last executing test programs: 21.15529228s ago: executing program 4 (id=1574): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a407800", @ANYRES32=r3, @ANYBLOB="1400020100000000000000000000ffff000000000800080074030000"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) listen(r6, 0x4000) close(r6) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffe4a, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000070001a132cbd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c000180050006000200f5ff0b000180058005000300020000000c000180050003000300"/48], 0x48}}, 0x24000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a0101"], 0x2c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 21.085176267s ago: executing program 4 (id=1578): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) 20.904846355s ago: executing program 4 (id=1580): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x75, 0xd, 0x6, 0x4, 0x1, 0x81}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5c00000012006bab9a3fe3d86e20aa0a046b876c1d0048007ea60864160af36504001a0038001d001931e1a7f76ba3b9a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e1000c5bb", 0x56}, {&(0x7f0000000040)="778c9830c4611b03c59f0eb13fbd3a684270ac3d0aac537ddcacb87cdb43bb154c8ba8fa20dbb89271b9ac9ba9ff95b78e4ff81da4f017b89e7940", 0xffffffffffffffe6}, {&(0x7f00000000c0)="ba09ce56dbe641524a0c4e8b7bf41373ad7266c04a47bfc303225875c13e4f4f2b6c6e54c24fed76b398688ecf93f4535c6a50322d3311a01356e11a30", 0x3d}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x2000c0d4) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b40)=""/190, 0xbe}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000880)=""/221, 0xdd}, {&(0x7f0000000680)=""/203, 0xcb}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000002100)=""/4090, 0xffa}], 0x8}, 0x40012100) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x10001}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r6, 0x30b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a05000000000000000000010000000900010073797a300000000008000240000000012c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000014000000090a0102000000000000000005000000140000001100010000000000000000000500000aec2f32f9d106085f571e96d4cc390641112be0d6907a7574fa1a62db2c217033178cf38c4f8ec238d18405e5801841ff0c0cd6d79421cce5ac77aa09d706e789990770ef307804f5221ece67c70a"], 0x90}}, 0x0) 20.022003153s ago: executing program 3 (id=1595): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001009b"], 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', r7, 0x7, 0x80, 0xd, 0x5, {{0x39, 0x4, 0x3, 0xe, 0xe4, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x2d, 0x3, 0xe, [{@multicast2}, {@private=0xa010101, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x8}, {@empty, 0x8fec}, {@remote, 0x9}, {@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010101, 0x1}]}, @ssrr={0x89, 0x1b, 0x97, [@multicast1, @private=0xa010100, @multicast1, @private=0xa010102, @multicast1, @multicast2]}, @rr={0x7, 0x2b, 0x53, [@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @rand_addr=0x64010101, @broadcast]}, @timestamp={0x44, 0x14, 0xd9, 0x0, 0x6, [0x2, 0x2, 0x1, 0x0]}, @timestamp={0x44, 0x1c, 0xa5, 0x0, 0x5, [0x10000, 0x5d4a, 0x7, 0x2, 0x7, 0x3]}, @timestamp={0x44, 0x10, 0x39, 0x0, 0x7, [0x8, 0x0, 0x7]}]}}}}}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = accept(r8, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x5185}], 0x1, 0x10142, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r9, 0x110, 0x4, &(0x7f0000000180), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) 19.921596859s ago: executing program 4 (id=1596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, &(0x7f0000000040)) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000300)={0x2, [0x0, 0x0]}, &(0x7f0000000340)=0xc) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000fe880000000000000000000000000000b100000000000000bd1142d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080010000800000000000c0015"], 0xe0}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r10, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0x1001}], 