 0x4, 0x800}, [@RTA_MARK={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_IIF={0x8}, @RTA_FLOW={0x8, 0xb, 0x8}, @RTA_OIF={0x8, 0x4, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004080}, 0x10) r7 = accept(r1, &(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000480)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f00000004c0)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'veth1_macvtap\x00', 0x2}, 0x18) ioctl$PPPIOCSMRU(r7, 0x40047452, &(0x7f0000000540)=0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r9, 0x7b8e5b6b5c1f8bdd, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a59ed75a5449f5abb69e18ed0f"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x800) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000740)={'tunl0\x00'}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r7) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x198, r11, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x30}, 0x80) r14 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r14, &(0x7f0000000ac0)="1765b5208c7fd36e4a41d40e435e90b5160918dcc462eee724fa2f941769adbcd46cce2311bb4a65a8f69739c398f0de3475c399fff15ed24adf3c2f724cf308ad3db13dd04f20995ef9d1f04aedf699b2b3184b836b5f485ab374eaeef9be03ed98ad18b790663f926cd011ff13c7235baae2f2400332201bca22eefbcb51c0608a99a9fd1ec22500b07b3d483496e2cee2962246f1cc589034bbf1744d67b77afe84de", 0xa4, 0x4040000, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000bc0)={0x6, 'team_slave_1\x00', {0x8}, 0xa}) 19.791119715s ago: executing program 2 (id=2196): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2060400) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x700}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000040000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xc256, 0xffffffffffffffff, 0x6, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x3, 0x5, 0xc, 0x1}, {0x0, 0x4, 0x6, 0x2}, {0x0, 0x3, 0xa, 0x4}, {0x1, 0x4, 0x8, 0x6}, {0x0, 0x4, 0x7, 0x9}, {0x3, 0x4, 0x9, 0xa}], 0x10, 0xf988}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc5, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) getuid() r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="007afa57c5b700a2ea00ec0080a45c0400028008eee8001f000000000000000000000000000071a2093325e607b1c6f624eb8c88d1ca85a0335e29f3ef9e5f981ed70a25fe032b6318155cbae336c274bac6d6c006a4a6f400"/101], 0x3c}}, 0x0) 19.525040759s ago: executing program 2 (id=2201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x8001, 0x0, [0x1, 0x8, 0x401, 0x5], &(0x7f00000000c0)}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) socket(0x28, 0x1, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x8001, 0x0, [0x1, 0x8, 0x401, 0x5], &(0x7f00000000c0)}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (async) socket(0x28, 0x1, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r4) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) (async) 16.251023581s ago: executing program 1 (id=2267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf250300000008000300", @ANYRES32=r3], 0x28}}, 0x0) gettid() (async) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r4, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r4, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040810}, 0x20004040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x4d014, 0x800}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 16.173098769s ago: executing program 1 (id=2269): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fe02c00fe8000000000000000000000000000aaff02000000000000000000000000000167"], 0x1016) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@getchain={0x3c, 0x66, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0x3}, {0x7, 0x3}, {0xffe0, 0x10}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x81}]}, 0x3c}}, 0x40084) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r7 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="024068a4e7679ffdbe27d632768df5a5", 0x10}], 0x1}, 0x44151) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000080601010000000000000000000000070900020073797a31000000000500090007000000"], 0x28}, 0x1, 0x0, 0x0, 0xc8000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000061107c0000000000950000000000000044b2ad1557796aaa0e4b46cc13f53d2a2868"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16, @ANYBLOB="010000000000000000000a0000003c000380080001"], 0x88}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="eeffffff", @ANYRES16, @ANYBLOB="00082bbd7000fadbdf250800000014000280080009000d00000006000b000a000000081c00060001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000000), 0x6) 16.170982291s ago: executing program 4 (id=2270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x1c}}, 0x20000080) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000000f8604acc2adcde0e2220900000000000004000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000080)={0x1, 0x2, [@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000240), 0x4) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 15.979453056s ago: executing program 1 (id=2272): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) write$cgroup_pid(r2, &(0x7f00000005c0), 0x12) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e156f30642d654384d4be8b9eb4add6d9603e8fe122b9d70171d6f8ea5", 0xfffffdef}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x3, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a6a1e4694868"}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004004}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000001440)=ANY=[@ANYBLOB="380300001300020025bd7000fedbdf250a01010100000000000000000000000000000000008b39a7fb35c5b820d400000000000000000000004e2000004e3d00000a00208031000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="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"], 0x338}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r10, @ANYBLOB="280050800500020007000000090001007ee5d52ffd00000005000900020000000800030005ac0f"], 0x44}}, 0x40000) r13 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r13, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x200440c0) 15.918683035s ago: executing program 4 (id=2274): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async) pipe(&(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="e56240957a85294abf210cb610068500", @ANYRES16=r4, @ANYBLOB="010028bd7000000000000100000006000600214e00001400020077673200"/42], 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip6erspan0\x00', 0x0}) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000040)="9f0910bc996c301c8107070400", 0x28) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x3ed, 0x300, 0x70bd29, 0x25dfdbfb, "4ae53d6b1e5b4f9ceea99356003e6bfcd579ad270019964b8e1e26adf9f6239718", [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000001) (async) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100003e000701feffffff00000000047c00000800428004000800b80009"], 0x180}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000240)) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090528bd701c00000400021f0d00", @ANYRES32=r5, @ANYBLOB="080001000000010400000400ac1414bb08000200ffffffff08000a000400000008000a0001000000080009000c000009"], 0x48}}, 0x0) (rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x3}) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r10 = socket(0x22, 0x2, 0x2) accept$alg(r10, 0x0, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x42104830) 15.775118901s ago: executing program 1 (id=2275): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000010c0)={r0, 0x9, 0x1ff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0xffffffffffffffff, 0x3e}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x5}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r4, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a0000007b4c524c3d5916b33c6275e264f4c02031566117784aee2e1f8ca6d90714f4a2794b56c831ea3f1db707fb7be06387ce73d69172e7ebce0f993ec03920db53fe941f7ae053c1c3985fea40e49fa1f874262daeb6601d780d8f7b5fc2a4334e7d9537585a23629bcd1b2a20bdcaec7f898067a7ea864075fead", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 15.773720646s ago: executing program 4 (id=2276): socket(0x10, 0x803, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(0xffffffffffffffff, 0x2) shutdown(r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xc}], 0x4, 0x40012020, 0x0) (async) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c0002801f0001407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x25, 0x1, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x400000a3, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1}]}}]}, 0x38}}, 0x0) 15.652161719s ago: executing program 4 (id=2277): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x3c, 0x2e, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0x10}, {0xffff, 0x8}}, [{0x8, 0xb, 0xf178}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000081}, 0x100008d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0xd}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9d4}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x30c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1031}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40891) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000780)={&(0x7f0000000340), 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x2a0, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xf4, 0x13, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [{0x6, 0x1, ':*'}, {0x7, 0x1, '}##'}, {0x4}, {0xc, 0x1, 'nl80211\x00'}, {0x6, 0x1, '\\$'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}]}, {0x3c, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, '\xe8}!@^'}, {0x4}, {0x6, 0x1, ')!'}, {0x5, 0x1, '%'}, {0xc, 0x1, 'nl80211\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x5, 0x1, '\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x7, 0x1, '^($'}, {0x7, 0x1, '^/\x00'}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_SDP={0x138, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x7, 0x1, '(#\\'}, {0xc, 0x1, 'nl80211\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x6, 0x1, '{*'}, {0x9, 0x1, '\xc4\x9d[:!'}, {0xc, 0x1, 'nl80211\x00'}, {0x7, 0x1, '\xd8(%'}]}, {0x30, 0x0, 0x0, 0x1, [{0x7, 0x1, '\x04.-'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x10, 0x1, ',{\'((}+!Q$[/'}]}, {0x64, 0x0, 0x0, 0x1, [{0x6, 0x1, '\x97*'}, {0xc, 0x1, 'nl80211\x00'}, {0x5, 0x1, '\''}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, '(:#@]'}, {0xc, 0x1, 'nl80211\x00'}, {0x6, 0x1, '].'}]}, {0xc, 0x0, 0x0, 0x1, [{0x4}, {0x4}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}]}, {0x14, 0x0, 0x0, 0x1, [{0x6, 0x1, '$\xa6'}, {0x6, 0x1, '-+'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x38, 0x13, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [{0x4}, {0x4}, {0xc, 0x1, 'nl80211\x00'}, {0x4}, {0xd, 0x1, '){\xf6$}/-{]'}, {0x8, 0x1, '$%A/'}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvmsg$can_raw(r0, &(0x7f0000000d00)={&(0x7f00000007c0)=@caif=@dbg, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000840)=""/86, 0x56}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/10, 0xa}, {&(0x7f0000000980)=""/211, 0xd3}, {&(0x7f0000000a80)=""/210, 0xd2}, {&(0x7f0000000b80)=""/134, 0x86}], 0x6, &(0x7f0000000cc0)=""/28, 0x1c}, 0x43) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8080) bind$pptp(0xffffffffffffffff, &(0x7f0000000e80)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = accept4$unix(0xffffffffffffffff, &(0x7f0000000ec0)=@abs, &(0x7f0000000f40)=0x6e, 0xd8ead353387542c6) recvmsg$unix(r11, &(0x7f00000014c0)={&(0x7f0000000f80), 0x6e, &(0x7f0000001440)=[{&(0x7f0000001000)=""/152, 0x98}, {&(0x7f00000010c0)=""/208, 0xd0}, {&(0x7f00000011c0)=""/98, 0x62}, {&(0x7f0000001240)=""/142, 0x8e}, {&(0x7f0000001300)=""/135, 0x87}, {&(0x7f00000013c0)=""/69, 0x45}], 0x6}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001500)=0x1000, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000015c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x60, r9, 0x100, 0x5, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x60}, 0x1, 0x0, 0x0, 0x8880}, 0x40010) sendmmsg(r10, &(0x7f0000004100)=[{{&(0x7f0000001700)=@pppoe={0x18, 0x0, {0x4, @multicast, 'tunl0\x00'}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001780)="cd749e71deb5b60814f18b75da7be335eefa9903a733535f470749a2394ff3a7d07c61154436c7246ff1ee349f27e4625c2bc0054088e00b28f33b868586c97c2be7d65c7aed9762008ce9c73088d9425e9e499602d686af658c3382bec42445238abd19cfd8e03c94af71fa3ecf7bb8916e70ae0f5207a0524b0241d207419024a9dabd99a636166344850c9f43bca7d1f3c6b5f26ba3fa3a467eaa3727c2df575b4e6654a1bbe8e87b0a4fd647f00fa61228c854e501e0c466059d2decf90013fb9cbfc1a4d9c64ada8080272a2c9d280272ae295d241ab3dd02f329bd6e2e4e51733b3b27aa665eda073e004361280d62a69ce2d3d2cd906a8f8a2de59fe378500e480404b52f7b55294f9bd41f783259364e647bc9d7a26c235a34bc1c3b719c7a69e3c44a37edea01199adfa371c1f0287d7e97a67f28f45cd3a26686b6fa6182902395eb23aab738a60d264a0e2c008f43f0f14127893abb852f87e57869db6b29ca0ac431029a54ce20748ac26de7bdb72ac3302ffe3333518a5dff94f9baeeffeefec00e5b9749020104b9a273f1482f6c7f68ab46b726dc3646ea91c0123ce380e66356917d1722e4f5365def72269db6f5dbb703e5026fa30bce0180819bcafc06f3c64198f0f0d48f78f8089aee5f61f975990b46d6805f03512680e9796b17f2e421fd8f46b12062cf466819f7b586d0211e68775ad02b1d780bc7b81f655982ae688ed53bc0a179b21a7211b25dad6c74db2242ded98017bb2361eb637a04df673d234cb02f453663974bd1417c2a1f2b85918f4d5b3cda919e64a28218540dd61e2c46fe76af10ee0fe1e3d858afb3ef880d127d70e0d5ff1883cb726df9a7f9561915af950113bcd47302de125d1d690b394b3c8d1d141c5a3ecffd01eef1e8a020ed67d2786ec05bbfb9c02f87cf0ae801971dce88ca80e48a4a4dc21c04e169382f7f56651088493009a93fb90696c8e3c4ffd5e6093b59e7ad8bf67596326f6774e0403e1fc35f70f030aa1c04a7461143dac3f8151f9da2e35888059810d9de915375c31baa221a479e6bd6baec1e677c397ed8e34126a1b6804c5741b9099973c631181c2c1f1df080744b5a6373ce947368ac9a7ac6160ed174028732bfb6a3c20604acb4e326d39a8cd829fa1a1b2640daedb364b2e8be0c7ca4d485895f99cd4d9e9e039e000a3e65ec27da6688bcd02b5c4ff3665ff02cdc5c65e36bde36621844ff4d3271ba19d7e9c27f9cc23c6fe3511d4e2e70ed6bc2d7a85456f63b65d76dc186dd4b674c7b99957110947dc00938fe25babd424ae3c572f2b4a0393e2bf5d3d9ace4198e3db45e2c6ba3f3b5aede4b88f2249b3373497d3898623792204a70cba841a565b6baa6c631a29bc56a9e3db4bd1a5ff01fa9dc1202dd5b46dbc7b1b8938eea12c5076e445691046d89bcaead6a35572a1f5239117e9b7e9e1e740f403198c853364232f9bcef9ce26a3de61dada1b9ba7d7a3f20a50bbf8547f825938260056e336e78203e058c23220955d334cda03eb17fbc4af8a962d8603dbcfacdcbe074934dc5f3ed01ba6af96b17a9cb571f6f97e89a8f693cc37c71a40f6a6578124dda48d14105adbd10e2300023ae1dd5351eb65000a3e9736bb51ab5b59affb26996e1022de6e54397a1b1ff5fea80cd7fa1886fb39d5693f47019270d069e969afa97b5fb00c71daa1e00f4eb5d78578787e4aeb445805289b6c19a1ffcf403ae9090b28872e49fc5b03466cb0a773ea753a8a246e71e0a6d3dd85f997377da8e77eeb3c51499fa29cea6489642dedbad2fc9e8d77d86105ad29945f7dd74de96e325e802f4429b548427af6927de24bfc9cd74a26130cfdd218a00468e9ed163d781228531e8e6837d5d18c33565b98d74cb7f51fecf5902e73eb378ee7c6c0c156b6bdbb174e3e0b0437ee39b844c2ccbd506cf8d60c7eb82159737c7bbd894bbf24b0d5efeaf2c290c1fd5807349864f617b90f7a970c3158fe4e44981b7620d47b06a1bc9294e59697f689d590c2e0e6b678c8d80b3903540b59e5ff4be336bc863d63b5926be51bf0c8e6cf7cb72f75f7a20da372936ef1e4d265d17912e7049634a7781f036dbd410c88fe960c68638e5097ead49763271bb431671c4ba40e819b3db64df13a63cfd1a57b6c1be54eae167654dd7251fa280f57b5c6c19618df5547a703bbf391d22371c79a751df605d81652bd5bc9ef5f258aacd43da797093a545fdf63a7c5f3ebe60ed8ef10db39324628c2fc24b2f15ac5220787e94e210d5e2023de2be95eb1eae45a68b5e4e7dea7730120155c083b07c64d7826ffecfc3bf2a433228693345d88076550ffa13f1191d83f6254e9fa23585e17cf5c781b99684cc93cd6a6319b1e9c068e1ca91a8147da1898b15634c347ecd9f7cd35e548d47eaacfb4ce980f57f64561b0658cd12ffd69863602971067e44a5bbc8a180ce97470c66ef41fb44324dafe5c1490734eaeda5519089abc84253f6a78866cceec245eb2832d0a5c4e4f06542b09cb60a6e594f2dce4904b8ed50bc5509e5e12e82f8f626138ede6dd2e4f4fe0f423bd4cdfaf180d33c1e2c1f2838e292e9cf6505f185f104c0fcd0e97497831cb67ac44f6a3313dbf8b2353b7c06e0c078a7be5db6fe6993c6588a2dcda8487dba8d5bf35d0f7b048cc9928cdb89b04651712c128496280429ab8fa023a150e3a030f48f0764bd29afc1e4aae44ed7317f45daffa101543d11d507ef12554874197f89ef86b3d180e351951ef5d6d44da5431df85e52cd0af9ffd180aa997483a3ebb555326dc29383b13ccd131f486713b7cbc22cffa58235a9e54f059406365898293f5a5c9b4ad38a7dfc945bf7952b65d05d38460ed0f92704d47061610f15f34ca2537a2bddd0309982175c2ea686d710312daa0f3a5cb6fb835f471cd029bf1858b8e714733aebf5ff01553d625ab9bcc403d5c5919ccc088de5ae71c89b687daf7b23f7ac48d76d94a3b4809cd091dfa463117010f55068f6f9d0f0c128ddf59683d5a0ea8941b5f7472e353ed135fe97b2962d9e3ba94239debbea0ec7b69d01cf228b1b5cd478d37b9d11e389e52deac984c3fbe70faf739bf1016a56e2d209c2ec3069e963f5806ea738584afc82c6d14548bc9f91963ba9532452371d732ff9b31250ba7563a803199743466215f8885bd6f5d95c32b32323195c582dd54eb8514e45246b2fc6cbfa5c87f0ef1df6d227c7ff6485743e657625893e40e272e6c45c711d2da5d274ed35c063a23a374e4fc7155ec5affdd93362877498d7e7ca900b38ab623540281b10bd51f75660641ed6556f7f1e42afe61687698ea3a96a55664f3c640e5b838d37d7948a2ac29ba455c7510cbc5efae6641c53da0038f491dfba15ae3db9b24fd9d6a35760ed8da9e92ec8f61499eb453e7779a602f888336a6abc68c86a72c14dd3de2dbb8e87c0264c182cbdec6affbac85d4d35981edc60bcad1c4a2b797bb27a12143f88072b80f7c27491c328b624f2e5a6efe0d64d49d585311e72c55a9a76c36330f7c622b73bfc4a16874a53fd38743bf11d5c458485b7be061601fa5498a1322c764f0c8e601a2c5a411c136f75077adea3a9a3a8ab50f9a369143ac3cbcc5b3841c4b4ce5571eeae506be970d8ac19f86da411e34bc79a93c31d219a763e3f5a03e66f1340e291b13ad42f5269567a37b1bd0069aae0ed7bb39da67b42ed39ebdcf078265f7641397fbde59c4ccae12c7d3dc78226f8ea8fd3bb298debf3640c2de303cb3b7011329d01ce200395bcaf19d4a11d2419bdf515ef29a89831366a06cd4ec40737c4f5ae18e389e83c5cdd37b27e6c6e2385c161a1eb9b8b5a3cf298aa8eed560c161344fc693ddb5808abc25ea7150938776cd9f15ef5f528e33da17703eb857ec86bfc2db069622c6165ff1a523e140f741d91255c36861da226baa220406c956631a2070365aa7a733bee62807678c410adc9e9556bb9728941b0e8f25f473ce7354dbd398cfae8408b32f4d70489cad597b26a022cb73ac21180c87a06bca8f94db6e6367df2a3138e135434b438ab12587d3530b64258737009d985ffcd2f552be029c32fba82cfacd2a14cea438d1c13ad6cf3a500ef05187bcc05dce0eba8e868071eb00183cb4bd6beef3c779ea5515bb8128c71fbec1d1438abf78da33800a5fb05b11127d5dfd45c339e016b4620793b4fba1e73671f79dc0846bd7bdfe4bc480607ef665a75e62a8948020449d0c694d53fe132b9f6386c48d6ddff4d11581f30d66e9b2bdbc6d4e16ea8ed4732ddbe7a844790e8f0edbf409e5641cd618891e02494d4533b449702dcee88e092aa1eba7d77bfbafc431ae27838ec56d3d67f0d48515f616a17fe31c8e5795b5afba758af505e18375154ac1200d3e05de205673aa1f22cdf6ec64d00be7aaf0f4fb03bcf1f25d089de20e394ce6506547491a5a6bdbd37161aac823050c7d3be3f1aec8ffc16bb1170866fa15c323b6c7e96ddcb5219e772bc8cb050a37b7f6c0589a194ef41decf3146d22f1f0850e0258a0a7be2ec329eda14a155d87a1eeb9e4b77489e4b12b2d04d82931542a4c5de5ed89c84ff9fe45c405e2e3ea80ab3a0e5d5f1fb54728859e9f5c5b91337e7d194b4d8d59de2d2cbda896cf09bf5620082c7c807a50632a91499e8a56de3f54bc04863c0a36d20a36b2bafc2dc032f02732d6b7ed0c6ece5d38458e8059b248e145c95d6806b7d5beb2fecb1b0592fc534750370349c03e11be9b747ade55787ab10badcb1c41851a393c12275f072823f3cee584418e7818e07b99525ab51175215e64a9261bfec5f975b59df12cf3dcafd5f1847fee7ff0c0cca6d37fd207c79a6e7783ca1ed05478bf86c31caedd681c39406142b683a37936cf89dc935523c07943802d0f22366fa0bdb3160cd1656404dd3555c3b7760136f852da5ff14627b32ca6ef7e5531c38c62031565232d104d98b89181bb1621c3f1ae79172babe96d774c69f494648256c645f65929fe32126d3c1baf60a76d2160f289c9b5e0533d8f0dd84db8edcb39b54eb8e5c319b7b66d627c3e6fcacb2e92aa1c0bf77087a1cd1d946ac166f1c875d31d562b864543dc78f77a4e9a3c10decfec1b14ef50be39f9b1062d7c38a92a48ee0c2160230584ac5a2b1d79242e902f0d679036363d0c3ab805d7e846af54275b75670d2cf8da5048fa4d9cfd7d048afb2e94f4a124ebe7ab216e530d5f144c892f8c8d428f7459173f342b25a8ccc4c8eadf33ebc648733f4992e883751e7a7ac18e68e0c27ba088cae1307fbc970e285d55fbbfdfe0a0b6c77e7fa91633759ece51901f17748867f686bc2be94f95c9ed5e8109d56f273fcd4a762b2c0ba995397fc5c5386195395d18f19774574b43f8a1caa5e03120560950aabccaa902e133be6d54dd223028f5529106fc8ddf9b16cbb0a380066760c20265bdaf191355560a54df9757044619f960b35d69b9418a6f76d3c29dbaa61427e7310b1a9e260c13315be1388a5ceb97771ac2fff87842c835e66f0fcb8e5451d034204c50520d9ec30cee2a18997653003dc52fbde9a466acc67a50e1081ea8f09bb8880a2de771ec44d82835b7d9332cfe81c9e29201aa4d98f05a809a9c597d5737d01bcbf11ec302d14a99f1a76283542cd7693f9c46afb7456ba1bc8790daa6354a883b1c29f5d1a164609f26b84f3c4ff9b347a685ec0e86ab3ea7385aff7bb2ac5c3497556aba4a36b1edb370c3bceab5d83cfa6", 0x1000}, {&(0x7f0000002780)="8b89e945b93889245376d58256e15df832586f41d8f61e1b52d7362d289d610718401be8e27161d690fa344be43ebfe3c3897e92be82439af5d823a70f1f3c256e3c108da8e7bc7899350027b88a189310eb95a06bb9508920da457dbec767eeaef00d815c962b0c001b8ee3b6c8fec53d18bf9ee2f1cfec6da586c597e2674da0bce836aed54d8a3984d04053aabe0a2f3485b46b8e5017a78641542c6c29a8ed1e94be5556bc628cab7feb371cd431d9ca4bbb8158d9bf766ed836c2745001f0c029fd98fa922b84432ee96a963a89195b49bfa149e57aac035a6c010db1acd990f81fd89c59e508c82d2d423d87b72e", 0xf1}], 0x2, &(0x7f00000028c0)=[{0xc8, 0x3a, 0x8, "13102cd65fb80abf448cb6530a9bb534df2bab94159759c133539435fcaae111df5c033dc4e628d2878252abc41c472a8fd8509fc08354a530f6cfec980934f4db16d63786533a203404558f2bbaa36c72c23ec2d2e11cc25f01ed4d758b4463e91ba5164b2bab1785fa1a4eee806394153912b17f63aa6c06f3eafaccfa9ec000fe2cb425dfc53dccc07ea2fbe76ae5dcddbee41d87cdb90b2326ce9d7737c0e7e8e5d996c733de9e02c08ae70388422a3d31"}, {0x40, 0x119, 0x5, "ab6f9583c52d92b090d8849add857c8eb122f34332a27a588f2d9cd7e52762dd745436fddf972add334fab046efa4ee2"}, {0x68, 0x113, 0x9, "a884768331e847d11ccd8d6038a4ed748bac88844436655d6de128b9cbf1d5e0400111034a4ccf06b1a836e5c65d8fa5032488fc18e6bf493f2cf5a30c30306a1c97861d86252d7b0712f98c3a1246334b"}, {0xd0, 0x10d, 0x700000, "5f75efe062d95ed18ea75dfe4b27088c19a6e6b278c2d0cb6da15b1c7414572322ca33d7d2517c161ec59c2e7a2d9962d40c4396ee1e46b0395ea3c388aa46e46109d8c198a1490b06a70a4b19ce72c66f8932a45926f556024f54f8d37b7a02808368bfdc0507a6cbef30d82e3f1449e461d30307f0f8e6736d5ac1deec309282a77007830b4125948940e3ee8ab007657b27116af7a3311f13412d141ddf48c1a0c2acf53ca20e3eb46d4853c3f364e20e0a1021031d1f64a64da758"}, {0x80, 0x0, 0x14000000, "d1e8e3c98acf736c86553234b665403bc2912e86fed88b7ed08c5784e7ccfbeb06869c2c08ccc4019f4f4bb3686a03bf41f4b318c97e3dcee8d10f0473c273efc556e1ac1d7da402a6336c7413066dd2099361bf614d4dfa7be8746cb2dd4cfe5e5a39fb80f6a94c8583966ec340"}, {0x18, 0x84, 0x6, "950d2d50"}, {0x50, 0xf, 0x2, "b9eb6bf90f1fa72619067e830dcb866b3be1294289aea2beb5ea55befed3eb97a7746c867503cbf6d04e67eea97ef3ac0b7067fec80c127ec0"}, {0x18, 0x10d, 0x81, "abe4132760a2"}], 0x340}}, {{&(0x7f0000002c00)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002c80)="6c7b39083ccba9df2bd09e840f9dec1ce0114b4172f726a65893e933a688ed6320d2ed6e62d5aaddf9791f6e290fad282f1a3b95287eb1503a85d13792858437901f7999a08d552ac5532d077562e1a39ba99147b68d5d7eb505f0803b7bc5aea4b8cff0f0646572d6f693ce33b6f10a42a26a8a69669d8d306a0ca8c3e9cb53a72a27e080e338685fbea6b895885a3e93f76e0dcc5ef5f4766f06af96e994d577b5701578ca356f8102e1c29a1fdb1407df0e6643c9f04cde51d58ae1a430d710a370231077cbf98043dd448424f64a38f531bbe82dffa8100090f389fa5315bb81cd3ad28107", 0xe7}], 0x1, &(0x7f0000002dc0)=[{0x78, 0x114, 0xb, "968f1f7f883e830c1a814220deef88f58cfee8015c1d3823fb10a84a676a9bbe721ae7afdce0aaa3272d00cf9cfc48d8724db7c28b8c64c69c2f9034f0ccb723756d8aefb5c17c68c31a7082de2ff90a8cbb605c88ef57f72cd1dfe8cb6cbfe5dba04dbcb0"}], 0x78}}, {{&(0x7f0000002e40)=@pppoe={0x18, 0x0, {0x1, @multicast, 'veth0_to_hsr\x00'}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002ec0)}, {&(0x7f0000002f00)="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", 0x1000}], 0x2, &(0x7f0000003f40)=[{0x100, 0x1, 0xd94, "7bbb49d5667bcf32d5fc6ab658ab8593af5d6c1c6a6721412efa7824955e47e39aec5ca30e1f921a7722c5349b6d98f43f353e531fdaa2ddf3fc1b337789d7f9b5135d2388cfeade439ef8b66a5c111251b3e7e7f8277cac1f083ba04cbc7f5dc16110401bee86a8e68cd97dc0cc16f745dbf2760ac06a29ad2d071a604a888686b6ccb861ebed89c7e3c6b14ac724d29e6b9ef2c52ff037698b21998ca34e8b3cb3ce48fc398a3179fa3a960267febdd09e8e6d6fca3317d9cb165bddc9b4fd31628bbe5505e3d92eb21112c9a65350064b7d59a30b534ce91ca0e48374231f0bd244193cc2c7adcbf980605f20c227"}, {0xa8, 