last executing test programs: 1m6.239088629s ago: executing program 3 (id=2126): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7fffffff}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x16}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000340)={@remote}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 1m5.707738759s ago: executing program 3 (id=2132): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x23d7, 0x7f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8600}, 0x4040042) 1m5.4023382s ago: executing program 3 (id=2137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000490000000e0001006e657464657673696d0000000f00b47ac0332b9916df991cf9afa25595e9746465767369aa13d26d186a45631ce4dd676f9b44b645b2fb050b5d78fbcbac1b3964e9d733c89f01351e402f07f56348465fc369bfc8429e788d98f4c1c45a6c7c555d0a79f8237ef3054f8c5340dbfb8ffe4051263b820c0ae261d53c2ff83b595a71362c4a0616b391f53413781d8ab296d85b2a69d363e14ca3efbc5f11829fd434e8903853e8108e30b4b4b72042fe0c509180b2b56c6a08dc9cae402f2d64d6af67085985bb7352ed71c0ea9fea282fc97535a56958c484d663d3"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000040), 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0xfe01, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m5.021323929s ago: executing program 3 (id=2142): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x22, 0x2, 0x3) sendmmsg$inet6(r2, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES32=r2], 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x22, 0x2, 0x3) (async) sendmmsg$inet6(r2, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES32=r2], 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 1m4.817297512s ago: executing program 3 (id=2145): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) close(r3) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) close(0x4) 1m4.334181289s ago: executing program 3 (id=2152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x6}, 0x18) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0x6, [@float={0xc, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x1}, @datasec={0xb, 0x7, 0x0, 0xf, 0x1, [{0x2, 0x401, 0x7f}, {0x5, 0x101, 0x6}, {0x3, 0x7, 0xb437}, {0x4, 0x50f1, 0x8}, {0x2, 0x8, 0x4}, {0x5, 0x7, 0x7fff}, {0x1, 0x3, 0x1}], 'x'}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000480)=""/188, 0xba, 0xbc, 0x0, 0x8, 0x10000, @value=r4}, 0x28) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r5, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0xaaaaaaaaaaaa0202}}}, 0x14) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 1m3.795182196s ago: executing program 32 (id=2152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x6}, 0x18) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0x6, [@float={0xc, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x1}, @datasec={0xb, 0x7, 0x0, 0xf, 0x1, [{0x2, 0x401, 0x7f}, {0x5, 0x101, 0x6}, {0x3, 0x7, 0xb437}, {0x4, 0x50f1, 0x8}, {0x2, 0x8, 0x4}, {0x5, 0x7, 0x7fff}, {0x1, 0x3, 0x1}], 'x'}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000480)=""/188, 0xba, 0xbc, 0x0, 0x8, 0x10000, @value=r4}, 0x28) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r5, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0xaaaaaaaaaaaa0202}}}, 0x14) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 25.031106902s ago: executing program 0 (id=2674): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10040}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x4000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000010000000095fcff000000000001000d1da7f4b848acd3490eba3d64bd3d0d517919587c2b4d684ce447a422ff6ffce5f0943b1fb83f8afcd523d9ea3501f01494a2552b50af634a610997544b952792609ed0d2d44e226b6a279a4925a39945b089214fb603d3bfab87fba412d4bc39ac60c02b381ace2c7465461c41634040e42176d341559518cd6fd30227dbd6a0bf6dd6a73cddb070b614730a4a30794a90"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000000010104000000000000000006000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x3, 0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ax25_int(r6, 0x101, 0x8, &(0x7f0000000100)=0xa, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 24.937882625s ago: executing program 0 (id=2675): r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x11d, 0x76, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x1000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000000000000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000080000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000120010000000000000000000000000000000040000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ac1414000000000000000000000000000000000000000000fc"], 0xec}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000018c0)='O', 0x1}, {&(0x7f0000000240)="4c0f7ff04f5f9c8f3f5325946930ebcd516c92d1e979bf8203dce0ae67adba6da5ab59c424ce88c0a8fa77f857e6ee6e5f7b0428a8faf99f9b08120bf59ed1d2d92da03c724c64dc7b395df0491c71adee2abb798ca5d8d31f37d352a1a186c9c1b8c333dd90eb2959514ab3", 0x6c}], 0x2}}], 0x3, 0x80c6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000000)=0x6e, 0x0) recvmsg$unix(r5, &(0x7f00000002c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)=""/43, 0x2b}], 0x1}, 0x100) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x40000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x0, {[0x6, 0x7, 0x7, 0x400, 0x7, 0x6, 0x5, 0xfffffff7]}}, 0x5c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000393b7cd8316992d519eb79b926427368c09ba687b4d9a00b535fbca1f5a928118c97bceded28e8173c5f5af83a24e2852464016b2be2139e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) 24.85188086s ago: executing program 0 (id=2676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@lld, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0xa00}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 23.92756198s ago: executing program 0 (id=2687): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r4, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4, @broadcast}}, {{0x2, 0x4e20, @empty}}]}, 0x190) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) 23.474134862s ago: executing program 0 (id=2694): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bind$bt_sco(r0, &(0x7f0000000040), 0x8) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x3) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xfff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfd1dd3f25b76f1c5}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x138, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x5, 0x5, 0x2, 0x8, 0x1, 0x0, 0x2ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x7}, {0x0, 0x4}, {0x7, 0x4}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x5}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0x9}, {0x2}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x1}, {0x6}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x6}, {0x2}, {0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x9}, {0x3, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x2}, {0x3}, {0x1, 0x7}, {0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x5}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x6}, {0x7, 0xa}, {0x6, 0x3}, {0x7, 0x9}, {0x1}, {0x4, 0x3}, {0x4, 0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x3}, {0x4, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x1}, {0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x7, 0x4}, {0x0, 0x5}, {0x5, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x3, 0x5}, {0x6, 0x4}, {0x1}, {0x4, 0x3}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x6, 0x1, 0x5, 0x36, 0x12, 0x1, 0x18, 0x24, 0xc, 0x60, 0x12, 0x30, 0x5, 0x60, 0x24, 0x1b, 0x6]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x79a, 0x0, 0x7, 0x2, 0x7, 0x1, 0x8, 0x5193]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0xa}, {0x6}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x1}, {0x4, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0x3}, {0x1, 0x8}, {}, {0x6, 0x7}, {0x4}, {0x2, 0x6}, {0x7, 0x4}, {0x5, 0x2}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x5}, {0x2}, {0x6, 0x8}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {0x3, 0x6}, {}]}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000580)={@dev, @private, 0x0}, &(0x7f00000005c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={0x0, @dev}, &(0x7f0000000680)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x2f, 0xd, 0x3, 0x6, 0x8, @private2, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x7, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2cc, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x820}}}]}}, {{0x8, 0x1, r11}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8010}, 0x20000800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000b80)={0x0, 0x10, 0x6, 0x4, 0xf, 0x7}, &(0x7f0000000bc0)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000c00)={r12, 0x59, "02e1f6efe1a5f979d89c7f88dd470ff48a99e897b1777ce6e2b73f35f17478c06eb7f11dd2d658a19a7b65e4da2aae2f9d6e69ffcd5f0f4b2af83e0bd77e295f823f08b2ab5aba3e37eeecf57b55eb5ff7a1ded74dc931ad4e"}, &(0x7f0000000c80)=0x61) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r13, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r4, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x811) connect$pppl2tp(r0, &(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x0, {0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}, 0x32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x37}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x8084) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000f40)={0x7, 'xfrm0\x00', {0x1}, 0xdcb0}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000f80)) syz_emit_ethernet(0x13, &(0x7f0000000fc0)={@broadcast, @broadcast, @void, {@x25={0x805, {0x3, 0xdd, 0x43, "4d97"}}}}, &(0x7f0000001000)={0x1, 0x1, [0x4e3, 0x944, 0xec0, 0x19b]}) socket$netlink(0x10, 0x3, 0x14) 23.468569901s ago: executing program 0 (id=2698): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="410305a1b727039dab30ac06db7f457fac5a"], 0x12) 23.325197008s ago: executing program 1 (id=2701): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c7000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async, rerun: 64) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000700000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028008000240000000010d000100434f4e4e4d41524b0000000014000300e4624777db9d97adbf2cd16d6fb1131f0900020073797a32000000000900010073797a30"], 0x98}}, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x1, 0xfffffffffffffffb) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) 23.208338623s ago: executing program 1 (id=2703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r1}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500"/96], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x1c, &(0x7f0000000480)=@raw=[@call={0x85, 0x0, 0x0, 0x74}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff9100}, @alu={0x7, 0x0, 0xb, 0x9, 0x9, 0x50}, @tail_call, @call={0x85, 0x0, 0x0, 0xae}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x45, &(0x7f0000000600)=""/69, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000700)=[{0x5, 0x2, 0xb, 0x4}], 0x10, 0x3}, 0x94) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f00000001c0)={0x70000000}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x8, '\x00', 0x0, r10, 0x0, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, [@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x820}, @alu={0x4, 0x1, 0x8, 0x9, 0x8, 0x80, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x29, &(0x7f0000000380)=""/41, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1e, r4, 0x8, &(0x7f0000000440)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x4, &(0x7f0000000900)=[0xffffffffffffffff, r10, r11], &(0x7f0000000940)=[{0x5, 0x5, 0xa, 0x5}, {0x5, 0x5, 0x0, 0x4}, {0x5, 0x3, 0x2, 0x7}, {0x4, 0x3, 0x2, 0x5}], 0x10, 0x8}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = socket(0x2b, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r13, 0x11e, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r13, 0x0, 0x488, &(0x7f0000000a40)={{0x33, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'wrr\x00', 0x7, 0x7, 0x25}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4e22, 0x4, 0x0, 0x9, 0x7fffffff}}, 0x44) ioctl$SIOCSIFHWADDR(r12, 0x8946, &(0x7f0000000780)={'ipvlan0\x00', @random='\x00\x00\x00\x00\x00 '}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04000000000000000002e1ab8bf000000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000001c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000120000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x61}}}}]}]}, 0x70}}, 0x0) 22.858077715s ago: executing program 1 (id=2708): socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd2b, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xb2}}, 0x1c}}, 0x2000c845) socket$netlink(0x10, 0x3, 0x0) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd2b, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xb2}}, 0x1c}}, 0x2000c845) (async) 22.774942865s ago: executing program 1 (id=2711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@jmp={0x5, 0x0, 0x6, 0x6, 0x7, 0xc, 0x10}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3, 0x9}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x28011, r1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) socket$inet6(0xa, 0x80002, 0x88) (async) r8 = socket$inet6(0xa, 0x80002, 0x88) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0x0) (async) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(r10, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"}) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x0, @local, 0xe}, 0x1c) sendmmsg$inet(r8, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 22.659492962s ago: executing program 1 (id=2713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x240) (async) r2 = socket$rds(0x15, 0x5, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x8, 0x2, 0xfffffffffffffff9}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) (async) socket$isdn(0x22, 0x3, 0x21) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xb5, "c3273795ba090f2a33ff5ce06f6e196062c386dcf8b61007137c68ed1c100d3002487f1d6285a2af531bd03a18aa71b71df4f1a57d904e3df768d3dc592de64cf7094e0222f45e1fdef603aa4840b694fd3661a47813ae629536c491d76ef933fbeeb9c71d2c460ea70ac06ef15645c666f889974200d63a2d24d0cb03690c97bf8ab647627abc30ef050cc68f76b59d9176306b1a406f5f2f7992a06ec93d03c58af9943b5bfdbecceb2937dffea5d319ae913130"}, &(0x7f0000000200)=0xbd) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={r8, @in={{0x2, 0x4e21, @private=0xa010101}}, 0xffff, 0x22, 0x4002, 0x3, 0x2009a3}, &(0x7f0000000300)=0x98) (async) write(r3, &(0x7f0000000080)="5b20bc9cc46a", 0x6) (async) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) (async) setsockopt(r4, 0x80, 0xfffffff9, &(0x7f0000000380)="2bb64f199f0dcdc58928a77ba4961cd98a77b7440eb397a84c3faeeab7034fb90a8c360a2f7ae1abf4f0e2b289266a64360ad7733717b99fda46ef52a1e5a69c2ea68fc4663b2af4344b40eb6387513a29d4d70b5f5c5cac5451fa0a5b7cc23dbd986c7abf13477609f590d78f70a945abd069324eb53126673c8de3415861b6918d5c34aeea64e5cca530b47869db6504e0e8d7035eda75edcb4f43549dad1ae2aa6bae12e85c3071c25fa4195e10b523f98e6c93bb57f6", 0xb8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x2, 0x25dfdbff, {0x3a}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xfffffffffffffed8}}, 0x10004) 22.515823226s ago: executing program 1 (id=2715): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "e4177f", 0x28, 0x89, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], "bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bce"}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x7}, 0x8) 21.891505583s ago: executing program 4 (id=2727): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, {[@fastopen={0x22, 0x5, "27d3de"}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410001, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 21.819701776s ago: executing program 2 (id=2728): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) 21.769789797s ago: executing program 2 (id=2729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x34}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0xa4}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000007380)={'ip6tnl0\x00', &(0x7f0000007300)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x6, 0x2, 0x4a, @empty, @private1, 0x91, 0x20, 0x7, 0x8fcb}}) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}}, 0x24000000) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000007500)={&(0x7f00000072c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000074c0)={&(0x7f00000073c0)={0xe0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4409c}, 0x840) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) clock_gettime(0x0, &(0x7f0000007240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007080)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/63, 0x3f}, {&(0x7f0000001340)=""/37, 0x25}], 0x3}, 0x8}, {{0x0, 0x0, &(0x7f0000006cc0)=[{&(0x7f00000013c0)=""/74, 0x4a}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/152, 0x98}, {&(0x7f0000006c40)=""/70, 0x46}, {&(0x7f0000007640)=""/246, 0xf6}], 0x5, &(0x7f0000002540)=""/80, 0x50}, 0x4}, {{&(0x7f00000025c0)=@ll, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002640)=""/159, 0x9f}, {&(0x7f0000002700)=""/50, 0x32}, {&(0x7f0000002740)=""/34, 0x22}, {&(0x7f0000002780)=""/185, 0xb9}, {&(0x7f0000002840)=""/206, 0xce}, {&(0x7f0000002940)=""/133, 0x85}, {&(0x7f0000002a00)=""/232, 0xe8}], 0x7, &(0x7f0000002c00)=""/172, 0xac}, 0xeb51}, {{&(0x7f0000002cc0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004200)=[{&(0x7f0000002d40)=""/245, 0xf5}, {&(0x7f0000002b00)=""/51, 0x33}, {&(0x7f0000002e40)=""/30, 0x1e}, {&(0x7f0000002e80)=""/235, 0xeb}, {&(0x7f0000002f80)=""/9, 0x9}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/84, 0x54}, {&(0x7f0000004040)=""/247, 0xf7}, {&(0x7f0000004140)=""/160, 0xa0}], 0x9, &(0x7f00000042c0)=""/4096, 0x1000}}, {{&(0x7f00000052c0)=@qipcrtr, 0x80, &(0x7f0000006680)=[{&(0x7f0000005340)=""/199, 0xc7}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/215, 0xd7}, {&(0x7f0000006540)=""/86, 0x56}, {&(0x7f00000065c0)=""/63, 0x3f}, {&(0x7f0000006600)=""/92, 0x5c}], 0x6, &(0x7f0000006700)=""/170, 0xaa}, 0x10000}, {{&(0x7f00000067c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000006840)=""/111, 0x6f}, {&(0x7f00000068c0)=""/141, 0x8d}, {&(0x7f0000006980)=""/71, 0x47}, {&(0x7f0000006a00)=""/23, 0x17}, {&(0x7f0000006a40)=""/117, 0x75}, {&(0x7f0000006ac0)=""/86, 0x56}, {&(0x7f0000006b40)=""/80, 0x50}], 0x7, &(0x7f0000007540)=""/231, 0xe7}, 0x2}, {{&(0x7f0000006d40)=@x25, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000006dc0)=""/26, 0x1a}, {&(0x7f0000006e00)=""/104, 0x68}, {&(0x7f0000006e80)=""/221, 0xdd}, {&(0x7f0000006f80)=""/52, 0x34}], 0x4, &(0x7f0000007000)=""/74, 0x4a}, 0x10}], 0x7, 0x2000, &(0x7f0000007280)={r13, r14+60000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010200000000000000000100ffff08000240000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073017a320000000014000000060a0104000000000000000001"], 0x84}}, 0x0) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac141425000000000000000000000000043500000100000000000000000000000000000000000000000000000000000000000000000000003300000002"], 0x23c}}, 0x4004000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) 21.763111878s ago: executing program 4 (id=2730): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01040000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f0800034000000000080003400000000a080002400000001508000140000000c53ceda0fd4e519c18b374c1e40b0800016aeb000012080002"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r8, 0x11, 0x65, 0x0, &(0x7f0000000100)) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) 21.6226979s ago: executing program 4 (id=2732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4112, 0x1010}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000000a00)=""/4092, 0xffc}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) unshare(0x20000400) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) write(r4, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4b3, 0x1}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x20048880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x44, r2, 0x509, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}]}, 0x44}}, 0x4044000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000500)={0x0, @aes128}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8000, @mcast1, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x4004) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 21.359650243s ago: executing program 4 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3, 0x9}, &(0x7f00000002c0)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdc02, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfe}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 21.255880293s ago: executing program 4 (id=2735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8", 0x20}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000000)={0x2, @rand_addr=0x64010101, 0x4e21, 0x0, 'lc\x00', 0x14, 0x0, 0x4a}, 0x2c) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r1, 0x3c1ef5685f8d0157, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 21.236671516s ago: executing program 4 (id=2736): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="40e60201037d0aa3"], 0x8) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000000c0)={{r5}, 0x4, &(0x7f0000000080)=[0x9, 0x2, 0x4, 0x8e], 0x2, 0xd, 0x1}) r6 = socket(0x840000000002, 0x3, 0xff) shutdown(r6, 0x1) sendmmsg$inet(r6, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004086) 20.811883969s ago: executing program 2 (id=2739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) socket(0x28, 0x5, 0xa95) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x400442c8, 0x200000f3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x104, r1, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xec, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x104}}, 0x2000c050) bind(r2, &(0x7f00000000c0)=@generic={0xa, "cb31fd65731b425050b225f4434ec6d794f16f7f13dc76649339e6272c68f4c54fbc8d0fcfd9c594c9784cf9d5e154ed4f45a7a8bcee81f33d203d41b50de821ed9186fbbb1f99c0d97dc231fe4ac298d92eecd1309244ca6aba8c4216b6eba561bc9c27679a65ee73d988a20d814df8433b25185f42cc9e9e443d9ceec0"}, 0x80) 20.647853248s ago: executing program 2 (id=2741): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 20.487771598s ago: executing program 2 (id=2744): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet(0x23, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x73) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010400000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.364431897s ago: executing program 2 (id=2745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "0000e3ffffff6331ce5db6ba62d46a00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdc02, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfe}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000100)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="8e07bda5b34782a4b4501f08e629a7e47fd2de735cc471c562317049db9f81a310ea18b4a174cb6bdb592376bfd553f040aa3b37cf7ae6e6f5c8be956424f2", 0x3f}, {&(0x7f0000000380)="53367e923a053d81b001a9d78bd83e4e881c63bba2803fd90ae752ee1b758026384751e367507596ceda540882fb06e9c51163d8ab90e2961de6e18435d3e0edfb8ff0090060405c4001c4438b8201a47a5c7de82f8b5d17ade6b5dbc8cca8d40931ac1e7a1304d8130f5a8b52e17957ea8dcd2c210fa86a3e36fcb04c9e909178361eb46910f50c5aa43fd7612d2f6412cfd2814c6bbdaded5fe50466455724b0a5ef14192c6f6be52a131e7ad05b", 0xaf}], 0x2, &(0x7f0000000440)}, 0x2004c0d0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) 16.685920735s ago: executing program 5 (id=2778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000cc0)="2cbf2cb67a7b30ce7fc291936bc99f5311320d1955edc2ac0c090f558245242a839eaea3024bc2155b87c13146444f27ef98d92466e664c7c35189bc7752bd309a48eae3812f676b1e352de8f5b575db46f76635d6fe8f190969d420c22955586c50912d2f9a5880bb05a7022f6a2eef67353f3769356aa03c2bacfdd32833fc95a2e41b211252d26c1725581579e76ef9", &(0x7f0000000c40)="e05e560abae27ed89a7c4ce4eac9dad63de12ddc6701c0e5f147df582537b9130289b573b5a4d6e21bbfdacdc31cc0c719247cc3b1816b7c58e9da85b867d8bc9ddfe26cd59f26078a6a8c01796b081e011d8565317d1fe83e4e7e1f88c04fd3086042b4532bacd6a12abcca112250ac4f87642195e3624a", 0xfffffff7, r0, 0x0, 0xa002a0}, 0xfffffffffffffd43) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000f00)="1e6123c1f5b27044cc38701a2d3fa4bb1226dc280095c86a465233726d67877c973b6ad699b8081fe3e384840ee57c98299415655ddc7a4be6dabc60144288232bebcf2aed566b4c41d1d698b15fa54cc84b61834f455f79853db8db973f579853dfc71cadfdf4621669f333ffd3fcd791007f9cc621ce57aa451ed3fd72897a70a447f22717223254a9e5647556667f2ba43207109c965a2b89d5ea7beadd74a11779aefeb340d00ca5f1c47350ec5cc23fe9242f17b052ca631fd8e44314b3", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000000680)="78525e085f339cbfe0fdf32ed4495b44f4c7c4befd8936770049d97dbbb1e3dd654ab4ca9eb01aed7ea551cfaa662374b09b8b2c5ed0e835677260bbd56539836087db982cfb679f03e551fe6707a5884bfaf7302d82ee1b713d87e1ff9aa1c65ecdc696", 0x1, r0}, 0x38) r1 = socket$inet6(0xa, 0x0, 0xce5) sendto$inet6(r1, &(0x7f0000000540)="b09d45800cbce6ca53c3d7a72d8ab849ba343bf9925d23856f085305dd1c66da1404bbd37bcfc2f34ad822f208da272fe0823204b24399b194c9dda905c70b9025249a633ef54c1d04ee9607a115175922dfa2abcbdd0b75f3ff2722f2493f269affe1a1ffcbbcc908bf4b853092bd218196007f11858e7b63ab48de35c8a8aa12a342d70ec50a7dce304b1d822a6250c6af05fc20dbb6f016b95a671b5b1091ddee3a6c4de5c7325b4785ec545686a8b0bd33d312896e", 0xb7, 0x40400c0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @private0}, 0x1c) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000600), 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000700)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES8=r2, @ANYBLOB="9bcc22d3b2b69e7c66f70bcfcf946137a43e705ada73154dba0c79df1ea0d7cec792450c606152c8770655977af838d40c6a54f4328680000b669af18843e35c92b696082697b6f655", @ANYRESDEC=r2, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40400c5}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d80)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0xffb1) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x7, 0x8, 0x7576}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r5], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="040000001500010029bd70000000000013000000"], 0x14}}, 0x8000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000011c0)=ANY=[@ANYBLOB="400100001000010000000000000000000000000000000034fe80000000002c000000fe01835b530000000000aa000000002000d9196f8900002e000000d5e2d0e361d3f43520acdc1c6a9c5d70ae85f51959b253261148c201008219ea18d0df0c79492747", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="fe8000000000000000000000000000bb000000006c0000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000005c25edc1ab43150090d7888ab11000000000000000000000000040000000000000000ea860000000000000000000000000000000000000002000000000000000000000000000000020001060000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600000000004a325ecb6a7a905cdb95da79492b4569229c5d4359a5d271db7b2a75633337cfee20a5dbaf05fe8acc01acd360dc3920f5d18b04c1c227f43278aed38b638ff862ed9167486caf8ca74345552ed215b7e86e69c60489c5cf038b6897efc39ce197c02e712419dba6674a"], 0x140}}, 0x810) bind$netlink(r8, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000440)={'dvmrp0\x00', 0x4000}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$ax25(r9, &(0x7f0000000e80)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000003c000701fcffffff00000000017c0000040036800c000180060006008e0a0000", @ANYRESHEX=r8, @ANYRESDEC=r6, @ANYBLOB="28944f5f97e3d95f2b62c52066e567bf02783f01e96f39f9fa1c51428e6b76d40adf803324abe6c14c893124e21c70da6a777b2639c757a2cf975a2029a7cf124d800ee76028f118a6c0c0b3bded890d38e152f582ba23993859f6648144175b4c6b5f867bc5dd7923b5cadb99072f1f0274d8b12da2fb1c6bd3c6f04c8bd7aa4e36cfda9a137431168b02d2f22e1b8536a66fb546436fb32731fed9973b9e483f172bbc1686122f0bd6d95a83ac17bf8b10b6fc8a3a169f8c64813ba42a", @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000105000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) read(r10, &(0x7f0000000140)=""/78, 0x4e) 15.825072595s ago: executing program 5 (id=2779): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3, 0x9a9, 0x400, 0x3d1e5eb6}, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9af}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc6e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x24050000) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x800) (rerun: 32) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x804) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) 15.735964538s ago: executing program 5 (id=2780): gettid() r0 = socket(0x8, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x1, 0x4000}, 0x90) r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x8000, 0x1, 0x6, {{0xa, 0x4, 0x1, 0x1a, 0x28, 0x68, 0x0, 0xf, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x14, 0xc2, 0x1, 0xf, [{@rand_addr=0x64010102, 0x1}, {@remote, 0xff}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@delnexthop={0x38, 0x69, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4802}, 0x85) 15.725978831s ago: executing program 5 (id=2781): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x11, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x1b8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x434, 0x3f4, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0x2e, [0x101, 0x7, 0x1, 0x7ff, 0xf, 0x1, 0x61, 0x5, 0x2, 0x9, 0x7ff, 0xffff, 0x7, 0x400, 0x4, 0x4, 0x8000000, 0x5, 0x7fffffff, 0xa, 0xb, 0x10000, 0x82e, 0x975, 0x8001, 0x0, 0x4, 0x2, 0xe, 0x3, 0x9, 0x6, 0x8, 0x9, 0x200, 0x101, 0x371, 0x0, 0x4, 0x440b, 0x0, 0x81, 0x9, 0xffff1b09, 0xeb25, 0x200, 0xff, 0x2, 0x7f, 0x9, 0x4, 0x0, 0x9, 0x5, 0x9, 0x4, 0x5, 0x5, 0x4, 0x1000, 0x0, 0x4a37, 0x1000, 0x8], [0x7, 0xfffffff7, 0x8, 0x2, 0x3ff, 0x6dbc5c78, 0x8, 0x75, 0x0, 0x4, 0x40, 0xb, 0x5, 0x2, 0x6, 0x8, 0x6, 0x559c579e, 0x3, 0x400, 0xefad, 0xf4, 0x6, 0x4, 0xffff7eb8, 0xe702, 0x8447, 0x2, 0x2, 0x83, 0x6, 0x7, 0xb, 0x401, 0xfff, 0x7ff, 0xffff0000, 0x0, 0x7, 0x10, 0xf, 0x7f, 0x7, 0x1000, 0x6, 0x200, 0x3, 0xfff, 0xd, 0xc86, 0x3, 0xc, 0x5, 0x8, 0x1, 0x68, 0x101, 0x33f, 0x2, 0xffffffff, 0x5, 0xff, 0x2, 0x8d9], [0x400, 0x2, 0xf, 0xfdc, 0x10001, 0x4e2f, 0x4, 0x8, 0x6, 0x8, 0x1, 0x101, 0xb59, 0x60d84c40, 0x8001, 0x1, 0x3, 0xf, 0x5, 0xfffffffe, 0xd, 0x0, 0x6, 0xd53, 0x9, 0x5e, 0x9, 0x80000001, 0x131, 0xfff, 0x5, 0x3, 0x43a, 0x7fff, 0x8, 0x9, 0x1, 0x2, 0x1, 0x80, 0x3, 0x416, 0x5, 0x2, 0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd, 0x2, 0x3, 0x27a3, 0x2942, 0x7e8f, 0x6, 0xda, 0x8e, 0x7f, 0x3, 0x7, 0x7ff], [0x9, 0x7, 0x81, 0xfffffffd, 0x4, 0x2, 0x3, 0x3, 0x200, 0x7, 0xffffffff, 0xcdc, 0x9, 0x7fffffff, 0xfff, 0x2dc00, 0x1, 0x3, 0x7fffffff, 0xf0dd, 0x8, 0x9, 0xfff, 0x9, 0x0, 0x7, 0x8001, 0x9, 0x80000001, 0x4, 0x4, 0x40a0, 0x4, 0x0, 0x5, 0x5, 0x4e, 0xb911, 0xb4, 0x5439c638, 0x8, 0xfffffff4, 0x3, 0x0, 0x5, 0x9, 0x61, 0x8, 0xcfc, 0x8, 0x7, 0x4, 0x2, 0x3, 0xd6a, 0x2, 0x8, 0x2, 0xe1ca, 0x5, 0x710c, 0x7, 0x9, 0x4], 0x14, ['&:(#]\x00', '%+\x00', '\x00', 'NOTRACK\x00', '\x00', '\x00']}, ["", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x91787947628727a0}, 0x20000004) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000301010478b42259f600000000000000000600b8"], 0x18}}, 0x4010) 15.605296957s ago: executing program 5 (id=2782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001180)={0x1, &(0x7f00000010c0)=[{0x2, 0x10, 0x80, 0x80000001}]}, 0x10) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)}, {&(0x7f0000000140)='ZQ', 0x2}, {&(0x7f0000000180)="eead4c5a297d43a6155aa715a61752913f5a60be553f8360c73e3845d23d", 0x1e}], 0x3, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="b1624f5718ee6384578ea9c07a7e5b45e5326bdab08ac971641c3c5a23e34a2e7147f3c498bc7853d1d521971020f1a2af8201c52bf37e0f68134a075cfe2edc1f287fe4c9ed76f08b449bd44818817f482b37702b9f72c30173e0d18bf6b47f930a207b679d27d5b37f7de57d51b92b7fd6cff5fdbc80d71e92cf3f849157ef0edfcafc7aea1acd4daa955bb7fbf64b6551db66ce22776df369c987f601883a8e1e7484a95e5e20a2adaba86a5b5047e60c16783d75a6226d09859e9096898fd9ace40a50f975c7821df57b46f7defeede23c352698", 0xd6}, {&(0x7f00000003c0)="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", 0xfc}, {&(0x7f00000004c0)="2bb3678e02832f38ebc4863f72c827d221c06bed00ca16869253e9de90dd0460204de7f62c4538314c2a30a6f76a28bb499fe217ebe34dc506cbc685b774e3d09982f784f40cf00da2cca2f9e4e5087692fa3f1b4a46be1f525abf29812a6aea13ab109be1c237da5b03002fb67b4b65e5deeac99dbdc18deb5bc0c91c0f1492aafd7420", 0x84}, {&(0x7f0000000580)="107e712ca0c51f8d5645718ba0fae4ab88954d3b651bf158b8b37a43cc0855ffda987fb62af97728ef6c4dd31fec3dc5b203234b37e6eaa38e4417fd935905695e873fd78d3ee0de0bda39f7ad38fe3dc7c09ef7a440858687ead981303b2fcc5d926c7abba86483cab749e81b7607c97a790aba968446de4bc59f", 0x7b}, {&(0x7f0000000600)="39dd564b0e7f66c1537cd62ec10e1e89f9cf9589c62b5462e9361b3bea4862ee8805a4a507d7933deffea70eccf651517d8d1e3e63a26d1b9d8c95c4cf3e72ae74732671ead5167e2c3b66ed8ffe3d7bd20adeefdf01c892b82e05e3104c30502e34d8f7d83cacde28ac4cdb8a", 0x6d}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000000240)="ad145d2f92ea261acff080133980", 0xe}, {&(0x7f0000000680)="68d36a7a3592fe1718b6919ff23d899ca09fdf93c678cd4284c6e604c744bdfb39bb79f690096199651c62589bf1e6cd261b80c0e1c1fece544ac18c0a6773343e39fc409c3ff07afc74f23726800369c9a42875077aa233fbc25ca060234021cfc9b7b81bac82eb834a2b725e74f7f119dd145aa46b668e9806e12905f5daa48acbe6d8d0b037cc6b1b5b53166ec0c837e6de50ca6418f19380226c7cd42920e5f7571974836bdac0adc69556c8fc479c85056d5e75e93fb9d1463c347b2be8b001f2b6bd7feeb98c8d08adb62100f2ae9083f5339eac56e6c378515819c9933fb6375167f414d6889a059fc79d3f1a8ba312067ecf4ef916", 0xf9}, {&(0x7f0000000780)="a308f07df39224626c87d7ad968214708df0bf58ee45f0d18dee22dc0bacaab1e964e0dc6d2f107fa1f4c39df26f246da676c0bee7f632849358807c3c1422f09cba38fee109f4639894409bc49f7d63afa6bc42204f77a1e74c1c7061714b0c5751b2278e6a44fe91acd4537b54636fdfaedc15e1623ef4e45306c85d1932e1d0d31c43c8f6be8887585ff171f1e4a1542cddbaf02928cc4393710f2e5b9e51958021bec6bb311f19cb11a43c3a02af097a0ef0e5e5725f92539480f639579a9bbd363f4a50c6864042f0536f865052aa026f37eacf905fe67729", 0xdb}], 0x9, 0x0, 0x0, 0x880}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000940)="8bc57a0b35ad801e0f07cadc0a", 0xd}, {&(0x7f0000000980)="cd178f6b6c3b66586eb66acf5fb3be57db9e6c76c0e93fce70ec5895500e8db9", 0x20}, {&(0x7f00000009c0)="746c4e71c15087cf5cf8668291bf193f361ce6c1331f8baeb7cfbca2eb606aaaccbdab684d5b119bdf89b363311bd7d9fd17cf9f24168bc9ac33e6643527f2103e4ae1ed53c76dfe0b775eef581a61582ab49caa16d15b59cefd45ed6be4c071cdd3b6a0435f49b6a0498627b43c337eef08c8611bf4ec69c4", 0x79}, {&(0x7f0000000a40)="6d842093c5d199eaeb63ef3139", 0xd}, {&(0x7f0000000a80)="0c6799da63d34a9bdeba9c9e8e0c153e17cb22acb50f93af4f1c5eab6af2a6d0885951b0564885a6fa02d1a7610f1e4395061f13edb309434986d5c34b5e7d6a2ce2c70ee5b8bdd15013a6355c90bd1e1cbb515ad0d432f41da415752952f4975af11353c3e69824165a616d284f4d6c4ae5e44b2297c1dbee5ff3e18b33fc64747c5c93d18e35e2b07788d836510d3d0b2bc5b806d35c014cd732912d861db6b86d90464ed4ad295bdf807408676060f9b3304867eed7288e69065c579a55c36fe1d2a4f9a32abd5a82d7ed9fff3afbe2c83eceffa1745a910c03e0ed267ec2298007b10e880cb5824c53ad4e358a21eb53b9972e95c50a816a6b8d511028", 0xff}, {&(0x7f0000000b80)="d02deb1784c17856a8edc2e66e0f7a61ca09b912af5f7d41f89182e113dd9c30fd037c892bd67845dbe633c25198427a3ef20482254097232b9debf4812e72f0a570a86ed5c80905b8f4dc176f22a666e5771860c7aeb7368506c8b0243d145612ecf68e0a713e6d6a9bb56b424707e14266fec656cf0fe6eac0549f7938300abb28949da960d260e0ee4604cc5f0a16e6402783f95132cd60952a7aae1bc8d0a6d0edb3547b1154a10e9c84273e83cffcfbb2893b0597124a50d3bb25b73c9820a609512ea5997bc19cad65280ea7b15a46104814eb0ee25134e50682cb", 0xde}], 0x6, &(0x7f0000000d00)=[@assoc={0x18, 0x117, 0x4, 0xfffffffc}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xd}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xe0, 0x117, 0x2, 0xcc, "61ef0e77cc05d788e654b36420d5c729dbbaf5bd56bcc631d99ac78ec8cf7fc25da1cbd6332a6e35c2fc7c30b9e905d475f82dfbcde34034848defaa2002eeb393846b424158c02cf836f18e98167c894041484a62fca56853d41313ddef3c093603c8fc893e598e9d19d58e5b3bcba1589299ae846c50d2e08e4cd072e30e3f501ea9dc9ee0f2e6a7232c4cc36ef842d125ccf8e5554964d903bd25e798cbd61a2a76a420a8711f26c9cb61911c82309723c0e24bae515ff880739f2027709c20e4433eca2c1c048d5c4dd0"}], 0x1a0, 0x40000}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="6396bb8885f2438df780b40e4847e8af7eacafe841cd6081d7b3da79a81ce34c399108ef9a986292706c0b95a68626c45327698bb217fbe43e9e06e8b2a28960595fd3f3b39f1cb88f67a9b99632b04ed335b987ee0d8af8ffc90eb054e2e8acbb896f4bb1bbdad5598e0d27c3c0d765ab9f11de00d2c671cd83c16f82c602d116d4e6f9d8fca790dd5349fa5afac279e661e457f527bb8c6c07397f512760b69f6a844c98e0f37d45df4b971bd3c40473fd7e794051a156ffe4c1c617b166eaf89f9cff44", 0xc5}], 0x1, &(0x7f0000001000)=[@iv={0x60, 0x117, 0x2, 0x48, "3d2cbf930c80eae0cb6e4925ac21e9072005ae92e7df8ac27f36a3d8236372fd2186381abd374ab9d4121859587b584978e1e82bff7ce57ba3519c09d4b372446dafce975e92c42b"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x401}], 0xa8, 0x20040801}, {0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000021c0)="2bbf3f15c317f0db26a39699e51631c68e9742ab93b9fa366ad7b397dc959ff9da2a6c8eef6931b776ad8d2b9c7d6a453cf941a3bda74d4a7717988746bc25f8aaf872deb7d317763092d3bc92383b879d8bb86a884a1aaec3d16c9849075017c0f35281287320c4a67ee90ed210b27c9695799be7b40582e6c8f33e0c4664ff14f88800ed289a424054e9834f03086f7193e22f902a985a386f55a070939f2865fc6054fdf4a95e862ee325b203aa44072084f85f50da726f797cf60caba6f388ec9ec5968947f52798a999022517c1db12a79f", 0xd4}, {&(0x7f0000001100)}], 0x2, &(0x7f00000022c0)=[@op={0x18}, @iv={0x110, 0x117, 0x2, 0xfc, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8674}], 0x158, 0x800}, {0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002440)="f24821ce2eaa1aa25452ed6ce24c21c0b5ad4fae79961ac9f26f6ccc2cb4099a552bab450888b53a0a126d16c83fb430ca8e2b24ec497588f5bb1eb659e3364dba4a2200a80a67c29f81ac799267e4994176892110f4a728bbc7f1fa6c243e188f4f077897b803c16f0bfc13e3f35a4611b5f00817efd70a695d2aa37e455872540e1aea15abf1da132cd12218753acef75949d1e475296c30946a", 0x9b}, {&(0x7f0000002500)="34e3e8f7efc79dbd8bc8b134d79e506df6642bf387cb69e32e5a6796f9f2f0134217eb1157af0ca6ece24d55f4cd86b8cdb6c1e3d402082e5780c2a0744272bd4b7a1797e3f3660ff12793637ffdd744da1a1b3c35aacc6e698947118e02426e37b1bcbc2a95e282b59463e371ede40b0b4e21202b468032545eaa75d6e6cc3326942f2f2a45ba243c0d52df0d3263b6", 0x90}, {&(0x7f00000025c0)="edd444482d9f77151db90c298fa774c6153504632a9b79a0f1f2b438aab0d24c9f71ab159dccd2d081a17964ae446d857df2fdb5a1cd595d3d3bd1f1ee2010487c0e174de99716b29f58987678b415bec45dccced14d34965c8b28d797f29637b76782903a8878836c03ed9849abcd0745bab175290f76ffa61eb38835cfe4c0cf7b93e48a01d786af54b408bb5909be9a256070aebff3425f8185502cfd797d3e4a6d00eddfed47e17e01d69e397873682bccc12f22f2a914bf5d290b2d2bd256ee", 0xc2}, {&(0x7f00000026c0)="162d8c53fc19ddc53f3ace2914e09c9e3874cacf79572aab95789dd37fc930ad0f1736af40b699d6277039145648eb845d5e595100df", 0x36}, {&(0x7f0000002700)}, {&(0x7f0000002740)="89f2d2e2a4a6054fc92a723a91e44be96a3fa561041d23e8cefdab8013f448ba87241ace28828a39d80a152846a21a6e6da0552f402025beee83c5866efa1bd42c6b93cf6bc0c8c9096786fb89753cf4c2169f0223a2291fb620d82aa87ea4eae94915435a42efb412e50c0ee5ace059b7108cf8fc28fa2fe596547de3ed449167caa61d52cb3ef0a08bd7c64e5e33c848134be74b70e282c238a862016bbfafa33c5048b929506d02ffcaa89f528897295f19f1c7f31919039676106d31d1bd391042ea9c528613099ded5dee1523c21e8ba3e4ffc86164f14c87d4296b2d55f47ec4cb", 0xe4}, {&(0x7f0000002840)="c3c1696a6dc28189f4828c", 0xb}], 0x7, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002900)="540d165e77420420fecd94729d773e7a8c67d8ef01c40a370a844da06e4c55ac21819337ad0eeb4c2eb1ea116be332d0b073506aa6d0628b65fc26bc15217667c345b4eed2aa8deb95fca5bab6ec1a9e2a451ae790cfddbe9fd6fc6d1d82fb4b6311390a443e7938bfe32cdfb07f9e6f94d9ee4c74b1bdfb34e2684a8fbce0324b5105ccad59cbcdaa9ba94a4499eb686a368e1c6b7376af0879c2927af8d796da41df95fde3fefd103b1a38b05d78bf2f1c7b710e9d7c4f85dc96da97bc3fd709ef1ab99aa16a4a5f1d069cdf21dd74768c6faf3952609bf8a5c691d2bc42aee59f550216a4bb8578", 0xe9}, {&(0x7f0000002a00)="07e0dde70552b5652c83be3bfe8d49129668e640c0d36283794f0ad73eeb2c5265a7df01517fdad78e9935ad34be2abd7dcaa311d17b4c312617f1968a069e2a65ae8623d5356130d6e582b51ba80915bc005bcfa3303c8018b5e7983ba6b2c0933d92af7b198e9f723008e73c96dbd17e1ae19e82b337edca3576e20e68006ea8ae664634ce50de6b485c9d218ee0d860c374e72a1bfd091a9c3348340dec7e72d65ffaa0b9f15bfcee7af08c981e6fd1b393063d97a222ebd7343f7912e1488d036d138b9c587e982086271dc65cf36359db1caa186690b468e06b0398c1a2e87d691f30c1ffa7b297ca657a45b35b19c30e2105de5615cd", 0xf9}, {&(0x7f0000002b00)="8c99319d57201b75762eb2a1ea61149e073aedc15c084b9c97a98f05ade5ac0fa8018d13bb36ba6fd8e9337b75404224f14281a263d3d9b1be8b901dc12aebbbc03e5b181b6ce0c6d3f007ef1625e052fb7c5225fe8f1ab478cab425fbcf858e79dd1174837f82e5c426bcac9da81354c4b86e20272026e6bd927805e2775006b4d0097849bd956e065aa239b1d46c80665b096fbbfd5b88c7c806fdec5795", 0x9f}, {&(0x7f0000002bc0)="9f4bbb9293255a7a86a3d9", 0xb}, {&(0x7f0000002c00)="445ac9029fe93d224055a7c3058ad910ec3152d55bec52be4c577e33f2c895d315757ffeca894fd124c4a79dbd1259460b49a60c7201c86ff59964da427263154e6ce2515fc8afb471368ead007d657400248ff8f4042b795894fac289443b26184e2cab952fb7f6b755c3af85e95f24da22739e1ed4c87ab8121a9da3293432eb3edb24d0fa0dc45ef2a3ce1ddf8ba241f7de61c44147503d", 0x99}, {&(0x7f0000002cc0)="7022c6e46087cf2ed45d1ac66529f31d93d2ab580814755a06dc7720072e2fe0a9ba0a841bc2efa8dc69bf42b826a935fca87f513ff00ad3c806227766976a079f172484c5df8e8743ecce67e9538cc851a26bf78605866e1e412030be29f8dce36f0db03358215c4c1761375597fb9f59c116633ff61a5c3f3298b93ccef51af40d7115a6c803d1ef3d8ad4718445486868aba43c16e427ad31cf84a075a212e619af7ad4eb2106cfe7e8f28bf3a27f7775ba97223aea5527bec34f6e62918a9b7a6df10c1e9360ac", 0xc9}], 0x6, &(0x7f0000002e40)=[@iv={0xd0, 0x117, 0x2, 0xb7, "e699bd83b438f997baaf0342439310d45bd00b117dea3616d7f7faf072931fa3cf06839538caace1c4a139193e855e995565e74506e7f553f824d2634d2e934408558dc1527e9125274ff0d390f418cade7fa871b293f5d6d26351780ec99633dcc556cab385a8d6abde97d9972ceca21e763ecd7194c1926ea6a1b8e103f6b52c328ad3e5c320f7a9f324b2a157f043a2ee31f56674d92a85fd38f699fb724ff4ac68fd868e45cca4dbcefc255d114399476c15da1bad"}], 0xd0, 0x40000}, {0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="8637b0dd4e928e676749c00b8d660275c86d14977d54397e4460902ef23990a2cf1146a3b149a5ebaf6ccf0ae1c9091bf2f05aff6e4217ac0f8596c1e41c2ef81c6533bc882865f313e7144a13543d779e15e93e1c676afef84617b68c3cdf333ffda504202b33ecf1bbde070e2b8dbecdaeecbdef2f77eb8b6769849abc8531ca06854a15477fd0dcd297aae67bbbe32556bac3c90fb4ed4f52d8724e839bae7bf3e923372e034a0967114daba90076e7243b712eec10a42f1110e19a6d0967277a58da531716387aa81fb7c77b70b3924d05534d8e13da1d6fcd6f21", 0xdd}, {&(0x7f0000004040)="1aa234c3231adecf4558303da145078b7ea1bd19b0329518dfd99db4c10517a06607f340b7e450b4bb828fdfb7107b9ce799a1d3b14bcee3dd362123f3df9073f63090a58badb9d202ae424b8516dbacab22314b6651ce918ef2e7975bd166af7b542a5e9a53e1deff00d203216ebee3dc232d7f155500999aff0be8a871df7675d2f367cdf2106a82328adf470cc5c8", 0x90}, {&(0x7f0000004100)="ee51e809226f37a302b54bcea2f35e4a642d230c96fc994ed758de5df4be1199e25859b13d3eabb00a7181076bed1c7032f1295f0f1d762b1b0cba9a5b3ab7043ecb36a9a9d94f6c89d886c9654f5f509e2bf0de63c6e4cb8bb5edf9d6142f7dd321c492d676a8dbd009591c", 0x6c}, {&(0x7f0000004180)="bde97288af79fc42e7a453e3b4f48463c2878deb9c9bdf4d37933ff67136b8d7b2752288399abb0fa51e4d644803a7feba896283639a3ff90425b1fc507bfa34a42eeb80cade24382c8ca4123192338c77aa242b23951c3245898a9e9062fbc062e8d705e564f228b966ee7c96b2f196e0a0df14d3aae61d8320cf3f4c451b8c017b11a3bc68e35b0b984faae6a8e48a6a70bb067054ca12617c18d7ae94d96f8e1d37f7d4b88f3e4185cbbf67c0924e5db9a645cf1b1b935b32f387d77a59f2cd220abe4cc52452f5c45faff9a681d75a8d995c285855342cb858ebeed958dfbc246aff239a65b856", 0xe9}], 0x5, &(0x7f0000004300)=[@iv={0x28, 0x117, 0x2, 0x13, "3b1d3fcda3db69ca306866483b1ec4dd9a7a93"}], 0x28, 0x11}, {0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000004340)="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", 0xff}, {&(0x7f0000004440)="ecccded31a5a18c34453302a5dc7329fb158369275f8f1c1f1c249cbe7ecac52305e3a0ff4707b736906a4bcb8ab9374d14096f44c7757a62d862de0a0fad4fad2334f32861f30ba25bd22f5cc86eafa7a6c78582a3596fa317bde27aff7efdd86619edbb526e0aedd40c8e3e6b62efc9b5406d9d4e4ae2ae0b509c4fb746e391ce8cb0888329bae3781c7d66882eb4b3391bfabd1cb902211a971516a501f5321410af5a54796e88523567f1b18f391fa546a7b8b64dec419ede46079f65d8c0cdf3209eca00e67bcedf786419f02838634", 0xd2}, {&(0x7f0000004540)="d1c98a481ce70af8e3e4fa2ef0fd90bdec5b2c4b73b28e8752e20504e22cb2d1138d86cb2e449a875217458f32f5556c5f4bfa481c2089cfa299879139920226101e", 0x42}, {&(0x7f00000045c0)="fab201b855cbfbd9b08bc7a1b04aaddf9ba2aba311165253f99fc74beb30d9ad9cb7f8d6ea6017adaa6124b4de9fe24c4a0a7a1a8eef9a67a2f840d9e17c", 0x3e}], 0x4, &(0x7f0000004640)=[@iv={0x90, 0x117, 0x2, 0x79, "0ee321ef6b442de06cbee8c2abc69435f1a56ebc07a1cc50091dee4b9a23d82f979130c8bdb2a6c5243b81ac2586c4d3820fb2d8c70f6839fd3cd0e76490d7f074a84a8e790d9e7819570cb4f5a6babaebe4561ca9f941142e657aaf325b38f52b0efe1919a80b68e04acb36ea9e45508fe2bdd56e6080e9dc"}], 0x90, 0x40}, {0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000004700)="ce133ec0d0416967f9bf8027d9", 0xd}], 0x1, &(0x7f0000004780)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x47, "510b8d46d729a7b0e4b939125957344a23cdb201124303dcecacb4d0be1040851193e820573261ae54b699ac732640e0d475c1843c6bda15756861f7606779b01f8974e5cba782"}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x97, "204d3a5186ae7a2b76224513291f81f7ed7abb783bbd53599d26d0b08d5c422719bf3b5882e03c1fa15d80328e92b340882103a8cbfb1147c37224920853ce6ba368d2c6bc092afe6b51c1ae8cc68198cd5443020b4e2e98f423f9f3dd3017c2eaee14c2e6a34334734bd2ebdba49da9987245f4f75f1f22c30ca64392191167f2c66304f3ee8cb992c1ffd4fae512b48aabca89ddf792"}, @iv={0x28, 0x117, 0x2, 0x13, "c1796f89582eec855b23b9a0decfe3e2eadbb9"}, @op={0x18}], 0x198, 0x24008010}], 0xa, 0x10) 14.983905886s ago: executing program 5 (id=2783): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c", 0x32}], 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x400060df) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) socket(0x1d, 0x80000, 0x9) (async) socket(0x1d, 0x80000, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x52}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffd}, 0x10}, 0x94) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) 7.95919461s ago: executing program 33 (id=2698): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="410305a1b727039dab30ac06db7f457fac5a"], 0x12) 6.935209036s ago: executing program 34 (id=2715): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "e4177f", 0x28, 0x89, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], "bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bce"}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x7}, 0x8) 5.916465657s ago: executing program 35 (id=2736): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="40e60201037d0aa3"], 0x8) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000000c0)={{r5}, 0x4, &(0x7f0000000080)=[0x9, 0x2, 0x4, 0x8e], 0x2, 0xd, 0x1}) r6 = socket(0x840000000002, 0x3, 0xff) shutdown(r6, 0x1) sendmmsg$inet(r6, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004086) 0s ago: executing program 36 (id=2783): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c", 0x32}], 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x400060df) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) socket(0x1d, 0x80000, 0x9) (async) socket(0x1d, 