last executing test programs: 21.675851524s ago: executing program 4 (id=1458): syz_emit_ethernet(0x210, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d81700", 0x1da, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x3a, 0xff, @empty, @mcast2, [@fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @fragment={0x87, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}], "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"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000880)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x34, 0xfffe, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x6, 0x15, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, {[@end]}}}}}}}, 0x0) 21.484767781s ago: executing program 4 (id=1459): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000180)={0x4, 0x1}) 20.656850971s ago: executing program 1 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x0, @remote}}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) 20.473491324s ago: executing program 1 (id=1475): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000240)={0x3ffd}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x78, r2, 0x3, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7244ecca2b6d141f2f253e4e3450d5f4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ec7f8fa3c08f82b63e3f8e0e72daee53"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28ee78b30b4f54f2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="03d7098b4363f7458b719d899ef1029a513f48abb6465449"}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000804) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x500, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xb, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048085}, 0x4) 20.192798404s ago: executing program 1 (id=1480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 19.971463004s ago: executing program 1 (id=1484): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(generic-gcm-aesni)\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xb2a8, 0x2, 0x1000, 0xb6, 0xa6}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r3, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7bb}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @private=0xa010100}], 0x3c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r3, 0xe, "f6a19c39ee819fecf86869f2ab38"}, &(0x7f0000000280)=0x16) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)={0x62, 0x8, '\x00', [@generic={0xa9, 0x17, "9cd6f6b564aa876f47f63f1d8fd636a3c9e184eeee6dcc"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x200, [0x1, 0x0, 0x1fc00, 0x224]}}, @ra={0x5, 0x2, 0x4}]}, 0x50) r4 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r3, 0x1, 0x9, 0x10001}, &(0x7f0000000400)=0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000480), 0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000004c0)=0x9, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000500)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/102, 0x66}], 0x1, 0x10, 0x7bd) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r5, 0xffffffffffffffff}, 0x4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001d80)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000023c0)={0x0}, &(0x7f0000002400)=0xc) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002440)={0x0}, &(0x7f0000002480)=0xc) r13 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000700)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002340)=[{&(0x7f0000000740)={0x11c, 0x20, 0x200, 0x70bd25, 0x25dfdbfc, "", [@nested={0x10a, 0x14f, 0x0, 0x1, [@generic="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", @nested={0x4, 0x17}, @typed={0x4, 0x29}]}]}, 0x11c}, {&(0x7f00000008c0)={0x11ac, 0x2e, 0x200, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x14a, 0x0, 0x0, @uid=r7}, @typed={0x4, 0x13a}, @nested={0x1004, 0x8c, 0x0, 0x1, [@generic="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"]}, @nested={0x12a, 0x112, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @fd=r8}, @generic="30a1678ddd707abff237d61c7983d8e360dc13becd91f980568a3efe76afd4d790ced0", @generic="d30896103b3463bb61bdaffae0166f57bb2ce234f20483487784a91169d1f4bb4b95ce085654f463ad9d8161b05678b87d8fc13d1e4fd68ae3eff1f08f78157df2fc02bb2fbdb30f07f2d583dc7f1e5857407eee77f123f8df2c4e99874967e61532a4b57a49f14a1c4766df2f21afceef38a1ca1d4cafbf4b110dbf5a8cd2fe1a3d2ec6ab91a9840fa0b0bda75a845d28f163e75a6f981a8dbdba2091bd5e6bf2bee0aefd7f59a69f6861748fdbc71827b15d867371aec228ed5fbe8c2bac436c40f8dc03960d3d867fbcdfffc1989a7ee45566d7c9efbbc3435334d3ce3b8007b7f51e44c79918c51e11", @nested={0x4, 0x8c}, @typed={0xc, 0x13b, 0x0, 0x0, @u64=0x4}]}, @nested={0xc, 0xde, 0x0, 0x1, [@nested={0x4, 0x11a}, @nested={0x4, 0x109}]}, @nested={0x53, 0x85, 0x0, 0x1, [@nested={0x4, 0x5f}, @nested={0x4, 0xd}, @generic="e02f46235ba1ec46a6be", @generic="02c46c6af9b441628867602270b5925befe8c5659c005bbfcfaa5c1d175d718d49", @nested={0x4, 0xaa}, @generic="06e61d42c464e5563cf5fe01562f8a42938b0e438c39a290"]}]}, 0x11ac}, {&(0x7f0000001a80)={0x23c, 0x41, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x229, 0x24, 0x0, 0x1, [@generic="920e14de9d812d622ca8b2ce20b8e0ebaf68287d43de20b7452f3756afacfc82f27dfd2332d0baeabb3506cd7760e3827f1eba33b83536ae2908a9d71518520a9e3fb0c3261a0dbb74e5e6cbb5568f1c6b4b96f50f1575d0bd82c62159c3c6285d4c2e1cfdc14dde1d90712cdd9a2a01b6f2e17bc3fef33826b21edfc894428703ac410823e29fed84df0db138406b1b192bf2b2277b0a7a8b75d1fda482d9506f6e45bd5a64a5b82c160401529759574cf08dd700b1127a", @typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x7f}, @generic="9a4a866092200c58fae764b3dab3e6aadbdb3e3ea0572032924917a53e8dd7cff2853caf351d3f7ac49fbb003923212483051f16c1dc56f929d3d03cdb892f2ab172cc5970767b3c3d13a1cc10d7b3773a4502e958e76d0a6875b15dac21b229608924967b5d5227fcaa307c40a62ae3f9d71767686340c59677df388dc7bc284b41f3a1c6cb76ee299a4fa1fcccd804319401d5faf527fe473015414c61c45b65a33ba1cbbf5b1d8cbd5606dcd0ac9f802906806a75b3d0401ca19e53a405d7dcc3ff533015f7b8efc5f8e1fc287966c0446c347b57c28650c6e2c58454ceb112f9b7", @generic="e4d38b468fde7051b6fee1390ec3e41f9d7294ae6009892eeb9b74a1de5de2ed02839dbeea263e61ee3d9bbc4c4accfc19c09a5d70cc14fc249b3c36cb270305f3208e5218c1025ca535407fcf", @generic="29a30fa8674a9ccfbe3a2b692361da25c2ac361fd2d1930b1472be3d8110e5aa180b6173fe", @typed={0x7, 0x124, 0x0, 0x0, @str='\\,\x00'}, @nested={0x4, 0xf4}]}]}, 0x23c}, {&(0x7f0000001cc0)={0xb8, 0x1c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@generic="85a7f2aaf1c42e39741c1baf179baa09182ba3de9cab778abf11075ac989d2dd9682c8be6e80cd65c56db2c04cc1aacb0887a513233b5ceef0119d4a24430a8e8d3f1debe49df4ffc345a2accea26ae36aab78e58a7e280b", @generic="ef249358ee8b7862247641ef692c6bcdd92053af8f9523591d9cc9b09c4eba6c68c9118d4aef4fd5692f09a22e2778a2dcc8533acd799b5e4a6d7fe0f0c1b36e20404f8e7a", @nested={0x8, 0x10d, 0x0, 0x1, [@nested={0x4, 0x12c}]}]}, 0xb8}, {&(0x7f0000001dc0)={0x1e8, 0x27, 0x800, 0x70bd28, 0x25dfdbfd, "", [@nested={0x6a, 0x62, 0x0, 0x1, [@typed={0x8, 0x14c, 0x0, 0x0, @str='/\\{\x00'}, @typed={0x43, 0xd8, 0x0, 0x0, @binary="5ed4a4985227d54c4a2440f2b15a1fa221da5a26467b383b3226676b52a089cc27b830e9f40132e0f03b40d6475e354eb85a2d8195fe02406270977e75ceae"}, @generic="cfde25190583b53e641cf9df416087a107500a4335a3", @nested={0x4, 0xbe}]}, @nested={0x160, 0xf, 0x0, 0x1, [@generic="aa9c20a7dfa58cdb49e395aaadc5c7202dac354509a1b2d6263012ce2683f52ab4d57fe04c1b5d6fea91fc5d504277b24f594f12739a779c239ae53dd79ce423b08514", @nested={0x4, 0x45}, @generic="6b104ab29d7164923bd5b5427ecc57ef6cf01c01e37902c7129af7f89a3b708e193a5996d0c108b1f72218ad05560e72f4bf3933bed79ef974735a77f7e41232330e52481d5c741d1e6b5e48dc51201e0b48d493a1c51f660c6423426524184ee66dbb6dfdfba302796e9acee6040a7a20c9cfcf9f02c10c8e6822a0ebf2f60325f042e01360713fc234a759602fab", @nested={0x4, 0x99}, @nested={0x4, 0x6f}, @typed={0x8, 0xb9, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x10d}, @generic="4a9fff843f849bbe63124570b6c3d348bf9dbac32412916c25a1f9573f634af89343f968b907ffbe8866d6e3b23e9eecfc9c1264894e6a436abd440334a4134778543707947be4105b59af9cf8537fbae6b4e1a61492b9b477920ad1062468074f676e6259f3", @typed={0x8, 0x10c, 0x0, 0x0, @pid=r9}, @nested={0x4, 0xa3}]}, @typed={0x4, 0xc}, @typed={0x8, 0xd2, 0x0, 0x0, @pid}]}, 0x1e8}, {&(0x7f0000001fc0)={0x304, 0x19, 0x2, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x4, 0x103}, @nested={0x255, 0x101, 0x0, 0x1, [@nested={0x4, 0x10f}, @typed={0x8, 0x98, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x133, 0x0, 0x0, @u32=0x42}, @generic="888624bab4a36572190e2df1039b750611c198e6dbedbee34dcc4e7f01f774a2de359fdd2b43cc5c9b87145a64ab1449a023c137ccb14140ac318805e4e201f431900ce4f4753b", @generic="2c688ab1533fc6763af96bc0a9350179587288fc3d85dfdfece00143e7138fa30e81f7a5bc5edea59d4206c44419eb03ed743dcced35aed6aed8a076bf2265082bc02b9326fd63ed81758070e8f7b0c8581a534e9567d771ff9417154e1975994fdec76912632ada105f39c0599dae0c99ac433f726a8fabca89c970deb142a2621f4fca85189324ff969e39578ab0bc0a1b8742bb8e3635b0e2d134514136faf1e9e63260f018502b8df6126ad2cdc631b1ead3f3a7c50ef07abfb224cce6be35629ce92868bde8b64d05e6f6c3ee50c6d0ec17f8d54db62649004730d4", @typed={0xe1, 0xf4, 0x0, 0x0, @binary="ecc2eca9e87c1d8d187fa0505a7b9440234677504d00a3be76f9bca7b549b3ce4bd0090606a83b50d784a7eefc4bd20970a2b373bf68bd684f3c24c79a29827bf2506a50ad2b7e4de812b69bb903d632dda4d681a8547544b28a6c904ba71c63b855ec3330739af713fcc74ffc2d4ccb5be3cf73f9af00c80142e43eb6d82f1d8c04a48ebfce77717c767706101ec288023e4d65bb7600b740d62e69a3977bf6e8ae0d171fa45e367606d95c1271b58fa2a86bfcf127498fa0ca97b4c095bc0a441438c8913d8abfb3e7088a240742a0ecf2712066ff7496f83ef04610"}, @nested={0x4, 0x11b}, @typed={0x2e, 0x83, 0x0, 0x0, @binary="737168e6bfbaa50e93c08933e55821d3e35ddfacd35dde915323465a11f39e56540ec2dc81e84e57d388"}]}, @typed={0x14, 0x139, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x83, 0x136, 0x0, 0x1, [@generic="f04c9071570d350ce75134986a795e21591d9436ac48b292a74cbdcbe55927976aa95618c15485fd4a966c6d857c382847adca2749e051c75f9dae1a8ec2a487c4c7a379a9fb28593a8a3e22c396b71cfd8e478ba24f7286f3741c3364eec460ca0802917ea679ee2b7da2", @typed={0xc, 0x37, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x12c}, @nested={0x4, 0xa0}]}]}, 0x304}, {&(0x7f0000002300)={0x10, 0x3e, 0x0, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x7, &(0x7f00000024c0)=[@rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r1, r5, r2, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x28, 0x1, 0x1, [r5, r0, r6, r5, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r10, r7}}}, @rights={{0x24, 0x1, 0x1, [r5, r1, r1, r11, r4]}}, @rights={{0x28, 0x1, 0x1, [r6, r4, r1, r4, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, r7, r13}}}, @rights={{0x1c, 0x1, 0x1, [r2, r4, r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x150, 0x8015}, 0x80) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000026c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r14, &(0x7f0000002c40)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002740)={0x4b0, r15, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xfffffffa, 0xc}}}}, [@NL80211_ATTR_IE={0xb3, 0x2a, [@prep={0x83, 0x1f, {{}, 0xff, 0x81, @broadcast, 0x9, @void, 0x0, 0x6, @broadcast, 0x64}}, @fast_bss_trans={0x37, 0x70, {0x7, 0x1, "bc62bae9927016734bc9c9f7bb52ab67", "9e8b3d69b343a65575f52f5ed28b4a5cba4cff6bf135c2e505946afce4fcd349", "929cdc5d34d97f59d22d0581be4d3f0d2b4da57a22b1f666be67b32208cf8c38", [{0x1, 0x1c, "94df0a15baacf8c9868e447368566473f0547f5a689d073957aff334"}]}}, @ht={0x2d, 0x1a, {0x40, 0x3, 0x5, 0x0, {0x9, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x9, 0xe2}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x7}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x80}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1a, 0x0, @random="8317c27da680adf67b2fb075f01e9e25a049f5a9f74c"}, {0x10, 0x0, @random="c68c436dbc70caa8b06c4500"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x35c, 0x84, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="871ab28c66bb"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0xebf8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="90d6b67f622a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e2da0daa5a13"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xd}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffff506}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd0}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="08161720f41bc5b48ce4923a04e17d5b9337263256726d99567b4d27"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xa1f5}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, @random="4a0db50b"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7842}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80}, @NL80211_BAND_LC={0x8, 0x5, 0x3f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, @random="daabd562"}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8af}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xc7c3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x80000000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1b, 0x1, @random="3a95cfc173eb3ab3c2e3e2d8986e37de8b6c981df8296b"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xee}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffc}]}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffb}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x75}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x27d}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="43a0e1a90613"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xd46}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd}]}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x4000}, 0x34000041) 19.901525081s ago: executing program 4 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100fa9e4ba200002400128009000100626f6e640000000014000280050001000500000005001b0000000000"], 0x44}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r6) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r7, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x19, 0x8d, 0x1, 0x7}, 0x28) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) r12 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4000000) 19.562273122s ago: executing program 1 (id=1488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xb}, {0xf, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='9p_client_res\x00', r8}, 0x18) r10 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r10, r9, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}, 0x81) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f00000000c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r13, r13, 0x0, 0x1) 19.422272665s ago: executing program 2 (id=1489): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$key(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2, 0x18, 0x1, 0x2, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x4040000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1, 0x1, 0x10}, &(0x7f0000000140)=0x14) accept4$bt_l2cap(r2, 0x0, 0x0, 0x80800) 18.947827535s ago: executing program 2 (id=1492): getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000440)={0x0, 0xfc01, 0x30, 0x1, 0x831e}, &(0x7f0000000480)=0x18) r0 = socket$inet6(0xa, 0x1, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @empty, 'veth1\x00'}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="c2cea8288640d36642124bf6e2b77d7cf06be6ffce7acd44d51a", 0x1a}], 0x1, &(0x7f0000000380)=[{0x60, 0xff, 0x0, "208b6d83e76967f092aaa27a200e60efe2a867f76e38589d91023c6ec1aa5c452f8d8b4afcee26fff33c860947395fa50923a372d336124896afe257dde07dd2efd16ee053b4bef7900e839426aa68"}], 0x60}, 0x20004000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x158, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_ID={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8000}, @CTA_TUPLE_MASTER={0xac, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4}}]}]}, 0x158}}, 0x800) getsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r3], 0x50}}, 0x0) 18.840969192s ago: executing program 2 (id=1493): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) 18.810824094s ago: executing program 2 (id=1494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80800061}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37, 0xd416a90e1556646a}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000300), 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r11, 0x1}, 0x14}}, 0x0) socketpair(0x1d, 0x800, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f0000000040)=0x7fff, 0x4) 17.600849453s ago: executing program 4 (id=1496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRESDEC=r2], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 17.578001501s ago: executing program 2 (id=1497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x5}, 0x1) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x35, r3}) r5 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000240)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r5, 0x8936, &(0x7f0000000000)) r6 = accept4$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000300)={0x6}, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) shutdown(r7, 0x2) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000000206010800000000020000000000000005000100070000000900020073797a3000000000240007800800134000000001050015000900000008001340000004ff0800064041002b0c13000300686173683a6e65742c69666163650000050005000a000000050004"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) 17.501096563s ago: executing program 4 (id=1498): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="04002bbd7000fedbdf251500000008000100", @ANYRES32=r8, @ANYBLOB="603a79ee17a4090000000000000084a0deeac1d4f080c99a7891999f3d777d4b7f765c630990cd38aecd6388515517dc283d1eaca6e67cbdeb156896562c95ac716fc6adbebf5bf8e8f3f03234b0382c1fcbd6ee179e85b673775a2616fea5f8080000860f5484ea5913abbdeaefeb0dec143cd93f782cd6dbe1f16f38887cca6960543d97691eaa38ef908d56941e69f9547f096a63d16bcfc792ed936a64c557e6e265fbb94e2b1239ac6ce4ae38e4d9afa68d2794192dea5b1d7145dd00"/205], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200060c5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001040)={'veth0_vlan\x00', @random="90c8acb3b889"}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r12, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x894, r9, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x200, 0x1c}}}}, [@NL80211_ATTR_TID_CONFIG={0x548, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x2}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x7}, {0x0, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0x7}, {0x2}, {0x4, 0x9}, {0x3, 0x4}, {0x5, 0x5}, {0x2, 0x7}, {}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x4, 0x1}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x4, 0x6}, {0x3}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x1}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x1, 0x18, 0x6, 0x2, 0x48, 0xc, 0xc, 0xc, 0x48, 0x3, 0x5, 0x6, 0x2, 0x1, 0x2, 0x24, 0x6, 0x36, 0x18]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x9, 0x2, 0x2, 0x4]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x4, 0x36, 0x9, 0x9, 0xb, 0x36, 0xb, 0x36, 0x18, 0x3, 0x18, 0x3, 0x24, 0x6c, 0x12, 0x30, 0x5, 0x6c, 0x9, 0x60, 0xc, 0x0, 0x2, 0x2, 0x50, 0x30, 0x5, 0x48, 0x0, 0x4]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x2}, {0x0, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x9, 0x16, 0x3, 0x1, 0x9, 0x1, 0x8f0558abc783be62, 0x30, 0x36, 0x2, 0x60, 0x60, 0x36, 0x1b, 0x16, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x48, 0x30, 0x12, 0x36, 0x0, 0x2, 0x18, 0x12, 0x16, 0x6c, 0x16, 0x24, 0x18, 0x6, 0x1aa10abe06291419]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x6, 0x6c, 0xc, 0x34, 0x1b, 0x16, 0x24, 0x36, 0x0, 0x16, 0x48, 0x16, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x8001, 0x4, 0x0, 0x2, 0x1, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff00000001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x4, 0x16, 0x1, 0x6c, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf5a6, 0xc, 0x5, 0x1000, 0x7, 0x1, 0xf, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa175, 0x8, 0x4, 0x5, 0x4, 0x5, 0x9, 0x5]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4000, 0x4, 0x1, 0x2, 0xfffb, 0x71, 0x9]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x5}, {0x0, 0x4}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9c92, 0x4, 0x1, 0x7, 0x0, 0x800, 0xf190, 0x690]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x2, 0x60, 0x24, 0x42, 0x12, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc4}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x254, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x200, 0xd5, 0x8ce, 0x8, 0x2, 0xe8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7f, 0x1, 0x800, 0x7f, 0x4, 0x7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x1, 0x6, 0x0, 0x6c, 0x16, 0x60, 0x16, 0x1b, 0x48, 0x24, 0x18, 0xc, 0xb, 0x6, 0x6, 0x24, 0x1, 0x5, 0x1b, 0x36, 0x2, 0x16, 0x30, 0x6c, 0x3, 0x1, 0x0, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x7}, {0x3, 0x2}, {0x2, 0x4}, {0x2, 0x8}, {0x2, 0x9}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x4, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x0, 0x8}, {0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {}, {0x2, 0xa}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x40, 0x1, 0x9, 0x5, 0x1400, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf53f, 0x26, 0x8001, 0x7, 0xd6, 0x0, 0x4, 0x47]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x6, 0x30, 0x30, 0x3, 0xc, 0x0, 0x6, 0x12, 0x12, 0x16, 0x5, 0x9, 0x3, 0x24, 0x60, 0x60, 0x1, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xc, 0xb0, 0x3, 0x9, 0x0, 0xa, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8000, 0x6, 0x8001, 0x1, 0x200, 0x6, 0xfcc8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x60, 0x6c, 0x48, 0x2, 0x1, 0x60, 0x6, 0x9, 0xb, 0x5, 0x9, 0x18, 0x30, 0x30, 0x3, 0x5, 0x3, 0xc, 0x6c, 0x60, 0x16, 0x5, 0x6, 0x16, 0x1, 0x30, 0x1c, 0x5, 0x1b, 0x1, 0x2]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x5, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x5, 0x2}, {0x5, 0xa}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x7, 0x1}, {0x3, 0x9}, {0x1, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x6, 0x7}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0x1}, {0x7}, {0x3}, {0x0, 0x8}, {}, {0x3, 0x8}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x5}, {}, {0x0, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x1f}, {0x2, 0x2}]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x1}, {0x5, 0x15}, {0x1, 0x6}, {0x2, 0x6}, {0x6, 0x8}, {0x0, 0xa}, {0x1}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x3}, {0x7, 0x3}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x6}, {0x7, 0x2}, {0x2, 0x7}, {0x5, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x4, 0x2}, {0x7, 0xa}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6161, 0x2, 0x6, 0xb, 0xc, 0x3e7, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x60, 0x1, 0x6, 0xc, 0x0, 0x30, 0x3, 0x12, 0x1b, 0x48, 0x5, 0x6, 0x4, 0x3, 0x1b, 0x18, 0x0, 0x18, 0x2, 0x60, 0x5, 0x0, 0x6c, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x7ff, 0x0, 