0x2}, 0x4}], 0x1, 0x40010000, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x8, 0x1, {{0x17, 0x4, 0x0, 0x7, 0x5c, 0x65, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@lsrr={0x83, 0x27, 0x23, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0xf, "bcb491a27db3988810105ac831"}, @generic={0x89, 0x10, "20b2e4a000ad6e335fcc20076563"}, @generic={0x44, 0x2}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x5f, r11}) (async) connect$ax25(r1, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 19.704774119s ago: executing program 4 (id=1601): pselect6(0x40, &(0x7f0000000080)={0x2, 0x2, 0x87e, 0x0, 0x4, 0x8, 0x4, 0x140}, &(0x7f00000000c0)={0xc200000000000, 0x8, 0x10000, 0xb546, 0x7c4, 0xae, 0x100, 0x3}, &(0x7f0000000100)={0x5, 0x6, 0x2, 0xe1, 0xf, 0x8, 0x0, 0x2}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x9]}, 0x8}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x10000}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) clock_gettime(0x0, &(0x7f0000007640)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000440)=""/34, 0x22}, {&(0x7f0000000480)=""/55, 0x37}], 0x5, &(0x7f0000000540)=""/251, 0xfb}, 0x3}, {{&(0x7f0000000640)=@caif=@rfm, 0x80, &(0x7f0000001b80)=[{&(0x7f00000006c0)=""/13, 0xd}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/14, 0xe}, {&(0x7f0000001740)=""/197, 0xc5}, {&(0x7f0000001840)=""/210, 0xd2}, {&(0x7f0000001940)=""/160, 0xa0}, {&(0x7f0000001a00)=""/78, 0x4e}, {&(0x7f0000001a80)=""/225, 0xe1}], 0x8, &(0x7f0000001c00)=""/162, 0xa2}, 0x7}, {{&(0x7f0000001cc0)=@alg, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d40)=""/188, 0xbc}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/33, 0x21}], 0x3, &(0x7f0000001ec0)=""/167, 0xa7}, 0x4}, {{&(0x7f0000001f80)=@pppol2tp, 0x80, &(0x7f0000004400)=[{&(0x7f0000002000)=""/24, 0x18}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/15, 0xf}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/196, 0xc4}, {&(0x7f0000004180)=""/193, 0xc1}, {&(0x7f0000004280)=""/220, 0xdc}, {&(0x7f0000004380)}, {&(0x7f00000043c0)=""/7, 0x7}], 0x9}, 0x101}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000044c0)=""/232, 0xe8}], 0x1, &(0x7f0000004600)=""/78, 0x4e}, 0xd69f}, {{&(0x7f0000004680)=@phonet, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004700)=""/140, 0x8c}], 0x1, &(0x7f0000004800)=""/24, 0x18}, 0x3}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000004840)=""/170, 0xaa}, {&(0x7f0000004900)=""/111, 0x6f}, {&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000005980)=""/76, 0x4c}, {&(0x7f0000005a00)=""/62, 0x3e}, {&(0x7f0000005a40)=""/46, 0x2e}, {&(0x7f0000005a80)=""/234, 0xea}, {&(0x7f0000005b80)=""/182, 0xb6}, {&(0x7f0000005c40)=""/6, 0x6}], 0x9, &(0x7f0000005d40)=""/100, 0x64}, 0x10001}, {{&(0x7f0000005dc0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000007000)=[{&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/203, 0xcb}, {&(0x7f0000006f40)=""/186, 0xba}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007040)=""/250, 0xfa}, {&(0x7f0000007140)=""/21, 0x15}, {&(0x7f0000007180)=""/87, 0x57}, {&(0x7f0000007200)=""/100, 0x64}, {&(0x7f0000007280)=""/249, 0xf9}], 0x5}, 0x7}], 0x9, 0x22, &(0x7f0000007680)={r1, r2+10000000}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x1ff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x2, {{0xa, 0x4e22, 0x0, @local, 0x1}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}}}, 0x108) 18.746611903s ago: executing program 4 (id=1617): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x4) (async) syz_emit_ethernet(0x92, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x1a, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x3, [{@remote, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x19, 0x1, 0xe, [{@multicast1, 0x88}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@broadcast, 0x8}, {@multicast1, 0x852}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x4}]}, @ssrr={0x89, 0x17, 0xbd, [@multicast2, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback]}, @ra={0x94, 