0x80000, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x52}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffd}, 0x10}, 0x94) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) kernel console output (not intermixed with test programs): .735555][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 131.806709][ T8068] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 131.826874][ T8068] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 132.014812][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 132.276620][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 132.334555][ T8096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.691386][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 132.720779][ T8123] netlink: 44 bytes leftover after parsing attributes in process `syz.3.572'. [ 132.738747][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 132.747707][ T8123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.755100][ T8123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.800651][ T8123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.834197][ T8123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.845299][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 132.862072][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.871215][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 132.941253][ T8125] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 133.233733][ T8150] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 134.482801][ T8202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.666870][ T2913] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.709914][ T2913] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.754835][ T8212] macsec0: entered promiscuous mode [ 134.779397][ T8212] macsec0: entered allmulticast mode [ 134.806677][ T8215] veth1_macvtap: entered allmulticast mode [ 134.832085][ T8215] macsec0: left promiscuous mode [ 134.837287][ T8215] macsec0: left allmulticast mode [ 134.842828][ T8215] veth1_macvtap: left allmulticast mode [ 134.856884][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.677915][ T5967] IPVS: starting estimator thread 0... [ 135.784743][ T8255] IPVS: using max 28 ests per chain, 67200 per kthread [ 135.899731][ T2913] wlan1: Trigger new scan to find an IBSS to join [ 136.270608][ T8272] syzkaller0: entered promiscuous mode [ 136.276116][ T8272] syzkaller0: entered allmulticast mode [ 136.405165][ T8280] __nla_validate_parse: 9 callbacks suppressed [ 136.405181][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.616'. [ 136.613371][ T8291] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 136.831461][ T8286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.620'. [ 136.852067][ T8295] bond3: (slave gretap2): making interface the new active one [ 136.866435][ T8295] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 136.876473][ T8290] netlink: 'syz.3.622': attribute type 2 has an invalid length. [ 136.903110][ T8286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.122897][ T8312] team0: Device gtp0 is of different type [ 137.174975][ T8314] batman_adv: batadv0: Adding interface: dummy0 [ 137.191197][ T8314] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.232814][ T8314] batman_adv: batadv0: Interface activated: dummy0 [ 137.561882][ T8331] netlink: 80 bytes leftover after parsing attributes in process `syz.2.633'. [ 137.584294][ T8331] netlink: 80 bytes leftover after parsing attributes in process `syz.2.633'. [ 137.599945][ T8335] netlink: 64 bytes leftover after parsing attributes in process `syz.1.634'. [ 137.615966][ T8336] syzkaller1: entered promiscuous mode [ 137.623345][ T8336] syzkaller1: entered allmulticast mode [ 137.631228][ T8335] netlink: 64 bytes leftover after parsing attributes in process `syz.1.634'. [ 137.908145][ T8351] tap0: tun_chr_ioctl cmd 1074025678 [ 137.916715][ T8351] tap0: group set to 0 [ 138.253156][ T8364] tipc: Enabled bearer , priority 0 [ 138.293871][ T8372] netlink: 152 bytes leftover after parsing attributes in process `syz.0.646'. [ 138.322828][ T8370] netlink: 152 bytes leftover after parsing attributes in process `syz.0.646'. [ 138.427055][ T8364] syzkaller0: entered promiscuous mode [ 138.456818][ T8364] syzkaller0: entered allmulticast mode [ 138.458485][ T8378] netlink: 256 bytes leftover after parsing attributes in process `syz.3.649'. [ 138.511624][ T8364] tipc: Resetting bearer [ 138.595535][ T8389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.648'. [ 138.627178][ T8389] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 138.891822][ T8362] tipc: Resetting bearer [ 139.351325][ T5967] tipc: Node number set to 90520887 [ 140.214011][ T8362] tipc: Disabling bearer [ 140.472748][ T8433] netlink: 'syz.2.659': attribute type 1 has an invalid length. [ 140.494648][ T8433] netlink: 'syz.2.659': attribute type 3 has an invalid length. [ 140.506976][ T8441] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 140.507236][ T8433] NCSI netlink: No device for ifindex 0 [ 140.581132][ T8442] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 140.626436][ T8442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.716056][ T8440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.819028][ T30] audit: type=1800 audit(1755210682.321:2): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.661" name=801C dev="tmpfs" ino=609 res=0 errno=0 [ 140.859800][ T3459] wlan1: Trigger new scan to find an IBSS to join [ 141.015487][ T8463] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 141.264383][ T8470] lo: entered allmulticast mode [ 141.448431][ T8482] syzkaller0: entered promiscuous mode [ 141.454181][ T8482] syzkaller0: entered allmulticast mode [ 141.625606][ T8487] __nla_validate_parse: 4 callbacks suppressed [ 141.625622][ T8487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.671'. [ 141.789009][ T13] wlan1: Creating new IBSS network, BSSID d2:8b:f7:23:8d:e6 [ 142.324552][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 142.353000][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 142.423709][ T8499] team0: Device gtp0 is up. Set it down before adding it as a team port [ 142.633554][ T8516] bridge_slave_0: left allmulticast mode [ 142.660731][ T8516] bridge_slave_0: left promiscuous mode [ 142.675776][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.759976][ T8516] bridge_slave_1: left allmulticast mode [ 142.798622][ T8516] bridge_slave_1: left promiscuous mode [ 142.831443][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.901564][ T8519] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.009872][ T8516] bond0: (slave bond_slave_0): Releasing backup interface [ 143.024205][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 143.545772][ T8516] team0: Port device team_slave_0 removed [ 143.569963][ T8516] team0: Port device team_slave_1 removed [ 143.583658][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.596006][ T8516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.620694][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.636844][ T8516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.683421][ T8516] team0: Port device bond1 removed [ 143.705722][ T8516] bond2: (slave veth3): Releasing active interface [ 143.731463][ T8516] bond3: (slave gretap2): Releasing active interface [ 143.755042][ T8523] team0: Mode changed to "activebackup" [ 143.768258][ T8535] vlan0: entered promiscuous mode [ 143.800966][ T8538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.685'. [ 143.810724][ T8535] team0: Port device vlan0 added [ 143.974383][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 143.991847][ T8553] netlink: 48 bytes leftover after parsing attributes in process `syz.2.689'. [ 144.029512][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 144.170529][ T8551] veth3: entered allmulticast mode [ 144.189041][ T8565] veth0: entered promiscuous mode [ 144.326369][ T8559] veth0: left promiscuous mode [ 144.927191][ T8602] netlink: 44 bytes leftover after parsing attributes in process `syz.3.701'. [ 145.012870][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 145.059073][ T8612] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.703'. [ 146.070792][ T8655] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 146.128846][ T8655] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 146.185657][ T8655] netlink: 'syz.1.718': attribute type 2 has an invalid length. [ 146.441158][ T8663] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 146.691526][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.735627][ T3459] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.784851][ T8679] __nla_validate_parse: 6 callbacks suppressed [ 146.784868][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 146.847447][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.725'. [ 146.977200][ T3459] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.999435][ T3459] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.022834][ T8694] tipc: Cannot configure node identity twice [ 147.022954][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 147.038789][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.725'. [ 147.058138][ T3459] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.083335][ T3459] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.243882][ T3459] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.294815][ T3459] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.346343][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.732'. [ 147.358031][ T8702] netlink: 'syz.3.732': attribute type 9 has an invalid length. [ 147.475022][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 147.665167][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 147.825011][ T8719] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.739'. [ 148.140105][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 148.440279][ T8749] netlink: 'syz.0.752': attribute type 4 has an invalid length. [ 148.481409][ T8749] netlink: 'syz.0.752': attribute type 4 has an invalid length. [ 148.948905][ T8777] Bluetooth: MGMT ver 1.23 [ 149.208748][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 149.269239][ T8787] NCSI netlink: No device for ifindex 0 [ 149.475169][ T8803] netlink: 'syz.2.768': attribute type 24 has an invalid length. [ 150.167682][ T8832] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 150.576527][ T8853] netlink: 'syz.2.780': attribute type 1 has an invalid length. [ 150.682573][ T8853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.737127][ T8861] macsec1: entered promiscuous mode [ 150.753326][ T8861] team0: entered promiscuous mode [ 150.768270][ T8861] macsec1: entered allmulticast mode [ 150.798199][ T8861] team0: entered allmulticast mode [ 150.804094][ T8861] team0: Device macsec1 is already an upper device of the team interface [ 150.832967][ T8866] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 150.918703][ T8861] team0: left allmulticast mode [ 150.929951][ T8861] team0: left promiscuous mode [ 151.573237][ T8906] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 151.600844][ T8906] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 151.761863][ T8909] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 151.769699][ T8909] netlink: 'syz.0.795': attribute type 3 has an invalid length. [ 151.788017][ T8909] __nla_validate_parse: 15 callbacks suppressed [ 151.788035][ T8909] netlink: 224 bytes leftover after parsing attributes in process `syz.0.795'. [ 152.058504][ T5871] Bluetooth: hci2: command 0x0401 tx timeout [ 152.171365][ T8936] openvswitch: netlink: Multiple metadata blocks provided [ 152.173692][ T8939] netlink: 232 bytes leftover after parsing attributes in process `syz.1.804'. [ 152.955542][ T8971] team0: Device vti0 is of different type [ 153.047078][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.815'. [ 153.125940][ T8986] netlink: 'syz.1.817': attribute type 13 has an invalid length. [ 153.146507][ T8986] digital: digital_start_poll: Unknown protocol [ 153.305705][ T8996] netlink: 'syz.4.819': attribute type 10 has an invalid length. [ 153.337231][ T8996] syz_tun: entered promiscuous mode [ 153.387000][ T8996] syz_tun: entered allmulticast mode [ 153.402700][ T8996] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 153.674700][ T9014] netlink: 808 bytes leftover after parsing attributes in process `syz.2.825'. [ 153.812321][ T9018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.827'. [ 153.893143][ T9022] syz.3.829: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 153.911957][ T9022] CPU: 1 UID: 0 PID: 9022 Comm: syz.3.829 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 153.911979][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.911996][ T9022] Call Trace: [ 153.912003][ T9022] [ 153.912010][ T9022] dump_stack_lvl+0x189/0x250 [ 153.912038][ T9022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.912066][ T9022] ? __pfx__printk+0x10/0x10 [ 153.912089][ T9022] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 153.912110][ T9022] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 153.912131][ T9022] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 153.912154][ T9022] warn_alloc+0x214/0x310 [ 153.912185][ T9022] ? __pfx_warn_alloc+0x10/0x10 [ 153.912218][ T9022] ? __get_vm_area_node+0x28f/0x300 [ 153.912242][ T9022] ? packet_set_ring+0x6f4/0x2350 [ 153.912263][ T9022] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 153.912314][ T9022] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.912340][ T9022] ? alloc_pages_mpol+0x3cd/0x4a0 [ 153.912365][ T9022] ? packet_set_ring+0x6f4/0x2350 [ 153.912382][ T9022] vzalloc_noprof+0xb2/0xf0 [ 153.912405][ T9022] ? packet_set_ring+0x6f4/0x2350 [ 153.912424][ T9022] packet_set_ring+0x6f4/0x2350 [ 153.912464][ T9022] ? __pfx_packet_set_ring+0x10/0x10 [ 153.912501][ T9022] ? _copy_from_user+0x94/0xb0 [ 153.912523][ T9022] packet_setsockopt+0xc5a/0x12c0 [ 153.912543][ T9022] ? __pfx_packet_setsockopt+0x10/0x10 [ 153.912566][ T9022] ? __lock_acquire+0xab9/0xd20 [ 153.912595][ T9022] ? aa_sk_perm+0x81e/0x950 [ 153.912622][ T9022] ? __pfx_aa_sk_perm+0x10/0x10 [ 153.912645][ T9022] ? __fget_files+0x2a/0x420 [ 153.912665][ T9022] ? aa_sock_opt_perm+0xff/0x1b0 [ 153.912690][ T9022] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 153.912707][ T9022] ? __pfx_packet_setsockopt+0x10/0x10 [ 153.912726][ T9022] do_sock_setsockopt+0x179/0x1b0 [ 153.912750][ T9022] __x64_sys_setsockopt+0x13f/0x1b0 [ 153.912773][ T9022] do_syscall_64+0xfa/0x3b0 [ 153.912789][ T9022] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.912805][ T9022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.912818][ T9022] ? clear_bhb_loop+0x60/0xb0 [ 153.912834][ T9022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.912847][ T9022] RIP: 0033:0x7ff7d678ebe9 [ 153.912866][ T9022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.912877][ T9022] RSP: 002b:00007ff7d76d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.912892][ T9022] RAX: ffffffffffffffda RBX: 00007ff7d69b5fa0 RCX: 00007ff7d678ebe9 [ 153.912902][ T9022] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000009 [ 153.912910][ T9022] RBP: 00007ff7d6811e19 R08: 000000000000001c R09: 0000000000000000 [ 153.912918][ T9022] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 153.912926][ T9022] R13: 00007ff7d69b6038 R14: 00007ff7d69b5fa0 R15: 00007fffac11ab38 [ 153.912948][ T9022] [ 153.912962][ T9022] Mem-Info: [ 154.210015][ T9022] active_anon:4938 inactive_anon:0 isolated_anon:0 [ 154.210015][ T9022] active_file:1136 inactive_file:39859 isolated_file:0 [ 154.210015][ T9022] unevictable:768 dirty:82 writeback:0 [ 154.210015][ T9022] slab_reclaimable:10788 slab_unreclaimable:104610 [ 154.210015][ T9022] mapped:29053 shmem:1357 pagetables:1050 [ 154.210015][ T9022] sec_pagetables:0 bounce:0 [ 154.210015][ T9022] kernel_misc_reclaimable:0 [ 154.210015][ T9022] free:1319274 free_pcp:15982 free_cma:0 [ 154.272291][ T9022] Node 0 active_anon:19752kB inactive_anon:0kB active_file:4544kB inactive_file:159236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116212kB dirty:320kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12140kB pagetables:4156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 154.287556][ T9031] netlink: 168 bytes leftover after parsing attributes in process `syz.4.831'. [ 154.312006][ T9022] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 154.318116][ T9032] netlink: 168 bytes leftover after parsing attributes in process `syz.4.831'. [ 154.349635][ T9022] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.384238][ T9022] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 154.391110][ T9022] Node 0 DMA32 free:1370796kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19708kB inactive_anon:0kB active_file:4544kB inactive_file:157668kB unevictable:1536kB writepending:320kB present:3129332kB managed:2557516kB mlocked:0kB bounce:0kB free_pcp:41592kB local_pcp:19228kB free_cma:0kB [ 154.429953][ T9022] lowmem_reserve[]: 0 0 1 1 1 [ 154.439283][ T9022] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 154.516105][ T9022] lowmem_reserve[]: 0 0 0 0 0 [ 154.543822][ T9022] Node 1 Normal free:3890916kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22880kB local_pcp:13728kB free_cma:0kB [ 154.611521][ T9022] lowmem_reserve[]: 0 0 0 0 0 [ 154.616295][ T9022] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.634417][ T9022] Node 0 DMA32: 176*4kB (UM) 37*8kB (UE) 130*16kB (UME) 317*32kB (UME) 114*64kB (UME) 64*128kB (UME) 32*256kB (M) 20*512kB (UM) 15*1024kB (UM) 7*2048kB (UM) 316*4096kB (UM) = 1371176kB [ 154.664224][ T9022] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 154.680445][ T9022] Node 1 Normal: 213*4kB (UM) 68*8kB (UME) 45*16kB (UME) 63*32kB (UME) 31*64kB (UME) 8*128kB (UME) 7*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3890916kB [ 154.710604][ T9044] syzkaller1: entered promiscuous mode [ 154.734867][ T9044] syzkaller1: entered allmulticast mode [ 154.743253][ T9022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.758458][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 154.768609][ T9022] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.779455][ T9022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.791524][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'. [ 154.805810][ T9022] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.845354][ T9022] 42349 total pagecache pages [ 154.884760][ T9022] 0 pages in swap cache [ 154.921992][ T9022] Free swap = 124996kB [ 154.933539][ T9022] Total swap = 124996kB [ 154.945055][ T9022] 2097051 pages RAM [ 154.952144][ T9022] 0 pages HighMem/MovableOnly [ 154.962782][ T9022] 425646 pages reserved [ 154.967033][ T9022] 0 pages cma reserved [ 155.159834][ T9063] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.235485][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 155.258223][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 60 seconds [ 155.297874][ T9071] nbd: must specify a device to reconfigure [ 155.523552][ T9079] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 155.645238][ T9084] tipc: Enabled bearer , priority 0 [ 155.771396][ T9079] veth5: entered promiscuous mode [ 155.904252][ T9081] syzkaller0: entered promiscuous mode [ 155.919166][ T9081] syzkaller0: entered allmulticast mode [ 155.975931][ T9083] vlan3: entered allmulticast mode [ 155.982791][ T9083] hsr0: entered allmulticast mode [ 155.997585][ T9083] hsr_slave_0: entered allmulticast mode [ 156.013328][ T9083] hsr_slave_1: entered allmulticast mode [ 156.091422][ T9090] tipc: Resetting bearer [ 156.106485][ T9080] tipc: Resetting bearer [ 156.124489][ T9080] tipc: Disabling bearer [ 156.146053][ T9114] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 156.170326][ T9114] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 156.451576][ T9128] netlink: 'syz.0.855': attribute type 1 has an invalid length. [ 156.585432][ T9134] macsec1: entered promiscuous mode [ 156.603941][ T9134] macsec1: entered allmulticast mode [ 157.016230][ T9159] netlink: 'syz.2.869': attribute type 1 has an invalid length. [ 157.046109][ T9159] __nla_validate_parse: 5 callbacks suppressed [ 157.046126][ T9159] netlink: 224 bytes leftover after parsing attributes in process `syz.2.869'. [ 157.070670][ T9159] nbd: couldn't find device at index 1048576 [ 157.080025][ T9166] netlink: 5 bytes leftover after parsing attributes in process `syz.2.869'. [ 157.090009][ T9166] netlink: 5 bytes leftover after parsing attributes in process `syz.2.869'. [ 157.100008][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.869'. [ 157.121763][ T9167] netlink: 'syz.0.871': attribute type 4 has an invalid length. [ 157.730468][ T9193] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 157.804032][ T9193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.879'. [ 158.016052][ T9205] ipvlan0: entered promiscuous mode [ 158.036845][ T9205] ipvlan0: entered allmulticast mode [ 158.042841][ T9205] veth0_vlan: entered allmulticast mode [ 158.071305][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 158.159344][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.883'. [ 159.145005][ T9259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 159.175635][ T9261] tipc: Enabled bearer , priority 0 [ 159.192011][ T9261] syzkaller0: entered promiscuous mode [ 159.224108][ T9261] syzkaller0: entered allmulticast mode [ 159.247211][ T9261] tipc: Resetting bearer [ 159.298132][ T9260] tipc: Resetting bearer [ 159.332705][ T9260] tipc: Disabling bearer [ 159.421697][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805538d800: rx timeout, send abort [ 159.431838][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805538d800: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 160.109244][ T9309] netlink: 'syz.2.909': attribute type 39 has an invalid length. [ 160.226612][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 160.292187][ T9307] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 160.350191][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 160.386673][ T9319] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 160.396515][ T9319] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 160.408493][ T9319] netlink: 'syz.3.914': attribute type 2 has an invalid length. [ 160.416983][ T9319] netlink: 68 bytes leftover after parsing attributes in process `syz.3.914'. [ 160.555800][ T9332] veth0: entered promiscuous mode [ 160.582568][ T9330] netlink: 'syz.2.916': attribute type 21 has an invalid length. [ 160.742658][ T9330] netlink: 'syz.2.916': attribute type 21 has an invalid length. [ 160.771855][ T9331] veth0: left promiscuous mode [ 160.799680][ T30] audit: type=1107 audit(1755210702.301:3): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ë–Ø(ôï€}5òio±_Òzˆð׊*jÕHäÞérÝB(mx²\Ö.|UC¯D%ØØÓKî!ö8AÒýÏ[LzÙôµ´âoRA]Rxòpßazäü/œ61hÁ‡;_!