last executing test programs: 24.164371091s ago: executing program 0 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x1000, 0x3, 0xc, 0x8, 0x7}, 0x14) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f0000002b80)=""/4100, 0x1004}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000440)=""/256, 0x100}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0x272}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd76}, 0x2}, {{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x9, 0x40004002, 0x0) 23.801201921s ago: executing program 0 (id=3137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 23.793142887s ago: executing program 0 (id=3138): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16d7, 0x80, 0x8, 0x5}]}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x84, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}}, 0x20008040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x83}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="200002c0", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000020000100", @ANYRES32=r3, @ANYBLOB="00030000ff"], 0x58}}, 0x0) 23.516393793s ago: executing program 0 (id=3141): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x0, r0}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x9, 0xf989, "45ee4f42ed"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2, {}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$can_j1939(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)="11acb86277ae475d7a", 0x9}, 0x1, 0x0, 0x0, 0x400}, 0x20048880) 23.169338622s ago: executing program 0 (id=3148): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0x0, @empty, 0x3}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x6, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) 22.874737788s ago: executing program 0 (id=3151): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) 19.160128305s ago: executing program 1 (id=3201): r0 = socket(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 32) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async, rerun: 32) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) (rerun: 32) 19.069923475s ago: executing program 1 (id=3203): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510e65002000000850000007600000095005122000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d9e30d83d49ad806", "f6b0f9a6880e161d9ebd2ba85eb29481365cf835ce399d8bf0b290ee5040e10e", ':K=\"', "195d53c572afbafd"}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000005a0cd56130570d2d155b3500000a05fa651ba00000000000010000000900010073797a30000000002c000000030a03000000000000400000010000000900030073797a32000000000900010073797a300000000054000000060a01040000000000000000010000002c0004802800018008192bb34e537106c32d2bc7c6119898840001006e6174001c00028008000540001c00040800014000000001080002404d89000208000b4000"], 0xc8}, 0x1, 0x0, 0x0, 0x10000081}, 0x0) 18.964580624s ago: executing program 1 (id=3206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) 18.063381865s ago: executing program 1 (id=3219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="186000ad6b000001000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x0, @local}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000000)={0x2b, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 17.636380942s ago: executing program 2 (id=3226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x30, 0x49, 0xc05, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, 0x0, 0x3b}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.623439434s ago: executing program 1 (id=3228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cd6d240400001900010000040000000000000a000007fd00000000000000050014000400"], 0x24}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000087b1fcffa769362abbed537aa77f1f3f"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000185900000100000000000000000000000109090000000000185800000f000000000000000000000018120000", @ANYRES32, @ANYBLOB="00000000000000000c000000b700000000000000185c00b66c520ccfcc31b04b65ad754ac9379f18052f00000000000000000f4e9d6aa214f646ef1155ea9745fd1b3d8e5323f5a5d72178add17266a75cd1209c996532a58201cc9243d9b4a782499b60aa09bbaef46626e714181e3edd370fe687670a53e59d139977fb62f5ee75728df44ae1633faea9685776b6dcd144043bfd4ff036395f4710b818b8ba24d87495b85188cb283818e30620083cb617ee4c49d0b4952950fc07bd8c847d1f747534ed1322e063bf3cdcd5158bb04ede7cb7a63f8738de927d2479c32008b395d51d7ae31200"/243], &(0x7f00000002c0)='GPL\x00', 0x1, 0xd8, &(0x7f0000000480)=""/216, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000680)=[{0x2, 0x1, 0x4, 0x6}, {0x2, 0x4, 0xe}, {0x2, 0x4, 0x5, 0xb}], 0x10, 0x43f}, 0x94) sendmsg$kcm(r1, 0x0, 0x3500000000000000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)='Ir;', 0x0}, 0x50) bind$alg(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x200000c, 0x2010, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d0e00000054c7beef", 0x11) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000140)='=', 0x1}], 0x1}}], 0x1, 0x890) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x28, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010001f497c0000008000000000000000", @ANYRES32=r10, @ANYBLOB="0000000040bf000008002800d965000008000a00", @ANYRES32=r10, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x2044010}, 0x4000) getsockname$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x0) close(0x4) 17.5147059s ago: executing program 2 (id=3229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xfff2}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x41}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f00000000c0), 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x4, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) (async) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xfff2}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x41}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f00000000c0), 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x4, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 17.363120429s ago: executing program 2 (id=3230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b702", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x8, 0x0, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 17.360086268s ago: executing program 4 (id=3231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012808008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 17.227793393s ago: executing program 2 (id=3232): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x58e, @remote, 0x6}, 0x1c) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000300)={@mcast1, 0x4, r9}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', r5, 0x2f, 0x5, 0x7, 0x1ff, 0xe9f416428e7f4a29, @remote, @dev={0xfe, 0x80, '\x00', 0x20}, 0x20, 0x700, 0x8000, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000340)={'syztnl1\x00', r5, 0x7800, 0x20, 0x7, 0x73c, {{0x1a, 0x4, 0x0, 0x3a, 0x68, 0x68, 0x0, 0x95, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@ssrr={0x89, 0x27, 0x6e, [@multicast1, @private=0xa010100, @broadcast, @private=0xa010102, @empty, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_addr={0x44, 0x2c, 0x1f, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x6a2b}, {@private=0xa010102, 0xe862}, {@private=0xa010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x21}}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', r5, 0x0, 0x0, 0x2, 0x0, 0x50, @mcast2, @remote, 0x700, 0x7, 0x0, 0xfffffff7}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x178, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040040) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048080}, 0x1) 17.170712486s ago: executing program 4 (id=3233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8", 0x20}], 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000b7a6987f000000000000000000e9", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008001500000000000600270000000000"], 0x44}}, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x20000809) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x80000042}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) (async) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4041004}, 0x8000) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x7, &(0x7f0000000940)='cgrob;\x99'}, 0x30) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) sendmmsg(r6, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x4, 0x0, 0x16}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e831239025481f489c56331ea60ab91a77a73aca23da9fc2a2f171a0b42708ca64bc23985acd303b5eb32045bd55755facde52d4c5d134374736438996a956b5515a21c3c92968187235f0ec1cc68f671776f6b9805f2597bf6f0f93e55c843db7e590a923867da924981b1f653882bb744b3642e31fc43edbd028e804a71e40a80f0f3945fef279b7d7e060e3f2c3cf755b26a37f600021015ff3096c726ea948c2a25d1dbd7e5f7a6865109a83e99ec6e57bb1eea68c40131e1237e33766212f5fab50541a7028d734aaf1b6da21ef19b513a83d0f66f2db05960d404f918d23095e731b7f95bf79b04c91e419891fd04338508b1d44d47c954855550b1db8ab5e4c6d433d3e0113a9a5945d8f1bfb76a3cedad512d85103cb0bb1d32f7d3e30c19ee27bcadb3924ac774c79a5f5a7dd0d5e5d37400c070d7d97cd0e8841f55dce9461e98e2a3958dee488518f8481125530fb869e128e299c40e7bf341b363d14ed5707c176fc806997145ac1fbc2295c1b47c42b1cd1a1d455e7346c3a5d3fb29fb105a8b17ec42486f0ef3891aa9aeffaabfbafb0d3660609dfca3880209f18fedcee0b53338e4d3d72a4798c53604bc9adf78789be08fd2b2b227e0f37dcf7e30d3b2308dea145e6cd0c7a0a5cf637e192188b5a9f499fe3382c954cf76a889eb975250066a13f7cf275", 0xf9e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) bind$l2tp(r5, &(0x7f0000000580)={0x2, 0x0, @local, 0x3}, 0x10) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010100000000000000000000000034320000090a010400000000000000000000fffe08000840bd31c82d0900020073797a32000000000900010073797a300000000008000540000000120900020073797a3200000000ec3111800c0001006269747769736500dc310280080001400000001008000140000000110810048004100100303d4cc5c933f852b40c766fcf6611a3f8f0c22413da27291c0e3c168bb4458e80f13711e46eb54f7ac3a4d0b6d93bf5cbda15743686b746edbba42cf5041c12771f1a8e64b9b8cc64b7088a947e273d458fb2d1f9c9fe218e48bc0325e27ec0b6f982d76cd283410ed9ea39eb17318631412be737ceec642333ac0bede2c9a5f7593bf583968e6db8930cc07eceef7c1be591d43791fa0640ce3ac24a836f86abc52dc86fe5d4cc834180fafdec35e402e1c85434a2fe5179ea00f2a97c76c93e72184314afc4d4971067963b6da67f6f538932d0ff062f89c8cdbac7ac60ed840b447572558db0c42bac301462453d0217eefc313a8805c694ce370645ecbdadadc166e1d2ecec52ef4f25b06471468eec36e83f9f26ef6838d0f1d97c2499b9c67809d0ab827d97188e39ef9bcdbf176225feb4613177dec9a4096c80ba025928c8fb0bca49718c398203c889dd50b48a22944bca953521b71c10b92975993bffd89de65690ce2c3e135cb402ea732165df61b443572eac0b7f22ea920dd97a9ab8de88e82bcdfabf160a32ac388217132f7b12cef541951c889a2039f23b8b6527b7c2d6cd13f68f5cc8eb47cff5bfca6797d7c7756edd39d6ca897095507bd8aff477d481377c000192e13aabec39bbc8c43be217c4f6a05a001b0223e5b40f9f7ad4b6179715b63fae5d24a502e80d3dd27b2695c5554fa476ab202203dd34e15b0e518990d46c52149a0368ba1b35beb627fb7747061009e67221d1ef39c8d86f89334bff1fedb962c2aea8c1f9bc22b0f3d96d5202bad0edd86398cfde77c179c5dd27359178120f45ab65404ec7abcead5deb460a46ea68094c960e8e0150ecc7431d49419826eb77cacc6d89fd23eb770e7facdc69559f10fa906a645876c3d06a92d1f250db36fb2587d8b38f0eee65402f18889feb0b0f4fbfb0a132a19434cb9b5af99da61c19477737ca3d372180c1f75c5bb39281aa690886ef41a2d3695b088348c772c2e2bbf6c691a6bfe6c36338a46a280cee75abdfa24574b04b5aca4fd0580261d9cf0a7e3fcb46e4d60bcebd576650798a32ccab50c815d5adb850f21807d54aa162e10425e4a58915fe0da3037ad45efb9011cca62c3378d365ebd00e576da6445318a04042c3fba96f9063d4c7eca7800e229b2ccc3e329505808a317eaeebe4501da19ae7cc74f2b44de3eec960af1854316913ee102d8ca09a4a3e35596c9bcc7b9324fac4e98f8cee3386811189ff679b6486340206f397fa8b17c56aa2443adebaa8cc8a562b2502e2719a965a48b6b627e0017c8b19b9aeb1bb520ba2b395ed9f733bc4c6ec5fca00bd1116ae60458ee1b236a2db1d781090249a6f0f478494dc29ebcea35617c189b58fc8ea5d54ef947161498548cfee31336381333f9bad2df7b575f0c21a500ce5ece09d8213c14509a5f3fda7add9e2b3e7c21864d102c26a1b2fadad742dbfd051dda0d411f83180fd939a01ea7f441f047c6740363cfd0562f4f7b4b57db0c6afb26ec14777fe5550e23ecf5f8628798b069b04a5b325843a0a11adbb9a46df802225960472217ecec82882443edeb75b1b754a1cbceb8449adc6558818e2504e3f3fdebd9e6acdedd33373c3d7ed52733b734bae105d5d4256b2f9cd044d8dd195587ba8d2ad981f8d031b084d3874e9ada5a0f31cf676a7ad4a3977a4f4bc023c73ab002bfb2e748cb08d2f7c1342553702252a12fb6bb05a8e522bf8bd6c8eef0e204214ff4182629274c1a9927b066affe682dbc848016f38ea89fe06b9d24e8c428e5a5ecf295609258eb6aa058293fcb6ca8af91047dc157e69a4353e667a44c3ced988b1acbd0317097db10797c49f828f08bfc226bd7a5d652224af48106bdceb15de437a1240517e054d08c9108c3eccc5b7ca9b35b8499e1cdd8eca0490cdd15003ed9a10b7c9fdaeb34db5cbc488770998052458de2690e741588cb917065be96318b7c1802c4159263abef58492f75ddead90e87da20326acb53e1bbb826e493d299b74ecb77a5735cb3cbd7aa999496d95659480b869eb3b01d599c6fad25c30e586d539ebd4c1e32a156ed840279350f6f25e1c3d7b63039553de376ac18f98306db74e254db70f83d7303449fefcbccccbd98db876a31a2d1261b3b59caabccac48d89f1983bba58c57502222f2dcd9a93ef4368ef8e73bb1b31f34245ab3d30b322fa8d8ff9c9cfad76c1c858aa03738050131ad8923240d08121f472237a200cab064a4b965687307b4f068a190d94b86bd55ba28aea39e867929f0011cf5cbd99dc652280d0c551e36962d093bb1f1d47bd2cf6bc7e052a55a0d680a9899599be59c8a5d40746d5f3fa4d4359efc50caf7636a9f11fd5ec2db6cb0af6b32f8fceb8dd282ca037bbd920613593ce7733ac21a852c037b6ed61537f1cbac83b5e8d17c4f747a3971d4ae4e2b7bee179924d2bc203b6123169544d96de91603dc925d2df1469b576d0c72ae57a1eecda8720b01b299a44e11930abdd1cac95dc59cff49605ae1704dbb801a7d2932063770ec601968df7bd953821024e2a5c4226447d73e502d0c9f31e571e544117ee8a417526864c6657bfbb9603dd57ec85d512c4d4c46b0e38abcf67a4cf3b6b7c9044968f49525029d6bdbedd60e8e836ebc29063124c906dcde51e5d2af9221639d317450a57be363f96a6373c584468dc215fc6a9a7c416cacad830de3f6baf53141bbeebc984505640d0e663229c6ad74d01f53bf6f9e9e6786b8290c1c04e65481856fa06ba6a3c4ca7f1b239816887ea761f57060ded81b1eacb88b4bfec933cb3a7ac389f3050345140cc1ad6993b13796c1b29f1d026eee745f3bd3ef02546c8d606c11ef3918c4a982fb748884e73d82b735f65809e93d944278941fa70da885e8141b0ec9da1b2d3040378a739b1f99bc379b80c2c6e7948959e204ea14281f9d6e89824a72a8818aded7185a5d967c3dd95cf3d88f40594ff9a23b75e63ca3b78de98219a5e85044e8b052f0919352fcb04ab159fd9dfee0b2e837c262e2b7ff28508ac9ec0276309672ad5393461a63fd4276bac005fffe23fccc4b8f03c3759dbe89498ecbe4a54595f775b595e67544251b4cba6475aff70b655d5ada9a3802630e15079186b94601e7ee841ad3bd6cacc0b4da5af77846d589eb045166cdcd60c384222876b74114958abed05597cb47f75244a829499bbe0e248b249225e3affddfdddb9f23ca6edcebfdd23f102a6f8dacdb1ed802bfd2f7b35701b2becaa1553e2f212f5ffefc49f87879e7fa525d8cd3782846a92e57c0bf46473fc52d5ab2261790457daf6dcea74742296628b5f69ecd11003379ac7f8a656f4915e2277e96e34d1214195767d8653f9d0e98fe273d99b0557976fef7d3ed01bcbbcc2c1404ec0db2d186771aac0a3a21082c24efccaf5de7ca42056b417af5ae7f3a52be72743043c56cec5a2d77cc400a26814936400908d85bfd5efbbf2e9a7b9a56c28728a84a843e8a7a2176610bbf01093fdc66ed64265b6765851ff87b89394010ba2f4ddebd0c9d635c00f0bc014a1ecd6021b5266abe0c19d6cc6abf1220004d5b5f430e5b63626b83049a785195724e65669604ab3fcf55216d7341df7bc11342774a39fbaac66b666ab8f7231fa989705cdbe9ba9bedc58dc3a2f4bb84555290288c25084687eb81e6dd18e2643a6d21049bff81519e702313c4a2857817ff1f5366a3fba7f22166b7e8168f0c3a3167c4879f8aa828fe7570eb27b119a7b80158c6f095b1016292e376bde4474cfedafc70871cc39b613ed429c78f91be7f626530e8b6915a6fb8d7f72387cc3e3b4dc2cd804d67a862306a2b83cdf3b89aef1e904df198befdf09f121b5ac64ba0b01517890d6c664cdd143e50240f9bc32beeed2dfaa8f8cb08cb2a6c68cbaffae0c01f3bf2a9c8d8e25fc46659cfd3685c3c065a6bf0a581df7cb2e003374b5d07cfc4e30566d8bfb65d9ec27ab4939745f6fd5f5aad27bdd94c4120ae8c3c85edad6ec270d124b16fb7d186c493d32dab98c3833adf3178746e193abff37ba7974841d5b0c654bc66a68902fc92620a4afc93bfb9f02e7a6df552d4dcf4f5c4ca3e3b6953deafb588687a96e13051786088f3d78e86f22166ff68e57a0ea67b20299f601eed71b0b8ea234bdb4ef963067b31fe368a8242a870fd8fe045984d3c837564526310e4c518210d05af4ac51e8ae4d19994df80d77ff72a1ccc2af634af7419c4e09092eaf25bcdd776da508cbdd7f91f848702470735368c58ff587279c6b76000044a35fe7999a6cb8a227f1103d4a8eef3f650be9fce9cdb0909a85544eeb6695fa140fe172e8a5a09c275a00a49118fd0fa3617694dd383e4700e335b13aac212acddd1c7ca59ee9cf6b52b7c1bcf0e3470b26073d2d0d351435f60cf3e3136f90834ef2d3b6ab040d6f6da569d391321e7b0f12eda987ed0c770d1014eff89454fd7d14722509e08483c146827042a4a0610416fadb68ab9d1c53c72ae736c4c8fe519e42469cf5136a3bc4ea7b6a6d903a795f315a005bc2a77927ab34fc4faa5567d2383080834b7909327711c5484779cad3ea0094fd0a299961a7f79c2835501c297b843c4743c4f0b9019cac653338651a040152465b54cfd44f4ccbae5b5d660deb4d83ad861bda3628d58ca6fbd222d11f165e4f6c7f53ca1414c414134507c326dc25575f82848a3368775674040531961e4c60ab9e79d3917b587ccbe0e64779d5d6f47005eeb5155bca38d1b78084e309609e97db6c4677ec597e726c076c6cd92a44bbd7f65cb3b3ee6b8c884f7cf2062b60d4896cbcd5bf411c2e8455fc3999f3c0626be7e305bec17472e9c2901e5be9d23f5e5aad6e90838eba9cdf1d8343199b8657a98bfad7da4d4c0ee0e449417d576f88ee5820f7e1b533faa3098ffa8021007171b5224b37e3f58aaa941f0880dcd0ee5cc0c8b5fbc0a1ce017441fe06ab8313b8d7da8f67be3ea446aa811c6fa4fa455ee7bbef74c770c1da9ad8b9f1e977c307eeb7b7f4efd9e36d3f0cefa707804e53317c4e069af24d5433a2790b0aa1552da0e3ae62bd228b447a65f39ed4bba97ac62682728084232ac20e0d8cf268777bf86489c3c9a13c533aaf3f65cb7c98a2592c155c0edc309e1a1f4fc103c589ebaa9005dc98e37d560456398abbde402c45481a48e9809c69c26498a7c7882f8a114deebd50c090fae9da71d73bc046a1981db2dfec4150053e35bc44b83e92151c6a5e74cb9ae0a41d4b90792ed17c639c6f0d466bd19a00b39bf5468ac7dc2d582cb12aff31430c91b316e88c990e8285a41be08be1729e1dba29e9045f9235df300b599b22a6e5fc4fa9a9a4c8d6dae2be10542fbd8f4389f01e11820e350a4863265d0402e9210bf4d814b390f1eab323b4069f4440b5a56f8c73f2808a80ca4241974e14bd203f34367715343bb7d49880d6980d3eb5c0ffa13ae198ab637b62d2e7a6b8ea3e2ec36154e846384cca452f381f2708493f8733ecebe757cfca2fb9bb57e0ff02bd307d9f2e82195300bf551af0ddeb417de07b91ea3e63cb5faebf70bdee85cdffe0b1f9526601021c8ca66b8831a6d874bfb0664841affbb6f4e8eab0a3c1d5e848965bdc93aad88d08c3dce638a24d10f775d43406c7d8174f5e79d3f32017f3bac6561a14339803186dce59838640462aa7d64af880f18843658f5275a302bc78a3fc2863ba40a36fb49a133802c3683f69452ffb7162d4ba995ea03d9dc02104800410010044db91fea5f3b00675fa152501a60dfe5a98fb2aefd5d4adef6944e1dd4b497f3d02381d16feffffffe2fb28ec129164ff3f153d54e836dc6e453527f6931f6bd79a5767938517e7b54accab4e2704823a1f11039447552f2f3a6d393a884b193554aea53533a4373c884083b0ba37af22123d7b2265a6707f4f4c94b829f2e1213ff5e11847dc0d6da362cae1fa67a5506f0cc485e087b3247be3e1e30928cb50f6c7e142dcf437099921657f556992e55bc0648fa6a44a8131b375320d20319847f9705ce27c8c618ede4a9f45e6f1d5be8ee97e701ab701e2979099190f3a2252d0a37ae23879bd5c3abb78d6aa02e37f34f4dd1f0ef9b99716ab5f0dd2e20105303b3d50108211f93c5d3855badd6a440dd40b36a7c6ee029323a7864a28dfe6796ec80c8ffd96f3c8d616bd7c54d8d925df0212810be6dfaad203cfd1a2b82ffca580ddd955eef1536b323ff645c8db9c41889e79effc68dbbd96024ab888d96352b83ab6e2a321bbf8ba05ca8cb084686bc57567daaf51bc7c3a8452b886ba207b30e26448ab60e8f8f7338cc4c8c7f8e020460b3d6155ea9a16ac3f97de7096140dc568baa00f633ab0ae38e187a8d7c7e3000d72d6381c3ab98014bfadd538aba50c8720dc6b6f164191bce0a255357f3e5cc32e85b4f5e04cbbd18c5c5df035c1f230cb1e4a23478c4f0df725d3f59278622bced599efe59405df6edfcab7d642ee1684ceee9dde84765d305bd4f85153310ad7d82b0d70f63b6d28acc3c8941551604e9d38fa141430cab0b7315b1d71858433fabf578316b92d30eeec1227a26a51ea5116db1c35d7896b00596c991a0da848ca6ffc50f95d803b2159da423538a4efea118edd64a301a550840353278de7a64be70299430385078fe9a17f9c27b3a2bdaa7aa88fcbe952f79bf7746467bfd28de088df8b179e635f202e8b65372ec0882e0138c11b2e79b6f0732a5b63f497f50d499dc2fbc76e35354d0dfa883849fa17bbccf4f13036d1ea505b104c7d076f28ff27403373dd2098374ec71a6931d1e77ed6dab46022fc6821751549a55447012b0751b41b5deeedb5376e6d9a3567f6ff6f3afd98c4c99f2e467de73998b58163cfeca5a7f57855455534d0bd6c66b775acb5dc2d42e63bad46053009623135c9942d236bec0288d5d600a9ff428f347acf59c1bb11b023e1ef46b0630b8167c23a2a07b98a703195aaea2a90b94107cd34a5b33aea7f2f2ee678dcff93f27e343664aecbe08ccaf2cc5fb68b7e9914bd1856c0585de0b4c8a3911d339982687c7d77606da182f34178523ebcadc3e14cba1f825d673ffc62b72adf272a2964eb973b0cd4b6531a422b64124597b8b00603a38c8877f29ea013836162e79ab793f65147a9b6f1f266813d759429685821f75bccf83ca418795795d258cb87bc8295821a4b3f92927d2f3a7d044564aa3bdbb58996a206c6b498387bdf716d8430b8f04ebc4699024ad353050715042598a561a8854a4baed483b2f8fe43205b97c2678769899fd7706e3835fc27ac547c56e33a1a90c0f81b4d382b78d4db7f190fd5382f9adb67f924dd5d3531f91e4647b08838155e6983e9dcf50269e54f78c37012dbe6ae47c34437d82b9ccbec9249662e5f8312e7e86351e4e9853ef197d4d283f0474af2db6b0ee30784b05d84b15501cc6efbee8d5b86fa86871cc03245189fbd7fc0193e97f0cfcf113cb7414f3a3cb2243b566d69b94cb8917ebb49490728941761931d3c3a36042091156023c13a99a051e966cae9fc48220af037ac0ffa2f575dd3a4de8ec393e1f989f544b1b193012f05bdd8932f15f953ad48fed77cf8ccd853d4ae2070c4da89285024a920858e31ea5d5b20d00c773e044dd8d8d485a6e283fc9b9e1b29d02a9f327276c8aa65f2c14c85b8de894329d85ccd0bff98097d752f8abad360e0cadaef530d6efdf93a09ae770b16f6ebb35ded32ec587eb06aa4bfb7b9996168215afc2ea09e54c2215b8dc874413b5cd29580bf6cd11b610ce7bde80d512679b9b9c0f0958e94a06a2ce1221b71ee89ec7297aeb90e8b3ca09199788616b3c88ee9f5d7f8528a3caeefffb674ef62c18f70eea5fe061c3eef2d23cc1f44cb52a53cd49f0a608674cc2a37ae5a6dd086880e93d8832fdc1b949361b908a5aa0b0356ab572e6c616e53bf8bcebeb5eebd45e52030508568e61c713122ebd9c6cea959b0eb8a5ff4ea6a7866570f83575f911c1fa16b53d67781976c9bd1b4fa74cf5ffca8a4d01129be5bda916ef6e7b18cac34b48cc1073cf870f18703bc24edee65b41157a1a29ecf310e68069a44cd64fb93dfa2c9b596fb85dd017c122cfa104b024fda72a3c95e3e2771afb8dc82c3b81d64b60a28f49991cac6fd7169e7b14eeb64fa8762db592835f613852502f8d3c89629c5296f086450bf8051a3e7a732b94836f123eaa6237b756e8880981707ad65ead43938847133378f9f8c2eae21b954d35d8a2e26d79174b109ca0a433c11a723faa8d067a795459162f280e30cbfe8d94f9ed70a22efe8b38f2cc7cc359bc3f6eceb218891567b9d8dc72a7586345b6c03aaa33d89daeb6fa36a4589f3a3b8141e77567e88b5a18d13a4e974f13fe0db05f32860e861559819d60464070c0ba3d3276efd633a695402d7e03a81f0e56620c33742b54985b619b5779a36638b8e4f6d7af2a3e02fd8ca74cdf6b41f3d002858e68159e1fdd288896aff5e24da236018854d5adac58dd9880721f52b932c606f1ab6e61782a587b492c00d1cf6639290df5189b2f0c97466f0dce726d50526be6379b7db5cd6763c56449564a6a1b4a18d8e65da340fd0f1a1f314354d033f975b93123aa878cafb5ec32ee12626eebe9715e4bf9fc6d78283c3042da635b79b13fd48cab0b680ebdef37abb78f7658c3e69a49a75ff6757bbb0c10d941580289a118748ca6b004f569a632c3362884199d06056fa303af510825e93ad199a934380b5370f0f5d9a2cf708c9c310b72187bcc2a16afa4325da5a0f5e3a7804427b2d8832f81f42bf1dc65ab2416ace07dfa874d8345e7de75fd14b22edeb833ad8f359faf0b32f2a05ea15558b90d69fda7dedf5b2b1cdfc59cafb07c8aa358ad7e128ec48bb748a15b455aab755349c688ba86e1b3ec975a3f7741f74980631601160f1b88a0d41caeb70c6c99fbabdb9e956b9576e02714da246e43f18447effccb6d78aedec52b55a1078eb572c3331ec5ed83819e1b2acadaf93dbae88ca18bf4adad325ecd97b568c9b566b5e27a4774d084a025a679210acc3f26a1a4f3261e41a09fd7f006fc25e27f7694fb9ad0b44bfd76af82efd7854b7ff90edb7677062d50704fa45384d9305b6a8c16bfaeb15fac97101de7d39b7f0a313ae8f2caaabaa54f9270af10ff5d255266426ca0d8404d086e66d34a3fbb61e4515714569826047d7c9c370537504370c63d9b861a9fa880457189ff72af6319084ffffc2df428ecb88d16160d607aa9cd2a3873a1b91404a9355c497a53b11d8186bdf1dd42d2434f44110da5a00adc406812303f18fc983fedb387e0baec7f1f8a13e13ca548ce0f86d70acc721089f31c9cc5aa67b646376f373aa85a4a54bc746ea1804e07dbfce7472b9caa6f76e3e671ba1723aa4478bdcb6627d62a07c29c2a05b53a9dec03eb1ac28755364a70ba8de983c1929d9ef20f483f8ac2b3600aa4dbf46ec37a16557f12b597bdeee4f84cc4b30019cdf867e083c7a393a6d44d46843b5c6b1495ddfd1f8f42fe708a0ecf9d04520a9bc51e3bbb21d8ae8d64ffe3752554f6fd0d53d0898cf2e19a786ae42a5bf7d9082ccd945cfe6221dd19fa6596e98b809e69e8310a7c0ee07e9b10cbbc1634a3dd1f0622c71bf1180aedf4ed10f6d14b1830ab01b1f49e7a6dfdff81454f6088ba21b54125cfc48ec30ffdf747dfee243f9ae04c54ed4963f9d90d21e2c097c0659dc51376cb38fcc3e2908aaf446ef37d9ed8ba8c9553cf9d9e82fd29286201f4735716be7d83e3efd9f9f797b922bc5b18955c8272947015b3ae3abf714ab18e1318c54f30db56ba8260b759470c606152ba47a04fbe303576a3297ab987e0619541104a1bf342966b867441726042688b902d495d7d1a59995e84cb64b00c80bb1f0f07ebbe7990258d34eddea4e1e29bcc0a519da14f3378ffd0a7b112cb968fed2b55c50cfbf065eee1fa47bc7818ac70526d8d49ccbdf3c99926f68612a0bc51bbcc7976301b578ddb6666cb84365dbe17221431438e4d5a95b56133d9a98f03e5417d6682cbb51246196b43ddf54658ca7886034544f0ab7401d7787e69a124dfbef450527c39d9094fe6f98478e2a3db20d745e2c9ee1b143c6868739cb2eb2234d0467141245c74da6bfab541388454bc6e88603457ec3a36b0b5caec38dc2d3d4d5f038fafc78f7754ba08b114fa2381b1416559c72f2661b10d4297c099e4f00a9a02fcb9e544a9b8b153ed48dc7cbcf47b6a268cdd309b652ca4bb165706452f7784ecf5c3543a0602ac007bd5d1866d21f8fa5aa366c8af714270d4ab0449ec5054bf4e2dcbc516849ce1fbff0fe0fd82ebd0e8a2b3a4fa617a70808d042a1120f0a0fb4a5dd473519aa87eb9713b1f77f6ca1a272aefb8715749548969490ac2ceb87e30cfbb1a5830e70d6f8d72445ef10b36a93ca211344bfac2eaa5b8dab7e05f4f66425d8d6816d841e22f5bbdd4ceed8cf5852f848ad6937f156af711ff40d0bedb3c0b0da370b437b4ad16c34ab46f40b591c43ae4b4d70679ba1480ed4b70224f340a14d4e565cc75210a86a158ec9cc1ba501f251f96863860fecabe0547fa51ce6ad0a47ae1708b167a43da37a17fb70e6d1bcab5d7346f9aea40e86b44207474f9be1177cd5072d988e99f8d488b3082d574b780cf2941151261c3dc7b5b120cbdc50fd2952b1c5b53f82c95cb526798854cf6f622230c392bd4401947576cf436153cd9f600add651a72b8a9a0f7015b2847fe255b77dc15cf999181c475f04f9949a53f3056eeb06ea49f647b85ee880cde5feb0c438c5527f304f56fa2893846e895ce87b25583302a765e428e88d38e3a018d32a0dbea8d1fdf0167b685bfbeb08c1245196478f28657d9e2b44909d4ee74d0fc82d061a7d5616798186cf0d0818e9fb3fd0f23017c6323c1ba6411b72933e868aac24255ae92d82b5a6119149939e024a61594834ad77f3630e8e26c344412dcc92bfe6c0c51b6c0df4916a57c11bfe5b891c0962a11cc3205aab25af890db0997da026d7ed2f3d001ab7e78f8d78a5b95cd2c653c71da39a8173cdbb07a7a32f100c55fe0b194fa0a7115146a0e43f0eafc92d974e66a62497f85962c9f7e04d16e305c93c08705d53aa1bb530806e3b99042e7ee28362cfbe17b47ad70b389e19a8c7573f0934657413ff056ac7eaafd419b2e56b013809addd9de5d909dd757f4f6963f348512e76bd009a8e48978c9b48de10c8b81a4da658146d424215adcadf4241f71dfbdeeb0faaf58fce5a6f459f4a796e515d12be38e0414403ace5e599cce8082581926e03de73996b8078ba07e20a19d6ba784ac5a61c10271d17b5586b37857e36ce9f199bda440888e279b9833185246c119fc8dc4f0ca81278059d9ce6be214f026454c00a94eeda35ca7836c830c9bc0eba6ac70caf13fede2a4b9d74691f07f568fc447225e9282e358a502025ac9906bf042d1bfc78289ea98a0a160282972a9981b67ada874853269fdc9050000000d03920c0002800800034000000004dd0001000f3fd0a6bac0e0960e5fb8cfaf6e8fffdf2fea268a4fde3e2dabfdf1a7b4bc0f684ee8d47d1342941807ce400154df8326728e50f6952afecaec135577498c1c99c484ec64ab76bdd80e440928324a81e7ac8c54b75a64297799e3c7ec23e189c644dec4e6a2fa6e77e9c6c958e2752d9e00a304212d436b0aedd4488b35f3480d0a523a98b6f2c58832743c0a5e89436d957feb5f2e0acc0e53907d7f36a45b56328ea4ce5537fd753492b698669efd31fe5b38f62204bb45aaaa16e502762704afc6c7206839fbf98b353b5baee2c5b154b81aa9d98196bf000000041001002fcbb22c5a2e1d5cf314f789b20c6034d77b9c48374ae68c7b8ac4beba90672170f3d000f086ff88a16e47bf09b46513f6bac1d3cbb02cd5f4011da3a9b9ab016973c69a4d700ad5746bcc2a02c216e418a229d6edaab8b5fde7200db1f99297c7724fa9ba4bd81171ab3b9f9c3711d6028f8957cb44a6ea6713858def076acd78d798c00cef953443870736ba1fe11977c8fbcaf1ac517203175c733e930d70563a2a8248df87ae8a3f2f0e2f24382918677eea0f2848b0a11e85171b31645330da53aa501642bc0ee14f8d5fdbd8d272dcd88aa8caae931f370cec994238e4bf9ece6a02bca27c667c481b7c913a892aa05c9232b11102f6a03913c363f74616de049a7934a56646878964a52e94f5799baec61d80746a5d9c62e42c0eb3e3a15a88370823f093fc467c04ab9d3421f8b685c1804715c3cfc4cdd942ed0d0b15f8148a6436a06fa6b3c99f2d93524ca2ca9bef0cf709263c221341b0352b13ae6d097211fbad4aa331471ca8a50449f6ed282d91061195ddb682fe04eaceebe5415f2f128b243cf9c7cc543c5e9669ada8c2bf4a5bced461ef84f8de6fdbf082c6b0d04705eee68a0be59c7493739096c9c87a79dd0985797652858678b154c2dcec6b4eba9f0688b0628e3f4d7be63bdc66a762ab7a6c33a7c5177a82bd6199b7bb9c704ac41d0b08fdd6457cb76683bf42d38b30000d86535190a7b285839635f2962ae8a4d78a2815751e22ec3bb3ab5deff9a73e7275991806e3dbd2f04bab2a529573b771df912e197d92adb015a0b5c02e2a28abd8a6f193eaad135c25a87c4de1e98011bd5bfa0935f0cfd2bc69b02f343db8372e893176da483d821855f7f61d2a54fc3a34acc54d1169038f4ab641bcf88729d568ef02ac0fc6753dc7ee19b4918fb30324758bb26afdc4a5a6152ae03f60183e166a760ee86000dc73430f2f5530423f2e1986baf453f493ac9c9e7b00bbecceab189696062a3b02e67383c551ee7a31b516efbc984fb3e44c34b7b0f4a506190d3e5196a91bf4bdd39c7397f7dfbef33ade80365c9c352a9482ac48c2bdc734677b3c6a52ec0ea0ad428ab213df8b4db66280b5dfdc9dea151f01bf739946f6104030a682751c150756ae063c644c54c42777e2bcae45cd2336d21c4406d6a8ec7dc85bb5776d4fe30ab87dd0a68e2821c26d2424363efc823aaffef3eb77b1f66ebd6c2c36e6b1c1042a64daa4febeb7edd7a56f3db61dc61c14779194b1999c18d8d301f50b5d1782be64ac8b8470526c9a9fe130bf2bc2886e60c9555e78d1feb778c07513bcba31796181ae07cc07b69809613502ca78625007387b6d655270cabbe60802629c1eae9a294b5e1e15c8c03c9b4f21292b13058ad7e7cc30b3b41bd98a8434f5447c4742d4319ecde6627aaf2c13c89d8093e7cf65cc41ad7733bcef124d1ffbdb65cab237a948d31904f0cfdde283d76927bb68bb985902a03be8f966349e7ad7816ebc5e7921f6589e807e2268b0f97caeb85a81a898f419dca1fa9f1e47fd88c0a71de16111dfa6c3c244121bfa2c91b696e97dde2de179b16920a9a7cd73ee196598a2cb76a0c76b8ce05868ea910eb1fdd2a24d1998d7bed1b3785f88624818b1882f037442c8b6966b81b20aab13d8b0e98c58642b61e55648b33d5667a80f6957e1db12b972da33a84892317d6de966b719b8dc90fd7e90e047e44d58c16f807a5b35b5a11118bddc25e9974c18dddaa7225220c60d1874d003108de81744c796198bebf1a53e6785d74e29db0a6f5c86a2ed6fb5385c71630f2cef3ce090c23c00a80b6fc7feedb14306e0cb977ae0ca6d2477f4ebb09af6fa19e5694aeced0c5635ca0f188ff881481a19ebaf8e31626165932f34aa35299916268496ef46b0393f9bd3d39913fe97d449dc7f35096adba996795be22d153120bca76f1c68a9c8092ce443fa6749fc4792e393f0d8d831e8c186e1f7120f56757df1e8bdb73a36efa1debf4ea08e61bd2dac981a35f68e06ab60bf90124be2ee01edb6cb5581901a8185eecf0a7b7ff13ad9a2580e5d42598d0828304660de2e44f381974d405b1877937ed523ff1efd021475d6e6120e0cce52baeaecbfd13047afced7428732a6c27332a8b85501c23c4f7085a491eb7803bcef5db727faeb0be40c83d0dd34aab9776cd065d29812f7689e3097fbb86d0d5edf91bad4ba45687ce946140915cc428dbcacec36461c42107c5077c5f323667dc3336982057c0f5d67f6d1069400337a92af5a613d62b3a6177ebeab7c7aec13068f89254bb7d024414ae84013237cb07d4bb20af8b4f826cf2a842442220bcc202cf3cd7e9bc26a6401ac375253df1a2561753478066ffaa0a01738e2cee4baba61493fada8bbb56c3f381757a0e5522482d52467dd1b93a44cb5d35fbefcfb3757efb3234d6528f208f1b028b9f95474b5109fc8c9c052a47e69f08d75b04e5250889c5fa75f4a2d275e1515824e970850556d71dbdc5a877ec0cfdf97d2245889f16b93572ae45fdadc856dfd3175962305ffba2c6878ce723be995103ab7f6fcb1adb7e66bb8d71faaf2306d0e1f769d6de0be5292815ac4ed375c369250a5317cef46d304595444e69050de140cbc2ab841d12f5819ccc37c73f303b66bd603136a8e2d9e9337dabbbf5387eab311f441cd2b2b82689e221455658a1768601841ad23dd1d4313bc36db5a0c31235c18ae3be7978671f895640e9ce68314c45a8b0f4b9e8b06eae65151787da1b754ce5fe014f6843aeb76a914c1ee1a41345198064524848aaf0df67ddc8ca240f59ea1ecfbb630f819cbe12399ea3fda4c87c4661546baa8105bb89fe02f53709cf2dee9598c54f865631ded1cc1e30e271a9b385b73c99226dd0051e9601dc0f36204705dcd31cd3d6d381fdefa065aa6dd83e42dfe1fe9101bb396010ca4b98d1afcd0aab9fbe08ebe31b9ffffbfc909625c3f10050261589c4b20de1fa9c5f85d867eb2822375def9d6d108539a04697352b32cdd13649d9da1b11ead7b223c3cd6ac7d86953dc4ced5732c61e6c945ccc8fc1394a86caeb32b2a22a717d4154d4e88c966ed9a938a812afec08af457c69bb3b8f6f5ee67c99cf80fcf6015c41fbcc871ff45a384a992cdcc6490a747def3ab97e41ac685d3b7bc373d9e978ce75c90bb3e4a54b4333139a0e759c36de96c1f87bd2094fac50333767904653bc1bb3c6d85405b4927949b6ec4ea0ed1e5328b921442c1379e7a758d02130891fd3f031577066edfdbb1600fe65b5418e31627bdc2f624d52e1e61d9d84f7a0fb67c4caded51c368790c410cb25bf60915b65b780a032807ecd3473c4e96c8195fd0ce1bed5f8ae0196b2bb7b043024eeac91ad6dd67824fbb7e43ce3ac931276f720cdf9556e1d7d88736c25865711feee98d93e83e6d5c6ec106e13b805c66b3ac864ea51502309ceb8860b4f7bd05913d955bcebf42df791ad20813cc461f10076de21010c1b1e43d90fcc53b3719d7894bf50f927c7e3f68e555b618a29b88ab1fd61a4cb9e899291c474fa6ffb0ce95806dd9815d10eb0f8c46d10bb5dc1b2454b70e2e182a5ed4a01afa8ec9bfc6d007dbf98b2a429a790c180f7b3edc31c64682164f2d37e1b23c63a8434859290485279a01b67bd6598decb22651f3b9cf12ddeebb0fefb651b84b18b39b01d41d92926896611f2119ec716022f7e9e8fe0fe8cc02688b24d9f008205cbee3b5982c41e5808667e06a558bd4713765535b26e807aaa4f087da5d3ed4946f0eaa54a00afe7e66fd8b6f89436711f28b1bbe94468ec9cd2b8e27c105a1048abfc3f2bd8b50076e9f7cbcc9a70a7af01b8c10f0177e439d3bb54b2325a31735b971c3344af575ad5f53965b3d77e87773ef8406d18a4c564b54b394473c7f5e6e6484beb37f87fb6d13c44bc35f24bb4cfe565ee65b7315e892150d4cd0c6627c77cedd4aacfc96e2c656e36f7a1052e87c8f4106209c0fd4d4684571a9b7c21cd0dd5e2b9cdcd401ee9eea790140cf30b5b9bfc372eeb6eaad0ff9754576933a5fd957cffe82b5d5f2eac832507eef5cbd108b17d3c4df89b4bc87b05b6ef4dd1b7490242a8d3a07069a67f21c28eebb23b8aea34853606118407a3ce729891b7c7b19e9de2b80d30ee8b4368d4fa4268af7018e5cc2e6df09cd7b3b9f5e1b074177369e4ab7d1baffd5630f9c691de990910daaebdae7870ba7747aeb0dc9dae5a6e6cd7f019358baf9195defd43ea52c7ea2c9a1d64d86e68a58b4a3e907655d7d17ef0ff7a9c50d5a94d0c798e6111aebd364c981b897599c2500ba1d294d8a94b22da59d538f03641d211816e57384e5b1ee5b6eae7b205653a9abb1292a71c78451999d1a4f3cbabefb8a4c534bc8efb4787756c46e2a0be5391f01f09dc535279845d0ffa1f93955cb80fb52ae5fb49165fe17ac14a99205c2c0193eb62dc4ec84a2fe067a02c0d5972c994b26a461f6a77458c41bb942fd0f35648117c0a8e048a5fecf36bba62c2d62391d42eb8e5907a5ee1a3724c734cde9285178431d896a24bde208f9f63edb5e96470406515f02a1b343f694efde836b5a4dd382bcd3f32b7142c7f1613349eb23731c350b8eed7823f11a331837eef25ee2e9f9cc88a14807d4d8f66fcdc0c695742224f1c3a6b8dd2338edce6035d45258a904d876246b3721345323432f7aaa39b65d7aab317043d808da268ac1384ed05737b830a76309cd01117c94ca91232518af78980f9ef0e96e02d001fa7be8bab8d087a3330072c4d83276ce455edb4deff4231b830c5bb892b607852691e377ca7d3cfe3d6194f9736b8c027fd21302ba456fcb0c21b2d2dae347327f4feeb61c03028d93844859b3baa3bcff50059436d1806c53375be87d45b41b72a3f6737d1c425e57895ac30d22edf9844bd9850e89cf345d2e044796c480a6994a5274627897768990dbba4990fbe1faab5a16708c305f1b468bd35b076c9d1a72743eef974ef56d18f8f60003e84ec53e96846de0fb5ae5642fe6dda671aa6c1ee19db6995a900e5d8997220d50ddfc9ff23ce83b128362fe53be2ddbc79d2f3d43851e5c43472a32039c9302f484799576f3fcd5d982d17eb18fb38b6a3037b498888295c668a70748b5f6c997a0c89361f9d5a3a3ec6db4b8091d75577689628728d783a650c1205feabbf6d4289e3d7657fbaf2f2b5aab0f101ac9be35ae31fc3d7481c9c164aa3c010e94a143bccba33a7f0cb77b04ea49b784be9fdddc0040a3596cf919b22336fce2b69b7f9c6df6a5d231ada75c6e366f6ca027b0b99d898fb2d37554d65c357e4a569a18d333967819c46f3feae254f7738c8d0b175f2d71d6186d79051916c18e013499005390b72a7ef0569a5b33301bc738b538ed8f0fc88a6a667fa34637dfd3e44d080366e5a308f95d31c1a07f2b11ebd44956ecc5bea40e05aed4411ab08e0e118953b05fbb2aeb30bf4e231ed0ab39e276d87860edc95e7bcad8528a8522592af7cc29bbad74596c20842a80a2c529cc751beb0bfdad19c758a5d6ec5d40b987f0349b3d85512fd7c104f968c4e2819660ec0dce8eb4dfd68f63791021965e89c7d15714ecec19d95f5493ab04df959bbea5855b0a06afea7b77ae22e9fa8de53bb74e2f977d887c250ddcc9b3e93cc11080e5c0220f2feb09f168aadaf9a3a783cca043d4229e8275882e0f6192891968c1eab37c1c5102c3333b08b117498c5b1df464435685c0b060029307421da73df6c70dd46cdc47dff51f04000100c3000100c89583eadcfc607a7e985b78c85e3b7e82ed0d7cea0f26f3e680a46c5c52ee04294b3aa79c221d2b2984fe929ff7091f5949b8452322b8f9ff210d5ce640e92443dff9bf3030f7cdc649d86adf55070468c9aa1c4c8df3a3266b6757d34610317cc6ab6403c825dee8c434b9ba9ac8995909c5a08c6bb866fa2bd7e00aa36737b05540f22c9c8cc6953d5f5ad9aab354c1e0a70a8a749b805e2f209f5bfeadf21d9f3381cc9741711648c2df25b33dce4a9d85f798bf8811dbfe87d7e06f5200700100000c0a01030000000000000000000000000900020073797a31000000004401038040010080080003400000000234010b80100001800a000100726564697200000024000180090001006861736800000000140002800800014000000009080005400000000810000180090001006c617374000000002800018007000100727400001c000280080002400000000108000240000000040800014000000001100001800a0001007175657565000000140001800c0001006e6f747261636b00040002805800018008000100647570004c000280080002400000000b080001400000000a08000240000000050800014000000012080002400000001408000240000000150800014000000006080001400000000b08000140000000134800018008000100647570003c0002800800024000000014080002400000000c080002400000000f0800024000000013080001400000000a080002400000001108000140000000030900010073797a3000000000140000001000010000000000000000000000000aa14ab507c02a8e283a11599afa7f186a45f502f42244218a28fa2f40b0d4be3c69ab176d43604eb5bd3073e427d1012dff7e93dd3242781d4967d15243a6543a6e51604891e9b480037d7d6019f7a4e832bd00ba65cd158b7e03e04212ed51062831a4bceb2f8a78b6f846c2fb48d7fa701dbbff96cc46710e536ce9206257b6a0f3c4d45dd0ee72ad3a943cf62679e804ea398e96049e9b2d113b1e55ee225974e13c4a4aa816f9cdcc007e0adf3dc5afdf6760567d093eab559f58ea624ad22a9e98ceb58bc664b4628cbe475067c7162c6b7ef2bd017f949aa3561b3c577099df62625b12db6310e591152b13bc14"], 0x33e0}}, 0x0) 17.058318623s ago: executing program 4 (id=3234): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r0, 0x0, 0xfe, &(0x7f0000000440)='\xa4@\xa0\x04y\x92FO\x1f$\xa1\xfce\xe4\xd5\x8d3_;/!\x00\xa5Y\xdd\x1a^Q\x91\xc3\f^:Px\x80\xcbV7-\xac\xab\xd8\xcd^\xd4\xdd\xe6<\x9a\xbc\x00\x00\xc2?sS\xae+\xc6\\\xa6%\xcb\xf8\x88\x9e\x92\x14YB-\xb1\xa7\xfd\xf3\xdd\x01\x8bw/\xfbX\x9a ;\\F0!\xa8\xba\xfc3\xf8\xcc\x95\xc8\x80\x90^\b\x9d\xe0E\xa3V\x00\x00\x00\x00\x00\x00hY\xec]h\x97|\xb6\xf6\x02\xedp/\xa9\x961-\xd0\x00\x00\x00\x00c\x98)\xd5\xfa\xf5w\xa2\x14\x87r\xfcU\x97#Z\x00\xce\xe7\x88\xbfDrp\xd1\xbe \xf5\xe4\x1c2\x82\x92\xfc\xcf\xca\xd3i\x800p\xa7T\xcca\xe41\x98\xd0*\xe3S\xd1T\xc8\x8a\x90GFL\x1a\xdc\x8c\xe9\xa8\xc0\xfe\xd7t\xe7p\xad\xe2\xe3\x1by\x90($\xabX.d\xf6\xcb\x92\xf8\xfc\x90(\v\xb2\x88\xeb\x9ev\xd4Nf\xb2\xf3\x8a2t\x057\xe5X\xc6\xd3\x1f^c\xf6?\xc60x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) 16.94012582s ago: executing program 2 (id=3235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000983cd52d7000100180001801400020073797a5f74756e00"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0x4c, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040081}, 0x41) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000810) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040"], 0xfc}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 16.901438985s ago: executing program 4 (id=3236): r0 = socket(0x5, 0x800, 0x10000ee2) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x0, 0x8}, 0x6, 0x6, 0xff, 0x8, 0x18, 'syz0\x00', "86bca39346212f86291651efda89f97eae0791a8937518b16a2af4d30592156d", "8a75bdacf9205e94b1affc4118e64c993c59ca1f8ac4bbb9fd263d6a7335d3e8", [{0x4, 0x8, {0xc14503c25b476f23, 0x3}}, {0x85, 0xd6, {0x1, 0x7}}, {0x3, 0x6, {0x3, 0x3}}, {0x40, 0x1, {0x2, 0x9}}, {0x1a9b, 0x4, {0x2, 0x4000000}}, {0xff, 0x6, {0x3, 0x6}}, {0xe7cd, 0x0, {0x2, 0x100}}, {0x2, 0x1, {0x3, 0x1000}}, {0x6, 0x3, {0x2, 0x401}}, {0xb5, 0x4, {0x0, 0x5}}, {0x8001, 0x80, {0x3, 0x3}}, {0x5, 0x0, {0x1}}, {0x0, 0x5, {0x1, 0x7f}}, {0x9, 0x7932, {0x1, 0x6}}, {0x1f8, 0x4, {0x1, 0x40}}, {0x7, 0x7, {0x1, 0x3}}, {0x1, 0xead, {0x3, 0x7}}, {0x1, 0xfdf1, {0x2, 0x5}}, {0x9, 0x3, {0x1, 0x6}}, {0x1, 0xa, {0x1, 0xc68c}}, {0x4, 0x0, {0x3, 0xd9a}}, {0x7f, 0x6, {0x1, 0x9}}, {0x40, 0x3, {0x0, 0x8}}, {0x2, 0x4, {0x3, 0x3}}, {0xf3a2, 0x3f, {0x3, 0x7}}, {0x6, 0x7, {0x3, 0x4}}, {0x140, 0x45df, {0x0, 0x8}}, {0x5, 0xa}, {0xfffc, 0x4, {0x2, 0x9}}, {0x0, 0xc5b, {0x1, 0x5}}, {0xd, 0x81d3, {0x2, 0xffffffc8}}, {0x7, 0xb0a, {0x1, 0x4}}, {0x0, 0x3, {0x0, 0x7}}, {0x1, 0x8, {0x2, 0x9}}, {0x0, 0x315, {0x3, 0x10}}, {0x8, 0x7, {0x2, 0x2}}, {0x7, 0x5, {0x3, 0x10000}}, {0xe4, 0x6, {0x1, 0x2}}, {0xffff, 0x7, {0x2, 0x5}}, {0x6, 0xfe00, {0x1, 0x2821}}]}}}]}, 0xfffffffffffffee4}}, 0x840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301080000000000000000000000000800010001000000090002000029260c6a000000080003"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x21, 0x0, &(0x7f0000003c00)) 16.770323221s ago: executing program 3 (id=3237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e00010027bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="f7"], 0x1c}}, 0x4008000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x6, [@datasec={0xb, 0x4, 0x0, 0xf, 0x3, [{0x3, 0xbf8, 0x9}, {0x2, 0x8000, 0x8}, {0x3, 0x2, 0x2}, {0x4, 0xd8c, 0x8}], "5da7b6"}]}, {0x0, [0x61, 0x0, 0x30, 0x2e]}}, &(0x7f0000000240)=""/128, 0x5e, 0x80, 0x0, 0x8, 0x10000}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r2, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff3c33, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x60}, @alu={0x4, 0x0, 0x8, 0xc, 0x3, 0xfffffffffffffef5, 0x10}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x4c, &(0x7f0000000140)=""/76, 0x41100, 0xd, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000380)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r5, r6, r7, r8], &(0x7f0000000580)=[{0x1, 0x3, 0x5, 0x2}], 0x10, 0x7}, 0x94) ioctl$TUNSETLINK(r3, 0x400454cd, 0xfffe) 16.644459042s ago: executing program 4 (id=3238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0xfd48) 16.642374587s ago: executing program 2 (id=3239): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x9, 0x9, 0x9, 0x3, 0x9]}, &(0x7f0000000080)=0x78) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x210, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={r1, 0x40}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x45004}, 0xc010) r5 = accept4(0xffffffffffffffff, &(0x7f00000004c0)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000540)=0x80, 0x1000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000580)="5af39bd8f611f5c28da2b2ec76fc3bfc", 0x10) close(r5) getsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f00000005c0), &(0x7f0000000600)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'pim6reg0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r6, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DISASSOCIATE(r9, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r6, 0x9, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd7ed}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000ac0)={@local, @multicast1}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r6, 0x20, 0x70bd26, 0x81, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x400d1}, 0x4000000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r11, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x4) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40), 0x8) sendmsg$NL80211_CMD_ASSOCIATE(r12, &(0x7f0000001080)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x21890000}, 0xc, &(0x7f0000001040)={&(0x7f0000000dc0)={0x25c, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x9, 0xf2, "3ad6f63cf1"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc000000, {0x9, 0x1, 0x63, 0x4}}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x1, 0xfffd, 0x5, 0x400, 0x200, 0x400, 0x8, 0x7fff, 0x7bb4, 0x4, 0x5, 0x2, 0x2, 0x0, 0x487, 0x4]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x3, 0x6, 0x0, {0x7, 0x1fd5, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x1, 0x7b}}, @NL80211_ATTR_IE={0x1ac, 0x2a, [@perr={0x84, 0x2}, @fast_bss_trans={0x37, 0x70, {0xd, 0x2, "7d9f29ce88b013f7df454a9bd862ff78", "8aeb29d839f339c1f6b9b2b3e8026d041f84531b8b1087bb0356173c15d36989", "d76acb6565e1ce33e2a59e66c9a7fb055bccf43a6523a7bfcd7c6c035978559c", [{0x1, 0x19, "2a79d0e129930a7bbfca6654f47cd7ade01aa376519f6676d0"}, {0x2, 0x1, "95"}]}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x7, 0xad, 0xe656, 0x3bf}}, @fast_bss_trans={0x37, 0xed, {0x9, 0x5, "b58cfa90b7c795dccaa7457faacb153a", "3f58653ef6d6d5f529a7e852b3b3839be1f963131b4844efbc2ecd91f2e6991a", "327bdf7f3e52da841929bdbbf0c5d670c284b40a854f08fc5cca4b8a2a784373", [{0x3, 0x24, "f3b38c4ef68147497c3ab08ebbdfccc5bf81145c84eaea1e0cc93420895492fdd51ccf27"}, {0x4, 0x14, "f63770386b8a07b419948a638f75cada49bdc21f"}, {0x1, 0x10, "949e79e4928553cacbe238f24d2cb4a5"}, {0x1, 0x28, "cd3b4b059ec6665e34de4c47dc5787e6c484a881d8ffd7663b02ac66ebbf3a93fa0931d7988e52ff"}, {0x4, 0x21, "cead6d40ecedb1dfc9ad9489070a2022239de6c7a9fcce1e71b677fc186209d5fd"}]}}, @mic={0x8c, 0x10, {0x59, "fab7e7d84954", @short="dc3eb450e9f7f056"}}, @ibss={0x6, 0x2, 0xffff}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x3, 0x5, @device_a, 0x7, 0x3, 0x10000}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xa, 0xc}}]}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xfff7, 0x7, 0x7, 0x0, 0x400, 0xc, 0x3, 0x0, 0xee3e, 0x4, 0xb, 0x9, 0x40, 0xb, 0x4, 0x8]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x25c}, 0x1, 0x0, 0x0, 0x10}, 0x801) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000010c0)=@assoc_value, &(0x7f0000001100)=0x8) 16.634361574s ago: executing program 1 (id=3240): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="710505cd0106020101060bcf2c4d5037f48be8a1976e193c27010466dc77f0b1b54773ee6a19222755d2deac4f088f76bf3c93682f07d04b7bdccfa9d3d690cc68a8388ff2dfc30c6b960d016f658293bddfc4a2c323752cbeabab060ffc700173"], 0x61) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, 0x0, 0x400a1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) 16.500484478s ago: executing program 4 (id=3241): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ad}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x68}}, 0x4008845) (async) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ad}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x68}}, 0x4008845) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @proto={0x5, 0x19, 0x6c}]}, 0x140}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x850, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xffff, 0xc, 0x7, 0x1000, 0x7, 0xe731, 0x10, 0x27, 0x0, 0x4, 0xd, 0xbd, 0x10, 0x3, 0x5, 0x4, 0x9, 0x10000, 0x7ff, 0x22, 0xd, 0xffffff80, 0x0, 0xfffffffa, 0xfffffffc, 0x8, 0xd, 0x4, 0x80000000, 0xc0a, 0x8, 0xfffff04a, 0x2, 0x9, 0x5, 0x59be, 0x90, 0x0, 0xf1, 0x40, 0xca20, 0x9, 0xfffffff8, 0x33f, 0xcf, 0x3, 0x1fe3, 0x9, 0x0, 0x3, 0xf78, 0x1ff, 0x8001, 0x3, 0x7, 0x3, 0x9, 0x0, 0x4000101, 0xfffffffd, 0x900, 0x4, 0x3, 0x1, 0xcec101e, 0x101, 0x5, 0x3, 0x101, 0x6, 0x3, 0x8, 0x2, 0x1000, 0xd, 0x82, 0x10, 0x3, 0x4000000, 0x1ff, 0x7, 0x8, 0x3, 0x9, 0x21, 0xb, 0xffffffff, 0x0, 0x1, 0x8, 0x80000000, 0x9, 0xef, 0x7f, 0x0, 0x8, 0x8, 0xd2, 0x9, 0x3, 0x703c47b4, 0x6, 0xfff, 0x6, 0x6, 0x3, 0x5, 0x6, 0x100, 0x8000, 0x77, 0x0, 0x8, 0x5, 0x101, 0x8, 0x5, 0x7, 0x1ff, 0x0, 0x8bb7, 0xff, 0xffff, 0xfffffc01, 0x5, 0x7, 0x2, 0x5, 0x5, 0xa3b4, 0x3, 0xf, 0x2, 0x10000, 0x795, 0xc4, 0x96ba81bb, 0x272, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x6, 0xfffffffc, 0x196b4eb5, 0x6c, 0x2, 0x0, 0x8001, 0x0, 0x6, 0x8001, 0x7, 0x5, 0x1, 0x2, 0x80, 0x1, 0x2, 0x8001, 0xffffffff, 0x5, 0x1, 0x3, 0x0, 0xa, 0x42, 0x834, 0x101, 0xab1, 0x9, 0x1c7, 0x35f3, 0x7, 0x4, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0x9, 0x1, 0x4, 0x9cdf070, 0x12000, 0xf2f, 0x0, 0x3, 0x7fff, 0xa4, 0x3, 0x9, 0xe, 0x5, 0x1, 0x3, 0x8, 0x2, 0x6, 0xfffff000, 0x3b84, 0x7, 0x8001, 0x5, 0x1000, 0x1c00, 0x0, 0x8, 0x8, 0x9, 0x5, 0x9, 0x283a, 0xffffff48, 0xd0fa, 0x1, 0x5, 0xfffffffc, 0x4, 0x2bc3, 0x6, 0x9, 0x2, 0xff, 0x5, 0x3, 0x8, 0x0, 0x3, 0xd, 0x0, 0x9, 0x40, 0x6, 0xfffffffc, 0x4, 0x2, 0x5, 0xfffffff9, 0x9, 0xffff0001, 0x9, 0x1, 0x2, 0x6f7, 0x400, 0xa, 0x100, 0x6, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x7, 0x80000000, 0x5, 0x5, 0x7, 0x6, 0x7, 0x7, 0x1, 0x7, 0x1ed4, 0x3, 0x9, 0x400, 0xd, 0x3, 0xa4ed00, 0x9, 0x7, 0x3be, 0xfb57, 0x40, 0xffffffff, 0x8000, 0x5, 0x8, 0x2, 0x401, 0x5c, 0x9, 0x10000, 0x9, 0x1, 0x0, 0x8, 0x355, 0x0, 0x9, 0x5, 0x100, 0x8003, 0xf, 0xf, 0x0, 0x0, 0xfffffffb, 0x7, 0x10, 0x7ff, 0x10001, 0x5, 0x0, 0x5, 0xaa9, 0xfffffe00, 0x1c, 0x10, 0xd, 0x5, 0x2, 0xcda, 0x0, 0x9, 0x1, 0x800, 0x7, 0x1, 0x4, 0x5, 0x1a5b809d, 0x4e, 0x6, 0x48000, 0x3, 0x8, 0x3, 0x2, 0x6, 0x2, 0x1, 0x10000, 0x3, 0x4, 0x8, 0x5, 0x7, 0x7, 0xa6, 0x0, 0x0, 0x0, 0x35b33ced, 0x0, 0x9, 0x80, 0xf, 0x50fc, 0x2, 0x3, 0xfa37, 0x8, 0x3, 0x2, 0x7b, 0x3, 0x4, 0x1f63, 0xfffffe00, 0x0, 0x5, 0x40, 0x1, 0x1, 0x0, 0x6, 0x71, 0x7, 0xfffff8a7, 0x0, 0xc, 0x1, 0x7, 0x3b, 0x2, 0x8, 0x81, 0xfff, 0x101, 0x4, 0xfffffff7, 0x1, 0x2, 0x1000, 0x3, 0xffff, 0x5, 0x7, 0xe, 0x2, 0x80000001, 0x3, 0x8, 0x6461, 0x80000001, 0x6, 0xc456, 0x0, 0x0, 0x2, 0x80, 0x510e, 0x2, 0x7, 0xffffffff, 0x775, 0x2, 0xfffff9c3, 0x5, 0x80, 0x8, 0x3, 0xd7, 0x7f, 0x8, 0x2, 0x2b86, 0x9, 0x0, 0x5, 0x1f, 0x5, 0x53c, 0xc, 0x3c, 0xb4, 0x7, 0x0, 0xfffffffb, 0xc, 0xffffff00, 0x1, 0x2, 0x0, 0xaef, 0xf969, 0x3, 0x8, 0x9, 0x8, 0x401, 0x80, 0x1, 0xfffff89a, 0xd5f4, 0x8000, 0x400, 0x3, 0x3, 0x4, 0x1, 0x6, 0x3, 0x7, 0x8, 0x6, 0x1, 0x8, 0x3ff, 0x6, 0x8fc, 0x5, 0xa3, 0xff, 0xffffffff, 0x9, 0x57c, 0x14, 0x1, 0x3, 0x3, 0x1, 0x72, 0xfffffff7, 0xffffffff, 0xffff, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0x1, 0x8, 0x11a, 0x7fff, 0x8, 0xfffffffc, 0xc9, 0x8, 0x5, 0x2, 0x8, 0x2, 0xcb, 0x0, 0x7, 0x6, 0x7, 0x5, 0x5, 0x6, 0x80000000, 0x80, 0x101, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000047c0000040042800c00018006000600843b00004c150280"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r8) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="812a000000000000000009000000080014000000771cd6be98f099a300000500150000000000"], 0x2c}}, 0x0) openat$cgroup_ro(r7, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(r7, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r10, &(0x7f00000003c0)=""/132, 0x84) 16.409058454s ago: executing program 3 (id=3242): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.319137459s ago: executing program 3 (id=3243): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x82, 0x12, "d0581ddc37253c05f7c0c7a54e649600"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x10}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='hrtimer_expire_entry\x00', r2}, 0x10) (async) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r4, r3, 0x0, 0x14, 0xfffffffffffffffe}, 0x42) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r6, 0x0) accept4(r6, 0x0, 0x0, 0x0) (async) connect$netrom(r6, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYBLOB="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", @ANYBLOB="0000000003120100280012806500"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x4000000) 16.158160697s ago: executing program 3 (id=3244): bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$FOU_CMD_DEL(r0, 0x0, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) (async) socket$kcm(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6000000000783afffe8000000000000000000000000000bbfe8000000000000000000000000000aa86009078000000000000000000000000010aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca250200010000000500000000260004000101fe06000000e3a09e"], 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) close(r9) (async) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081002900f41100bc39"], 0x0) 16.036038073s ago: executing program 3 (id=3245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x9, r5, 0x1, 0xfa, 0x6, @broadcast}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close(r6) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0x4}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.980412435s ago: executing program 3 (id=3246): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x8, @local, 0x2}, @in6={0xa, 0xfff3, 0x1ff, @mcast1, 0xecb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x1}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r5, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000580)={r5, 0x3ff}, &(0x7f0000000680)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xd1}, 0x4000014) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x2c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x40002) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r11) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r12, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) close(r13) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x80000001, 0x3a, {{0xb, 0x4, 0x0, 0x10, 0x2c, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0x17, 0x54, [@private=0xa010102, @local, @empty, @broadcast, @empty]}]}}}}}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x1, @empty, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="6c38c2731741716085db0e8d74cb2973b2af997a4e07ef6cac0ba9ca8dc0ae677f8751921e555d63a430c35c557e130f654f9a845e963ba4d3f9c9b1f685ced90f831f3e5e5e24c286416273c8193ce062152e4c8880ae2ec07c8dd624a176ab9d78779bbb9e163cb0b179b9b308a61c6d9ea138647a", 0x76}, {&(0x7f0000000280)="3534a55fc4e26b708d312f81c62b477898e5b1842ae0362ad76666ebb6a393d73162869e9ac3386008f2765274914c5292ffe3742de73708a484d97355e60d0a39d5fd1286865a468dec254bab656bbc59619f9a9c7502f05ff9c55fe877e74121661e70cab89d27c465825599bc59030798f176a45aa36b4de545f10b546187fb7c79324d17c90692d3f6ab695dfede3a0b7975914119db689cdb3a3568653f2b02d2a43215b200ad6f9d8dc7d4c48f26b2f751d75e703ee619e44d36dc95d490f548ef7ac0a093", 0xc8}], 0x2, &(0x7f0000000480)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r14}}}], 0x28}}], 0x1, 0x4008014) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r15, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x400) write$rfkill(r10, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 