0x4}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x384, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x314, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @random="2734b3328834", @device_a, {0x2, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0xc4, "11126af236cf387052c8a5393a08780f6b97699111e59d22623581fa96d1c4526f117b0c88fb242762c3a59f2a89bfb95a9badcec2a2afe70b6cdccb6ab7bfe6533eded4d232bb259cc77269c08a89e9f05e412620654edb439e103ee3a4b450d83b40ff3d0529765e11c7313c243069486808ef9b7c64fec30c81b53279bb60f7d7d67f5e1380a9e6209a0c11ca4bae29b4d13b3c535547ed9dbf682e45de3daa9100032844e7012c60656bd5dade43f264f180820082d37afbf012d6d98cf29093e61b"}, {@device_a, @device_a, 0x16, "572a1832e9de01334a92cc824e46b30e88b5c27f96d6"}, {@device_b, @device_a, 0xb4, "66b8c24019a4f4dccbbb67c767dbf7356636ba4f18c64f741e9fba7c9138b0cf82ba3750fe6e05e54d2a47f515f7d75d874bf1657fcb8080981593f30126ee1caf2ee532bc47cef8903853f980b1ad8f8ffb9d285a606c0ac421afd4e2f2887c871a7ebef18016170bcfbf00a43140dc2c9ba8caffa2f4c99543d6f2b46c19c351c1bd615a7b8823bda486d042bbc8c684c21c8078877685f1af09fe08fc1fd0a991d496e7687b36c6a1ae221713c9622c7b8a81"}, {@device_b, @broadcast, 0x98, "15e7761fc8e053300dabb08a7e5a076e5b97b9e1609477a4878fb7976eb408bd553183300959253209acc0db90f058b0e0fba44d92744c0a710812b65c518cf61fa446bdac66792e9a05c9024e06c86d0d89a3c2af63f1eb358b406a5f807b7c14163731897f4014ca33f3c206565d61bdd0394245e11b832498428c35745c3227bbecd199867baf911bb9da3aea807df1f8dd8ce64a556e"}, {@device_a, @broadcast, 0x1f, "127d767c701d3091e278f08aa9e3508f149f92f8a41a77f597271eeb8e2681"}, {@device_b, @device_b, 0x4f, "107ad3c4b643abce636ae03a516a9a02d04c4f021f03835563a65b84bcb1091d53764b23b2cc44d30dbd41a8db4a1c241c39c9b76297cd9e6c34837df3d5570231596e096a52a836ffae45a7d9da20"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x30, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @device_a, @random="abfd0f15c67f", {0x2, 0x6}, "", @void, @value=@ver_80211n={0x0, 0x269a, 0x2, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x80}, 0x4040005) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, 0x0, 0x0) (async) write$nci(r6, 0x0, 0xfffffeeb) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) 18.578606351s ago: executing program 3 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="148000001000010000000000000000000000000a54000000060a0b040000060000000000020000002800048024000180090001d5020000000000000014000280080001400000001508000240002c0000060900010073797a30000000000900020073797a32000000001400000011000100"/124], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x10) 18.504151315s ago: executing program 3 (id=1623): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000014480)=ANY=[@ANYBLOB="14000000100001581f7ac4e20964dc7848f89dd80000060a0b04000000ebfc00000000000200000014000480100001800700010063740000040002800900010073797a30000000000900020073797a320000000014000000110000000000000000"], 0x68}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x19, 0x0, &(0x7f0000000080)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x5}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 18.345363222s ago: executing program 3 (id=1626): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom, @bcast, @default, @netrom, @remote, @default, @remote, @rose]}, &(0x7f0000000080)=0x48, 0x80000) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@bcast, @netrom, @remote, @null, @rose, @netrom, @rose, @rose]}, &(0x7f0000000140)=0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}]}, 0x24}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2291a6bd1cc311f7}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv6_newrule={0x4c, 0x20, 0x4, 0x70bd2d, 0x25dfdbff, {0xa, 0x14, 0x0, 0x1, 0x7e, 0x0, 0x0, 0x0, 0xd}, [@FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000085) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x24, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0x24, 0x1}, {0x9}, {0x30, 0x1}, {0x3c, 0x1}, {0x16}, {0x48, 0x1}, {0x24}, {0x60, 0x1}, {0x6, 0x1}, {0x18, 