0x107, 0x5, "7d30de2a6e248fc870d3533a0786139b5740be15cf8677582064908dae285a0d642b53f92fe697ccba185f9ba680f8904805c625e32a5b8ef4159e41ad2fe75e8856507f108a6456f78b5b726e24c7f3ad8b99c07fe753f4a4ca82333ff5d5de8ead5aaf406ea7b09e86326adfef51fdac03c27b4826186d9c2a02eaf685e136a0637a38bca76da7878ef492a2d28c8b68663ffaf5fb8815"}], 0x1a8}}], 0x3, 0x8800) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00000041c0)=""/138, &(0x7f0000004280)=0x8a) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000004380)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x28, r3, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x68}}}}}, 0x28}}, 0x4001) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000004400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f00000044c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x38, r9, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$SIOCX25GDTEFACILITIES(r10, 0x89ea, &(0x7f0000004500)) 15.601209404s ago: executing program 3 (id=2278): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100020000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x64, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x4002}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}]}]}, 0x64}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x2d4, r7, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x134, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4d9b}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x4345113b3a802eaf}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x660}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_SEC_DEVKEY={0xec, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x64}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe74}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8a85}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2d4}}, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x820) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) socket$inet(0x2, 0x80006, 0x80000001) 15.60061859s ago: executing program 1 (id=2279): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100)=@srh={0x0, 0x0, 0x4, 0x0, 0x5}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x800, 0x3ff, 0xffff}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0a0000000200000000000000", 0x1c) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11000001}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x170, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x25}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x16}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x921}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6c6a4b2a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa98}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9e05}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa39}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe025}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20004091}, 0x20000090) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x8, 0x10, 0x5, 0x200}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r5], 0x80}}, 0x0) 15.556882112s ago: executing program 4 (id=2280): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf4, 0x2f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080), 0x4) (async) listen(r5, 0x0) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) (async) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) (async) r7 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) sendmsg$alg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000002800)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000002880)={0x0, @in={{0x2, 0x4e23, @remote}}, 0xff, 0x2, 0x8, 0x37415d63, 0xfffffc01}, &(0x7f0000002940)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000002980)={r11, 0x7d, "b139e7c2802a4b060aff4d070e456eb62450b66b5f4f183940b64360bf8c13c7384c29b8b84e24d8910faf35977372808f85010ef395e54dfb9e482d6fd055efada1dedc02bfd49bf341d002c1dcc246308165b6c76ebf7b93b7fe052cedf2c095e70b64a28667d8438510d65e564b26205519765e0ac3c1149e4e8548"}, &(0x7f0000002a40)=0x85) recvmmsg$unix(r0, &(0x7f00000026c0)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x3, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000740)=""/122, 0x7a}, {&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000980)=""/147, 0x93}, {&(0x7f0000000a40)=""/200, 0xc8}], 0x5, &(0x7f0000001b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001c80)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001d00)=""/182, 0xb6}, {&(0x7f0000001dc0)=""/216, 0xd8}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000001ec0)=""/229, 0xe5}, {&(0x7f0000001fc0)=""/230, 0xe6}], 0x5}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/150, 0x96}, {&(0x7f0000002280)=""/54, 0x36}, {&(0x7f00000022c0)=""/208, 0xd0}], 0x3}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/226, 0xe2}], 0x2, &(0x7f0000002640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x5, 0x80000000, &(0x7f0000002840)={r9, r10+60000000}) sendmsg$unix(r8, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8044010) (async) accept(r0, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) 15.531407664s ago: executing program 3 (id=2281): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000280)=0xfffff908, 0x4) ppoll(&(0x7f0000000080)=[{r4, 0x2040}], 0x1, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) socket$nl_netfilter(0x10, 0x3, 0xc) 15.425326976s ago: executing program 4 (id=2282): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}}, &(0x7f0000000000)='GPL\x00'}, 0x94) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) 15.407551913s ago: executing program 3 (id=2283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x800443d3, 0x20000002) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x2000000000000111, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_query, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x71e5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x71e5}, 0x8) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x3}]}, 0x18}}, 0x0) (async) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x3}]}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'xfrm0\x00', {0x1}, 0x4}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'xfrm0\x00', {0x1}, 0x4}) 15.370694903s ago: executing program 1 (id=2284): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4000000, 0x5, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x20048000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, '[}&@{}+\xb4\','}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, 'batadv_slave_1\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'sample\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'sample\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0c1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000040)=0x2002044) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000013c0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001440)={&(0x7f0000000340)="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", &(0x7f00000001c0)=""/117, &(0x7f0000000240)="03849c3e2a5025fb6e1471b0cbc13eef813398f36a60be736468fa470c885fd6af7a240ae4b93e6a6ac47faf5f5a24c209ec3fdd230c2d8f428a19eb68aac3b71a3ca90251c748813b34e7f5a324a2fb84887cbdc2461b904a89f6894983d38b2ea19748d1cb0343", &(0x7f0000001340)="788bf0a99e0bba2b36938733bed379d3f55a4256c80a59eff4554393757a13913640f6d4b19d82d010f5b92d0e832499a038514f79967a567c0005ea3e026074d1c8", 0x180000, r4, 0x4}, 0x38) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.257242195s ago: executing program 3 (id=2285): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@getae={0x54, 0x1f, 0x200, 0x70bd2d, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0xa, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x9, 0x3504}, [@policy_type={0xa, 0x10, {0x1}}, @extra_flags={0x8, 0x18, 0x7}]}, 0x54}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@getae={0x54, 0x1f, 0x200, 0x70bd2d, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0xa, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x9, 0x3504}, [@policy_type={0xa, 0x10, {0x1}}, @extra_flags={0x8, 0x18, 0x7}]}, 0x54}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) 15.186954444s ago: executing program 3 (id=2286): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) 15.155726335s ago: executing program 3 (id=2287): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac=@device_b, {0xd, 0xd3}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x48, "c8088583f6971f77ec63662e9682938b648a58d9d615812bd2be3b44e68c0cbd5e83921877462743e2e1db1eefa74e2c99fa87b47dc83d137ecd2c3d245d8d77172f2660db3a9ac9"}, {0xdd, 0x43, "5024f72eecfb7a652f61c598838e68c3fd4989cbc43b87fb1092110356e963b0913e6985af3e26e044adc00083a9f965e7186bab008a8732294c9f34e94259f17da3b0"}, {0xdd, 0xc3, "ff9d37627be93366c9a98e8bd11d4d369b9ffb39618e2b2a603104a4c788c7019fc021d81b896e1b051aa45dfca66337f93d7a1b20691e42ec91abe1dc6e000008929e421c77bafe89ed40bfdf633f02e80a24fb630066322bff0c32e70c08395da3cd40be6cbdc3a0bb5d09805557a937a019bbafb5f77689b3fdc71bb56ab2ac54f21785b4d32aa917f28f58e58a7bea301af6673208113d1a797d13e49646a8b62f23b0ddbd05c91f571b1b89c84655732168e906a8a9069b978ee79f6777d6cf8a"}, {0xdd, 0x78, "720cf10f95c3aba18dad6675585509b11075ec8034487ed0faf8fb821cf048a6735aaee3ce71fe0a608573eef0253320bc1c7afb9d09284abea7aa587ac963670fe202860cc48d04f1157b161c86b910f8ee02854de9857d41e15f2add9a98c981837722a819d54c56850ecd6b36778860763bddc11f620c"}, {0xdd, 0xef, "7ee1022e173651f2ac4e07dab5f9d152b03fc1f309773e937bc1605f2500944abd1b86d477b5c9e021d7180b9a6fb9fc6bbe0889151e9812c91d9a01af4f203ef90cfcea5a4098d1a6e17afd6eb41b31c732f33acaf2aa338c5dfea9075b770b492530491e865ac17c962764a1319ce8f031ae3fbcc29238d05eb414db8a955711e68fe438b79ebd2c714b80bb686ffd5ac621be47f1d6721fa61857360618053f4b6ed63583cfb13167c0553b2f7e8b13fa62178b885535ccd275c02aa45b0d276bb963479f8a48b71ffb969f62edce0b34b5632d73b8ee52ab03f27aff6b7aab78e21e3d9e60b200cfd7b54ab9c9"}, {0xdd, 0xe2, "ee9eeeb2e5340861129e848b7c66537a2b36fb325adc23f52ccb6396013dfdca8137175990427050fe094539f96e8a12baab266f40e82107927dac5c9b3445f77c1400a116fae4c69ea0d39c0f7a1d44da92f73023b2b6261a4064e7485db9152c65099d2d2a7d87bee9fd6fbdadcf0a4e6bf5c97c98744b3c61e90a448230458831af50b25aceae7e336dda8e3fb630f01afd80624e95dadf096c85c13570cd9544dcae4152baf48c00eb6e14c3ef724bd691719aed64aefefde1b1f0482036b2a1df46c0e92bae7aa5eb82d734ba37aa40d59152758ce7eefe8971f9ce2e8f55bf"}]}, 0x3cb) (async) syz_80211_inject_frame(&(0x7f0000000440)=@broadcast, &(0x7f0000000480)=@ctrl_frame=@rts={{}, {0x3fc}, @broadcast, @broadcast}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x67}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000640)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_a, @from_mac=@device_b, {0xb}}, 0xc4a, 0xf, @random=0x9, @val={0x1, 0x5, [{0x16, 0x1}, {0x30}, {0x12}, {0x3}, {0x1b, 0x1}]}, @void, [{0xdd, 0xe9, "0268c922d441fcca891ec80bb5bd748d77a9add2962ac7c2036d1493837a684babacac846d9b6d8dab972da62c41d7b717fe64bc47a79e89d62ecec8455c77911d677f2d9b783b8bc15a1726d610dcf5eb7c5f647476c2bdd977d94c8e6c2a5b5cffe8aec25227570366d460876d2f096903c772950cc0d7c9886c2c82ff7d7ff87cb8219ab59d207774c0fe561189b7944c4b8ff6a0a1ecbcbcacb791c0f35a9e2d9d0129788ea6addc3d4b80a73c24c7231b7e00ed5258bffdb199f91bcc1aa1fd73169ad0878db4b2a0f43ed850b1365b48495285714076a1ea7dd06ed3c18eb39ffd6ff21eef6b"}]}, 0x110) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x94e4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20054000}, 0x40000) syz_80211_inject_frame(&(0x7f00000008c0)=@broadcast, &(0x7f0000000900)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ffc}, @broadcast, @initial, @initial, {0xe, 0xff}, "", @value={0x0, 0x0, 0x1, 0x1, 0x8e}, @value=@ver_80211n={0x0, 0x9b8, 0x0, 0x2, 0x0, 0x0, 0x1}}, @random="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"}, 0x60b) (async) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001080)={@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e20, 0xfffffffb, @mcast2, 0x3}}}, {&(0x7f0000000f40)=""/213, 0xd5}, &(0x7f0000001040), 0x10}, 0xa0) syz_80211_inject_frame(&(0x7f0000001140)=@broadcast, &(0x7f0000001180)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x40}, @initial, @device_b, @device_a, {0x8}}, @random="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"}, 0x19b) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x48}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004880}, 0x20040851) (async) syz_80211_inject_frame(&(0x7f0000001500)=@device_b, &(0x7f0000001540)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @initial, {0x1, 0x4}}, @random="82c3ad28880977ebab6d5bf90175c50c0fee0b8070cd14dfd1ec65046bbc09fea3333042a427e92ff18a942d64fa59b35094c3861728dd8f41c0f5fb6b8f39b23775e7846eb36d74df6b27c182298a4e2bd9ca72223681d4dbd0309d6ccab3f779d55fe3060e52f8b98383fc25c1374193641466e184221abafe827681e07f89d4f07e0ba5f60be1e20071acaeb3f11b68bb74bc353b4794855453b202e4302cd51214a20a53e6c4649b08a321aa14f123d27749f3e26a2f5ab3a09dbcfa2c267c2a3164f4e84b64f18436754b6d9fe233224dff84145cb983c25b5caf194a09565bff85ffbcbe6f2cf9ce6591beadda"}, 0x108) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x17, 0x1, "cbc4efec96cab4a13610f7895c58b1bdd2a57c"}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x4000081) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000018, 0x4010, r0, 0xde20e000) (async) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000001780)="4a542d50c8376114688fa987e969fbeb525aaa4bc0e4ee20c85da97658f858d5cf47358624fca8797eace86ad9c534fdab711983af6b3a440772509471d4ebd91af8f305e3943d361e226e7dba8d8895c904f42e3efa93b5fc44f1393a14fab2618945e7b20fdf9027d12fb9bd0a7329b274688637378f9e497aaf6b82770740b455026fc9ab73b0f5d299110bc1f9685055785f26b35b513916f09302c5dabace3060bf65238ed37b881c8097b44d1212a2fec404ccfe58a995af79627e56e55ff2ec11b4d0af055dd3f5b2c3572d65c87571a2") (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f00000018c0)=@broadcast, &(0x7f0000001900)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_a, @random="671c14858742", {0x4, 0xff0}, @value=@ver_80211n={0x0, 0x3c58, 0x2, 0x0, 0x0, 0x3}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x8}, 0x2d, {0xbd, 0x6, @broadcast}}}}, 0x2a) (async) syz_80211_inject_frame(&(0x7f0000001940)=@device_b, &(0x7f0000001980)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xfb}, @broadcast, @broadcast, @random="02fe71c7de26", {0x9, 0x1}}, 0xaaa, @default, 0xd12b, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb1, 0x9}}, @void, @val={0x3c, 0x4, {0xcd, 0xf, 0x95, 0x3}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x8, 0x2, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xffff2847, 0x3}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x68}}, @val={0x76, 0x6, {0x1, 0xff, 0xd, 0x8}}, [{0xdd, 0x8a, "1cbc0b596e6f152f915ad3ca390a68e9b2ab32f66d64cbdfb8523f02064b5380771852842c40656d70fc8cb1bafab3c2052ef1b526fc51b4ebe285b545608e13561dbefec94b034c951ba2359230a1342b57e62c2cf322cf1aa82711e963f73397b5e85cea8804972b1f9a81776b47aba4c47b80b64ed31b6850cbeb0a013875a400c4994e4ec7207ce3"}]}, 0xf0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002200)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000021c0)={&(0x7f0000001ac0)={0x6e8, r1, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x116, 0x7f, [@ht={0x2d, 0x1a, {0x800, 0x0, 0x3, 0x0, {0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x2, 0x7}}, @random={0x8, 0xec, "dd15913da3abdae96716ce9ab0d6e4d3fef75c8b50bdf978a412db5cc939b1a20e856994bb4314f3f239a134490cc0dd5862fb096873fbfd799820d44dc3db4f2375a781234fe11895b7b3462a824d338043e0192f271a99a3c981c3203a123b187a84a3df63f168f041289b1d95aaf131b9af867471561d2cf9bc209aea22cb5eb944e3070d8a6a7fb50800bb43a45c4149aaccd31f736425109ab4c3fa0248e080d9376be9758e1ed6042b2e59c8ea0390b90008bd607b41a86610a601d79601caf73ff708e4f2584b70ee7c76155ecb1b62f4251d9b161e1a650db0dabf4c6ab3619e8e67ebb91d73f26a"}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x110, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x25, 0xf, [@rann={0x7e, 0x15, {{0x1}, 0x8, 0x5, @device_b, 0x4, 0x6, 0x6}}, @ibss={0x6, 0x2, 0x56}, @peer_mgmt={0x75, 0x4, {0x0, 0x7, @void, @void, @void}}]}, @NL80211_ATTR_BEACON_HEAD={0x47c, 0xe, {{{}, {0x1}, @broadcast, @device_a, @from_mac=@broadcast, {0x7, 0x8}}, 0x80000001, @random=0x1000, 0x509, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0xa3, {0x8, 0xd7, 0x2, "1de63fa9c0a62f58d2fceba01ab127318b08e76c228e9d5676c06bd0a2a9eef5f7ede04729b8ec6d1b2c73a3fc917d58939d51ad57600efe4b82a143ef5f1ced4a7007c560b87fa437fcfa773d60e60f159b723b334a728af6915cf9044ff3fc17a7fa203bf59afaccafb2b88a90c883b8f6fd81223269cd9ddd7ca3086cd8a724f0d2f6408f27f39803aa70a896c232cc33eea84b6ab7f63c882d403bc31aa3"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x7, 0x40}}, @val={0x76, 0x6, {0xb6, 0x6, 0x3c, 0x8}}, [{0xdd, 0xac, "c95958b204824afab8309d872303fc9c4fbdcab02f62b965974c63397e9342129e7986d84b8b63f97a9440b58fb5587e7930ebf7826c5baef799014595439749845451176989b46ac61479ac0a155598139e97ee1081d941fdc5c80e7a64186a14c9ce77e54d0f25157ea58ccf069b855deebba3437a9f7f09931ca391bd010a8849cf3227fcfbb400ce6877530afa5194cf393ddf285ee374a177ac38131800cd118d266c8e36042b9c6450"}, {0xdd, 0x7f, "9c1b49bccc85f99743ee3c71125100e06e3366bba0a6aadf3a65dcc6947805e0bec96a8d14bcade76cf3761232223f46c28fc2c48ed8922565b419056889c4fc09ede928e8a2790c8676266f17f1a158fdb77d48f2e2efb3f53e3196db4f78e52b4045efbe306cfeb81aad70a2909c197ca76216fd06a76d65d9e4bf9d661f"}, {0xdd, 0x51, "9c163011ff94e8255558ff24c146d7261d887276d65f3c19a55bb3cef30aff4d934d202ef4eeb588ad53226cb044ad6a0f8a3809c2a90bcc06ac343009016fe0d4359e198f3b051d035eedb688f308a18a"}, {0xdd, 0xa6, "d4f7f713a7e4c9fbf1cc00560aea13218718e9ff70d52ed80b8a9e8991cab17b400f6df90f13b2df8385a2f75e6e862abc82321cd296848b7ff4ea69cbfb755715c21bfce539f335836aad0c11e35ea91382865e56aebdd4082dd457cd15febd52701a392664bb7d8df63cfe18ef04c99badc972c0eeba663e23ec58a0cdd67341d01790c8392c475e0e6030b3c4ca04b8b02778f4b8032f60f7c3bc9ed75ce42a6d596e17b2"}, {0xdd, 0xd2, "1eae3663e18599ffa7a436650599b552de68747adee02aaca168f3bb73ebb805c8d88667fadfb8c52d87f841f5b2d6c9c6d358a54651a378efa7e525347726684d946b35bfb99ac3274158303f2bc8731c9fe867ad81297d89b59a5db8eea20e076c388c81e4cbfb83ee9115ec7a0c933b5154a822549cd6f1dffd791cdf432ea49d3d2080db3354820d32c21e8e17f8ed9a6cc5d554d43ae297b0c15f668b260551d8246f3eeff694cbaf1889cab1368ef2f6db430a5aa4c88254c7ce02c8cf5ac1a3910af5271b36e4bbb0d29dce958dc3"}, {0xdd, 0x8e, "5c93ffa0d865d710791456da3e36156d53d00b85bf5302da8b2c28cd41c7eb536b74e3f216043f883109101fc12e4ab29309cc9760cf8049d5be0348ae70faf1b917be655bbd3bcd8e5eb25bcc529d63815a3632178f62d2658d10037f56ce5addcf6cba6cb88f1c442bbcf40719486377bea1300a5556c8c51340e5f4f68132c6610728002518cda64aec4aad3b"}]}}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) (async, rerun: 64) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000002340), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000002600)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x945db38a0616477}, 0xc, &(0x7f00000025c0)={&(0x7f0000002400)={0x194, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "55c588d81bacf633cd819fb46c2074d6c32b4dc3e0c88e1a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e958094336171924ca5237fb0a5f1a447a12bfb9e2107d5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e652ab283f82955bf281ae0c16b2227596a7fde15e378c1"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "54bb4291dd381f86860d4188969873eaa39c5cc4e4adfa58"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5f1649901f8a2b636a9a33b9103554f5a85c8b9b3bf89d3a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f7173cee61702478556abffacdcb5b783c043391a1b10dfa"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x194}, 0x1, 0x0, 0x0, 0x44000}, 0x80) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000002740)=""/77, &(0x7f00000027c0)=0x4d) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000002a40)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002840)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x48000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf0}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffd}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x94, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x48c3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff80}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x810}, 0x5) syz_80211_inject_frame(&(0x7f0000002a80)=@broadcast, &(0x7f0000002ac0)=@ctrl_frame=@cts={{}, {0x2}, @device_b}, 0xa) 4.123955781s ago: executing program 32 (id=2193): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000040)={0xe09, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000100)={0x1f, @none}, 0x8) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, &(0x7f0000000140)=""/160, 0xa0, 0x40020100, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipmr_delroute={0x44, 0x19, 0x8, 0x70bd2b, 0x25dfdbfc, {0x80, 0x20, 0x0, 0x86, 0xfd, 0x0, 0xfe, 0x4, 0x800}, [@RTA_MARK={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_IIF={0x8}, @RTA_FLOW={0x8, 0xb, 0x8}, @RTA_OIF={0x8, 0x4, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004080}, 0x10) r7 = accept(r1, &(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000480)=0x80) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f00000004c0)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'veth1_macvtap\x00', 0x2}, 0x18) ioctl$PPPIOCSMRU(r7, 0x40047452, &(0x7f0000000540)=0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r9, 0x7b8e5b6b5c1f8bdd, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a59ed75a5449f5abb69e18ed0f"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x800) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000740)={'tunl0\x00'}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r7) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x198, r11, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x30}, 0x80) r14 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r14, &(0x7f0000000ac0)="1765b5208c7fd36e4a41d40e435e90b5160918dcc462eee724fa2f941769adbcd46cce2311bb4a65a8f69739c398f0de3475c399fff15ed24adf3c2f724cf308ad3db13dd04f20995ef9d1f04aedf699b2b3184b836b5f485ab374eaeef9be03ed98ad18b790663f926cd011ff13c7235baae2f2400332201bca22eefbcb51c0608a99a9fd1ec22500b07b3d483496e2cee2962246f1cc589034bbf1744d67b77afe84de", 0xa4, 0x4040000, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000bc0)={0x6, 'team_slave_1\x00', {0x8}, 0xa}) 4.07289768s ago: executing program 33 (id=2201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x8001, 0x0, [0x1, 0x8, 0x401, 0x5], &(0x7f00000000c0)}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) socket(0x28, 0x1, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x8001, 0x0, [0x1, 0x8, 0x401, 0x5], &(0x7f00000000c0)}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (async) socket(0x28, 0x1, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r4) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) (async) 69.544859ms ago: executing program 34 (id=2284): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4000000, 0x5, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x20048000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, '[}&@{}+\xb4\','}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, 'batadv_slave_1\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'sample\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'sample\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0c1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000040)=0x2002044) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000013c0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001440)={&(0x7f0000000340)="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", &(0x7f00000001c0)=""/117, &(0x7f0000000240)="03849c3e2a5025fb6e1471b0cbc13eef813398f36a60be736468fa470c885fd6af7a240ae4b93e6a6ac47faf5f5a24c209ec3fdd230c2d8f428a19eb68aac3b71a3ca90251c748813b34e7f5a324a2fb84887cbdc2461b904a89f6894983d38b2ea19748d1cb0343", &(0x7f0000001340)="788bf0a99e0bba2b36938733bed379d3f55a4256c80a59eff4554393757a13913640f6d4b19d82d010f5b92d0e832499a038514f79967a567c0005ea3e026074d1c8", 0x180000, r4, 0x4}, 0x38) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 