>V2^1¶˜,u^ úqÖGiIZ…Fļ×냀H€Â÷À'sÁ§_s¹Ä÷¯•LºÍ`ÍâÂ\©½`Èâ`WÅðºå¬âc' [ 162.210681][ T9439] __nla_validate_parse: 9 callbacks suppressed [ 162.210698][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 162.307119][ T9444] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 162.426400][ T9444] 8021q: adding VLAN 0 to HW filter on device bond6 [ 162.490729][ T9454] tipc: Enabled bearer , priority 0 [ 162.512868][ T9454] syzkaller0: entered promiscuous mode [ 162.518787][ T9454] syzkaller0: entered allmulticast mode [ 162.590577][ T9454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 162.715510][ T9454] tipc: Resetting bearer [ 162.753288][ T9452] tipc: Resetting bearer [ 162.792020][ T9470] netlink: 52 bytes leftover after parsing attributes in process `syz.4.955'. [ 162.852130][ T9452] tipc: Disabling bearer [ 163.077905][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 163.185877][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 163.279826][ T9501] netlink: 'syz.4.965': attribute type 11 has an invalid length. [ 163.301861][ T9501] netlink: 'syz.4.965': attribute type 4 has an invalid length. [ 163.354782][ T9501] netlink: 224 bytes leftover after parsing attributes in process `syz.4.965'. [ 163.413007][ T9506] netlink: 'syz.4.965': attribute type 11 has an invalid length. [ 163.426866][ T9506] netlink: 'syz.4.965': attribute type 4 has an invalid length. [ 163.436087][ T9506] netlink: 224 bytes leftover after parsing attributes in process `syz.4.965'. [ 163.547670][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.967'. [ 163.911556][ T5978] syz0: Port: 1 Link ACTIVE [ 164.562845][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 165.084129][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 165.111444][ T9571] netlink: 208 bytes leftover after parsing attributes in process `syz.3.984'. [ 165.548319][ T9601] netlink: 'syz.4.990': attribute type 23 has an invalid length. [ 166.034522][ T9628] syzkaller0: entered promiscuous mode [ 166.045868][ T9630] netlink: 'syz.1.999': attribute type 26 has an invalid length. [ 166.048005][ T9628] syzkaller0: entered allmulticast mode [ 166.067196][ T9630] netlink: 'syz.1.999': attribute type 26 has an invalid length. [ 166.070554][ T9627] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 166.388907][ T9645] tc_dump_action: action bad kind [ 166.901670][ T9670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.911331][ T9672] Bluetooth: MGMT ver 1.23 [ 166.994644][ T9677] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 167.234384][ T9683] __nla_validate_parse: 7 callbacks suppressed [ 167.234402][ T9683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1018'. [ 167.314338][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 167.449635][ T9693] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1023'. [ 167.460198][ T9693] gretap0: entered promiscuous mode [ 167.480910][ T9693] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1023'. [ 167.499359][ T9693] 0ªî{X¹¦: renamed from gretap0 [ 167.514574][ T9693] 0ªî{X¹¦: left promiscuous mode [ 167.526627][ T9693] 0ªî{X¹¦: entered allmulticast mode [ 167.538697][ T9693] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 167.704579][ T9708] unknown channel width for channel at 909000KHz? [ 167.722832][ T9708] unknown channel width for channel at 909000KHz? [ 167.751493][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1029'. [ 167.758829][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 167.769675][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 168.135820][ T9729] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.164337][ T9729] tipc: Enabled bearer , priority 10 [ 168.204181][ T9731] dvmrp0: entered allmulticast mode [ 168.267589][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.290890][ T9737] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 168.318632][ T9737] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 168.470517][ T9744] team0: Device vti0 is up. Set it down before adding it as a team port [ 168.537448][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.576545][ T9753] netlink: 'syz.0.1040': attribute type 2 has an invalid length. [ 168.782187][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 168.800849][ T9757] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1043'. [ 168.812335][ T9757] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1043'. [ 169.067673][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 169.257241][ T9772] ipvlan2: entered promiscuous mode [ 169.443526][ T43] IPVS: starting estimator thread 0... [ 169.461281][ T9774] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.562027][ T9780] IPVS: using max 36 ests per chain, 86400 per kthread [ 169.682983][ T9788] bridge: RTM_NEWNEIGH with invalid ether address [ 169.696439][ T9787] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 169.852528][ T9792] gtp0: entered promiscuous mode [ 170.030845][ T9802] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 170.137499][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.216940][ T9802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.256215][ T9805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.266480][ T9805] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 170.282253][ T9805] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 170.380118][ T9810] veth5: entered promiscuous mode [ 170.403895][ T9802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.641859][ T9841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.710904][ T9841] xfrm2: entered allmulticast mode [ 170.755285][ T9848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.987086][ T9858] tipc: Enabled bearer , priority 0 [ 171.005464][ T9858] syzkaller0: entered promiscuous mode [ 171.106762][ T9858] syzkaller0: entered allmulticast mode [ 171.195145][ T9873] bridge_slave_0: entered promiscuous mode [ 171.253419][ T9858] tipc: Resetting bearer [ 171.278862][ T9856] tipc: Resetting bearer [ 171.329378][ T9856] tipc: Disabling bearer [ 171.341766][ T9885] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 171.351179][ T9885] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 171.370430][ T9885] netlink: 'syz.4.1087': attribute type 2 has an invalid length. [ 171.875430][ T2913] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 171.974663][ T9925] tipc: Enabling of bearer rejected, already enabled [ 171.982340][ T9926] netlink: 'syz.4.1096': attribute type 4 has an invalid length. [ 172.066851][ T9926] netlink: 'syz.4.1096': attribute type 4 has an invalid length. [ 172.251491][ T9937] netlink: 'syz.0.1099': attribute type 2 has an invalid length. [ 172.373482][ T9947] __nla_validate_parse: 11 callbacks suppressed [ 172.373501][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 172.476853][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1105'. [ 173.083475][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 173.241514][ T9986] tipc: Started in network mode [ 173.246569][ T9986] tipc: Node identity 080211000001, cluster identity 4711 [ 173.257440][ C1] net_ratelimit: 67 callbacks suppressed [ 173.257456][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.260809][ T9986] tipc: Enabled bearer , priority 0 [ 173.805336][T10026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1127'. [ 173.842104][T10027] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 173.869061][T10027] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 174.060492][T10043] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 174.185650][T10047] veth7: entered allmulticast mode [ 174.297365][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.377960][ T5951] tipc: Node number set to 134418688 [ 174.474309][T10056] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1136'. [ 174.704905][T10065] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 174.854536][T10078] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 175.016647][T10087] macvlan2: entered promiscuous mode [ 175.022834][T10087] macvlan2: entered allmulticast mode [ 175.030049][T10087] bond7: entered promiscuous mode [ 175.036001][T10087] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.085543][T10087] bond7: left promiscuous mode [ 175.154425][T10096] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1149'. [ 175.315070][T10106] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 175.337477][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.405951][T10106] 8021q: adding VLAN 0 to HW filter on device bond8 [ 175.516755][T10116] netlink: 'syz.2.1155': attribute type 10 has an invalid length. [ 175.564233][T10116] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 175.640102][T10123] Bluetooth: MGMT ver 1.23 [ 175.712121][T10116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1155'. [ 175.763664][T10126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1158'. [ 175.771386][T10127] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.1157'. [ 175.800874][T10128] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 175.862144][T10128] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1157'. [ 176.045223][T10141] netlink: 'syz.1.1163': attribute type 5 has an invalid length. [ 176.093105][T10143] netlink: 'syz.1.1163': attribute type 5 has an invalid length. [ 176.154540][T10151] netlink: 'syz.3.1166': attribute type 6 has an invalid length. [ 176.213009][T10154] netlink: 'syz.2.1168': attribute type 10 has an invalid length. [ 176.225712][T10159] netlink: 'syz.3.1166': attribute type 6 has an invalid length. [ 176.271014][T10154] team0: Port device geneve0 added [ 176.377492][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.406430][T10170] sctp: [Deprecated]: syz.2.1173 (pid 10170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.406430][T10170] Use struct sctp_sack_info instead [ 176.442833][T10172] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 177.180884][T10224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.286805][T10229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.427527][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.552845][T10229] bond2 (unregistering): Released all slaves [ 177.634106][T10261] __nla_validate_parse: 5 callbacks suppressed [ 177.634124][T10261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1194'. [ 177.710107][T10261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1194'. [ 177.872508][T10274] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1198'. [ 178.120760][T10278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.467468][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.851071][T10333] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1213'. [ 179.051018][T10342] lo: entered allmulticast mode [ 179.072433][T10336] lo: left allmulticast mode [ 179.173085][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 179.242023][T10346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1219'. [ 179.497600][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.504604][T10363] validate_nla: 1 callbacks suppressed [ 179.504620][T10363] netlink: 'syz.0.1224': attribute type 83 has an invalid length. [ 179.591434][T10360] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1223'. [ 179.647694][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1225'. [ 179.784853][T10375] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1228'. [ 179.797198][T10375] netlink: 'syz.4.1228': attribute type 15 has an invalid length. [ 180.547360][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 180.984894][T10436] netlink: 'syz.4.1245': attribute type 2 has an invalid length. [ 181.177105][T10444] netlink: 'syz.0.1249': attribute type 21 has an invalid length. [ 181.438568][T10452] veth7: entered allmulticast mode [ 181.577365][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.104473][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1263'. [ 182.202152][T10489] netlink: 'syz.0.1264': attribute type 17 has an invalid length. [ 182.300998][T10490] netlink: 'syz.3.1263': attribute type 39 has an invalid length. [ 182.617473][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.765041][T10499] __nla_validate_parse: 2 callbacks suppressed [ 182.765059][T10499] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1265'. [ 182.936408][T10504] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1269'. [ 182.964436][T10504] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1269'. [ 183.205355][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1273'. [ 183.591163][T10541] ipvlan2: entered promiscuous mode [ 183.605634][T10541] ipvlan3: entered promiscuous mode [ 183.641417][T10543] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 183.657468][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.670113][T10541] ipvlan4: entered promiscuous mode [ 183.685087][T10544] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 183.692904][T10541] ipvlan5: entered promiscuous mode [ 183.745507][T10541] ipvlan6: entered promiscuous mode [ 183.778782][T10541] ipvlan7: entered promiscuous mode [ 183.805937][T10543] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 183.823147][T10544] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 183.880017][T10541] ipvlan8: entered promiscuous mode [ 183.935555][T10541] ipvlan9: entered promiscuous mode [ 183.953294][T10541] ipvlan10: entered promiscuous mode [ 183.996916][T10541] ipvlan11: entered promiscuous mode [ 184.008824][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 184.042175][T10541] ipvlan12: entered promiscuous mode [ 184.154147][T10541] ipvlan13: entered promiscuous mode [ 184.179778][T10541] ipvlan14: entered promiscuous mode [ 184.235980][T10541] ipvlan15: entered promiscuous mode [ 184.272721][T10541] ipvlan16: entered promiscuous mode [ 184.373353][T10580] tipc: Can't bind to reserved service type 1 [ 184.697368][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.802508][T10600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.817781][T10600] team0: Port device bond3 added [ 184.955623][T10607] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1301'. [ 185.160134][T10620] netlink: 4484 bytes leftover after parsing attributes in process `syz.4.1305'. [ 185.338670][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 90 seconds [ 185.465824][T10637] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 185.508301][T10634] openvswitch: netlink: Missing key (keys=40, expected=100) [ 185.521895][T10636] netlink: 212196 bytes leftover after parsing attributes in process `syz.4.1310'. [ 185.578702][T10636] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1310'. [ 185.676114][T10645] vlan2: entered promiscuous mode [ 185.686051][T10645] bridge0: entered promiscuous mode [ 185.737473][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 185.753259][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 185.947183][T10659] syzkaller1: entered promiscuous mode [ 185.955483][T10659] syzkaller1: entered allmulticast mode [ 186.041565][T10667] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.299962][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.390668][T10694] xt_socket: unknown flags 0xe4 [ 186.396545][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.408598][T10693] netlink: 'syz.4.1325': attribute type 33 has an invalid length. [ 186.492350][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.564361][T10707] IPv6: sit1: Disabled Multicast RS [ 186.586504][T10707] sit1: entered allmulticast mode [ 186.777490][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.034033][T10729] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 187.192020][T10737] netlink: 'syz.0.1338': attribute type 2 has an invalid length. [ 187.205975][T10737] netlink: 'syz.0.1338': attribute type 2 has an invalid length. [ 187.804252][T10727] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 187.817378][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.976127][T10752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.136270][T10765] netlink: 'syz.4.1348': attribute type 10 has an invalid length. [ 188.168414][T10765] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 188.201652][T10765] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 188.673635][T10803] __nla_validate_parse: 6 callbacks suppressed [ 188.673651][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 188.756565][T10807] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 188.793335][T10807] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 188.857393][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.400913][T10856] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 189.522190][T10865] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 189.672738][T10873] IPVS: length: 157 != 24 [ 189.684620][T10873] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 189.756968][T10876] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 189.766996][T10876] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 189.897382][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.991346][T10894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.123577][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1390'. [ 190.156320][T10908] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1392'. [ 190.173873][T10904] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1390'. [ 190.448459][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1397'. [ 190.484432][T10926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1397'. [ 190.534874][T10932] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1399'. [ 190.859330][ T3562] wlan1: Trigger new scan to find an IBSS to join [ 190.937364][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.345431][T10972] netlink: 'syz.0.1412': attribute type 3 has an invalid length. [ 191.622839][T10990] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1415'. [ 191.690694][T10990] openvswitch: netlink: Actions may not be safe on all matching packets [ 191.725804][T10991] netlink: 'syz.1.1415': attribute type 2 has an invalid length. [ 191.747900][T10991] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1415'. [ 191.770598][T10995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1416'. [ 191.977415][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 192.134509][T11009] team0: Mode "loalbalance" not found [ 192.180313][T11019] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 192.197673][T11019] netlink: 'syz.0.1426': attribute type 2 has an invalid length. [ 192.255225][T11023] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 193.900878][ T36] wlan1: Trigger new scan to find an IBSS to join [ 194.057504][ C1] net_ratelimit: 2 callbacks suppressed [ 194.057521][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.108034][T11103] __nla_validate_parse: 4 callbacks suppressed [ 194.108052][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 194.175457][T11107] tipc: Enabled bearer , priority 0 [ 194.185395][T11107] syzkaller0: entered promiscuous mode [ 194.192006][T11107] syzkaller0: entered allmulticast mode [ 194.202873][T11107] tipc: Resetting bearer [ 194.305682][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.320348][T11107] tipc: Resetting bearer [ 194.416322][T11107] tipc: Disabling bearer [ 194.445107][T11117] IPVS: Error joining to the multicast group [ 194.465293][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 194.475457][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 194.483877][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1460'. [ 194.590568][T11121] batadv0: mtu less than device minimum [ 194.598165][T11121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.610211][T11121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.621578][T11121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.632869][T11121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.644255][T11121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.655459][T11121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.666998][T11121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.678211][T11121] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.144034][T11136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1461'. [ 195.206505][T11134] netlink: 'syz.3.1464': attribute type 6 has an invalid length. [ 195.351908][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 195.378685][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1471'. [ 195.516599][T11158] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1472'. [ 195.554240][T11160] pimreg: entered allmulticast mode [ 195.608768][T11170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1474'. [ 195.734020][T11182] netlink: 'syz.1.1477': attribute type 1 has an invalid length. [ 195.759086][T11182] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1477'. [ 195.928850][T11197] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 195.950214][T11197] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 196.026909][T11202] bridge0: port 1(syz_tun) entered blocking state [ 196.040345][T11202] bridge0: port 1(syz_tun) entered disabled state [ 196.051897][T11202] syz_tun: entered allmulticast mode [ 196.063642][T11202] syz_tun: entered promiscuous mode [ 196.872914][ T3459] wlan1: Creating new IBSS network, BSSID 2e:81:b3:33:49:8d [ 197.131321][T11265] netlink: 'syz.4.1496': attribute type 10 has an invalid length. [ 197.364229][T11280] netlink: 'syz.3.1499': attribute type 1 has an invalid length. [ 197.513944][T11295] netlink: 'syz.3.1504': attribute type 27 has an invalid length. [ 198.100974][T11340] netlink: 'syz.4.1519': attribute type 17 has an invalid length. [ 198.330654][T11366] tc_dump_action: action bad kind [ 198.417266][T11373] netlink: 'syz.3.1527': attribute type 83 has an invalid length. [ 198.732839][T11384] netlink: 'syz.1.1530': attribute type 1 has an invalid length. [ 198.874148][T11391] bond2: (slave gretap1): making interface the new active one [ 198.887195][T11391] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 199.257373][ C1] net_ratelimit: 17 callbacks suppressed [ 199.257389][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.536043][T11434] __nla_validate_parse: 37 callbacks suppressed [ 199.536061][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1543'. [ 199.612082][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 199.614757][T11434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1543'. [ 199.720440][T11445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1542'. [ 199.791146][T11448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1545'. [ 199.812501][T11448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1545'. [ 199.838084][T11448] netlink: 'syz.4.1545': attribute type 10 has an invalid length. [ 200.009192][T11456] netlink: 'syz.0.1549': attribute type 1 has an invalid length. [ 200.016964][T11456] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1549'. [ 200.040269][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 200.090754][T11460] netlink: 'syz.3.1551': attribute type 6 has an invalid length. [ 200.246373][T11472] raw_sendmsg: syz.3.1551 forgot to set AF_INET. Fix it! [ 200.297564][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.541575][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1557'. [ 200.733927][T11456] delete_channel: no stack [ 200.889343][T11502] netlink: 'syz.2.1561': attribute type 10 has an invalid length. [ 200.969291][T11502] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 201.016587][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1562'. [ 201.081313][T11510] netlink: 'syz.3.1563': attribute type 11 has an invalid length. [ 201.098849][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 201.187022][T11515] openvswitch: netlink: Flow key attr not present in new flow. [ 201.337492][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.497496][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 201.498020][ T5881] Bluetooth: hci2: command 0x0401 tx timeout [ 201.503577][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 202.148249][T11573] validate_nla: 1 callbacks suppressed [ 202.148267][T11573] netlink: 'syz.1.1582': attribute type 4 has an invalid length. [ 202.288328][T11582] netlink: 'syz.1.1585': attribute type 8 has an invalid length. [ 202.377380][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 202.446878][T11597] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 [ 203.417365][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.498504][T11671] openvswitch: netlink: Unknown nsh attribute 0 [ 203.524228][T11671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.031697][T11708] syzkaller1: entered promiscuous mode [ 