0x1}, {0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000006c0)={{r4}, 0x5, 0x5, 0x5}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000700)={@rand_addr, @remote, 0x0}, &(0x7f0000000740)=0xc) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x8fed, '\x00', r6, r8, 0x4, 0x5, 0x1}, 0x50) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000000940)={&(0x7f0000000840)=""/227, 0xe3, 0x1ff0000, 0x8001}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000980)={{0x0, 0x6, 0x9, 0x8, 0x9, 0x1, 0x7, 0x1, 0x2, 0x0, 0xa, 0x9ad9, 0x2, 0x7, 0x3}}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000001980)=0x14bc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f000000a700)=[{{&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001a40)=""/19, 0x13}, {&(0x7f0000001a80)=""/63, 0x3f}, {&(0x7f0000001ac0)=""/62, 0x3e}, {&(0x7f0000001b00)=""/32, 0x20}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000001c00)=""/135, 0x87}, {&(0x7f0000001cc0)=""/221, 0xdd}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x8, &(0x7f0000002e40)=""/217, 0xd9}, 0x7980}, {{&(0x7f0000002f40)=@nfc, 0x80, &(0x7f0000004580)=[{&(0x7f0000002fc0)=""/122, 0x7a}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/254, 0xfe}, {&(0x7f0000004140)=""/132, 0x84}, {&(0x7f0000004200)=""/168, 0xa8}, {&(0x7f00000042c0)=""/230, 0xe6}, {&(0x7f00000043c0)=""/212, 0xd4}, {&(0x7f00000044c0)=""/151, 0x97}], 0x8, &(0x7f0000004600)=""/160, 0xa0}, 0x380}, {{&(0x7f00000046c0)=@nfc, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004740)=""/6, 0x6}, {&(0x7f0000004780)=""/15, 0xf}], 0x2, &(0x7f0000004800)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000005800)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005880)}], 0x1, &(0x7f0000005900)}, 0x3}, {{&(0x7f0000005940)=@l2, 0x80, &(0x7f0000006000)=[{&(0x7f00000059c0)=""/194, 0xc2}, {&(0x7f0000005ac0)=""/80, 0x50}, {&(0x7f0000005b40)=""/248, 0xf8}, {&(0x7f0000005c40)=""/241, 0xf1}, {&(0x7f0000005d40)=""/226, 0xe2}, {&(0x7f0000005e40)=""/27, 0x1b}, {&(0x7f0000005e80)=""/151, 0x97}, {&(0x7f0000005f40)=""/177, 0xb1}], 0x8, &(0x7f0000006080)=""/179, 0xb3}, 0x3ff}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/173, 0xad}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/243, 0xf3}, {&(0x7f0000008300)=""/25, 0x19}], 0x5, &(0x7f00000083c0)=""/160, 0xa0}, 0x6}, {{&(0x7f0000008480)=@can, 0x80, &(0x7f0000009640)=[{&(0x7f0000008500)=""/4096, 0x1000}, {&(0x7f0000009500)=""/33, 0x21}, {&(0x7f0000009540)=""/249, 0xf9}], 0x3, &(0x7f0000009680)=""/153, 0x99}, 0xffff}, {{&(0x7f0000009740)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000009ac0)=[{&(0x7f00000097c0)=""/59, 0x3b}, {&(0x7f0000009800)=""/213, 0xd5}, {&(0x7f0000009900)=""/114, 0x72}, {&(0x7f0000009980)=""/80, 0x50}, {&(0x7f0000009a00)=""/132, 0x84}], 0x5, &(0x7f0000009b40)=""/106, 0x6a}}, {{0x0, 0x0, &(0x7f000000a100)=[{&(0x7f0000009bc0)=""/72, 0x48}, {&(0x7f0000009c40)=""/20, 0x14}, {&(0x7f0000009c80)=""/164, 0xa4}, {&(0x7f0000009d40)=""/130, 0x82}, {&(0x7f0000009e00)=""/176, 0xb0}, {&(0x7f0000009ec0)=""/61, 0x3d}, {&(0x7f0000009f00)=""/186, 0xba}, {&(0x7f0000009fc0)=""/238, 0xee}, {&(0x7f000000a0c0)=""/62, 0x3e}], 0x9, &(0x7f000000a1c0)=""/229, 0xe5}, 0x9}, {{&(0x7f000000a2c0)=@phonet, 0x80, &(0x7f000000a600)=[{&(0x7f000000a340)=""/180, 0xb4}, {&(0x7f000000a400)=""/196, 0xc4}, {&(0x7f000000a500)=""/220, 0xdc}], 0x3, &(0x7f000000a640)=""/142, 0x8e}, 0x4}], 0xa, 0x2, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f000000a9c0), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f000000aac0)={&(0x7f000000a980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000aa80)={&(0x7f000000aa00)={0x80, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x47}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000085) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f000000ab40)={0x1, &(0x7f000000ab00)=[{0xf, 0x81, 0x9, 0xb2}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000000ae00)={r8, 0x0, 0xee, 