35.526437ms ago: executing program 35 (id=2287): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac=@device_b, {0xd, 0xd3}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x48, "c8088583f6971f77ec63662e9682938b648a58d9d615812bd2be3b44e68c0cbd5e83921877462743e2e1db1eefa74e2c99fa87b47dc83d137ecd2c3d245d8d77172f2660db3a9ac9"}, {0xdd, 0x43, "5024f72eecfb7a652f61c598838e68c3fd4989cbc43b87fb1092110356e963b0913e6985af3e26e044adc00083a9f965e7186bab008a8732294c9f34e94259f17da3b0"}, {0xdd, 0xc3, "ff9d37627be93366c9a98e8bd11d4d369b9ffb39618e2b2a603104a4c788c7019fc021d81b896e1b051aa45dfca66337f93d7a1b20691e42ec91abe1dc6e000008929e421c77bafe89ed40bfdf633f02e80a24fb630066322bff0c32e70c08395da3cd40be6cbdc3a0bb5d09805557a937a019bbafb5f77689b3fdc71bb56ab2ac54f21785b4d32aa917f28f58e58a7bea301af6673208113d1a797d13e49646a8b62f23b0ddbd05c91f571b1b89c84655732168e906a8a9069b978ee79f6777d6cf8a"}, {0xdd, 0x78, "720cf10f95c3aba18dad6675585509b11075ec8034487ed0faf8fb821cf048a6735aaee3ce71fe0a608573eef0253320bc1c7afb9d09284abea7aa587ac963670fe202860cc48d04f1157b161c86b910f8ee02854de9857d41e15f2add9a98c981837722a819d54c56850ecd6b36778860763bddc11f620c"}, {0xdd, 0xef, "7ee1022e173651f2ac4e07dab5f9d152b03fc1f309773e937bc1605f2500944abd1b86d477b5c9e021d7180b9a6fb9fc6bbe0889151e9812c91d9a01af4f203ef90cfcea5a4098d1a6e17afd6eb41b31c732f33acaf2aa338c5dfea9075b770b492530491e865ac17c962764a1319ce8f031ae3fbcc29238d05eb414db8a955711e68fe438b79ebd2c714b80bb686ffd5ac621be47f1d6721fa61857360618053f4b6ed63583cfb13167c0553b2f7e8b13fa62178b885535ccd275c02aa45b0d276bb963479f8a48b71ffb969f62edce0b34b5632d73b8ee52ab03f27aff6b7aab78e21e3d9e60b200cfd7b54ab9c9"}, {0xdd, 0xe2, "ee9eeeb2e5340861129e848b7c66537a2b36fb325adc23f52ccb6396013dfdca8137175990427050fe094539f96e8a12baab266f40e82107927dac5c9b3445f77c1400a116fae4c69ea0d39c0f7a1d44da92f73023b2b6261a4064e7485db9152c65099d2d2a7d87bee9fd6fbdadcf0a4e6bf5c97c98744b3c61e90a448230458831af50b25aceae7e336dda8e3fb630f01afd80624e95dadf096c85c13570cd9544dcae4152baf48c00eb6e14c3ef724bd691719aed64aefefde1b1f0482036b2a1df46c0e92bae7aa5eb82d734ba37aa40d59152758ce7eefe8971f9ce2e8f55bf"}]}, 0x3cb) (async) syz_80211_inject_frame(&(0x7f0000000440)=@broadcast, &(0x7f0000000480)=@ctrl_frame=@rts={{}, {0x3fc}, @broadcast, @broadcast}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x67}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000640)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_a, @from_mac=@device_b, {0xb}}, 0xc4a, 0xf, @random=0x9, @val={0x1, 0x5, [{0x16, 0x1}, {0x30}, {0x12}, {0x3}, {0x1b, 0x1}]}, @void, [{0xdd, 0xe9, "0268c922d441fcca891ec80bb5bd748d77a9add2962ac7c2036d1493837a684babacac846d9b6d8dab972da62c41d7b717fe64bc47a79e89d62ecec8455c77911d677f2d9b783b8bc15a1726d610dcf5eb7c5f647476c2bdd977d94c8e6c2a5b5cffe8aec25227570366d460876d2f096903c772950cc0d7c9886c2c82ff7d7ff87cb8219ab59d207774c0fe561189b7944c4b8ff6a0a1ecbcbcacb791c0f35a9e2d9d0129788ea6addc3d4b80a73c24c7231b7e00ed5258bffdb199f91bcc1aa1fd73169ad0878db4b2a0f43ed850b1365b48495285714076a1ea7dd06ed3c18eb39ffd6ff21eef6b"}]}, 0x110) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x94e4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20054000}, 0x40000) syz_80211_inject_frame(&(0x7f00000008c0)=@broadcast, &(0x7f0000000900)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ffc}, @broadcast, @initial, @initial, {0xe, 0xff}, "", @value={0x0, 0x0, 0x1, 0x1, 0x8e}, @value=@ver_80211n={0x0, 0x9b8, 0x0, 0x2, 0x0, 0x0, 0x1}}, @random="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"}, 0x60b) (async) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001080)={@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e20, 0xfffffffb, @mcast2, 0x3}}}, {&(0x7f0000000f40)=""/213, 0xd5}, &(0x7f0000001040), 0x10}, 0xa0) syz_80211_inject_frame(&(0x7f0000001140)=@broadcast, &(0x7f0000001180)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x40}, @initial, @device_b, @device_a, {0x8}}, @random="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"}, 0x19b) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x48}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004880}, 0x20040851) (async) syz_80211_inject_frame(&(0x7f0000001500)=@device_b, &(0x7f0000001540)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @initial, {0x1, 0x4}}, @random="82c3ad28880977ebab6d5bf90175c50c0fee0b8070cd14dfd1ec65046bbc09fea3333042a427e92ff18a942d64fa59b35094c3861728dd8f41c0f5fb6b8f39b23775e7846eb36d74df6b27c182298a4e2bd9ca72223681d4dbd0309d6ccab3f779d55fe3060e52f8b98383fc25c1374193641466e184221abafe827681e07f89d4f07e0ba5f60be1e20071acaeb3f11b68bb74bc353b4794855453b202e4302cd51214a20a53e6c4649b08a321aa14f123d27749f3e26a2f5ab3a09dbcfa2c267c2a3164f4e84b64f18436754b6d9fe233224dff84145cb983c25b5caf194a09565bff85ffbcbe6f2cf9ce6591beadda"}, 0x108) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x17, 0x1, "cbc4efec96cab4a13610f7895c58b1bdd2a57c"}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x4000081) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000018, 0x4010, r0, 0xde20e000) (async) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000001780)="4a542d50c8376114688fa987e969fbeb525aaa4bc0e4ee20c85da97658f858d5cf47358624fca8797eace86ad9c534fdab711983af6b3a440772509471d4ebd91af8f305e3943d361e226e7dba8d8895c904f42e3efa93b5fc44f1393a14fab2618945e7b20fdf9027d12fb9bd0a7329b274688637378f9e497aaf6b82770740b455026fc9ab73b0f5d299110bc1f9685055785f26b35b513916f09302c5dabace3060bf65238ed37b881c8097b44d1212a2fec404ccfe58a995af79627e56e55ff2ec11b4d0af055dd3f5b2c3572d65c87571a2") (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f00000018c0)=@broadcast, &(0x7f0000001900)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_a, @random="671c14858742", {0x4, 0xff0}, @value=@ver_80211n={0x0, 0x3c58, 0x2, 0x0, 0x0, 0x3}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x8}, 0x2d, {0xbd, 0x6, @broadcast}}}}, 0x2a) (async) syz_80211_inject_frame(&(0x7f0000001940)=@device_b, &(0x7f0000001980)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xfb}, @broadcast, @broadcast, @random="02fe71c7de26", {0x9, 0x1}}, 0xaaa, @default, 0xd12b, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb1, 0x9}}, @void, @val={0x3c, 0x4, {0xcd, 0xf, 0x95, 0x3}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x8, 0x2, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xffff2847, 0x3}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x68}}, @val={0x76, 0x6, {0x1, 0xff, 0xd, 0x8}}, [{0xdd, 0x8a, "1cbc0b596e6f152f915ad3ca390a68e9b2ab32f66d64cbdfb8523f02064b5380771852842c40656d70fc8cb1bafab3c2052ef1b526fc51b4ebe285b545608e13561dbefec94b034c951ba2359230a1342b57e62c2cf322cf1aa82711e963f73397b5e85cea8804972b1f9a81776b47aba4c47b80b64ed31b6850cbeb0a013875a400c4994e4ec7207ce3"}]}, 0xf0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002200)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000021c0)={&(0x7f0000001ac0)={0x6e8, r1, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x116, 0x7f, [@ht={0x2d, 0x1a, {0x800, 0x0, 0x3, 0x0, {0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x2, 0x7}}, @random={0x8, 0xec, "dd15913da3abdae96716ce9ab0d6e4d3fef75c8b50bdf978a412db5cc939b1a20e856994bb4314f3f239a134490cc0dd5862fb096873fbfd799820d44dc3db4f2375a781234fe11895b7b3462a824d338043e0192f271a99a3c981c3203a123b187a84a3df63f168f041289b1d95aaf131b9af867471561d2cf9bc209aea22cb5eb944e3070d8a6a7fb50800bb43a45c4149aaccd31f736425109ab4c3fa0248e080d9376be9758e1ed6042b2e59c8ea0390b90008bd607b41a86610a601d79601caf73ff708e4f2584b70ee7c76155ecb1b62f4251d9b161e1a650db0dabf4c6ab3619e8e67ebb91d73f26a"}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x110, 0x91, "6e7b0036686af71aa157f181214a740b32853e238c3ea6f81f7dc258af995e6a154c5ce960cf2805dccd7e92a0125e1a60f015d6bf7b98de48db0fcf15eb097f39b06c1669a3872b2418d366ddbe1fb40a6a432c5062edcc866b42d0fb71d501309a38febdd00235dbbca29572727403f254a30bb2336e523080a0e45a3cf61f65f8b443c19fb36f1ad7319727208300231018dfbbc14f8c9f48c7af6d2fc68cc2d0ca0ec85e1d7a416ea7449640e875550695c745c50baa262e3b024ff4e093fa5ff2160a9be017b6b2720828e51fa23fd7e689530bd521818de5d5e56090c2f4eef490c115ef411063ad933bdfd81e7b3254ab58f248282644868013bac16ddca13935b8b54db16eaa794a"}, @NL80211_ATTR_BEACON_TAIL={0x25, 0xf, [@rann={0x7e, 0x15, {{0x1}, 0x8, 0x5, @device_b, 0x4, 0x6, 0x6}}, @ibss={0x6, 0x2, 0x56}, @peer_mgmt={0x75, 0x4, {0x0, 0x7, @void, @void, @void}}]}, @NL80211_ATTR_BEACON_HEAD={0x47c, 0xe, {{{}, {0x1}, @broadcast, @device_a, @from_mac=@broadcast, {0x7, 0x8}}, 0x80000001, @random=0x1000, 0x509, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0xa3, {0x8, 0xd7, 0x2, "1de63fa9c0a62f58d2fceba01ab127318b08e76c228e9d5676c06bd0a2a9eef5f7ede04729b8ec6d1b2c73a3fc917d58939d51ad57600efe4b82a143ef5f1ced4a7007c560b87fa437fcfa773d60e60f159b723b334a728af6915cf9044ff3fc17a7fa203bf59afaccafb2b88a90c883b8f6fd81223269cd9ddd7ca3086cd8a724f0d2f6408f27f39803aa70a896c232cc33eea84b6ab7f63c882d403bc31aa3"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x7, 0x40}}, @val={0x76, 0x6, {0xb6, 0x6, 0x3c, 0x8}}, [{0xdd, 0xac, "c95958b204824afab8309d872303fc9c4fbdcab02f62b965974c63397e9342129e7986d84b8b63f97a9440b58fb5587e7930ebf7826c5baef799014595439749845451176989b46ac61479ac0a155598139e97ee1081d941fdc5c80e7a64186a14c9ce77e54d0f25157ea58ccf069b855deebba3437a9f7f09931ca391bd010a8849cf3227fcfbb400ce6877530afa5194cf393ddf285ee374a177ac38131800cd118d266c8e36042b9c6450"}, {0xdd, 0x7f, "9c1b49bccc85f99743ee3c71125100e06e3366bba0a6aadf3a65dcc6947805e0bec96a8d14bcade76cf3761232223f46c28fc2c48ed8922565b419056889c4fc09ede928e8a2790c8676266f17f1a158fdb77d48f2e2efb3f53e3196db4f78e52b4045efbe306cfeb81aad70a2909c197ca76216fd06a76d65d9e4bf9d661f"}, {0xdd, 0x51, "9c163011ff94e8255558ff24c146d7261d887276d65f3c19a55bb3cef30aff4d934d202ef4eeb588ad53226cb044ad6a0f8a3809c2a90bcc06ac343009016fe0d4359e198f3b051d035eedb688f308a18a"}, {0xdd, 0xa6, "d4f7f713a7e4c9fbf1cc00560aea13218718e9ff70d52ed80b8a9e8991cab17b400f6df90f13b2df8385a2f75e6e862abc82321cd296848b7ff4ea69cbfb755715c21bfce539f335836aad0c11e35ea91382865e56aebdd4082dd457cd15febd52701a392664bb7d8df63cfe18ef04c99badc972c0eeba663e23ec58a0cdd67341d01790c8392c475e0e6030b3c4ca04b8b02778f4b8032f60f7c3bc9ed75ce42a6d596e17b2"}, {0xdd, 0xd2, "1eae3663e18599ffa7a436650599b552de68747adee02aaca168f3bb73ebb805c8d88667fadfb8c52d87f841f5b2d6c9c6d358a54651a378efa7e525347726684d946b35bfb99ac3274158303f2bc8731c9fe867ad81297d89b59a5db8eea20e076c388c81e4cbfb83ee9115ec7a0c933b5154a822549cd6f1dffd791cdf432ea49d3d2080db3354820d32c21e8e17f8ed9a6cc5d554d43ae297b0c15f668b260551d8246f3eeff694cbaf1889cab1368ef2f6db430a5aa4c88254c7ce02c8cf5ac1a3910af5271b36e4bbb0d29dce958dc3"}, {0xdd, 0x8e, "5c93ffa0d865d710791456da3e36156d53d00b85bf5302da8b2c28cd41c7eb536b74e3f216043f883109101fc12e4ab29309cc9760cf8049d5be0348ae70faf1b917be655bbd3bcd8e5eb25bcc529d63815a3632178f62d2658d10037f56ce5addcf6cba6cb88f1c442bbcf40719486377bea1300a5556c8c51340e5f4f68132c6610728002518cda64aec4aad3b"}]}}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) (async, rerun: 64) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000002340), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000002600)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x945db38a0616477}, 0xc, &(0x7f00000025c0)={&(0x7f0000002400)={0x194, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "55c588d81bacf633cd819fb46c2074d6c32b4dc3e0c88e1a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e958094336171924ca5237fb0a5f1a447a12bfb9e2107d5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e652ab283f82955bf281ae0c16b2227596a7fde15e378c1"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "54bb4291dd381f86860d4188969873eaa39c5cc4e4adfa58"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5f1649901f8a2b636a9a33b9103554f5a85c8b9b3bf89d3a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f7173cee61702478556abffacdcb5b783c043391a1b10dfa"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x194}, 0x1, 0x0, 0x0, 0x44000}, 0x80) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000002740)=""/77, &(0x7f00000027c0)=0x4d) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000002a40)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002840)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x48000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf0}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffd}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x94, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x48c3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff80}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x810}, 0x5) syz_80211_inject_frame(&(0x7f0000002a80)=@broadcast, &(0x7f0000002ac0)=@ctrl_frame=@cts={{}, {0x2}, @device_b}, 0xa) 0s ago: executing program 36 (id=2282): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}}, &(0x7f0000000000)='GPL\x00'}, 0x94) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) kernel console output (not intermixed with test programs): own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 142.478379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.490612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.503202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.515540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.529517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.542303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.554725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.188236][ T7571] bond_slave_0: left promiscuous mode [ 145.234001][ T7571] bond_slave_1: left promiscuous mode [ 145.297702][ T7571] bond0: entered promiscuous mode [ 145.315479][ T7571] bond_slave_0: entered promiscuous mode [ 145.346658][ T7571] bond_slave_1: entered promiscuous mode [ 145.347116][ T9] IPVS: starting estimator thread 0... [ 145.455223][ T7608] IPVS: using max 27 ests per chain, 64800 per kthread [ 145.471225][ T7611] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 145.508358][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 145.713903][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 146.163128][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'. [ 146.207764][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 146.427300][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 146.428734][ T7638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'. [ 146.481944][ T7638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'. [ 146.613013][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 146.873359][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 146.939777][ T7644] netlink: 'syz.0.450': attribute type 1 has an invalid length. [ 146.972840][ T7644] netlink: 232 bytes leftover after parsing attributes in process `syz.0.450'. [ 147.372163][ T7654] netlink: 'syz.4.454': attribute type 83 has an invalid length. [ 147.445016][ C1] net_ratelimit: 9753 callbacks suppressed [ 147.445034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.463575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.475997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.488850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 147.501366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 147.514133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 147.526819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.539209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.551936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.564256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.635103][ T7659] sock: sock_timestamping_bind_phc: sock not bind to device [ 148.054269][ T7682] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 148.125596][ T7682] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 148.568119][ T7696] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 148.648554][ T7698] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 149.040050][ T7704] geneve2: entered promiscuous mode [ 149.784911][ T7721] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 150.143149][ T7734] IPv6: Can't replace route, no match found [ 150.258650][ T7734] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 150.644186][ T7758] __nla_validate_parse: 10 callbacks suppressed [ 150.644205][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 150.693929][ T7743] batman_adv: batadv0: Adding interface: dummy0 [ 150.704114][ T7743] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.750574][ T7743] batman_adv: batadv0: Interface activated: dummy0 [ 151.316436][ T7770] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 151.362445][ T7770] netlink: 224 bytes leftover after parsing attributes in process `syz.4.486'. [ 151.637849][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 152.454709][ C1] net_ratelimit: 8615 callbacks suppressed [ 152.454727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.459853][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 152.461308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.494564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.507653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.520572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.533194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.545023][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 152.545758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.566525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 152.579203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 152.592383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 153.069887][ T7813] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 153.444180][ T7822] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.448504][ T7849] IPVS: length: 127 != 8 [ 154.737261][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.509'. [ 154.798735][ T7861] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 154.884129][ T7861] netlink: 140 bytes leftover after parsing attributes in process `syz.3.510'. [ 154.908738][ T7861] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 155.083674][ T7868] netlink: 'syz.4.512': attribute type 2 has an invalid length. [ 155.222606][ T7876] netlink: 'syz.3.516': attribute type 2 has an invalid length. [ 155.269199][ T7880] IPVS: length: 225 != 8 [ 156.486594][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 157.464638][ C1] net_ratelimit: 8077 callbacks suppressed [ 157.464663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 157.483200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.495573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.508326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.520972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.523883][ T7924] macvtap1: entered promiscuous mode [ 157.533760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.534484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.564389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.576762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.589123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.604657][ T7924] vlan0: entered promiscuous mode [ 157.622677][ T7924] macvtap1: entered allmulticast mode [ 157.653236][ T7924] vlan0: entered allmulticast mode [ 157.668631][ T7924] veth0_vlan: entered allmulticast mode [ 157.697797][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 157.725827][ T7926] macvtap2: entered promiscuous mode [ 157.776234][ T7926] macvtap2: entered allmulticast mode [ 158.039887][ T7939] netlink: 'syz.1.532': attribute type 5 has an invalid length. [ 158.080336][ T7939] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.532'. [ 158.427522][ T7928] vlan2: entered promiscuous mode [ 158.448850][ T7928] bridge0: entered promiscuous mode [ 158.603362][ T7949] tap0: tun_chr_ioctl cmd 1074025676 [ 158.654616][ T7949] tap0: owner set to 0 [ 158.996053][ T7953] veth3: entered promiscuous mode [ 159.033000][ T7953] veth3: entered allmulticast mode [ 159.514696][ T7959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.895871][ T7984] netlink: 224 bytes leftover after parsing attributes in process `syz.0.547'. [ 160.036897][ T7959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.061722][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 160.218659][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 160.271086][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 160.327463][ T7993] bridge_slave_1: left allmulticast mode [ 160.378306][ T7993] bridge_slave_1: left promiscuous mode [ 160.434247][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.531318][ T7993] bridge_slave_0: left allmulticast mode [ 160.559294][ T7993] bridge_slave_0: left promiscuous mode [ 160.593046][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.359933][ T7959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.589771][ T7959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.770077][ T8011] syzkaller1: entered promiscuous mode [ 161.820699][ T8011] syzkaller1: entered allmulticast mode [ 161.888407][ T8017] tap0: tun_chr_ioctl cmd 1074025677 [ 161.927981][ T8017] tap0: linktype set to 65534 [ 162.024185][ T8025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'. [ 162.083477][ T8025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'. [ 162.374835][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.474559][ C1] net_ratelimit: 9515 callbacks suppressed [ 162.474577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.492774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.505174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 162.517618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 162.518950][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.530529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 162.550858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.563328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.576157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.588543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.601637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.916954][ T7167] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.993772][ T7167] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.469242][ T8058] netlink: 252 bytes leftover after parsing attributes in process `syz.4.566'. [ 163.831480][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 163.912412][ T8064] netlink: 'syz.0.569': attribute type 20 has an invalid length. [ 164.196213][ T8072] netlink: 44 bytes leftover after parsing attributes in process `syz.4.573'. [ 164.273227][ T8072] netlink: 21 bytes leftover after parsing attributes in process `syz.4.573'. [ 164.340904][ T8072] netlink: 21 bytes leftover after parsing attributes in process `syz.4.573'. [ 164.793044][ T8083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.578'. [ 164.899402][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.578'. [ 164.981160][ T8093] netlink: 'syz.3.578': attribute type 7 has an invalid length. [ 165.007496][ T8093] netlink: 'syz.3.578': attribute type 8 has an invalid length. [ 165.066603][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 166.019703][ T3215] IPVS: starting estimator thread 0... [ 166.214626][ T8123] IPVS: using max 26 ests per chain, 62400 per kthread [ 167.136849][ T8149] __nla_validate_parse: 3 callbacks suppressed [ 167.137098][ T8149] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.597'. [ 167.484728][ C1] net_ratelimit: 9032 callbacks suppressed [ 167.484747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 167.503266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.515665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.528479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.540907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.553672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.566439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.579177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.591593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.604147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.618629][ T8158] wg1 speed is unknown, defaulting to 1000 [ 167.698261][ T8158] wg1 speed is unknown, defaulting to 1000 [ 