0xef, 0x8, 0x101, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}]}]}, @NL80211_ATTR_TID_CONFIG={0x324, 0x11d, 0x0, 0x1, [{0x27c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x1, 0x1000, 0x3, 0x3, 0x8, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcff, 0xff7d, 0x9ef, 0x3, 0x1, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x80, 0x5, 0x7, 0x6, 0x5, 0x0, 0x69b9]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0xc, 0x48, 0x30, 0x6, 0xc, 0x52, 0x6c, 0x60, 0x24, 0x5, 0x1, 0x24, 0xb, 0x60, 0x36, 0x4, 0xb, 0x1b, 0x48, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7ff, 0x101, 0x4, 0x7, 0xffff, 0x3]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0xa}, {0x5, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x7, 0x5}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x2, 0x4}, {0x7}, {0x4, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x6, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc5, 0x3, 0xfffc, 0x400, 0xfffc, 0x8, 0x1ff, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x4, 0x81, 0x7, 0x1ff, 0x3, 0xfff9, 0xfffa]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3c, 0x18, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x1b, 0x6, 0x12, 0x0, 0x3, 0x16, 0x6, 0x48, 0x1, 0x1, 0x36, 0x30, 0x12, 0x5, 0x1, 0x18, 0x36, 0x6, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0xf46e, 0x321, 0xfff, 0xc, 0xf]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x5}, {0x4, 0x7}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0x9}, {0x3, 0x4}, {0x3, 0x2}, {0x4, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x7, 0x1}, {}]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x8000, 0x4, 0x5, 0x3, 0x401, 0x7, 0xfffd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9a, 0x0, 0x5, 0x5, 0x4, 0xc7d, 0x2, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x0, 0x80, 0x1ff, 0x7, 0x1, 0x4c5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc30, 0x7ff, 0x1, 0xa93b, 0x1, 0x0, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcf, 0x8, 0x9, 0x3, 0xf, 0xfff8, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x7}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x2}, {0x2, 0x3}, {0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x4}, {0x0, 0x4}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbc7e, 0xc64, 0x5, 0xfff0, 0xffff, 0x6, 0x0, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x5, 0x8}, {0x4, 0x2}, {0x5}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x9}, {0x5, 0x2}, {0x2}, {0x2}, {0x7, 0x7}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x6}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x5}, {0x3, 0x7}, {0x3, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2f, 0x0, 0xcaab, 0x7, 0x0, 0x101, 0x3000, 0x75]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x80}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x880}, 0x40010) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000fc0)='bbr', 0x3) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 17.347435397s ago: executing program 1 (id=1500): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 17.341527731s ago: executing program 2 (id=1501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) preadv(r4, 0x0, 0x0, 0x5b3d2934, 0xfffffffa) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r3, @ANYRESOCT=r6, @ANYRES64=r5, @ANYBLOB="010026bd70003c0200000400000008000100"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r14, &(0x7f0000000140)={0x2, 0x0, 0x3}, 0x8) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf251500000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYRES32, @ANYRES32=r13, @ANYBLOB="5f706d13000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8003) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r3], 0x1c}}, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0b000000080001006e0caf00628641afc955992226215e39a20dde5bbd9fb2de1f00"/47, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8040) 17.144473378s ago: executing program 4 (id=1502): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) ioctl$SIOCRSSL2CALL(r0, 0x8915, 0x0) 15.896939752s ago: executing program 3 (id=1505): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0xb, 0x43, 0x40, 0x65, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x0, 0x42d98841}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'erspan0\x00', r1, 0x7800, 0x758, 0x855, 0x5, {{0x10, 0x4, 0x1, 0x5, 0x40, 0x67, 0x0, 0x7, 0x4, 0x0, @remote, @empty, {[@ssrr={0x89, 0xf, 0x5d, [@loopback, @multicast2, @private=0xa010102]}, @ssrr={0x89, 0x1b, 0x35, [@multicast1, @dev={0xac, 0x14, 0x14, 0x43}, @local, @remote, @remote, @multicast1]}]}}}}}) 15.884037125s ago: executing program 3 (id=1506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, r4, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3cf}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast1}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001740)={0x153c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10d8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4f, 0x4, "a96052ce3ea619596d06dd7f3ff66b3ac6c3292e1f0551d405a035262bed003d6364509c11b550ec3d06e50ee02c8b9c94593f17849d15f66014ecff82e21e23d075ca65acd41478623562"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "d8b7c2edc304024326201ce3c5fb97a0e7977f909b406f4acf9b32e5a0d7d2f80385d386929c0ad5f0979c78296fbff70e2dadffec235709aa6f2380c6c91302e4a5eec2c76745fe53cdcb22d4574fcd17ccd1fb82bb1c6dcda080f65a604918470c674c0f66dfca5a0899c269167850cb296bd7116627573015b9d7b2d1b9676384ee7d4d01d34ca70715ce251493e3e16c4dba68fa82bd42a39e5d3637797c648fec2d1f757526b587288d8bffd43d272cddb425de3c1c24ec7c954a3e9e5fc935cacfcc31fef80d2d582abe6f5be0c9aca2921b573852a94a8dabbe5e3997c0b5ad2124669b1a25f70f37b30a4b01845bad64bc910198fd9c4c8c8cb90353f421af16d1c90b6155bf6154ab28052f753511e3b4964c296f21c38fd53978604a10b33cdf4ba2354b9b53dc556041aeaed6a2270d2caf7005bb55d06208aec8ee5d433b1f5aeefef17e0d76e8a0d55657693eb609857235552c3defeea81f0c5b3ee5a0287087602100d4b0cb3b74755540ab8fd8d7f95b17455357e6b20f95e16fe1bf50c79253933d6ed85e9f0c3d716bee76558ea30dd4160ce5d1900d65fe416b4aa5ccfb50a2f5dd127def5b0479c824100e3cb897fe539d0099ed650ff801329887d7462d42ae3148dc6db5647b569418bbe7a180ddf0d842516c2da051c29a6c63fb1363da611c204ff219353f860e1b16ae6985e57e53163702123896390a367283837c450382ac4fd86363a6c35f562f2a36123fd5ff57c0e5efc959a3541735889cec5f954cb18f129cddb0e622688ccc89a81b5a7c7f68f1f49beec55b403c038cc45c053e37ee86d82392530a174f97bd24613bfbfdd1fc6ead0d1a5702ba0bc89856710f02eb854806a4dbce80e198bb57fc54e674889d3378fb29c73d2ce2adeaf3b4be7cc6a5aa1ec38e6fcde3a7d13cc3b6be34a172a1f0e25f2db6dd9a8df7dba039e03c205e2531cf3ced06c13ac8f122ec3773c708a311e0143377ee0713a097150716113d303864d944ffae2e7742fb86e41a96d419e869d3e11a8f344988f2bffd56e44f0e0c9f7c0267e6b9560679be5257c86f7dc52cb42e918bd51f0d0d0cdf160b3f3a6473ee2f15afa0a769c199ccebed382d9970922b872d22444097ffbdc71bc6b976fb35706f6edb4537ed410b10c9aa5c935e0846cf28e6aea02a912f89b3f379f69b2a17d13e9c8a61a992cbf1f1d9cd45426adbe15bf813e3c38fa626d72ce4e31ffe0c99063537ba1901e43b63e693165817aecc83cd07f24f313cd5c94ce14e9d50d46adc52b3a649842084756e987c06ca8e28d2a6c2bad12ca7d577c9f95a2115373c50d0e223198f28885b2db9641670655e8e225cc9c6d3b772e73c5ee4bc70ec0b704a1e59f3effbb925a61fa01924290b9101c1b4b1d3e58326d34584d7df2870bd9d096094d8908d64494e4f77e922cf62375b4be38b3b42b3cde846e93cc36b4923d372aa0da5cc7c1a383b970c75065cdce2569b0a7639a051b3832d884e1329ae003418d95029f4bc177b1068996c83d1b5a7540d91fe29fee9e3a17a1ef539aecc2df341c9329ceb89b300d29c9b55bae18de356e1a354547f90a4989906176e38e8e21a4f8c16a085873737339535f394cd07cb91f7d840977938c1a37b552ce9616ece992eca643aa7aadd8dd8f6a0afb8e58173a75d9800ec861e1a26e5f607fdb5cefda44325d614b224d04204e92654331b7badd162d294339751fd1ae51eb0af3b5b55a65f3787abfa9dcfb85b3ed21770b6a1644469ae0fe707d0dccdc57873e675572517b6a5b28ebdc3fdb578a99a7514b1ec8a7b1e8b65efe4092b297e381afe024a56dfc95a1cb4b1725dc36b87b224b70aad539d14db0b2335d31edddc7f240d0dba3a1c570fa2dd487236f3f3162f357903c8b6f813cf7f25d9d82f65a7645a6ea7c41698cf0baaca58bbd93ad258d572d650fda12fe74b3bfc24a327af41cfdb81edef22d020c7295bafcfe8a0e26b52cf1681bda8a6a1707b2a810f13db5aa134d3f5817f90cc6104cd14f39e584c21435bd5d1c1afcc758001584ab07265802add435662ff761ff8d9ca8d5cf5d5d02808f612bebdd6773ca340551757de9464782aabe264d5cb21d86ee1ec1025a188aed5d8806479226b02875738f52b0ffdc070789e0fda769f8896a51abbed201f72d8bae9ca0d93e0d89139c2fe70dea5ee928ef0c37e0665f4ef52ef8de53fa83a9b3a472725fc90b6b75a836b4a5d294d6dc23ee69d25f788d0b1c1024be0523e11fb807f607a51d3cbcb84a4937fc85240a01ae232b68125bcbaa1e9182757edad525b3a55cd9eca66e7df9fd4f0aa12e709173644281e53bfad9de8e2208e041b7870e44a752990c7a939cad727694b27e95614297326227f8ea01205598b187570a075c97a2d31c055bcd1f438abf75ba76e5d0487570ee4af2c54c6baffba82dbf06917e457e1bce5dde80b7556af3f2d4553f2c90b0aab0be60e2f1f2bdeb1eb4f5db902b483473d7a1ada8adb2f58b266595a19d224e708cadf53c410e9478f92c5f5d07e9d3e65a3beff12f73325fc8a2ccff6ba340badb470d0d2b139222ae0eedd632516a42aad4433457630e696d717e0803a63ce281124d08ec7d75d54c90ec36beb6ffbb62719286397f7f19fb8447d15f3fb6d41e035901dfbe6dea590ffec5ddfff5dd6b9a4336e062047c9060dadb2910a52180b96a981434826c2153a6c1747fc2f3ed2aaf69c5aaa5c2a1b4e2cbcac1c84ded86e43dbf020433bb8d639024b558826f3fa80ac1da1b0457b4a402236076b93ad9143ca88a8988b8fba9801abfa3594f0fb2f47a8efdd52fcb792739327c95cc8483adb8cd76de7d4e7c46ef48d19bee741b064f32060317c1bbfbdcfc876e595c73c1ee5b001196232cedb1b2b6f987b30607da25340a98e08e4eeaa482a9b5b788f271aee45e3ba61a30c9afa8a23059304354bdbe5048eb6b9ff3b93f7903ad3e5bbf34b0966fa503a4c83c1ba061d3d33cd4e3750fc63a48563f382151571143947d570b2da69c6d75eee84352f3f5013350c8d74cf690e055252cf524c649fe3dba9a25b8ff12c093d694865d58455f4d3cfb10a65a9b360639f17adf0411d8b49db6ca6dcaa7bc97e9078e708836cee0b2e30c05e1eea8cba270710290f0b21d79acbf40b80d118deec9dee4b328282eddc70b2b0c2d3e2b6546aa8d27dd31bbe4cc3684e37462dbb045bd00226a070a426b4c0c3fbfd5aea91731bbad0ec9b3b7c699100a64696edee901e32b68a00e71540576f7666b925e9ffda9bec41ea5f38242f3112a6ed3ccf672e078367eee5d75a1c8a37ad2aaf164605703235b32f13fdc7346147b96e8282d072ab155dc1eb4cfe6fbf556a0c706aca85e6700144b795c6e3c15974030032e7b8d47026317bfb6c3d0639bc9293fa32e99f1023c56f2fb755be47722b68f7f9009198e45a0c8f3832a6d2ac43a0377176fa54e3bcaa2c05d3736d1e4bd39bcdd50969812241cc0b5f212791bc79fdb9c83d138ae9f20cd6515d0a486cba85dec9ce427a28f8e295fb192d83a9e83fb5fae2dc03c5350332c8eb2eea29b383a97b7c73707669a8ed839c6303dad8883aa8716a7b60c46aef79993500a63f19990eb45199b8dc2cae0d4be668ccf45a24cbc4fa558890aecce72a0f6865201e94cb961b88924f16772ce9a419816399c3f650be427abd4441f071fb1b1e3c3004edb1e299a650742f435021048937f868663ae7334271ed6660a28d308537df0245b546eea397f83f55eca5471f4c2acd433063974120c0df279eaa45578c1d1d377da4456fa15533460c7846adbe608834d37753d8a615f53383e01e2f055b3e8eb32e2232f3fb286978f9d012cde8b03fea43b15793f4a77525f9857f40ae2cf9185149977767dc3f5f635c9a3c0cd14269b21e23ca53718627226bedf24d153a4fd7afd2763f69dc7b4b918a416174eb9808bc4be3108597ff65e19352c091bd156076a99185c80d6426ef28ad5043a81ad6283384d0382fde64c55569e3a6574e46e732f8435e8eba0cc6bcd0c9f0119eb2dad555b764ae7217601edd339cea96c062682f7e083dedcce6ac9158ead5d94c1e160fe175d589e60ef319552b1ff03ace4883c95ddcc75cb31a85127aee879fa627c8c72952fcd9e216867a3250aa1e496e9b3c4b16d4c95a5c9d928e4f6c30d3596c688a958dc5e6c8308fd2334931383f24a585b589eded8f9acfe124ffb572d9c7badee9c2ecfcd144b5a184af11752c520031adaee28b187a7398cc093c17b9c62fbc9a86d18ec591360c63da4d0d2ab303861859d3660c2463c40f8f33935aff7c13dc499a9764250f367e541a2bfe17ef6fa6bf91215b900c88cfd0a04968b667d62618ac93aaad8c1a11ea94fe201619cc515c620dae941fdd8833510c1d362b0b49bca536794079446d840e29447d433a001276f138a617dc0e55112027d21ef8a273ee7226c52a669f267305fa43beeec0bcf2b3024e3e21f01946c35ef74fb087ec2fc1d43819dd110a1032f53e3ff312f7165b45b04a70820fec9907b3dd2cbd12efe7978da27f3f3206d623cd9cacdbb6924e1ec199f60d1b7d73aa2d8a062743b973256e9d15966bee580ad10710ca8f0a0b48fb11f8d2e8475295ed3127d058f439173597aa15704fabb80efa75c812cd7f4d251a6be0da2e26b440a83609f977036b6763f2783db166875527e58bd51aac654dd64e20c20671bef2be65949f4410620abd06a1201a38c1cf92a7368a7446d0b67fcf83c409b8c97488a0f374c74f00fca95a2d5fe324835d9f0787954e3077dab564dd76415a0c5403db3a66f30944f937d4f26ecbbab1ac9b2b5cc86216207609d381754fa689cb7bedcc2482471de6f4956f370178bca155de6b93b3ec919d292a7cc3e5e588aca2ee6529573438784c3407427154c885bb1b1a89f89b79ef7877598c501de605427136c2c5866873edb9e647e9c5f7748a67cd84f6d4f837e98b9c36111620d1fa590ca4712191c22e62a2f031b5edd13847fb99b250d6aac4e7174544a818209990038df995b0ddf84db511136e4b59c55ebff7e6069e3b4887f22db08a2d413311a878d2ebf01aee5bfd313733c3be246c14762a5d8ad5a28a10dd37d3fef08c2d2e07193ad806c3e2a9d1d1336bccfaa0f9c7dad37464c0b8ea61f23d2300717c51212cb356871133b9f7a14071fbc3aa9acb874f9a508107a592b834701983c144085c0dc3ac901abe157470bda397cc4a2f3230db3dc37dc9c1441faee7ad9f9a10ca2c2c0be197af8bec2963cbe7a300dc1b90db4f555a8a18639927e77d5d8e08fc1e61a456179ecc924b60a5f4032e2875c8d5a695ddd32d0b48bc47251154fc46ca0c1215fa96ac69065460c40d5023ffb7d1db33b1718f8a3869cafef65aea814add7929031a1d1c6876b4cc744795dc17574ad305693285be9bd65feda1796b0b753b50dff2e185ba5c3552fda0b2831ae70213c0444484cd20f4e5f4c508b042932280b8fa5f89f0e2f9655440fb87665ff271a3bdd8f785731403049a70ca463bd75738f69bc779924be6fd526bcd91002cd532f6c068603230605849dfdcea5958572227bfca790403c1b94bb84f2cc3427b13dfc7cd3de445438a41117e332c8598f1dcace6c87c4eef3534e9404207e170bf0df1e5f87d66a72109f4e55f89122347c955d31546c213da26f11e1c946a77d78dee731c17db92c128b06f93aeca3b0415d4a5c7ea1225"}, @ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "363d91be7b91f1b3f74f2a37a85737301e103af3e3e353be24e518805286fb3956f182906b3b036db92603360c1c448b4403ba4d52f87c32263d2d71984d64435ec7ed1604f8a68b568e5fa112d315dd1564b6b175fa719f583ce08e785987ec570a97fe3e08a110"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x3f0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "2457bdacef88d3632df32c1e569d74ce743d67c0fce267005f93c9699030f0c164f32733872425e4b0fa390adee53d521be5f398ed3e8252cfe90ac8edca4156609c96c9191529b6af3157f4411041ed914380b00a19c9da818a442fc98457e282fee1c8258535ed015e30c0afa8ddf05ae14bd172"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf53}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "ec1caaa5f4bc9b9a50065238328685789a53577d0b3a3c8174207c71e89f8f6d904f23b69ba861bc552bacd4f1ea2022d6e7589bb5c35837922ab7625a7658595d997f0a4c075064df82a0c9a5f110c6d6453cae633c9d4f97cb10c23700165b24b51aa77f56ddf0d0febe51e982185da9593a8ee3193f26133d678ceca4d263512beb60822a0ec3fd41f93f3ec0bfb0cd17e8fb1321044b627d7eb7d08941b4ddc7894f76c2cee570ec49cb521aa42be2fedc366e4d0ee37fae1d6220caef26341d1a497b55afea1cac24f29c"}, @ETHTOOL_A_BITSET_VALUE={0x23, 0x4, "0f638755995a21c97b9dd8072d4188a5fb8e47f083d01031afc224443864fd"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7788}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8dfa}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xec1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb63f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "6a1d15f7f449225b418c05d46126fc0eebb6f399b6eb5e6de0244645787b550d7dc08b0e5998636ca5aa34886d62cd5f73a7c37a6b9c8d52a5f82b6321612bd84d54fbddf3007d1f18"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '+}){$&\\,}\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(-,[+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '[+}:{-:/,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&[^i^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0x153c}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, r1, 0x105, 0x70bd29, 0x25dfdbfb}, 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, r4, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3cf}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast1}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001740)={0x153c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10d8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4f, 0x4, "a96052ce3ea619596d06dd7f3ff66b3ac6c3292e1f0551d405a035262bed003d6364509c11b550ec3d06e50ee02c8b9c94593f17849d15f66014ecff82e21e23d075ca65acd41478623562"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "363d91be7b91f1b3f74f2a37a85737301e103af3e3e353be24e518805286fb3956f182906b3b036db92603360c1c448b4403ba4d52f87c32263d2d71984d64435ec7ed1604f8a68b568e5fa112d315dd1564b6b175fa719f583ce08e785987ec570a97fe3e08a110"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x3f0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "2457bdacef88d3632df32c1e569d74ce743d67c0fce267005f93c9699030f0c164f32733872425e4b0fa390adee53d521be5f398ed3e8252cfe90ac8edca4156609c96c9191529b6af3157f4411041ed914380b00a19c9da818a442fc98457e282fee1c8258535ed015e30c0afa8ddf05ae14bd172"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf53}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "ec1caaa5f4bc9b9a50065238328685789a53577d0b3a3c8174207c71e89f8f6d904f23b69ba861bc552bacd4f1ea2022d6e7589bb5c35837922ab7625a7658595d997f0a4c075064df82a0c9a5f110c6d6453cae633c9d4f97cb10c23700165b24b51aa77f56ddf0d0febe51e982185da9593a8ee3193f26133d678ceca4d263512beb60822a0ec3fd41f93f3ec0bfb0cd17e8fb1321044b627d7eb7d08941b4ddc7894f76c2cee570ec49cb521aa42be2fedc366e4d0ee37fae1d6220caef26341d1a497b55afea1cac24f29c"}, @ETHTOOL_A_BITSET_VALUE={0x23, 0x4, "0f638755995a21c97b9dd8072d4188a5fb8e47f083d01031afc224443864fd"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7788}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8dfa}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xec1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb63f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "6a1d15f7f449225b418c05d46126fc0eebb6f399b6eb5e6de0244645787b550d7dc08b0e5998636ca5aa34886d62cd5f73a7c37a6b9c8d52a5f82b6321612bd84d54fbddf3007d1f18"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '+}){$&\\,}\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(-,[+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '[+}:{-:/,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&[^i^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0x153c}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) (async) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, r1, 0x105, 0x70bd29, 0x25dfdbfb}, 0x5c}}, 0x0) (async) 15.724575725s ago: executing program 3 (id=1509): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}], 0x1}}], 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x23, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xb4}, @alu={0x7, 0x0, 0x7, 0x9, 0xb, 0xffffffffffffffa9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x309cb145625007b4}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.624176393s ago: executing program 3 (id=1511): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x111}], 0x1}}], 0x1, 0x931766f6319eed40) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="140004006e736376663000000000000101000000080005"], 0x50}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c00"], 0x38}}, 0x0) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ec4ff00000000711028000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) socket(0x14, 0x1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 15.501930084s ago: executing program 3 (id=1514): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e8b02d66efc80bb"}}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x325, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000008c0), r3) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x44, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4000084) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc3082091646376a3}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8884}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x7, 0x5, 0x6, 0x10, 0x4, 0x3, 0x3, 0x0, 0x3, 0x1, 0x53c6, 0x6, 0x2, 0xfffffffffffffff9, 0xc]}, &(0x7f0000000240)=0x100) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5e8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x1810) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xc0e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xffffc5e1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x64}}, 0x0) 15.344676101s ago: executing program 0 (id=1515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xc}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x600, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x368) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x4, 0x7, 0x7, 0x1000, 0xa0000000}, 0x14) getsockopt(r4, 0x9516, 0xfffffffb, &(0x7f00000004c0)=""/78, &(0x7f0000000400)=0x4e) 15.342529093s ago: executing program 3 (id=1516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xfa3b6b2883b6fee3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x3, 0x3c5a, 0x2, 0x3}, @eth={@multicast, @multicast, @void, {@canfd={0xd, {{0x2}, 0x7, 0x2, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x64) 15.324400453s ago: executing program 0 (id=1517): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_PHYS_SWITCH_ID={0x5, 0x24, "e0"}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x8044) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4e20, 0x8000, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x4007, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@mcast2, 0x3505, 0x0, 0x2, 0x7, 0x5, 0x1, 0x80000001}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3502, 0x4, 0x1, 0x7f, 0x6, 0x0, 0x55}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800db000f0801022cbd7000fddbdf250000000848de0550bb74f08dbf628f98aa7121279d0ea8058c34d85bc22d9b3bc818b0d9a19201a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535782eff3bda0ecab4861fe787d9914dc6331271e96515f60124b631f46b7492c6428c2c58070b000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xd, 0x9, 0x5, 0x7, 0x0, 0xd, 0x25dfdbff, [@sadb_address={0x5, 0x5, 0x3c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x32, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}]}, 0x38}}, 0x10) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') 15.286449457s ago: executing program 0 (id=1518): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) listen(r1, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) 15.196652841s ago: executing program 0 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000fbffffff950000000000000050b2f533c17c6fe3ca701c4ea311886a247c350fa932a2ba405676e435e5e22ef39e4109539fb924236a20557261737f4cf0a7f9294af549195e41693a1984a4a447be9eba0b60c524e718ed02c2f99c"], &(0x7f0000000300)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r3, 0xffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611970000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x5, 0x0, &(0x7f0000001200)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a6391}, 0x20020040) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xd4, 0x10}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000001e0000000000000000000200005489e69f90270000003167f834e9782c9b85c2f9d50c1ad4255e1ccff865bcad7d6e"], 0x0, 0x1a, 0x0, 0x1}, 0x28) 15.174842598s ago: executing program 0 (id=1520): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 15.145423005s ago: executing program 0 (id=1521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="8be528ffffffff000b0003006268696467655f736c6176655f300000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close(0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040840) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r6, 0x0, {0x1, 0xf0, 0x1}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r9], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080007010000400020000000456f00b000660000401190780a010102ac14141a4e204e22009c907801000000000000009391a1a9b407927fe3c008f53378f1df51ec2e65759e4b3c0204c122d8c787f34074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd766b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8ede7929596bf86031c289fe0dfa18bb8c035e95ab1a16083a79d9e5b7c72f1813"], 0xbe) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r11, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10) 2.114073579s ago: executing program 32 (id=1500): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.068319988s ago: executing program 33 (id=1501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) preadv(r4, 0x0, 0x0, 0x5b3d2934, 0xfffffffa) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r3, @ANYRESOCT=r6, @ANYRES64=r5, @ANYBLOB="010026bd70003c0200000400000008000100"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a01040000000000000000020000004800f87f440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080006400000a40208000840000000000900010073797a30000000000900020073797a320e5c609bb4a44d6dac51a447780b98a3abf59bfdfec5b350b785e2a6041d3e7f3aced85c2b584748bf1e982fe9cfd68e73d03714c38b9fe43b050e6660fc5949db0c2ddb247214c6d3dd33d670e44c7b51c91b9301f497803e050b9ff734bf11dab71f3d152fe11b1cddb5b7d1a4b607e58f4e7fb33f6627ef29d9c8efa426ba430a55e30dfa229855f442be7031422ec099e3929e1941fae5ecd56a9cf35de4ac4279328dee8487be5dd38d0d4b00a2e584d85f83ec5844d02d42cc2012818094ed13dc3dd6870b52112659d602143cfd2f9af6f23058a4746c3a72d96d"], 0x9c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r14, &(0x7f0000000140)={0x2, 0x0, 0x3}, 0x8) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf251500000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYRES32, @ANYRES32=r13, @ANYBLOB="5f706d13000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8003) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r3], 0x1c}}, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0b000000080001006e0caf00628641afc955992226215e39a20dde5bbd9fb2de1f00"/47, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8040) 2.040130796s ago: executing program 34 (id=1502): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) ioctl$SIOCRSSL2CALL(r0, 0x8915, 0x0) 22.194286ms ago: executing program 35 (id=1521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="8be528ffffffff000b0003006268696467655f736c6176655f300000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close(0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040840) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r6, 0x0, {0x1, 0xf0, 0x1}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r9], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080007010000400020000000456f00b000660000401190780a010102ac14141a4e204e22009c907801000000000000009391a1a9b407927fe3c008f53378f1df51ec2e65759e4b3c0204c122d8c787f34074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd766b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8ede7929596bf86031c289fe0dfa18bb8c035e95ab1a16083a79d9e5b7c72f1813"], 0xbe) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r11, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10) 0s ago: executing program 36 (id=1516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xfa3b6b2883b6fee3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x3, 0x3c5a, 0x2, 0x3}, @eth={@multicast, @multicast, @void, {@canfd={0xd, {{0x2}, 0x7, 0x2, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. [ 66.001468][ T5813] cgroup: Unknown subsys name 'net' [ 66.130194][ T5813] cgroup: Unknown subsys name 'cpuset' [ 66.138647][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.514775][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.922694][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.931549][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.940194][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.945133][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.955112][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.963480][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.963752][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.971201][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.977962][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.985503][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.999789][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.000805][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.007147][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.015788][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.028856][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.036040][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.038274][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.050860][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.059157][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.066213][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.074029][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.081999][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.091711][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.100699][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.119932][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.765563][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 70.805132][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 70.864259][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 70.890744][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 70.988379][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 71.076344][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.083908][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.091723][ T5826] bridge_slave_0: entered allmulticast mode [ 71.098727][ T5826] bridge_slave_0: entered promiscuous mode [ 71.136722][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.144090][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.151591][ T5826] bridge_slave_1: entered allmulticast mode [ 71.158686][ T5826] bridge_slave_1: entered promiscuous mode [ 71.241359][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.249334][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.256472][ T5825] bridge_slave_0: entered allmulticast mode [ 71.263943][ T5825] bridge_slave_0: entered promiscuous mode [ 71.288379][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.297852][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.304967][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.312660][ T5832] bridge_slave_0: entered allmulticast mode [ 71.319800][ T5832] bridge_slave_0: entered promiscuous mode [ 71.326820][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.334572][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.341832][ T5825] bridge_slave_1: entered allmulticast mode [ 71.349088][ T5825] bridge_slave_1: entered promiscuous mode [ 71.360389][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.367795][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.374960][ T5843] bridge_slave_0: entered allmulticast mode [ 71.388068][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.388593][ T5843] bridge_slave_0: entered promiscuous mode [ 71.394481][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.403409][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.413770][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.420964][ T5843] bridge_slave_1: entered allmulticast mode [ 71.428452][ T5843] bridge_slave_1: entered promiscuous mode [ 71.437568][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.447773][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.454855][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.462528][ T5832] bridge_slave_1: entered allmulticast mode [ 71.469656][ T5832] bridge_slave_1: entered promiscuous mode [ 71.588820][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.598561][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.605796][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.613630][ T5835] bridge_slave_0: entered allmulticast mode [ 71.620764][ T5835] bridge_slave_0: entered promiscuous mode [ 71.630919][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.641900][ T5826] team0: Port device team_slave_0 added [ 71.650465][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.662087][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.680580][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.687883][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.695657][ T5835] bridge_slave_1: entered allmulticast mode [ 71.703175][ T5835] bridge_slave_1: entered promiscuous mode [ 71.711172][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.721977][ T5826] team0: Port device team_slave_1 added [ 71.729993][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.798019][ T5825] team0: Port device team_slave_0 added [ 71.851635][ T5825] team0: Port device team_slave_1 added [ 71.871991][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.883629][ T5843] team0: Port device team_slave_0 added [ 71.891730][ T5843] team0: Port device team_slave_1 added [ 71.898705][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.905633][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.932004][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.945946][ T5832] team0: Port device team_slave_0 added [ 71.965148][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.001237][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.008464][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.034817][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.058595][ T5832] team0: Port device team_slave_1 added [ 72.065057][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.072061][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.097930][ T52] Bluetooth: hci3: command tx timeout [ 72.098169][ T52] Bluetooth: hci1: command tx timeout [ 72.103532][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.155025][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.162323][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.177822][ T52] Bluetooth: hci4: command tx timeout [ 72.188598][ T5840] Bluetooth: hci0: command tx timeout [ 72.193902][ T52] Bluetooth: hci2: command tx timeout [ 72.205525][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.218365][ T5835] team0: Port device team_slave_0 added [ 72.224808][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.231791][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.258719][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.271410][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.278555][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.304617][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.337417][ T5835] team0: Port device team_slave_1 added [ 72.359515][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.366479][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.394929][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.438042][ T5826] hsr_slave_0: entered promiscuous mode [ 72.444681][ T5826] hsr_slave_1: entered promiscuous mode [ 72.452335][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.459545][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.486012][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.515875][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.523014][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.549090][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.562007][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.569138][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.595048][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.694110][ T5843] hsr_slave_0: entered promiscuous mode [ 72.700642][ T5843] hsr_slave_1: entered promiscuous mode [ 72.706716][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 72.713026][ T5843] Cannot create hsr debugfs directory [ 72.739336][ T5832] hsr_slave_0: entered promiscuous mode [ 72.747165][ T5832] hsr_slave_1: entered promiscuous mode [ 72.753192][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 72.758983][ T5832] Cannot create hsr debugfs directory [ 72.770255][ T5825] hsr_slave_0: entered promiscuous mode [ 72.777038][ T5825] hsr_slave_1: entered promiscuous mode [ 72.783391][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 72.789201][ T5825] Cannot create hsr debugfs directory [ 72.915128][ T5835] hsr_slave_0: entered promiscuous mode [ 72.921968][ T5835] hsr_slave_1: entered promiscuous mode [ 72.928326][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 72.934061][ T5835] Cannot create hsr debugfs directory [ 73.413327][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.424648][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.434997][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.453562][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.506333][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.523203][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.535662][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.548188][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.628542][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.649994][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.661612][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.672471][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.790768][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.799762][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.819593][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.831502][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.867559][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.918333][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.952162][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.959453][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.989978][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.997142][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.008510][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.019691][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.032128][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.042795][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.070551][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.146033][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.177221][ T5840] Bluetooth: hci1: command tx timeout [ 74.177974][ T52] Bluetooth: hci3: command tx timeout [ 74.190626][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.210887][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.218129][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.257505][ T52] Bluetooth: hci2: command tx timeout [ 74.259146][ T5831] Bluetooth: hci4: command tx timeout [ 74.266196][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.269413][ T5840] Bluetooth: hci0: command tx timeout [ 74.283235][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.290395][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.321957][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.329148][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.339313][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.346444][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.459997][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.517222][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.539999][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.550725][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.572901][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.580013][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.606072][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.623421][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.630530][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.673632][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.703611][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.783806][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.791093][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.846015][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.853235][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.948793][ T5826] veth0_vlan: entered promiscuous mode [ 74.996076][ T5826] veth1_vlan: entered promiscuous mode [ 75.051802][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.104610][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.172576][ T5826] veth0_macvtap: entered promiscuous mode [ 75.214899][ T5826] veth1_macvtap: entered promiscuous mode [ 75.272481][ T5832] veth0_vlan: entered promiscuous mode [ 75.293272][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.328662][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.362910][ T5825] veth0_vlan: entered promiscuous mode [ 75.370682][ T5832] veth1_vlan: entered promiscuous mode [ 75.381216][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.399318][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.410796][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.437328][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.468262][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.484232][ T5832] veth0_macvtap: entered promiscuous mode [ 75.496594][ T5825] veth1_vlan: entered promiscuous mode [ 75.541344][ T5832] veth1_macvtap: entered promiscuous mode [ 75.553604][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.655031][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.694234][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.710468][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.716628][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.742593][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.755685][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.769006][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.781659][ T5825] veth0_macvtap: entered promiscuous mode [ 75.802540][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.837346][ T5825] veth1_macvtap: entered promiscuous mode [ 75.862568][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.874816][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.960578][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.978249][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.984009][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.003222][ T5835] veth0_vlan: entered promiscuous mode [ 76.010602][ T5843] veth0_vlan: entered promiscuous mode [ 76.014356][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.025733][ T5843] veth1_vlan: entered promiscuous mode [ 76.050749][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.095728][ T1015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.114730][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.117859][ T5835] veth1_vlan: entered promiscuous mode [ 76.128196][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.155689][ T1015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.169739][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.215341][ T1015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.257746][ T5840] Bluetooth: hci1: command tx timeout [ 76.263177][ T5840] Bluetooth: hci3: command tx timeout [ 76.314812][ T5843] veth0_macvtap: entered promiscuous mode [ 76.337237][ T5831] Bluetooth: hci2: command tx timeout [ 76.337883][ T52] Bluetooth: hci4: command tx timeout [ 76.342732][ T5840] Bluetooth: hci0: command tx timeout [ 76.358716][ T5843] veth1_macvtap: entered promiscuous mode [ 76.523541][ T5835] veth0_macvtap: entered promiscuous mode [ 76.539677][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.548510][ T5950] nbd: must specify at least one socket [ 76.552915][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.567566][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.573600][ T5835] veth1_macvtap: entered promiscuous mode [ 76.601763][ T5953] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.616850][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.690352][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.709337][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.722848][ T1015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.729520][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.738146][ T1015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.761677][ T5953] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7'. [ 76.773132][ T5953] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7'. [ 76.814939][ T1015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.835532][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.856454][ T5962] ipt_ECN: cannot use operation on non-tcp rule [ 76.871649][ T1015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.880488][ T5961] ipt_ECN: cannot use operation on non-tcp rule [ 76.945430][ T1015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.960456][ T5966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.964868][ T1015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.027877][ T995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.036699][ T995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.183691][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.209181][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.352549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.365357][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.466082][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.499710][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.600337][ T5988] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 77.616645][ T5988] bond1 (unregistering): Released all slaves [ 77.673515][ T5993] xt_hashlimit: size too large, truncated to 1048576 [ 77.695542][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.705725][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.986772][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 78.024689][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 78.053823][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 78.072862][ T6001] can: request_module (can-proto-0) failed. [ 78.086402][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 78.086488][ T65] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.135421][ T65] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.145736][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 78.155015][ T65] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.157530][ T6009] netlink: 84 bytes leftover after parsing attributes in process `syz.3.18'. [ 78.182481][ T65] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.229031][ T6005] Zero length message leads to an empty skb [ 78.337779][ T5840] Bluetooth: hci3: command tx timeout [ 78.339382][ T52] Bluetooth: hci1: command tx timeout [ 78.353701][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 78.417545][ T52] Bluetooth: hci0: command tx timeout [ 78.422976][ T52] Bluetooth: hci2: command tx timeout [ 78.430764][ T52] Bluetooth: hci4: command tx timeout [ 78.479706][ T6013] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 78.631252][ T6022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.685295][ T6034] warning: `syz.0.