1.125543279s ago: executing program 32 (id=3240): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="710505cd0106020101060bcf2c4d5037f48be8a1976e193c27010466dc77f0b1b54773ee6a19222755d2deac4f088f76bf3c93682f07d04b7bdccfa9d3d690cc68a8388ff2dfc30c6b960d016f658293bddfc4a2c323752cbeabab060ffc700173"], 0x61) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, 0x0, 0x400a1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) 1.085736343s ago: executing program 33 (id=3239): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x9, 0x9, 0x9, 0x3, 0x9]}, &(0x7f0000000080)=0x78) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x210, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={r1, 0x40}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x45004}, 0xc010) r5 = accept4(0xffffffffffffffff, &(0x7f00000004c0)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000540)=0x80, 0x1000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000580)="5af39bd8f611f5c28da2b2ec76fc3bfc", 0x10) close(r5) getsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f00000005c0), &(0x7f0000000600)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'pim6reg0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r6, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DISASSOCIATE(r9, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r6, 0x9, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd7ed}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000ac0)={@local, @multicast1}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r6, 0x20, 0x70bd26, 0x81, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x400d1}, 0x4000000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r11, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x4) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40), 0x8) sendmsg$NL80211_CMD_ASSOCIATE(r12, &(0x7f0000001080)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x21890000}, 0xc, &(0x7f0000001040)={&(0x7f0000000dc0)={0x25c, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x9, 0xf2, "3ad6f63cf1"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc000000, {0x9, 0x1, 0x63, 0x4}}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x1, 0xfffd, 0x5, 0x400, 0x200, 0x400, 0x8, 0x7fff, 0x7bb4, 0x4, 0x5, 0x2, 0x2, 0x0, 0x487, 0x4]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x3, 0x6, 0x0, {0x7, 0x1fd5, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x1, 0x7b}}, @NL80211_ATTR_IE={0x1ac, 0x2a, [@perr={0x84, 0x2}, @fast_bss_trans={0x37, 0x70, {0xd, 0x2, "7d9f29ce88b013f7df454a9bd862ff78", "8aeb29d839f339c1f6b9b2b3e8026d041f84531b8b1087bb0356173c15d36989", "d76acb6565e1ce33e2a59e66c9a7fb055bccf43a6523a7bfcd7c6c035978559c", [{0x1, 0x19, "2a79d0e129930a7bbfca6654f47cd7ade01aa376519f6676d0"}, {0x2, 0x1, "95"}]}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x7, 0xad, 0xe656, 0x3bf}}, @fast_bss_trans={0x37, 0xed, {0x9, 0x5, "b58cfa90b7c795dccaa7457faacb153a", "3f58653ef6d6d5f529a7e852b3b3839be1f963131b4844efbc2ecd91f2e6991a", "327bdf7f3e52da841929bdbbf0c5d670c284b40a854f08fc5cca4b8a2a784373", [{0x3, 0x24, "f3b38c4ef68147497c3ab08ebbdfccc5bf81145c84eaea1e0cc93420895492fdd51ccf27"}, {0x4, 0x14, "f63770386b8a07b419948a638f75cada49bdc21f"}, {0x1, 0x10, "949e79e4928553cacbe238f24d2cb4a5"}, {0x1, 0x28, "cd3b4b059ec6665e34de4c47dc5787e6c484a881d8ffd7663b02ac66ebbf3a93fa0931d7988e52ff"}, {0x4, 0x21, "cead6d40ecedb1dfc9ad9489070a2022239de6c7a9fcce1e71b677fc186209d5fd"}]}}, @mic={0x8c, 0x10, {0x59, "fab7e7d84954", @short="dc3eb450e9f7f056"}}, @ibss={0x6, 0x2, 0xffff}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x3, 0x5, @device_a, 0x7, 0x3, 0x10000}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xa, 0xc}}]}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xfff7, 0x7, 0x7, 0x0, 0x400, 0xc, 0x3, 0x0, 0xee3e, 0x4, 0xb, 0x9, 0x40, 0xb, 0x4, 0x8]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x25c}, 0x1, 0x0, 0x0, 0x10}, 0x801) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000010c0)=@assoc_value, &(0x7f0000001100)=0x8) 1.023744438s ago: executing program 34 (id=3241): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ad}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x68}}, 0x4008845) (async) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ad}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x68}}, 0x4008845) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @proto={0x5, 0x19, 0x6c}]}, 0x140}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x850, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xffff, 0xc, 0x7, 0x1000, 0x7, 0xe731, 0x10, 0x27, 0x0, 0x4, 0xd, 0xbd, 0x10, 0x3, 0x5, 0x4, 0x9, 0x10000, 0x7ff, 0x22, 0xd, 0xffffff80, 0x0, 0xfffffffa, 0xfffffffc, 0x8, 0xd, 0x4, 0x80000000, 0xc0a, 0x8, 0xfffff04a, 0x2, 0x9, 0x5, 0x59be, 0x90, 0x0, 0xf1, 0x40, 0xca20, 0x9, 0xfffffff8, 0x33f, 0xcf, 0x3, 0x1fe3, 0x9, 0x0, 0x3, 0xf78, 0x1ff, 0x8001, 0x3, 0x7, 0x3, 0x9, 0x0, 0x4000101, 0xfffffffd, 0x900, 0x4, 0x3, 0x1, 0xcec101e, 0x101, 0x5, 0x3, 0x101, 0x6, 0x3, 0x8, 0x2, 0x1000, 0xd, 0x82, 0x10, 0x3, 0x4000000, 0x1ff, 0x7, 0x8, 0x3, 0x9, 0x21, 0xb, 0xffffffff, 0x0, 0x1, 0x8, 0x80000000, 0x9, 0xef, 0x7f, 0x0, 0x8, 0x8, 0xd2, 0x9, 0x3, 0x703c47b4, 0x6, 0xfff, 0x6, 0x6, 0x3, 0x5, 0x6, 0x100, 0x8000, 0x77, 0x0, 0x8, 0x5, 0x101, 0x8, 0x5, 0x7, 0x1ff, 0x0, 0x8bb7, 0xff, 0xffff, 0xfffffc01, 0x5, 0x7, 0x2, 0x5, 0x5, 0xa3b4, 0x3, 0xf, 0x2, 0x10000, 0x795, 0xc4, 0x96ba81bb, 0x272, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x6, 0xfffffffc, 0x196b4eb5, 0x6c, 0x2, 0x0, 0x8001, 0x0, 0x6, 0x8001, 0x7, 0x5, 0x1, 0x2, 0x80, 0x1, 0x2, 0x8001, 0xffffffff, 0x5, 0x1, 0x3, 0x0, 0xa, 0x42, 0x834, 0x101, 0xab1, 0x9, 0x1c7, 0x35f3, 0x7, 0x4, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0x9, 0x1, 0x4, 0x9cdf070, 0x12000, 0xf2f, 0x0, 0x3, 0x7fff, 0xa4, 0x3, 0x9, 0xe, 0x5, 0x1, 0x3, 0x8, 0x2, 0x6, 0xfffff000, 0x3b84, 0x7, 0x8001, 0x5, 0x1000, 0x1c00, 0x0, 0x8, 0x8, 0x9, 0x5, 0x9, 0x283a, 0xffffff48, 0xd0fa, 0x1, 0x5, 0xfffffffc, 0x4, 0x2bc3, 0x6, 0x9, 0x2, 0xff, 0x5, 0x3, 0x8, 0x0, 0x3, 0xd, 0x0, 0x9, 0x40, 0x6, 0xfffffffc, 0x4, 0x2, 0x5, 0xfffffff9, 0x9, 0xffff0001, 0x9, 0x1, 0x2, 0x6f7, 0x400, 0xa, 0x100, 0x6, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x7, 0x80000000, 0x5, 0x5, 0x7, 0x6, 0x7, 0x7, 0x1, 0x7, 0x1ed4, 0x3, 0x9, 0x400, 0xd, 0x3, 0xa4ed00, 0x9, 0x7, 0x3be, 0xfb57, 0x40, 0xffffffff, 0x8000, 0x5, 0x8, 0x2, 0x401, 0x5c, 0x9, 0x10000, 0x9, 0x1, 0x0, 0x8, 0x355, 0x0, 0x9, 0x5, 0x100, 0x8003, 0xf, 0xf, 0x0, 0x0, 0xfffffffb, 0x7, 0x10, 0x7ff, 0x10001, 0x5, 0x0, 0x5, 0xaa9, 0xfffffe00, 0x1c, 0x10, 0xd, 0x5, 0x2, 0xcda, 0x0, 0x9, 0x1, 0x800, 0x7, 0x1, 0x4, 0x5, 0x1a5b809d, 0x4e, 0x6, 0x48000, 0x3, 0x8, 0x3, 0x2, 0x6, 0x2, 0x1, 0x10000, 0x3, 0x4, 0x8, 0x5, 0x7, 0x7, 0xa6, 0x0, 0x0, 0x0, 0x35b33ced, 0x0, 0x9, 0x80, 0xf, 0x50fc, 0x2, 0x3, 0xfa37, 0x8, 0x3, 0x2, 0x7b, 0x3, 0x4, 0x1f63, 0xfffffe00, 0x0, 0x5, 0x40, 0x1, 0x1, 0x0, 0x6, 0x71, 0x7, 0xfffff8a7, 0x0, 0xc, 0x1, 0x7, 0x3b, 0x2, 0x8, 0x81, 0xfff, 0x101, 0x4, 0xfffffff7, 0x1, 0x2, 0x1000, 0x3, 0xffff, 0x5, 0x7, 0xe, 0x2, 0x80000001, 0x3, 0x8, 0x6461, 0x80000001, 0x6, 0xc456, 0x0, 0x0, 0x2, 0x80, 0x510e, 0x2, 0x7, 0xffffffff, 0x775, 0x2, 0xfffff9c3, 0x5, 0x80, 0x8, 0x3, 0xd7, 0x7f, 0x8, 0x2, 0x2b86, 0x9, 0x0, 0x5, 0x1f, 0x5, 0x53c, 0xc, 0x3c, 0xb4, 0x7, 0x0, 0xfffffffb, 0xc, 0xffffff00, 0x1, 0x2, 0x0, 0xaef, 0xf969, 0x3, 0x8, 0x9, 0x8, 0x401, 0x80, 0x1, 0xfffff89a, 0xd5f4, 0x8000, 0x400, 0x3, 0x3, 0x4, 0x1, 0x6, 0x3, 0x7, 0x8, 0x6, 0x1, 0x8, 0x3ff, 0x6, 0x8fc, 0x5, 0xa3, 0xff, 0xffffffff, 0x9, 0x57c, 0x14, 0x1, 0x3, 0x3, 0x1, 0x72, 0xfffffff7, 0xffffffff, 0xffff, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0x1, 0x8, 0x11a, 0x7fff, 0x8, 0xfffffffc, 0xc9, 0x8, 0x5, 0x2, 0x8, 0x2, 0xcb, 0x0, 0x7, 0x6, 0x7, 0x5, 0x5, 0x6, 0x80000000, 0x80, 0x101, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000047c0000040042800c00018006000600843b00004c150280"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r8) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="812a000000000000000009000000080014000000771cd6be98f099a300000500150000000000"], 0x2c}}, 0x0) openat$cgroup_ro(r7, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(r7, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r10, &(0x7f00000003c0)=""/132, 0x84) 0s ago: executing program 35 (id=3246): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x8, @local, 0x2}, @in6={0xa, 0xfff3, 0x1ff, @mcast1, 0xecb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x1}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r5, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000580)={r5, 0x3ff}, &(0x7f0000000680)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xd1}, 0x4000014) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x2c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x40002) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r11) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r12, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) close(r13) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x80000001, 0x3a, {{0xb, 0x4, 0x0, 0x10, 0x2c, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0x17, 0x54, [@private=0xa010102, @local, @empty, @broadcast, @empty]}]}}}}}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x1, @empty, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="6c38c2731741716085db0e8d74cb2973b2af997a4e07ef6cac0ba9ca8dc0ae677f8751921e555d63a430c35c557e130f654f9a845e963ba4d3f9c9b1f685ced90f831f3e5e5e24c286416273c8193ce062152e4c8880ae2ec07c8dd624a176ab9d78779bbb9e163cb0b179b9b308a61c6d9ea138647a", 0x76}, {&(0x7f0000000280)="3534a55fc4e26b708d312f81c62b477898e5b1842ae0362ad76666ebb6a393d73162869e9ac3386008f2765274914c5292ffe3742de73708a484d97355e60d0a39d5fd1286865a468dec254bab656bbc59619f9a9c7502f05ff9c55fe877e74121661e70cab89d27c465825599bc59030798f176a45aa36b4de545f10b546187fb7c79324d17c90692d3f6ab695dfede3a0b7975914119db689cdb3a3568653f2b02d2a43215b200ad6f9d8dc7d4c48f26b2f751d75e703ee619e44d36dc95d490f548ef7ac0a093", 0xc8}], 0x2, &(0x7f0000000480)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r14}}}], 0x28}}], 0x1, 0x4008014) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r15, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x400) write$rfkill(r10, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): T8147] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.486330][ T8147] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.505055][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 152.553691][ T9930] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1169'. [ 152.642159][ T9937] netlink: 'syz.2.1172': attribute type 4 has an invalid length. [ 153.431288][ T9991] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003 [ 153.785174][T10008] nbd0: detected capacity change from 0 to 63 [ 153.829495][ T5831] block nbd0: Receive control failed (result -32) [ 154.094851][T10031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.606417][T10052] tipc: Enabling of bearer rejected, media not registered [ 154.671082][T10054] netlink: 'syz.1.1215': attribute type 3 has an invalid length. [ 154.989576][T10069] veth5: entered allmulticast mode [ 155.796495][T10132] netlink: 'syz.3.1244': attribute type 13 has an invalid length. [ 155.823048][T10132] veth0_macvtap: left promiscuous mode [ 155.851792][T10132] macvtap0: entered allmulticast mode [ 155.887017][T10132] macvtap0: refused to change device tx_queue_len [ 156.189400][T10160] __nla_validate_parse: 22 callbacks suppressed [ 156.189417][T10160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 156.226345][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 156.372470][T10152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.412501][T10161] netlink: 89 bytes leftover after parsing attributes in process `syz.3.1249'. [ 156.557884][T10176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1257'. [ 156.630600][T10185] tls_set_device_offload_rx: netdev not found [ 156.702516][T10191] netlink: 'syz.3.1262': attribute type 64 has an invalid length. [ 156.713478][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1262'. [ 157.012748][T10208] tipc: Enabled bearer , priority 0 [ 157.040520][T10204] tipc: Disabling bearer [ 157.341961][T10229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.358526][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 157.403120][T10231] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 157.411962][ T8157] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 157.431365][ T8157] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 157.444962][ T8157] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 157.466297][ T8157] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 157.489234][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1279'. [ 157.774003][T10246] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 157.785538][T10247] tipc: Enabling of bearer rejected, already enabled [ 158.287305][T10270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1287'. [ 158.470095][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1289'. [ 158.479278][T10280] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1289'. [ 158.666787][T10280] veth5: entered promiscuous mode [ 158.671983][T10280] veth5: entered allmulticast mode [ 158.984066][T10299] netlink: 'syz.3.1296': attribute type 13 has an invalid length. [ 158.995380][T10299] netlink: 'syz.3.1296': attribute type 58 has an invalid length. [ 159.007132][T10297] vlan3: entered allmulticast mode [ 159.014327][T10297] bond0: entered allmulticast mode [ 159.208175][T10310] tipc: Enabling of bearer rejected, failed to enable media [ 159.409647][T10328] netlink: 'syz.4.1305': attribute type 1 has an invalid length. [ 159.601097][T10349] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 159.701387][T10352] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 159.802709][T10358] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.858511][T10364] netlink: 'syz.0.1314': attribute type 9 has an invalid length. [ 159.881738][T10365] syzkaller0: entered promiscuous mode [ 159.887794][T10365] syzkaller0: entered allmulticast mode [ 159.897466][T10362] netlink: 'syz.2.1317': attribute type 2 has an invalid length. [ 160.251220][T10380] netlink: 'syz.2.1321': attribute type 10 has an invalid length. [ 160.262932][T10380] veth1_macvtap: left promiscuous mode [ 160.309040][T10388] netlink: 'syz.1.1323': attribute type 10 has an invalid length. [ 160.331856][T10388] team0: Port device dummy0 added [ 160.367042][T10382] vxcan1 speed is unknown, defaulting to 1000 [ 160.410277][T10390] dvmrp1: entered allmulticast mode [ 160.541828][T10396] netlink: 'syz.2.1327': attribute type 3 has an invalid length. [ 161.214792][T10432] __nla_validate_parse: 15 callbacks suppressed [ 161.214811][T10432] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1335'. [ 161.246167][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 161.293364][T10432] gretap0: entered promiscuous mode [ 161.298794][T10434] IPVS: sync thread started: state = BACKUP, mcast_ifn = dvmrp1, syncid = 3, id = 0 [ 161.317309][T10432] gretap0: left allmulticast mode [ 161.369421][T10433] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 161.376949][T10441] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1335'. [ 161.389875][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 161.436409][T10435] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 161.484467][T10441] 0ªî{X¹¦: renamed from gretap0 [ 161.524458][T10441] 0ªî{X¹¦: left promiscuous mode [ 161.545149][T10441] 0ªî{X¹¦: entered allmulticast mode [ 161.562188][T10441] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 161.764003][T10457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1343'. [ 161.891826][T10466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1346'. [ 162.145075][T10489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1351'. [ 162.236927][T10494] bond6: Removing last arp target with arp_interval on [ 162.241521][T10496] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1352'. [ 162.322112][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 162.349007][T10502] netlink: 'syz.4.1355': attribute type 11 has an invalid length. [ 162.365188][T10502] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1355'. [ 162.389598][T10506] vlan2: entered allmulticast mode [ 162.403145][T10506] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 162.868507][T10528] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 163.078638][T10547] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 163.087537][T10547] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 163.590374][T10581] IPv6: sit1: Disabled Multicast RS [ 164.147954][T10610] tipc: Enabling of bearer rejected, failed to enable media [ 164.284451][T10619] geneve0: entered promiscuous mode [ 164.290440][T10616] geneve0: left promiscuous mode [ 165.137162][T10676] netlink: 'syz.0.1403': attribute type 3 has an invalid length. [ 165.191199][T10678] tipc: Enabling of bearer rejected, failed to enable media [ 165.320243][T10689] pim6reg: entered allmulticast mode [ 165.911183][T10729] tipc: Enabling of bearer rejected, already enabled [ 166.032750][T10735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.043566][T10737] tipc: Enabling of bearer rejected, already enabled [ 166.077943][T10739] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.881759][T10793] tipc: Enabling of bearer rejected, failed to enable media [ 167.000103][T10802] __nla_validate_parse: 80 callbacks suppressed [ 167.000120][T10802] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1436'. [ 167.643830][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1449'. [ 167.707514][T10857] tipc: Enabling of bearer rejected, failed to enable media [ 167.769900][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1452'. [ 167.815199][T10861] netlink: 'syz.1.1452': attribute type 7 has an invalid length. [ 167.822964][T10861] netlink: 'syz.1.1452': attribute type 8 has an invalid length. [ 167.842362][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 167.912531][T10872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1455'. [ 168.082589][T10881] syzkaller0: left promiscuous mode [ 168.103051][T10881] syzkaller0: left allmulticast mode [ 168.317948][T10900] netlink: 'syz.1.1461': attribute type 10 has an invalid length. [ 168.342551][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.363125][T10900] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.370519][T10900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.383350][T10900] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 168.477197][T10912] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 168.514333][T10912] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1464'. [ 168.673332][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1465'. [ 169.167248][T10958] sctp: [Deprecated]: syz.4.1478 (pid 10958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.167248][T10958] Use struct sctp_sack_info instead [ 169.250815][T10966] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1479'. [ 169.444973][T10985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1487'. [ 169.446985][T10981] netlink: 'syz.2.1484': attribute type 26 has an invalid length. [ 169.465870][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 169.468558][T10983] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 169.532232][T10982] bond7: option min_links: invalid value (18446744073709551614) [ 169.540036][T10982] bond7: option min_links: allowed values 0 - 2147483647 [ 169.551090][T10982] bond7 (unregistering): Released all slaves [ 169.595801][T10998] syzkaller0: entered promiscuous mode [ 169.601443][T10998] syzkaller0: entered allmulticast mode [ 169.722350][T11006] netlink: 'syz.0.1491': attribute type 1 has an invalid length. [ 170.188899][T11037] netlink: 'syz.3.1502': attribute type 12 has an invalid length. [ 170.380746][T11042] netlink: 'syz.2.1504': attribute type 5 has an invalid length. [ 170.414968][T11047] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 170.427075][T11048] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 170.496166][T11053] tipc: Enabling of bearer rejected, already enabled [ 170.651918][T11067] ªªªªªª: renamed from vlan0 [ 170.871822][T11082] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 170.923142][T11082] bond7: Removing last ns target with arp_interval on [ 171.082918][T11097] sit0: entered promiscuous mode [ 171.126907][T11097] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 171.392152][T11118] tipc: Enabled bearer , priority 0 [ 171.438782][T11118] syzkaller0: entered promiscuous mode [ 171.448709][T11118] syzkaller0: entered allmulticast mode [ 171.463467][T11125] netlink: 'syz.3.1530': attribute type 6 has an invalid length. [ 171.475908][ T5831] Bluetooth: hci0: command tx timeout [ 171.489324][T11118] tipc: Resetting bearer [ 171.529889][T11112] tipc: Resetting bearer [ 171.570090][T11112] tipc: Disabling bearer [ 171.989651][T11157] !€ÿ: renamed from bond_slave_0 (while UP) [ 172.089796][T11167] netlink: 'syz.1.1541': attribute type 10 has an invalid length. [ 172.118923][T11167] veth0_virt_wifi: entered allmulticast mode [ 172.136104][T11167] team0: Port device veth0_virt_wifi added [ 172.170108][T11167] veth0: entered promiscuous mode [ 172.220123][T11167] veth0: left promiscuous mode [ 172.508544][T11194] __nla_validate_parse: 15 callbacks suppressed [ 172.508563][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'. [ 172.572064][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 172.581921][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 172.594353][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1550'. [ 172.682592][T11199] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 172.690618][T11199] netlink: 'syz.2.1551': attribute type 2 has an invalid length. [ 172.950023][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 172.981710][T11225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1557'. [ 172.996559][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 173.006693][T11225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1557'. [ 173.016930][T11225] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1557'. [ 173.170750][T11237] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1563'. [ 174.414137][T11304] dummy0: entered promiscuous mode [ 174.439344][T11304] dummy0: left allmulticast mode [ 174.454346][T11304] bridge0: port 3(dummy0) entered blocking state [ 174.468449][T11304] bridge0: port 3(dummy0) entered disabled state [ 174.483072][T11304] dummy0: entered allmulticast mode [ 174.892064][T11333] tipc: Enabled bearer , priority 0 [ 174.927436][T11333] syzkaller0: entered promiscuous mode [ 174.949198][T11333] syzkaller0: entered allmulticast mode [ 174.982736][T11333] tipc: Resetting bearer [ 175.031491][T11332] tipc: Resetting bearer [ 175.063312][T11332] tipc: Disabling bearer [ 175.529035][T11379] vlan3: entered promiscuous mode [ 175.534483][T11379] vlan3: entered allmulticast mode [ 175.758890][T11394] nftables ruleset with unbound chain [ 176.409757][T11436] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 176.430854][T11437] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 176.522886][T11444] blkio.reset_stats is deprecated [ 176.571867][T11447] veth11: entered allmulticast mode [ 176.761260][T11459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.093133][T11481] validate_nla: 7 callbacks suppressed [ 177.093150][T11481] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 177.486219][T11510] vlan0: entered promiscuous mode [ 177.491304][T11510] bond0: entered promiscuous mode [ 177.800616][T11525] netlink: 'syz.1.1657': attribute type 11 has an invalid length. [ 177.821124][T11525] __nla_validate_parse: 12 callbacks suppressed [ 177.821141][T11525] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1657'. [ 177.899260][T11532] netlink: 'syz.0.1659': attribute type 2 has an invalid length. [ 178.155883][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 178.377078][T11568] netlink: 'syz.3.1668': attribute type 10 has an invalid length. [ 178.392784][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 178.524515][T11573] FAULT_INJECTION: forcing a failure. [ 178.524515][T11573] name failslab, interval 1, probability 0, space 0, times 0 [ 178.537493][T11573] CPU: 1 UID: 0 PID: 11573 Comm: syz.1.1669 Not tainted syzkaller #0 PREEMPT(full) [ 178.537516][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.537525][T11573] Call Trace: [ 178.537533][T11573] [ 178.537542][T11573] dump_stack_lvl+0x189/0x250 [ 178.537564][T11573] ? __pfx____ratelimit+0x10/0x10 [ 178.537588][T11573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.537603][T11573] ? __pfx__printk+0x10/0x10 [ 178.537613][T11573] ? __local_bh_enable_ip+0x12d/0x1c0 [ 178.537628][T11573] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.537646][T11573] should_fail_ex+0x414/0x560 [ 178.537659][T11573] should_failslab+0xa8/0x100 [ 178.537672][T11573] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 178.537683][T11573] ? __alloc_skb+0x112/0x2d0 [ 178.537694][T11573] ? __pfx_tcp_set_state+0x10/0x10 [ 178.537708][T11573] __alloc_skb+0x112/0x2d0 [ 178.537722][T11573] tcp_send_active_reset+0x8c/0x6d0 [ 178.537736][T11573] tcp_disconnect+0x171/0x1f60 [ 178.537752][T11573] inet_child_forget+0x6e/0x250 [ 178.537763][T11573] ? inet_csk_listen_stop+0x15c/0xac0 [ 178.537773][T11573] inet_csk_listen_stop+0x436/0xac0 [ 178.537783][T11573] ? __local_bh_enable_ip+0x12d/0x1c0 [ 178.537803][T11573] mptcp_check_listen_stop+0x1c6/0x2b0 [ 178.537818][T11573] __mptcp_close+0xf6/0xa10 [ 178.537827][T11573] ? __local_bh_enable_ip+0x12d/0x1c0 [ 178.537843][T11573] ? do_raw_spin_unlock+0x122/0x240 [ 178.537870][T11573] mptcp_close+0x28/0x1a0 [ 178.537884][T11573] inet_release+0x144/0x190 [ 178.537897][T11573] sock_close+0xc3/0x240 [ 178.537909][T11573] ? __pfx_sock_close+0x10/0x10 [ 178.537918][T11573] __fput+0x44c/0xa70 [ 178.537938][T11573] fput_close_sync+0x119/0x200 [ 178.537951][T11573] ? dnotify_flush+0x1db/0x5e0 [ 178.537965][T11573] ? __pfx_fput_close_sync+0x10/0x10 [ 178.537978][T11573] ? do_raw_spin_unlock+0x122/0x240 [ 178.537993][T11573] __x64_sys_close+0x7f/0x110 [ 178.538007][T11573] do_syscall_64+0xfa/0xfa0 [ 178.538020][T11573] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.538032][T11573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.538041][T11573] ? clear_bhb_loop+0x60/0xb0 [ 178.538053][T11573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.538062][T11573] RIP: 0033:0x7fe24538eec9 [ 178.538073][T11573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.538080][T11573] RSP: 002b:00007fe2462f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 178.538099][T11573] RAX: ffffffffffffffda RBX: 00007fe2455e5fa0 RCX: 00007fe24538eec9 [ 178.538108][T11573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 178.538114][T11573] RBP: 00007fe2462f8090 R08: 0000000000000000 R09: 0000000000000000 [ 178.538119][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.538125][T11573] R13: 00007fe2455e6038 R14: 00007fe2455e5fa0 R15: 00007ffe1c1dfa28 [ 178.538141][T11573] [ 180.022715][T11594] : renamed from hsr0 [ 180.187532][T11604] FAULT_INJECTION: forcing a failure. [ 180.187532][T11604] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.222169][ T5908] IPVS: starting estimator thread 0... [ 180.229817][T11604] CPU: 1 UID: 0 PID: 11604 Comm: syz.0.1680 Not tainted syzkaller #0 PREEMPT(full) [ 180.229842][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.229852][T11604] Call Trace: [ 180.229860][T11604] [ 180.229868][T11604] dump_stack_lvl+0x189/0x250 [ 180.229892][T11604] ? __pfx____ratelimit+0x10/0x10 [ 180.229924][T11604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.229942][T11604] ? __pfx__printk+0x10/0x10 [ 180.229960][T11604] ? __might_fault+0xb0/0x130 [ 180.229991][T11604] should_fail_ex+0x414/0x560 [ 180.230015][T11604] _copy_from_user+0x2d/0xb0 [ 180.230039][T11604] kstrtouint_from_user+0xc4/0x170 [ 180.230061][T11604] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 180.230100][T11604] proc_fail_nth_write+0x88/0x200 [ 180.230124][T11604] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.230153][T11604] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.230178][T11604] vfs_write+0x27e/0xb30 [ 180.230207][T11604] ? __pfx_vfs_write+0x10/0x10 [ 180.230227][T11604] ? __fget_files+0x2a/0x420 [ 180.230252][T11604] ? __fget_files+0x3a0/0x420 [ 180.230270][T11604] ? __fget_files+0x2a/0x420 [ 180.230298][T11604] ksys_write+0x145/0x250 [ 180.230319][T11604] ? __pfx_ksys_write+0x10/0x10 [ 180.230340][T11604] ? do_syscall_64+0xbe/0xfa0 [ 180.230367][T11604] do_syscall_64+0xfa/0xfa0 [ 180.230388][T11604] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.230411][T11604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.230428][T11604] ? clear_bhb_loop+0x60/0xb0 [ 180.230449][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.230465][T11604] RIP: 0033:0x7f863138d97f [ 180.230481][T11604] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 180.230495][T11604] RSP: 002b:00007f8632172030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 180.230515][T11604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f863138d97f [ 180.230527][T11604] RDX: 0000000000000001 RSI: 00007f86321720a0 RDI: 0000000000000009 [ 180.230537][T11604] RBP: 00007f8632172090 R08: 0000000000000000 R09: 0000000000000000 [ 180.230548][T11604] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 180.230558][T11604] R13: 00007f86315e6038 R14: 00007f86315e5fa0 R15: 00007ffe4bd09808 [ 180.230591][T11604] [ 180.466974][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 180.478024][T11607] IPVS: using max 28 ests per chain, 67200 per kthread [ 180.546760][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 180.636944][T11617] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1686'. [ 180.872451][T11635] netlink: 'syz.1.1693': attribute type 1 has an invalid length. [ 180.894593][T11635] netlink: 'syz.1.1693': attribute type 11 has an invalid length. [ 180.913904][T11635] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1693'. [ 180.951998][T11642] tipc: Enabling of bearer rejected, already enabled [ 180.991923][T11642] syzkaller1: entered promiscuous mode [ 180.997831][T11642] syzkaller1: entered allmulticast mode [ 181.341336][T11671] dvmrp1: entered allmulticast mode [ 182.045841][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 182.074976][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 182.203377][T11684] wg2: left promiscuous mode [ 182.217826][T11684] wg2: left allmulticast mode [ 182.229653][T11682] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 182.305734][T11683] netlink: 'syz.1.1712': attribute type 3 has an invalid length. [ 182.316443][T11683] netlink: 'syz.1.1712': attribute type 3 has an invalid length. [ 182.467985][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 182.483735][T11707] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 183.237991][T11751] __nla_validate_parse: 1 callbacks suppressed [ 183.238008][T11751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1731'. [ 183.277587][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'. [ 183.303677][T11754] sit2: entered promiscuous mode [ 183.309797][T11754] sit2: entered allmulticast mode [ 183.426632][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1736'. [ 183.619805][T11775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1742'. [ 183.629206][T11776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1742'. [ 183.716090][T11782] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1743'. [ 183.858475][T11790] netlink: 'syz.2.1744': attribute type 8 has an invalid length. [ 183.907312][T11793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.987616][T11796] netlink: 'syz.2.1748': attribute type 11 has an invalid length. [ 183.996753][T11796] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1748'. [ 184.234628][T11818] netlink: 'syz.3.1753': attribute type 1 has an invalid length. [ 184.264851][T11821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1754'. [ 184.277548][T11821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1754'. [ 184.320580][T11824] macvtap1: entered promiscuous mode [ 184.326163][T11824] vlan0: entered promiscuous mode [ 184.333653][T11824] macvtap1: entered allmulticast mode [ 184.375858][T11826] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 184.447555][T11826] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 184.456694][T11833] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 184.474623][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1758'. [ 184.487078][T11833] netlink: 'syz.4.1758': attribute type 9 has an invalid length. [ 184.624405][T11843] syz.1.1763 uses old SIOCAX25GETINFO [ 184.719632][T11849] netlink: 'syz.3.1765': attribute type 6 has an invalid length. [ 184.739677][T11849] netlink: 'syz.3.1765': attribute type 6 has an invalid length. [ 184.832965][T11854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 184.938113][T11867] netlink: 'syz.2.1770': attribute type 5 has an invalid length. [ 185.306879][T11890] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.313359][T11890] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 186.031374][T11931] IPv6: sit2: Disabled Multicast RS [ 186.043129][T11931] sit2: entered allmulticast mode [ 186.673933][T11969] tap0: tun_chr_ioctl cmd 1074025672 [ 186.694302][T11969] tap0: ignored: set checksum disabled [ 186.708270][T11972] block nbd1: Unsupported socket: should be TCP or UNIX. [ 186.726630][T11972] block nbd0: NBD_DISCONNECT [ 186.735419][T11972] block nbd0: Send disconnect failed -32 [ 186.741491][T11972] block nbd0: shutting down sockets [ 186.755226][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 187.293426][T12012] vlan3: entered promiscuous mode [ 187.299662][T12012] vlan3: entered allmulticast mode [ 187.305238][T12012] hsr_slave_1: entered allmulticast mode [ 187.385729][T12019] validate_nla: 1 callbacks suppressed [ 187.385747][T12019] netlink: 'syz.0.1816': attribute type 2 has an invalid length. [ 188.043270][T12051] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 188.877483][T12099] netlink: 'syz.0.1832': attribute type 1 has an invalid length. [ 188.892596][T12099] __nla_validate_parse: 16 callbacks suppressed [ 188.892616][T12099] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1832'. [ 188.944768][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1835'. [ 188.962778][T12103] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 188.978378][T12103] bond8 (unregistering): Released all slaves [ 189.054712][T12110] tipc: Enabling of bearer rejected, already enabled [ 189.229537][T12133] tipc: New replicast peer: 255.255.255.255 [ 189.240083][T12133] tipc: Enabled bearer , priority 10 [ 189.318918][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1842'. [ 189.415972][T12148] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1845'. [ 189.464982][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1846'. [ 189.673173][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 189.691185][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 190.065833][T12180] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 190.106605][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 190.150494][T12180] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 190.166368][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 190.187068][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 190.216572][T12192] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 190.292106][T12192] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.336662][T12200] netlink: 'syz.2.1862': attribute type 75 has an invalid length. [ 190.346152][T12200] syz_tun: entered allmulticast mode [ 190.361542][T12200] dvmrp1: entered allmulticast mode [ 190.479645][T12194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.506166][T12194] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 190.518149][T12194] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 190.619259][T12192] veth7: entered promiscuous mode [ 190.629005][T12192] bond5: (slave veth7): Enslaving as an active interface with a down link [ 190.639817][T12203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.651972][T12209] pimreg: entered allmulticast mode [ 190.685579][T12198] syz_tun: left allmulticast mode [ 190.938684][T12235] tipc: Enabled bearer , priority 0 [ 190.996162][T12238] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 191.009931][T12238] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 191.043848][T12245] macvlan3: entered promiscuous mode [ 191.049477][T12245] macvlan3: entered allmulticast mode [ 191.058021][T12245] bond8: (slave macvlan3): Error -98 calling set_mac_address [ 191.080129][T12235] tipc: Disabling bearer [ 191.200577][T12250] nbd: must specify at least one socket [ 191.212332][T12257] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 191.502554][T12276] tap0: tun_chr_ioctl cmd 1074025676 [ 191.508636][T12276] tap0: owner set to 0 [ 192.040163][T12317] !: renamed from dummy0 (while UP) [ 192.176550][T12327] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 192.229173][T12327] geneve2: left promiscuous mode [ 192.318129][T12327] sit2: left promiscuous mode [ 192.335259][T12327] vlan0: left promiscuous mode [ 192.347353][T12327] macvtap1: left promiscuous mode [ 192.367560][ T43] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.391295][ T8148] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.431362][ T8148] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.454075][ T8148] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.674319][T12351] netlink: 'syz.2.1901': attribute type 1 has an invalid length. [ 193.041120][T12377] netlink: 'syz.2.1909': attribute type 83 has an invalid length. [ 193.317730][T12389] macvtap1: entered promiscuous mode [ 193.323454][T12389] vlan0: entered promiscuous mode [ 193.782451][T12418] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 193.790614][T12418] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 193.798897][T12418] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 193.810039][T12418] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 193.825335][T12418] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 193.844803][T12418] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 193.863860][T12418] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 193.886370][T12418] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 194.282873][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.468453][T12459] __nla_validate_parse: 44 callbacks suppressed [ 194.468474][T12459] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1934'. [ 194.486449][T12459] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 194.743920][T12471] ipvlan1: left allmulticast mode [ 195.188125][T12474] infiniband syz0: set down [ 195.192774][T12474] infiniband syz0: added ipvlan1 [ 195.243835][T12474] RDS/IB: syz0: added [ 195.248777][T12474] smc: adding ib device syz0 with port count 1 [ 195.254966][T12474] smc: ib device syz0 port 1 has no pnetid [ 195.411620][T12504] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1946'. [ 195.566621][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 195.593004][T12509] syz_tun: entered allmulticast mode [ 195.614549][T12506] vxcan1 speed is unknown, defaulting to 1000 [ 195.958594][T12490] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 196.335433][T12505] syz_tun: left allmulticast mode [ 196.358179][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 196.364378][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 196.364395][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.425730][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 196.508986][T12538] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1957'. [ 196.695194][T12542] sctp: [Deprecated]: syz.0.1959 (pid 12542) Use of int in maxseg socket option. [ 196.695194][T12542] Use struct sctp_assoc_value instead [ 196.915957][T12548] tipc: Enabled bearer , priority 0 [ 196.932239][T12548] syzkaller0: entered promiscuous mode [ 196.939105][T12548] syzkaller0: entered allmulticast mode [ 196.956397][T12548] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 196.984254][T12548] tipc: Resetting bearer [ 197.006817][T12547] tipc: Resetting bearer [ 197.046944][T12547] tipc: Disabling bearer [ 197.300466][T12556] macvlan0: entered promiscuous mode [ 197.326789][T12556] team_slave_0: entered promiscuous mode [ 197.333546][T12556] team_slave_1: entered promiscuous mode [ 197.339330][T12556] !: entered promiscuous mode [ 197.344411][T12556] veth0_virt_wifi: entered promiscuous mode [ 197.361878][T12556] team0: entered promiscuous mode [ 197.369812][T12556] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 197.383506][T12556] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 197.393334][T12560] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1965'. [ 197.474070][T12568] veth1_to_bond: entered allmulticast mode [ 197.489605][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'. [ 197.499967][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1969'. [ 197.556605][T12568] bond0: (slave bond_slave_1): Releasing backup interface [ 197.606863][T12568] veth1_to_bond (unregistering): left allmulticast mode [ 197.640062][T12576] tipc: Enabled bearer , priority 0 [ 197.648915][T12576] syzkaller0: entered promiscuous mode [ 197.654516][T12576] syzkaller0: entered allmulticast mode [ 197.677617][T12576] tipc: Resetting bearer [ 197.690669][T12575] tipc: Resetting bearer [ 197.707820][T12575] tipc: Disabling bearer [ 197.730444][T12569] smc: removing ib device syz0 [ 197.999856][T12590] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1972'. [ 198.260150][T12593] validate_nla: 33 callbacks suppressed [ 198.260171][T12593] netlink: 'syz.0.1974': attribute type 1 has an invalid length. [ 198.420124][T12593] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.427958][T12596] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1975'. [ 199.024490][T12619] team0: Device ip6gre2 is of different type [ 199.764970][T12649] __nla_validate_parse: 3 callbacks suppressed [ 199.787016][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1990'. [ 199.796097][T12649] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1988'. [ 199.826873][T12650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1990'. [ 200.123988][T12662] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 200.145279][T12662] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 200.153030][T12662] gretap0: entered promiscuous mode [ 200.175205][T12662] gretap0: entered allmulticast mode [ 200.214467][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1995'. [ 200.869356][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 201.362619][T12746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2020'. [ 201.529091][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2025'. [ 201.545322][T12759] netlink: 'syz.2.2024': attribute type 23 has an invalid length. [ 201.598288][T12765] netlink: 'syz.1.2027': attribute type 21 has an invalid length. [ 201.608434][T12765] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2027'. [ 201.627182][T12765] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2027'. [ 201.886934][T12783] tipc: Enabled bearer , priority 0 [ 201.905857][T12783] syzkaller0: entered promiscuous mode [ 201.916152][T12783] syzkaller0: entered allmulticast mode [ 201.971154][T12787] netlink: 'syz.0.2034': attribute type 2 has an invalid length. [ 201.971313][T12783] tipc: Resetting bearer [ 201.995189][T12787] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2034'. [ 202.035490][T12782] tipc: Resetting bearer [ 202.081921][T12782] tipc: Disabling bearer [ 202.246262][T12801] NCSI netlink: No device for ifindex 0 [ 202.253260][T12800] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 202.263935][T12801] NCSI netlink: No device for ifindex 0 [ 202.277954][T12801] NCSI netlink: No device for ifindex 0 [ 202.287740][T12801] NCSI netlink: No device for ifindex 0 [ 202.293569][T12801] NCSI netlink: No device for ifindex 0 [ 202.300167][T12801] NCSI netlink: No device for ifindex 0 [ 202.367758][T12800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.409481][T12805] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 202.431794][T12805] team0: Device macvtap1 is already an upper device of the team interface [ 202.553435][T12826] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 202.974804][T12858] netlink: 'syz.0.2057': attribute type 11 has an invalid length. [ 202.997220][T12863] netlink: 'syz.1.2059': attribute type 24 has an invalid length. [ 203.148858][T12869] tipc: Enabled bearer , priority 0 [ 203.163376][T12869] syzkaller0: entered promiscuous mode [ 203.178569][T12869] syzkaller0: entered allmulticast mode [ 203.307330][T12868] tipc: Resetting bearer [ 203.351553][T12868] tipc: Disabling bearer [ 203.363469][T12890] netlink: 'syz.3.2065': attribute type 4 has an invalid length. [ 203.374359][T12892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.385295][T12892] batadv_slave_0: entered promiscuous mode [ 203.391980][T12892] batadv_slave_0: entered allmulticast mode [ 203.444315][T12895] netlink: 'syz.3.2067': attribute type 12 has an invalid length. [ 203.656665][T12911] tipc: Enabled bearer , priority 0 [ 203.666115][T12911] syzkaller0: entered promiscuous mode [ 203.671729][T12911] syzkaller0: entered allmulticast mode [ 203.688107][T12913] openvswitch: netlink: Message has 8 unknown bytes. [ 203.695409][T12910] tipc: Resetting bearer [ 203.730930][T12910] tipc: Disabling bearer [ 203.851935][T12925] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20000 [ 204.107592][T12942] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 204.119088][T12942] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 204.759190][T12988] netlink: 'syz.2.2098': attribute type 23 has an invalid length. [ 204.978936][T12998] __nla_validate_parse: 14 callbacks suppressed [ 204.978953][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2100'. [ 205.314207][T13022] netlink: 'syz.1.2107': attribute type 4 has an invalid length. [ 205.332149][T13023] netlink: 'syz.1.2107': attribute type 4 has an invalid length. [ 205.349836][T13018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2106'. [ 205.521405][T13030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2110'. [ 205.533239][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 205.579388][T13025] tipc: Enabling of bearer rejected, already enabled [ 205.611931][T13030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2110'. [ 205.682470][T13025] : entered promiscuous mode [ 205.864285][T13041] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2114'. [ 205.929627][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 206.169825][T13069] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2120'. [ 206.454552][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'. [ 206.494816][T13097] netlink: 'syz.4.2128': attribute type 13 has an invalid length. [ 206.529286][T13100] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2129'. [ 206.660862][T13097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.823222][T13097] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.841494][T13097] bridge0: port 3(dummy0) entered blocking state [ 206.848863][T13097] bridge0: port 3(dummy0) entered forwarding state [ 206.861928][T13097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.890881][T13103] bridge2: entered promiscuous mode [ 206.896856][T13103] bridge2: entered allmulticast mode [ 207.192493][T13142] unsupported nlmsg_type 40 [ 207.353007][T13156] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 207.356367][T13160] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 207.360843][ T5918] IPVS: starting estimator thread 0... [ 207.396781][T13166] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 207.399179][T13156] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 207.486222][T13161] IPVS: using max 28 ests per chain, 67200 per kthread [ 207.504629][T13160] bond7 (unregistering): Released all slaves [ 207.530383][T13172] tipc: Enabled bearer , priority 0 [ 207.538391][T13175] syzkaller0: entered promiscuous mode [ 207.544134][T13175] syzkaller0: entered allmulticast mode [ 207.713280][T13185] syzkaller1: entered promiscuous mode [ 207.720272][T13185] syzkaller1: entered allmulticast mode [ 207.961424][T13205] !: renamed from dummy0 (while UP) [ 208.019705][T13141] tipc: Resetting bearer [ 208.106364][T13141] tipc: Disabling bearer [ 208.396600][T13235] bond3: (slave gretap1): making interface the new active one [ 208.405411][T13235] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 208.681332][T13253] validate_nla: 3 callbacks suppressed [ 208.681350][T13253] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 208.773696][T13253] 8021q: adding VLAN 0 to HW filter on device bond9 [ 209.158473][T13252] vlan0 (unregistering): left promiscuous mode [ 209.573411][T13289] netlink: 'syz.0.2182': attribute type 29 has an invalid length. [ 209.582058][T13290] netlink: 'syz.0.2182': attribute type 29 has an invalid length. [ 210.126651][T13324] __nla_validate_parse: 16 callbacks suppressed [ 210.126670][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'. [ 210.151060][T13324] netlink: 'syz.0.2193': attribute type 22 has an invalid length. [ 210.195198][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'. [ 210.256828][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'. [ 210.266362][T13324] netlink: 'syz.0.2193': attribute type 22 has an invalid length. [ 210.275988][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'. [ 210.336457][T13340] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 210.425652][T13344] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2199'. [ 210.681165][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2205'. [ 211.044584][T13374] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2209'. [ 211.136971][T13378] netlink: 'syz.1.2211': attribute type 1 has an invalid length. [ 211.452187][T13410] netlink: 'syz.1.2220': attribute type 9 has an invalid length. [ 211.461924][T13401] syzkaller0: entered promiscuous mode [ 211.462341][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 211.468531][T13401] syzkaller0: entered allmulticast mode [ 211.491652][T13399] gtp0: entered promiscuous mode [ 211.504831][T13410] netlink: 'syz.1.2220': attribute type 9 has an invalid length. [ 211.523703][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 211.665352][T13418] IPv6: NLM_F_REPLACE set, but no existing node found! [ 213.273890][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2235'. [ 213.638386][T13469] pimreg: entered allmulticast mode [ 214.258666][T13486] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 214.444113][T13492] netlink: 'syz.1.2244': attribute type 10 has an invalid length. [ 214.620997][T13508] netlink: 'syz.2.2249': attribute type 1 has an invalid length. [ 214.633323][T13510] sctp: [Deprecated]: syz.0.2250 (pid 13510) Use of int in max_burst socket option. [ 214.633323][T13510] Use struct sctp_assoc_value instead [ 215.351019][T13554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.503409][T13561] __nla_validate_parse: 2 callbacks suppressed [ 215.503427][T13561] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2263'. [ 215.680011][T13571] xt_nat: multiple ranges no longer supported [ 215.718450][T13569] vxcan1 speed is unknown, defaulting to 1000 [ 215.739120][T13571] xt_nat: multiple ranges no longer supported [ 215.786909][T13579] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2267'. [ 215.897425][T13576] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 215.962325][T13584] netlink: 'syz.4.2270': attribute type 13 has an invalid length. [ 215.990370][T13584] macvtap0: refused to change device tx_queue_len [ 216.554506][T13598] bond0: entered promiscuous mode [ 216.571485][T13598] bond_slave_0: entered promiscuous mode [ 216.580765][T13604] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2276'. [ 216.590757][T13598] bond_slave_1: entered promiscuous mode [ 216.606237][T13598] bond0: left allmulticast mode [ 216.676446][T13613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2279'. [ 217.028187][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'. [ 217.448010][T13654] netlink: 'syz.4.2289': attribute type 