167.721839][ T8160] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 167.817837][ T8158] wg1 speed is unknown, defaulting to 1000 [ 168.021488][ T8169] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 168.074756][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'. [ 168.159674][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 168.490831][ T8169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.718501][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.608'. [ 169.949878][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.999904][ T8213] Driver unsupported XDP return value 0 on prog (id 118) dev N/A, expect packet loss! [ 170.031430][ T8158] infiniband syz0: set active [ 170.038187][ T5944] wg1 speed is unknown, defaulting to 1000 [ 170.095608][ T8221] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.615'. [ 170.107608][ T8158] infiniband syz0: added wg1 [ 170.182894][ T8158] syz0: rxe_create_cq: returned err = -12 [ 170.251941][ T8158] infiniband syz0: Couldn't create ib_mad CQ [ 170.263145][ T8221] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 170.317510][ T8158] infiniband syz0: Couldn't open port 1 [ 170.378186][ T8227] netlink: 'syz.0.619': attribute type 11 has an invalid length. [ 170.478022][ T8227] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'. [ 170.551817][ T8227] netlink: 72 bytes leftover after parsing attributes in process `syz.0.619'. [ 170.603740][ T8158] RDS/IB: syz0: added [ 170.647934][ T8158] smc: adding ib device syz0 with port count 1 [ 170.708670][ T8158] smc: ib device syz0 port 1 has pnetid [ 170.831066][ T3215] wg1 speed is unknown, defaulting to 1000 [ 170.882152][ T8158] wg1 speed is unknown, defaulting to 1000 [ 170.920787][ T8239] syz.1.622 (8239) used obsolete PPPIOCDETACH ioctl [ 171.219597][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.624'. [ 171.680598][ T8251] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 172.494671][ C1] net_ratelimit: 9429 callbacks suppressed [ 172.494689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.513287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.526639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.539043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.551434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.563811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 172.576244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 172.589043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 172.601728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.614140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.076075][ T8290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.636'. [ 173.103328][ T8158] wg1 speed is unknown, defaulting to 1000 [ 173.192309][ T8295] syz_tun: entered allmulticast mode [ 173.464007][ T8295] syz_tun: left allmulticast mode [ 173.985651][ T8314] tc_dump_action: action bad kind [ 174.296658][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 174.521079][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 174.542635][ T8328] netlink: 'syz.0.645': attribute type 4 has an invalid length. [ 174.686805][ T61] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.705348][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 174.721590][ T2997] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.759027][ T8158] wg1 speed is unknown, defaulting to 1000 [ 174.766962][ T2997] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.826522][ T2997] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.678065][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 175.802278][ T8361] netlink: 256 bytes leftover after parsing attributes in process `syz.2.654'. [ 176.260333][ T8158] wg1 speed is unknown, defaulting to 1000 [ 177.504866][ C1] net_ratelimit: 8971 callbacks suppressed [ 177.504885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.523778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.536213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.548659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 177.561157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 177.574225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 177.587099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.599549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.612553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.624967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.287813][ T8391] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 178.306411][ T8158] wg1 speed is unknown, defaulting to 1000 [ 178.313704][ T8399] tipc: Started in network mode [ 178.323913][ T8399] tipc: Node identity 080211, cluster identity 4711 [ 178.373875][ T8399] tipc: Enabled bearer , priority 0 [ 178.422528][ T8397] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 178.465970][ T8397] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 178.538498][ T8398] 8021q: VLANs not supported on gre0 [ 178.546227][ T8397] tipc: Resetting bearer [ 178.624843][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 178.633650][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 179.060274][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 179.120519][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 179.386154][ T3215] tipc: Node number set to 134353152 [ 180.239550][ T8440] netlink: 'syz.4.676': attribute type 4 has an invalid length. [ 180.775500][ T8448] netlink: 240 bytes leftover after parsing attributes in process `syz.1.679'. [ 180.979821][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 181.200894][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 181.258228][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 181.258707][ T8459] netlink: 'syz.1.684': attribute type 7 has an invalid length. [ 181.318379][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.685'. [ 181.333847][ T8469] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 182.290495][ T8494] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.694'. [ 182.379958][ T8496] tipc: Started in network mode [ 182.418639][ T8496] tipc: Node identity 3e26d79e365b, cluster identity 4711 [ 182.477465][ T8496] tipc: Enabled bearer , priority 0 [ 182.514572][ C1] net_ratelimit: 8863 callbacks suppressed [ 182.514590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 182.533209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.543833][ T8498] syzkaller0: entered promiscuous mode [ 182.545792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.546568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.575755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.588790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.602149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.614906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.621169][ T8498] syzkaller0: entered allmulticast mode [ 182.627329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.645193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.205440][ T8493] tipc: Resetting bearer [ 183.459964][ T8493] tipc: Disabling bearer [ 183.707792][ T8506] wg1 speed is unknown, defaulting to 1000 [ 184.493452][ T8550] __nla_validate_parse: 2 callbacks suppressed [ 184.493471][ T8550] netlink: 52 bytes leftover after parsing attributes in process `syz.3.707'. [ 184.590282][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 184.634249][ T8556] netlink: 'syz.4.708': attribute type 4 has an invalid length. [ 184.644717][ T8550] bridge_slave_1: left allmulticast mode [ 184.667139][ T8550] bridge_slave_1: left promiscuous mode [ 184.687220][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.757856][ T8550] bridge_slave_0: left allmulticast mode [ 184.774587][ T8550] bridge_slave_0: left promiscuous mode [ 184.801106][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.037222][ T8561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.709'. [ 186.193336][ T8586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.714'. [ 186.259008][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.714'. [ 186.567076][ T8563] netlink: 40 bytes leftover after parsing attributes in process `syz.4.711'. [ 186.659948][ T8563] netlink: 83 bytes leftover after parsing attributes in process `syz.4.711'. [ 186.851257][ T8599] nbd: must specify at least one socket [ 187.524540][ C1] net_ratelimit: 8328 callbacks suppressed [ 187.524558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 187.542826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 187.551693][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.724'. [ 187.555823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 187.576714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.589139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.601998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.614473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.627442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.640277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.653034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.887932][ T8626] netlink: 576 bytes leftover after parsing attributes in process `syz.4.726'. [ 190.342016][ T8633] netlink: 'syz.4.728': attribute type 12 has an invalid length. [ 190.404736][ T8632] netlink: 'syz.3.729': attribute type 21 has an invalid length. [ 190.452523][ T8636] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 190.460189][ T8632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.729'. [ 190.967958][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 191.174912][ T8644] wg1 speed is unknown, defaulting to 1000 [ 191.407009][ T8659] netlink: 'syz.1.737': attribute type 5 has an invalid length. [ 191.598439][ T8663] netlink: 216 bytes leftover after parsing attributes in process `syz.0.740'. [ 191.660473][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 191.897095][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 191.977827][ T8673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 192.047354][ T8663] veth0_macvtap: left promiscuous mode [ 192.535106][ C1] net_ratelimit: 8901 callbacks suppressed [ 192.535124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.554014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.566817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.579295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.591719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.604166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 192.616615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 192.629617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 192.642197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.654694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.743942][ T8674] veth0: entered promiscuous mode [ 192.784858][ T8675] veth0: left promiscuous mode [ 193.292414][ T8700] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 193.376002][ T8704] netlink: 184 bytes leftover after parsing attributes in process `syz.4.749'. [ 193.392878][ T8704] xt_socket: unknown flags 0xd0 [ 194.319984][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.569769][ T8728] netlink: 'syz.0.756': attribute type 3 has an invalid length. [ 194.653242][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 194.713436][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.757'. [ 195.145370][ T8742] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 195.356255][ T8730] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 195.395824][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.761'. [ 195.415861][ T8730] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 195.559041][ T8746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.573725][ T8746] bond1: (slave bond2): making interface the new active one [ 195.582296][ T8746] bond1: (slave bond2): Enslaving as an active interface with an up link [ 195.703633][ T8742] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 195.771760][ T8752] C: renamed from lo (while UP) [ 195.807869][ T5235] udevd[5235]: worker [7523] terminated by signal 33 (Unknown signal 33) [ 195.819355][ T5235] udevd[5235]: worker [7523] failed while handling '/devices/virtual/block/loop2' [ 195.935607][ T8747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.272778][ T8765] vlan0: entered promiscuous mode [ 196.576321][ T8776] netlink: 192 bytes leftover after parsing attributes in process `syz.4.770'. [ 196.650574][ T8782] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20001 [ 196.688792][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 197.047528][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.776'. [ 197.142179][ T8787] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.170547][ T8787] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.520222][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 197.542310][ T8787] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.552651][ C1] net_ratelimit: 8658 callbacks suppressed [ 197.552671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.553307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.573676][ T8787] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.582939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.583234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.617505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 197.629931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 197.642867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 197.655649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.668061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.680896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.959772][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 198.018930][ T8787] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.079004][ T8787] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.438146][ T8787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.490575][ T8787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.638389][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 198.823972][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 198.834269][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 198.878054][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 199.534241][ T8836] virtio_net virtio1 eth0: entered promiscuous mode [ 199.600191][ T8836] ifb1: entered promiscuous mode [ 199.625360][ T8836] debugfs: 'hsr0' already exists in 'hsr' [ 199.640588][ T8836] Cannot create hsr debugfs directory [ 199.964716][ T8852] block nbd0: not configured, cannot reconfigure [ 200.133974][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.176116][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.385242][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.447556][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.689275][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.758823][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.969583][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.028187][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.181024][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.512845][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 201.519150][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 201.526575][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.536677][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 201.603917][ T8895] __nla_validate_parse: 4 callbacks suppressed [ 201.603935][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 201.792931][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 201.907615][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 201.917234][ T8897] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 202.061663][ T8897] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 202.084179][ T8897] gretap2: entered promiscuous mode [ 202.112967][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 202.115191][ T8897] gretap2: entered allmulticast mode [ 202.554423][ C1] net_ratelimit: 8724 callbacks suppressed [ 202.554442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.568253][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 202.573100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.593743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.606043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.618390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.630744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 202.643185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 202.655946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 202.668678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.681100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 202.704015][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 202.815358][ T2997] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.827330][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 202.846353][ T2997] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.904602][ T2997] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.948102][ T2997] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.983958][ T8937] netlink: 6 bytes leftover after parsing attributes in process `syz.2.813'. [ 203.460715][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.815'. [ 203.859062][ T8959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 203.881590][ T8956] geneve2: entered promiscuous mode [ 203.912162][ T8956] geneve2: entered allmulticast mode [ 204.190846][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 204.321648][ T8960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.359903][ T8960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.686124][ T8970] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 204.725963][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 204.793291][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 205.754706][ T9004] netlink: 'syz.3.830': attribute type 39 has an invalid length. [ 207.564536][ C1] net_ratelimit: 10677 callbacks suppressed [ 207.564556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.583195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.595746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.608596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.620822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.633179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.645656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 207.658444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 207.671261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 207.683950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.963571][ T8998] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 207.998856][ T8998] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 208.120741][ T9017] __nla_validate_parse: 9 callbacks suppressed [ 208.120760][ T9017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.833'. [ 208.186390][ T9019] netlink: 'syz.0.834': attribute type 10 has an invalid length. [ 212.574366][ C1] net_ratelimit: 15088 callbacks suppressed [ 212.574386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.592999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.606164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.618514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.630866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.643207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 212.655519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 212.668146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 212.680527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.692843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 213.013466][ T9004] syz_tun (unregistering): left allmulticast mode [ 213.237550][ T9027] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 213.300900][ T9027] netlink: 244 bytes leftover after parsing attributes in process `syz.2.835'. [ 213.800738][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 214.656985][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'. [ 214.671589][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'. [ 214.682572][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'. [ 214.698634][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'. [ 214.969553][ T8960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.029194][ T8960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.054474][ T8960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 215.146452][ T9059] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 215.401502][ T9059] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.605726][ T9074] netlink: 260 bytes leftover after parsing attributes in process `syz.0.845'. [ 215.623362][ T8960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.663216][ T8960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.692963][ T9077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.847'. [ 215.717357][ T8960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 215.738828][ T9077] netlink: 43 bytes leftover after parsing attributes in process `syz.2.847'. [ 215.777901][ T9077] netlink: 'syz.2.847': attribute type 5 has an invalid length. [ 215.819618][ T9077] netlink: 43 bytes leftover after parsing attributes in process `syz.2.847'. [ 216.158196][ T8960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.247664][ T8960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.316889][ T8960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 216.357216][ T9093] syz.1.851: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 216.453026][ T9089] netlink: 'syz.0.850': attribute type 4 has an invalid length. [ 216.466421][ T9093] CPU: 0 UID: 0 PID: 9093 Comm: syz.1.851 Not tainted syzkaller #0 PREEMPT(full) [ 216.466452][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.466469][ T9093] Call Trace: [ 216.466477][ T9093] [ 216.466485][ T9093] dump_stack_lvl+0x189/0x250 [ 216.466514][ T9093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.466534][ T9093] ? __pfx__printk+0x10/0x10 [ 216.466555][ T9093] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.466575][ T9093] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.466596][ T9093] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 216.466618][ T9093] warn_alloc+0x214/0x310 [ 216.466642][ T9093] ? stack_depot_save_flags+0x40/0x860 [ 216.466668][ T9093] ? __pfx_warn_alloc+0x10/0x10 [ 216.466692][ T9093] ? kasan_save_track+0x4f/0x80 [ 216.466712][ T9093] ? xskq_create+0x56/0x170 [ 216.466727][ T9093] ? xsk_init_queue+0xb0/0x110 [ 216.466740][ T9093] ? xsk_setsockopt+0x4dc/0x8d0 [ 216.466760][ T9093] ? do_sock_setsockopt+0x17c/0x1b0 [ 216.466795][ T9093] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 216.466812][ T9093] ? do_syscall_64+0xfa/0x3b0 [ 216.466829][ T9093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.466853][ T9093] __vmalloc_node_range_noprof+0x125/0x12f0 [ 216.466906][ T9093] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 216.466934][ T9093] ? __kasan_kmalloc+0x93/0xb0 [ 216.466958][ T9093] vmalloc_user_noprof+0xad/0xf0 [ 216.466980][ T9093] ? xskq_create+0xbf/0x170 [ 216.466997][ T9093] xskq_create+0xbf/0x170 [ 216.467016][ T9093] xsk_init_queue+0xb0/0x110 [ 216.467035][ T9093] xsk_setsockopt+0x4dc/0x8d0 [ 216.467060][ T9093] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.467082][ T9093] ? __pfx_aa_sk_perm+0x10/0x10 [ 216.467109][ T9093] ? aa_sock_opt_perm+0xff/0x1b0 [ 216.467129][ T9093] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 216.467153][ T9093] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.467176][ T9093] do_sock_setsockopt+0x17c/0x1b0 [ 216.467201][ T9093] __x64_sys_setsockopt+0x13f/0x1b0 [ 216.467226][ T9093] do_syscall_64+0xfa/0x3b0 [ 216.467243][ T9093] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.467264][ T9093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.467280][ T9093] ? clear_bhb_loop+0x60/0xb0 [ 216.467301][ T9093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.467317][ T9093] RIP: 0033:0x7f18bbb8ec29 [ 216.467334][ T9093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.467347][ T9093] RSP: 002b:00007f18bc98e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.467365][ T9093] RAX: ffffffffffffffda RBX: 00007f18bbdd5fa0 RCX: 00007f18bbb8ec29 [ 216.467378][ T9093] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 216.467388][ T9093] RBP: 00007f18bbc11e41 R08: 0000000000000004 R09: 0000000000000000 [ 216.467398][ T9093] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.467408][ T9093] R13: 00007f18bbdd6038 R14: 00007f18bbdd5fa0 R15: 00007ffc5f7445d8 [ 216.467437][ T9093] [ 216.467449][ T9093] Mem-Info: [ 216.885424][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 216.980768][ T9105] netem: incorrect ge model size [ 217.001816][ T9105] netem: change failed [ 217.045537][ T9093] active_anon:4766 inactive_anon:0 isolated_anon:0 [ 217.045537][ T9093] active_file:2564 inactive_file:39907 isolated_file:0 [ 217.045537][ T9093] unevictable:768 dirty:32 writeback:0 [ 217.045537][ T9093] slab_reclaimable:10666 slab_unreclaimable:101289 [ 217.045537][ T9093] mapped:28994 shmem:1366 pagetables:1012 [ 217.045537][ T9093] sec_pagetables:0 bounce:0 [ 217.045537][ T9093] kernel_misc_reclaimable:0 [ 217.045537][ T9093] free:1321362 free_pcp:16764 free_cma:0 [ 217.153398][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.183055][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 217.202728][ T9093] Node 0 active_anon:19164kB inactive_anon:0kB active_file:10256kB inactive_file:159428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115976kB dirty:128kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11664kB pagetables:4020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.274767][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.356282][ T9112] netlink: 'syz.3.857': attribute type 22 has an invalid length. [ 217.367997][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.388019][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 217.404491][ T9093] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.464477][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 217.517049][ T9112] netlink: 'syz.3.857': attribute type 22 has an invalid length. [ 217.566018][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.584940][ C1] net_ratelimit: 10920 callbacks suppressed [ 217.584963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.586535][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.591431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.611398][ T9093] Node 0 [ 217.623554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.638934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 217.639445][ T9125] openvswitch: netlink: Key type 85 is out of range max 32 [ 217.651374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 217.671282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 217.671275][ T9093] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.671320][ T9093] lowmem_reserve[]: [ 217.683895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.718411][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.728450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 217.748905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.831600][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.858489][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.885084][ T9093] 0 2497 2499 2499 2499 [ 217.904610][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 217.916064][ T9093] Node 0 DMA32 free:1389492kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18712kB inactive_anon:0kB active_file:10256kB inactive_file:157860kB unevictable:1536kB writepending:132kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:41956kB local_pcp:21200kB free_cma:0kB [ 217.995128][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 218.038842][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.079833][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 218.122548][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 218.131524][ T9093] lowmem_reserve[]: 0 0 1 1 1 [ 218.152738][ T9093] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 218.267396][ T9093] lowmem_reserve[]: 0 0 0 0 0 [ 218.281378][ T9093] Node 1 Normal free:3880492kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24972kB local_pcp:11372kB free_cma:0kB [ 218.429310][ T9093] lowmem_reserve[]: 0 0 0 0 0 [ 218.495402][ T9093] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.548604][ T9142] tipc: Started in network mode [ 218.580330][ T9142] tipc: Node identity 629b68d2eee4, cluster identity 4711 [ 218.610436][ T9093] Node 0 DMA32: 812*4kB (UM) 314*8kB (ME) 190*16kB (ME) 499*32kB (UM) 105*64kB (UME) 41*128kB (UME) 14*256kB (ME) 6*512kB (M) 8*1024kB (M) 7*2048kB (UM) 323*4096kB (M) = 1388928kB [ 218.654174][ T9142] tipc: Enabled bearer , priority 0 [ 218.774752][ T9093] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 218.868321][ T9093] Node 1 Normal: 207*4kB (U) 48*8kB (UME) 35*16kB (UME) 56*32kB (UME) 27*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3880492kB [ 219.014749][ T9093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.064801][ T9093] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.100266][ T9093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.146301][ T9093] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.172229][ T9093] 43836 total pagecache pages [ 219.185956][ T9093] 0 pages in swap cache [ 219.198405][ T9093] Free swap = 124996kB [ 219.208106][ T9093] Total swap = 124996kB [ 219.213487][ T9093] 2097051 pages RAM [ 219.227799][ T9093] 0 pages HighMem/MovableOnly [ 219.232636][ T9093] 425672 pages reserved [ 219.239856][ T9093] 0 pages cma reserved [ 219.373096][ T9135] tipc: Disabling bearer [ 220.049145][ T9187] __nla_validate_parse: 3 callbacks suppressed [ 220.049162][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.876'. [ 220.172666][ T9188] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.874'. [ 220.565812][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 220.723136][ T9204] erspan0: entered promiscuous mode [ 221.153467][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.885'. [ 221.311493][ T9227] IPVS: ip_vs_edit_dest(): server weight less than zero [ 221.315433][ T9208] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.356266][ T9208] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.391563][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 221.542101][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.886'. [ 221.844228][ T9208] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.897974][ T9208] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.177405][ T9208] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.226795][ T9208] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.428936][ T9208] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.513758][ T9208] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.594746][ C1] net_ratelimit: 8793 callbacks suppressed [ 222.594769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.613164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 222.625833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 222.638816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 222.652594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.658848][ T9263] netlink: 'syz.4.895': attribute type 33 has an invalid length. [ 222.665005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 222.685143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.698196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.710420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.723137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.096534][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.897'. [ 223.175365][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 223.236579][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'. [ 223.303812][ T7167] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.340030][ T7167] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.639320][ T7167] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.703294][ T7167] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.858005][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.891867][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.976430][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.026855][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.606643][ C1] net_ratelimit: 9940 callbacks suppressed [ 227.606663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.624999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.637347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.649822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 227.662168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 227.674993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 227.687633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.700090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 227.712355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.725071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.969821][ T9334] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 229.010969][ T9334] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 229.327191][ T9343] netlink: 'syz.2.913': attribute type 4 has an invalid length. [ 229.335942][ T9343] netlink: 152 bytes leftover after parsing attributes in process `syz.2.913'. [ 229.530987][ T9343] `: renamed from bond0 [ 229.593520][ T9349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.917'. [ 229.972039][ T9360] netlink: 56 bytes leftover after parsing attributes in process `syz.0.920'. [ 230.044156][ T9361] syzkaller0: refused to change device tx_queue_len [ 230.058814][ T9365] netlink: 56 bytes leftover after parsing attributes in process `syz.1.922'. [ 230.457541][ T9371] netlink: 48 bytes leftover after parsing attributes in process `syz.4.923'. [ 230.527388][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.925'. [ 230.929049][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 231.057604][ T5185] block nbd0: Receive control failed (result -32) [ 231.351377][ T9403] netlink: 200 bytes leftover after parsing attributes in process `syz.3.932'. [ 231.534927][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'. [ 231.716534][ T9411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.934'. [ 231.985564][ T9418] sctp: [Deprecated]: syz.3.937 (pid 9418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.985564][ T9418] Use struct sctp_sack_info instead [ 232.306892][ T1107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 232.614430][ C1] net_ratelimit: 9420 callbacks suppressed [ 232.614449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 232.633162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.645574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 232.658416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.671682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.684200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.697010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.710107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.722856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.735487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.932461][ T9444] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 237.624656][ C1] net_ratelimit: 15220 callbacks suppressed [ 237.624679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 237.643057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 237.655872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 237.668503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.680891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 237.693181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.705903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.718278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.731104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.743529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.634656][ C1] net_ratelimit: 16082 callbacks suppressed [ 242.634677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.654097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.666522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.678929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.691529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 242.703993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 242.716874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 242.729572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.741949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 242.754365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.339752][ T9456] netlink: 'syz.1.942': attribute type 8 has an invalid length. [ 243.376237][ T9457] __nla_validate_parse: 4 callbacks suppressed [ 243.376256][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 244.004920][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'. [ 244.373083][ T9487] netlink: 'syz.4.950': attribute type 33 has an invalid length. [ 244.412813][ T9487] netlink: 152 bytes leftover after parsing attributes in process `syz.4.950'. [ 245.213767][ T9500] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 245.402564][ T9500] bond2: entered promiscuous mode [ 245.431033][ T9500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.562441][ T9504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.619636][ T9504] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 245.659762][ T9504] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 245.720961][ T9504] bond2: (slave wireguard1): making interface the new active one [ 245.758559][ T9504] wireguard1: entered promiscuous mode [ 245.782056][ T9504] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 246.396867][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055782c00: rx timeout, send abort [ 246.719595][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.968'. [ 246.730689][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 246.839702][ T9556] sctp: [Deprecated]: syz.2.969 (pid 9556) Use of int in max_burst socket option deprecated. [ 246.839702][ T9556] Use struct sctp_assoc_value instead [ 246.897933][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880553d7400: rx timeout, send abort [ 246.907097][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055782c00: abort rx timeout. Force session deactivation [ 247.013846][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 247.038960][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.968'. [ 247.063834][ T9553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.967'. [ 247.253005][ T9568] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 247.309721][ T9566] netlink: 240 bytes leftover after parsing attributes in process `syz.4.970'. [ 247.321174][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.973'. [ 247.406359][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880553d7400: abort rx timeout. Force session deactivation [ 247.552694][ T9581] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 247.644550][ C1] net_ratelimit: 9054 callbacks suppressed [ 247.644574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.662888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:c4:32:51:78:9e, vlan:0) [ 247.675288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.688109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.700495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.713296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.726264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.738852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.751188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.763592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.833777][ T9610] gtp0: entered promiscuous mode [ 248.863645][ T9610] gtp0: entered allmulticast mode [ 248.930020][ T9612] veth0: entered promiscuous mode [ 249.022447][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.049919][ T49] bridge0: port 3(veth0_to_bridge) entered disabled state [ 249.088669][ T9612] veth0: left promiscuous mode [ 249.602146][ T9648] netlink: 'syz.0.992': attribute type 11 has an invalid length. [ 249.652666][ T9652] __nla_validate_parse: 6 callbacks suppressed [ 249.652684][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 249.888289][ T9669] netlink: 96 bytes leftover after parsing attributes in process `syz.0.999'. [ 249.902536][ T9669] 8021q: VLANs not supported on gre0 [ 249.913630][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1000'. [ 250.399623][ T9699] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 250.538580][ T9706] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 250.575431][ T9706] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 250.654128][ T9699] gretap1: entered promiscuous mode [ 250.868032][ T9723] tipc: Enabled bearer , priority 0 [ 250.877284][ T9723] syzkaller0: entered promiscuous mode [ 250.882955][ T9723] syzkaller0: entered allmulticast mode [ 250.910164][ T9723] tipc: Resetting bearer [ 250.949660][ T9720] tipc: Resetting bearer [ 250.995071][ T9720] tipc: Disabling bearer [ 251.033142][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.188222][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 251.248213][ T9745] IPv6: sit2: Disabled Multicast RS [ 251.251558][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 251.254729][ T9745] sit2: entered allmulticast mode [ 251.315588][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.408648][ T9749] bridge_slave_1 (unregistering): left allmulticast mode [ 251.440716][ T9749] bridge_slave_1 (unregistering): left promiscuous mode [ 251.485467][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.904106][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 251.914833][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 252.069671][ T9796] netlink: 'syz.4.1033': attribute type 1 has an invalid length. [ 252.121048][ T9796] bond2: entered promiscuous mode [ 252.127876][ T9796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.170429][ T9796] bond2: (slave bridge4): making interface the new active one [ 252.180905][ T9796] bridge4: entered promiscuous mode [ 252.188941][ T9796] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 252.269368][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 252.302338][ T9806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1035'. [ 252.305962][ T9808] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 252.322080][ T9808] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.407459][ T9813] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 252.417352][ T9813] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 252.426094][ T9813] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1038'. [ 252.604755][ T9820] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 252.817821][ T9834] Bluetooth: MGMT ver 1.23 [ 252.967184][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.148177][ T9829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.192072][ T9829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.382604][ T9829] vlan0: left allmulticast mode [ 253.388729][ T9829] veth0_vlan: left allmulticast mode [ 253.408031][ T9829] vlan0: left promiscuous mode [ 253.604507][ T7167] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.612966][ T7167] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.666762][ T7167] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.747133][ T7167] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.765095][ T7167] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.773575][ T7167] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.798088][ T49] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.853248][ T49] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.895937][ T49] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.934773][ T49] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.989215][ T49] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 254.009619][ T49] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 254.730005][ T9942] __nla_validate_parse: 6 callbacks suppressed [ 254.730025][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 254.790420][ T9946] sctp: [Deprecated]: syz.3.1073 (pid 9946) Use of int in maxseg socket option. [ 254.790420][ T9946] Use struct sctp_assoc_value instead [ 254.878549][ T61] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4a [ 255.037658][ T9966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1079'. [ 255.062158][ T9967] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1076'. [ 255.149784][ T9976] syzkaller0: entered promiscuous mode [ 255.155803][ T9976] syzkaller0: entered allmulticast mode [ 255.689678][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 255.712971][ T9990] netlink: 'syz.1.1087': attribute type 8 has an invalid length. [ 255.743909][ T9986] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1085'. [ 255.761368][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.843300][ T9995] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1084'. [ 255.845365][ T9998] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1088'. [ 256.139688][T10014] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1093'. [ 256.630870][T10047] erspan0: entered promiscuous mode [ 256.653979][T10047] erspan0: entered allmulticast mode [ 256.702258][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1106'. [ 256.943507][ T55] wg1 speed is unknown, defaulting to 1000 [ 257.010822][T10079] nbd: must specify an index to disconnect [ 257.218126][T10088] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 257.439653][T10110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1116'. [ 257.539305][T10113] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 257.795083][T10131] ieee802154 phy0 wpan0: encryption failed: -90 [ 259.269724][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 259.320375][T10198] netlink: 'syz.4.1140': attribute type 11 has an invalid length. [ 259.337070][T10198] netlink: 'syz.4.1140': attribute type 11 has an invalid length. [ 259.368279][T10200] net_ratelimit: 2212 callbacks suppressed [ 259.368300][T10200] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 260.193311][T10236] __nla_validate_parse: 10 callbacks suppressed [ 260.193329][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 260.231774][T10236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1152'. [ 260.423983][T10259] netlink: 147068 bytes leftover after parsing attributes in process `syz.3.1156'. [ 260.438128][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 260.462061][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 260.471851][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 260.483306][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 260.494013][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 260.498716][T10267] netlink: 'syz.0.1161': attribute type 58 has an invalid length. [ 260.505852][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 260.523110][T10267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1161'. [ 260.652392][T10273] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 260.696189][T10272] veth3: entered allmulticast mode [ 261.069665][T10290] batadv_slave_1: entered allmulticast mode [ 261.101699][T10289] batadv_slave_1: left allmulticast mode [ 261.259680][T10294] scsi_nl_rcv_msg: discarding partial skb [ 262.050287][ T30] audit: type=1800 audit(1758463266.063:3): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1186" name="memory.events" dev="tmpfs" ino=1282 res=0 errno=0 [ 262.144757][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 262.564791][T10376] netlink: 'syz.1.1196': attribute type 10 has an invalid length. [ 262.731905][T10382] netlink: 'syz.1.1199': attribute type 4 has an invalid length. [ 262.732197][T10384] openvswitch: netlink: EtherType 0 is less than min 600 [ 262.929135][T10396] netlink: 'syz.3.1200': attribute type 8 has an invalid length. [ 263.149012][T10406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.306287][ T8871] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 