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.828948][ T6022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.872289][ T6041] netlink: 48 bytes leftover after parsing attributes in process `syz.4.29'. [ 78.970155][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.006999][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.015772][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.099723][ T6022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.129516][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.233828][ T6022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.362922][ T6061] Bluetooth: MGMT ver 1.23 [ 79.585069][ T6068] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 79.724822][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.796095][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.845413][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.903257][ T1015] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.507713][ T6115] syzkaller0: entered promiscuous mode [ 80.513277][ T6115] syzkaller0: entered allmulticast mode [ 80.520832][ T6119] netlink: 'syz.3.53': attribute type 12 has an invalid length. [ 80.536495][ T6119] netlink: 'syz.3.53': attribute type 29 has an invalid length. [ 80.610616][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.619164][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.721498][ T30] audit: type=1800 audit(1764267307.549:2): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.51" name="memory.events" dev="tmpfs" ino=70 res=0 errno=0 [ 81.378680][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.384856][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 82.077911][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.085140][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.092951][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.100069][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.111263][ T6128] __nla_validate_parse: 14 callbacks suppressed [ 82.111279][ T6128] netlink: 52 bytes leftover after parsing attributes in process `syz.4.52'. [ 82.134696][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.141898][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.482308][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.68'. [ 82.625969][ T6190] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET) [ 82.630471][ T6194] gtp0: entered promiscuous mode [ 82.647048][ T6194] gtp0: entered allmulticast mode [ 82.716067][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'. [ 82.736645][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 82.796690][ T6198] netlink: 'syz.1.73': attribute type 2 has an invalid length. [ 82.895658][ T6201] IPv6: addrconf: prefix option has invalid lifetime [ 83.085678][ T6213] syzkaller0: entered promiscuous mode [ 83.110594][ T6213] syzkaller0: entered allmulticast mode [ 83.157513][ T6219] netlink: 'syz.2.80': attribute type 5 has an invalid length. [ 83.169700][ T6213] netlink: 'syz.3.79': attribute type 11 has an invalid length. [ 83.345845][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.82'. [ 83.477496][ T6229] batman_adv: batadv0: Adding interface: dummy0 [ 83.483781][ T6229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.527565][ T6229] batman_adv: batadv0: Interface activated: dummy0 [ 83.574995][ T6235] batadv0: mtu less than device minimum [ 83.593172][ T6235] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.605190][ T6235] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.617124][ T6235] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.629029][ T6235] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.640915][ T6235] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.652851][ T6235] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.664659][ T6235] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.676556][ T6235] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.761666][ T6246] netlink: 68 bytes leftover after parsing attributes in process `syz.2.89'. [ 83.995934][ T6261] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 84.074887][ T6261] netlink: 'syz.3.91': attribute type 4 has an invalid length. [ 84.106407][ T6261] xt_TCPMSS: Only works on TCP SYN packets [ 84.385201][ T6279] syzkaller0: entered promiscuous mode [ 84.391352][ T6279] syzkaller0: entered allmulticast mode [ 84.402978][ T6284] netlink: 'syz.3.98': attribute type 18 has an invalid length. [ 84.751513][ T6300] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 84.808154][ T6304] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 84.848206][ T6300] team0: Port device dummy0 added [ 84.867545][ T6304] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 84.917606][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 84.963669][ T6304] team0: Failed to send options change via netlink (err -105) [ 84.995593][ T6304] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.012336][ T6304] team0: Port device dummy0 removed [ 85.029742][ T6304] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.044217][ T6305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.102'. [ 85.230406][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 85.291526][ T6322] nbd: illegal input index 2958377 [ 85.357341][ T6321] syzkaller1: entered promiscuous mode [ 85.377978][ T6321] syzkaller1: entered allmulticast mode [ 85.386494][ T5883] IPVS: starting estimator thread 0... [ 85.453244][ T6331] tipc: Started in network mode [ 85.515907][ T6331] tipc: Node identity , cluster identity 4711 [ 85.530361][ T6332] IPVS: using max 26 ests per chain, 62400 per kthread [ 85.553517][ T6331] tipc: Failed to obtain node identity [ 85.568345][ T6331] tipc: Enabling of bearer rejected, failed to enable media [ 85.582303][ T6341] netlink: 108 bytes leftover after parsing attributes in process `syz.4.114'. [ 85.661706][ T6336] syzkaller0: entered promiscuous mode [ 85.678368][ T6336] syzkaller0: entered allmulticast mode [ 86.758989][ T1226] cfg80211: failed to load regulatory.db [ 87.366516][ T6403] netlink: 'syz.2.129': attribute type 23 has an invalid length. [ 87.465674][ T6404] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 87.524087][ T6404] __nla_validate_parse: 1 callbacks suppressed [ 87.524105][ T6404] netlink: 224 bytes leftover after parsing attributes in process `syz.1.130'. [ 87.686640][ T6432] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 87.786563][ T6432] bond1: (slave ip6gretap1): making interface the new active one [ 87.825317][ T6432] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 87.827978][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 87.845427][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 87.919136][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 88.160223][ T6439] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 88.177191][ T6439] netlink: 4128 bytes leftover after parsing attributes in process `syz.1.134'. [ 88.197637][ T6462] IPVS: length: 8 != 1152 [ 88.913229][ T5883] IPVS: starting estimator thread 0... [ 89.027059][ T6506] IPVS: using max 28 ests per chain, 67200 per kthread [ 89.167473][ T6525] netlink: 68 bytes leftover after parsing attributes in process `syz.1.161'. [ 89.269205][ T6525] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 89.290027][ T6525] netlink: 96 bytes leftover after parsing attributes in process `syz.1.161'. [ 89.527116][ T6549] netlink: 'syz.1.168': attribute type 1 has an invalid length. [ 89.650424][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 89.670787][ T6557] netlink: 48 bytes leftover after parsing attributes in process `syz.3.171'. [ 89.707882][ T65] syzkaller0: tun_net_xmit 76 [ 89.713142][ T65] syzkaller0: tun_net_xmit 48 [ 89.718380][ T6557] syzkaller0: entered promiscuous mode [ 89.723922][ T6557] syzkaller0: entered allmulticast mode [ 89.738190][ T65] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.747111][ T5883] syzkaller0: tun_net_xmit 76 [ 89.747697][ T65] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.773174][ T6560] net_ratelimit: 11 callbacks suppressed [ 89.773193][ T6560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.806569][ T6562] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 89.822590][ T6562] syzkaller0: Linktype set failed because interface is up [ 89.830595][ T5905] syzkaller0: tun_net_xmit 76 [ 89.845149][ T65] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.867183][ T43] syzkaller0: tun_net_xmit 76 [ 89.949883][ T6568] netlink: 'syz.1.175': attribute type 83 has an invalid length. [ 90.077287][ T43] syzkaller0: tun_net_xmit 76 [ 90.150896][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 90.225326][ T6579] GUP no longer grows the stack in syz.1.176 (6579): 200000003000-20000000a000 (200000001000) [ 90.236484][ T6579] CPU: 0 UID: 0 PID: 6579 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT(full) [ 90.236509][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.236527][ T6579] Call Trace: [ 90.236534][ T6579] [ 90.236543][ T6579] dump_stack_lvl+0x189/0x250 [ 90.236584][ T6579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.236610][ T6579] ? __pfx__printk+0x10/0x10 [ 90.236627][ T6579] ? find_vma+0xe7/0x160 [ 90.236667][ T6579] __get_user_pages+0x2470/0x2a00 [ 90.236698][ T6579] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 90.236753][ T6579] ? rcu_is_watching+0x15/0xb0 [ 90.236783][ T6579] __gup_longterm_locked+0xde4/0x1660 [ 90.236820][ T6579] ? try_grab_folio_fast+0x1bf/0x6a0 [ 90.236856][ T6579] ? gup_fast_fallback+0x1b86/0x22d0 [ 90.236887][ T6579] gup_fast_fallback+0x1d65/0x22d0 [ 90.236951][ T6579] ? __pfx_gup_fast_fallback+0x10/0x10 [ 90.236972][ T6579] ? __mutex_lock+0x335/0x1350 [ 90.236999][ T6579] ? is_valid_gup_args+0x11f/0x200 [ 90.237027][ T6579] ? get_user_pages_fast+0x4d/0xb0 [ 90.237054][ T6579] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 90.237089][ T6579] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 90.237108][ T6579] ? wait_for_space+0x248/0x2d0 [ 90.237129][ T6579] iov_iter_get_pages2+0x5e/0xa0 [ 90.237157][ T6579] __se_sys_vmsplice+0x548/0x10d0 [ 90.237195][ T6579] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 90.237252][ T6579] ? __pfx_futex_wake+0x10/0x10 [ 90.237273][ T6579] ? restore_signal_shadow_stack+0x3b7/0x480 [ 90.237304][ T6579] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 90.237380][ T6579] ? do_syscall_64+0xbe/0xfa0 [ 90.237413][ T6579] do_syscall_64+0xfa/0xfa0 [ 90.237441][ T6579] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.237468][ T6579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.237487][ T6579] ? clear_bhb_loop+0x60/0xb0 [ 90.237511][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.237529][ T6579] RIP: 0033:0x7f522818f749 [ 90.237554][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.237571][ T6579] RSP: 002b:00007f5228f61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 90.237592][ T6579] RAX: ffffffffffffffda RBX: 00007f52283e6090 RCX: 00007f522818f749 [ 90.237606][ T6579] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 90.237619][ T6579] RBP: 00007f5228213f91 R08: 0000000000000000 R09: 0000000000000000 [ 90.237631][ T6579] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 90.237642][ T6579] R13: 00007f52283e6128 R14: 00007f52283e6090 R15: 00007ffc15adc5d8 [ 90.237674][ T6579] [ 91.424483][ T65] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.579089][ T6587] vcan0: entered allmulticast mode [ 92.323857][ T30] audit: type=1800 audit(1764267319.149:3): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=191 res=0 errno=0 [ 92.493886][ T6637] netlink: 'syz.4.191': attribute type 7 has an invalid length. [ 92.511669][ T6637] netlink: 'syz.4.191': attribute type 8 has an invalid length. [ 92.750746][ T6660] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.030731][ T6678] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20000 [ 93.093230][ T6682] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 93.135361][ T6682] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 93.177504][ T6682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.529166][ T6709] __nla_validate_parse: 6 callbacks suppressed [ 93.529183][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.211'. [ 93.723019][ T6725] Cannot find add_set index 0 as target [ 93.769841][ T6727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.215'. [ 93.779506][ T6716] can: request_module (can-proto-0) failed. [ 93.863604][ T6729] netlink: 52 bytes leftover after parsing attributes in process `syz.2.218'. [ 93.892451][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.900202][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.916124][ T6734] netlink: 76 bytes leftover after parsing attributes in process `syz.2.218'. [ 93.928967][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.936706][ T6734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.944299][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.951491][ T6734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.981226][ T6734] netlink: 52 bytes leftover after parsing attributes in process `syz.2.218'. [ 94.012939][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.020267][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.152202][ T6742] netlink: 332 bytes leftover after parsing attributes in process `syz.4.223'. [ 94.194353][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'. [ 94.408124][ T6755] netlink: 40 bytes leftover after parsing attributes in process `syz.4.227'. [ 94.444342][ T6758] syzkaller1: entered promiscuous mode [ 94.450939][ T6755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.470070][ T6758] syzkaller1: entered allmulticast mode [ 94.545561][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.230'. [ 94.582751][ T6763] tipc: Started in network mode [ 94.612667][ T6763] tipc: Node identity 866be144cf52, cluster identity 4711 [ 94.621060][ T6763] tipc: Enabled bearer , priority 0 [ 94.721956][ T6770] syzkaller0: entered promiscuous mode [ 94.737638][ T6770] syzkaller0: entered allmulticast mode [ 94.772516][ T6763] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.924525][ T6763] tipc: Resetting bearer [ 94.975577][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 94.987487][ T6762] tipc: Resetting bearer [ 95.070699][ T6762] tipc: Disabling bearer [ 95.297329][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.303582][ T6809] syzkaller0: entered promiscuous mode [ 95.316405][ T6809] syzkaller0: entered allmulticast mode [ 95.382500][ T6809] tipc: Started in network mode [ 95.387635][ T6809] tipc: Node identity 3a2f2444b624, cluster identity 4711 [ 95.395020][ T6809] tipc: Enabled bearer , priority 0 [ 95.419727][ T6808] tipc: Resetting bearer [ 95.461051][ T6808] tipc: Disabling bearer [ 95.612151][ T5840] block nbd0: Receive control failed (result -32) [ 96.188168][ T6851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.364949][ T6859] syzkaller1: entered promiscuous mode [ 96.386052][ T6859] syzkaller1: entered allmulticast mode [ 96.435077][ T6856] netlink: 'syz.3.259': attribute type 11 has an invalid length. [ 96.467647][ T6863] netlink: 'syz.0.261': attribute type 8 has an invalid length. [ 96.820321][ T6880] veth1: entered allmulticast mode [ 96.875753][ T6884] veth3: entered allmulticast mode [ 96.950593][ T6893] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 97.010345][ T6899] netlink: 'syz.1.272': attribute type 11 has an invalid length. [ 97.021656][ T6898] tipc: Enabled bearer , priority 0 [ 97.029384][ T6898] syzkaller0: entered promiscuous mode [ 97.034866][ T6898] syzkaller0: entered allmulticast mode [ 97.067498][ T6898] tipc: Resetting bearer [ 97.088846][ T6899] netlink: 'syz.1.272': attribute type 11 has an invalid length. [ 97.106727][ T6899] netlink: 'syz.1.272': attribute type 11 has an invalid length. [ 97.115560][ T6895] tipc: Resetting bearer [ 97.145794][ T6895] tipc: Disabling bearer [ 98.031926][ T6957] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 98.195011][ T6967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 98.364331][ T6979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.527940][ T6986] raw_sendmsg: syz.2.300 forgot to set AF_INET. Fix it! [ 98.540963][ T6986] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 98.606740][ T6986] bond1 (unregistering): Released all slaves [ 98.661268][ T6993] ip6tnl1: entered promiscuous mode [ 98.703532][ T6993] ip6tnl1: entered allmulticast mode [ 98.893926][ T7006] netlink: 'syz.3.306': attribute type 11 has an invalid length. [ 98.909597][ T7005] netlink: 'syz.3.306': attribute type 11 has an invalid length. [ 99.065668][ T7013] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 99.084315][ T7013] __nla_validate_parse: 14 callbacks suppressed [ 99.084332][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 99.129457][ T7017] ipt_rpfilter: unknown options [ 99.310132][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 99.323404][ T7023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.312'. [ 99.346691][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 99.365967][ T7029] tipc: Invalid UDP bearer configuration [ 99.366025][ T7029] tipc: Enabling of bearer rejected, failed to enable media [ 99.400323][ T7023] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 99.469843][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 99.503202][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 99.677014][ T7032] team0: Port device team_slave_0 removed [ 99.758107][ T7049] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 99.783637][ T7049] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 99.801742][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 99.810808][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 100.039652][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 100.211742][ T7080] netlink: 256 bytes leftover after parsing attributes in process `syz.4.330'. [ 100.253777][ T7080] netlink: 'syz.4.330': attribute type 9 has an invalid length. [ 100.272505][ T7084] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 101.183398][ T7139] ip6t_srh: unknown srh invflags 4000 [ 101.210111][ T6091] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.224034][ T6091] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.252956][ T6091] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.273336][ T6091] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.317643][ T7143] syzkaller0: entered promiscuous mode [ 101.327005][ T7143] syzkaller0: entered allmulticast mode [ 101.545310][ T7163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.552765][ T7163] IPv6: NLM_F_CREATE should be set when creating new route [ 101.605521][ T7153] netlink: 'syz.2.354': attribute type 16 has an invalid length. [ 101.615599][ T7153] netlink: 'syz.2.354': attribute type 17 has an invalid length. [ 101.638871][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.646105][ T7153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.654111][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.661315][ T7153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.682151][ T7153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.909871][ T7182] netlink: 'syz.0.363': attribute type 2 has an invalid length. [ 101.919088][ T7182] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 101.926835][ T7182] netlink: 'syz.0.363': attribute type 2 has an invalid length. [ 102.254008][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.287633][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.384821][ T7205] xt_recent: Unsupported userspace flags (000000b1) [ 102.504184][ T7200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.569991][ T7213] syzkaller0: entered promiscuous mode [ 102.575499][ T7213] syzkaller0: entered allmulticast mode [ 102.626459][ T7213] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.742474][ T7217] syzkaller0: entered promiscuous mode [ 102.755761][ T7217] syzkaller0: entered allmulticast mode [ 102.975338][ T7230] geneve2: entered promiscuous mode [ 103.160226][ T7237] syzkaller0: entered promiscuous mode [ 103.184277][ T7237] syzkaller0: entered allmulticast mode [ 103.200155][ T7241] tipc: Enabling of bearer rejected, failed to enable media [ 103.356278][ T7247] 0: reclassify loop, rule prio 0, protocol 800 [ 103.445414][ T7256] tipc: Can't bind to reserved service type 1 [ 103.460832][ T5840] Bluetooth: hci4: command tx timeout [ 103.793339][ T7274] syzkaller1: entered promiscuous mode [ 103.805828][ T7274] syzkaller1: entered allmulticast mode [ 104.215156][ T7301] validate_nla: 6 callbacks suppressed [ 104.215173][ T7301] netlink: 'syz.0.400': attribute type 33 has an invalid length. [ 104.265148][ T7301] __nla_validate_parse: 24 callbacks suppressed [ 104.265218][ T7301] netlink: 152 bytes leftover after parsing attributes in process `syz.0.400'. [ 104.547628][ T7313] syzkaller0: entered promiscuous mode [ 104.553137][ T7313] syzkaller0: entered allmulticast mode [ 104.570908][ T7315] netlink: 324 bytes leftover after parsing attributes in process `syz.0.406'. [ 104.590189][ T7313] tipc: Enabled bearer , priority 0 [ 104.600506][ T7313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.613816][ T7317] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 104.631444][ T7311] tipc: Resetting bearer [ 104.728976][ T7311] tipc: Disabling bearer [ 104.869286][ T7331] syz_tun: entered allmulticast mode [ 104.921688][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 104.954062][ T7330] syz_tun: left allmulticast mode [ 105.019777][ T7337] netlink: 'syz.2.411': attribute type 11 has an invalid length. [ 105.036637][ T7337] netlink: 'syz.2.411': attribute type 11 has an invalid length. [ 105.090047][ T7337] netlink: 224 bytes leftover after parsing attributes in process `syz.2.411'. [ 105.137900][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.413'. [ 105.140505][ T7343] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.414'. [ 105.191187][ T7343] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 105.370374][ T7344] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 105.484159][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 105.761435][ T7370] IPVS: Unknown mcast interface: pimreg0 [ 105.771837][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.422'. [ 106.069368][ T7387] netlink: 'syz.2.429': attribute type 9 has an invalid length. [ 106.197208][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 106.222579][ T7396] netlink: 348 bytes leftover after parsing attributes in process `syz.1.432'. [ 106.537154][ T7411] sctp: [Deprecated]: syz.3.438 (pid 7411) Use of int in maxseg socket option. [ 106.537154][ T7411] Use struct sctp_assoc_value instead [ 106.931610][ T7436] syzkaller1: entered promiscuous mode [ 106.956470][ T7436] syzkaller1: entered allmulticast mode [ 107.492722][ T7462] bond1: entered promiscuous mode [ 107.501703][ T7464] x_tables: duplicate underflow at hook 1 [ 107.502291][ T7462] bond1: entered allmulticast mode [ 107.514904][ T7462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.534845][ T7467] vxcan1 speed is unknown, defaulting to 1000 [ 107.551600][ T7467] vxcan1 speed is unknown, defaulting to 1000 [ 107.697003][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 107.789443][ T7467] vxcan1 speed is unknown, defaulting to 1000 [ 108.400454][ T5905] vxcan1 speed is unknown, defaulting to 1000 [ 108.420988][ T7467] infiniband syz2: set active [ 108.425914][ T7467] infiniband syz2: added vxcan1 [ 108.480945][ T7467] syz2: rxe_create_cq: returned err = -12 [ 108.524157][ T7467] infiniband syz2: Couldn't create ib_mad CQ [ 108.561720][ T7467] infiniband syz2: Couldn't open port 1 [ 108.630906][ T7523] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 108.681843][ T7467] RDS/IB: syz2: added [ 108.686297][ T7467] smc: adding ib device syz2 with port count 1 [ 108.706065][ T7467] smc: ib device syz2 port 1 has no pnetid [ 108.749940][ T7523] bond1: entered promiscuous mode [ 108.755013][ T7523] bond1: entered allmulticast mode [ 108.776815][ T7523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.786366][ T1226] vxcan1 speed is unknown, defaulting to 1000 [ 108.796138][ T7467] vxcan1 speed is unknown, defaulting to 1000 [ 108.861885][ T7537] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 109.004839][ T7548] netlink: 'syz.2.476': attribute type 33 has an invalid length. [ 109.014670][ T7549] netlink: 'syz.2.476': attribute type 33 has an invalid length. [ 109.372481][ T7569] __nla_validate_parse: 73 callbacks suppressed [ 109.372500][ T7569] netlink: 68 bytes leftover after parsing attributes in process `syz.2.482'. [ 109.399744][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 109.528329][ T7580] geneve2: entered promiscuous mode [ 109.612118][ T7584] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 109.772644][ T7584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.793861][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 109.806034][ T7467] vxcan1 speed is unknown, defaulting to 1000 [ 109.984206][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 110.159163][ T7615] netlink: 124 bytes leftover after parsing attributes in process `syz.3.493'. [ 110.227826][ T7615] netlink: 192 bytes leftover after parsing attributes in process `syz.3.493'. [ 110.275176][ T7615] netlink: 192 bytes leftover after parsing attributes in process `syz.3.493'. [ 110.414309][ T7467] vxcan1 speed is unknown, defaulting to 1000 [ 110.721749][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 110.746272][ T7640] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 110.894071][ T7646] bond2: (slave gretap1): making interface the new active one [ 110.922744][ T7646] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 111.136437][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 111.159436][ T7467] vxcan1 speed is unknown, defaulting to 1000 [ 111.200695][ T7650] veth0_macvtap: left promiscuous mode [ 111.308268][ T7660] syzkaller0: entered promiscuous mode [ 111.314341][ T7660] syzkaller0: entered allmulticast mode [ 112.042425][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 112.204935][ T7467] vxcan1 speed is unknown, defaulting to 1000 [ 113.183721][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.191881][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.344683][ T7743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.360065][ T7743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.419018][ T7760] netlink: 'syz.4.526': attribute type 21 has an invalid length. [ 113.581513][ T7467] vxcan1 speed is unknown, defaulting to 1000 [ 113.581914][ T7760] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 113.607355][ T6094] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.616250][ T6094] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.679992][ T6094] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.703337][ T6094] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.733693][ T6094] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.746313][ T7767] ipt_ECN: cannot use operation on non-tcp rule [ 113.755195][ T6094] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.798059][ T6094] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.819603][ T6094] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.846875][ T7773] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 113.895727][ T7777] xfrm1: entered allmulticast mode [ 114.275984][ T7793] siw: device registration error -23 [ 114.436100][ T7799] __nla_validate_parse: 2 callbacks suppressed [ 114.436116][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 114.749329][ T7815] netlink: 'syz.2.544': attribute type 32 has an invalid length. [ 114.773265][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 114.930911][ T7815] bond2: Setting coupled_control to off (0) [ 115.063790][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.552'. [ 115.241892][ T7847] syzkaller0: entered promiscuous mode [ 115.248068][ T7847] syzkaller0: entered allmulticast mode [ 115.371141][ T7854] netlink: 14 bytes leftover after parsing attributes in process `syz.0.553'. [ 115.685050][ T7867] netlink: 'syz.3.560': attribute type 2 has an invalid length. [ 115.694060][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 116.151450][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 116.187359][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 116.202275][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 116.443035][ T7898] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 116.455109][ T7904] trusted_key: syz.4.572 sent an empty control message without MSG_MORE. [ 116.472593][ T7898] bond3 (unregistering): Released all slaves [ 116.559804][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.740024][ T7923] xt_hashlimit: max too large, truncated to 1048576 [ 117.022902][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 117.241267][ T7947] syz.0.587 (7947) used obsolete PPPIOCDETACH ioctl [ 117.631305][ T7971] block nbd1: Unsupported socket: should be TCP or UNIX. [ 117.693934][ T7971] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 117.706378][ T7971] bond1 (unregistering): Released all slaves [ 117.918550][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 118.055733][ T7991] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 118.083770][ T7991] bond1 (unregistering): Released all slaves [ 118.323060][ T8012] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 118.521624][ T8026] netlink: 'syz.2.611': attribute type 5 has an invalid length. [ 118.553657][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.572366][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.591568][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.598055][ T6093] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe1 [ 118.608418][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.634804][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.652982][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.676644][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.694541][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.710534][ T8031] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 118.765041][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.049093][ T8055] xt_hashlimit: size too large, truncated to 1048576 [ 119.496292][ T8071] __nla_validate_parse: 8 callbacks suppressed [ 119.496310][ T8071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.622'. [ 119.546267][ T8071] tipc: Invalid UDP bearer configuration [ 119.546476][ T8071] tipc: Enabling of bearer rejected, failed to enable media [ 119.589705][ T8076] syzkaller0: entered promiscuous mode [ 119.594772][ T8078] nbd: must specify at least one socket [ 119.595835][ T8076] syzkaller0: entered allmulticast mode [ 119.673444][ T8084] netlink: 68 bytes leftover after parsing attributes in process `syz.4.625'. [ 119.683447][ T8084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.625'. [ 119.935023][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 120.131326][ T8102] IPVS: Unknown mcast interface: dvmrp0 [ 120.153458][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 120.205877][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 120.220956][ T8104] IPv6: sit1: Disabled Multicast RS [ 120.230303][ T8104] sit1: entered allmulticast mode [ 120.516574][ T8111] syzkaller1: entered promiscuous mode [ 120.531539][ T8111] syzkaller1: entered allmulticast mode [ 120.792419][ T8138] netlink: 'syz.4.640': attribute type 30 has an invalid length. [ 120.931435][ T8138] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 120.945449][ T8138] bond3 (unregistering): Released all slaves [ 120.946686][ T8151] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 121.936511][ T8209] netlink: 312 bytes leftover after parsing attributes in process `syz.3.660'. [ 121.965223][ T8205] bond1: entered promiscuous mode [ 121.983648][ T8205] bond1: entered allmulticast mode [ 121.989509][ T8205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.006618][ T8213] gtp0: entered promiscuous mode [ 122.013269][ T8213] gtp0: entered allmulticast mode [ 122.089124][ T8218] netlink: 348 bytes leftover after parsing attributes in process `syz.3.663'. [ 122.605261][ T8236] syzkaller0: entered promiscuous mode [ 122.612296][ T8236] syzkaller0: entered allmulticast mode [ 122.896825][ T8250] netlink: 19 bytes leftover after parsing attributes in process `syz.0.673'. [ 123.006623][ T8254] netlink: 80 bytes leftover after parsing attributes in process `syz.3.675'. [ 123.076086][ T8257] dvmrp0: entered allmulticast mode [ 123.143339][ T8262] netlink: 'syz.1.677': attribute type 39 has an invalid length. [ 123.217422][ T8267] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 123.382868][ T8276] vlan1: entered allmulticast mode [ 123.412180][ T8276] veth0_vlan: entered allmulticast mode [ 123.466399][ T8283] nbd: illegal input index 2958377 [ 123.588425][ T8292] netlink: 'syz.1.687': attribute type 6 has an invalid length. [ 123.842432][ T8303] vxcan1 speed is unknown, defaulting to 1000 [ 123.963136][ T8317] netlink: 'syz.1.694': attribute type 17 has an invalid length. [ 123.981591][ T8317] erspan0: entered promiscuous mode [ 123.988554][ T8317] gretap0: entered promiscuous mode [ 123.996042][ T8317] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 124.006065][ T8317] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 124.154977][ T8323] xt_l2tp: v2 tid > 0xffff: 1114244 [ 124.164456][ T8323] netlink: 'syz.1.697': attribute type 21 has an invalid length. [ 124.349477][ T8327] vlan2: entered allmulticast mode [ 124.354642][ T8327] bond0: entered allmulticast mode [ 124.360250][ T8327] bond_slave_0: entered allmulticast mode [ 124.366004][ T8327] bond_slave_1: entered allmulticast mode [ 124.925778][ T8363] pim6reg1: entered promiscuous mode [ 124.940495][ T8363] pim6reg1: entered allmulticast mode [ 125.164863][ T8372] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 125.213824][ T8372] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.226770][ T8372] gretap1: entered promiscuous mode [ 125.232547][ T8372] gretap1: entered allmulticast mode [ 125.345600][ T8385] __nla_validate_parse: 11 callbacks suppressed [ 125.345648][ T8385] netlink: 68 bytes leftover after parsing attributes in process `syz.0.713'. [ 125.442033][ T8387] netlink: 'syz.2.714': attribute type 83 has an invalid length. [ 125.530273][ T8398] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 125.543915][ T8398] netlink: 228 bytes leftover after parsing attributes in process `syz.3.715'. [ 125.732441][ T8403] --map-set only usable from mangle table [ 125.791572][ T8406] netlink: 'syz.0.719': attribute type 11 has an invalid length. [ 125.993799][ T5883] vxcan1 speed is unknown, defaulting to 1000 [ 126.171851][ T5898] IPVS: starting estimator thread 0... [ 126.206734][ T8423] dvmrp6: entered allmulticast mode [ 126.252169][ T8427] netlink: 48 bytes leftover after parsing attributes in process `syz.4.724'. [ 126.271637][ T8424] IPVS: using max 27 ests per chain, 64800 per kthread [ 126.325964][ T5840] Bluetooth: hci4: link tx timeout [ 126.331516][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.514745][ T8442] syzkaller0: entered promiscuous mode [ 126.541101][ T8442] syzkaller0: entered allmulticast mode [ 126.575421][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.730'. [ 126.794706][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'. [ 126.820782][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.736'. [ 126.861434][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'. [ 126.893650][ T8470] ip6t_srh: unknown srh match flags 4000 [ 126.911420][ T8469] syzkaller0: entered promiscuous mode [ 126.911437][ T8460] netlink: 'syz.3.735': attribute type 7 has an invalid length. [ 126.936466][ T8468] netlink: 'syz.3.735': attribute type 7 has an invalid length. [ 126.937848][ T8469] syzkaller0: entered allmulticast mode [ 126.949094][ T8468] netlink: 'syz.3.735': attribute type 8 has an invalid length. [ 127.011892][ T8460] netlink: 'syz.3.735': attribute type 8 has an invalid length. [ 127.017158][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 127.034829][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 127.051770][ T8476] Cannot find set identified by id 0 to match [ 127.207161][ T8478] netlink: 372 bytes leftover after parsing attributes in process `syz.1.738'. [ 127.607467][ T12] syzkaller0: tun_net_xmit 76 [ 127.612988][ T12] syzkaller0: tun_net_xmit 48 [ 127.642853][ T5933] syzkaller0: tun_net_xmit 76 [ 128.427099][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 129.244459][ T5906] IPVS: starting estimator thread 0... [ 129.253988][ T8543] netlink: 'syz.0.758': attribute type 2 has an invalid length. [ 129.262649][ T8543] netlink: 'syz.0.758': attribute type 8 has an invalid length. [ 129.395579][ T8545] IPVS: using max 28 ests per chain, 67200 per kthread [ 129.512577][ T8562] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 129.542973][ T8557] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 129.580134][ T8557] syzkaller0: entered promiscuous mode [ 129.585840][ T8557] syzkaller0: entered allmulticast mode [ 130.496820][ T8603] __nla_validate_parse: 67 callbacks suppressed [ 130.496838][ T8603] netlink: 56 bytes leftover after parsing attributes in process `syz.4.774'. [ 131.460384][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 131.543440][ T8624] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 131.587716][ T8618] bond0: (slave bond_slave_1): Releasing backup interface [ 131.628104][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.782'. [ 131.637478][ T8633] nbd: must specify at least one socket [ 131.653258][ T8625] IPv6: sit2: Disabled Multicast RS [ 131.660362][ T8625] sit2: entered allmulticast mode [ 131.820308][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 132.356631][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'. [ 132.658751][ T8692] netlink: 'syz.0.798': attribute type 10 has an invalid length. [ 132.742937][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.779243][ T8703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.801'. [ 132.800852][ T8692] bridge_slave_1: left allmulticast mode [ 132.806543][ T8692] bridge_slave_1: left promiscuous mode [ 132.829030][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.834718][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.849129][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.860705][ T8692] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 133.294359][ T8738] dvmrp0: entered allmulticast mode [ 133.302495][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 133.481404][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 133.603739][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 133.651692][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 133.788234][ T8767] net_ratelimit: 24 callbacks suppressed [ 133.788252][ T8767] netlink: zone id is out of range [ 133.832672][ T8767] netlink: del zone limit has 4 unknown bytes [ 133.858594][ T8773] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.881209][ T8773] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.891322][ T8773] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.923616][ T8773] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.947351][ T8773] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.957532][ T8773] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.968014][ T8773] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.978188][ T8773] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 134.194739][ T8787] netlink: 'syz.4.817': attribute type 24 has an invalid length. [ 136.896599][ T8797] syzkaller0: entered promiscuous mode [ 136.907082][ T8797] syzkaller0: entered allmulticast mode [ 137.148627][ T8813] __nla_validate_parse: 1 callbacks suppressed [ 137.148646][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 137.517621][ T8834] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 137.519220][ T8832] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.830'. [ 137.676141][ T8838] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.832'. [ 138.307686][ T8881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.843'. [ 138.480672][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.846'. [ 138.533770][ T8889] tun0: tun_chr_ioctl cmd 1074025675 [ 138.543594][ T8889] tun0: persist disabled [ 138.696193][ T8893] netlink: 'syz.3.848': attribute type 11 has an invalid length. [ 138.717639][ T8893] netlink: 224 bytes leftover after parsing attributes in process `syz.3.848'. [ 139.168529][ T8900] netlink: 'syz.1.850': attribute type 12 has an invalid length. [ 139.176520][ T8899] netlink: 'syz.1.850': attribute type 12 has an invalid length. [ 139.209490][ T8900] bond5: option primary_reselect: invalid value (255) [ 139.222201][ T8900] bond5 (unregistering): Released all slaves [ 139.278042][ T8899] bond5: option primary_reselect: invalid value (255) [ 139.290325][ T8899] bond5 (unregistering): Released all slaves [ 139.389121][ T8904] netlink: 'syz.2.851': attribute type 1 has an invalid length. [ 139.448700][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.851'. [ 139.527673][ T8904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.567979][ T8912] vlan2: entered allmulticast mode [ 139.573975][ T8912] veth1: entered allmulticast mode [ 139.635019][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 139.932891][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 140.108119][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 140.138074][ T8944] netlink: 'syz.4.862': attribute type 7 has an invalid length. [ 140.170143][ T8944] netlink: 'syz.4.862': attribute type 8 has an invalid length. [ 140.239809][ T8951] xt_hashlimit: size too large, truncated to 1048576 [ 140.269104][ T8948] bond0: (slave dummy0): Releasing backup interface [ 140.415834][ T8960] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 140.435849][ T8960] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 141.043183][ T9000] net_ratelimit: 33020 callbacks suppressed [ 141.043201][ T9000] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 141.124636][ T9004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.304045][ T9017] netlink: 'syz.3.880': attribute type 33 has an invalid length. [ 141.646383][ T9037] veth1_macvtap: left promiscuous mode [ 141.824667][ T9046] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 141.859337][ T9046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.135060][ T9058] netlink: 'syz.0.899': attribute type 4 has an invalid length. [ 142.151536][ T9065] lo speed is unknown, defaulting to 1000 [ 142.296093][ T9065] lo speed is unknown, defaulting to 1000 [ 142.307882][ T9065] lo speed is unknown, defaulting to 1000 [ 142.315786][ T9072] tipc: Started in network mode [ 142.320785][ T9072] tipc: Node identity 8e90da0e4f9, cluster identity 4711 [ 142.334655][ T9072] tipc: Enabled bearer , priority 0 [ 142.344434][ T9072] syzkaller0: entered promiscuous mode [ 142.358555][ T9072] syzkaller0: entered allmulticast mode [ 142.439513][ T9072] tipc: Resetting bearer [ 142.477192][ T9071] tipc: Resetting bearer [ 142.562504][ T9071] tipc: Disabling bearer [ 142.595293][ T9080] netem: incorrect gi model size [ 142.610724][ T9080] netem: change failed [ 142.639327][ T9081] veth1_macvtap: left promiscuous mode [ 142.653666][ T9081] macsec0: entered promiscuous mode [ 142.666715][ T9081] macsec0: entered allmulticast mode [ 142.723467][ T9069] veth1_macvtap: entered promiscuous mode [ 142.768683][ T9069] veth1_macvtap: entered allmulticast mode [ 142.779717][ T9069] macsec0: left promiscuous mode [ 142.798685][ T9069] macsec0: left allmulticast mode [ 142.803749][ T9069] veth1_macvtap: left allmulticast mode [ 142.822696][ T9092] __nla_validate_parse: 15 callbacks suppressed [ 142.822712][ T9092] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.909'. [ 142.913444][ T9089] tipc: Enabled bearer , priority 0 [ 142.923434][ T9089] syzkaller0: entered promiscuous mode [ 142.947488][ T9089] syzkaller0: entered allmulticast mode [ 143.247369][ T9087] tipc: Resetting bearer [ 143.321185][ T9087] tipc: Disabling bearer [ 143.331793][ T9065] infiniband sz1: set active [ 143.351813][ T9065] infiniband sz1: added lo [ 143.357851][ T9065] sz1: rxe_create_cq: returned err = -12 [ 143.383570][ T1544] lo speed is unknown, defaulting to 1000 [ 143.390825][ T9065] infiniband sz1: Couldn't create ib_mad CQ [ 143.405768][ T9065] infiniband sz1: Couldn't open port 1 [ 143.503408][ T9065] RDS/IB: sz1: added [ 143.516585][ T9065] smc: adding ib device sz1 with port count 1 [ 143.530312][ T9065] smc: ib device sz1 port 1 has no pnetid [ 143.548155][ T5905] lo speed is unknown, defaulting to 1000 [ 143.556498][ T9065] lo speed is unknown, defaulting to 1000 [ 144.043961][ T9119] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.278815][ T9134] validate_nla: 1 callbacks suppressed [ 144.278834][ T9134] netlink: 'syz.1.922': attribute type 2 has an invalid length. [ 144.292625][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 146.107347][ T9065] lo speed is unknown, defaulting to 1000 [ 146.154303][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 146.162509][ T9119] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.262605][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 146.326200][ T9119] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.340543][ T9144] netlink: 'syz.0.924': attribute type 32 has an invalid length. [ 146.377380][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 146.423502][ T9149] netlink: 144 bytes leftover after parsing