0xf, &(0x7f000000ab80)="e63c4d8c2336c6b77161ec500b99bd4d471e596317a9ee87160d01ae2a098e0c67993e61a907c2dda3a03fd6c2e7d2afec6c19a83f04947a8a68409927fd7498f458c5202bb45f089228c46a4cab5c076bd8a6b9315e753884c071e435294ee1a7f86541230dc4724b19397b1b165cb8a3448abf2d47632e2959775f085e90b38c8ef71168cd5b6dba333b4561da96e8fe23bfdd4ca3da626b02b4441848fd82ea40abdd6da8c28a9f842df77f87d7a013b32580ebafc6aff00a833ce5c771de5482d9294c01f053ae60f6973fed681e2379665432ff18423928b885987e1437af79ba1a8d520de4e04460093525", &(0x7f000000ac80)=""/15, 0x400, 0x0, 0x0, 0xdd, &(0x7f000000acc0), &(0x7f000000ad00)="a3fb94f306c7047839590f82780a519f80a0e8d768539a3d7f7b0404061b6af7f92c228b6ed9b048a95ba4f19603f9c24c28d1311c65d12575709f8d57c5cd44cdf2323f41dfb28cc37196de399b6c866250292359b358123ba58faff54b9ea895a5238e656ad41290e9af26b15c3b00485244abe809e444047bdd9402fe351feb0c6c3871f73a9e23f4594cc459a34414dd2200f93eb3749747423314ae63ec8e9e3b4ed19b1c7e7e80027a4d0e3cde472645d9043bc0e304e10766146a21454a3df712ec99e86b2d55d57203e028a6bacc27caf6794e6f993a5a9615", 0x2, 0x0, 0x3}, 0x50) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f000000ae80)={'nat\x00', 0x2, [{}, {}]}, 0x48) recvmmsg(r4, &(0x7f0000011580)=[{{&(0x7f000000af00)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f000000b140)=[{&(0x7f000000af80)=""/177, 0xb1}, {&(0x7f000000b040)=""/14, 0xe}, {&(0x7f000000b080)=""/1, 0x1}, {&(0x7f000000b0c0)=""/116, 0x74}], 0x4, &(0x7f000000b180)=""/57, 0x39}, 0x100}, {{&(0x7f000000b1c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f000000b480)=[{&(0x7f000000b240)=""/72, 0x48}, {&(0x7f000000b2c0)=""/114, 0x72}, {&(0x7f000000b340)=""/38, 0x26}, {&(0x7f000000b380)=""/247, 0xf7}], 0x4, &(0x7f000000b4c0)=""/209, 0xd1}, 0xe66}, {{0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b5c0)=""/39, 0x27}], 0x1, &(0x7f000000b640)=""/4096, 0x1000}, 0x9b6}, {{0x0, 0x0, &(0x7f000000cbc0)=[{&(0x7f000000c640)=""/220, 0xdc}, {&(0x7f000000c740)=""/211, 0xd3}, {&(0x7f000000c840)=""/102, 0x66}, {&(0x7f000000c8c0)=""/214, 0xd6}, {&(0x7f000000c9c0)=""/242, 0xf2}, {&(0x7f000000cac0)=""/155, 0x9b}, {&(0x7f000000cb80)=""/55, 0x37}], 0x7, &(0x7f000000cc40)=""/65, 0x41}, 0x74}, {{&(0x7f000000ccc0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f000000de00)=[{&(0x7f000000cd40)=""/4096, 0x1000}, {&(0x7f000000dd40)=""/73, 0x49}, {&(0x7f000000ddc0)=""/7, 0x7}], 0x3, &(0x7f000000de40)=""/211, 0xd3}, 0xd}, {{0x0, 0x0, &(0x7f0000011340)=[{&(0x7f000000df40)=""/4096, 0x1000}, {&(0x7f000000ef40)=""/194, 0xc2}, {&(0x7f000000f040)=""/129, 0x81}, {&(0x7f000000f100)=""/172, 0xac}, {&(0x7f000000f1c0)=""/4096, 0x1000}, {&(0x7f00000101c0)=""/4096, 0x1000}, {&(0x7f00000111c0)=""/217, 0xd9}, {&(0x7f00000112c0)=""/126, 0x7e}], 0x8, &(0x7f00000113c0)=""/149, 0x95}, 0xc39}, {{&(0x7f0000011480)=@hci, 0x80, &(0x7f0000011540)=[{&(0x7f0000011500)=""/44, 0x2c}], 0x1}, 0x2}], 0x7, 0x20000, &(0x7f0000011740)={0x77359400}) recvmsg$kcm(r8, &(0x7f0000011e80)={0x0, 0x0, &(0x7f0000011cc0)=[{&(0x7f0000011780)}, {&(0x7f00000117c0)=""/138, 0x8a}, {&(0x7f0000011880)=""/202, 0xca}, {&(0x7f0000011980)=""/22, 0x16}, {&(0x7f00000119c0)=""/100, 0x64}, {&(0x7f0000011a40)=""/47, 0x2f}, {&(0x7f0000011a80)=""/128, 0x80}, {&(0x7f0000011b00)=""/252, 0xfc}, {&(0x7f0000011c00)=""/131, 0x83}], 0x9, &(0x7f0000011d80)=""/251, 0xfb}, 0x40002063) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000011ec0)={0x0, 0x2, 0x7, 0x9}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000011fc0)) 17.894261361s ago: executing program 2 (id=1636): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x4000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="17833e0e41c9909baf0957b56cb919f19a5237fe004d8e21ea40538e250e4f36a1fe837ecbe801621a792ce02cc4069e5d05", 0x32}, {&(0x7f0000000100)="360fe95485bf2e2d9080562eb7521d8fce9e8bb9754024035b6f603f9397d1421723fb9b73d6c2e420", 0x29}, {&(0x7f0000000140)="8dde85526d4cd68aad4dcc19efb82d0a69e708baf1c3a1d9823430bbff10fa266ba59d458bddbe1a3037bce710edbbc783f78b9589c31cfe0acc8364a01757449441037a192f4a069e36320431b171a75c5958c9ca173253a2fbfcdfe7810c13551bf79389f10de63e079395e4077d44d7acacc56660d0c8e803058101357b25749e335ca905803f7ab386245c67b68c55869ca2129132d808526402230c4eb168fe5d16e781ded793fa88ec02be41d7dbfa538fe1c6e4581852771387008c93d7e5cc7b8f82d205dcb451204d5dc6aa83b38c680bf148ffa781e55ff8c4ce253c845a106fe075dccfae46", 