263.353058][T10420] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 263.383744][T10426] syzkaller1: entered promiscuous mode [ 263.390626][T10426] syzkaller1: entered allmulticast mode [ 263.538219][T10438] xt_bpf: check failed: parse error [ 263.601862][T10443] netlink: 'syz.0.1219': attribute type 7 has an invalid length. [ 263.630950][T10443] : entered promiscuous mode [ 263.913407][T10451] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 264.406534][T10468] syz.0.1225 (10468) used greatest stack depth: 18008 bytes left [ 264.430426][T10465] wg1 speed is unknown, defaulting to 1000 [ 264.500859][T10473] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 265.044745][T10489] sctp: [Deprecated]: syz.0.1233 (pid 10489) Use of int in max_burst socket option deprecated. [ 265.044745][T10489] Use struct sctp_assoc_value instead [ 265.315011][T10505] : entered promiscuous mode [ 265.809320][T10537] __nla_validate_parse: 50 callbacks suppressed [ 265.809339][T10537] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1247'. [ 265.837931][T10537] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1247'. [ 266.087768][T10557] pimreg: entered allmulticast mode [ 266.167563][T10560] netem: incorrect ge model size [ 266.180439][T10560] netem: change failed [ 266.715433][T10591] tipc: Started in network mode [ 266.720922][T10591] tipc: Node identity 8aa52af43d58, cluster identity 4711 [ 266.740294][T10591] tipc: Enabled bearer , priority 0 [ 266.838609][T10591] syzkaller0: entered promiscuous mode [ 266.844357][T10591] syzkaller0: entered allmulticast mode [ 266.850970][T10591] tipc: Resetting bearer [ 266.861945][T10596] unknown channel width for channel at 909000KHz? [ 266.869591][T10596] unknown channel width for channel at 909000KHz? [ 267.103783][T10615] tipc: Enabling of bearer rejected, already enabled [ 267.109454][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 267.127097][T10616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 267.137911][T10616] netlink: 'syz.0.1267': attribute type 6 has an invalid length. [ 267.270346][T10623] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 267.291841][T10623] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 267.391392][T10623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.451291][T10585] tipc: Resetting bearer [ 267.558365][T10639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1274'. [ 267.747603][ T9863] tipc: Node number set to 3086822132 [ 268.917608][T10585] tipc: Disabling bearer [ 268.931387][T10631] tipc: Enabled bearer , priority 0 [ 268.942195][T10640] syzkaller0: entered promiscuous mode [ 268.948322][T10640] syzkaller0: entered allmulticast mode [ 268.958226][T10646] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1276'. [ 268.974748][T10647] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 269.076495][T10649] tipc: Resetting bearer [ 269.097115][T10629] tipc: Resetting bearer [ 269.180322][T10629] tipc: Disabling bearer [ 269.431190][T10682] tipc: Enabled bearer , priority 0 [ 269.462914][T10682] syzkaller0: entered promiscuous mode [ 269.475647][T10682] syzkaller0: entered allmulticast mode [ 269.500620][T10682] IPv6: sit2: Disabled Multicast RS [ 269.550183][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 269.558531][T10682] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 269.613599][T10690] veth3: entered promiscuous mode [ 269.622866][T10690] veth3: entered allmulticast mode [ 269.639776][T10682] tipc: Resetting bearer [ 269.651982][T10679] tipc: Resetting bearer [ 269.690811][T10679] tipc: Disabling bearer [ 270.016880][T10705] IPVS: Unknown mcast interface: veth0_virt_wifi [ 270.535255][T10730] sock: sock_timestamping_bind_phc: sock not bind to device [ 270.814615][T10747] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1308'. [ 270.864884][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'. [ 270.959802][T10758] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 271.031112][T10764] netlink: 'syz.2.1315': attribute type 10 has an invalid length. [ 271.107171][T10764] team0: Port device dummy0 added [ 271.148061][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1316'. [ 271.252359][T10772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1317'. [ 271.348767][T10782] netlink: 'syz.4.1321': attribute type 10 has an invalid length. [ 271.435395][T10778] wg1 speed is unknown, defaulting to 1000 [ 271.537357][T10786] netlink: 'syz.1.1324': attribute type 6 has an invalid length. [ 271.595863][T10790] GUP no longer grows the stack in syz.0.1325 (10790): 200000006000-200000008000 (200000005000) [ 271.632558][T10790] CPU: 1 UID: 0 PID: 10790 Comm: syz.0.1325 Not tainted syzkaller #0 PREEMPT(full) [ 271.632587][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.632610][T10790] Call Trace: [ 271.632618][T10790] [ 271.632627][T10790] dump_stack_lvl+0x189/0x250 [ 271.632660][T10790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.632681][T10790] ? __pfx__printk+0x10/0x10 [ 271.632702][T10790] ? find_vma+0xe7/0x160 [ 271.632741][T10790] __get_user_pages+0x24d0/0x2ce0 [ 271.632768][T10790] ? __lock_acquire+0xab9/0xd20 [ 271.632820][T10790] ? __gup_longterm_locked+0xc68/0x1660 [ 271.632850][T10790] __gup_longterm_locked+0xde9/0x1660 [ 271.632887][T10790] ? sanity_check_pinned_pages+0x123a/0x1300 [ 271.632919][T10790] gup_fast_fallback+0x1e6a/0x2010 [ 271.632981][T10790] ? __pfx_gup_fast_fallback+0x10/0x10 [ 271.633008][T10790] ? __lock_acquire+0xab9/0xd20 [ 271.633040][T10790] ? pin_user_pages_fast+0x4d/0xb0 [ 271.633064][T10790] iov_iter_extract_pages+0x35a/0x5e0 [ 271.633096][T10790] extract_iter_to_sg+0xe46/0x24e0 [ 271.633133][T10790] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 271.633154][T10790] ? __local_bh_enable_ip+0x12d/0x1c0 [ 271.633172][T10790] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.633192][T10790] ? __local_bh_enable_ip+0x12d/0x1c0 [ 271.633210][T10790] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 271.633234][T10790] ? __asan_memset+0x22/0x50 [ 271.633261][T10790] hash_sendmsg+0x4f4/0x11d0 [ 271.633310][T10790] ? __pfx_hash_sendmsg+0x10/0x10 [ 271.633334][T10790] __sock_sendmsg+0x219/0x270 [ 271.633363][T10790] ____sys_sendmsg+0x52d/0x830 [ 271.633389][T10790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.633417][T10790] ? import_iovec+0x74/0xa0 [ 271.633440][T10790] ___sys_sendmsg+0x21f/0x2a0 [ 271.633463][T10790] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.633520][T10790] ? __fget_files+0x2a/0x420 [ 271.633533][T10790] ? __fget_files+0x3a0/0x420 [ 271.633555][T10790] __sys_sendmmsg+0x227/0x430 [ 271.633580][T10790] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.633596][T10790] ? do_futex+0x395/0x420 [ 271.633626][T10790] ? fd_install+0x97/0x540 [ 271.633666][T10790] ? rcu_is_watching+0x15/0xb0 [ 271.633686][T10790] __x64_sys_sendmmsg+0xa0/0xc0 [ 271.633708][T10790] do_syscall_64+0xfa/0x3b0 [ 271.633727][T10790] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.633742][T10790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.633769][T10790] ? clear_bhb_loop+0x60/0xb0 [ 271.633790][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.633807][T10790] RIP: 0033:0x7f9445b8ec29 [ 271.633826][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.633840][T10790] RSP: 002b:00007f9446ad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.633858][T10790] RAX: ffffffffffffffda RBX: 00007f9445dd5fa0 RCX: 00007f9445b8ec29 [ 271.633871][T10790] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 271.633882][T10790] RBP: 00007f9445c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 271.633893][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.633903][T10790] R13: 00007f9445dd6038 R14: 00007f9445dd5fa0 R15: 00007ffc50a324c8 [ 271.633931][T10790] [ 272.219455][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1327'. [ 272.926110][T10832] netlink: 'syz.4.1339': attribute type 2 has an invalid length. [ 272.956753][T10832] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1339'. [ 273.156009][T10845] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 273.166144][T10845] netlink: 'syz.1.1345': attribute type 3 has an invalid length. [ 273.188597][T10845] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1345'. [ 273.212488][T10848] veth5: entered promiscuous mode [ 273.222372][T10848] veth5: entered allmulticast mode [ 273.808591][T10863] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1349'. [ 274.087616][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1353'. [ 274.148786][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 274.262175][T10878] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 274.369343][T10886] tipc: Enabling of bearer rejected, already enabled [ 274.674859][T10905] openvswitch: netlink: Actions may not be safe on all matching packets [ 275.242419][T10931] nftables ruleset with unbound set [ 275.252879][ T12] tipc: Subscription rejected, illegal request [ 275.453078][T10943] netlink: 'syz.4.1373': attribute type 10 has an invalid length. [ 275.672902][T10958] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 275.688138][T10955] xt_bpf: check failed: parse error [ 276.096439][T10968] netlink: 'syz.2.1384': attribute type 10 has an invalid length. [ 276.135426][T10968] wlan1: mtu less than device minimum [ 276.151300][T10968] `: (slave wlan1): Error -22 calling dev_set_mtu [ 276.611032][T10993] __nla_validate_parse: 9 callbacks suppressed [ 276.611050][T10993] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1392'. [ 277.019268][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1401'. [ 277.045667][T11020] netlink: 'syz.4.1399': attribute type 1 has an invalid length. [ 277.064842][T11019] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1401'. [ 277.078630][ T30] audit: type=1800 audit(1758463281.083:4): pid=11020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1399" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1334 res=0 errno=0 [ 277.110778][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 277.379828][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 277.672567][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'. [ 277.686608][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'. [ 277.748107][T11054] syzkaller1: entered allmulticast mode [ 277.970891][T11078] netlink: 'syz.0.1417': attribute type 64 has an invalid length. [ 277.993518][T11078] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1417'. [ 278.278385][T11102] tipc: Enabling of bearer rejected, already enabled [ 278.313585][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 278.875291][T11141] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1432'. [ 280.087857][T11164] veth1_macvtap: left promiscuous mode [ 280.191316][T11179] tipc: Enabling of bearer rejected, failed to enable media [ 280.203541][T11187] xfrm0: mtu less than device minimum [ 280.456930][T11207] tipc: Enabling of bearer rejected, failed to enable media [ 280.687887][T11227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.081764][T11252] bridge1: entered promiscuous mode [ 281.095247][T11252] bridge1: entered allmulticast mode [ 281.182697][T11254] tipc: Enabled bearer , priority 0 [ 281.247354][T11254] tipc: Disabling bearer [ 281.613223][T11282] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 281.678997][T11291] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 281.749473][T11282] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.829289][T11282] vlan2: entered allmulticast mode [ 281.896749][T11282] bond4: entered allmulticast mode [ 281.930535][T11301] __nla_validate_parse: 9 callbacks suppressed [ 281.930555][T11301] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1474'. [ 281.963238][T11308] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1477'. [ 282.018616][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 282.043327][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 282.069957][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 282.109188][T11317] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1475'. [ 282.132056][T11310] lo: entered allmulticast mode [ 282.174011][T11318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1478'. [ 282.466324][T11325] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1480'. [ 282.520620][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 282.771679][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 282.856192][T11336] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 283.155713][T11369] bond5 (unregistering): Released all slaves [ 283.338759][T11377] netlink: 'syz.2.1492': attribute type 11 has an invalid length. [ 283.377538][T11381] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ãÙdñ4QNªå¯¿$ûÌÌULÙv…D£øUDŒw [ 283.572371][T11390] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 283.908891][T11407] tipc: Enabled bearer , priority 13 [ 283.992929][T11409] wg1 speed is unknown, defaulting to 1000 [ 284.560741][T11438] syzkaller1: entered promiscuous mode [ 284.578355][T11438] syzkaller1: entered allmulticast mode [ 284.914700][ T55] tipc: Node number set to 2357160146 [ 285.602601][T11484] !€ÿ: renamed from bond_slave_0 (while UP) [ 285.616836][T11482] syzkaller1: entered promiscuous mode [ 285.629126][T11482] syzkaller1: entered allmulticast mode [ 286.067627][T11505] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 286.183304][T11337] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.215670][T11337] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.236263][T11337] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.271310][T11337] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.961803][T11573] : renamed from bridge_slave_0 (while UP) [ 287.257457][T11593] __nla_validate_parse: 15 callbacks suppressed [ 287.257474][T11593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1560'. [ 287.295619][T11588] macvlan1: entered promiscuous mode [ 287.477594][T11600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'. [ 287.479895][T11603] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 287.530787][T11600] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1562'. [ 287.543751][T11603] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 287.594531][T11606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 287.610300][T11602] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.616554][T11603] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 287.630098][T11606] openvswitch: netlink: Flow key attr not present in new flow. [ 287.646883][T11603] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 287.657160][T11607] netlink: 'syz.2.1562': attribute type 16 has an invalid length. [ 287.671604][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 287.689166][T11603] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 287.697583][T11603] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 287.709013][T11603] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 287.717821][T11603] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 287.729212][T11603] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 287.977655][T11619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1567'. [ 288.025962][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1567'. [ 288.153358][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1571'. [ 288.167958][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 288.642576][T11673] netlink: zone id is out of range [ 288.647990][T11673] netlink: zone id is out of range [ 288.653190][T11673] netlink: zone id is out of range [ 288.659905][T11673] netlink: zone id is out of range [ 288.666085][T11673] netlink: zone id is out of range [ 288.671267][T11673] netlink: zone id is out of range [ 288.677084][T11673] netlink: zone id is out of range [ 288.682222][T11673] netlink: zone id is out of range [ 288.687959][T11673] netlink: zone id is out of range [ 288.879070][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 289.173348][T11695] netlink: 'syz.2.1588': attribute type 11 has an invalid length. [ 289.565465][T11716] tipc: Enabled bearer , priority 0 [ 289.581534][T11716] syzkaller0: entered promiscuous mode [ 289.588557][T11716] syzkaller0: entered allmulticast mode [ 289.633835][T11715] tipc: Resetting bearer [ 289.665941][T11715] tipc: Disabling bearer [ 289.848672][T11730] unknown channel width for channel at 909000KHz? [ 289.864653][T11730] unknown channel width for channel at 909000KHz? [ 289.876582][T11730] unknown channel width for channel at 909000KHz? [ 290.740149][T11791] unknown channel width for channel at 909000KHz? [ 290.765522][T11791] unknown channel width for channel at 909000KHz? [ 290.780546][T11794] unknown channel width for channel at 909000KHz? [ 290.789189][T11794] unknown channel width for channel at 909000KHz? [ 291.565201][T11841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.352503][T11869] __nla_validate_parse: 16 callbacks suppressed [ 292.352523][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'. [ 292.369500][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1651'. [ 292.371926][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1650'. [ 292.429009][T11869] erspan0: entered promiscuous mode [ 292.461798][T11869] gretap0: entered promiscuous mode [ 292.503712][T11869] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 292.543965][T11869] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 292.692086][T11886] sctp: [Deprecated]: syz.0.1656 (pid 11886) Use of int in maxseg socket option. [ 292.692086][T11886] Use struct sctp_assoc_value instead [ 292.737244][T11886] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1656'. [ 292.759229][T11886] 8021q: VLANs not supported on gre0 [ 292.769921][T11886] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1656'. [ 292.789632][T11886] (unnamed net_device) (uninitialized): (slave ip6tnl0): Device is not bonding slave [ 292.831069][T11886] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6tnl0) [ 293.138260][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1666'. [ 293.573335][T11957] IPVS: ip_vs_add_dest(): server weight less than zero [ 293.604867][T11957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1677'. [ 293.617808][T11950] syzkaller0: entered promiscuous mode [ 293.623446][T11950] syzkaller0: entered allmulticast mode [ 293.633436][T11964] validate_nla: 32 callbacks suppressed [ 293.633493][T11964] netlink: 'syz.1.1676': attribute type 27 has an invalid length. [ 293.737374][T11968] net_ratelimit: 4 callbacks suppressed [ 293.737393][T11968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.009047][T11980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1679'. [ 294.070638][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 295.362666][T11983] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1683'. [ 295.791404][T12018] netlink: 'syz.3.1691': attribute type 4 has an invalid length. [ 295.941276][T12025] veth5: entered allmulticast mode [ 295.954607][T12029] netem: incorrect gi model size [ 295.983929][T12029] netem: change failed [ 296.381821][T12056] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 296.419566][T12056] sch_fq: defrate 0 ignored. [ 296.535797][T12033] netlink: 'syz.0.1698': attribute type 11 has an invalid length. [ 296.581533][T12033] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 296.827837][T12083] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 297.331688][T12124] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 297.392298][T12119] __nla_validate_parse: 20 callbacks suppressed [ 297.392317][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 297.921837][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 297.929546][T12161] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 297.938682][T12161] netlink: 'syz.2.1738': attribute type 11 has an invalid length. [ 297.938754][T12160] hsr_slave_0: left promiscuous mode [ 297.949938][T12161] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1738'. [ 297.962938][T12160] hsr_slave_1: left promiscuous mode [ 297.994611][T11339] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.105498][T12132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.289665][T12196] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1752'. [ 303.321602][T12196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1752'. [ 303.724567][T12231] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 303.831366][T12231] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 303.938864][T12230] wg1 speed is unknown, defaulting to 1000 [ 304.160990][T12261] tipc: Enabling of bearer rejected, failed to enable media [ 304.234594][T12268] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1769'. [ 304.841076][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 304.877821][T12295] netlink: 'syz.0.1775': attribute type 11 has an invalid length. [ 304.898434][T12295] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1775'. [ 304.912402][T12299] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1776'. [ 304.992784][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1776'. [ 305.074081][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 305.118720][T12305] sctp: [Deprecated]: syz.3.1777 (pid 12305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.118720][T12305] Use struct sctp_sack_info instead [ 305.211593][T12305] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1777'. [ 305.239486][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 305.528800][T12326] bond6: entered promiscuous mode [ 305.533976][T12326] bond6: entered allmulticast mode [ 305.540690][T12326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.879793][T12344] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 305.881938][T12342] vlan1: entered allmulticast mode [ 305.892793][T12342] hsr0: entered allmulticast mode [ 305.941797][T12342] hsr_slave_0: entered allmulticast mode [ 305.950903][T12342] hsr_slave_1: entered allmulticast mode [ 306.087113][T12355] netlink: 'syz.3.1790': attribute type 1 has an invalid length. [ 306.222372][T12355] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.302748][T12369] Dead loop on virtual device ip6_vti0, fix it urgently! [ 306.332941][T12371] ip6erspan0: entered promiscuous mode [ 306.342510][T12369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.440976][T12378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.655029][T12389] raw_sendmsg: syz.0.1799 forgot to set AF_INET. Fix it! [ 307.160013][T12422] netlink: 'syz.2.1811': attribute type 6 has an invalid length. [ 307.289469][T12435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.850039][T12479] dvmrp0: entered allmulticast mode [ 307.888836][T12478] netlink: 'syz.0.1827': attribute type 1 has an invalid length. [ 308.003282][T12487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.141363][T12489] veth0_macvtap: left promiscuous mode [ 308.326121][T12474] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 308.656682][T12518] __nla_validate_parse: 9 callbacks suppressed [ 308.656702][T12518] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1835'. [ 308.759449][T12528] netlink: 'syz.1.1838': attribute type 10 has an invalid length. [ 308.818873][T12528] team0: Device veth1_macvtap failed to register rx_handler [ 308.841002][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 308.866676][T12528] IPv4: Oversized IP packet from 127.202.26.0 [ 308.936846][T12532] wg1 speed is unknown, defaulting to 1000 [ 309.134953][T12543] tipc: Enabling of bearer rejected, failed to enable media [ 309.332487][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 309.382324][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 309.715680][T12541] delete_channel: no stack [ 309.809069][T12582] netlink: 'syz.4.1851': attribute type 2 has an invalid length. [ 309.817354][T12582] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1851'. [ 309.836463][T12582] nbd: must specify a device to reconfigure [ 309.853687][T12585] tipc: Enabling of bearer rejected, already enabled [ 309.955320][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 310.271776][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 