1 has an invalid length. [ 217.461016][T13654] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2289'. [ 217.518882][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 217.907090][T13665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2293'. [ 217.920878][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2293'. [ 217.938876][T13665] netlink: 'syz.1.2293': attribute type 39 has an invalid length. [ 218.297497][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'. [ 218.534672][T13695] veth11: entered allmulticast mode [ 218.639156][T13702] xt_policy: too many policy elements [ 218.853078][T13714] nbd: must specify a device to reconfigure [ 219.299346][T13741] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 219.317589][T13739] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 219.347588][T13741] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 219.357054][T13739] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 219.982764][T13781] netlink: 'syz.0.2321': attribute type 10 has an invalid length. [ 220.113336][T13796] tipc: Enabling of bearer rejected, already enabled [ 220.262589][T13807] xt_l2tp: wrong L2TP version: 0 [ 220.393634][T13816] tap0: tun_chr_ioctl cmd 1074025672 [ 220.407416][T13819] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 220.423866][T13816] tap0: ignored: set checksum disabled [ 220.523724][T13824] __nla_validate_parse: 6 callbacks suppressed [ 220.523744][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 220.681134][T13824] bond7: Invalid ad_actor_system MAC address. [ 220.712908][T13824] bond7: option ad_actor_system: invalid value (1) [ 220.756834][T13824] bond7 (unregistering): Released all slaves [ 220.918353][T13849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2339'. [ 221.089704][T13863] netlink: 'syz.1.2346': attribute type 11 has an invalid length. [ 221.094949][T13862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 221.107548][T13863] netlink: 'syz.1.2346': attribute type 4 has an invalid length. [ 221.115798][T13863] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2346'. [ 221.126974][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 221.188866][T13862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 221.348052][T13874] bond5: Removing last arp target with arp_interval on [ 221.451525][T13879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2348'. [ 221.495753][T13885] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 221.528200][T13885] bond11 (unregistering): Released all slaves [ 221.754173][T13906] netlink: 'syz.4.2355': attribute type 21 has an invalid length. [ 221.783495][T13906] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2355'. [ 221.886739][T13920] netlink: 'syz.2.2358': attribute type 1 has an invalid length. [ 221.897306][T13918] ip6_vti0: mtu less than device minimum [ 221.979382][T13915] bond4: (slave bridge5): making interface the new active one [ 222.004630][T13915] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 222.099703][T13932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2363'. [ 222.115605][T13935] netlink: 'syz.3.2362': attribute type 29 has an invalid length. [ 222.209558][T13940] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2364'. [ 222.479113][T13962] Cannot find del_set index 2 as target [ 222.814018][T13986] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 223.011480][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.151070][T13985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.358041][T14011] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 223.796185][T14041] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 223.917964][T14048] netlink: 'syz.0.2393': attribute type 2 has an invalid length. [ 224.099098][T14060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.159880][T14145] tipc: Enabled bearer , priority 0 [ 225.181006][T14145] tipc: Resetting bearer [ 225.243587][T14148] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 225.265357][T14148] dummy0: entered promiscuous mode [ 225.271345][T14148] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 225.361918][T14154] sctp: [Deprecated]: syz.3.2419 (pid 14154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.361918][T14154] Use struct sctp_sack_info instead [ 225.396430][ T5144] Bluetooth: hci0: command tx timeout [ 225.456623][T14163] netlink: 'syz.4.2421': attribute type 1 has an invalid length. [ 225.499511][T14164] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 225.509031][T14163] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 225.666858][T14182] __nla_validate_parse: 14 callbacks suppressed [ 225.666878][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'. [ 225.667840][T14179] bond6: Unable to set down delay as MII monitoring is disabled [ 225.700068][T14179] bond6 (unregistering): Released all slaves [ 225.732458][T14183] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 225.819690][T14189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2429'. [ 225.925532][T14197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2431'. [ 225.953206][T14200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2432'. [ 225.991140][T14200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2432'. [ 226.141120][T14208] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 226.154765][T14208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2435'. [ 226.155775][T14209] syzkaller0: entered promiscuous mode [ 226.169827][ T5955] tipc: Node number set to 4033245288 [ 226.177374][T14209] syzkaller0: entered allmulticast mode [ 226.227106][T14213] netlink: 'syz.1.2438': attribute type 10 has an invalid length. [ 227.536231][T14229] vxcan1 speed is unknown, defaulting to 1000 [ 227.720100][T14247] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 227.743050][T14250] "syz.2.2448" (14250) uses obsolete ecb(arc4) skcipher [ 227.779794][T14253] openvswitch: netlink: Tunnel attr 114 out of range max 16 [ 227.788824][T14254] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2447'. [ 227.878232][T14260] netlink: 'syz.3.2450': attribute type 11 has an invalid length. [ 227.886646][T14260] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2450'. [ 228.099486][T14274] syzkaller0: MTU too low for tipc bearer [ 228.106570][T14274] tipc: Disabling bearer [ 229.234601][T14326] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2470'. [ 229.253338][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2470'. [ 229.430288][T14335] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20001 [ 229.529673][T14340] netlink: 'syz.1.2473': attribute type 30 has an invalid length. [ 230.010254][T14382] netlink: 'syz.4.2485': attribute type 18 has an invalid length. [ 230.083349][T14385] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 230.224743][T14392] netlink: 'syz.0.2490': attribute type 1 has an invalid length. [ 230.262718][T14389] tipc: Can't bind to reserved service type 0 [ 230.374479][T14393] bond0: entered promiscuous mode [ 230.379895][T14393] !€ÿ: entered promiscuous mode [ 230.385688][T14393] bond_slave_1: entered promiscuous mode [ 230.391582][T14393] bridge0: entered promiscuous mode [ 230.416349][T14393] bond0: left promiscuous mode [ 230.421165][T14393] !€ÿ: left promiscuous mode [ 230.428016][T14393] bond_slave_1: left promiscuous mode [ 230.433921][T14393] bridge0: left promiscuous mode [ 230.609880][T14415] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 230.636686][T14418] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 230.646168][T14415] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 230.696921][T14415] netlink: 'syz.2.2493': attribute type 2 has an invalid length. [ 230.719696][T14417] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 230.923795][T14427] netlink: 'syz.2.2497': attribute type 14 has an invalid length. [ 230.931770][T14427] __nla_validate_parse: 8 callbacks suppressed [ 230.931781][T14427] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2497'. [ 230.996613][T14432] netlink: 'syz.4.2500': attribute type 4 has an invalid length. [ 231.172643][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 231.200501][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 231.246140][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 231.289674][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 231.372931][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 231.429445][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 231.486296][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 231.533121][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 231.542669][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'. [ 231.969176][T14472] tipc: Enabling of bearer rejected, already enabled [ 232.008960][T14472] netem: change failed [ 232.180671][T14492] netlink: 'syz.2.2515': attribute type 1 has an invalid length. [ 232.190404][T14488] tipc: MTU too low for tipc bearer [ 232.204914][T14493] pim6reg: entered allmulticast mode [ 232.246696][T14494] pim6reg: left allmulticast mode [ 232.295775][T14496] syzkaller0: MTU too low for tipc bearer [ 232.301982][T14496] tipc: Enabling of bearer rejected, failed to enable media [ 232.472149][T14513] tipc: Enabled bearer , priority 0 [ 232.518105][T14513] syzkaller0: entered promiscuous mode [ 232.529394][T14513] syzkaller0: entered allmulticast mode [ 232.610777][T14521] tipc: Enabled bearer , priority 10 [ 232.690305][T14514] tipc: Resetting bearer [ 232.738989][T14514] tipc: Disabling bearer [ 233.158282][T14548] tipc: Enabling of bearer rejected, failed to enable media [ 233.397852][T14557] netlink: 'syz.2.2533': attribute type 1 has an invalid length. [ 233.449213][T14557] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 233.469829][T14557] bond5 (unregistering): Released all slaves [ 233.694393][T14578] gretap0: entered promiscuous mode [ 233.720930][T14578] gretap0: left promiscuous mode [ 233.947162][T14590] block nbd0: server does not support multiple connections per device. [ 233.974341][T14590] block nbd0: shutting down sockets [ 234.103103][T14603] ªªªªªªÏ£ÉåËþ‚à: renamed from lo [ 234.454758][T14624] netlink: 'syz.2.2552': attribute type 10 has an invalid length. [ 234.620898][ T30] audit: type=1107 audit(1759845460.273:4): pid=14631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 234.903228][T14654] tipc: Enabled bearer , priority 0 [ 235.006632][T14670] syzkaller0: entered promiscuous mode [ 235.012144][T14670] syzkaller0: entered allmulticast mode [ 235.057952][T14659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.085560][T14666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.724662][ T8160] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.748414][ T8160] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.797296][ T8160] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.825447][ T8160] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.859233][T14725] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 236.047155][T14739] __nla_validate_parse: 74 callbacks suppressed [ 236.047173][T14739] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2581'. [ 236.156116][T14745] tipc: Bearer : already 2 bearers with priority 10 [ 236.187324][T14745] tipc: Bearer : trying with adjusted priority [ 236.209768][T14745] tipc: Enabled bearer , priority 9 [ 236.251465][T14745] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 236.375268][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2588'. [ 236.384302][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2588'. [ 236.780198][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2595'. [ 236.950029][T14808] netlink: 'syz.3.2600': attribute type 2 has an invalid length. [ 237.014156][T14812] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2602'. [ 237.171476][T14822] sock: sock_timestamping_bind_phc: sock not bind to device [ 237.427227][T14839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2609'. [ 237.447449][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2609'. [ 237.888874][T14870] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2617'. [ 238.441545][T14885] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 238.494643][T14885] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2620'. [ 238.511113][T14885] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2620'. [ 238.522998][T14899] netlink: 'syz.0.2623': attribute type 1 has an invalid length. [ 238.535777][T14904] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 238.915577][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 239.225685][T14945] Unsupported xt match [ 239.225704][T14945] unable to load match [ 239.547014][T14970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.726920][T14978] ip6gre2: entered allmulticast mode [ 240.295737][T15012] bond6: option miimon: invalid value (18446744073709551585) [ 240.303253][T15012] bond6: option miimon: allowed values 0 - 2147483647 [ 240.320070][T15012] bond6 (unregistering): Released all slaves [ 240.427609][T15025] nbd: must specify at least one socket [ 240.599248][T15035] netlink: 'syz.4.2668': attribute type 1 has an invalid length. [ 240.627126][T15035] netlink: 'syz.4.2668': attribute type 3 has an invalid length. [ 240.651955][T15035] netlink: 'syz.4.2668': attribute type 235 has an invalid length. [ 240.789058][T15054] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 240.807055][T15054] syzkaller0: entered promiscuous mode [ 240.813036][T15054] syzkaller0: entered allmulticast mode [ 240.823058][T15054] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 241.515968][T15114] __nla_validate_parse: 17 callbacks suppressed [ 241.515987][T15114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2686'. [ 241.561152][T15114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2686'. [ 241.587341][T15114] gretap1: entered promiscuous mode [ 241.592741][T15114] gretap1: entered allmulticast mode [ 241.891864][T15149] netlink: 'syz.4.2698': attribute type 2 has an invalid length. [ 241.901408][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 241.938532][T15150] netlink: 'syz.4.2698': attribute type 2 has an invalid length. [ 241.973989][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 242.020871][T15149] bond6 (unregistering): Released all slaves [ 242.049585][T15157] net veth1_virt_wifi .: renamed from virt_wifi0 [ 242.163745][T15160] bond10 (unregistering): Released all slaves [ 242.435673][T15186] tunl0: left promiscuous mode [ 242.468697][T15186] syzkaller0: left promiscuous mode [ 242.476809][T15186] veth3: left promiscuous mode [ 242.482070][T15186] veth5: left promiscuous mode [ 242.491917][T15186] gretap0: left promiscuous mode [ 242.500357][T15186] bridge2: left promiscuous mode [ 242.509855][T15194] netlink: 'syz.4.2711': attribute type 2 has an invalid length. [ 242.528826][T15194] : entered promiscuous mode [ 242.654510][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2714'. [ 242.762304][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2716'. [ 242.772555][T15208] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2716'. [ 242.783174][T15208] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2716'. [ 242.907341][T15216] netlink: 'syz.4.2719': attribute type 1 has an invalid length. [ 243.077410][T15228] netlink: 'syz.4.2723': attribute type 1 has an invalid length. [ 243.119271][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2725'. [ 243.161712][T15228] bond6: (slave gretap0): making interface the new active one [ 243.174339][T15228] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 243.540116][ T30] audit: type=1800 audit(1759845469.183:5): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 243.603332][ T30] audit: type=1800 audit(1759845469.213:6): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 243.659476][ T30] audit: type=1800 audit(1759845469.213:7): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 243.692853][ T30] audit: type=1800 audit(1759845469.213:8): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 243.715715][ T30] audit: type=1800 audit(1759845469.213:9): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 243.738056][ T30] audit: type=1800 audit(1759845469.223:10): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 243.761672][ T30] audit: type=1800 audit(1759845469.223:11): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 243.783217][ T30] audit: type=1800 audit(1759845469.223:12): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 243.806182][ T30] audit: type=1800 audit(1759845469.223:13): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 243.846047][ T30] audit: type=1800 audit(1759845469.223:14): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 244.043494][T15285] bond7: entered promiscuous mode [ 244.055477][T15285] bond7: entered allmulticast mode [ 244.061217][T15285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.071059][T15287] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2744'. [ 244.102630][T15287] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 244.249378][T15293] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 244.608045][T15332] netlink: 'syz.2.2756': attribute type 1 has an invalid length. [ 244.629734][T15329] tap0: tun_chr_ioctl cmd 1074025676 [ 244.635314][T15329] tap0: owner set to 0 [ 244.762474][T15339] netlink: 'syz.2.2756': attribute type 38 has an invalid length. [ 244.767027][T15338] tipc: Enabling of bearer rejected, already enabled [ 244.797127][T15332] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 244.810735][T15338] syzkaller0: entered promiscuous mode [ 245.986649][T15426] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 246.002207][T15428] Cannot find map_set index 33 as target [ 247.150946][T15490] __nla_validate_parse: 15 callbacks suppressed [ 247.150964][T15490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2797'. [ 247.269915][T15497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2799'. [ 247.296305][T15500] batadv0: entered allmulticast mode [ 247.531703][T15512] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 247.546002][T15516] netlink: 'syz.2.2804': attribute type 1 has an invalid length. [ 247.808162][T15522] netlink: 'syz.4.2807': attribute type 1 has an invalid length. [ 247.847485][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.858496][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.866086][T15513] veth15: entered promiscuous mode [ 247.873488][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.882924][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.892952][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.914877][T15523] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 248.253236][ T8138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.266544][ T8138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 248.278700][ T8138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.289181][ T8138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.427569][T15539] x_tables: duplicate underflow at hook 1 [ 248.451747][ T8138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.492169][ T8138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 248.524448][ T8138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.557059][ T8138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.630423][T15554] dvmrp1: left allmulticast mode [ 248.758748][T15563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2817'. [ 248.808856][ T8138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.836342][ T8138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 248.859588][ T8138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.882515][ T8138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.917451][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 248.940942][T15577] sctp: [Deprecated]: syz.0.2820 (pid 15577) Use of int in maxseg socket option. [ 248.940942][T15577] Use struct sctp_assoc_value instead [ 248.968799][T15570] netlink: 'syz.3.2819': attribute type 30 has an invalid length. [ 248.976688][T15577] sctp: [Deprecated]: syz.0.2820 (pid 15577) Use of int in maxseg socket option. [ 248.976688][T15577] Use struct sctp_assoc_value instead [ 248.977929][T15577] sctp: [Deprecated]: syz.0.2820 (pid 15577) Use of int in maxseg socket option. [ 248.977929][T15577] Use struct sctp_assoc_value instead [ 249.041397][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.057593][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.068324][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.093317][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.102811][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.169784][ T8138] batman_adv: batadv0: Removing interface: netdevsim0 [ 249.190135][ T8138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.207565][T15593] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2825'. [ 249.213278][ T8138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 249.249972][T15594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2825'. [ 249.253887][ T8138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.295143][ T8138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 249.406895][T15579] vxcan1 speed is unknown, defaulting to 1000 [ 249.434948][T15607] netlink: 'syz.2.2828': attribute type 11 has an invalid length. [ 249.483105][T15612] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2830'. [ 249.547206][T15617] tipc: Enabling of bearer rejected, already enabled [ 249.599178][ T8138] bridge_slave_0: left allmulticast mode [ 249.607581][ T8138] bridge_slave_0: left promiscuous mode [ 249.628207][T15623] syz.3.2832: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 249.631841][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.656447][T15623] CPU: 0 UID: 0 PID: 15623 Comm: syz.3.2832 Not tainted syzkaller #0 PREEMPT(full) [ 249.656476][T15623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.656501][T15623] Call Trace: [ 249.656509][T15623] [ 249.656519][T15623] dump_stack_lvl+0x189/0x250 [ 249.656549][T15623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.656568][T15623] ? __pfx__printk+0x10/0x10 [ 249.656587][T15623] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.656609][T15623] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.656630][T15623] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 249.656654][T15623] warn_alloc+0x214/0x310 [ 249.656676][T15623] ? stack_depot_save_flags+0x40/0x860 [ 249.656698][T15623] ? __pfx_warn_alloc+0x10/0x10 [ 249.656720][T15623] ? kasan_save_track+0x4f/0x80 [ 249.656739][T15623] ? xskq_create+0x56/0x170 [ 249.656760][T15623] ? xsk_init_queue+0xb0/0x110 [ 249.656780][T15623] ? xsk_setsockopt+0x4dc/0x8d0 [ 249.656798][T15623] ? do_sock_setsockopt+0x179/0x1b0 [ 249.656818][T15623] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 249.656838][T15623] ? do_syscall_64+0xfa/0xfa0 [ 249.656860][T15623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.656887][T15623] __vmalloc_node_range_noprof+0x125/0x12f0 [ 249.656941][T15623] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.656968][T15623] ? __kasan_kmalloc+0x93/0xb0 [ 249.656990][T15623] vmalloc_user_noprof+0xad/0xf0 [ 249.657009][T15623] ? xskq_create+0xbf/0x170 [ 249.657050][T15623] xskq_create+0xbf/0x170 [ 249.657076][T15623] xsk_init_queue+0xb0/0x110 [ 249.657099][T15623] xsk_setsockopt+0x4dc/0x8d0 [ 249.657123][T15623] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.657147][T15623] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.657170][T15623] ? aa_sock_opt_perm+0xff/0x1b0 [ 249.657195][T15623] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 249.657216][T15623] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.657240][T15623] do_sock_setsockopt+0x179/0x1b0 [ 249.657265][T15623] __x64_sys_setsockopt+0x13f/0x1b0 [ 249.657292][T15623] do_syscall_64+0xfa/0xfa0 [ 249.657315][T15623] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.657337][T15623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.657353][T15623] ? clear_bhb_loop+0x60/0xb0 [ 249.657374][T15623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.657390][T15623] RIP: 0033:0x7fe69338eec9 [ 249.657407][T15623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.657423][T15623] RSP: 002b:00007fe6942c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.657443][T15623] RAX: ffffffffffffffda RBX: 00007fe6935e5fa0 RCX: 00007fe69338eec9 [ 249.657458][T15623] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 249.657469][T15623] RBP: 00007fe693411f91 R08: 0000000000000004 R09: 0000000000000000 [ 249.657481][T15623] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.657493][T15623] R13: 00007fe6935e6038 R14: 00007fe6935e5fa0 R15: 00007ffe802a46f8 [ 249.657527][T15623] [ 249.657564][T15623] Mem-Info: [ 249.725989][T15626] netlink: 'syz.4.2830': attribute type 1 has an invalid length. [ 249.732402][T15623] active_anon:4626 inactive_anon:0 isolated_anon:0 [ 249.732402][T15623] active_file:3142 inactive_file:39947 isolated_file:0 [ 249.732402][T15623] unevictable:768 dirty:77 writeback:0 [ 249.732402][T15623] slab_reclaimable:12414 slab_unreclaimable:166194 [ 249.732402][T15623] mapped:31185 shmem:1405 pagetables:1012 [ 249.732402][T15623] sec_pagetables:0 bounce:0 [ 249.732402][T15623] kernel_misc_reclaimable:0 [ 249.732402][T15623] free:1255952 free_pcp:14375 free_cma:0 [ 249.800077][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2830'. [ 249.803376][T15623] Node 0 active_anon:18504kB inactive_anon:0kB active_file:12568kB inactive_file:159588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128840kB dirty:308kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14188kB pagetables:3880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.059557][T15623] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.131087][T15623] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.177452][T15623] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 250.183550][T15623] Node 0 DMA32 free:1117616kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18276kB inactive_anon:0kB active_file:12568kB inactive_file:157764kB unevictable:1536kB writepending:308kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:37360kB local_pcp:28204kB free_cma:0kB [ 250.242535][T15623] lowmem_reserve[]: 0 0 1 1 1 [ 250.253128][T15623] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 