attributes in process `syz.1.926'. [ 146.492670][ T9144] bond2: Setting coupled_control to off (0) [ 146.589208][ T9119] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.607675][ T9149] netlink: 'syz.1.926': attribute type 6 has an invalid length. [ 146.663206][ T9065] lo speed is unknown, defaulting to 1000 [ 146.673814][ T9161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.928'. [ 146.676466][ T9149] bridge_slave_1: left allmulticast mode [ 146.690394][ T9149] bridge_slave_1: left promiscuous mode [ 146.696742][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.739401][ T9149] bridge_slave_0: left allmulticast mode [ 146.745638][ T9149] bridge_slave_0: left promiscuous mode [ 146.768640][ T9149] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.880801][ T9164] netlink: 64 bytes leftover after parsing attributes in process `syz.2.929'. [ 146.950723][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.031367][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.055516][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.094651][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.134466][ T9171] netlink: 'syz.0.930': attribute type 13 has an invalid length. [ 147.205550][ T9171] gretap0: refused to change device tx_queue_len [ 147.232459][ T9171] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.279165][ T9065] lo speed is unknown, defaulting to 1000 [ 147.286318][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 147.328384][ T9181] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 147.359961][ T9181] netlink: 'syz.1.935': attribute type 2 has an invalid length. [ 147.408344][ T9184] netlink: 'syz.1.935': attribute type 2 has an invalid length. [ 147.446649][ T9184] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 147.457472][ T9184] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 147.466260][ T9184] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 147.755044][ T9201] openvswitch: netlink: IP tunnel dst address not specified [ 147.782003][ T9203] netlink: 272 bytes leftover after parsing attributes in process `syz.1.943'. [ 147.842123][ T9205] __nla_validate_parse: 1 callbacks suppressed [ 147.842140][ T9205] netlink: 576 bytes leftover after parsing attributes in process `syz.2.941'. [ 147.848577][ T9065] lo speed is unknown, defaulting to 1000 [ 147.868860][ T9210] openvswitch: netlink: IP tunnel dst address not specified [ 147.903320][ T9211] 0: reclassify loop, rule prio 0, protocol 800 [ 148.079002][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 148.273684][ T9219] macvtap1: entered promiscuous mode [ 148.289376][ T9219] vlan0: entered promiscuous mode [ 148.295553][ T9219] macvtap1: entered allmulticast mode [ 148.302865][ T9219] vlan0: entered allmulticast mode [ 148.308954][ T9219] veth0_vlan: entered allmulticast mode [ 148.359272][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 148.369590][ T9232] can: request_module (can-proto-0) failed. [ 148.463533][ T9236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.954'. [ 148.653899][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 148.666537][ T9249] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 148.724692][ T9249] bond4: (slave lo): Enslaving as a backup interface with an up link [ 148.787451][ T9249] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 148.848099][ T9260] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 149.197364][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 149.289815][ T9291] gre0: entered promiscuous mode [ 149.295161][ T9276] can: request_module (can-proto-0) failed. [ 149.303305][ T9291] gre0: entered allmulticast mode [ 149.434131][ T9296] x_tables: duplicate underflow at hook 3 [ 149.742150][ T9312] syzkaller1: entered promiscuous mode [ 149.754473][ T9312] syzkaller1: entered allmulticast mode [ 150.032363][ T9326] tipc: Enabled bearer , priority 0 [ 150.040734][ T9326] syzkaller0: entered promiscuous mode [ 150.046219][ T9326] syzkaller0: entered allmulticast mode [ 150.073125][ T9330] batman_adv: batadv0: Adding interface: dummy0 [ 150.079862][ T9330] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.107679][ T9330] batman_adv: batadv0: Interface activated: dummy0 [ 150.131150][ T9326] tipc: Resetting bearer [ 150.153933][ T9330] batadv0: mtu less than device minimum [ 150.168228][ T9330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.180255][ T9330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.192091][ T9330] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.254533][ T9325] tipc: Resetting bearer [ 150.279677][ T9325] tipc: Disabling bearer [ 150.656517][ T9360] Cannot find set identified by id 0 to match [ 150.793770][ T9369] bridge2: entered promiscuous mode [ 150.794428][ T9371] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 150.807590][ T9369] bridge2: entered allmulticast mode [ 150.821959][ T9369] netlink: 248 bytes leftover after parsing attributes in process `syz.2.996'. [ 150.958032][ T9371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.986657][ T9372] vlan2: entered allmulticast mode [ 150.993017][ T9372] bond3: entered allmulticast mode [ 151.140301][ T9389] smc: removing ib device syz2 [ 151.162550][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1004'. [ 151.174804][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1004'. [ 151.208328][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1004'. [ 152.566360][ T9453] netlink: 'syz.4.1021': attribute type 11 has an invalid length. [ 152.622295][ T9453] netlink: 'syz.4.1021': attribute type 11 has an invalid length. [ 152.805160][ T9461] netlink: 'syz.2.1024': attribute type 5 has an invalid length. [ 152.848423][ T9461] __nla_validate_parse: 38 callbacks suppressed [ 152.848440][ T9461] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1024'. [ 153.207755][ T9474] netlink: 'syz.1.1030': attribute type 3 has an invalid length. [ 153.270297][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 153.280856][ T9483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1032'. [ 154.246841][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 154.476583][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'. [ 154.855392][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 154.914127][ T9566] net_ratelimit: 16 callbacks suppressed [ 154.914145][ T9566] IPv6: addrconf: prefix option has invalid lifetime [ 154.921949][ T9572] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1059'. [ 154.988126][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'. [ 155.250383][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 155.450924][ T9593] lo speed is unknown, defaulting to 1000 [ 155.457364][ T9602] netlink: 'syz.2.1069': attribute type 33 has an invalid length. [ 155.552854][ T9604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1069'. [ 155.691532][ T9610] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 155.716558][ T9602] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 155.796832][ T9602] bond5 (unregistering): Released all slaves [ 155.894595][ T9606] IPVS: Error connecting to the multicast addr [ 156.039415][ T9610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.710044][ T9620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.736776][ T9620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.067029][ T9620] vlan0: left allmulticast mode [ 157.072679][ T9620] veth0_vlan: left allmulticast mode [ 157.078957][ T9620] vlan0: left promiscuous mode [ 157.130917][ T9628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.143128][ T9628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.211747][ T9663] bridge4: entered promiscuous mode [ 157.218199][ T9663] bridge4: entered allmulticast mode [ 157.270318][ T9642] syzkaller1: entered promiscuous mode [ 157.276474][ T9642] syzkaller1: entered allmulticast mode [ 157.296835][ T6093] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.306088][ T6093] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.315497][ T6093] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.325066][ T6093] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.369136][ T6093] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.380162][ T6093] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.635050][ T9675] xt_SECMARK: invalid mode: 9 [ 157.786430][ T9682] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 157.968631][ T9682] "syz.3.1085" (9682) uses obsolete ecb(arc4) skcipher [ 158.119290][ T9696] __nla_validate_parse: 6 callbacks suppressed [ 158.119308][ T9696] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1089'. [ 158.139321][ T9696] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1089'. [ 158.157580][ T9696] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1089'. [ 158.212038][ T9701] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 158.342090][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 158.373559][ T9704] can: request_module (can-proto-0) failed. [ 158.435432][ T9714] C: renamed from lo (while UP) [ 158.508850][ T9719] bond0: Error: Cannot enslave bond to itself. [ 159.068196][ T9750] syzkaller1: entered promiscuous mode [ 159.087444][ T9750] syzkaller1: entered allmulticast mode [ 159.202839][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'. [ 159.254889][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'. [ 159.593312][ T9767] IPVS: set_ctl: invalid protocol: 28 2.3.3.0:20224 [ 159.989023][ T9802] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.033394][ T9799] lo speed is unknown, defaulting to 1000 [ 160.445758][ T9823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1128'. [ 160.583184][ T9826] netlink: 'syz.1.1130': attribute type 3 has an invalid length. [ 160.597981][ T9826] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 160.633967][ T9832] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.1132'. [ 160.879562][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 160.901353][ T9842] can: request_module (can-proto-0) failed. [ 160.935504][ T9851] tipc: Started in network mode [ 160.946325][ T9851] tipc: Node identity 080211000001, cluster identity 4711 [ 160.974001][ T9851] tipc: Enabled bearer , priority 0 [ 160.987581][ T9843] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 160.995016][ T9843] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 161.031655][ T9843] tipc: Resetting bearer [ 161.265453][ T9859] openvswitch: netlink: IP tunnel dst address not specified [ 161.634622][ T9879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.022556][ T9896] can: request_module (can-proto-0) failed. [ 162.033720][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 163.221759][ T9894] __nla_validate_parse: 3 callbacks suppressed [ 163.221776][ T9894] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1147'. [ 163.237522][ T5937] tipc: Node number set to 134418688 [ 163.255819][ T9910] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 163.624861][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1154'. [ 164.716455][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 164.725592][ T9941] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 164.733201][ T9941] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1156'. [ 164.804120][ T9943] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1158'. [ 165.119695][ T9962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'. [ 165.163287][ T9962] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 165.284541][ T9975] tipc: Enabling of bearer rejected, media not registered [ 165.438222][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 165.659628][ T9995] xt_hashlimit: size too large, truncated to 1048576 [ 165.666436][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1171'. [ 165.694623][ T9991] can: request_module (can-proto-0) failed. [ 165.828603][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 166.156681][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1176'. [ 166.317441][T10022] vlan2: entered promiscuous mode [ 166.322699][T10022] vlan2: entered allmulticast mode [ 166.337986][T10022] hsr_slave_1: entered allmulticast mode [ 166.713706][T10047] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 167.078187][T10066] lo speed is unknown, defaulting to 1000 [ 167.687944][T10083] sctp: [Deprecated]: syz.0.1201 (pid 10083) Use of int in max_burst socket option. [ 167.687944][T10083] Use struct sctp_assoc_value instead [ 167.763604][T10089] SET target dimension over the limit! [ 168.414014][T10113] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 168.433021][T10115] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 168.671517][T10127] __nla_validate_parse: 14 callbacks suppressed [ 168.671536][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 168.934173][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 168.983709][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 169.017489][T10144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1219'. [ 169.031276][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 169.200206][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 169.211208][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 169.219984][T10144] nbd: must specify at least one socket [ 169.275160][T10158] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1222'. [ 169.286646][T10152] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 169.508259][T10167] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1225'. [ 169.524383][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1228'. [ 169.651042][T10171] macsec3: entered promiscuous mode [ 169.755028][T10183] dvmrp0: left allmulticast mode [ 169.780894][T10183] vlan1: left allmulticast mode [ 169.800604][T10183] veth0_vlan: left allmulticast mode [ 169.806121][T10183] dvmrp6: left allmulticast mode [ 169.923740][T10191] gtp0: entered promiscuous mode [ 169.929617][T10191] gtp0: entered allmulticast mode [ 170.118177][T10201] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 171.075192][T10266] Driver unsupported XDP return value 0 on prog (id 278) dev N/A, expect packet loss! [ 171.398631][T10276] batadv_slave_1: entered promiscuous mode [ 171.785420][T10265] batadv_slave_1: left promiscuous mode [ 171.913146][T10309] batadv_slave_1: entered promiscuous mode [ 171.947077][T10308] IPVS: length: 1601463662 != 8 [ 172.047963][T10309] batadv_slave_1: left promiscuous mode [ 172.550058][T10352] xt_ecn: cannot match TCP bits for non-tcp packets [ 173.399992][T10397] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.505366][T10402] dvmrp6: entered allmulticast mode [ 173.780530][T10411] tipc: Enabled bearer , priority 2 [ 174.148563][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x505 [ 174.158477][T10435] openvswitch: netlink: Key type 31 is not supported [ 174.297754][T10445] ip6gretap2: entered allmulticast mode [ 174.608425][T10459] __nla_validate_parse: 14 callbacks suppressed [ 174.608441][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 174.637312][T10464] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 174.984807][ T5937] tipc: Node number set to 1228529988 [ 174.993820][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1309'. [ 175.163760][T10483] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1312'. [ 175.198835][T10483] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1312'. [ 175.224059][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 175.276207][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 175.314573][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 175.384896][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 175.396425][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 175.475350][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 175.629752][T10503] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 175.682339][T10503] bond3 (unregistering): Released all slaves [ 175.684719][T10521] xt_TCPMSS: Only works on TCP SYN packets [ 175.730175][ T6094] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.757242][T10525] tipc: Started in network mode [ 175.762462][T10525] tipc: Node identity 428ce0f50001, cluster identity 4711 [ 175.787502][T10525] tipc: Enabled bearer , priority 0 [ 175.823463][ T6094] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.849632][ T6094] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.864372][T10518] syzkaller0: entered promiscuous mode [ 175.876435][T10518] syzkaller0: entered allmulticast mode [ 175.894672][T10518] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 175.915556][ T6094] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.935942][T10518] tipc: Resetting bearer [ 175.981478][T10531] openvswitch: netlink: Message has 592 unknown bytes. [ 175.988973][T10531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.003002][T10517] tipc: Resetting bearer [ 176.044884][T10517] tipc: Disabling bearer [ 176.104495][T10539] netlink: 'syz.0.1327': attribute type 11 has an invalid length. [ 176.112899][T10539] netlink: 'syz.0.1327': attribute type 11 has an invalid length. [ 176.769775][T10569] syzkaller0: entered promiscuous mode [ 176.786212][T10569] syzkaller0: entered allmulticast mode [ 177.081402][T10584] syzkaller1: entered promiscuous mode [ 177.087021][T10584] syzkaller1: entered allmulticast mode [ 178.495500][T10677] gretap3: entered promiscuous mode [ 178.503799][T10677] gretap3: entered allmulticast mode [ 178.742603][T10697] netlink: 'syz.2.1375': attribute type 11 has an invalid length. [ 178.858888][T10697] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 178.888959][T10697] bond5 (unregistering): Released all slaves [ 194.266802][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.336959][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.349149][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 196.350771][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 196.355185][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 200.232374][T10724] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 200.394343][T10736] __nla_validate_parse: 11 callbacks suppressed [ 200.394362][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 200.775641][T10761] tipc: Enabling of bearer rejected, already enabled [ 200.799729][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 200.821352][T10761] syzkaller0: mtu less than device minimum [ 200.978943][T10776] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 201.064153][T10781] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 201.622095][T10808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1410'. [ 201.784098][T10816] netlink: 'syz.1.1413': attribute type 3 has an invalid length. [ 201.792534][T10816] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1413'. [ 201.814164][T10827] tipc: Enabling not permitted [ 201.823685][T10827] tipc: Enabling of bearer rejected, failed to enable media [ 201.849162][T10820] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1414'. [ 202.076807][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 202.262558][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 202.298610][T10846] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 202.319467][T10846] netlink: 'syz.0.1422': attribute type 3 has an invalid length. [ 202.328172][T10846] netlink: 'syz.0.1422': attribute type 3 has an invalid length. [ 202.515895][T10858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1428'. [ 202.649502][T10871] syz.1.1431: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 202.665953][T10871] CPU: 1 UID: 0 PID: 10871 Comm: syz.1.1431 Not tainted syzkaller #0 PREEMPT(full) [ 202.665980][T10871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.665995][T10871] Call Trace: [ 202.666012][T10871] [ 202.666020][T10871] dump_stack_lvl+0x189/0x250 [ 202.666065][T10871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.666092][T10871] ? __pfx__printk+0x10/0x10 [ 202.666112][T10871] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 202.666140][T10871] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 202.666169][T10871] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 202.666199][T10871] warn_alloc+0x214/0x310 [ 202.666228][T10871] ? stack_depot_save_flags+0x40/0x860 [ 202.666262][T10871] ? __pfx_warn_alloc+0x10/0x10 [ 202.666294][T10871] ? kasan_save_track+0x3e/0x80 [ 202.666320][T10871] ? __kasan_kmalloc+0x93/0xb0 [ 202.666349][T10871] ? xsk_setsockopt+0x4dc/0x8d0 [ 202.666371][T10871] ? do_sock_setsockopt+0x17c/0x1b0 [ 202.666390][T10871] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 202.666409][T10871] ? do_syscall_64+0xfa/0xfa0 [ 202.666437][T10871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.666467][T10871] __vmalloc_node_range_noprof+0x125/0x12d0 [ 202.666530][T10871] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.666563][T10871] ? __kasan_kmalloc+0x93/0xb0 [ 202.666598][T10871] vmalloc_user_noprof+0xad/0xf0 [ 202.666626][T10871] ? xskq_create+0xbf/0x170 [ 202.666659][T10871] xskq_create+0xbf/0x170 [ 202.666689][T10871] xsk_init_queue+0xb0/0x110 [ 202.666717][T10871] xsk_setsockopt+0x4dc/0x8d0 [ 202.666746][T10871] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.666774][T10871] ? __pfx_aa_sk_perm+0x10/0x10 [ 202.666804][T10871] ? aa_sock_opt_perm+0xff/0x1b0 [ 202.666835][T10871] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 202.666856][T10871] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.666880][T10871] do_sock_setsockopt+0x17c/0x1b0 [ 202.666904][T10871] __x64_sys_setsockopt+0x13f/0x1b0 [ 202.666929][T10871] do_syscall_64+0xfa/0xfa0 [ 202.666955][T10871] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.666982][T10871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.667008][T10871] ? clear_bhb_loop+0x60/0xb0 [ 202.667032][T10871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.667051][T10871] RIP: 0033:0x7f522818f749 [ 202.667078][T10871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.667094][T10871] RSP: 002b:00007f5228f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.667115][T10871] RAX: ffffffffffffffda RBX: 00007f52283e5fa0 RCX: 00007f522818f749 [ 202.667130][T10871] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 202.667143][T10871] RBP: 00007f5228213f91 R08: 0000000000000004 R09: 0000000000000000 [ 202.667155][T10871] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.667168][T10871] R13: 00007f52283e6038 R14: 00007f52283e5fa0 R15: 00007ffc15adc5d8 [ 202.667203][T10871] [ 202.956815][T10871] Mem-Info: [ 202.961086][T10871] active_anon:5044 inactive_anon:0 isolated_anon:0 [ 202.961086][T10871] active_file:2949 inactive_file:39922 isolated_file:0 [ 202.961086][T10871] unevictable:768 dirty:58 writeback:0 [ 202.961086][T10871] slab_reclaimable:10945 slab_unreclaimable:103797 [ 202.961086][T10871] mapped:29169 shmem:1352 pagetables:992 [ 202.961086][T10871] sec_pagetables:0 bounce:0 [ 202.961086][T10871] kernel_misc_reclaimable:0 [ 202.961086][T10871] free:1321542 free_pcp:14387 free_cma:0 [ 203.006617][T10871] Node 0 active_anon:20276kB inactive_anon:0kB active_file:11796kB