310.287823][T12617] nbd: socks must be embedded in a SOCK_ITEM attr [ 310.488261][T12625] netlink: 'syz.2.1863': attribute type 3 has an invalid length. [ 310.649859][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1867'. [ 310.663856][T12640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1867'. [ 310.729862][T12646] netlink: 'syz.0.1872': attribute type 17 has an invalid length. [ 310.729972][T12638] netem: unknown loss type 0 [ 310.739637][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'. [ 310.750665][T12638] netem: change failed [ 310.894229][T12658] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 310.902332][T12658] netlink: 'syz.4.1876': attribute type 2 has an invalid length. [ 310.999495][T12662] tap0: tun_chr_ioctl cmd 1074025677 [ 311.005237][T12662] tap0: linktype set to 65534 [ 311.393790][T12687] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 311.520242][T12695] netlink: 'syz.1.1889': attribute type 1 has an invalid length. [ 311.702877][T12704] netlink: 'syz.4.1892': attribute type 12 has an invalid length. [ 311.931422][T12721] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 312.168691][T12736] netlink: 'syz.3.1902': attribute type 12 has an invalid length. [ 312.494834][T12757] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 312.513863][T12757] tipc: Enabling of bearer rejected, failed to enable media [ 312.650893][T12765] team0: Port device bridge6 added [ 313.892301][T12863] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 313.919606][T12863] __nla_validate_parse: 12 callbacks suppressed [ 313.919625][T12863] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1944'. [ 314.021095][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1949'. [ 314.060356][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 314.070304][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1946'. [ 314.161605][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1951'. [ 314.172101][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1951'. [ 314.184680][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1951'. [ 314.204760][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1951'. [ 314.293072][T12885] wg1 speed is unknown, defaulting to 1000 [ 314.834895][T12910] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 315.049172][T12889] netlink: 'syz.2.1953': attribute type 13 has an invalid length. [ 315.078510][T12889] netlink: 'syz.2.1953': attribute type 17 has an invalid length. [ 315.179484][T12889] tunl0: left promiscuous mode [ 315.201331][T12929] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1970'. [ 315.244188][T12889] `: left promiscuous mode [ 315.250533][T12889] 8021q: adding VLAN 0 to HW filter on device ` [ 315.263434][T12889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.301206][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 315.956017][T12975] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 316.065742][T12979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.323083][T12989] netlink: 'syz.2.1988': attribute type 1 has an invalid length. [ 316.376711][T12989] bond2: entered promiscuous mode [ 316.388287][T12989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.479147][T12989] bond2: (slave bridge2): making interface the new active one [ 316.519584][T12989] bridge2: entered promiscuous mode [ 316.526308][T12989] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 316.713787][T13018] netlink: 'syz.1.1996': attribute type 2 has an invalid length. [ 316.999010][T13036] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 317.023841][T13036] netlink: 'syz.1.2001': attribute type 11 has an invalid length. [ 317.213180][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.644489][ T30] audit: type=1804 audit(1758463321.653:5): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2018" name="/newroot/417/cgroup.controllers" dev="tmpfs" ino=2138 res=1 errno=0 [ 317.712698][T13088] netlink: 'syz.1.2021': attribute type 1 has an invalid length. [ 317.730529][ T30] audit: type=1800 audit(1758463321.663:6): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2018" name="cgroup.controllers" dev="tmpfs" ino=2138 res=0 errno=0 [ 317.762465][ T5185] Bluetooth: hci4: command 0x0405 tx timeout [ 317.931891][T13092] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 318.004313][T13111] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 318.013805][T13103] veth7: entered promiscuous mode [ 318.400929][T13138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.400938][T13136] netlink: 'syz.0.2036': attribute type 10 has an invalid length. [ 318.486483][T13138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.624249][T13153] unknown channel width for channel at 909000KHz? [ 318.943916][T13180] __nla_validate_parse: 26 callbacks suppressed [ 318.943937][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2049'. [ 319.077836][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 319.121182][T13191] tipc: Enabled bearer , priority 0 [ 319.131107][T13191] syzkaller0: entered promiscuous mode [ 319.137393][T13191] syzkaller0: entered allmulticast mode [ 319.148156][T13191] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 319.178060][T13188] tipc: Resetting bearer [ 319.222118][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 319.232605][T13188] tipc: Disabling bearer [ 319.446532][T13210] netlink: 'syz.2.2058': attribute type 1 has an invalid length. [ 319.517083][T13210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.788015][T13229] macvlan0: entered promiscuous mode [ 319.810065][T13229] batadv0: entered promiscuous mode [ 319.840403][T13229] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 319.886509][T13229] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 319.938080][T13229] hsr1: entered allmulticast mode [ 319.956234][T13229] macvlan0: entered allmulticast mode [ 319.969804][T13229] veth1_vlan: entered allmulticast mode [ 319.983661][T13229] batadv0: entered allmulticast mode [ 320.011749][T13229] macvlan0: left promiscuous mode [ 320.020285][T13229] batadv0: left promiscuous mode [ 320.421572][T13265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2069'. [ 320.481484][T13254] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2069'. [ 320.547346][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 320.579338][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2069'. [ 320.616857][T13276] netlink: zone id is out of range [ 320.622313][T13275] netlink: zone id is out of range [ 320.924297][T13294] netlink: 'syz.0.2078': attribute type 1 has an invalid length. [ 321.078684][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2079'. [ 321.280778][T13310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2084'. [ 321.306192][T13310] netlink: 'syz.0.2084': attribute type 2 has an invalid length. [ 321.326894][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2084'. [ 321.425700][T13315] tipc: Enabled bearer , priority 0 [ 321.459650][T13315] syzkaller0: entered promiscuous mode [ 321.479440][T13315] syzkaller0: entered allmulticast mode [ 321.603922][T13315] tipc: Resetting bearer [ 321.648886][T13314] tipc: Resetting bearer [ 321.680186][T13314] tipc: Disabling bearer [ 321.865468][T13345] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 322.850888][T13394] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 322.899251][T13394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 322.959534][T13399] pim6reg1: entered promiscuous mode [ 322.984498][T13399] pim6reg1: entered allmulticast mode [ 323.079495][T13402] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.180421][T13402] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.252607][T13402] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.331078][T13402] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.402035][T13402] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.461264][T13402] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.520729][T13402] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.598903][T13402] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.682710][T13402] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.772481][T13402] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.847682][T13443] tipc: Failed to remove unknown binding: 66,1,1/0:1215047459/1215047461 [ 323.857672][T13443] tipc: Failed to remove unknown binding: 66,1,1/0:1215047459/1215047461 [ 323.910857][T13446] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 323.964894][T13446] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 324.019023][T13458] __nla_validate_parse: 7 callbacks suppressed [ 324.019040][T13458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2127'. [ 324.247340][T13470] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2131'. [ 324.337149][T13475] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 324.404245][T13480] macsec0: entered promiscuous mode [ 324.409846][T13480] macsec0: entered allmulticast mode [ 324.454576][ T30] audit: type=1800 audit(1758463328.463:7): pid=13476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2133" name="memory.events" dev="tmpfs" ino=2270 res=0 errno=0 [ 324.613283][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2138'. [ 324.958987][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 324.991240][T13517] IPVS: Error connecting to the multicast addr [ 325.014997][T13524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2148'. [ 325.188322][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'. [ 325.369080][T13553] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 325.396277][T13553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 325.413927][T13553] bond6: (slave ip6erspan0): making interface the new active one [ 325.423611][T13553] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 325.643065][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2159'. [ 325.653382][T13562] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2159'. [ 325.788228][T13517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.828282][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 325.921566][T13581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2165'. [ 326.137587][T13598] netlink: 'syz.4.2170': attribute type 4 has an invalid length. [ 326.902879][T13645] netlink: 'syz.4.2182': attribute type 3 has an invalid length. [ 327.026057][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.252724][T13672] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 327.266140][T13672] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 327.341110][T13680] pimreg: entered allmulticast mode [ 327.781772][T13696] wg1 speed is unknown, defaulting to 1000 [ 328.020379][T13712] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 328.055151][T13712] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 328.104931][T13712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.112733][T13712] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 328.159624][T13712] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.167049][T13712] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 328.229172][T13712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.254757][T13712] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 328.287117][T13712] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 328.302180][T13712] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 328.440372][T13737] sctp: [Deprecated]: syz.4.2209 (pid 13737) Use of int in maxseg socket option. [ 328.440372][T13737] Use struct sctp_assoc_value instead [ 328.927359][T13759] syzkaller0: entered promiscuous mode [ 328.932864][T13759] syzkaller0: entered allmulticast mode [ 328.941243][T13758] tipc: Enabled bearer , priority 0 [ 328.957954][T13759] tipc: Resetting bearer [ 328.967808][T13756] tipc: Resetting bearer [ 328.991991][T13756] tipc: Disabling bearer [ 329.293486][T13780] __nla_validate_parse: 17 callbacks suppressed [ 329.293506][T13780] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2224'. [ 329.311647][T13780] gretap0: entered promiscuous mode [ 329.321512][T13780] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2224'. [ 329.331025][T13780] 0ªî{X¹¦: renamed from gretap0 [ 329.339621][T13780] 0ªî{X¹¦: left promiscuous mode [ 329.350041][T13780] 0ªî{X¹¦: entered allmulticast mode [ 329.357885][T13780] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 329.433498][T13786] netlink: 'syz.3.2227': attribute type 6 has an invalid length. [ 329.507319][T13790] syzkaller1: entered promiscuous mode [ 329.512903][T13790] syzkaller1: entered allmulticast mode [ 329.563312][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'. [ 329.583489][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'. [ 329.658759][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2234'. [ 329.950360][T13822] netlink: 'syz.3.2240': attribute type 32 has an invalid length. [ 330.141571][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2246'. [ 330.181403][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'. [ 330.665331][T13874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2259'. [ 330.973950][T13888] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2266'. [ 331.052027][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'. [ 331.450227][T13922] netlink: 'syz.3.2273': attribute type 1 has an invalid length. [ 331.492593][T13922] bond9 (unregistering): Released all slaves [ 331.838265][T13958] netlink: 'syz.4.2282': attribute type 11 has an invalid length. [ 378.628602][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.067093][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 479.104666][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 479.112263][ T31] Not tainted syzkaller #0 [ 479.117499][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.126334][ T31] task:kworker/0:1 state:D stack:22072 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 479.138624][ T31] Workqueue: events rfkill_uevent_work [ 479.144276][ T31] Call Trace: [ 479.147596][ T31] [ 479.150542][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 479.155164][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 479.160572][ T31] ? __pfx___schedule+0x10/0x10 [ 479.165759][ T31] ? schedule+0x91/0x360 [ 479.170036][ T31] schedule+0x165/0x360 [ 479.174324][ T31] schedule_preempt_disabled+0x13/0x30 [ 479.179807][ T31] __mutex_lock+0x7e6/0x1350 [ 479.184507][ T31] ? __mutex_lock+0x5bb/0x1350 [ 479.194548][ T31] ? rfkill_uevent_work+0x1d/0xa0 [ 479.199620][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 479.214604][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 479.220375][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.234318][ T31] rfkill_uevent_work+0x1d/0xa0 [ 479.239219][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 479.246226][ T31] process_scheduled_works+0xae1/0x17b0 [ 479.252014][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 479.271081][ T31] worker_thread+0x8a0/0xda0 [ 479.275805][ T31] kthread+0x70e/0x8a0 [ 479.279904][ T31] ? __pfx_worker_thread+0x10/0x10 [ 479.285419][ T31] ? __pfx_kthread+0x10/0x10 [ 479.290039][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.295310][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.300529][ T31] ? __pfx_kthread+0x10/0x10 [ 479.305175][ T31] ret_from_fork+0x439/0x7d0 [ 479.309812][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 479.315240][ T31] ? __switch_to_asm+0x39/0x70 [ 479.320017][ T31] ? __switch_to_asm+0x33/0x70 [ 479.324818][ T31] ? __pfx_kthread+0x10/0x10 [ 479.329403][ T31] ret_from_fork_asm+0x1a/0x30 [ 479.334234][ T31] [ 479.337375][ T31] INFO: task kworker/1:17:9863 blocked for more than 143 seconds. [ 479.345611][ T31] Not tainted syzkaller #0 [ 479.350549][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.359360][ T31] task:kworker/1:17 state:D stack:23080 pid:9863 tgid:9863 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 479.371422][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 479.378456][ T31] Call Trace: [ 479.381744][ T31] [ 479.384903][ T31] __schedule+0x1798/0x4cc0 [ 479.389473][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 479.394914][ T31] ? __pfx___schedule+0x10/0x10 [ 479.399798][ T31] ? schedule+0x91/0x360 [ 479.404032][ T31] schedule+0x165/0x360 [ 479.408366][ T31] schedule_preempt_disabled+0x13/0x30 [ 479.413991][ T31] __mutex_lock+0x7e6/0x1350 [ 479.418599][ T31] ? __mutex_lock+0x5bb/0x1350 [ 479.423361][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 479.429720][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 479.435142][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 479.440868][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 479.446615][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 479.452672][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 479.458466][ T31] process_scheduled_works+0xae1/0x17b0 [ 479.464031][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 479.470181][ T31] worker_thread+0x8a0/0xda0 [ 479.474910][ T31] kthread+0x70e/0x8a0 [ 479.479085][ T31] ? __pfx_worker_thread+0x10/0x10 [ 479.484182][ T31] ? __pfx_kthread+0x10/0x10 [ 479.488819][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.494009][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.499362][ T31] ? __pfx_kthread+0x10/0x10 [ 479.503954][ T31] ret_from_fork+0x439/0x7d0 [ 479.509279][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 479.514573][ T31] ? __switch_to_asm+0x39/0x70 [ 479.519534][ T31] ? __switch_to_asm+0x33/0x70 [ 479.524506][ T31] ? __pfx_kthread+0x10/0x10 [ 479.529181][ T31] ret_from_fork_asm+0x1a/0x30 [ 479.533962][ T31] [ 479.537137][ T31] INFO: task syz.0.2193:13673 blocked for more than 143 seconds. [ 479.544911][ T31] Not tainted syzkaller #0 [ 479.549987][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.559019][ T31] task:syz.0.2193 state:D stack:25096 pid:13673 tgid:13673 ppid:5878 task_flags:0x400040 flags:0x00004006 [ 479.571103][ T31] Call Trace: [ 479.574529][ T31] [ 479.577781][ T31] __schedule+0x1798/0x4cc0 [ 479.582394][ T31] ? __lock_acquire+0xab9/0xd20 [ 479.590584][ T31] ? __lock_acquire+0xab9/0xd20 [ 479.595518][ T31] ? __pfx___schedule+0x10/0x10 [ 479.600591][ T31] ? schedule+0x91/0x360 [ 479.604882][ T31] schedule+0x165/0x360 [ 479.609124][ T31] schedule_preempt_disabled+0x13/0x30 [ 479.615043][ T31] __mutex_lock+0x7e6/0x1350 [ 479.619664][ T31] ? __mutex_lock+0x5bb/0x1350 [ 479.624580][ T31] ? rfkill_unregister+0xc8/0x220 [ 479.629614][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 479.634685][ T31] ? __pfx_device_del+0x10/0x10 [ 479.639557][ T31] rfkill_unregister+0xc8/0x220 [ 479.644599][ T31] nfc_unregister_device+0x96/0x2a0 [ 479.649889][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 479.655694][ T31] virtual_ncidev_close+0x56/0x90 [ 479.660852][ T31] __fput+0x44c/0xa70 [ 479.664952][ T31] task_work_run+0x1d1/0x260 [ 479.669558][ T31] ? __pfx_task_work_run+0x10/0x10 [ 479.674976][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 479.680460][ T31] exit_to_user_mode_loop+0xec/0x110 [ 479.685771][ T31] do_syscall_64+0x2bd/0x3b0 [ 479.690358][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.696476][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 479.702652][ T31] ? clear_bhb_loop+0x60/0xb0 [ 479.707637][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.713537][ T31] RIP: 0033:0x7f9445b8ec29 [ 479.718017][ T31] RSP: 002b:00007ffc50a32628 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 479.726480][ T31] RAX: 0000000000000000 RBX: 00007f9445dd7da0 RCX: 00007f9445b8ec29 [ 479.734737][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 479.742811][ T31] RBP: 00007f9445dd7da0 R08: 0000000000000220 R09: 0000001e50a3291f [ 479.750828][ T31] R10: 00007f9445dd7cb0 R11: 0000000000000246 R12: 0000000000050191 [ 479.758824][ T31] R13: 00007f9445dd6090 R14: ffffffffffffffff R15: 00007ffc50a32740 [ 479.766989][ T31] [ 479.770024][ T31] INFO: task syz.2.2201:13712 blocked for more than 144 seconds. [ 479.780298][ T31] Not tainted syzkaller #0 [ 479.785324][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.793995][ T31] task:syz.2.2201 state:D stack:24824 pid:13712 tgid:13711 ppid:5864 task_flags:0x400040 flags:0x00004006 [ 479.806114][ T31] Call Trace: [ 479.809430][ T31] [ 479.812611][ T31] __schedule+0x1798/0x4cc0 [ 479.817188][ T31] ? __lock_acquire+0xab9/0xd20 [ 479.822067][ T31] ? __lock_acquire+0xab9/0xd20 [ 479.827059][ T31] ? __pfx___schedule+0x10/0x10 [ 479.831956][ T31] ? schedule+0x91/0x360 [ 479.836531][ T31] schedule+0x165/0x360 [ 479.840695][ T31] schedule_preempt_disabled+0x13/0x30 [ 479.846271][ T31] __mutex_lock+0x7e6/0x1350 [ 479.850911][ T31] ? __mutex_lock+0x5bb/0x1350 [ 479.855800][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 479.861099][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 479.866314][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.871501][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 479.877408][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 479.883770][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 479.889508][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 479.894907][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 479.900636][ T31] rfkill_set_block+0x1cf/0x440 [ 479.905589][ T31] rfkill_fop_write+0x44b/0x570 [ 479.910452][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 479.915900][ T31] ? security_kernfs_init_security+0x250/0x290 [ 479.922087][ T31] ? rw_verify_area+0x255/0x4d0 [ 479.927103][ T31] ? __lock_acquire+0xab9/0xd20 [ 479.931964][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 479.937377][ T31] vfs_write+0x27b/0xb30 [ 479.941625][ T31] ? __pfx_vfs_write+0x10/0x10 [ 479.946422][ T31] ? __fget_files+0x2a/0x420 [ 479.951037][ T31] ? __fget_files+0x2a/0x420 [ 479.955930][ T31] ? __fget_files+0x3a0/0x420 [ 479.960614][ T31] ? __fget_files+0x2a/0x420 [ 479.965232][ T31] ksys_write+0x145/0x250 [ 479.969587][ T31] ? __pfx_ksys_write+0x10/0x10 [ 479.974460][ T31] ? rcu_is_watching+0x15/0xb0 [ 479.979410][ T31] ? do_syscall_64+0xbe/0x3b0 [ 479.984109][ T31] do_syscall_64+0xfa/0x3b0 [ 479.989192][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.994454][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.000543][ T31] ? clear_bhb_loop+0x60/0xb0 [ 480.005289][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.011224][ T31] RIP: 0033:0x7fe4ec78ec29 [ 480.015948][ T31] RSP: 002b:00007fe4ed69a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 480.024408][ T31] RAX: ffffffffffffffda RBX: 00007fe4ec9d5fa0 RCX: 00007fe4ec78ec29 [ 480.032669][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 480.041052][ T31] RBP: 00007fe4ec811e41 R08: 0000000000000000 R09: 0000000000000000 [ 480.049381][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.057373][ T31] R13: 00007fe4ec9d6038 R14: 00007fe4ec9d5fa0 R15: 00007fff3f9a3a38 [ 480.065501][ T31] [ 480.068553][ T31] INFO: task syz.4.2282:13958 blocked for more than 144 seconds. [ 480.076605][ T31] Not tainted syzkaller #0 [ 480.081546][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.090247][ T31] task:syz.4.2282 state:D stack:23528 pid:13958 tgid:13955 ppid:5875 task_flags:0x400140 flags:0x00004004 [ 480.102289][ T31] Call Trace: [ 480.105875][ T31] [ 480.108813][ T31] __schedule+0x1798/0x4cc0 [ 480.113313][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.118229][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.123092][ T31] ? __pfx___schedule+0x10/0x10 [ 480.127980][ T31] ? schedule+0x91/0x360 [ 480.132211][ T31] schedule+0x165/0x360 [ 480.136601][ T31] schedule_preempt_disabled+0x13/0x30 [ 480.142050][ T31] __mutex_lock+0x7e6/0x1350 [ 480.146754][ T31] ? rcu_is_watching+0x15/0xb0 [ 480.151529][ T31] ? __mutex_lock+0x5bb/0x1350 [ 480.156400][ T31] ? rfkill_register+0x37/0x8e0 [ 480.161253][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 480.166424][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 480.171356][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.176562][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 