0xeb}], 0x3, &(0x7f0000000280)=[{0x110, 0x113, 0x81, "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"}, {0x70, 0x103, 0x5, "ceb38b51037d65626bc269a09c262dff2dd07b1868b5c8f04c4e2b08d5bcc532378791f9b1a7ddf68e2b201d2d86feaa5391dc1063f9123f9c143ba504f3c5a0c1a72f910e52aaae4511a1d8c62c1dd571b8ec2a069ed64259bc69f1"}, {0x80, 0x110, 0x7, "0c6e12e6a572a458ac6e8a2d37e32d0459656c5fb706f4d0db92c386752f105ab6ab6b19b737c91edbae1119fd19c947adc408f83609cb6574c079b62510def1795c14b88ebec41feca469fa48d8838c6421bf49a29b8cc614fd3edf24810bf368dfd08765d795b6f0baca6b86f3"}, {0xa8, 0x10a, 0x0, "c0b694c991dbfc76eb7fa9df8e1aeb0f08516521e58f28d2728d7fc503b366edf33f4a842525f396fe489adc90c9ef52eda35621426c18e8d57db5e2d5f1a129b904e4fa4c0a9a3bbaa5a49d6f78659b6749e6c4ef9ceafaa78578738a19e1fbab3a2eada24bf1d9d6e2eee32b1d56dc8269ea491b10476767b6ab2d94d56a7323ef503b937f08b59896485242ef15c40893bba58b8ff3"}], 0x2a8}, 0x20000054) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 17.808160786s ago: executing program 2 (id=1638): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x138, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 17.707321005s ago: executing program 2 (id=1641): r0 = socket(0x18, 0x800, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r2, &(0x7f0000000dc0)=""/134, 0x86) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) (async, rerun: 32) r3 = socket$inet6(0xa, 0x1000080002, 0x85) (rerun: 32) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) (async, rerun: 64) r4 = socket$inet6(0xa, 0x802, 0x88) (rerun: 64) recvfrom$inet6(r3, &(0x7f0000000300)=""/208, 0xd0, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) (async, rerun: 64) sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) (rerun: 64) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x46c}, 0x1, 0x0, 0x0, 0x4}, 0x34000031) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x0, 0x40, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630122000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 17.413666726s ago: executing program 3 (id=1644): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r0, 0x118, 0x3, 0x0, &(0x7f00000003c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffff1e000000000000000000000000000000000000000000000000000000000000000800ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000f00000000000000000000030000000008000000000000000000007f00000100000000000000000000000000000000320000000000000000000000000000000000ffff7f0000010000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d46c00000000000000e00000010000000000000000000000000300000000000000000000000000000000000000fc000000000000000000000000000001000000003c0000000a000000fc010000000000accb6e156b4743068732ab9fa209"], 0x23c}}, 0x2004010) 17.411109636s ago: executing program 2 (id=1646): r0 = socket(0x28, 0x5, 0x401) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close(r0) 17.358538116s ago: executing program 3 (id=1647): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x14804) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 17.327872962s ago: executing program 1 (id=1648): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r1, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7f, 0x60}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7801000017000100e25151892937c9a94e60b324b4ffffff00000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000004f0327fb4c6be74ae26e5d9a97d1398e9d7065b3f614067db43957b7974443cf7604711110451eac314a0a0e844aab50f5a8532b1ef6061a32f2fb35e2556cf0784d389790fa3abb3115adab2a33b2aa13759661670dcadc62db1a980566389314fef453801aabd3f0b181d348dda8576db84408d1bfb70f658791", @ANYRES32=0x0, @ANYBLOB="be424d6d83213c578cdcfeb88dcfe5869006eb377c54721aeefef9ddfb3809a89030d2ef8054e244f6"], 0x178}}, 0x0) 17.281611379s ago: executing program 2 (id=1649): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7d5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7f6, 