250.302310][T15623] lowmem_reserve[]: 0 0 0 0 0 [ 250.311123][T15623] Node 1 Normal free:3890796kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19924kB local_pcp:11428kB free_cma:0kB [ 250.347563][T15623] lowmem_reserve[]: 0 0 0 0 0 [ 250.352396][T15623] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.365438][T15623] Node 0 DMA32: 399*4kB (ME) 321*8kB (ME) 141*16kB (UME) 73*32kB (UME) 608*64kB (UME) 155*128kB (UME) 73*256kB (UME) 36*512kB (UME) 19*1024kB (UME) 7*2048kB (UM) 239*4096kB (UM) = 1117364kB [ 250.384626][T15623] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 250.416882][T15623] Node 1 Normal: 197*4kB (UE) 57*8kB (UME) 47*16kB (UME) 71*32kB (UME) 31*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3890796kB [ 250.437677][T15623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.438116][ T8138] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 250.447923][T15623] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.467792][T15623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.478055][T15623] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.488411][T15623] 44441 total pagecache pages [ 250.493466][T15623] 0 pages in swap cache [ 250.497804][T15623] Free swap = 124996kB [ 250.502417][T15623] Total swap = 124996kB [ 250.534071][T15623] 2097051 pages RAM [ 250.559321][T15623] 0 pages HighMem/MovableOnly [ 250.564044][T15623] 424452 pages reserved [ 250.583104][T15623] 0 pages cma reserved [ 250.717785][ T8138] bond5 (unregistering): (slave geneve3): Releasing backup interface [ 250.816091][ T8138] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 251.155202][ T5144] Bluetooth: hci4: command tx timeout [ 251.278962][ T8138] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 251.289034][ T8138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.300721][ T8138] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 251.310067][ T8138] team0: left promiscuous mode [ 251.316592][ T8138] team_slave_0: left promiscuous mode [ 251.322276][ T8138] team_slave_1: left promiscuous mode [ 251.327795][ T8138] !: left promiscuous mode [ 251.332548][ T8138] veth0_virt_wifi: left promiscuous mode [ 251.339455][ T8138] bond0 (unregistering): Released all slaves [ 251.356047][ T8138] bond1 (unregistering): Released all slaves [ 251.368759][ T8138] bond2 (unregistering): Released all slaves [ 251.477677][ T8138] bond3 (unregistering): Released all slaves [ 251.492490][ T8138] bond4 (unregistering): Released all slaves [ 251.504559][ T8138] bond5 (unregistering): Released all slaves [ 251.516922][ T8138] bond6 (unregistering): Released all slaves [ 251.532854][ T8138] bond7 (unregistering): Released all slaves [ 251.548655][ T8138] bond8 (unregistering): Released all slaves [ 251.640293][ T8138] bond9 (unregistering): Released all slaves [ 251.652568][ T8138] bond10 (unregistering): Released all slaves [ 251.665106][ T8138] bond11 (unregistering): Released all slaves [ 251.677834][ T8138] bond12 (unregistering): Released all slaves [ 251.721433][T15626] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.753776][T15659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2838'. [ 251.856837][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'. [ 251.888977][ T8138] tipc: Left network mode [ 252.178629][T15674] batadv_slave_1: entered promiscuous mode [ 252.187217][T15674] batadv_slave_1: entered allmulticast mode [ 252.438534][T15701] __nla_validate_parse: 1 callbacks suppressed [ 252.438550][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2848'. [ 252.726050][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2853'. [ 252.753461][T15719] netlink: 'syz.3.2853': attribute type 7 has an invalid length. [ 252.796865][T15719] netlink: 'syz.3.2853': attribute type 8 has an invalid length. [ 252.819769][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 252.867018][T15579] chnl_net:caif_netlink_parms(): no params data found [ 252.998903][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2855'. [ 253.176379][ T8138] hsr_slave_0: left promiscuous mode [ 253.182444][ T8138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.212460][ T8138] veth1_macvtap: left promiscuous mode [ 253.219031][ T8138] veth0_macvtap: left promiscuous mode [ 253.235931][ T5144] Bluetooth: hci4: command tx timeout [ 253.312757][T15742] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 253.336477][ T8138] pimreg (unregistering): left allmulticast mode [ 253.421928][ T5909] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 253.438103][ T5909] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 253.466271][ T5909] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 253.604020][T15756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2863'. [ 253.626131][ T8138] team0 (unregistering): Port device veth0_virt_wifi removed [ 253.760277][ T8138] team0 (unregistering): Port device team_slave_1 removed [ 253.868772][ T8138] team0 (unregistering): Port device team_slave_0 removed [ 254.046849][ T8138] team0 (unregistering): Port device 0! removed [ 254.341666][T15773] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2865'. [ 254.378855][T15579] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.397467][T15579] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.405889][T15579] bridge_slave_0: entered allmulticast mode [ 254.414000][T15579] bridge_slave_0: entered promiscuous mode [ 254.432853][T15579] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.444327][T15579] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.475814][T15579] bridge_slave_1: entered allmulticast mode [ 254.484853][T15579] bridge_slave_1: entered promiscuous mode [ 254.576974][T15579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.614514][T15579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.788587][T15579] team0: Port device team_slave_0 added [ 254.811934][T15579] team0: Port device team_slave_1 added [ 254.872895][T15805] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2873'. [ 254.887223][ T8138] IPVS: stop unused estimator thread 0... [ 254.917758][T15579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.924734][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.966330][T15579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.979077][T15579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.986543][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.013356][T15579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.016848][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2876'. [ 255.148269][T15579] hsr_slave_0: entered promiscuous mode [ 255.165315][T15579] hsr_slave_1: entered promiscuous mode [ 255.177266][T15579] debugfs: 'hsr0' already exists in 'hsr' [ 255.191163][T15579] Cannot create hsr debugfs directory [ 255.315275][ T5144] Bluetooth: hci4: command tx timeout [ 255.504389][T15839] netlink: 'syz.2.2887': attribute type 16 has an invalid length. [ 255.519882][T15839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2887'. [ 255.654133][T15852] netlink: 'syz.2.2890': attribute type 1 has an invalid length. [ 255.682078][T15852] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2890'. [ 255.905728][T15865] delete_channel: no stack [ 256.181156][T15886] vxcan1 speed is unknown, defaulting to 1000 [ 256.264410][T15579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.328191][T15579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.388635][T15579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.388969][T15901] netlink: 'syz.2.2900': attribute type 10 has an invalid length. [ 256.467380][T15579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.685227][T15920] netlink: 'syz.2.2905': attribute type 23 has an invalid length. [ 257.071711][T15579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.097657][T15943] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 257.098396][T15934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.138795][T15579] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.221568][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.228761][ T8160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.338613][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.346646][ T8147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.415171][ T5144] Bluetooth: hci4: command tx timeout [ 257.534462][T15963] syzkaller1: entered promiscuous mode [ 257.564971][T15963] syzkaller1: entered allmulticast mode [ 257.946137][T15987] netlink: 'syz.3.2921': attribute type 10 has an invalid length. [ 257.993031][T15987] bridge_slave_1: entered promiscuous mode [ 258.036186][T15988] __nla_validate_parse: 5 callbacks suppressed [ 258.036205][T15988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2922'. [ 258.099880][T15579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.184112][T15579] veth0_vlan: entered promiscuous mode [ 258.215282][T15579] veth1_vlan: entered promiscuous mode [ 258.268244][T15579] veth0_macvtap: entered promiscuous mode [ 258.282492][T15579] veth1_macvtap: entered promiscuous mode [ 258.308746][T15579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.328720][T15579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.362630][ T8151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.385428][ T8151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.404320][ T8151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.420147][T16011] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 258.429947][ T8151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.573777][ T8151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.592213][ T8151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.637922][ T8147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.651067][ T8147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.277789][T16043] vlan3: entered promiscuous mode [ 259.286835][T16043] bond0: (slave vlan3): Opening slave failed [ 259.502998][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 259.605987][T16051] veth9: entered allmulticast mode [ 259.819128][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2944'. [ 259.851093][T16066] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 260.045898][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.061951][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.076663][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.096555][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.110022][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.153495][T16078] vxcan1 speed is unknown, defaulting to 1000 [ 260.238999][T16086] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 260.261210][T16085] tipc: Enabling of bearer rejected, failed to enable media [ 260.281593][T16086] syzkaller0: entered promiscuous mode [ 260.295275][T16086] syzkaller0: entered allmulticast mode [ 260.718789][T16113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.830842][T16113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.863070][T16113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2956'. [ 260.887803][T16113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2956'. [ 261.038706][T16138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2961'. [ 261.063974][T16078] chnl_net:caif_netlink_parms(): no params data found [ 261.104737][T16140] IPVS: length: 208 != 24 [ 261.202837][ T9] IPVS: starting estimator thread 0... [ 261.208522][T16142] netlink: 'syz.3.2962': attribute type 4 has an invalid length. [ 261.305329][T16147] IPVS: using max 26 ests per chain, 62400 per kthread [ 261.387118][T16161] netlink: 556 bytes leftover after parsing attributes in process `syz.0.2969'. [ 261.415573][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 261.487135][T16078] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.494533][T16078] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.514826][T16078] bridge_slave_0: entered allmulticast mode [ 261.539723][T16078] bridge_slave_0: entered promiscuous mode [ 261.552077][T16166] raw_sendmsg: syz.4.2970 forgot to set AF_INET. Fix it! [ 261.574899][T16174] tipc: Enabling of bearer rejected, already enabled [ 261.584064][T16078] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.615205][T16078] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.623628][T16078] bridge_slave_1: entered allmulticast mode [ 261.632983][T16078] bridge_slave_1: entered promiscuous mode [ 261.732859][T16187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.761333][T16078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.773487][T16187] netlink: 'syz.4.2975': attribute type 4 has an invalid length. [ 261.781596][T16187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2975'. [ 261.788688][T16186] syzkaller0: entered promiscuous mode [ 261.798922][T16186] syzkaller0: entered allmulticast mode [ 261.890692][T16078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.046212][T16078] team0: Port device team_slave_0 added [ 262.092389][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2982'. [ 262.132886][T16078] team0: Port device team_slave_1 added [ 262.202159][ T5830] Bluetooth: hci2: command tx timeout [ 262.246931][T16078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.266249][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.342275][T16078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.357659][T16078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.365558][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.392154][T16078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.521892][T16228] veth11: entered allmulticast mode [ 262.539409][T16078] hsr_slave_0: entered promiscuous mode [ 262.578772][T16078] hsr_slave_1: entered promiscuous mode [ 262.590434][T16233] xt_NFQUEUE: number of total queues is 0 [ 262.599254][T16078] debugfs: 'hsr0' already exists in 'hsr' [ 262.615411][T16078] Cannot create hsr debugfs directory [ 263.038218][T16252] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 263.242201][T16078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.256041][T16078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.639296][T16257] __nla_validate_parse: 10 callbacks suppressed [ 263.639318][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3000'. [ 263.773877][T16078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.780434][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3002'. [ 263.785762][T16078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.866868][T16267] netlink: 'syz.3.3003': attribute type 8 has an invalid length. [ 263.900060][T16078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.912204][T16078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.923826][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 263.934425][T16276] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3006'. [ 263.965360][T16271] bridge0: port 3(dummy0) entered disabled state [ 263.987649][T16271] dummy0 (unregistering): left allmulticast mode [ 263.994265][T16271] dummy0 (unregistering): left promiscuous mode [ 264.003006][T16271] bridge0: port 3(dummy0) entered disabled state [ 264.021785][T16264] netlink: 'syz.4.3004': attribute type 5 has an invalid length. [ 264.022616][T16274] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 264.041755][T16282] nbd: must specify a device to reconfigure [ 264.125251][T16288] siw: device registration error -23 [ 264.131209][T16289] siw: device registration error -23 [ 264.177731][T16288] sctp: [Deprecated]: syz.3.3008 (pid 16288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.177731][T16288] Use struct sctp_sack_info instead [ 264.275257][ T5830] Bluetooth: hci2: command tx timeout [ 264.453371][T16078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.476068][T16078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.497192][T16078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.512946][T16078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.632717][T16317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3017'. [ 264.663118][T16078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.690329][T16320] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 264.715448][T16078] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.779285][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.786529][ T8138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.827672][T16323] bond10: (slave gretap4): making interface the new active one [ 264.850335][T16323] bond10: (slave gretap4): Enslaving as an active interface with an up link [ 264.894298][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.901604][ T8147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.915975][T16329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3019'. [ 265.002703][T16332] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 265.017363][T16332] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.027410][T16332] gretap1: entered promiscuous mode [ 265.032634][T16332] gretap1: entered allmulticast mode [ 265.186484][T16342] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 265.651943][T16364] sctp: [Deprecated]: syz.0.3028 (pid 16364) Use of int in maxseg socket option. [ 265.651943][T16364] Use struct sctp_assoc_value instead [ 265.763516][T16364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3028'. [ 265.790384][T16368] bond8: option mode: invalid value (133) [ 265.802647][T16368] bond8 (unregistering): Released all slaves [ 265.839618][T16078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.987257][T16078] veth0_vlan: entered promiscuous mode [ 266.027798][T16078] veth1_vlan: entered promiscuous mode [ 266.157906][T16078] veth0_macvtap: entered promiscuous mode [ 266.188678][T16078] veth1_macvtap: entered promiscuous mode [ 266.209561][T16385] tipc: Started in network mode [ 266.215283][T16385] tipc: Node identity eac53a7ee29a, cluster identity 4711 [ 266.222673][T16385] tipc: Enabled bearer , priority 0 [ 266.247508][T16385] syzkaller0: entered promiscuous mode [ 266.256537][T16385] syzkaller0: entered allmulticast mode [ 266.308168][T16078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.328641][T16078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.350516][ T8151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.365073][ T5830] Bluetooth: hci2: command tx timeout [ 266.371394][ T8151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.382902][T16394] tipc: Resetting bearer [ 266.397807][ T8151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.415266][ T8151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.455794][T16394] pim6reg527: entered allmulticast mode [ 266.625828][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.648975][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.715586][T16384] tipc: Resetting bearer [ 266.756876][T16384] tipc: Disabling bearer [ 266.805377][ T8138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.864915][ T8138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.880370][T16401] vxcan1 speed is unknown, defaulting to 1000 [ 267.430244][T16431] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 267.461880][T16431] syzkaller0: entered promiscuous mode [ 267.484581][T16431] syzkaller0: entered allmulticast mode [ 267.723347][T16439] vlan2: entered promiscuous mode [ 267.735262][T16439] vlan2: entered allmulticast mode [ 267.746247][T16439] hsr_slave_1: entered allmulticast mode [ 267.838264][T16440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.853457][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.864395][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.873728][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.876321][T16440] bond0: (slave rose0): Enslaving as an active interface with an up link [ 267.887046][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.898179][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.941896][T16443] ÿÿÿÿÿÿ: renamed from bond_slave_0 (while UP) [ 267.988182][T16451] netlink: 'syz.1.3053': attribute type 10 has an invalid length. [ 268.297098][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 268.390707][T16467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3056'. [ 268.445184][ T5144] Bluetooth: hci2: command tx timeout [ 268.609229][T16473] xt_l2tp: missing protocol rule (udp|l2tpip) [ 268.627974][T16473] netlink: 'syz.2.3058': attribute type 21 has an invalid length. [ 268.763689][T16473] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 268.818583][T16473] bond1 (unregistering): Released all slaves [ 268.926415][T16491] netlink: 'syz.0.3062': attribute type 1 has an invalid length. [ 268.955510][T16491] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3062'. [ 269.137282][T16502] C: renamed from team_slave_0 (while UP) [ 269.160571][T16502] netlink: 'syz.2.3064': attribute type 1 has an invalid length. [ 269.178920][T16502] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 269.226981][T16506] netlink: 'syz.2.3064': attribute type 1 has an invalid length. [ 269.234835][T16506] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 269.369209][T16509] tipc: Enabled bearer , priority 0 [ 269.391050][T16509] syzkaller0: entered promiscuous mode [ 269.403204][T16509] syzkaller0: entered allmulticast mode [ 269.455693][T16513] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 269.464151][T16512] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 269.543612][T16509] syzkaller0: mtu less than device minimum [ 269.572391][T16509] IPVS: Unknown mcast interface: vcan0 [ 269.581625][T16527] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3069'. [ 269.609083][T16509] ªªªªªª: renamed from lo (while UP) [ 269.627839][T16508] tipc: Resetting bearer [ 269.681480][T16508] tipc: Disabling bearer [ 269.730972][T16537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3071'. [ 269.765203][T16537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3071'. [ 269.956932][ T5144] Bluetooth: hci0: command tx timeout [ 270.031714][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'. [ 270.053433][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'. [ 270.131126][T16444] chnl_net:caif_netlink_parms(): no params data found [ 270.243111][T16571] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 270.264002][T16571] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 270.307413][T16572] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 270.580641][T16444] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.618235][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.653804][T16444] bridge_slave_0: entered allmulticast mode [ 270.677713][T16444] bridge_slave_0: entered promiscuous mode [ 270.714721][T16589] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.732721][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 270.743532][T16589] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.750912][T16589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.780593][T16444] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.816368][T16444] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.833502][T16444] bridge_slave_1: entered allmulticast mode [ 270.865676][T16444] bridge_slave_1: entered promiscuous mode [ 270.941149][T16615] tunl0: entered promiscuous mode [ 270.960448][T16615] netlink: 'syz.0.3087': attribute type 3 has an invalid length. [ 270.970967][T16615] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3087'. [ 271.001182][T16616] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 271.102999][T16615] netlink: 'syz.0.3087': attribute type 3 has an invalid length. [ 271.114313][T16615] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3087'. [ 271.124979][T16624] netlink: 'syz.1.3089': attribute type 3 has an invalid length. [ 271.138062][T16444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.170831][T16444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.291522][T16632] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 271.309895][T16444] team0: Port device team_slave_0 added [ 271.338183][T16444] team0: Port device team_slave_1 added [ 271.441114][T16444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.450199][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.480805][T16444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.505999][T16444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.512982][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.563335][T16444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.753490][T16444] hsr_slave_0: entered promiscuous mode [ 271.774063][T16444] hsr_slave_1: entered promiscuous mode [ 271.786599][T16444] debugfs: 'hsr0' already exists in 'hsr' [ 271.792850][T16444] Cannot create hsr debugfs directory [ 271.821572][T16658] netlink: 'syz.0.3097': attribute type 10 has an invalid length. [ 271.842914][T16658] veth1_macvtap: left promiscuous mode [ 272.091227][T16444] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.102993][T16444] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.197776][T16444] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.213023][T16444] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.282224][T16444] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.315153][T16444] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.384219][T16444] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.410884][T16444] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.501545][T16693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3110'. [ 272.642026][T16444] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.671120][T16444] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.700556][T16444] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.723630][T16444] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.849416][T16716] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.016849][T16701] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.024678][T16701] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.297279][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.314801][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.619399][T16701] vlan2: left promiscuous mode [ 273.624586][T16701] vlan2: left allmulticast mode [ 273.631722][T16701] hsr_slave_1: left allmulticast mode [ 273.660320][T16751] 8021q: VLANs not supported on ip6_vti0 [ 273.706710][ T43] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.724623][ T43] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.772342][ T43] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.798140][ T43] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.961029][T16769] Bluetooth: MGMT ver 1.23 [ 274.156365][T16783] validate_nla: 2 callbacks suppressed [ 274.156385][T16783] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 274.185782][ T5835] IPVS: starting estimator thread 0... [ 274.199451][T16773] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 274.286150][T16785] IPVS: using max 33 ests per chain, 79200 per kthread [ 274.303621][T16786] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 274.319186][T16786] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 274.330571][T16786] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 274.366460][T16797] __nla_validate_parse: 7 callbacks suppressed [ 274.366478][T16797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3132'. [ 274.389272][T16444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.422833][T16786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3131'. [ 274.447388][T16444] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.501131][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.508367][ T8143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.534712][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.541963][ T8143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.700567][T16809] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3137'. [ 275.037841][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 275.068386][T16444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.212487][T16832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.256815][T16832] netlink: 'syz.2.3143': attribute type 10 has an invalid length. [ 275.281623][T16832] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 275.306970][T16444] veth0_vlan: entered promiscuous mode [ 275.313688][T16832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3143'. [ 275.327598][T16444] veth1_vlan: entered promiscuous mode [ 275.352461][T16832] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 275.374292][T16832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3143'. [ 275.414434][T16832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.430503][T16444] veth0_macvtap: entered promiscuous mode [ 275.463346][T16444] veth1_macvtap: entered promiscuous mode [ 275.510931][T16444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.530660][T16444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.561279][ T8147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.588818][ T8147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.618980][ T8147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.647551][ T8147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.700191][ T8143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.709634][ T8143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.754506][ T8147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.763189][ T8147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.800115][T16855] netlink: 'syz.1.3150': attribute type 9 has an invalid length. [ 275.809496][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3150'. [ 275.829322][T16855] netlink: 'syz.1.3150': attribute type 9 has an invalid length. [ 275.829669][ T8138] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.837483][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3150'. [ 275.866070][ T8138] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.889859][ T8138] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.903346][ T8138] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.098378][T16867] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.3154'. [ 276.132634][T16867] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 276.260994][T16869] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 276.299197][T16873] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.766730][T16885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3159'. [ 276.826719][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.844782][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.854120][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.864175][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.872057][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.922387][T16892] vxcan1 speed is unknown, defaulting to 1000 [ 277.048308][T16896] sit1: entered promiscuous mode [ 277.053292][T16896] sit1: entered allmulticast mode [ 277.244959][T16912] team_slave_0: entered promiscuous mode [ 277.250723][T16912] team_slave_1: entered promiscuous mode [ 277.648687][T16892] chnl_net:caif_netlink_parms(): no params data found [ 277.802447][T16948] netlink: 'syz.3.3176': attribute type 1 has an invalid length. [ 277.872552][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.890363][T16892] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.900235][T16892] bridge_slave_0: entered allmulticast mode [ 277.908159][T16892] bridge_slave_0: entered promiscuous mode [ 277.917657][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.925179][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.933512][T16892] bridge_slave_1: entered allmulticast mode [ 277.950264][T16892] bridge_slave_1: entered promiscuous mode [ 278.022161][T16965] netlink: 'syz.2.3181': attribute type 1 has an invalid length. [ 278.034040][T16892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.057077][T16892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.163719][T16892] team0: Port device team_slave_0 added [ 278.188006][T16892] team0: Port device team_slave_1 added [ 278.321911][T16892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.340633][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.370960][T16892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.385920][T16892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.392979][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.443623][T16892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.547831][T16892] hsr_slave_0: entered promiscuous mode [ 278.561746][T16892] hsr_slave_1: entered promiscuous mode [ 278.574160][T16892] debugfs: 'hsr0' already exists in 'hsr' [ 278.580477][T16892] Cannot create hsr debugfs directory [ 278.916096][ T5144] Bluetooth: hci1: command tx timeout [ 279.083255][T17017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.128481][T16892] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.159095][T17024] x_tables: duplicate underflow at hook 1 [ 279.160114][T16892] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.370581][T16892] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.392498][T16892] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.483909][T16892] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.518246][T16892] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.678963][T16892] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.683644][T17055] netlink: 'syz.3.3205': attribute type 21 has an invalid length. [ 279.704418][T16892] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.721838][T17055] __nla_validate_parse: 5 callbacks suppressed [ 279.721855][T17055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3205'. [ 279.813379][T17064] netlink: 'syz.3.3207': attribute type 10 has an invalid length. [ 279.841929][T17064] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.849730][T17064] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.864196][T17064] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.871455][T17064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.879013][T17064] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.886299][T17064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.902957][T17064] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.068997][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 280.079694][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3212'. [ 280.151108][T17079] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 280.163314][T17079] netlink: 'syz.3.3214': attribute type 21 has an invalid length. [ 280.171446][T17079] netlink: 'syz.3.3214': attribute type 6 has an invalid length. [ 280.179788][T17079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3214'. [ 280.504060][T17081] netlink: 'syz.4.3215': attribute type 1 has an invalid length. [ 280.504586][T16892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.512876][T17081] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3215'. [ 280.540834][T17081] netlink: 'syz.4.3215': attribute type 1 has an invalid length. [ 280.558993][T16892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.590745][T16892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.627162][T16892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.685737][T17094] batadv_slave_0: entered promiscuous mode [ 280.712804][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 280.749965][T17098] tipc: Bearer : already 2 bearers with priority 10 [ 280.765119][T17098] tipc: Bearer : trying with adjusted priority [ 280.780100][T17098] tipc: Enabled bearer , priority 9 [ 280.787552][T17093] batadv_slave_0: left promiscuous mode [ 280.857403][T17115] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3223'. [ 280.996372][ T5144] Bluetooth: hci1: command tx timeout [ 281.012917][T16892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.068816][T16892] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.084697][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.092167][ T8138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.117303][T17121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3224'. [ 281.152397][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.159645][ T8160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.224288][T17133] netlink: 'syz.1.3228': attribute type 1 has an invalid length. [ 281.243692][T17134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3229'. [ 281.264606][T16892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.378367][T17143] veth0: entered promiscuous mode [ 281.393265][T17143] netlink: 'syz.4.3231': attribute type 1 has an invalid length. [ 281.448487][T17147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3231'. [ 281.464447][T17140] veth0: left promiscuous mode [ 281.654241][T16892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.735999][T16892] veth0_vlan: entered promiscuous mode [ 281.782428][T16892] veth1_vlan: entered promiscuous mode [ 281.884566][T16892] veth0_macvtap: entered promiscuous mode [ 281.924089][T16892] veth1_macvtap: entered promiscuous mode [ 281.999881][T16892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.064525][T16892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.093527][T17173] tap0: tun_chr_ioctl cmd 1074025677 [ 282.099131][T17173] tap0: linktype set to 65534 [ 282.151146][ T8143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.180728][ T8143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.225161][ T8143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.244797][ T8143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.353880][T17188] netlink: 'syz.4.3241': attribute type 2 has an invalid length. [ 283.075273][ T5144] Bluetooth: hci1: command tx timeout [ 283.547071][T17230] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.553357][T17230] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 283.569834][T17230] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 283.576052][T17230] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 283.587549][T17230] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.593619][T17230] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 283.634039][T17230] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.640417][T17230] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 286.688689][ T8147] bond1 (unregistering): (slave gretap2): Releasing active interface [ 286.709439][ T8147] bond3 (unregistering): (slave gretap3): Releasing active interface [ 286.728120][ T8147] bond10 (unregistering): (slave gretap4): Releasing active interface [ 286.922783][ T8147] bond0 (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface [ 286.932479][ T8147] bond0 (unregistering): Released all slaves [ 287.025471][ T8147] bond1 (unregistering): Released all slaves [ 287.038538][ T8147] bond2 (unregistering): Released all slaves [ 287.132656][ T8147] bond3 (unregistering): Released all slaves [ 287.145539][ T8147] bond4 (unregistering): Released all slaves [ 287.241010][ T8147] bond5 (unregistering): (slave veth7): Releasing active interface [ 287.250740][ T8147] bond5 (unregistering): Released all slaves [ 287.343874][ T8147] bond6 (unregistering): Released all slaves [ 287.428929][ T8147] bond7 (unregistering): Released all slaves [ 287.441223][ T8147] bond8 (unregistering): Released all slaves [ 287.453755][ T8147] bond9 (unregistering): Released all slaves [ 287.466085][ T8147] bond10 (unregistering): Released all slaves [ 287.626217][ T8147] tipc: Disabling bearer [ 287.638928][ T8147] tipc: Disabling bearer [ 287.646714][ T8147] tipc: Disabling bearer [ 287.652208][ T8147] tipc: Left network mode [ 435.555600][ T31] INFO: task kworker/u8:17:8147 blocked for more than 143 seconds. [ 435.563540][ T31] Not tainted syzkaller #0 [ 435.568822][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.577673][ T31] task:kworker/u8:17 state:D stack:24200 pid:8147 tgid:8147 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 435.589811][ T31] Workqueue: netns cleanup_net [ 435.594599][ T31] Call Trace: [ 435.598036][ T31] [ 435.600978][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 435.605583][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.610633][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.615545][ T31] ? __pfx___schedule+0x10/0x10 [ 435.620419][ T31] ? schedule+0x91/0x360 [ 435.624673][ T31] schedule+0x165/0x360 [ 435.629203][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.634679][ T31] __mutex_lock+0x7e6/0x1350 [ 435.675317][ T31] ? __mutex_lock+0x5bb/0x1350 [ 435.680172][ T31] ? rfkill_unregister+0xc8/0x220 [ 435.701535][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.706746][ T31] ? __pfx_device_del+0x10/0x10 [ 435.711621][ T31] rfkill_unregister+0xc8/0x220 [ 435.716672][ T31] wiphy_unregister+0x238/0xae0 [ 435.721550][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 435.727475][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 435.732842][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 435.738189][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.743403][ T31] ? kfree+0x18e/0x440 [ 435.747569][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 435.753034][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 435.758601][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 435.764683][ T31] hwsim_exit_net+0x584/0x640 [ 435.769383][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 435.774573][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 435.780418][ T31] ops_undo_list+0x49a/0x990 [ 435.785300][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 435.790418][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 435.796318][ T31] cleanup_net+0x4d8/0x820 [ 435.800767][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 435.805864][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.811064][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 435.816818][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 435.822554][ T31] process_scheduled_works+0xade/0x17b0 [ 435.828190][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 435.834167][ T31] worker_thread+0x8a0/0xda0 [ 435.838775][ T31] kthread+0x711/0x8a0 [ 435.842828][ T31] ? __pfx_worker_thread+0x10/0x10 [ 435.848026][ T31] ? __pfx_kthread+0x10/0x10 [ 435.852701][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.857981][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.863561][ T31] ? __pfx_kthread+0x10/0x10 [ 435.868410][ T31] ret_from_fork+0x4b9/0x870 [ 435.873079][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 435.878479][ T31] ? __switch_to_asm+0x39/0x70 [ 435.883259][ T31] ? __switch_to_asm+0x33/0x70 [ 435.888076][ T31] ? __pfx_kthread+0x10/0x10 [ 435.892674][ T31] ret_from_fork_asm+0x1a/0x30 [ 435.897512][ T31] [ 435.900564][ T31] INFO: task kworker/0:13:16737 blocked for more than 143 seconds. [ 435.908688][ T31] Not tainted syzkaller #0 [ 435.913692][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.922373][ T31] task:kworker/0:13 state:D stack:23016 pid:16737 tgid:16737 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 435.934399][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 435.941189][ T31] Call Trace: [ 435.944479][ T31] [ 435.947458][ T31] __schedule+0x1798/0x4cc0 [ 435.951961][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 435.957400][ T31] ? __pfx___schedule+0x10/0x10 [ 435.962308][ T31] ? schedule+0x91/0x360 [ 435.966581][ T31] schedule+0x165/0x360 [ 435.970746][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.976334][ T31] __mutex_lock+0x7e6/0x1350 [ 435.980945][ T31] ? __mutex_lock+0x5bb/0x1350 [ 435.985829][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 435.992086][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.997233][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 436.002960][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 436.008722][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 436.014837][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 436.020659][ T31] process_scheduled_works+0xade/0x17b0 [ 436.026270][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 436.032257][ T31] worker_thread+0x8a0/0xda0 [ 436.037041][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 436.043404][ T31] ? __kthread_parkme+0x7b/0x200 [ 436.048369][ T31] kthread+0x711/0x8a0 [ 436.052452][ T31] ? __pfx_worker_thread+0x10/0x10 [ 436.057601][ T31] ? __pfx_kthread+0x10/0x10 [ 436.062288][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.067623][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.072835][ T31] ? __pfx_kthread+0x10/0x10 [ 436.077449][ T31] ret_from_fork+0x4b9/0x870 [ 436.082034][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 436.087289][ T31] ? __switch_to_asm+0x39/0x70 [ 436.092129][ T31] ? __switch_to_asm+0x33/0x70 [ 436.096958][ T31] ? __pfx_kthread+0x10/0x10 [ 436.101620][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.106438][ T31] [ 436.109486][ T31] INFO: task syz-executor:16892 blocked for more than 143 seconds. [ 436.117962][ T31] Not tainted syzkaller #0 [ 436.122918][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.131672][ T31] task:syz-executor state:D stack:21416 pid:16892 tgid:16892 ppid:1 task_flags:0x400140 flags:0x00080003 [ 436.143725][ T31] Call Trace: [ 436.147048][ T31] [ 436.150000][ T31] __schedule+0x1798/0x4cc0 [ 436.154515][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.159415][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.164258][ T31] ? __pfx___schedule+0x10/0x10 [ 436.169169][ T31] ? schedule+0x91/0x360 [ 436.173407][ T31] schedule+0x165/0x360 [ 436.177615][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.183060][ T31] __mutex_lock+0x7e6/0x1350 [ 436.187689][ T31] ? rcu_is_watching+0x15/0xb0 [ 436.192439][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.197391][ T31] ? rfkill_register+0x37/0x8e0 [ 436.202484][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.207586][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 436.212510][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.217812][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 436.223084][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 436.228740][ T31] rfkill_register+0x37/0x8e0 [ 436.233412][ T31] wiphy_register+0x2231/0x2aa0 [ 436.238287][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 436.243561][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 436.248722][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 436.254781][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 436.260361][ T31] ? ieee80211_register_hw+0x13e1/0x40d0 [ 436.266049][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 436.271871][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 436.277971][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 436.283899][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 436.290279][ T31] ? __hrtimer_setup+0x187/0x210 [ 436.295301][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 436.301217][ T31] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 436.307036][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 436.313111][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 436.318689][ T31] ? __sys_sendto+0x3bd/0x520 [ 436.323362][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 436.328502][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 436.334655][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 436.340263][ T31] ? __nla_parse+0x40/0x60 [ 436.344676][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 436.351069][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 436.356728][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 436.362828][ T31] ? bpf_lsm_capable+0x9/0x20 [ 436.367517][ T31] ? security_capable+0x7e/0x2e0 [ 436.372458][ T31] genl_rcv_msg+0x60e/0x790 [ 436.377007][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.382033][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 436.387675][ T31] ? __asan_memcpy+0x40/0x70 [ 436.392279][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 436.397667][ T31] netlink_rcv_skb+0x205/0x470 [ 436.402441][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.407375][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.412417][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.417762][ T31] ? down_read+0x1ad/0x2e0 [ 436.422202][ T31] genl_rcv+0x28/0x40 [ 436.426260][ T31] netlink_unicast+0x82f/0x9e0 [ 436.431027][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 436.436429][ T31] ? netlink_sendmsg+0x642/0xb30 [ 436.441381][ T31] ? skb_put+0x11b/0x210 [ 436.445687][ T31] netlink_sendmsg+0x805/0xb30 [ 436.450511][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.455858][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 436.460808][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.466125][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.471426][ T31] __sock_sendmsg+0x21c/0x270 [ 436.476145][ T31] __sys_sendto+0x3bd/0x520 [ 436.480653][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 436.485724][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.490601][ T31] __x64_sys_sendto+0xde/0x100 [ 436.495458][ T31] do_syscall_64+0xfa/0xfa0 [ 436.500142][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.506325][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 436.512992][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.517746][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.523661][ T31] RIP: 0033:0x7f2fdb190d5c [ 436.528123][ T31] RSP: 002b:00007ffdaf8382c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 436.536583][ T31] RAX: ffffffffffffffda RBX: 00007f2fdbf14620 RCX: 00007f2fdb190d5c [ 436.544540][ T31] RDX: 0000000000000024 RSI: 00007f2fdbf14670 RDI: 0000000000000003 [ 436.552551][ T31] RBP: 0000000000000000 R08: 00007ffdaf838314 R09: 000000000000000c [ 436.560559][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 436.568577][ T31] R13: 0000000000000000 R14: 00007f2fdbf14670 R15: 0000000000000000 [ 436.576662][ T31] [ 436.579690][ T31] INFO: task syz.1.3240:17177 blocked for more than 144 seconds. [ 436.588771][ T31] Not tainted syzkaller #0 [ 436.593692][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.603129][ T31] task:syz.1.3240 state:D stack:25096 pid:17177 tgid:17177 ppid:15579 task_flags:0x400040 flags:0x00080002 [ 436.615362][ T31] Call Trace: [ 436.618680][ T31] [ 436.621620][ T31] __schedule+0x1798/0x4cc0 [ 436.626492][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.631365][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.636424][ T31] ? __pfx___schedule+0x10/0x10 [ 436.641311][ T31] ? schedule+0x91/0x360 [ 436.645607][ T31] schedule+0x165/0x360 [ 436.649766][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.655442][ T31] __mutex_lock+0x7e6/0x1350 [ 436.660020][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.664761][ T31] ? rfkill_unregister+0xc8/0x220 [ 436.669914][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.675643][ T31] ? __pfx_device_del+0x10/0x10 [ 436.680522][ T31] rfkill_unregister+0xc8/0x220 [ 436.685531][ T31] nfc_unregister_device+0x96/0x2a0 [ 436.690715][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 436.696724][ T31] virtual_ncidev_close+0x56/0x90 [ 436.701779][ T31] __fput+0x44c/0xa70 [ 436.705942][ T31] task_work_run+0x1d1/0x260 [ 436.710557][ T31] ? __pfx_task_work_run+0x10/0x10 [ 436.715836][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 436.721306][ T31] exit_to_user_mode_loop+0xe9/0x110 [ 436.726717][ T31] do_syscall_64+0x2bd/0xfa0 [ 436.731298][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.737422][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.743577][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.748565][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.754447][ T31] RIP: 0033:0x7f85ebd8eec9 [ 436.759019][ T31] RSP: 002b:00007ffecb241ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 436.767471][ T31] RAX: 0000000000000000 RBX: 00007f85ebfe7da0 RCX: 00007f85ebd8eec9 [ 436.775453][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 436.783423][ T31] RBP: 00007f85ebfe7da0 R08: 00000000000000f8 R09: 0000000ccb241ddf [ 436.791473][ T31] R10: 00007f85ebfe7cb0 R11: 0000000000000246 R12: 0000000000045125 [ 436.799494][ T31] R13: 00007f85ebfe6090 R14: ffffffffffffffff R15: 00007ffecb241c00 [ 436.807577][ T31] [ 436.810626][ T31] INFO: task syz.2.3239:17198 blocked for more than 144 seconds. [ 436.818419][ T31] Not tainted syzkaller #0 [ 436.823358][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.832053][ T31] task:syz.2.3239 state:D stack:27688 pid:17198 tgid:17182 ppid:16078 task_flags:0x400140 flags:0x00080002 [ 436.844486][ T31] Call Trace: [ 436.848963][ T31] [ 436.851913][ T31] __schedule+0x1798/0x4cc0 [ 