480.181840][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 480.187503][ T31] rfkill_register+0x37/0x8e0 [ 480.192454][ T31] wiphy_register+0x214c/0x28d0 [ 480.197479][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 480.202665][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 480.207803][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 480.213867][ T31] ieee80211_register_hw+0x3484/0x4100 [ 480.219370][ T31] ? ieee80211_register_hw+0x1491/0x4100 [ 480.225405][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 480.231327][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 480.237714][ T31] ? __hrtimer_setup+0x187/0x210 [ 480.242674][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 480.248534][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 480.254624][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 480.260719][ T31] ? trace_kmalloc+0x1f/0xd0 [ 480.265345][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 480.272010][ T31] ? kstrndup+0xbf/0x160 [ 480.276300][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 480.281603][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 480.287650][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 480.293200][ T31] ? __nla_parse+0x40/0x60 [ 480.297631][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 480.303981][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 480.309667][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 480.316083][ T31] ? bpf_lsm_capable+0x9/0x20 [ 480.321041][ T31] ? security_capable+0x7e/0x2e0 [ 480.326002][ T31] genl_rcv_msg+0x60e/0x790 [ 480.330513][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.335589][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 480.341156][ T31] netlink_rcv_skb+0x205/0x470 [ 480.346145][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.350995][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.356052][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.361362][ T31] ? down_read+0x1ad/0x2e0 [ 480.365872][ T31] genl_rcv+0x28/0x40 [ 480.369861][ T31] netlink_unicast+0x82f/0x9e0 [ 480.374929][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 480.380256][ T31] ? netlink_sendmsg+0x642/0xb30 [ 480.385220][ T31] ? skb_put+0x11b/0x210 [ 480.389457][ T31] netlink_sendmsg+0x805/0xb30 [ 480.394259][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.399543][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 480.404883][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.410166][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.415487][ T31] __sock_sendmsg+0x219/0x270 [ 480.420192][ T31] ____sys_sendmsg+0x505/0x830 [ 480.424984][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.430264][ T31] ? import_iovec+0x74/0xa0 [ 480.435076][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 480.439966][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.445231][ T31] ? __fget_files+0x2a/0x420 [ 480.449821][ T31] ? __fget_files+0x3a0/0x420 [ 480.454560][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 480.459518][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.465368][ T31] ? rcu_is_watching+0x15/0xb0 [ 480.470161][ T31] ? do_syscall_64+0xbe/0x3b0 [ 480.474885][ T31] do_syscall_64+0xfa/0x3b0 [ 480.479396][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.484622][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.490696][ T31] ? clear_bhb_loop+0x60/0xb0 [ 480.495706][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.501621][ T31] RIP: 0033:0x7ffa8958ec29 [ 480.506050][ T31] RSP: 002b:00007ffa8a369038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.514664][ T31] RAX: ffffffffffffffda RBX: 00007ffa897d5fa0 RCX: 00007ffa8958ec29 [ 480.522637][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 480.530787][ T31] RBP: 00007ffa89611e41 R08: 0000000000000000 R09: 0000000000000000 [ 480.538866][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.547018][ T31] R13: 00007ffa897d6038 R14: 00007ffa897d5fa0 R15: 00007ffcaaea59f8 [ 480.555399][ T31] [ 480.558451][ T31] INFO: task syz.1.2284:13968 blocked for more than 144 seconds. [ 480.566275][ T31] Not tainted syzkaller #0 [ 480.571221][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.580105][ T31] task:syz.1.2284 state:D stack:26920 pid:13968 tgid:13967 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 480.592557][ T31] Call Trace: [ 480.595868][ T31] [ 480.598892][ T31] __schedule+0x1798/0x4cc0 [ 480.603394][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.608283][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.613131][ T31] ? __pfx___schedule+0x10/0x10 [ 480.618183][ T31] ? schedule+0x91/0x360 [ 480.622460][ T31] schedule+0x165/0x360 [ 480.629590][ T31] schedule_preempt_disabled+0x13/0x30 [ 480.635236][ T31] __mutex_lock+0x7e6/0x1350 [ 480.639854][ T31] ? __mutex_lock+0x5bb/0x1350 [ 480.644788][ T31] ? genl_rcv_msg+0x10d/0x790 [ 480.649549][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 480.654614][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 480.659738][ T31] ? radix_tree_lookup+0x240/0x290 [ 480.664920][ T31] genl_rcv_msg+0x10d/0x790 [ 480.669450][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.674870][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 480.679965][ T31] ? __asan_memcpy+0x40/0x70 [ 480.684771][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 480.690190][ T31] netlink_rcv_skb+0x205/0x470 [ 480.694995][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.700069][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.705422][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.711071][ T31] ? down_read+0x1ad/0x2e0 [ 480.715651][ T31] genl_rcv+0x28/0x40 [ 480.719670][ T31] netlink_unicast+0x82f/0x9e0 [ 480.724507][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 480.729788][ T31] ? netlink_sendmsg+0x642/0xb30 [ 480.735129][ T31] ? skb_put+0x11b/0x210 [ 480.739471][ T31] netlink_sendmsg+0x805/0xb30 [ 480.744377][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.749679][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 480.754639][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.759933][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.765540][ T31] __sock_sendmsg+0x219/0x270 [ 480.770215][ T31] __sys_sendto+0x3bd/0x520 [ 480.774775][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 480.779938][ T31] ? count_memcg_event_mm+0x21/0x260 [ 480.785469][ T31] ? exc_page_fault+0x76/0xf0 [ 480.790260][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 480.795926][ T31] __x64_sys_sendto+0xde/0x100 [ 480.800810][ T31] do_syscall_64+0xfa/0x3b0 [ 480.805438][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.811185][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.817502][ T31] ? clear_bhb_loop+0x60/0xb0 [ 480.822206][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.828256][ T31] RIP: 0033:0x7f18bbb90abc [ 480.832675][ T31] RSP: 002b:00007f18bc98cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 480.841125][ T31] RAX: ffffffffffffffda RBX: 00007f18bc98cfc0 RCX: 00007f18bbb90abc [ 480.849117][ T31] RDX: 000000000000001c RSI: 00007f18bc98d010 RDI: 0000000000000003 [ 480.857351][ T31] RBP: 0000000000000000 R08: 00007f18bc98cf14 R09: 000000000000000c [ 480.865450][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 480.873455][ T31] R13: 00007f18bc98cf68 R14: 00007f18bc98d010 R15: 0000000000000000 [ 480.881590][ T31] [ 480.885045][ T31] INFO: task syz.3.2287:13980 blocked for more than 145 seconds. [ 480.892940][ T31] Not tainted syzkaller #0 [ 480.898009][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.907177][ T31] task:syz.3.2287 state:D stack:28360 pid:13980 tgid:13979 ppid:5863 task_flags:0x400040 flags:0x00004004 [ 480.919607][ T31] Call Trace: [ 480.922892][ T31] [ 480.925882][ T31] __schedule+0x1798/0x4cc0 [ 480.930410][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.935342][ T31] ? __lock_acquire+0xab9/0xd20 [ 480.940232][ T31] ? __pfx___schedule+0x10/0x10 [ 480.945413][ T31] ? schedule+0x91/0x360 [ 480.949725][ T31] schedule+0x165/0x360 [ 480.954164][ T31] schedule_preempt_disabled+0x13/0x30 [ 480.959676][ T31] __mutex_lock+0x7e6/0x1350 [ 480.964406][ T31] ? __mutex_lock+0x5bb/0x1350 [ 480.969182][ T31] ? genl_rcv_msg+0x10d/0x790 [ 480.973946][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 480.979179][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 480.984416][ T31] ? radix_tree_lookup+0x240/0x290 [ 480.989532][ T31] genl_rcv_msg+0x10d/0x790 [ 480.994036][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.999118][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 481.004146][ T31] ? __asan_memcpy+0x40/0x70 [ 481.008982][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 481.014411][ T31] netlink_rcv_skb+0x205/0x470 [ 481.019187][ T31] ? __lock_acquire+0xab9/0xd20 [ 481.024042][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.029457][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.035161][ T31] ? down_read+0x1ad/0x2e0 [ 481.039614][ T31] genl_rcv+0x28/0x40 [ 481.043601][ T31] netlink_unicast+0x82f/0x9e0 [ 481.048415][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 481.053728][ T31] ? netlink_sendmsg+0x642/0xb30 [ 481.058718][ T31] ? skb_put+0x11b/0x210 [ 481.062972][ T31] netlink_sendmsg+0x805/0xb30 [ 481.067997][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.073291][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 481.078261][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.083553][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.088893][ T31] __sock_sendmsg+0x219/0x270 [ 481.093634][ T31] __sys_sendto+0x3bd/0x520 [ 481.098302][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 481.103327][ T31] ? count_memcg_event_mm+0x21/0x260 [ 481.108681][ T31] ? exc_page_fault+0x76/0xf0 [ 481.113377][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 481.118736][ T31] __x64_sys_sendto+0xde/0x100 [ 481.123500][ T31] do_syscall_64+0xfa/0x3b0 [ 481.128151][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.133350][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.139482][ T31] ? clear_bhb_loop+0x60/0xb0 [ 481.144155][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.150079][ T31] RIP: 0033:0x7ff249190abc [ 481.154812][ T31] RSP: 002b:00007ff24a015e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 481.163232][ T31] RAX: ffffffffffffffda RBX: 00007ff24a015fa0 RCX: 00007ff249190abc [ 481.171265][ T31] RDX: 0000000000000028 RSI: 00007ff24a015ff0 RDI: 0000000000000003 [ 481.179259][ T31] RBP: 0000000000000000 R08: 00007ff24a015ee4 R09: 000000000000000c [ 481.187388][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 481.195394][ T31] R13: 00007ff24a015f38 R14: 00007ff24a015ff0 R15: 0000000000000000 [ 481.203384][ T31] [ 481.206444][ T31] INFO: task syz.3.2287:13981 blocked for more than 145 seconds. [ 481.214152][ T31] Not tainted syzkaller #0 [ 481.219386][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 481.228096][ T31] task:syz.3.2287 state:D stack:28360 pid:13981 tgid:13979 ppid:5863 task_flags:0x400040 flags:0x00004004 [ 481.240063][ T31] Call Trace: [ 481.243351][ T31] [ 481.246446][ T31] __schedule+0x1798/0x4cc0 [ 481.250946][ T31] ? __lock_acquire+0xab9/0xd20 [ 481.255849][ T31] ? __lock_acquire+0xab9/0xd20 [ 481.260715][ T31] ? __pfx___schedule+0x10/0x10 [ 481.265597][ T31] ? schedule+0x91/0x360 [ 481.269848][ T31] schedule+0x165/0x360 [ 481.273989][ T31] schedule_preempt_disabled+0x13/0x30 [ 481.279603][ T31] __mutex_lock+0x7e6/0x1350 [ 481.284309][ T31] ? __mutex_lock+0x5bb/0x1350 [ 481.289069][ T31] ? genl_rcv_msg+0x10d/0x790 [ 481.293733][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 481.298777][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 481.303898][ T31] ? radix_tree_lookup+0x240/0x290 [ 481.309278][ T31] genl_rcv_msg+0x10d/0x790 [ 481.313784][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.318841][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 481.323856][ T31] ? __asan_memcpy+0x40/0x70 [ 481.328587][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 481.333969][ T31] netlink_rcv_skb+0x205/0x470 [ 481.338896][ T31] ? __lock_acquire+0xab9/0xd20 [ 481.343740][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.349022][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.354473][ T31] ? down_read+0x1ad/0x2e0 [ 481.359014][ T31] genl_rcv+0x28/0x40 [ 481.362985][ T31] netlink_unicast+0x82f/0x9e0 [ 481.367913][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 481.373195][ T31] ? netlink_sendmsg+0x642/0xb30 [ 481.378144][ T31] ? skb_put+0x11b/0x210 [ 481.382391][ T31] netlink_sendmsg+0x805/0xb30 [ 481.388714][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.394016][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 481.399128][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.404449][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.409728][ T31] __sock_sendmsg+0x219/0x270 [ 481.414530][ T31] __sys_sendto+0x3bd/0x520 [ 481.419146][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 481.424240][ T31] ? fd_install+0x97/0x540 [ 481.428687][ T31] ? fd_install+0x30d/0x540 [ 481.433191][ T31] __x64_sys_sendto+0xde/0x100 [ 481.438135][ T31] do_syscall_64+0xfa/0x3b0 [ 481.442638][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.447873][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.453954][ T31] ? clear_bhb_loop+0x60/0xb0 [ 481.458719][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.464786][ T31] RIP: 0033:0x7ff249190abc [ 481.469189][ T31] RSP: 002b:00007ff249ff4e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 481.477636][ T31] RAX: ffffffffffffffda RBX: 00007ff249ff4fa0 RCX: 00007ff249190abc [ 481.485699][ T31] RDX: 0000000000000028 RSI: 00007ff249ff4ff0 RDI: 0000000000000004 [ 481.493661][ T31] RBP: 0000000000000000 R08: 00007ff249ff4ee4 R09: 000000000000000c [ 481.501805][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 481.509867][ T31] R13: 00007ff249ff4f38 R14: 00007ff249ff4ff0 R15: 0000000000000000 [ 481.517917][ T31] [ 481.521004][ T31] [ 481.521004][ T31] Showing all locks held in the system: [ 481.528926][ T31] 3 locks held by kworker/0:1/10: [ 481.533946][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.544963][ T31] #1: ffffc900000f7bc0 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.557933][ T31] #2: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x1d/0xa0 [ 481.568327][ T31] 1 lock held by khungtaskd/31: [ 481.573187][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 481.583113][ T31] 2 locks held by getty/5627: [ 481.588087][ T31] #0: ffff88814e1f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 481.597950][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 481.608170][ T31] 3 locks held by kworker/1:17/9863: [ 481.613439][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.624565][ T31] #1: ffffc90003d0fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.638076][ T31] #2: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 481.649525][ T31] 2 locks held by syz.0.2193/13673: [ 481.654992][ T31] #0: ffff888143280100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 481.665242][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 481.677248][ T31] 2 locks held by syz.2.2201/13712: [ 481.682549][ T31] #0: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 481.692802][ T31] #1: ffff888143280100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 481.702908][ T31] 3 locks held by syz.4.2282/13958: [ 481.708447][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 481.716916][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 481.726336][ T31] #2: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 481.736351][ T31] 2 locks held by syz.1.2284/13968: [ 481.741549][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 481.749861][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 481.759034][ T31] 2 locks held by syz.3.2287/13980: [ 481.764284][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 481.772489][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 481.781484][ T31] 2 locks held by syz.3.2287/13981: [ 481.787007][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 481.795327][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 481.804346][ T31] 2 locks held by syz-executor/13986: [ 481.809725][ T31] #0: ffff888053f09918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 481.819974][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 481.831846][ T31] 2 locks held by syz-executor/13987: [ 481.837272][ T31] #0: ffff888027c7f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 481.847457][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 481.857400][ T31] 2 locks held by syz-executor/13991: [ 481.862755][ T31] #0: ffff88807c5ad118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 481.872783][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 481.882878][ T31] 2 locks held by syz-executor/13992: [ 481.888267][ T31] #0: ffff88807c179118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 481.898306][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 481.908484][ T31] 2 locks held by syz-executor/13993: [ 481.913840][ T31] #0: ffff888055f1b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 481.923948][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 481.933932][ T31] 2 locks held by syz-executor/13996: [ 481.939469][ T31] #0: ffff88804c7ee918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 481.949595][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 481.959725][ T31] 2 locks held by syz-executor/13997: [ 481.965394][ T31] #0: ffff88804c7ec918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 481.975476][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 481.985631][ T31] 2 locks held by syz-executor/14001: [ 481.991029][ T31] #0: ffff888052c72918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 482.001581][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 482.011538][ T31] 2 locks held by syz-executor/14002: [ 482.016916][ T31] #0: ffff888029259118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 482.027069][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 482.037305][ T31] 2 locks held by syz-executor/14003: [ 482.042674][ T31] #0: ffff88802925e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 482.052910][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 482.063027][ T31] 2 locks held by syz-executor/14006: [ 482.068585][ T31] #0: ffff888054105118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 482.078679][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 482.088960][ T31] 2 locks held by syz-executor/14007: [ 482.094380][ T31] #0: ffff88806332f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 482.104500][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 482.114721][ T31] 2 locks held by syz-executor/14011: [ 482.120115][ T31] #0: ffff888028e3a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 482.130194][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 482.140260][ T31] 2 locks held by syz-executor/14012: [ 482.145951][ T31] #0: ffff8880541d0918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 482.156021][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 482.165969][ T31] 2 locks held by syz-executor/14013: [ 482.171355][ T31] #0: ffff888033e7c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 482.181755][ T31] #1: ffffffff8f813e08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 482.191826][ T31] [ 482.194146][ T31] ============================================= [ 482.194146][ T31] [ 482.202589][ T31] NMI backtrace for cpu 1 [ 482.202613][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 482.202625][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.202632][ T31] Call Trace: [ 482.202638][ T31] [ 482.202645][ T31] dump_stack_lvl+0x189/0x250 [ 482.202663][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.202675][ T31] ? __pfx__printk+0x10/0x10 [ 482.202694][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 482.202711][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 482.202726][ T31] ? __pfx__printk+0x10/0x10 [ 482.202741][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 482.202757][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 482.202775][ T31] watchdog+0xf93/0xfe0 [ 482.202793][ T31] ? watchdog+0x1de/0xfe0 [ 482.202809][ T31] kthread+0x70e/0x8a0 [ 482.202823][ T31] ? __pfx_watchdog+0x10/0x10 [ 482.202835][ T31] ? __pfx_kthread+0x10/0x10 [ 482.202851][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.202867][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.202876][ T31] ? __pfx_kthread+0x10/0x10 [ 482.202888][ T31] ret_from_fork+0x439/0x7d0 [ 482.202900][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 482.202912][ T31] ? __switch_to_asm+0x39/0x70 [ 482.202924][ T31] ? __switch_to_asm+0x33/0x70 [ 482.202935][ T31] ? __pfx_kthread+0x10/0x10 [ 482.202947][ T31] ret_from_fork_asm+0x1a/0x30 [ 482.202967][ T31] [ 482.202970][ T31] Sending NMI from CPU 1 to CPUs 0: [ 482.349666][ C0] NMI backtrace for cpu 0 [ 482.349685][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 482.349702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.349712][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 482.349734][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 482.349747][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 482.349761][ C0] RAX: 47add9e4b65de800 RBX: ffffffff819683f8 RCX: 47add9e4b65de800 [ 482.349774][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba295 RDI: ffffffff8be33f00 [ 482.349785][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 482.349797][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a630 [ 482.349808][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 482.349819][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 482.349831][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.349842][ C0] CR2: 0000555e35563000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 482.349856][ C0] Call Trace: [ 482.349863][ C0] [ 482.349869][ C0] default_idle+0x13/0x20 [ 482.349886][ C0] default_idle_call+0x74/0xb0 [ 482.349909][ C0] do_idle+0x1e8/0x510 [ 482.349926][ C0] ? __pfx_do_idle+0x10/0x10 [ 482.349948][ C0] cpu_startup_entry+0x44/0x60 [ 482.349963][ C0] rest_init+0x2de/0x300 [ 482.349981][ C0] start_kernel+0x3a9/0x410 [ 482.349999][ C0] x86_64_start_reservations+0x24/0x30 [ 482.350017][ C0] x86_64_start_kernel+0x143/0x1c0 [ 482.350034][ C0] common_startup_64+0x13e/0x147 [ 482.350060][ C0] [ 482.350652][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 482.531677][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 482.540790][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.551011][ T31] Call Trace: [ 482.554285][ T31] [ 482.557206][ T31] dump_stack_lvl+0x99/0x250 [ 482.561791][ T31] ? __asan_memcpy+0x40/0x70 [ 482.566385][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.571573][ T31] ? __pfx__printk+0x10/0x10 [ 482.576171][ T31] vpanic+0x281/0x750 [ 482.580144][ T31] ? __pfx_vpanic+0x10/0x10 [ 482.584652][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 482.590031][ T31] ? __irq_work_queue_local+0x1de/0x550 [ 482.595573][ T31] panic+0xb9/0xc0 [ 482.599291][ T31] ? __pfx_panic+0x10/0x10 [ 482.603696][ T31] ? irq_work_queue+0xbc/0x140 [ 482.608455][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 482.614759][ T31] watchdog+0xfd2/0xfe0 [ 482.619003][ T31] ? watchdog+0x1de/0xfe0 [ 482.623329][ T31] kthread+0x70e/0x8a0 [ 482.627500][ T31] ? __pfx_watchdog+0x10/0x10 [ 482.632199][ T31] ? __pfx_kthread+0x10/0x10 [ 482.636811][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.642029][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.647226][ T31] ? __pfx_kthread+0x10/0x10 [ 482.651819][ T31] ret_from_fork+0x439/0x7d0 [ 482.656420][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 482.661540][ T31] ? __switch_to_asm+0x39/0x70 [ 482.666311][ T31] ? __switch_to_asm+0x33/0x70 [ 482.671082][ T31] ? __pfx_kthread+0x10/0x10 [ 482.675666][ T31] ret_from_fork_asm+0x1a/0x30 [ 482.680431][ T31] [ 482.683822][ T31] Kernel Offset: disabled [ 482.688138][ T31] Rebooting in 86400 seconds..