0x10}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)="4e6c54e8a2406a761ea66217e18c62be61779d50bddeedbbb653da6a414a8c3bc01e124b", 0x24}, 0x1, 0x0, 0x0, 0x60004095}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0x90}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131, 0x83}], 0x1, &(0x7f00000004c0)=""/205, 0xcd}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20, 0x14}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000740)=""/206, 0xce}, {&(0x7f0000000840)=""/55, 0x37}, {&(0x7f0000000880)=""/111, 0x6f}], 0x6}, 0x2}], 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7d5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7f6, 0x10}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$802154_raw(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)="4e6c54e8a2406a761ea66217e18c62be61779d50bddeedbbb653da6a414a8c3bc01e124b", 0x24}, 0x1, 0x0, 0x0, 0x60004095}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0x90}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131, 0x83}], 0x1, &(0x7f00000004c0)=""/205, 0xcd}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20, 0x14}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000740)=""/206, 0xce}, {&(0x7f0000000840)=""/55, 0x37}, {&(0x7f0000000880)=""/111, 0x6f}], 0x6}, 0x2}], 0x4, 0x0, 0x0) (async) 17.226682192s ago: executing program 2 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x240000c0}, 0x12f7eae2ad6041bf) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ppoll(&(0x7f0000000cc0)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d38a9e572f2c06dcd32", 0x11) 17.145311172s ago: executing program 1 (id=1653): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x2002044) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x400, 0x1, 0x800000, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@in6_addr=@private2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000100}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="0d4201f3951384e3", 0x8}], 0x1}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 16.965141744s ago: executing program 1 (id=1655): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x400c1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x314, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x285, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7ffa}, @device_a, @broadcast, @from_mac=@broadcast, {0x8, 0x8}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0xa7a2b90, @default, 0x10, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x12, 0x1}, {0x2}, {0x60}, {0x18, 0x1}, {0x5}, {0xc}, {0xd}]}, @val={0x3, 0x1, 0x64}, @void, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x1, 0x3c, 0xf0}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x0, 0x95}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x68}}, @void, [{0xdd, 0xc7, "504150aa3292fb8292fa22a50fcb1a55b68d562fa81054856e6f1d337d8317cdff30f389eb4030377e066956032de8d4e2581b7fd96762f405e078109f681f1deba8d9e0454086c09a30dd286f633b06d5bdb4201547238d8ee159c4e089edfa5ac118192c149d60968c0721bad3ed54bebf4b94c5e52e03f671cbc75e73035cfb28924fd1f5b334b28ebad670ef1cedd976c6e6ff87c1d54f518fd08957b9427cb70137240a96ce99598f34a43e729a228ee1d0415aebc7fdbc3e9a3b7cc31fda9cff7a86a5ef"}, {0xdd, 0xae, "bda1028f1552d3710be29bfc52224138a79c27d3590a9d94ac07abcf866ac798097f75d97c142a53ea4a6920b1e487d5b91b6e1d0efc7f8aa65f5534d02ba73b5c437af2ed1f12edfdd67d70fed35412d9600735a0925021f79c38071e6d53b6dbc6936e7b68168b1324a10ba8caff367ad1db23dc61b4c11711729d6fc4cfe3190fefd5ee6449abcf42814c375bc635f108f0ab5520e718419464cc66505ce41b115254910eaf99c77012cf094f"}, {0xdd, 0x5a, "3330fd94f14fee4d16f67d7cf9f416d376ff0eb1bbbc7c722e78a9a0454ae7edb6429b6ad6e4293696a4f300cec523f30795c8d7da9e21c254259d400396e9cf43fdceeb4844906c93ff02b5f01dc66a6956b43ad37f2038ed7a"}, {0xdd, 0x53, "318396b7ad3b6163f331c6049cddb7abd0ae6223ceabb35176ab223a3bc8ddd5e74adc6ee2cd038b80723bc5183696cca1a6238b83bbc5c8e0863f7035c0f56ec77da72796bc4d97fa08c62f61d43b546d9da1"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x4d, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @device_b, @from_mac=@device_b, {0x3, 