204.044691][T11708] syzkaller1: entered allmulticast mode [ 204.064075][T11711] netlink: 'syz.0.1622': attribute type 11 has an invalid length. [ 204.218004][T11716] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 204.339294][T11720] netlink: 'syz.4.1626': attribute type 13 has an invalid length. [ 204.353008][T11720] netlink: 'syz.4.1626': attribute type 13 has an invalid length. [ 204.375657][T11727] netlink: 'syz.2.1628': attribute type 8 has an invalid length. [ 204.457368][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.662121][T11739] tipc: Enabled bearer , priority 0 [ 204.915891][T11739] syzkaller0: entered promiscuous mode [ 204.947540][T11739] syzkaller0: entered allmulticast mode [ 204.957009][T11739] tipc: Resetting bearer [ 204.967275][T11753] IPVS: Error connecting to the multicast addr [ 204.990115][T11754] __nla_validate_parse: 21 callbacks suppressed [ 204.990133][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 205.031657][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'. [ 205.055400][T11738] tipc: Resetting bearer [ 205.507357][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 205.601530][T11788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1643'. [ 205.610766][T11788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1643'. [ 205.770259][ T5967] tipc: Node number set to 820906118 [ 206.538480][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.654572][T11738] tipc: Disabling bearer [ 206.838758][T11802] sctp: [Deprecated]: syz.4.1646 (pid 11802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.838758][T11802] Use struct sctp_sack_info instead [ 206.881695][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1645'. [ 207.190843][T11829] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 207.274678][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 207.365753][T11842] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 207.449431][T11844] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 207.462200][T11844] netlink: 'syz.0.1660': attribute type 11 has an invalid length. [ 207.488387][T11844] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1660'. [ 207.577477][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 207.614020][T11855] netlink: 'syz.3.1661': attribute type 21 has an invalid length. [ 207.625394][T11855] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1661'. [ 207.911745][T11865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1665'. [ 207.985222][T11871] lo: entered allmulticast mode [ 208.150703][T11882] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1670'. [ 208.617386][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 208.691942][T11915] IPVS: set_ctl: invalid protocol: 2 172.20.20.33:20000 [ 208.723514][T11917] IPv6: sit1: Disabled Multicast RS [ 209.109859][T11950] syzkaller1: entered promiscuous mode [ 209.115485][T11950] syzkaller1: entered allmulticast mode [ 209.271755][T11964] rdma_op ffff888072ad51f0 conn xmit_rdma 0000000000000000 [ 209.663960][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.055396][T12008] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 210.060015][T12017] can: request_module (can-proto-0) failed. [ 210.069262][T12008] netlink: 'syz.3.1706': attribute type 2 has an invalid length. [ 210.069281][T12008] __nla_validate_parse: 17 callbacks suppressed [ 210.069292][T12008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1706'. [ 210.071602][T12008] scsi_nl_rcv_msg: discarding partial skb [ 210.140989][T12017] can: request_module (can-proto-0) failed. [ 210.183624][T12017] can: request_module (can-proto-0) failed. [ 210.215233][T12017] can: request_module (can-proto-0) failed. [ 210.246532][T12017] can: request_module (can-proto-0) failed. [ 210.281862][T12017] can: request_module (can-proto-0) failed. [ 210.314829][T12017] can: request_module (can-proto-0) failed. [ 210.351995][T12017] can: request_module (can-proto-0) failed. [ 210.385540][T12017] can: request_module (can-proto-0) failed. [ 210.422007][T12017] can: request_module (can-proto-0) failed. [ 210.697576][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.788561][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 210.989598][T12067] tipc: Resetting bearer [ 211.719024][T12091] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1727'. [ 211.737687][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 211.837196][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 211.864751][T12099] netlink: 'syz.1.1728': attribute type 5 has an invalid length. [ 211.894596][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 211.937057][T12109] veth0: entered promiscuous mode [ 211.951214][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'. [ 212.014203][T12099] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1728'. [ 212.080154][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 212.108519][T12110] veth0: left promiscuous mode [ 212.247026][T12126] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20001 [ 212.288914][T12130] net veth1_virt_wifi .: renamed from virt_wifi0 [ 212.292326][T12135] netlink: 'syz.3.1738': attribute type 1 has an invalid length. [ 212.469201][T12142] gretap0: entered promiscuous mode [ 212.478731][T12142] bond4: (slave gretap0): making interface the new active one [ 212.487234][T12142] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 212.515155][T12149] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 212.538674][T12150] macvlan3: entered promiscuous mode [ 212.544131][T12150] macvlan3: entered allmulticast mode [ 212.570291][T12150] bond4: entered promiscuous mode [ 212.586222][T12150] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 212.607218][T12150] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 212.627216][T12150] bond4: left promiscuous mode [ 212.662872][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 212.777485][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.907748][T12172] sctp: [Deprecated]: syz.3.1749 (pid 12172) Use of int in max_burst socket option. [ 212.907748][T12172] Use struct sctp_assoc_value instead [ 212.920109][T12173] geneve3: entered promiscuous mode [ 213.023286][T12181] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 213.033134][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.045884][T12181] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 213.056363][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.063848][T12170] syzkaller0: entered promiscuous mode [ 213.072378][T12170] syzkaller0: entered allmulticast mode [ 213.107962][T12177] nbd2: detected capacity change from 0 to 127 [ 213.117700][ T5880] block nbd2: Receive control failed (result -32) [ 213.784909][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 213.821492][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.835403][T12223] netlink: 'syz.1.1762': attribute type 40 has an invalid length. [ 214.857485][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.925671][T12232] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 215.169774][T12251] netlink: 'syz.4.1770': attribute type 3 has an invalid length. [ 215.370597][T12268] __nla_validate_parse: 3 callbacks suppressed [ 215.370614][T12268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'. [ 215.418594][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 120 seconds [ 215.703811][T12289] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1783'. [ 215.731600][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1782'. [ 215.780244][T12300] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1784'. [ 215.799349][T12300] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1784'. [ 215.898269][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.912141][T12308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1787'. [ 216.214073][T12327] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1791'. [ 216.231935][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'. [ 216.533733][T12340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1792'. [ 216.578738][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 216.580560][T12340] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 216.947486][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.154337][T12370] netlink: 'syz.1.1805': attribute type 11 has an invalid length. [ 217.745002][T12403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 217.977526][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 218.124940][T12425] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 218.135961][T12425] gretap1: entered promiscuous mode [ 218.143574][T12425] gretap1: entered allmulticast mode [ 218.153284][T12427] netlink: 'syz.0.1821': attribute type 1 has an invalid length. [ 218.165365][T12427] netlink: 'syz.0.1821': attribute type 3 has an invalid length. [ 218.268319][T12427] team0: Device wireguard0 is of different type [ 218.482441][T12453] netlink: 'syz.2.1827': attribute type 4 has an invalid length. [ 218.892797][T12481] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 219.016401][T12484] IPVS: length: 157 != 24 [ 219.021000][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 219.112847][T12488] bridge5: entered allmulticast mode [ 219.354093][T12503] rdma_rxe: rxe_newlink: failed to add lo [ 219.392143][T12509] rdma_rxe: rxe_newlink: failed to add lo [ 219.613791][T12529] netlink: 'syz.1.1849': attribute type 11 has an invalid length. [ 219.800890][ T5967] IPVS: starting estimator thread 0... [ 219.889959][T12538] IPVS: using max 27 ests per chain, 64800 per kthread [ 220.067418][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.141759][T12559] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 220.540607][T12594] __nla_validate_parse: 24 callbacks suppressed [ 220.540626][T12594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1869'. [ 220.592362][T12575] team0 (unregistering): Port device team_slave_0 removed [ 220.611396][T12575] team0 (unregistering): Port device team_slave_1 removed [ 220.751261][T12606] C: renamed from lo (while UP) [ 220.758865][T12603] netlink: zone id is out of range [ 220.773526][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1874'. [ 220.836877][T12611] block nbd3: Unsupported socket: shutdown callout must be supported. [ 220.849117][T12610] syzkaller1: entered promiscuous mode [ 220.854607][T12610] syzkaller1: entered allmulticast mode [ 221.084301][T12627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1881'. [ 221.097478][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 221.123843][T12630] tipc: Enabling of bearer rejected, already enabled [ 221.208887][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 221.235269][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 221.280352][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 221.282538][T12630] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 221.310873][T12630] gretap1: left allmulticast mode [ 221.333474][T12630] macsec1: left allmulticast mode [ 221.361006][T12630] veth7: left allmulticast mode [ 221.394347][T12643] lo: entered promiscuous mode [ 221.416478][T12643] netlink: 'syz.1.1888': attribute type 2 has an invalid length. [ 221.461679][T12643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.557438][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'. [ 221.632119][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 221.862469][T12687] IPVS: set_ctl: invalid protocol: 94 172.20.20.23:20000 [ 221.876403][T12691] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 221.898290][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 222.086581][T12703] veth0: entered promiscuous mode [ 222.137380][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.203140][T12709] veth0: left promiscuous mode [ 222.304393][T12715] netlink: 'syz.0.1908': attribute type 32 has an invalid length. [ 222.322483][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 222.333962][T12715] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 222.952957][T12756] veth0: entered promiscuous mode [ 223.177563][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 223.286713][T12769] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 223.317956][T12775] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 223.325726][T12775] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 223.420371][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 223.542802][T12789] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 223.580898][T12789] team0: Device macvtap2 is already an upper device of the team interface [ 224.217389][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 224.349428][T12856] delete_channel: no stack [ 224.430108][T12847] delete_channel: no stack [ 224.503701][T12870] netlink: 'syz.0.1952': attribute type 24 has an invalid length. [ 225.165902][T12915] sctp: [Deprecated]: syz.2.1963 (pid 12915) Use of int in maxseg socket option. [ 225.165902][T12915] Use struct sctp_assoc_value instead [ 225.258824][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 225.291514][T12919] tipc: Invalid UDP bearer configuration [ 225.291566][T12919] tipc: Enabling of bearer rejected, failed to enable media [ 225.427277][T12924] netlink: 'syz.3.1966': attribute type 11 has an invalid length. [ 225.451657][T12922] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 225.483695][T12924] netlink: 'syz.3.1966': attribute type 11 has an invalid length. [ 225.500547][ T3528] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.517529][ T3528] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.536507][ T3528] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.555396][ T3528] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.745672][T12938] __nla_validate_parse: 15 callbacks suppressed [ 225.745691][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 225.792995][T12940] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 226.122931][T12952] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 226.297658][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 226.421959][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1979'. [ 227.187793][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'. [ 227.337367][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 227.371250][T13000] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1990'. [ 227.390429][T13000] openvswitch: netlink: Flow key attr not present in new flow. [ 227.406236][T13002] netlink: 'syz.3.1989': attribute type 4 has an invalid length. [ 227.475406][T13007] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1990'. [ 227.499473][T13007] openvswitch: netlink: Flow key attr not present in new flow. [ 227.539647][T13011] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 227.716616][T13014] netlink: 'syz.3.1992': attribute type 16 has an invalid length. [ 227.759913][T13014] netlink: 'syz.3.1992': attribute type 17 has an invalid length. [ 227.816119][T13014] 0ªî{X¹¦: left allmulticast mode [ 227.824795][T13023] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 227.882278][T13014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.123051][T13037] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2000'. [ 228.146657][T13037] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2000'. [ 228.185994][T13037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.263577][T13037] netlink: 75 bytes leftover after parsing attributes in process `syz.3.2000'. [ 228.276375][T13043] tipc: Enabling of bearer rejected, already enabled [ 228.391468][T13046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2004'. [ 228.466647][T13046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2004'. [ 229.139436][T13084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.146712][T13084] IPv6: NLM_F_CREATE should be set when creating new route [ 229.581074][T13112] can_create: 8 callbacks suppressed [ 229.581092][T13112] can: request_module (can-proto-0) failed. [ 230.064457][T13134] netlink: 'syz.0.2023': attribute type 5 has an invalid length. [ 230.091636][ T1135] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.106853][ T1135] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.121766][ T1135] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.140371][ T1135] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.457368][ C1] net_ratelimit: 3 callbacks suppressed [ 230.457387][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 230.593949][T13139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.748309][T13152] __nla_validate_parse: 7 callbacks suppressed [ 230.748327][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 230.798318][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2028'. [ 230.818361][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 230.992692][T13154] hsr_slave_0 (unregistering): left promiscuous mode [ 231.235614][T13173] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2033'. [ 231.303087][T13178] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2035'. [ 231.362713][ T30] audit: type=1107 audit(1755210772.871:4): pid=13179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='KÍÒ+0árÛ'°R11þŽ9˜Ëe±Ô¹Rò5¬Ú¨¸â„ [ 231.362713][ T30] ‘Á°¼…<ž†À½>™$WÌÈ)Ù$zÒ@,•g[Ù|±šœ…Ýn/ü˜ëéË!C3žu°:ìãmq¹aÕq"Yßö ƒs×yK¹Ù×ÐôjÒÌÁ, priority 10 [ 232.096854][T13215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.098203][T13217] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2044'. [ 232.252447][T13224] tc_dump_action: action bad kind [ 232.660380][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 232.692593][T13241] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 233.304990][T13278] tipc: Enabled bearer , priority 12 [ 233.539868][T13290] block nbd3: server does not support multiple connections per device. [ 233.564986][T13290] block nbd3: shutting down sockets [ 233.737513][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 234.777490][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 235.806056][T13398] __nla_validate_parse: 10 callbacks suppressed [ 235.806075][T13398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2090'. [ 235.827366][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 236.032017][T13406] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 236.165986][T13421] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2096'. [ 236.248386][T13421] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2096'. [ 236.300461][T13426] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2096'. [ 236.311766][T13421] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 236.360866][T13421] 1ªî{X¹¦: entered allmulticast mode [ 236.376716][T13421] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 236.667135][T13443] netlink: 'syz.4.2103': attribute type 4 has an invalid length. [ 236.764959][T13451] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2106'. [ 236.857546][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 237.379479][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 237.427979][T13467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2113'. [ 237.759150][T13497] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2115'. [ 237.897503][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 238.064159][T13508] IPVS: set_ctl: invalid protocol: 51 172.30.0.1:20004 [ 238.410783][T13520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2123'. [ 238.669867][T13529] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 238.898878][T13533] veth1: entered promiscuous mode [ 238.937364][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 239.061909][T13545] netlink: 'syz.3.2132': attribute type 1 has an invalid length. [ 239.098581][T13545] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 239.341808][T13558] netlink: 'syz.4.2134': attribute type 10 has an invalid length. [ 239.376872][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 239.977366][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 240.641744][ T3459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.677885][ T3459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.799699][ T3459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.827738][ T3459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.017638][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 241.034346][ T3459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.081223][ T3459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.290894][ T3459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.328426][ T3459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.371976][T13635] netlink: 'syz.1.2161': attribute type 1 has an invalid length. [ 241.416753][T13635] __nla_validate_parse: 3 callbacks suppressed [ 241.416772][T13635] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2161'. [ 241.604846][T13648] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2164'. [ 241.663081][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 241.708182][T13652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2166'. [ 241.806827][ T3459] bridge_slave_1: left allmulticast mode [ 241.819425][T13658] netlink: 'syz.4.2168': attribute type 4 has an invalid length. [ 241.838557][ T3459] bridge_slave_1: left promiscuous mode [ 241.845982][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.894756][ T3459] bridge_slave_0: left allmulticast mode [ 241.913425][T13665] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2170'. [ 241.927709][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.932338][ T3459] bridge_slave_0: left promiscuous mode [ 241.937534][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.949913][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.960062][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.965633][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.968406][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.057558][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 242.327243][ T3459] erspan0 (unregistering): left promiscuous mode [ 242.368131][ T3459] 1ªî{X¹¦ (unregistering): left promiscuous mode [ 242.427277][ T3459] bond4 (unregistering): (slave gretap0): Releasing active interface [ 242.503370][ T3459] dvmrp0 (unregistering): left allmulticast mode [ 242.956007][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.972791][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.984027][ T3459] bond0 (unregistering): Released all slaves [ 243.098953][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 243.113786][ T3459] bond1 (unregistering): Released all slaves [ 243.214930][ T3459] bond2 (unregistering): Released all slaves [ 243.232553][ T3459] bond3 (unregistering): Released all slaves [ 243.250316][ T3459] bond4 (unregistering): Released all slaves [ 243.271659][ T3459] bond5 (unregistering): Released all slaves [ 243.303095][T13660] vlan2: entered promiscuous mode [ 243.308273][T13660] hsr_slave_1: entered promiscuous mode [ 243.314012][T13660] vlan2: entered allmulticast mode [ 243.323095][T13660] hsr_slave_1: entered allmulticast mode [ 243.351145][T13661] netlink: 'syz.1.2167': attribute type 1 has an invalid length. [ 243.448286][T13670] tipc: Enabled bearer , priority 0 [ 243.493506][T13671] syzkaller0: entered promiscuous mode [ 243.511788][T13671] syzkaller0: entered allmulticast mode [ 243.586901][T13655] tipc: Resetting bearer [ 243.722577][T13655] tipc: Disabling bearer [ 243.767160][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 243.788087][ T3459] tipc: Disabling bearer [ 243.820192][ T3459] tipc: Disabling bearer [ 243.855837][ T3459] tipc: Left network mode [ 244.059821][ T5880] Bluetooth: hci1: command tx timeout [ 244.072030][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 244.079404][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 244.086214][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 