436.856527][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.861387][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.866559][ T31] ? __pfx___schedule+0x10/0x10 [ 436.871523][ T31] ? schedule+0x91/0x360 [ 436.875819][ T31] schedule+0x165/0x360 [ 436.879984][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.885571][ T31] __mutex_lock+0x7e6/0x1350 [ 436.890177][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.894917][ T31] ? genl_rcv_msg+0x10d/0x790 [ 436.899680][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.904700][ T31] ? stack_trace_save+0x9c/0xe0 [ 436.909647][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 436.916455][ T31] ? radix_tree_lookup+0x240/0x290 [ 436.921588][ T31] genl_rcv_msg+0x10d/0x790 [ 436.926163][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.931035][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.936113][ T31] netlink_rcv_skb+0x205/0x470 [ 436.940879][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.945793][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.950804][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.956159][ T31] ? down_read+0x1ad/0x2e0 [ 436.960579][ T31] genl_rcv+0x28/0x40 [ 436.964542][ T31] netlink_unicast+0x82f/0x9e0 [ 436.969400][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 436.974691][ T31] ? netlink_sendmsg+0x642/0xb30 [ 436.979659][ T31] ? skb_put+0x11b/0x210 [ 436.983919][ T31] netlink_sendmsg+0x805/0xb30 [ 436.988739][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.994135][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 436.999098][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.004385][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.009716][ T31] __sock_sendmsg+0x21c/0x270 [ 437.014386][ T31] __sys_sendto+0x3bd/0x520 [ 437.018936][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 437.023974][ T31] ? count_memcg_event_mm+0x21/0x260 [ 437.029338][ T31] ? exc_page_fault+0x82/0x100 [ 437.034157][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 437.039467][ T31] __x64_sys_sendto+0xde/0x100 [ 437.044228][ T31] do_syscall_64+0xfa/0xfa0 [ 437.048755][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.053970][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.060115][ T31] ? clear_bhb_loop+0x60/0xb0 [ 437.064799][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.070758][ T31] RIP: 0033:0x7f5e70190d5c [ 437.075239][ T31] RSP: 002b:00007f5e71032ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 437.083756][ T31] RAX: ffffffffffffffda RBX: 00007f5e71032fc0 RCX: 00007f5e70190d5c [ 437.091779][ T31] RDX: 0000000000000024 RSI: 00007f5e71033010 RDI: 0000000000000005 [ 437.099862][ T31] RBP: 0000000000000000 R08: 00007f5e71032f14 R09: 000000000000000c [ 437.107946][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 437.115979][ T31] R13: 00007f5e71032f68 R14: 00007f5e71033010 R15: 0000000000000000 [ 437.123983][ T31] [ 437.127042][ T31] INFO: task syz.4.3241:17188 blocked for more than 144 seconds. [ 437.134748][ T31] Not tainted syzkaller #0 [ 437.139713][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.148403][ T31] task:syz.4.3241 state:D stack:26056 pid:17188 tgid:17186 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 437.160402][ T31] Call Trace: [ 437.163688][ T31] [ 437.166679][ T31] __schedule+0x1798/0x4cc0 [ 437.171198][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.176129][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.180996][ T31] ? __pfx___schedule+0x10/0x10 [ 437.185905][ T31] ? schedule+0x91/0x360 [ 437.190151][ T31] schedule+0x165/0x360 [ 437.194310][ T31] schedule_preempt_disabled+0x13/0x30 [ 437.199820][ T31] __mutex_lock+0x7e6/0x1350 [ 437.204430][ T31] ? __mutex_lock+0x5bb/0x1350 [ 437.209229][ T31] ? genl_rcv_msg+0x10d/0x790 [ 437.213891][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 437.218962][ T31] ? stack_trace_save+0x9c/0xe0 [ 437.223795][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 437.229219][ T31] ? radix_tree_lookup+0x240/0x290 [ 437.234343][ T31] genl_rcv_msg+0x10d/0x790 [ 437.239145][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.244119][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.249232][ T31] netlink_rcv_skb+0x205/0x470 [ 437.253988][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.258887][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.263918][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.269241][ T31] ? down_read+0x1ad/0x2e0 [ 437.273647][ T31] genl_rcv+0x28/0x40 [ 437.277664][ T31] netlink_unicast+0x82f/0x9e0 [ 437.282416][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 437.287717][ T31] ? netlink_sendmsg+0x642/0xb30 [ 437.292664][ T31] ? skb_put+0x11b/0x210 [ 437.297107][ T31] netlink_sendmsg+0x805/0xb30 [ 437.301865][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.307172][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 437.312095][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.317412][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.322686][ T31] __sock_sendmsg+0x21c/0x270 [ 437.327375][ T31] __sys_sendto+0x3bd/0x520 [ 437.331865][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 437.336945][ T31] ? count_memcg_event_mm+0x21/0x260 [ 437.342258][ T31] ? exc_page_fault+0x82/0x100 [ 437.347040][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 437.352331][ T31] __x64_sys_sendto+0xde/0x100 [ 437.357123][ T31] do_syscall_64+0xfa/0xfa0 [ 437.361645][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.367046][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.373110][ T31] ? clear_bhb_loop+0x60/0xb0 [ 437.377827][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.383722][ T31] RIP: 0033:0x7f13bed90d5c [ 437.388184][ T31] RSP: 002b:00007f13bfc87ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 437.396683][ T31] RAX: ffffffffffffffda RBX: 00007f13bfc87fc0 RCX: 00007f13bed90d5c [ 437.405174][ T31] RDX: 0000000000000028 RSI: 00007f13bfc88010 RDI: 000000000000000b [ 437.413164][ T31] RBP: 0000000000000000 R08: 00007f13bfc87f14 R09: 000000000000000c [ 437.421161][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 437.429196][ T31] R13: 00007f13bfc87f68 R14: 00007f13bfc88010 R15: 0000000000000000 [ 437.437374][ T31] [ 437.440442][ T31] INFO: task syz.3.3246:17224 blocked for more than 145 seconds. [ 437.448771][ T31] Not tainted syzkaller #0 [ 437.453711][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.462400][ T31] task:syz.3.3246 state:D stack:28040 pid:17224 tgid:17222 ppid:16444 task_flags:0x400140 flags:0x00080002 [ 437.474387][ T31] Call Trace: [ 437.477913][ T31] [ 437.480870][ T31] __schedule+0x1798/0x4cc0 [ 437.485658][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.490542][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.495424][ T31] ? __pfx___schedule+0x10/0x10 [ 437.500290][ T31] ? schedule+0x91/0x360 [ 437.504515][ T31] schedule+0x165/0x360 [ 437.508700][ T31] schedule_preempt_disabled+0x13/0x30 [ 437.514145][ T31] __mutex_lock+0x7e6/0x1350 [ 437.518764][ T31] ? __mutex_lock+0x5bb/0x1350 [ 437.523546][ T31] ? genl_rcv_msg+0x10d/0x790 [ 437.528236][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 437.533274][ T31] ? stack_trace_save+0x9c/0xe0 [ 437.538252][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 437.543640][ T31] ? radix_tree_lookup+0x240/0x290 [ 437.548770][ T31] genl_rcv_msg+0x10d/0x790 [ 437.553260][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.558178][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.563209][ T31] netlink_rcv_skb+0x205/0x470 [ 437.568107][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.572999][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.578066][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.583355][ T31] ? down_read+0x1ad/0x2e0 [ 437.587799][ T31] genl_rcv+0x28/0x40 [ 437.591808][ T31] netlink_unicast+0x82f/0x9e0 [ 437.596653][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 437.601952][ T31] ? netlink_sendmsg+0x642/0xb30 [ 437.606960][ T31] ? skb_put+0x11b/0x210 [ 437.611208][ T31] netlink_sendmsg+0x805/0xb30 [ 437.616037][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.621329][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 437.626317][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.631591][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.637091][ T31] __sock_sendmsg+0x21c/0x270 [ 437.641818][ T31] __sys_sendto+0x3bd/0x520 [ 437.646345][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 437.651357][ T31] ? count_memcg_event_mm+0x21/0x260 [ 437.656686][ T31] ? exc_page_fault+0x82/0x100 [ 437.661440][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 437.666779][ T31] __x64_sys_sendto+0xde/0x100 [ 437.671544][ T31] do_syscall_64+0xfa/0xfa0 [ 437.676062][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.681292][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.687397][ T31] ? clear_bhb_loop+0x60/0xb0 [ 437.692075][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.697991][ T31] RIP: 0033:0x7fa1e2190d5c [ 437.702416][ T31] RSP: 002b:00007fa1e03ecec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 437.710961][ T31] RAX: ffffffffffffffda RBX: 00007fa1e03ecfc0 RCX: 00007fa1e2190d5c [ 437.719270][ T31] RDX: 0000000000000028 RSI: 00007fa1e03ed010 RDI: 0000000000000008 [ 437.727348][ T31] RBP: 0000000000000000 R08: 00007fa1e03ecf14 R09: 000000000000000c [ 437.735392][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 437.743367][ T31] R13: 00007fa1e03ecf68 R14: 00007fa1e03ed010 R15: 0000000000000000 [ 437.751370][ T31] [ 437.754403][ T31] INFO: task syz.3.3246:17227 blocked for more than 145 seconds. [ 437.762209][ T31] Not tainted syzkaller #0 [ 437.767172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.775871][ T31] task:syz.3.3246 state:D stack:28040 pid:17227 tgid:17222 ppid:16444 task_flags:0x400140 flags:0x00080002 [ 437.787832][ T31] Call Trace: [ 437.791096][ T31] [ 437.794105][ T31] __schedule+0x1798/0x4cc0 [ 437.798737][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.803581][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.808557][ T31] ? __pfx___schedule+0x10/0x10 [ 437.813408][ T31] ? schedule+0x91/0x360 [ 437.817655][ T31] schedule+0x165/0x360 [ 437.821819][ T31] schedule_preempt_disabled+0x13/0x30 [ 437.827317][ T31] __mutex_lock+0x7e6/0x1350 [ 437.831903][ T31] ? __mutex_lock+0x5bb/0x1350 [ 437.836691][ T31] ? genl_rcv_msg+0x10d/0x790 [ 437.841374][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 437.846437][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 437.851569][ T31] ? radix_tree_lookup+0x240/0x290 [ 437.856721][ T31] genl_rcv_msg+0x10d/0x790 [ 437.861215][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.866270][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 437.871288][ T31] ? __asan_memcpy+0x40/0x70 [ 437.879222][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 437.884790][ T31] netlink_rcv_skb+0x205/0x470 [ 437.889586][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.894428][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.899492][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.904770][ T31] ? down_read+0x1ad/0x2e0 [ 437.909215][ T31] genl_rcv+0x28/0x40 [ 437.913184][ T31] netlink_unicast+0x82f/0x9e0 [ 437.918061][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 437.923340][ T31] ? netlink_sendmsg+0x642/0xb30 [ 437.928409][ T31] ? skb_put+0x11b/0x210 [ 437.932660][ T31] netlink_sendmsg+0x805/0xb30 [ 437.937524][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.942796][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 437.947755][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.953028][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.958423][ T31] __sock_sendmsg+0x21c/0x270 [ 437.963122][ T31] __sys_sendto+0x3bd/0x520 [ 437.967687][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 437.972799][ T31] ? count_memcg_event_mm+0x21/0x260 [ 437.978138][ T31] ? exc_page_fault+0x82/0x100 [ 437.982894][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 437.988378][ T31] __x64_sys_sendto+0xde/0x100 [ 437.993135][ T31] do_syscall_64+0xfa/0xfa0 [ 437.997664][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.002863][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.008952][ T31] ? clear_bhb_loop+0x60/0xb0 [ 438.013612][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.019514][ T31] RIP: 0033:0x7fa1e2190d5c [ 438.023907][ T31] RSP: 002b:00007fa1e03cbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 438.032362][ T31] RAX: ffffffffffffffda RBX: 00007fa1e03cbfc0 RCX: 00007fa1e2190d5c [ 438.040397][ T31] RDX: 0000000000000020 RSI: 00007fa1e03cc010 RDI: 0000000000000009 [ 438.048394][ T31] RBP: 0000000000000000 R08: 00007fa1e03cbf14 R09: 000000000000000c [ 438.056374][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 438.064329][ T31] R13: 00007fa1e03cbf68 R14: 00007fa1e03cc010 R15: 0000000000000000 [ 438.072342][ T31] [ 438.075412][ T31] INFO: task syz.3.3246:17230 blocked for more than 145 seconds. [ 438.083130][ T31] Not tainted syzkaller #0 [ 438.088256][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.096948][ T31] task:syz.3.3246 state:D stack:25448 pid:17230 tgid:17222 ppid:16444 task_flags:0x400040 flags:0x00080003 [ 438.108903][ T31] Call Trace: [ 438.112170][ T31] [ 438.115321][ T31] __schedule+0x1798/0x4cc0 [ 438.119848][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.124695][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.129564][ T31] ? __pfx___schedule+0x10/0x10 [ 438.134680][ T31] ? schedule+0x91/0x360 [ 438.139400][ T31] schedule+0x165/0x360 [ 438.143545][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.149035][ T31] __mutex_lock+0x7e6/0x1350 [ 438.153618][ T31] ? __mutex_lock+0x5bb/0x1350 [ 438.158397][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 438.163684][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.168737][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.173937][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 438.179872][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.186215][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 438.191919][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 438.197184][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 438.202912][ T31] rfkill_set_block+0x1d2/0x440 [ 438.207826][ T31] rfkill_fop_write+0x44b/0x570 [ 438.212690][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 438.218079][ T31] ? security_kernfs_init_security+0x220/0x290 [ 438.224216][ T31] ? rw_verify_area+0x255/0x4d0 [ 438.229093][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.233935][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 438.239323][ T31] vfs_write+0x27e/0xb30 [ 438.243580][ T31] ? __pfx_vfs_write+0x10/0x10 [ 438.248385][ T31] ? __fget_files+0x2a/0x420 [ 438.252975][ T31] ? __fget_files+0x2a/0x420 [ 438.257664][ T31] ? __fget_files+0x3a0/0x420 [ 438.262326][ T31] ? __fget_files+0x2a/0x420 [ 438.267040][ T31] ksys_write+0x145/0x250 [ 438.271358][ T31] ? __pfx_ksys_write+0x10/0x10 [ 438.276511][ T31] ? do_syscall_64+0xbe/0xfa0 [ 438.281201][ T31] do_syscall_64+0xfa/0xfa0 [ 438.285735][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.290931][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.297097][ T31] ? clear_bhb_loop+0x60/0xb0 [ 438.301757][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.307765][ T31] RIP: 0033:0x7fa1e218eec9 [ 438.312177][ T31] RSP: 002b:00007fa1e03ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.320641][ T31] RAX: ffffffffffffffda RBX: 00007fa1e23e6180 RCX: 00007fa1e218eec9 [ 438.328680][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 438.336713][ T31] RBP: 00007fa1e2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 438.344670][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.352659][ T31] R13: 00007fa1e23e6218 R14: 00007fa1e23e6180 R15: 00007ffc6b5f6898 [ 438.360748][ T31] [ 438.363783][ T31] [ 438.363783][ T31] Showing all locks held in the system: [ 438.371553][ T31] 1 lock held by khungtaskd/31: [ 438.376430][ T31] #0: ffffffff8e13a960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 438.386349][ T31] 2 locks held by getty/5588: [ 438.391024][ T31] #0: ffff88814dec50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 438.400812][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 438.410976][ T31] 4 locks held by kworker/u8:17/8147: [ 438.416370][ T31] #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 438.427289][ T31] #1: ffffc9000b56fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 438.437901][ T31] #2: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 438.447310][ T31] #3: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 438.457488][ T31] 1 lock held by kworker/u8:26/8160: [ 438.462764][ T31] #0: ffff8880b863a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 438.472731][ T31] 3 locks held by kworker/0:13/16737: [ 438.478121][ T31] #0: ffff88801a481148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 438.489116][ T31] #1: ffffc90003e0fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 438.502745][ T31] #2: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 438.514134][ T31] 3 locks held by syz-executor/16892: [ 438.519542][ T31] #0: ffffffff8f539750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.527773][ T31] #1: ffffffff8f539568 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 438.536744][ T31] #2: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.546773][ T31] 2 locks held by syz.1.3240/17177: [ 438.552038][ T31] #0: ffff888058e01100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 438.561808][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 438.571978][ T31] 2 locks held by syz.2.3239/17198: [ 438.577239][ T31] #0: ffffffff8f539750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.585508][ T31] #1: ffffffff8f539568 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 438.594508][ T31] 2 locks held by syz.4.3241/17188: [ 438.599900][ T31] #0: ffffffff8f539750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.608586][ T31] #1: ffffffff8f539568 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 438.617800][ T31] 2 locks held by syz.3.3246/17224: [ 438.623083][ T31] #0: ffffffff8f539750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.631433][ T31] #1: ffffffff8f539568 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 438.640478][ T31] 2 locks held by syz.3.3246/17227: [ 438.645725][ T31] #0: ffffffff8f539750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.653916][ T31] #1: ffffffff8f539568 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 438.662915][ T31] 2 locks held by syz.3.3246/17230: [ 438.668145][ T31] #0: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 438.678540][ T31] #1: ffff888058e01100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 438.688398][ T31] 2 locks held by syz-executor/17234: [ 438.693764][ T31] #0: ffff8880564c1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.703997][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.714131][ T31] 2 locks held by syz-executor/17235: [ 438.719644][ T31] #0: ffff88804b257918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.729785][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.739843][ T31] 2 locks held by syz-executor/17236: [ 438.745308][ T31] #0: ffff8880564c5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.756281][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.766420][ T31] 2 locks held by syz-executor/17238: [ 438.771829][ T31] #0: ffff88807e632118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.782127][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.792309][ T31] 2 locks held by syz-executor/17242: [ 438.797987][ T31] #0: ffff88807fb85118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.808095][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.818277][ T31] 2 locks held by syz-executor/17245: [ 438.823633][ T31] #0: ffff88807d34f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.833767][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.843957][ T31] 2 locks held by syz-executor/17246: [ 438.849555][ T31] #0: ffff88807f92d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.859694][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.869695][ T31] 2 locks held by syz-executor/17248: [ 438.875433][ T31] #0: ffff88807d09b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.885518][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.895529][ T31] 2 locks held by syz-executor/17250: [ 438.900882][ T31] #0: ffff88807b03e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.911160][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.922345][ T31] 2 locks held by syz-executor/17254: [ 438.927761][ T31] #0: ffff8880281ac118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.938119][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.948072][ T31] 2 locks held by syz-executor/17257: [ 438.953445][ T31] #0: ffff88804a018918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.963564][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.973652][ T31] 2 locks held by syz-executor/17258: [ 438.979122][ T31] #0: ffff88804a019118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 438.989181][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 438.999655][ T31] 2 locks held by syz-executor/17260: [ 439.005099][ T31] #0: ffff88807c8ef118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 439.015419][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 439.025766][ T31] 2 locks held by syz-executor/17262: [ 439.031148][ T31] #0: ffff88805b2fe918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 439.041262][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 439.051209][ T31] [ 439.053544][ T31] ============================================= [ 439.053544][ T31] [ 439.062271][ T31] NMI backtrace for cpu 0 [ 439.062287][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 439.062299][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.062306][ T31] Call Trace: [ 439.062310][ T31] [ 439.062316][ T31] dump_stack_lvl+0x189/0x250 [ 439.062332][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.062342][ T31] ? __pfx__printk+0x10/0x10 [ 439.062358][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 439.062372][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 439.062384][ T31] ? __pfx__printk+0x10/0x10 [ 439.062396][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 439.062411][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 439.062424][ T31] watchdog+0xf93/0xfe0 [ 439.062439][ T31] ? watchdog+0x1de/0xfe0 [ 439.062455][ T31] kthread+0x711/0x8a0 [ 439.062468][ T31] ? __pfx_watchdog+0x10/0x10 [ 439.062481][ T31] ? __pfx_kthread+0x10/0x10 [ 439.062492][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.062505][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.062517][ T31] ? __pfx_kthread+0x10/0x10 [ 439.062528][ T31] ret_from_fork+0x4b9/0x870 [ 439.062546][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.062562][ T31] ? __switch_to_asm+0x39/0x70 [ 439.062572][ T31] ? __switch_to_asm+0x33/0x70 [ 439.062582][ T31] ? __pfx_kthread+0x10/0x10 [ 439.062593][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.062611][ T31] [ 439.062615][ T31] Sending NMI from CPU 0 to CPUs 1: [ 439.209282][ C1] NMI backtrace for cpu 1 [ 439.209299][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 439.209317][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.209327][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 439.209353][ C1] Code: 43 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 66 23 00 f3 0f 1e fa fb f4 18 e8 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 439.209367][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 439.209382][ C1] RAX: 6b76a21c1019ff00 RBX: ffffffff81958c97 RCX: 6b76a21c1019ff00 [ 439.209394][ C1] RDX: 0000000000000001 RSI: ffffffff8d7ddd10 RDI: ffffffff8bc03b60 [ 439.209406][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 439.209417][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9d4c30 [ 439.209429][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b58 [ 439.209439][ C1] FS: 0000000000000000(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 439.209452][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.209464][ C1] CR2: 000055cc46304660 CR3: 000000000df36000 CR4: 00000000003526f0 [ 439.209478][ C1] Call Trace: [ 439.209486][ C1] [ 439.209493][ C1] default_idle+0x13/0x20 [ 439.209508][ C1] default_idle_call+0x73/0xb0 [ 439.209525][ C1] do_idle+0x1e7/0x510 [ 439.209556][ C1] ? __pfx_do_idle+0x10/0x10 [ 439.209594][ C1] cpu_startup_entry+0x44/0x60 [ 439.209620][ C1] start_secondary+0x101/0x110 [ 439.209640][ C1] common_startup_64+0x13e/0x147 [ 439.209667][ C1] [ 439.210408][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 439.376703][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 439.385891][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.395944][ T31] Call Trace: [ 439.399223][ T31] [ 439.402150][ T31] dump_stack_lvl+0x99/0x250 [ 439.406735][ T31] ? __asan_memcpy+0x40/0x70 [ 439.411318][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.416505][ T31] ? __pfx__printk+0x10/0x10 [ 439.421096][ T31] vpanic+0x281/0x750 [ 439.425075][ T31] ? __pfx_vpanic+0x10/0x10 [ 439.429566][ T31] ? preempt_schedule+0xae/0xc0 [ 439.434685][ T31] ? preempt_schedule_common+0x83/0xd0 [ 439.440142][ T31] panic+0xb9/0xc0 [ 439.443851][ T31] ? __pfx_panic+0x10/0x10 [ 439.448347][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 439.453748][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 439.459895][ T31] watchdog+0xfd2/0xfe0 [ 439.464045][ T31] ? watchdog+0x1de/0xfe0 [ 439.468457][ T31] kthread+0x711/0x8a0 [ 439.472615][ T31] ? __pfx_watchdog+0x10/0x10 [ 439.477279][ T31] ? __pfx_kthread+0x10/0x10 [ 439.481915][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.487190][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.492374][ T31] ? __pfx_kthread+0x10/0x10 [ 439.496949][ T31] ret_from_fork+0x4b9/0x870 [ 439.501536][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.506641][ T31] ? __switch_to_asm+0x39/0x70 [ 439.511387][ T31] ? __switch_to_asm+0x33/0x70 [ 439.516138][ T31] ? __pfx_kthread+0x10/0x10 [ 439.520802][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.525564][ T31] [ 439.528869][ T31] Kernel Offset: disabled [ 439.533181][ T31] Rebooting in 86400 seconds..