inactive_file:159492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116676kB dirty:228kB writeback:0kB shmem:3872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13388kB pagetables:3832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.041858][T10871] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.088079][T10871] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.127388][T10871] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 203.143814][T10871] Node 0 DMA32 free:1379632kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20076kB inactive_anon:0kB active_file:11796kB inactive_file:159492kB unevictable:1536kB writepending:228kB zspages:0kB present:3129332kB managed:2565144kB mlocked:0kB bounce:0kB free_pcp:40772kB local_pcp:21128kB free_cma:0kB [ 203.179148][T10871] lowmem_reserve[]: 0 0 0 0 0 [ 203.183903][T10871] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.195196][T10880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1432'. [ 203.214376][T10871] lowmem_reserve[]: 0 0 0 0 0 [ 203.228241][T10871] Node 1 Normal free:3891500kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:10688kB free_cma:0kB [ 203.261811][T10871] lowmem_reserve[]: 0 0 0 0 0 [ 203.266558][T10871] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.285534][T10871] Node 0 DMA32: 1616*4kB (UME) 1100*8kB (UME) 619*16kB (UM) 338*32kB (UME) 56*64kB (UME) 63*128kB (UME) 39*256kB (UME) 10*512kB (UM) 14*1024kB (UME) 8*2048kB (UME) 314*4096kB (UM) = 1379600kB [ 203.305470][T10871] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 203.317475][T10871] Node 1 Normal: 199*4kB (UME) 52*8kB (UME) 47*16kB (UME) 98*32kB (UME) 31*64kB (UME) 7*128kB (UME) 4*256kB (UM) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891500kB [ 203.341572][T10871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.352832][T10871] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.363823][T10871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.374031][T10871] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.384511][T10871] 44220 total pagecache pages [ 203.390563][T10871] 0 pages in swap cache [ 203.395125][T10871] Free swap = 124996kB [ 203.446459][T10871] Total swap = 124996kB [ 203.452125][T10871] 2097051 pages RAM [ 203.456654][T10871] 0 pages HighMem/MovableOnly [ 203.476998][T10871] 424123 pages reserved [ 203.481198][T10871] 0 pages cma reserved [ 203.950336][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 203.961486][T10916] nbd: must specify a size in bytes for the device [ 204.341597][T10940] netlink: 'syz.2.1451': attribute type 12 has an invalid length. [ 204.357031][T10940] netlink: 'syz.2.1451': attribute type 29 has an invalid length. [ 204.381401][T10940] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 204.432057][ T9653] IPVS: starting estimator thread 0... [ 204.488518][T10955] xt_hashlimit: size too large, truncated to 1048576 [ 204.509795][T10956] syzkaller0: entered promiscuous mode [ 204.515475][T10956] syzkaller0: entered allmulticast mode [ 204.536963][T10953] IPVS: using max 33 ests per chain, 79200 per kthread [ 204.582838][T10956] tipc: Enabled bearer , priority 0 [ 204.791631][T10942] tipc: Resetting bearer [ 204.860217][T10942] tipc: Disabling bearer [ 205.176163][T10976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.203990][T10985] netlink: 'syz.3.1462': attribute type 28 has an invalid length. [ 205.208501][T10976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.216256][T10985] netlink: 'syz.3.1462': attribute type 3 has an invalid length. [ 205.424892][T10976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.472327][T10976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.539350][T10997] netlink: 'syz.1.1466': attribute type 6 has an invalid length. [ 205.563808][T11000] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 205.582460][T11000] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 205.676675][T10976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.696287][T10976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.743565][T11002] tipc: Enabled bearer , priority 13 [ 205.802393][T10976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.847127][T10976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.861424][T11021] __nla_validate_parse: 8 callbacks suppressed [ 205.861441][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1473'. [ 205.884417][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 206.013415][T11023] netlink: 'syz.2.1474': attribute type 28 has an invalid length. [ 206.022219][T11023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1474'. [ 206.195352][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.201322][T11037] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1479'. [ 206.214210][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.226452][T11033] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1478'. [ 206.247306][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 206.250644][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 206.271107][ T6094] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.280970][ T6094] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.302961][T11041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 206.320146][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.351039][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.415421][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.438394][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.487214][T11043] xt_TCPMSS: Only works on TCP SYN packets [ 206.558611][T11046] tipc: Enabled bearer , priority 0 [ 206.688137][T11046] syzkaller0: entered promiscuous mode [ 206.697892][T11046] syzkaller0: entered allmulticast mode [ 206.834613][T11058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.925617][T11062] tipc: Resetting bearer [ 206.943880][T11068] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 206.993443][T11044] tipc: Resetting bearer [ 207.083698][T11087] validate_nla: 2 callbacks suppressed [ 207.083715][T11087] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 208.001341][T11122] can: request_module (can-proto-4) failed. [ 208.611765][T11044] tipc: Disabling bearer [ 208.632514][T11107] vxcan1 speed is unknown, defaulting to 1000 [ 208.632713][T11108] tipc: Enabled bearer , priority 0 [ 208.646041][T11086] syzkaller0: entered promiscuous mode [ 208.651729][T11086] syzkaller0: entered allmulticast mode [ 208.672052][ T10] tipc: Node number set to 2349540420 [ 208.743279][T11107] vxcan1 speed is unknown, defaulting to 1000 [ 208.758342][T11125] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 208.840762][T11107] vxcan1 speed is unknown, defaulting to 1000 [ 208.865858][T11129] bond5: (slave bridge7): making interface the new active one [ 208.877021][T11129] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 208.888220][T11112] tipc: Resetting bearer [ 208.938965][T11134] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1498'. [ 208.955539][T11134] netlink: 'syz.4.1498': attribute type 8 has an invalid length. [ 208.966682][T11112] tipc: Disabling bearer [ 209.010463][T11138] netlink: 'syz.4.1498': attribute type 11 has an invalid length. [ 209.378773][T11107] infiniband syz2: set active [ 209.383586][ T5979] vxcan1 speed is unknown, defaulting to 1000 [ 209.389833][T11107] infiniband syz2: added vxcan1 [ 209.396299][T11107] syz2: rxe_create_cq: returned err = -12 [ 209.402902][T11107] infiniband syz2: Couldn't create ib_mad CQ [ 209.410267][T11107] infiniband syz2: Couldn't open port 1 [ 209.452395][T11107] RDS/IB: syz2: added [ 209.463504][T11107] smc: adding ib device syz2 with port count 1 [ 209.479287][T11107] smc: ib device syz2 port 1 has no pnetid [ 209.493662][ T5933] vxcan1 speed is unknown, defaulting to 1000 [ 209.507288][T11107] vxcan1 speed is unknown, defaulting to 1000 [ 209.687513][T11107] vxcan1 speed is unknown, defaulting to 1000 [ 209.824956][T11107] vxcan1 speed is unknown, defaulting to 1000 [ 209.930983][T11140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.937687][T11140] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 209.971724][T11140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.984320][T11107] vxcan1 speed is unknown, defaulting to 1000 [ 209.986732][T11140] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 210.007594][T11140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.014962][T11140] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 210.030195][T11140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.047925][T11140] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 210.063792][T11140] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 210.070073][T11140] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 210.188257][T11140] tipc: Resetting bearer [ 210.263757][T11107] vxcan1 speed is unknown, defaulting to 1000 [ 210.678670][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 210.753065][T11190] xt_SECMARK: invalid mode: 9 [ 210.965227][T11205] vlan4: entered promiscuous mode [ 210.970950][T11205] geneve1: entered promiscuous mode [ 210.976462][T11205] vlan4: entered allmulticast mode [ 210.981821][T11205] geneve1: entered allmulticast mode [ 211.044067][T11207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1515'. [ 211.129139][T11216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1518'. [ 211.176604][T11218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.314868][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 211.432986][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'. [ 255.700365][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.142059][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.827082][ T31] INFO: task kworker/1:5:5937 blocked for more than 143 seconds. [ 372.834837][ T31] Not tainted syzkaller #0 [ 372.840171][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.848975][ T31] task:kworker/1:5 state:D stack:24360 pid:5937 tgid:5937 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 372.861056][ T31] Workqueue: events rfkill_sync_work [ 372.866363][ T31] Call Trace: [ 372.869911][ T31] [ 372.872849][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 372.877500][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.883958][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.889679][ T31] ? __pfx___schedule+0x10/0x10 [ 372.894572][ T31] ? schedule+0x91/0x360 [ 372.899228][ T31] schedule+0x165/0x360 [ 372.941577][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.947594][ T31] __mutex_lock+0x7e6/0x1350 [ 372.952209][ T31] ? __mutex_lock+0x5bb/0x1350 [ 372.957519][ T31] ? rfkill_sync_work+0x2e/0x200 [ 372.962487][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.968492][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 372.974244][ T31] rfkill_sync_work+0x2e/0x200 [ 372.980306][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 372.986045][ T31] process_scheduled_works+0xae1/0x17b0 [ 372.993051][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 372.999539][ T31] worker_thread+0x8a0/0xda0 [ 373.004144][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.010659][ T31] ? __kthread_parkme+0x7b/0x200 [ 373.015608][ T31] kthread+0x711/0x8a0 [ 373.019759][ T31] ? __pfx_worker_thread+0x10/0x10 [ 373.024874][ T31] ? __pfx_kthread+0x10/0x10 [ 373.029839][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.035040][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.040349][ T31] ? __pfx_kthread+0x10/0x10 [ 373.044954][ T31] ret_from_fork+0x4bc/0x870 [ 373.049740][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.054867][ T31] ? __switch_to_asm+0x39/0x70 [ 373.060081][ T31] ? __switch_to_asm+0x33/0x70 [ 373.064863][ T31] ? __pfx_kthread+0x10/0x10 [ 373.069680][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.074468][ T31] [ 373.077718][ T31] INFO: task kworker/1:10:9653 blocked for more than 143 seconds. [ 373.085519][ T31] Not tainted syzkaller #0 [ 373.091694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.100493][ T31] task:kworker/1:10 state:D stack:24008 pid:9653 tgid:9653 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 373.112599][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 373.119581][ T31] Call Trace: [ 373.122849][ T31] [ 373.125762][ T31] __schedule+0x1798/0x4cc0 [ 373.130402][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 373.135788][ T31] ? __pfx___schedule+0x10/0x10 [ 373.140714][ T31] ? schedule+0x91/0x360 [ 373.144967][ T31] schedule+0x165/0x360 [ 373.149436][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.154888][ T31] __mutex_lock+0x7e6/0x1350 [ 373.159501][ T31] ? __mutex_lock+0x5bb/0x1350 [ 373.164267][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 373.170645][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.175683][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 373.181763][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 373.187724][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 373.193798][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 373.199868][ T31] process_scheduled_works+0xae1/0x17b0 [ 373.205465][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 373.211779][ T31] worker_thread+0x8a0/0xda0 [ 373.216395][ T31] ? __kthread_parkme+0x7b/0x200 [ 373.221473][ T31] kthread+0x711/0x8a0 [ 373.225553][ T31] ? __pfx_worker_thread+0x10/0x10 [ 373.230781][ T31] ? __pfx_kthread+0x10/0x10 [ 373.235384][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.240880][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.246079][ T31] ? __pfx_kthread+0x10/0x10 [ 373.250769][ T31] ret_from_fork+0x4bc/0x870 [ 373.255363][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.260560][ T31] ? __switch_to_asm+0x39/0x70 [ 373.265321][ T31] ? __switch_to_asm+0x33/0x70 [ 373.270414][ T31] ? __pfx_kthread+0x10/0x10 [ 373.275008][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.279870][ T31] [ 373.282903][ T31] INFO: task syz.1.1500:11140 blocked for more than 143 seconds. [ 373.293534][ T31] Not tainted syzkaller #0 [ 373.298977][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.307763][ T31] task:syz.1.1500 state:D stack:24664 pid:11140 tgid:11139 ppid:5825 task_flags:0x400140 flags:0x00080003 [ 373.319723][ T31] Call Trace: [ 373.323003][ T31] [ 373.325925][ T31] __schedule+0x1798/0x4cc0 [ 373.330799][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.335664][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.340571][ T31] ? __pfx___schedule+0x10/0x10 [ 373.345438][ T31] ? schedule+0x91/0x360 [ 373.349793][ T31] schedule+0x165/0x360 [ 373.353962][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.359710][ T31] __mutex_lock+0x7e6/0x1350 [ 373.364291][ T31] ? __mutex_lock+0x5bb/0x1350 [ 373.369203][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 373.374492][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.379609][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.384821][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 373.391025][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.397395][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 373.403120][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 373.408461][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 373.414179][ T31] rfkill_set_block+0x1d2/0x440 [ 373.419400][ T31] rfkill_fop_write+0x44b/0x570 [ 373.424261][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 373.429744][ T31] ? security_file_permission+0x50/0x290 [ 373.435393][ T31] ? rw_verify_area+0x255/0x4d0 [ 373.440603][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.445470][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 373.451144][ T31] vfs_write+0x27e/0xb30 [ 373.455389][ T31] ? __pfx_vfs_write+0x10/0x10 [ 373.461765][ T31] ? __fget_files+0x2a/0x420 [ 373.466375][ T31] ? __fget_files+0x2a/0x420 [ 373.471028][ T31] ? __fget_files+0x3a0/0x420 [ 373.475705][ T31] ? __fget_files+0x2a/0x420 [ 373.480599][ T31] ksys_write+0x145/0x250 [ 373.484928][ T31] ? __pfx_ksys_write+0x10/0x10 [ 373.489822][ T31] ? do_syscall_64+0xbe/0xfa0 [ 373.494511][ T31] do_syscall_64+0xfa/0xfa0 [ 373.499089][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.504296][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.510718][ T31] ? clear_bhb_loop+0x60/0xb0 [ 373.515405][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.521358][ T31] RIP: 0033:0x7f522818f749 [ 373.525771][ T31] RSP: 002b:00007f5228f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.534198][ T31] RAX: ffffffffffffffda RBX: 00007f52283e5fa0 RCX: 00007f522818f749 [ 373.542618][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 373.550815][ T31] RBP: 00007f5228213f91 R08: 0000000000000000 R09: 0000000000000000 [ 373.558870][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.567163][ T31] R13: 00007f52283e6038 R14: 00007f52283e5fa0 R15: 00007ffc15adc5d8 [ 373.575162][ T31] [ 373.578210][ T31] INFO: task syz.2.1501:11141 blocked for more than 144 seconds. [ 373.585918][ T31] Not tainted syzkaller #0 [ 373.590875][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.599707][ T31] task:syz.2.1501 state:D stack:24744 pid:11141 tgid:11141 ppid:5843 task_flags:0x400040 flags:0x00080002 [ 373.611665][ T31] Call Trace: [ 373.614965][ T31] [ 373.617981][ T31] __schedule+0x1798/0x4cc0 [ 373.622502][ T31] ? validate_chain+0x897/0x2140 [ 373.627699][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.632538][ T31] ? __pfx___schedule+0x10/0x10 [ 373.637444][ T31] ? schedule+0x91/0x360 [ 373.641699][ T31] schedule+0x165/0x360 [ 373.645838][ T31] schedule_timeout+0x9a/0x270 [ 373.650619][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 373.656001][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.661507][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.666723][ T31] ? wait_for_completion+0x267/0x5d0 [ 373.672039][ T31] wait_for_completion+0x2bf/0x5d0 [ 373.677197][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 373.682820][ T31] ? __flush_work+0xd2/0xbc0 [ 373.687695][ T31] ? __flush_work+0xd2/0xbc0 [ 373.692301][ T31] __flush_work+0x9b9/0xbc0 [ 373.697067][ T31] ? __flush_work+0xd2/0xbc0 [ 373.701751][ T31] ? __pfx___flush_work+0x10/0x10 [ 373.706812][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 373.712114][ T31] ? __pfx___cancel_work+0x10/0x10 [ 373.717500][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 373.723123][ T31] __cancel_work_sync+0xbe/0x110 [ 373.728092][ T31] rfkill_unregister+0x92/0x220 [ 373.732954][ T31] nfc_unregister_device+0x96/0x2a0 [ 373.738163][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 373.743889][ T31] virtual_ncidev_close+0x56/0x90 [ 373.749165][ T31] __fput+0x44c/0xa70 [ 373.753146][ T31] task_work_run+0x1d4/0x260 [ 373.757763][ T31] ? __pfx_task_work_run+0x10/0x10 [ 373.762885][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 373.768375][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 373.773660][ T31] do_syscall_64+0x2bd/0xfa0 [ 373.778857][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.784933][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.791110][ T31] ? clear_bhb_loop+0x60/0xb0 [ 373.795791][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.801710][ T31] RIP: 0033:0x7f7afc38f749 [ 373.806123][ T31] RSP: 002b:00007ffcc3cfde58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 373.814888][ T31] RAX: 0000000000000000 RBX: 00007f7afc5e7da0 RCX: 00007f7afc38f749 [ 373.822891][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 373.830921][ T31] RBP: 00007f7afc5e7da0 R08: 000000000000020c R09: 0000001ec3cfe14f [ 373.839240][ T31] R10: 00007f7afc5e7cb0 R11: 0000000000000246 R12: 00000000000333f0 [ 373.847253][ T31] R13: 00007f7afc5e6180 R14: ffffffffffffffff R15: 00007ffcc3cfdf70 [ 373.855238][ T31] [ 373.858375][ T31] INFO: task syz.2.1501:11142 blocked for more than 144 seconds. [ 373.866092][ T31] Not tainted syzkaller #0 [ 373.871292][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.880041][ T31] task:syz.2.1501 state:D stack:25800 pid:11142 tgid:11141 ppid:5843 task_flags:0x400140 flags:0x00080002 [ 373.891999][ T31] Call Trace: [ 373.895269][ T31] [ 373.898479][ T31] __schedule+0x1798/0x4cc0 [ 373.903006][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.907884][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.912733][ T31] ? __pfx___schedule+0x10/0x10 [ 373.917628][ T31] ? schedule+0x91/0x360 [ 373.921883][ T31] schedule+0x165/0x360 [ 373.926024][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.931752][ T31] __mutex_lock+0x7e6/0x1350 [ 373.936388][ T31] ? __mutex_lock+0x5bb/0x1350 [ 373.941198][ T31] ? rfkill_register+0x37/0x8e0 [ 373.946072][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.951165][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 373.956559][ T31] ? device_initialize+0x24b/0x440 [ 373.961939][ T31] rfkill_register+0x37/0x8e0 [ 373.966621][ T31] nfc_register_device+0x14a/0x320 [ 373.971765][ T31] nci_register_device+0x87f/0x9d0 [ 373.976923][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 373.982564][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 373.988166][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 373.993556][ T31] virtual_ncidev_open+0x129/0x1a0 [ 373.998706][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 374.004345][ T31] misc_open+0x2d5/0x350 [ 374.008627][ T31] chrdev_open+0x4cc/0x5e0 [ 374.013047][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 374.021149][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 374.027523][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 374.032458][ T31] do_dentry_open+0x953/0x13f0 [ 374.037263][ T31] vfs_open+0x3b/0x340 [ 374.041331][ T31] ? path_openat+0x2ecd/0x3830 [ 374.046078][ T31] path_openat+0x2ee5/0x3830 [ 374.050993][ T31] ? __pfx_path_openat+0x10/0x10 [ 374.055932][ T31] do_filp_open+0x1fa/0x410 [ 374.060461][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.065321][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 374.070445][ T31] ? _raw_spin_unlock+0x28/0x50 [ 374.075302][ T31] ? alloc_fd+0x64c/0x6c0 [ 374.079888][ T31] do_sys_openat2+0x121/0x1c0 [ 374.084557][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.089807][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.094582][ T31] __x64_sys_openat+0x138/0x170 [ 374.099718][ T31] do_syscall_64+0xfa/0xfa0 [ 374.104240][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.109711][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.115769][ T31] ? clear_bhb_loop+0x60/0xb0 [ 374.120476][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.126373][ T31] RIP: 0033:0x7f7afc38f749 [ 374.130869][ T31] RSP: 002b:00007f7afd23f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 374.139457][ T31] RAX: ffffffffffffffda RBX: 00007f7afc5e5fa0 RCX: 00007f7afc38f749 [ 374.147455][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 374.155428][ T31] RBP: 00007f7afc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 374.163441][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.171572][ T31] R13: 00007f7afc5e6038 R14: 00007f7afc5e5fa0 R15: 00007ffcc3cfdcf8 [ 374.179627][ T31] [ 374.182677][ T31] INFO: task syz.2.1501:11150 blocked for more than 144 seconds. [ 374.190639][ T31] Not tainted syzkaller #0 [ 374.195574][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.204492][ T31] task:syz.2.1501 state:D stack:26312 pid:11150 tgid:11141 ppid:5843 task_flags:0x400140 flags:0x00080002 [ 374.216511][ T31] Call Trace: [ 374.219818][ T31] [ 374.222737][ T31] __schedule+0x1798/0x4cc0 [ 374.227505][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.232366][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.237248][ T31] ? __pfx___schedule+0x10/0x10 [ 374.242115][ T31] ? schedule+0x91/0x360 [ 374.246343][ T31] schedule+0x165/0x360 [ 374.250525][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.255992][ T31] __mutex_lock+0x7e6/0x1350 [ 374.260823][ T31] ? __mutex_lock+0x5bb/0x1350 [ 374.265575][ T31] ? misc_open+0x51/0x350 [ 374.269947][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.274984][ T31] misc_open+0x51/0x350 [ 374.279158][ T31] chrdev_open+0x4cc/0x5e0 [ 374.283582][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 374.288772][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 374.295091][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 374.300061][ T31] do_dentry_open+0x953/0x13f0 [ 374.304851][ T31] vfs_open+0x3b/0x340 [ 374.308974][ T31] ? path_openat+0x2ecd/0x3830 [ 374.313753][ T31] path_openat+0x2ee5/0x3830 [ 374.318744][ T31] ? __pfx_path_openat+0x10/0x10 [ 374.323689][ T31] do_filp_open+0x1fa/0x410 [ 374.328257][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.333112][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 374.338339][ T31] ? _raw_spin_unlock+0x28/0x50 [ 374.343185][ T31] ? alloc_fd+0x64c/0x6c0 [ 374.347837][ T31] do_sys_openat2+0x121/0x1c0 [ 374.352518][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.357902][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.362682][ T31] __x64_sys_openat+0x138/0x170 [ 374.367584][ T31] do_syscall_64+0xfa/0xfa0 [ 374.372094][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.377679][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.383736][ T31] ? clear_bhb_loop+0x60/0xb0 [ 374.388661][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.394557][ T31] RIP: 0033:0x7f7afc38f749 [ 374.399278][ T31] RSP: 002b:00007f7afd21e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 374.408027][ T31] RAX: ffffffffffffffda RBX: 00007f7afc5e6090 RCX: 00007f7afc38f749 [ 374.416000][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 374.424050][ T31] RBP: 00007f7afc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 374.432077][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.440367][ T31] R13: 00007f7afc5e6128 R14: 00007f7afc5e6090 R15: 00007ffcc3cfdcf8 [ 374.448399][ T31] [ 374.451446][ T31] INFO: task syz.4.1502:11152 blocked for more than 144 seconds. [ 374.459238][ T31] Not tainted syzkaller #0 [ 374.464169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.473114][ T31] task:syz.4.1502 state:D stack:28264 pid:11152 tgid:11151 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 374.485068][ T31] Call Trace: [ 374.488381][ T31] [ 374.491302][ T31] __schedule+0x1798/0x4cc0 [ 374.495792][ T31] ? security_file_open+0xb1/0x270 [ 374.501200][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.506070][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.510946][ T31] ? __pfx___schedule+0x10/0x10 [ 374.515813][ T31] ? schedule+0x91/0x360 [ 374.520089][ T31] schedule+0x165/0x360 [ 374.524257][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.529970][ T31] __mutex_lock+0x7e6/0x1350 [ 374.534553][ T31] ? __mutex_lock+0x5bb/0x1350 [ 374.539368][ T31] ? misc_open+0x51/0x350 [ 374.543704][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.548759][ T31] misc_open+0x51/0x350 [ 374.552920][ T31] chrdev_open+0x4cc/0x5e0 [ 374.557597][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 374.562526][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 374.568902][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 374.573846][ T31] do_dentry_open+0x953/0x13f0 [ 374.579054][ T31] vfs_open+0x3b/0x340 [ 374.583146][ T31] ? path_openat+0x2ecd/0x3830 [ 374.588184][ T31] path_openat+0x2ee5/0x3830 [ 374.592785][ T31] ? __pfx_path_openat+0x10/0x10 [ 374.597772][ T31] do_filp_open+0x1fa/0x410 [ 374.602277][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.607162][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 374.612202][ T31] ? _raw_spin_unlock+0x28/0x50 [ 374.617354][ T31] ? alloc_fd+0x64c/0x6c0 [ 374.621702][ T31] do_sys_openat2+0x121/0x1c0 [ 374.626364][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.631582][ T31] ? rcu_is_watching+0x15/0xb0 [ 374.636351][ T31] __x64_sys_openat+0x138/0x170 [ 374.641222][ T31] do_syscall_64+0xfa/0xfa0 [ 374.645734][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.651203][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.657351][ T31] ? clear_bhb_loop+0x60/0xb0 [ 374.662035][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.667966][ T31] RIP: 0033:0x7f93d338f749 [ 374.672380][ T31] RSP: 002b:00007f93d15ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 374.681041][ T31] RAX: ffffffffffffffda RBX: 00007f93d35e5fa0 RCX: 00007f93d338f749 [ 374.689071][ T31] RDX: 00000000000a2f01 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 374.697063][ T31] RBP: 00007f93d3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 374.705034][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.713230][ T31] R13: 00007f93d35e6038 R14: 00007f93d35e5fa0 R15: 00007ffc598d3358 [ 374.721360][ T31] [ 374.724402][ T31] INFO: task syz.3.1516:11209 blocked for more than 145 seconds. [ 374.732246][ T31] Not tainted syzkaller #0 [ 374.737481][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.746144][ T31] task:syz.3.1516 state:D stack:28296 pid:11209 tgid:11208 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 374.758161][ T31] Call Trace: [ 374.761438][ T31] [ 374.764351][ T31] __schedule+0x1798/0x4cc0 [ 374.769141][ T31] ? security_file_open+0xb1/0x270 [ 374.774267][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.779153][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.784003][ T31] ? __pfx___schedule+0x10/0x10 [ 374.788880][ T31] ? schedule+0x91/0x360 [ 374.793134][ T31] schedule+0x165/0x360 [ 374.797645][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.803121][ T31] __mutex_lock+0x7e6/0x1350 [ 374.807734][ T31] ? __mutex_lock+0x5bb/0x1350 [ 374.812496][ T31] ? misc_open+0x51/0x350 [ 374.817341][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.822391][ T31] misc_open+0x51/0x350 [ 374.826531][ T31] chrdev_open+0x4cc/0x5e0 [ 374.831293][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 374.836248][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 374.842724][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 374.847688][ T31] do_dentry_open+0x953/0x13f0 [ 374.852443][ T31] vfs_open+0x3b/0x340 [ 374.856488][ T31] ? path_openat+0x2ecd/0x3830 [ 374.861504][ T31] path_openat+0x2ee5/0x3830 [ 374.866129][ T31] ? __pfx_path_openat+0x10/0x10 [ 374.871134][ T31] do_filp_open+0x1fa/0x410 [ 374.875644][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.880605][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 374.885651][ T31] ? _raw_spin_unlock+0x28/0x50 [ 374.890747][ T31] ? alloc_fd+0x64c/0x6c0 [ 374.895075][ T31] do_sys_openat2+0x121/0x1c0 [ 374.899783][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.904985][ T31] ? exc_page_fault+0x82/0x100 [ 374.909771][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 374.915060][ T31] __x64_sys_openat+0x138/0x170 [ 374.920253][ T31] do_syscall_64+0xfa/0xfa0 [ 374.924773][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.930012][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.936083][ T31] ? clear_bhb_loop+0x60/0xb0 [ 374.940802][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.946703][ T31] RIP: 0033:0x7f05b958f749 [ 374.951419][ T31] RSP: 002b:00007f05ba417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 374.959925][ T31] RAX: ffffffffffffffda RBX: 00007f05b97e5fa0 RCX: 00007f05b958f749 [ 374.967948][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 374.975922][ T31] RBP: 00007f05b9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 374.984182][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.992176][ T31] R13: 00007f05b97e6038 R14: 00007f05b97e5fa0 R15: 00007fff311baa78 [ 375.000220][ T31] [ 375.003250][ T31] INFO: task syz.3.1516:11214 blocked for more than 145 seconds. [ 375.011252][ T31] Not tainted syzkaller #0 [ 375.016174][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.024852][ T31] task:syz.3.1516 state:D stack:28296 pid:11214 tgid:11208 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 375.037147][ T31] Call Trace: [ 375.040425][ T31] [ 375.043343][ T31] __schedule+0x1798/0x4cc0 [ 375.047890][ T31] ? security_file_open+0xb1/0x270 [ 375.053013][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.058118][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.062986][ T31] ? __pfx___schedule+0x10/0x10 [ 375.068337][ T31] ? schedule+0x91/0x360 [ 375.072592][ T31] schedule+0x165/0x360 [ 375.076738][ T31] schedule_preempt_disabled+0x13/0x30 [ 375.082548][ T31] __mutex_lock+0x7e6/0x1350 [ 375.087212][ T31] ? __mutex_lock+0x5bb/0x1350 [ 375.091994][ T31] ? misc_open+0x51/0x350 [ 375.096329][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 375.101420][ T31] misc_open+0x51/0x350 [ 375.105583][ T31] chrdev_open+0x4cc/0x5e0 [ 375.110267][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.115220][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 375.121627][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.126569][ T31] do_dentry_open+0x953/0x13f0 [ 375.131379][ T31] vfs_open+0x3b/0x340 [ 375.135451][ T31] ? path_openat+0x2ecd/0x3830 [ 375.140473][ T31] path_openat+0x2ee5/0x3830 [ 375.145081][ T31] ? __pfx_path_openat+0x10/0x10 [ 375.150084][ T31] do_filp_open+0x1fa/0x410 [ 375.154593][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.159511][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 375.164555][ T31] ? _raw_spin_unlock+0x28/0x50 [ 375.169653][ T31] ? alloc_fd+0x64c/0x6c0 [ 375.173984][ T31] do_sys_openat2+0x121/0x1c0 [ 375.178707][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.183914][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.188701][ T31] __x64_sys_openat+0x138/0x170 [ 375.193560][ T31] do_syscall_64+0xfa/0xfa0 [ 375.198393][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.203620][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.209823][ T31] ? clear_bhb_loop+0x60/0xb0 [ 375.214516][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.220442][ T31] RIP: 0033:0x7f05b958f749 [ 375.224858][ T31] RSP: 002b:00007f05ba3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.233516][ T31] RAX: ffffffffffffffda RBX: 00007f05b97e6090 RCX: 00007f05b958f749 [ 375.241549][ T31] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 375.249556][ T31] RBP: 00007f05b9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 375.257789][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.265751][ T31] R13: 00007f05b97e6128 R14: 00007f05b97e6090 R15: 00007fff311baa78 [ 375.273769][ T31] [ 375.276847][ T31] INFO: task syz.0.1521:11224 blocked for more than 145 seconds. [ 375.284558][ T31] Not tainted syzkaller #0 [ 375.289752][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.298451][ T31] task:syz.0.1521 state:D stack:25240 pid:11224 tgid:11223 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 375.310433][ T31] Call Trace: [ 375.313744][ T31] [ 375.316660][ T31] __schedule+0x1798/0x4cc0 [ 375.321495][ T31] ? security_file_open+0xb1/0x270 [ 375.326633][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.331562][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.336416][ T31] ? __pfx___schedule+0x10/0x10 [ 375.341327][ T31] ? schedule+0x91/0x360 [ 375.345581][ T31] schedule+0x165/0x360 [ 375.350012][ T31] schedule_preempt_disabled+0x13/0x30 [ 375.355483][ T31] __mutex_lock+0x7e6/0x1350 [ 375.360114][ T31] ? __mutex_lock+0x5bb/0x1350 [ 375.364883][ T31] ? misc_open+0x51/0x350 [ 375.369241][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 375.374275][ T31] misc_open+0x51/0x350 [ 375.378691][ T31] chrdev_open+0x4cc/0x5e0 [ 375.383099][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.388047][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 375.394380][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.399354][ T31] do_dentry_open+0x953/0x13f0 [ 375.404128][ T31] vfs_open+0x3b/0x340 [ 375.408435][ T31] ? path_openat+0x2ecd/0x3830 [ 375.413190][ T31] path_openat+0x2ee5/0x3830 [ 375.417864][ T31] ? __pfx_path_openat+0x10/0x10 [ 375.422822][ T31] do_filp_open+0x1fa/0x410 [ 375.427342][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.432196][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 375.437539][ T31] ? _raw_spin_unlock+0x28/0x50 [ 375.442406][ T31] ? alloc_fd+0x64c/0x6c0 [ 375.446788][ T31] do_sys_openat2+0x121/0x1c0 [ 375.451468][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.456652][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 375.461942][ T31] __x64_sys_openat+0x138/0x170 [ 375.467057][ T31] do_syscall_64+0xfa/0xfa0 [ 375.471553][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.476732][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.482818][ T31] ? clear_bhb_loop+0x60/0xb0 [ 375.487516][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.493392][ T31] RIP: 0033:0x7f857498f749 [ 375.498077][ T31] RSP: 002b:00007f857584b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.506497][ T31] RAX: ffffffffffffffda RBX: 00007f8574be5fa0 RCX: 00007f857498f749 [ 375.514515][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 375.522509][ T31] RBP: 00007f8574a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 375.530743][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.538778][ T31] R13: 00007f8574be6038 R14: 00007f8574be5fa0 R15: 00007ffdf2b968e8 [ 375.546799][ T31] [ 375.549823][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 375.559115][ T31] [ 375.559115][ T31] Showing all locks held in the system: [ 375.566896][ T31] 1 lock held by khungtaskd/31: [ 375.571747][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 375.581665][ T31] 1 lock held by klogd/5188: [ 375.586246][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 375.596412][ T31] 2 locks held by getty/5587: [ 375.601103][ T31] #0: ffff88802fb540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 375.610907][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 375.621677][ T31] 3 locks held by kworker/1:5/5937: [ 375.626920][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.637919][ T31] #1: ffffc9000525fba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.650450][ T31] #2: ffffffff8f5ac108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 375.660486][ T31] 3 locks held by kworker/1:10/9653: [ 375.665762][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.676738][ T31] #1: ffffc90003337ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.690559][ T31] #2: ffffffff8f5ac108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 375.701980][ T31] 2 locks held by syz.1.1500/11140: [ 375.707454][ T31] #0: ffffffff8f5ac108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 375.717580][ T31] #1: ffff888056721100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 375.727280][ T31] 1 lock held by syz.2.1501/11141: [ 375.732367][ T31] #0: ffff888056721100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 375.742386][ T31] 3 locks held by syz.2.1501/11142: [ 375.747629][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.756092][ T31] #1: ffff888056725100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 375.765680][ T31] #2: ffffffff8f5ac108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 375.775773][ T31] 1 lock held by syz.2.1501/11150: [ 375.780923][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.789406][ T31] 1 lock held by syz.4.1502/11152: [ 375.794494][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.803183][ T31] 1 lock held by syz.3.1516/11209: [ 375.808322][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.816740][ T31] 1 lock held by syz.3.1516/11214: [ 375.821913][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.830703][ T31] 1 lock held by syz.0.1521/11224: [ 375.835803][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.844285][ T31] 1 lock held by syz-executor/11233: [ 375.849586][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.858522][ T31] 1 lock held by syz-executor/11234: [ 375.863807][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.872261][ T31] 1 lock held by syz-executor/11235: [ 375.877558][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.885980][ T31] 1 lock held by syz-executor/11238: [ 375.891504][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.900011][ T31] 1 lock held by syz-executor/11239: [ 375.905272][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.913739][ T31] 1 lock held by syz-executor/11243: [ 375.919171][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.927621][ T31] 1 lock held by syz-executor/11244: [ 375.932897][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.941379][ T31] 1 lock held by syz-executor/11245: [ 375.946671][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.955447][ T31] 1 lock held by syz-executor/11248: [ 375.960778][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.969283][ T31] 1 lock held by syz-executor/11249: [ 375.974561][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.983267][ T31] 1 lock held by syz-executor/11253: [ 375.988576][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 375.997038][ T31] 1 lock held by syz-executor/11254: [ 376.002315][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 376.011029][ T31] 1 lock held by syz-executor/11255: [ 376.016298][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 376.024824][ T31] 1 lock held by syz-executor/11258: [ 376.030123][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 376.038817][ T31] 1 lock held by syz-executor/11259: [ 376.044086][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 376.052534][ T31] [ 376.054855][ T31] ============================================= [ 376.054855][ T31] [ 376.063306][ T31] NMI backtrace for cpu 1 [ 376.063320][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 376.063341][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.063352][ T31] Call Trace: [ 376.063359][ T31] [ 376.063367][ T31] dump_stack_lvl+0x189/0x250 [ 376.063398][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.063423][ T31] ? __pfx__printk+0x10/0x10 [ 376.063453][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 376.063480][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 376.063505][ T31] ? __pfx__printk+0x10/0x10 [ 376.063529][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 376.063560][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 376.063586][ T31] watchdog+0xf60/0xfa0 [ 376.063612][ T31] ? watchdog+0x1e2/0xfa0 [ 376.063638][ T31] kthread+0x711/0x8a0 [ 376.063667][ T31] ? __pfx_watchdog+0x10/0x10 [ 376.063687][ T31] ? __pfx_kthread+0x10/0x10 [ 376.063715][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.063740][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.063774][ T31] ? __pfx_kthread+0x10/0x10 [ 376.063800][ T31] ret_from_fork+0x4bc/0x870 [ 376.063822][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.063849][ T31] ? __switch_to_asm+0x39/0x70 [ 376.063864][ T31] ? __switch_to_asm+0x33/0x70 [ 376.063878][ T31] ? __pfx_kthread+0x10/0x10 [ 376.063905][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.063937][ T31] [ 376.063944][ T31] Sending NMI from CPU 1 to CPUs 0: [ 376.209350][ C0] NMI backtrace for cpu 0 [ 376.209376][ C0] CPU: 0 UID: 0 PID: 6093 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 376.209395][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.209406][ C0] Workqueue: events_unbound toggle_allocation_gate [ 376.209427][ C0] RIP: 0010:walk_to_pmd+0x288/0x460 [ 376.209446][ C0] Code: 20 65 92 8d e8 b9 6a 1a 00 4c 03 35 52 0a 87 0b c1 eb 12 81 e3 f8 0f 00 00 4c 01 f3 74 4b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 8e 6a 1a 00 4c 8b 33 4c 89 f6 48 81 e6 80 00 00 [ 376.209461][ C0] RSP: 0018:ffffc90005467628 EFLAGS: 00000246 [ 376.209475][ C0] RAX: 1ffff1100340c755 RBX: ffff88801a063aa8 RCX: ffff88802651bc80 [ 376.209488][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.209498][ C0] RBP: 1ffff1100340c4aa R08: ffffea0000086a87 R09: 1ffffd4000010d50 [ 376.209510][ C0] R10: dffffc0000000000 R11: fffff94000010d51 R12: 000ffffffffff000 [ 376.209522][ C0] R13: dffffc0000000000 R14: ffff88801a063000 R15: 000000001a063067 [ 376.209535][ C0] FS: 0000000000000000(0000) GS:ffff888126139000(0000) knlGS:0000000000000000 [ 376.209548][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.209559][ C0] CR2: 0000556956f225e0 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 376.209574][ C0] Call Trace: [ 376.209581][ C0] [ 376.209588][ C0] ? __kvmalloc_node_noprof+0x171/0x910 [ 376.209615][ C0] __get_locked_pte+0x27/0xd0 [ 376.209631][ C0] ? __kvmalloc_node_noprof+0x171/0x910 [ 376.209656][ C0] __text_poke+0x2e6/0xa10 [ 376.209680][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 376.209701][ C0] ? __kvmalloc_node_noprof+0x171/0x910 [ 376.209724][ C0] ? __pfx___text_poke+0x10/0x10 [ 376.209744][ C0] ? rcu_is_watching+0x15/0xb0 [ 376.209763][ C0] ? trace_contention_end+0x39/0x120 [ 376.209790][ C0] smp_text_poke_batch_finish+0x90a/0x1130 [ 376.209817][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 376.209842][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 376.209872][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 376.209896][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 376.209922][ C0] static_key_enable+0x1a/0x20 [ 376.209942][ C0] toggle_allocation_gate+0xad/0x240 [ 376.209958][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 376.209973][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 376.210001][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 376.210017][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 376.210035][ C0] process_scheduled_works+0xae1/0x17b0 [ 376.210066][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.210092][ C0] worker_thread+0x8a0/0xda0 [ 376.210122][ C0] kthread+0x711/0x8a0 [ 376.210145][ C0] ? __pfx_worker_thread+0x10/0x10 [ 376.210162][ C0] ? __pfx_kthread+0x10/0x10 [ 376.210183][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.210205][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.210226][ C0] ? __pfx_kthread+0x10/0x10 [ 376.210247][ C0] ret_from_fork+0x4bc/0x870 [ 376.210265][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 376.210285][ C0] ? __switch_to_asm+0x39/0x70 [ 376.210298][ C0] ? __switch_to_asm+0x33/0x70 [ 376.210311][ C0] ? __pfx_kthread+0x10/0x10 [ 376.210332][ C0] ret_from_fork_asm+0x1a/0x30 [ 376.210355][ C0] [ 378.579521][ T1301] ieee802154 phy1 wpan1: encryption failed: -22