244.093529][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 244.100852][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 244.108098][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 244.114775][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 244.414375][T13713] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 244.429853][T13713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2181'. [ 244.514012][T13718] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 244.536020][T13718] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2183'. [ 244.584979][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 244.602867][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 244.638074][T13723] netlink: 'syz.2.2184': attribute type 5 has an invalid length. [ 244.722263][T13723] geneve3: entered promiscuous mode [ 244.761994][T13723] geneve3: entered allmulticast mode [ 244.800259][ T1135] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 244.811848][ T1135] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 244.859933][ T1135] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 245.155259][T13731] nbd3: detected capacity change from 0 to 549764202496 [ 245.189784][ T5880] block nbd3: Receive control failed (result -32) [ 245.499162][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 150 seconds [ 245.912563][ T3459] hsr_slave_0: left promiscuous mode [ 245.930468][ T3459] hsr_slave_1: left promiscuous mode [ 245.995794][ T3459] veth1_macvtap: left promiscuous mode [ 246.014130][ T3459] veth1_vlan: left promiscuous mode [ 246.026120][ T3459] veth0_vlan: left promiscuous mode [ 246.035433][T13767] netlink: 'syz.0.2200': attribute type 1 has an invalid length. [ 246.139166][ T5880] Bluetooth: hci1: command tx timeout [ 246.392689][T13784] net_ratelimit: 253 callbacks suppressed [ 246.392708][T13784] netlink: ct family unspecified [ 246.427071][T13784] openvswitch: netlink: Actions may not be safe on all matching packets [ 247.521191][T13662] chnl_net:caif_netlink_parms(): no params data found [ 247.543080][T13790] __nla_validate_parse: 4 callbacks suppressed [ 247.543097][T13790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2203'. [ 247.760670][T13795] erspan0: entered allmulticast mode [ 247.780551][T13795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2205'. [ 247.829505][T13811] netlink: 'syz.1.2208': attribute type 6 has an invalid length. [ 247.847960][T13806] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2206'. [ 247.927067][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2209'. [ 247.965590][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.996014][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.015896][T13662] bridge_slave_0: entered allmulticast mode [ 248.045171][T13662] bridge_slave_0: entered promiscuous mode [ 248.075757][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.107977][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.118434][T13662] bridge_slave_1: entered allmulticast mode [ 248.129640][T13662] bridge_slave_1: entered promiscuous mode [ 248.212713][ T3459] IPVS: stop unused estimator thread 0... [ 248.232620][ T5880] Bluetooth: hci1: command tx timeout [ 248.280944][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.301810][T13835] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 248.344116][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.354966][T13835] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2215'. [ 248.553686][T13662] team0: Port device team_slave_0 added [ 248.584596][T13662] team0: Port device team_slave_1 added [ 248.689884][T13848] netlink: 'syz.4.2217': attribute type 1 has an invalid length. [ 248.708552][T13848] netlink: 'syz.4.2217': attribute type 2 has an invalid length. [ 248.744334][T13852] netlink: 'syz.4.2217': attribute type 1 has an invalid length. [ 248.775063][T13852] netlink: 'syz.4.2217': attribute type 2 has an invalid length. [ 248.780321][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.814763][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.950993][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.081065][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.145897][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.167162][T13869] netlink: 'syz.0.2221': attribute type 32 has an invalid length. [ 249.194026][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2221'. [ 249.272896][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.308968][T13872] veth0_to_bond: entered allmulticast mode [ 249.334166][T13878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2223'. [ 249.336789][T13869] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 249.732054][T13892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2226'. [ 249.799483][T13895] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2225'. [ 249.810916][T13896] veth0: entered promiscuous mode [ 249.834388][T13662] hsr_slave_0: entered promiscuous mode [ 249.837778][T13898] netlink: 'syz.0.2227': attribute type 24 has an invalid length. [ 249.862081][T13662] hsr_slave_1: entered promiscuous mode [ 249.888868][T13662] debugfs: 'hsr0' already exists in 'hsr' [ 249.902030][T13662] Cannot create hsr debugfs directory [ 249.923333][T13889] veth0: left promiscuous mode [ 249.932568][T13903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2225'. [ 250.297464][ T5880] Bluetooth: hci1: command tx timeout [ 250.411243][T13916] netlink: 'syz.4.2232': attribute type 4 has an invalid length. [ 250.613367][T13662] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.650289][T13662] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 250.676033][T13662] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.729279][T13662] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.792202][T13933] bond0: (slave syz_tun): Releasing backup interface [ 250.800041][T13933] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 250.823396][T13933] syz_tun: left allmulticast mode [ 250.838177][T13933] tipc: Resetting bearer [ 250.857017][T13933] bond0: (slave wlan1): Releasing backup interface [ 250.865877][T13933] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 251.247142][T13662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.312959][T13662] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.356598][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.363806][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.407166][T13972] netlink: 'syz.1.2244': attribute type 138 has an invalid length. [ 251.573345][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.580544][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.805033][T13662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.843917][T13662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.518255][T13662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.674976][T14015] __nla_validate_parse: 3 callbacks suppressed [ 252.674995][T14015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2260'. [ 253.128522][T14031] sctp: [Deprecated]: syz.4.2264 (pid 14031) Use of int in maxseg socket option. [ 253.128522][T14031] Use struct sctp_assoc_value instead [ 253.188180][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2265'. [ 253.223307][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 253.346012][T14033] validate_nla: 1 callbacks suppressed [ 253.346031][T14033] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 253.376564][T14040] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 253.460227][T13662] veth0_vlan: entered promiscuous mode [ 253.530674][T13662] veth1_vlan: entered promiscuous mode [ 253.621952][T13662] veth0_macvtap: entered promiscuous mode [ 253.660213][T13662] veth1_macvtap: entered promiscuous mode [ 253.723569][T13662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.789696][T13662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.812963][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.850895][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.851287][T14061] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2272'. [ 253.862784][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.903712][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.127243][T14078] netlink: 'syz.0.2277': attribute type 2 has an invalid length. [ 254.135845][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.160208][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.244545][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.286827][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.324498][T14082] smc: net device ip6erspan0 applied user defined pnetid SYZ2 [ 254.454642][T14092] netlink: 'syz.0.2279': attribute type 11 has an invalid length. [ 254.475508][T14092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2279'. [ 254.492513][T14090] netlink: 'syz.2.2281': attribute type 11 has an invalid length. [ 254.515405][T14090] netlink: 'syz.2.2281': attribute type 11 has an invalid length. [ 254.535877][T14090] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2281'. [ 255.149260][T14134] netlink: 'syz.0.2291': attribute type 4 has an invalid length. [ 255.157033][T14134] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2291'. [ 255.282057][T14136] netlink: 'syz.0.2291': attribute type 4 has an invalid length. [ 255.297060][T14136] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2291'. [ 255.318451][T14145] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2296'. [ 255.352212][T14138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2292'. [ 255.385858][T14136] netlink: 'syz.0.2291': attribute type 4 has an invalid length. [ 255.432649][T14141] pim6reg1: entered promiscuous mode [ 255.472587][T14141] pim6reg1: entered allmulticast mode [ 257.366819][T14193] bridge7: entered promiscuous mode [ 257.406697][T14193] bridge7: entered allmulticast mode [ 257.796945][T14225] __nla_validate_parse: 3 callbacks suppressed [ 257.796963][T14225] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2316'. [ 257.816946][T14229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2317'. [ 257.839562][T14225] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2316'. [ 257.866800][T14229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2317'. [ 258.133332][T14239] syzkaller0: entered promiscuous mode [ 258.142963][T14239] syzkaller0: entered allmulticast mode [ 258.231328][T14239] tipc: Enabled bearer , priority 0 [ 258.240258][T14247] IPVS: Unknown mcast interface: pimreg [ 258.254223][T14238] tipc: Resetting bearer [ 258.316852][T14238] tipc: Disabling bearer [ 258.425555][T14254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2327'. [ 258.556275][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2329'. [ 258.582416][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'. [ 258.995234][T14290] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 259.409501][T14313] netlink: 'syz.1.2346': attribute type 9 has an invalid length. [ 259.423835][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2347'. [ 259.674148][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2347'. [ 259.756192][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2347'. [ 260.284266][ T3507] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.313527][ T3507] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.339482][T14367] syzkaller0: entered promiscuous mode [ 260.353305][T14367] syzkaller0: entered allmulticast mode [ 260.392505][ T3507] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.401937][ T3507] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.410960][T14367] tipc: Started in network mode [ 260.416030][T14367] tipc: Node identity , cluster identity 4711 [ 260.422646][T14367] tipc: Failed to obtain node identity [ 260.429083][T14367] tipc: Enabling of bearer rejected, failed to enable media [ 260.735074][T14388] netlink: 'syz.5.2368': attribute type 33 has an invalid length. [ 260.775599][T14388] netlink: 'syz.5.2368': attribute type 2 has an invalid length. [ 260.796337][T14388] netlink: 'syz.5.2368': attribute type 33 has an invalid length. [ 260.826800][T14393] unknown channel width for channel at 909000KHz? [ 261.048649][T14406] FAULT_INJECTION: forcing a failure. [ 261.048649][T14406] name failslab, interval 1, probability 0, space 0, times 1 [ 261.075794][T14408] openvswitch: netlink: Missing key (keys=40, expected=80) [ 261.131123][T14406] CPU: 1 UID: 0 PID: 14406 Comm: syz.0.2373 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 261.131155][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.131176][T14406] Call Trace: [ 261.131183][T14406] [ 261.131191][T14406] dump_stack_lvl+0x189/0x250 [ 261.131218][T14406] ? __pfx____ratelimit+0x10/0x10 [ 261.131240][T14406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.131261][T14406] ? __pfx__printk+0x10/0x10 [ 261.131290][T14406] ? __pfx___might_resched+0x10/0x10 [ 261.131312][T14406] should_fail_ex+0x414/0x560 [ 261.131337][T14406] should_failslab+0xa8/0x100 [ 261.131363][T14406] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 261.131387][T14406] ? __alloc_skb+0x112/0x2d0 [ 261.131414][T14406] __alloc_skb+0x112/0x2d0 [ 261.131440][T14406] netlink_sendmsg+0x5c6/0xb30 [ 261.131472][T14406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.131498][T14406] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.131523][T14406] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.131541][T14406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.131564][T14406] __sock_sendmsg+0x21c/0x270 [ 261.131587][T14406] ____sys_sendmsg+0x505/0x830 [ 261.131617][T14406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.131650][T14406] ? import_iovec+0x74/0xa0 [ 261.131671][T14406] ___sys_sendmsg+0x21f/0x2a0 [ 261.131698][T14406] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.131758][T14406] ? __fget_files+0x2a/0x420 [ 261.131781][T14406] ? __fget_files+0x3a0/0x420 [ 261.131815][T14406] __x64_sys_sendmsg+0x19b/0x260 [ 261.131842][T14406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.131875][T14406] ? __pfx_ksys_write+0x10/0x10 [ 261.131903][T14406] ? do_syscall_64+0xbe/0x3b0 [ 261.131929][T14406] do_syscall_64+0xfa/0x3b0 [ 261.131948][T14406] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.131968][T14406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.131986][T14406] ? clear_bhb_loop+0x60/0xb0 [ 261.132007][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.132024][T14406] RIP: 0033:0x7f586b58ebe9 [ 261.132041][T14406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.132057][T14406] RSP: 002b:00007f586c40c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.132076][T14406] RAX: ffffffffffffffda RBX: 00007f586b7b5fa0 RCX: 00007f586b58ebe9 [ 261.132090][T14406] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003 [ 261.132101][T14406] RBP: 00007f586c40c090 R08: 0000000000000000 R09: 0000000000000000 [ 261.132113][T14406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.132123][T14406] R13: 00007f586b7b6038 R14: 00007f586b7b5fa0 R15: 00007ffc3ce7c4d8 [ 261.132163][T14406] [ 261.486255][T14422] veth0: entered promiscuous mode [ 261.494348][T14417] veth0: left promiscuous mode [ 262.640749][T14501] FAULT_INJECTION: forcing a failure. [ 262.640749][T14501] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 262.697419][T14501] CPU: 1 UID: 0 PID: 14501 Comm: syz.5.2404 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 262.697445][T14501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.697456][T14501] Call Trace: [ 262.697463][T14501] [ 262.697471][T14501] dump_stack_lvl+0x189/0x250 [ 262.697497][T14501] ? __pfx____ratelimit+0x10/0x10 [ 262.697517][T14501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.697538][T14501] ? __pfx__printk+0x10/0x10 [ 262.697561][T14501] ? __might_fault+0xb0/0x130 [ 262.697593][T14501] should_fail_ex+0x414/0x560 [ 262.697619][T14501] _copy_from_iter+0x1db/0x16f0 [ 262.697648][T14501] ? rcu_is_watching+0x15/0xb0 [ 262.697668][T14501] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 262.697693][T14501] ? __pfx__copy_from_iter+0x10/0x10 [ 262.697718][T14501] ? __build_skb_around+0x257/0x3e0 [ 262.697745][T14501] ? netlink_sendmsg+0x642/0xb30 [ 262.697765][T14501] ? skb_put+0x11b/0x210 [ 262.697792][T14501] netlink_sendmsg+0x6b2/0xb30 [ 262.697824][T14501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.697850][T14501] ? aa_sock_msg_perm+0xf1/0x1d0 [ 262.697876][T14501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.697895][T14501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.697918][T14501] __sock_sendmsg+0x21c/0x270 [ 262.697941][T14501] ____sys_sendmsg+0x505/0x830 [ 262.697985][T14501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.698021][T14501] ? import_iovec+0x74/0xa0 [ 262.698041][T14501] ___sys_sendmsg+0x21f/0x2a0 [ 262.698069][T14501] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.698125][T14501] ? __fget_files+0x2a/0x420 [ 262.698148][T14501] ? __fget_files+0x3a0/0x420 [ 262.698183][T14501] __x64_sys_sendmsg+0x19b/0x260 [ 262.698206][T14501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.698236][T14501] ? __pfx_ksys_write+0x10/0x10 [ 262.698252][T14501] ? rcu_is_watching+0x15/0xb0 [ 262.698274][T14501] ? do_syscall_64+0xbe/0x3b0 [ 262.698298][T14501] do_syscall_64+0xfa/0x3b0 [ 262.698316][T14501] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.698335][T14501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.698351][T14501] ? clear_bhb_loop+0x60/0xb0 [ 262.698370][T14501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.698387][T14501] RIP: 0033:0x7fa22698ebe9 [ 262.698402][T14501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.698415][T14501] RSP: 002b:00007fa22789d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.698434][T14501] RAX: ffffffffffffffda RBX: 00007fa226bb5fa0 RCX: 00007fa22698ebe9 [ 262.698445][T14501] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003 [ 262.698455][T14501] RBP: 00007fa22789d090 R08: 0000000000000000 R09: 0000000000000000 [ 262.698465][T14501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.698475][T14501] R13: 00007fa226bb6038 R14: 00007fa226bb5fa0 R15: 00007ffda47dbb58 [ 262.698500][T14501] [ 263.009353][T14509] __nla_validate_parse: 23 callbacks suppressed [ 263.009372][T14509] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2407'. [ 263.025502][T14509] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2407'. [ 263.307069][T14531] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2414'. [ 263.409938][T14542] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 263.479668][T14544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2415'. [ 263.498557][T14544] batman_adv: batadv0: Interface deactivated: dummy0 [ 263.652144][T14556] FAULT_INJECTION: forcing a failure. [ 263.652144][T14556] name failslab, interval 1, probability 0, space 0, times 0 [ 263.680511][T14556] CPU: 0 UID: 0 PID: 14556 Comm: syz.0.2420 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 263.680539][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.680549][T14556] Call Trace: [ 263.680556][T14556] [ 263.680565][T14556] dump_stack_lvl+0x189/0x250 [ 263.680590][T14556] ? __pfx____ratelimit+0x10/0x10 [ 263.680612][T14556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.680632][T14556] ? __pfx__printk+0x10/0x10 [ 263.680659][T14556] ? __pfx___might_resched+0x10/0x10 [ 263.680676][T14556] ? fs_reclaim_acquire+0x7d/0x100 [ 263.680707][T14556] should_fail_ex+0x414/0x560 [ 263.680732][T14556] should_failslab+0xa8/0x100 [ 263.680758][T14556] __kmalloc_noprof+0xcb/0x4f0 [ 263.680780][T14556] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 263.680808][T14556] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 263.680835][T14556] genl_family_rcv_msg_doit+0xb8/0x300 [ 263.680860][T14556] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 263.680888][T14556] ? apparmor_capable+0x137/0x1b0 [ 263.680908][T14556] ? bpf_lsm_capable+0x9/0x20 [ 263.680930][T14556] ? security_capable+0x7e/0x2e0 [ 263.680959][T14556] genl_rcv_msg+0x60e/0x790 [ 263.680993][T14556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 263.681009][T14556] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 263.681032][T14556] ? __pfx_nl80211_new_station+0x10/0x10 [ 263.681049][T14556] ? __pfx_nl80211_post_doit+0x10/0x10 [ 263.681090][T14556] netlink_rcv_skb+0x205/0x470 [ 263.681110][T14556] ? __lock_acquire+0xab9/0xd20 [ 263.681135][T14556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 263.681154][T14556] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.681197][T14556] ? down_read+0x1ad/0x2e0 [ 263.681224][T14556] genl_rcv+0x28/0x40 [ 263.681247][T14556] netlink_unicast+0x82c/0x9e0 [ 263.681277][T14556] ? __pfx_netlink_unicast+0x10/0x10 [ 263.681299][T14556] ? netlink_sendmsg+0x642/0xb30 [ 263.681318][T14556] ? skb_put+0x11b/0x210 [ 263.681346][T14556] netlink_sendmsg+0x805/0xb30 [ 263.681378][T14556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.681403][T14556] ? aa_sock_msg_perm+0xf1/0x1d0 [ 263.681427][T14556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.681444][T14556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.681465][T14556] __sock_sendmsg+0x21c/0x270 [ 263.681488][T14556] ____sys_sendmsg+0x505/0x830 [ 263.681517][T14556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.681552][T14556] ? import_iovec+0x74/0xa0 [ 263.681573][T14556] ___sys_sendmsg+0x21f/0x2a0 [ 263.681600][T14556] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.681661][T14556] ? __fget_files+0x2a/0x420 [ 263.681685][T14556] ? __fget_files+0x3a0/0x420 [ 263.681720][T14556] __x64_sys_sendmsg+0x19b/0x260 [ 263.681747][T14556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.681780][T14556] ? __pfx_ksys_write+0x10/0x10 [ 263.681801][T14556] ? rcu_is_watching+0x15/0xb0 [ 263.681825][T14556] ? do_syscall_64+0xbe/0x3b0 [ 263.681851][T14556] do_syscall_64+0xfa/0x3b0 [ 263.681870][T14556] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.681891][T14556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.681909][T14556] ? clear_bhb_loop+0x60/0xb0 [ 263.681929][T14556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.681943][T14556] RIP: 0033:0x7f586b58ebe9 [ 263.681959][T14556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.681972][T14556] RSP: 002b:00007f586c40c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.681998][T14556] RAX: ffffffffffffffda RBX: 00007f586b7b5fa0 RCX: 00007f586b58ebe9 [ 263.682011][T14556] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003 [ 263.682023][T14556] RBP: 00007f586c40c090 R08: 0000000000000000 R09: 0000000000000000 [ 263.682034][T14556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.682045][T14556] R13: 00007f586b7b6038 R14: 00007f586b7b5fa0 R15: 00007ffc3ce7c4d8 [ 263.682074][T14556] [ 263.722603][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2423'. [ 263.812873][T14566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2424'. [ 264.107983][T14566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2424'. [ 264.223025][T14581] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2430'. [ 264.234048][T14581] netlink: 'syz.5.2430': attribute type 1 has an invalid length. [ 264.279294][T14581] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2430'. [ 264.835608][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 265.028442][T14661] netlink: 'syz.5.2450': attribute type 12 has an invalid length. [ 265.374138][T14678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.383689][T14689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.417584][ T5880] Bluetooth: hci0: command tx timeout [ 266.095301][T14737] netlink: 'syz.4.2470': attribute type 29 has an invalid length. [ 266.145604][T14740] netlink: 'syz.5.2472': attribute type 1 has an invalid length. [ 266.301395][T14743] FAULT_INJECTION: forcing a failure. [ 266.301395][T14743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.392676][T14743] CPU: 1 UID: 0 PID: 14743 Comm: syz.0.2473 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 266.392704][T14743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.392714][T14743] Call Trace: [ 266.392721][T14743] [ 266.392730][T14743] dump_stack_lvl+0x189/0x250 [ 266.392755][T14743] ? __pfx____ratelimit+0x10/0x10 [ 266.392776][T14743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.392797][T14743] ? __pfx__printk+0x10/0x10 [ 266.392833][T14743] should_fail_ex+0x414/0x560 [ 266.392859][T14743] _copy_to_user+0x31/0xb0 [ 266.392877][T14743] simple_read_from_buffer+0xe1/0x170 [ 266.392907][T14743] proc_fail_nth_read+0x1b3/0x220 [ 266.392930][T14743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.392953][T14743] ? rw_verify_area+0x2a6/0x4d0 [ 266.392981][T14743] ? __lock_acquire+0xab9/0xd20 [ 266.393004][T14743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.393025][T14743] vfs_read+0x200/0x980 [ 266.393047][T14743] ? fdget_pos+0x247/0x320 [ 266.393066][T14743] ? __pfx___mutex_lock+0x10/0x10 [ 266.393090][T14743] ? __pfx_vfs_read+0x10/0x10 [ 266.393114][T14743] ? __fget_files+0x2a/0x420 [ 266.393142][T14743] ? __fget_files+0x3a0/0x420 [ 266.393165][T14743] ? __fget_files+0x2a/0x420 [ 266.393198][T14743] ksys_read+0x145/0x250 [ 266.393221][T14743] ? __pfx_ksys_read+0x10/0x10 [ 266.393239][T14743] ? rcu_is_watching+0x15/0xb0 [ 266.393262][T14743] ? do_syscall_64+0xbe/0x3b0 [ 266.393288][T14743] do_syscall_64+0xfa/0x3b0 [ 266.393308][T14743] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.393329][T14743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.393346][T14743] ? clear_bhb_loop+0x60/0xb0 [ 266.393367][T14743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.393385][T14743] RIP: 0033:0x7f586b58d5fc [ 266.393401][T14743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.393416][T14743] RSP: 002b:00007f586c40c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.393434][T14743] RAX: ffffffffffffffda RBX: 00007f586b7b5fa0 RCX: 00007f586b58d5fc [ 266.393448][T14743] RDX: 000000000000000f RSI: 00007f586c40c0a0 RDI: 0000000000000004 [ 266.393459][T14743] RBP: 00007f586c40c090 R08: 0000000000000000 R09: 0000000000000000 [ 266.393471][T14743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.393481][T14743] R13: 00007f586b7b6038 R14: 00007f586b7b5fa0 R15: 00007ffc3ce7c4d8 [ 266.393511][T14743] [ 266.903079][T14763] netlink: 'syz.1.2476': attribute type 4 has an invalid length. [ 267.151584][T14774] dvmrp1: entered allmulticast mode [ 267.171857][T14758] netlink: 'syz.4.2470': attribute type 29 has an invalid length. [ 267.568511][T14793] tipc: New replicast peer: 255.255.255.255 [ 267.594128][T14793] tipc: Enabled bearer , priority 10 [ 267.656501][T14793] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 267.682288][T14793] netlink: 'syz.1.2483': attribute type 4 has an invalid length. [ 267.836370][T14803] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 268.125530][T14828] netlink: 'syz.2.2494': attribute type 1 has an invalid length. [ 268.296485][T14841] __nla_validate_parse: 16 callbacks suppressed [ 268.296504][T14841] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2499'. [ 268.392892][T14841] bond0: entered promiscuous mode [ 268.399869][T14841] bond_slave_0: entered promiscuous mode [ 268.423399][T14841] bond_slave_1: entered promiscuous mode [ 268.474985][T14849] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2500'. [ 268.488346][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2498'. [ 268.516815][T14849] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2500'. [ 268.539608][T14849] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2500'. [ 268.581186][T14849] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.2500'. [ 268.712003][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2502'. [ 268.721223][ T5978] tipc: Node number set to 971378524 [ 268.980153][T14878] xt_policy: too many policy elements [ 269.106732][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'. [ 269.136049][T14887] geneve0: entered promiscuous mode [ 269.167074][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'. [ 269.414905][T14903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2517'. [ 269.506509][T14909] validate_nla: 1 callbacks suppressed [ 269.506534][T14909] netlink: 'syz.1.2519': attribute type 21 has an invalid length. [ 269.726983][T14925] netlink: 'syz.4.2525': attribute type 23 has an invalid length. [ 269.896544][T14920] netlink: 'syz.1.2523': attribute type 11 has an invalid length. [ 269.940889][T14920] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 271.365707][T14997] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 272.150894][T15047] netlink: 'syz.4.2557': attribute type 1 has an invalid length. [ 272.172606][T15047] netlink: 'syz.4.2557': attribute type 3 has an invalid length. [ 272.202861][ T43] IPVS: starting estimator thread 0... [ 272.297505][T15054] IPVS: using max 27 ests per chain, 64800 per kthread [ 272.530137][T15076] IPv6: sit2: Disabled Multicast RS [ 273.535744][T15126] __nla_validate_parse: 13 callbacks suppressed [ 273.535763][T15126] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2578'. [ 273.644187][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 273.663200][T15133] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 273.725930][T15133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.830738][T15146] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 273.958311][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2583'. [ 274.046546][T15151] syz!: rxe_newlink: already configured on team_slave_0 [ 274.345136][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2588'. [ 274.478166][ T30] audit: type=1800 audit(1755210815.981:5): pid=15156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2585" name="memory.events" dev="tmpfs" ino=2613 res=0 errno=0 [ 274.499811][T15174] tap0: tun_chr_ioctl cmd 1074025678 [ 274.505131][T15174] tap0: group set to 0 [ 275.251697][T15190] C: left allmulticast mode [ 275.385258][T15204] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2599'. [ 275.581813][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 180 seconds [ 275.881590][T15238] netlink: 'syz.1.2607': attribute type 2 has an invalid length. [ 275.892990][T15234] ip6gre1: entered allmulticast mode [ 275.904049][T15238] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2607'. [ 275.921580][T15238] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2607'. [ 276.416730][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 276.437122][T15266] netlink: 'syz.4.2619': attribute type 10 has an invalid length. [ 276.445336][T15266] tipc: Resetting bearer [ 276.462218][T15266] bond0: (slave team0): refused to change device type [ 276.615919][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2624'. [ 276.684790][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 276.792208][T15290] netlink: 'syz.0.2629': attribute type 5 has an invalid length. [ 277.094831][T15311] netlink: 'syz.4.2633': attribute type 1 has an invalid length. [ 277.113323][T15311] netlink: 'syz.4.2633': attribute type 11 has an invalid length. [ 277.365703][T15330] netlink: 'syz.5.2639': attribute type 11 has an invalid length. [ 277.396666][T15331] macvlan2: entered promiscuous mode [ 277.404156][T15331] macvlan2: entered allmulticast mode [ 277.431549][T15331] sctp: Trying to GSO but underlying device doesn't support it. [ 277.632754][T15339] nftables ruleset with unbound set [ 277.681255][T15346] netlink: 'syz.5.2642': attribute type 21 has an invalid length. [ 277.935433][T15358] bridge_slave_1: left allmulticast mode [ 277.942530][T15358] bridge_slave_1: left promiscuous mode [ 277.951241][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.970320][T15358] bridge_slave_0: left allmulticast mode [ 277.984950][T15358] bridge_slave_0: left promiscuous mode [ 277.991771][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.078316][T15362] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 278.087264][T15362] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 278.356012][T15376] tipc: Started in network mode [ 278.371453][T15376] tipc: Node identity 263e2c695f17, cluster identity 4711 [ 278.381002][T15376] tipc: Enabled bearer , priority 0 [ 278.394955][T15376] syzkaller0: entered promiscuous mode [ 278.401544][T15376] syzkaller0: entered allmulticast mode [ 278.418338][T15376] tipc: Resetting bearer [ 278.458864][T15374] tipc: Resetting bearer [ 278.494016][T15374] tipc: Disabling bearer [ 278.833247][T15363] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 278.849478][T15363] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 279.032421][T15416] __nla_validate_parse: 7 callbacks suppressed [ 279.032438][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2661'. [ 279.100502][T15405] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2661'. [ 279.261772][T15432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2667'. [ 279.366245][T15436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2668'. [ 279.552003][T15457] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 279.561052][T15457] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 279.572547][T15459] netlink: 'syz.1.2673': attribute type 10 has an invalid length. [ 279.586075][T15459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2673'. [ 279.586835][T15457] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2671'. [ 279.596925][T15459] batadv0: entered promiscuous mode [ 279.625828][T15459] batadv0: entered allmulticast mode [ 279.632897][T15459] bridge0: port 1(batadv0) entered blocking state [ 279.644335][T15459] bridge0: port 1(batadv0) entered disabled state [ 280.128135][ T2913] batman_adv: batadv0: IGMP Querier appeared [ 280.134440][ T2913] batman_adv: batadv0: MLD Querier appeared [ 280.375232][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2679'. [ 280.562063][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2681'. [ 280.764494][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2687'. [ 280.776214][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2687'. [ 280.823877][T15504] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 280.912119][T15512] netlink: 'syz.5.2691': attribute type 7 has an invalid length. [ 280.921250][T15513] netlink: 'syz.5.2691': attribute type 7 has an invalid length. [ 280.923851][T15512] netlink: 'syz.5.2691': attribute type 8 has an invalid length. [ 280.934075][T15513] netlink: 'syz.5.2691': attribute type 8 has an invalid length. [ 281.056130][T15508] netlink: 'syz.4.2685': attribute type 15 has an invalid length. [ 281.157214][T15526] sctp: [Deprecated]: syz.1.2695 (pid 15526) Use of int in maxseg socket option. [ 281.157214][T15526] Use struct sctp_assoc_value instead [ 281.531375][T15588] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:20004 [ 281.584965][T15588] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 281.692906][T15622] netlink: 'syz.4.2705': attribute type 10 has an invalid length. [ 281.702078][T15622] dummy0: entered promiscuous mode [ 281.709919][T15622] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 282.178894][T15532] workqueue: Failed to create a rescuer kthread for wq "nfc44_nci_rx_wq": -EINTR [ 282.618744][ T5880] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 282.817181][T15772] netlink: 'syz.5.2726': attribute type 1 has an invalid length. [ 282.865234][T15772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.911894][T15777] bond2: (slave gretap1): making interface the new active one [ 282.926210][T15777] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 282.980223][T15781] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 283.019318][T15737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.041465][T15737] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 283.064396][T15737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.078455][T15737] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 283.099556][T15737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 283.105576][T15737] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 283.201548][T15792] tipc: Enabling of bearer rejected, failed to enable media [ 283.216440][T15737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.231466][T15737] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 284.218371][T15827] __nla_validate_parse: 18 callbacks suppressed [ 284.218399][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 284.235291][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 284.252232][T15825] netlink: 'syz.2.2744': attribute type 24 has an invalid length. [ 284.680535][T15838] netlink: 'syz.5.2749': attribute type 21 has an invalid length. [ 284.700117][T15838] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.854120][T15855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2755'. [ 285.964384][T15858] bond0: entered allmulticast mode [ 285.969767][T15858] bond_slave_0: entered allmulticast mode [ 285.975494][T15858] bond_slave_1: entered allmulticast mode [ 286.615618][T15876] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2763'. [ 287.105487][T15886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2766'. [ 287.574873][T15906] tipc: Enabling of bearer rejected, failed to enable media [ 287.624750][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2772'. [ 287.636286][T15908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.644535][T15908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.652854][T15908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.660892][T15908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.953973][T15923] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2777'. [ 288.000164][T15927] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2778'. [ 288.013177][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2778'. [ 289.087061][T15946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.114131][T15946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.659054][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 210 seconds [ 335.738191][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 240 seconds [ 365.817961][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 270 seconds [ 395.898509][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 300 seconds [ 425.978615][ T1109] block nbd0: Possible stuck request ffff888024fb5080: control (read@0,1024B). Runtime 330 seconds [ 438.138818][ T31] INFO: task syz-executor:5868 blocked for more than 143 seconds. [ 438.146696][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 438.154365][ T31] Blocked by coredump. [ 438.159441][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.169137][ T31] task:syz-executor state:D stack:20760 pid:5868 tgid:5868 ppid:1 task_flags:0x40054c flags:0x00004006 [ 438.181535][ T31] Call Trace: [ 438.184830][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 438.188331][ T31] __schedule+0x1798/0x4cc0 [ 438.193163][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.199226][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.204105][ T31] ? __pfx___schedule+0x10/0x10 [ 438.209766][ T31] ? schedule+0x91/0x360 [ 438.214032][ T31] schedule+0x165/0x360 [ 438.218788][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.224263][ T31] __mutex_lock+0x7e6/0x1360 [ 438.232014][ T31] ? __mutex_lock+0x5b6/0x1360 [ 438.236815][ T31] ? rfkill_unregister+0xc8/0x220 [ 438.242960][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.249128][ T31] ? __pfx_device_del+0x10/0x10 [ 438.253995][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 438.260191][ T31] rfkill_unregister+0xc8/0x220 [ 438.265071][ T31] hci_unregister_dev+0x374/0x510 [ 438.303226][ T31] vhci_release+0x80/0xd0 [ 438.308186][ T31] ? __pfx_vhci_release+0x10/0x10 [ 438.313245][ T31] __fput+0x44c/0xa70 [ 438.317252][ T31] task_work_run+0x1d4/0x260 [ 438.344352][ T31] ? __pfx_task_work_run+0x10/0x10 [ 438.351810][ T31] ? kmem_cache_free+0x18f/0x400 [ 438.356783][ T31] do_exit+0x6b5/0x2300 [ 438.361528][ T31] ? do_raw_spin_lock+0x121/0x290 [ 438.366891][ T31] ? __pfx_do_exit+0x10/0x10 [ 438.371944][ T31] ? cgroup_freezing+0x20/0x350 [ 438.376930][ T31] do_group_exit+0x21c/0x2d0 [ 438.382108][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.387346][ T31] get_signal+0x1286/0x1340 [ 438.391859][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 438.397946][ T31] ? fput_close_sync+0x119/0x200 [ 438.402889][ T31] ? kmem_cache_free+0x309/0x400 [ 438.408434][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 438.414610][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 438.420605][ T31] exit_to_user_mode_loop+0x75/0x110 [ 438.425901][ T31] do_syscall_64+0x2bd/0x3b0 [ 438.430927][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.436138][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.442788][ T31] ? clear_bhb_loop+0x60/0xb0 [ 438.448026][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.453933][ T31] RIP: 0033:0x7f7b4e98d5fc [ 438.459100][ T31] RSP: 002b:00007ffdfb398b20 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.468269][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f7b4e98d5fc [ 438.476253][ T31] RDX: 0000000000000030 RSI: 00007ffdfb398be0 RDI: 00000000000000f9 [ 438.484751][ T31] RBP: 00007ffdfb398b8c R08: 0000000000000000 R09: 00007ffdfb398897 [ 438.493156][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258 [ 438.501696][ T31] R13: 00000000000927c0 R14: 000000000004569e R15: 00007ffdfb398be0 [ 438.510227][ T31] [ 438.513280][ T31] INFO: task kworker/1:7:5978 blocked for more than 143 seconds. [ 438.521465][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 438.529127][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.538025][ T31] task:kworker/1:7 state:D stack:23880 pid:5978 tgid:5978 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 438.550109][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 438.556795][ T31] Call Trace: [ 438.560613][ T31] [ 438.563543][ T31] __schedule+0x1798/0x4cc0 [ 438.568838][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 438.574228][ T31] ? __pfx___schedule+0x10/0x10 [ 438.579580][ T31] ? schedule+0x91/0x360 [ 438.583816][ T31] schedule+0x165/0x360 [ 438.588750][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.594217][ T31] __mutex_lock+0x7e6/0x1360 [ 438.599257][ T31] ? __mutex_lock+0x5b6/0x1360 [ 438.604016][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 438.610792][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.615823][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.622131][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.628422][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 438.634498][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.640627][ T31] process_scheduled_works+0xade/0x17b0 [ 438.646178][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.652750][ T31] worker_thread+0x8a0/0xda0 [ 438.657885][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.664224][ T31] ? __kthread_parkme+0x7b/0x200 [ 438.669682][ T31] kthread+0x70e/0x8a0 [ 438.673765][ T31] ? __pfx_worker_thread+0x10/0x10 [ 438.679578][ T31] ? __pfx_kthread+0x10/0x10 [ 438.684169][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.689886][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.695092][ T31] ? __pfx_kthread+0x10/0x10 [ 438.700251][ T31] ret_from_fork+0x3fc/0x770 [ 438.704861][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.710814][ T31] ? __switch_to_asm+0x39/0x70 [ 438.715597][ T31] ? __switch_to_asm+0x33/0x70 [ 438.720764][ T31] ? __pfx_kthread+0x10/0x10 [ 438.725351][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.730772][ T31] [ 438.733826][ T31] INFO: task syz.0.2698:15542 blocked for more than 143 seconds. [ 438.742416][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 438.750285][ T31] Blocked by coredump. [ 438.754869][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.764009][ T31] task:syz.0.2698 state:D stack:26680 pid:15542 tgid:15531 ppid:5862 task_flags:0x40054c flags:0x00004002 [ 438.776473][ T31] Call Trace: [ 438.780416][ T31] [ 438.783363][ T31] __schedule+0x1798/0x4cc0 [ 438.788651][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.793528][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.799131][ T31] ? __pfx___schedule+0x10/0x10 [ 438.803991][ T31] ? schedule+0x91/0x360 [ 438.808884][ T31] schedule+0x165/0x360 [ 438.813053][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.818618][ T31] __mutex_lock+0x7e6/0x1360 [ 438.823222][ T31] ? __mutex_lock+0x5b6/0x1360 [ 438.828320][ T31] ? rfkill_unregister+0xc8/0x220 [ 438.833358][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.838423][ T31] ? __pfx_device_del+0x10/0x10 [ 438.843283][ T31] rfkill_unregister+0xc8/0x220 [ 438.848683][ T31] nfc_unregister_device+0x96/0x2a0 [ 438.853901][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 438.860850][ T31] virtual_ncidev_close+0x56/0x90 [ 438.865893][ T31] __fput+0x44c/0xa70 [ 438.870434][ T31] task_work_run+0x1d4/0x260 [ 438.875063][ T31] ? __pfx_task_work_run+0x10/0x10 [ 438.880654][ T31] ? kmem_cache_free+0x18f/0x400 [ 438.885592][ T31] do_exit+0x6b5/0x2300 [ 438.890587][ T31] ? cgroup_freezing+0x20/0x350 [ 438.895463][ T31] ? __pfx_do_exit+0x10/0x10 [ 438.900623][ T31] ? cgroup_freezing+0x20/0x350 [ 438.905478][ T31] ? cgroup_freezing+0x20/0x350 [ 438.910861][ T31] do_group_exit+0x21c/0x2d0 [ 438.915480][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.921214][ T31] get_signal+0x1286/0x1340 [ 438.925721][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 438.931722][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 438.938665][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 438.944141][ T31] exit_to_user_mode_loop+0x75/0x110 [ 438.950194][ T31] do_syscall_64+0x2bd/0x3b0 [ 438.954795][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.961319][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.968035][ T31] ? clear_bhb_loop+0x60/0xb0 [ 438.972725][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.979144][ T31] RIP: 0033:0x7f586b58ebe9 [ 438.983553][ T31] RSP: 002b:00007f586c3ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 438.992467][ T31] RAX: fffffffffffffe00 RBX: 00007f586b7b6188 RCX: 00007f586b58ebe9 [ 439.000830][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f586b7b6188 [ 439.009851][ T31] RBP: 00007f586b7b6180 R08: 0000000000000000 R09: 0000000000000000 [ 439.018378][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.026353][ T31] R13: 00007f586b7b6218 R14: 00007ffc3ce7c3f0 R15: 00007ffc3ce7c4d8 [ 439.034816][ T31] [ 439.038302][ T31] INFO: task syz.1.2715:15737 blocked for more than 144 seconds. [ 439.046012][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 439.056663][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.065850][ T31] task:syz.1.2715 state:D stack:24808 pid:15737 tgid:15733 ppid:5882 task_flags:0x400040 flags:0x00004006 [ 439.078227][ T31] Call Trace: [ 439.081494][ T31] [ 439.084407][ T31] __schedule+0x1798/0x4cc0 [ 439.089457][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.094323][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.099553][ T31] ? __pfx___schedule+0x10/0x10 [ 439.104410][ T31] ? schedule+0x91/0x360 [ 439.109498][ T31] schedule+0x165/0x360 [ 439.113663][ T31] schedule_preempt_disabled+0x13/0x30 [ 439.119382][ T31] __mutex_lock+0x7e6/0x1360 [ 439.123990][ T31] ? __mutex_lock+0x5b6/0x1360 [ 439.129238][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 439.134551][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 439.139883][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.145098][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 439.151458][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 439.158179][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 439.163897][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 439.169835][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 439.175584][ T31] rfkill_set_block+0x1d2/0x440 [ 439.180960][ T31] rfkill_fop_write+0x44b/0x570 [ 439.185825][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 439.191663][ T31] ? security_file_permission+0x10/0x290 [ 439.197337][ T31] ? rw_verify_area+0x255/0x4d0 [ 439.202188][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.207021][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 439.213022][ T31] vfs_write+0x27e/0xa90 [ 439.217264][ T31] ? __pfx_vfs_write+0x10/0x10 [ 439.222060][ T31] ? __fget_files+0x2a/0x420 [ 439.226636][ T31] ? __fget_files+0x2a/0x420 [ 439.231889][ T31] ? __fget_files+0x3a0/0x420 [ 439.236585][ T31] ? __fget_files+0x2a/0x420 [ 439.241739][ T31] ksys_write+0x145/0x250 [ 439.246067][ T31] ? __pfx_ksys_write+0x10/0x10 [ 439.251423][ T31] ? rcu_is_watching+0x15/0xb0 [ 439.256180][ T31] ? do_syscall_64+0xbe/0x3b0 [ 439.261319][ T31] do_syscall_64+0xfa/0x3b0 [ 439.265814][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.271597][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.278085][ T31] ? clear_bhb_loop+0x60/0xb0 [ 439.282750][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.289161][ T31] RIP: 0033:0x7fe13e38ebe9 [ 439.293586][ T31] RSP: 002b:00007fe13f2d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.302519][ T31] RAX: ffffffffffffffda RBX: 00007fe13e5b5fa0 RCX: 00007fe13e38ebe9 [ 439.311038][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 439.319308][ T31] RBP: 00007fe13e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 439.328112][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.336089][ T31] R13: 00007fe13e5b6038 R14: 00007fe13e5b5fa0 R15: 00007fff0fa71f58 [ 439.344813][ T31] [ 439.348598][ T31] INFO: task syz.4.2736:15802 blocked for more than 144 seconds. [ 439.356313][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 439.364179][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.373240][ T31] task:syz.4.2736 state:D stack:25096 pid:15802 tgid:15801 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 439.385685][ T31] Call Trace: [ 439.389803][ T31] [ 439.392738][ T31] __schedule+0x1798/0x4cc0 [ 439.397232][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.402702][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.408090][ T31] ? __pfx___schedule+0x10/0x10 [ 439.412960][ T31] ? schedule+0x91/0x360 [ 439.417188][ T31] schedule+0x165/0x360 [ 439.422251][ T31] schedule_preempt_disabled+0x13/0x30 [ 439.427852][ T31] __mutex_lock+0x7e6/0x1360 [ 439.432455][ T31] ? __mutex_lock+0x5b6/0x1360 [ 439.437204][ T31] ? rfkill_register+0x37/0x8e0 [ 439.442113][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 439.447149][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 439.452819][ T31] ? device_initialize+0x24b/0x440 [ 439.458586][ T31] rfkill_register+0x37/0x8e0 [ 439.463283][ T31] nfc_register_device+0x14a/0x320 [ 439.468921][ T31] nci_register_device+0x87f/0x9d0 [ 439.474042][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 439.480259][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 439.485538][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 439.491377][ T31] virtual_ncidev_open+0x129/0x1a0 [ 439.496478][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 439.502580][ T31] misc_open+0x2bc/0x330 [ 439.506815][ T31] chrdev_open+0x4c9/0x5e0 [ 439.512087][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 439.517047][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 439.523857][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 439.529434][ T31] do_dentry_open+0x953/0x13f0 [ 439.534211][ T31] vfs_open+0x3b/0x340 [ 439.538835][ T31] ? path_openat+0x2ecd/0x3830 [ 439.543599][ T31] path_openat+0x2ee5/0x3830 [ 439.548717][ T31] ? arch_stack_walk+0xfc/0x150 [ 439.553586][ T31] ? stack_depot_save_flags+0x40/0x860 [ 439.559487][ T31] ? __pfx_path_openat+0x10/0x10 [ 439.564415][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.571468][ T31] do_filp_open+0x1fa/0x410 [ 439.575992][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.581315][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 439.586349][ T31] ? _raw_spin_unlock+0x28/0x50 [ 439.591668][ T31] ? alloc_fd+0x64c/0x6c0 [ 439.595999][ T31] do_sys_openat2+0x121/0x1c0 [ 439.601261][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.606456][ T31] ? exc_page_fault+0x76/0xf0 [ 439.611565][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 439.616846][ T31] __x64_sys_openat+0x138/0x170 [ 439.622164][ T31] do_syscall_64+0xfa/0x3b0 [ 439.626659][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.632657][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.639277][ T31] ? clear_bhb_loop+0x60/0xb0 [ 439.643969][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.650401][ T31] RIP: 0033:0x7fafa998ebe9 [ 439.654830][ T31] RSP: 002b:00007fafaa82d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 439.663825][ T31] RAX: ffffffffffffffda RBX: 00007fafa9bb5fa0 RCX: 00007fafa998ebe9 [ 439.672190][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 439.680667][ T31] RBP: 00007fafa9a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 439.689488][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.697744][ T31] R13: 00007fafa9bb6038 R14: 00007fafa9bb5fa0 R15: 00007ffd37c0a4b8 [ 439.705722][ T31] [ 439.709348][ T31] INFO: task syz-executor:15843 blocked for more than 144 seconds. [ 439.717241][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 439.724895][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.733608][ T31] task:syz-executor state:D stack:26888 pid:15843 tgid:15843 ppid:1 task_flags:0x400040 flags:0x00004000 [ 439.745582][ T31] Call Trace: [ 439.749677][ T31] [ 439.752616][ T31] __schedule+0x1798/0x4cc0 [ 439.757104][ T31] ? kasan_save_free_info+0x46/0x50 [ 439.762824][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.768236][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.773102][ T31] ? __pfx___schedule+0x10/0x10 [ 439.778753][ T31] ? schedule+0x91/0x360 [ 439.783011][ T31] schedule+0x165/0x360 [ 439.787153][ T31] schedule_preempt_disabled+0x13/0x30 [ 439.793354][ T31] __mutex_lock+0x7e6/0x1360 [ 439.798232][ T31] ? __mutex_lock+0x5b6/0x1360 [ 439.802988][ T31] ? misc_open+0x51/0x330 [ 439.807356][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 439.812394][ T31] misc_open+0x51/0x330 [ 439.816533][ T31] chrdev_open+0x4c9/0x5e0 [ 439.821614][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 439.826567][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 439.833351][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 439.838670][ T31] do_dentry_open+0x953/0x13f0 [ 439.843432][ T31] vfs_open+0x3b/0x340 [ 439.848256][ T31] ? path_openat+0x2ecd/0x3830 [ 439.853033][ T31] path_openat+0x2ee5/0x3830 [ 439.858181][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 439.863647][ T31] ? count_memcg_event_mm+0x21/0x260 [ 439.869505][ T31] ? __pfx_path_openat+0x10/0x10 [ 439.874448][ T31] ? __pfx___up_read+0x10/0x10 [ 439.879874][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 439.885166][ T31] do_filp_open+0x1fa/0x410 [ 439.890186][ T31] ? __lock_acquire+0xab9/0xd20 [ 439.895076][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 439.901114][ T31] ? _raw_spin_unlock+0x28/0x50 [ 439.905983][ T31] ? alloc_fd+0x64c/0x6c0 [ 439.911150][ T31] do_sys_openat2+0x121/0x1c0 [ 439.915841][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.921491][ T31] ? fd_install+0x97/0x540 [ 439.925903][ T31] ? fd_install+0x30d/0x540 [ 439.930957][ T31] __x64_sys_openat+0x138/0x170 [ 439.935818][ T31] do_syscall_64+0xfa/0x3b0 [ 439.940849][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.946060][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.952580][ T31] ? clear_bhb_loop+0x60/0xb0 [ 439.957276][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.963242][ T31] RIP: 0033:0x7ff7bc78d4d1 [ 439.968402][ T31] RSP: 002b:00007ffd60428160 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 439.976844][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff7bc78d4d1 [ 439.985569][ T31] RDX: 0000000000000002 RSI: 00007ff7bc812822 RDI: 00000000ffffff9c [ 439.994128][ T31] RBP: 00007ff7bc812822 R08: 0000000000000000 R09: 00007ff7bd4ed6c0 [ 440.002660][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 440.011365][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 440.020087][ T31] [ 440.023128][ T31] INFO: task syz.5.2783:15948 blocked for more than 145 seconds. [ 440.031227][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 440.038601][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.047264][ T31] task:syz.5.2783 state:D stack:27616 pid:15948 tgid:15947 ppid:13662 task_flags:0x400140 flags:0x00004004 [ 440.059750][ T31] Call Trace: [ 440.063054][ T31] [ 440.065970][ T31] __schedule+0x1798/0x4cc0 [ 440.070701][ T31] ? kasan_save_free_info+0x46/0x50 [ 440.078976][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.083911][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.088939][ T31] ? __pfx___schedule+0x10/0x10 [ 440.093848][ T31] ? schedule+0x91/0x360 [ 440.099213][ T31] schedule+0x165/0x360 [ 440.103437][ T31] schedule_preempt_disabled+0x13/0x30 [ 440.109309][ T31] __mutex_lock+0x7e6/0x1360 [ 440.113919][ T31] ? __mutex_lock+0x5b6/0x1360 [ 440.118828][ T31] ? misc_open+0x51/0x330 [ 440.123197][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 440.128522][ T31] misc_open+0x51/0x330 [ 440.132696][ T31] chrdev_open+0x4c9/0x5e0 [ 440.137118][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 440.142388][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 440.148809][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 440.153754][ T31] do_dentry_open+0x953/0x13f0 [ 440.158642][ T31] vfs_open+0x3b/0x340 [ 440.162712][ T31] ? path_openat+0x2ecd/0x3830 [ 440.167842][ T31] path_openat+0x2ee5/0x3830 [ 440.172434][ T31] ? arch_stack_walk+0xfc/0x150 [ 440.177277][ T31] ? stack_depot_save_flags+0x40/0x860 [ 440.182893][ T31] ? __pfx_path_openat+0x10/0x10 [ 440.188042][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.194126][ T31] do_filp_open+0x1fa/0x410 [ 440.199004][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.203871][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 440.209034][ T31] ? _raw_spin_unlock+0x28/0x50 [ 440.213885][ T31] ? alloc_fd+0x64c/0x6c0 [ 440.218750][ T31] do_sys_openat2+0x121/0x1c0 [ 440.223440][ T31] ? __se_sys_futex+0x36f/0x400 [ 440.228611][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.233824][ T31] ? rcu_is_watching+0x15/0xb0 [ 440.239041][ T31] __x64_sys_openat+0x138/0x170 [ 440.243908][ T31] do_syscall_64+0xfa/0x3b0 [ 440.248461][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.253667][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.260087][ T31] ? clear_bhb_loop+0x60/0xb0 [ 440.264779][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.270760][ T31] RIP: 0033:0x7fa22698ebe9 [ 440.275172][ T31] RSP: 002b:00007fa22789d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.283643][ T31] RAX: ffffffffffffffda RBX: 00007fa226bb5fa0 RCX: 00007fa22698ebe9 [ 440.291787][ T31] RDX: 0000000000000080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 440.299997][ T31] RBP: 00007fa226a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 440.308078][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.316052][ T31] R13: 00007fa226bb6038 R14: 00007fa226bb5fa0 R15: 00007ffda47dbb58 [ 440.324344][ T31] [ 440.327443][ T31] INFO: task syz.5.2783:15949 blocked for more than 145 seconds. [ 440.335183][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 440.342645][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.351661][ T31] task:syz.5.2783 state:D stack:27816 pid:15949 tgid:15947 ppid:13662 task_flags:0x400040 flags:0x00004004 [ 440.363642][ T31] Call Trace: [ 440.366919][ T31] [ 440.369912][ T31] __schedule+0x1798/0x4cc0 [ 440.374422][ T31] ? kasan_save_free_info+0x46/0x50 [ 440.380115][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.385001][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.389942][ T31] ? __pfx___schedule+0x10/0x10 [ 440.394802][ T31] ? schedule+0x91/0x360 [ 440.399114][ T31] schedule+0x165/0x360 [ 440.403280][ T31] schedule_preempt_disabled+0x13/0x30 [ 440.409065][ T31] __mutex_lock+0x7e6/0x1360 [ 440.413665][ T31] ? __mutex_lock+0x5b6/0x1360 [ 440.418546][ T31] ? misc_open+0x51/0x330 [ 440.422879][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 440.427994][ T31] misc_open+0x51/0x330 [ 440.432164][ T31] chrdev_open+0x4c9/0x5e0 [ 440.436591][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 440.441827][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 440.448231][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 440.453178][ T31] do_dentry_open+0x953/0x13f0 [ 440.458211][ T31] vfs_open+0x3b/0x340 [ 440.462288][ T31] ? path_openat+0x2ecd/0x3830 [ 440.467055][ T31] path_openat+0x2ee5/0x3830 [ 440.472014][ T31] ? arch_stack_walk+0xfc/0x150 [ 440.476886][ T31] ? stack_depot_save_flags+0x40/0x860 [ 440.482440][ T31] ? __pfx_path_openat+0x10/0x10 [ 440.487442][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.493526][ T31] do_filp_open+0x1fa/0x410 [ 440.498378][ T31] ? __lock_acquire+0xab9/0xd20 [ 440.503244][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 440.508362][ T31] ? _raw_spin_unlock+0x28/0x50 [ 440.513220][ T31] ? alloc_fd+0x64c/0x6c0 [ 440.517623][ T31] do_sys_openat2+0x121/0x1c0 [ 440.522302][ T31] ? __se_sys_futex+0x36f/0x400 [ 440.527140][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.532609][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 440.538119][ T31] __x64_sys_openat+0x138/0x170 [ 440.542991][ T31] do_syscall_64+0xfa/0x3b0 [ 440.547533][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.552734][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.559085][ T31] ? clear_bhb_loop+0x60/0xb0 [ 440.563757][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.569703][ T31] RIP: 0033:0x7fa22698ebe9 [ 440.574122][ T31] RSP: 002b:00007fa22787c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.582646][ T31] RAX: ffffffffffffffda RBX: 00007fa226bb6090 RCX: 00007fa22698ebe9 [ 440.590791][ T31] RDX: 0000000000000080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 440.598853][ T31] RBP: 00007fa226a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 440.606826][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.614857][ T31] R13: 00007fa226bb6128 R14: 00007fa226bb6090 R15: 00007ffda47dbb58 [ 440.623049][ T31] [ 440.626092][ T31] [ 440.626092][ T31] Showing all locks held in the system: [ 440.634099][ T31] 1 lock held by khungtaskd/31: [ 440.639024][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 440.649261][ T31] 2 locks held by kworker/u8:8/3459: [ 440.654549][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 440.664620][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 440.673576][ T31] 2 locks held by getty/5626: [ 440.678579][ T31] #0: ffff8880341560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 440.688436][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 440.698705][ T31] 1 lock held by syz-executor/5862: [ 440.703900][ T31] #0: ffffffff8f80e468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 440.714287][ T31] 1 lock held by syz-executor/5868: [ 440.719614][ T31] #0: ffffffff8f80e468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 440.729851][ T31] 1 lock held by udevd/5884: [ 440.734440][ T31] #0: ffff888143759358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 440.743969][ T31] 3 locks held by kworker/1:7/5978: [ 440.749259][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.760340][ T31] #1: ffffc900051e7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.774090][ T31] #2: ffffffff8f80e468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 440.785671][ T31] 2 locks held by syz.0.2698/15542: [ 440.790947][ T31] #0: ffff88804e874100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 440.801073][ T31] #1: ffffffff8f80e468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 440.811279][ T31] 2 locks held by syz.1.2715/15737: [ 440.816474][ T31] #0: ffffffff8f80e468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 440.826629][ T31] #1: ffff88804e874100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 440.836507][ T31] 3 locks held by syz.4.2736/15802: [ 440.841754][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.850267][ T31] #1: ffff888031421100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 440.860318][ T31] #2: ffffffff8f80e468 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 440.870297][ T31] 1 lock held by syz-executor/15843: [ 440.875559][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.884060][ T31] 1 lock held by syz.5.2783/15948: [ 440.889523][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.898106][ T31] 1 lock held by syz.5.2783/15949: [ 440.903222][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.911767][ T31] 1 lock held by syz-executor/15951: [ 440.917058][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.925879][ T31] 1 lock held by syz-executor/15953: [ 440.931332][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.940198][ T31] 1 lock held by syz-executor/15955: [ 440.945490][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.955085][ T31] 1 lock held by syz-executor/15957: [ 440.960778][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.969627][ T31] 1 lock held by syz-executor/15959: [ 440.974911][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.984117][ T31] 1 lock held by syz-executor/15961: [ 440.989555][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 440.998496][ T31] 1 lock held by syz-executor/15963: [ 441.003777][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 441.013044][ T31] 1 lock held by syz-executor/15965: [ 441.018939][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 441.029190][ T31] 1 lock held by syz-executor/15967: [ 441.034478][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 441.043474][ T31] 1 lock held by syz-executor/15969: [ 441.050165][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 441.058758][ T31] 1 lock held by syz-executor/15971: [ 441.064048][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 441.072911][ T31] 1 lock held by syz-executor/15973: [ 441.078294][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 441.086758][ T31] 1 lock held by syz-executor/15975: [ 441.092302][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 441.101078][ T31] 1 lock held by syz-executor/15977: [ 441.106344][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 441.114889][ T31] [ 441.117213][ T31] ============================================= [ 441.117213][ T31] [ 441.125797][ T31] NMI backtrace for cpu 1 [ 441.125822][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 441.125851][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.125861][ T31] Call Trace: [ 441.125869][ T31] [ 441.125876][ T31] dump_stack_lvl+0x189/0x250 [ 441.125904][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.125925][ T31] ? __pfx__printk+0x10/0x10 [ 441.125960][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 441.125981][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 441.126002][ T31] ? __pfx__printk+0x10/0x10 [ 441.126029][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 441.126065][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 441.126086][ T31] watchdog+0xf93/0xfe0 [ 441.126114][ T31] ? watchdog+0x1de/0xfe0 [ 441.126142][ T31] kthread+0x70e/0x8a0 [ 441.126166][ T31] ? __pfx_watchdog+0x10/0x10 [ 441.126188][ T31] ? __pfx_kthread+0x10/0x10 [ 441.126211][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.126230][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.126249][ T31] ? __pfx_kthread+0x10/0x10 [ 441.126271][ T31] ret_from_fork+0x3fc/0x770 [ 441.126292][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 441.126315][ T31] ? __switch_to_asm+0x39/0x70 [ 441.126335][ T31] ? __switch_to_asm+0x33/0x70 [ 441.126354][ T31] ? __pfx_kthread+0x10/0x10 [ 441.126376][ T31] ret_from_fork_asm+0x1a/0x30 [ 441.126411][ T31] [ 441.126417][ T31] Sending NMI from CPU 1 to CPUs 0: [ 441.275421][ C0] NMI backtrace for cpu 0 [ 441.275438][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 441.275456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.275466][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 441.275490][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 67 0f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 441.275503][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 441.275518][ C0] RAX: 06fc98d7218f1500 RBX: ffffffff81968308 RCX: 06fc98d7218f1500 [ 441.275530][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b4924 RDI: ffffffff8be32680 [ 441.275541][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 441.275553][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa34730 [ 441.275565][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 441.275575][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 441.275587][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.275598][ C0] CR2: 0000555ba2b3dfb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 441.275613][ C0] Call Trace: [ 441.275620][ C0] [ 441.275626][ C0] default_idle+0x13/0x20 [ 441.275645][ C0] default_idle_call+0x74/0xb0 [ 441.275665][ C0] do_idle+0x1e8/0x510 [ 441.275683][ C0] ? __pfx_do_idle+0x10/0x10 [ 441.275696][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 441.275715][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 441.275731][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 441.275752][ C0] cpu_startup_entry+0x44/0x60 [ 441.275766][ C0] rest_init+0x2de/0x300 [ 441.275787][ C0] start_kernel+0x3a9/0x410 [ 441.275807][ C0] x86_64_start_reservations+0x24/0x30 [ 441.275828][ C0] x86_64_start_kernel+0x143/0x1c0 [ 441.275849][ C0] common_startup_64+0x13e/0x147 [ 441.275877][ C0] [ 441.276429][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 441.477287][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 441.488744][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.498789][ T31] Call Trace: [ 441.502054][ T31] [ 441.504971][ T31] dump_stack_lvl+0x99/0x250 [ 441.509557][ T31] ? __asan_memcpy+0x40/0x70 [ 441.514135][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.519320][ T31] ? __pfx__printk+0x10/0x10 [ 441.523908][ T31] vpanic+0x281/0x750 [ 441.527892][ T31] ? __pfx_vpanic+0x10/0x10 [ 441.532395][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 441.538019][ T31] ? preempt_schedule+0xae/0xc0 [ 441.542860][ T31] ? preempt_schedule_common+0x83/0xd0 [ 441.548312][ T31] panic+0xb9/0xc0 [ 441.552022][ T31] ? __pfx_panic+0x10/0x10 [ 441.556425][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 441.561879][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 441.568019][ T31] watchdog+0xfd2/0xfe0 [ 441.572167][ T31] ? watchdog+0x1de/0xfe0 [ 441.576491][ T31] kthread+0x70e/0x8a0 [ 441.580573][ T31] ? __pfx_watchdog+0x10/0x10 [ 441.585242][ T31] ? __pfx_kthread+0x10/0x10 [ 441.589824][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.595008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.600278][ T31] ? __pfx_kthread+0x10/0x10 [ 441.604871][ T31] ret_from_fork+0x3fc/0x770 [ 441.609462][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 441.614567][ T31] ? __switch_to_asm+0x39/0x70 [ 441.619333][ T31] ? __switch_to_asm+0x33/0x70 [ 441.624098][ T31] ? __pfx_kthread+0x10/0x10 [ 441.628688][ T31] ret_from_fork_asm+0x1a/0x30 [ 441.633456][ T31] [ 441.636726][ T31] Kernel Offset: disabled [ 441.641033][ T31] Rebooting in 86400 seconds..