0x1}}, @random="010bad3e48e9a4b952d4bf7a1899946922903fa222b2b043068855c0ea5e6119d2774a6a6e277e597282d96d2673df1e2c"}}]}, 0x314}, 0x1, 0x0, 0x0, 0x64000040}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040044}, 0x4004090) r8 = accept(r7, &(0x7f0000000ac0)=@l2, &(0x7f0000000b40)=0x80) ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f0000000b80)="a29ca311a00c640f4fbcb88b2c792af06714b452618c51cbcd09e485d52d60feba7c4f999eacb686f6427fd4f41b5af44a9813421a59bf9dce7b9c2708d299ad3ccde4180e0252cf0a8740e360c72bef380873e2cf64568a8c501cd20bd8e1") syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r4) sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x4000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001000)={&(0x7f0000000dc0)={0x208, r9, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x21}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb8, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xad, 0x1, "3faa042b7b640f26afe61ebee97dbbbdbc1a455134a5ae5b2d84391adc9711c4f7967684fd438cba36cce35b65cb6b88d2677244a63cdbb86f7085805504e7be27f22579166c2fa8b1a9a7eb7abef2b5e2970d53e8bb6a9595e4f3ea5d27aadbb3906111d7dd39d1d122b3483a4f607744d3ae522187497752abeb4181dd93b81b1c0e57a9d8e9de404e200518a5fb248e9a21bb87ab7255ff859f2ab4d2fb46baedb4eeae94752abe"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x110, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x10, 0x2, "225d6c958def649040997af8"}}, {0xe4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xde, 0x1, "5a1eb0989a5b4b343ace7e72a980aaf54ce0632d9f77a95ba8f1a221b0959010a47398386ed47583ce24dbb0d3319ecbb938a71bca70cfe05b8858e843129263dcf4e3fef10d2e7a74af3ced2a55414f2e51acbcc62cb8cfaa09d25e74709d168da9c74aed1928e850606ad979a9de38c6509ca8107e43e4ddfce3f76864987f428b637496b609f32b84ac175c341dfd96da618e58f3371ab7f80b274d21106c144e8ebe8f05f2ee63a2aa42b556f7e1a8390adcc7dd715b08a87d8bf627a0079b75282bcc5e36671746a6657a6857f39ec5e1c809a7a9230e56"}}, {0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe, 0x1, "03ba9cbc19443821c646"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x951c}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x208}, 0x1, 0x0, 0x0, 0x8041}, 0x10) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000001080), &(0x7f00000010c0)=0x4) sendmmsg$alg(r8, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001100)="58a0a71b588913e6ea48fcc5f16979b9b0c8cfa704974bc8a5c7df89756e190f8ced38cbf9fd3d7642693ea4474e1c98cffd6aa16ac0e47a076c8adc99e62a34a3", 0x41}, {&(0x7f0000001180)="84583bab5bfe7af2077a51971ea99e456cbf665339ac873bed0425138655068aef31ef5de00f98b15cac14c2dc4339211897e461edfc7ca7f60b8334501ef2d74cd347ef570e2253d2b1917bc45f16fa92df79eb4bdf89cd438eff7fbe931cae94f67e09f2e8fad907229bcc49affb90e38e57aa4760fc4be6707301938381aa67c99c5eb2870017eb2eb1fa833accf0609c2f83a2d6ba825c3ab21126bfa7d26d8130a979ee23cb37442f3a6f9255e8878d0d5bca898043dbde99c17820f4f864a40b5ed2695e99f2206bb6dbb4ebdc56270885906af3f212d2cda65928712b4f", 0xe1}, {&(0x7f0000001280)="783a57ef2de906517e6063bb991ed8ee497408095d7ff5376340cd4afdf319cdbd1afeeeb98dc92926b04d1656339529d5b13fc92159270d5d4a616ef07592c4c8aa499ec997cc70009f7defda509cc9d689eed178ac49bcd35b861efe157adbc95194fbea816ff7ca0627e603", 0x6d}], 0x3}, {0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)="ac1320d3b89730b18aeba0396df0f5e2921dbd0fc3850a1236a0c1bf48e0db82402c7793262156998c0ce3a16f0004e75c999ecef2b9e9c1ae7001d81adef4b5b10f7a032ae4effeb752291985bc21d70045b5cbc37cc016a6a2f7f009baf6068c4a0b87ae555bf6ba82c16cd4ee122324560034cadfe5abe415443ee43ce650c7160a61108ddc9884c959a0e8125ba9dd3e9f9a3ce75de6ceb06897ea132ec16046ddc65eae2dbcd28af5d9ff608212de5e9b34923e2a46fba3b1c37db200a9d7ce22c9cecca69f691a7f71d27731339b13d7d52df166053b3d378ca733bf0ce3a6585e396b76ec17", 0xe9}], 0x1, &(0x7f0000001480)=[@iv={0x50, 0x117, 0x2, 0x35, "1f944519ba3dfdf1dee38f8247542e2de114b6121666e8ab3e3e7cdc5cc67f349a3b4432c972fd03f017dd244cc0a8ddfa08a6a412"}, @assoc={0x18, 0x117, 0x4, 0xd}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x20, 0x117, 0x2, 0x9, "bacd4739ee7dedf9df"}, @op={0x18}], 0xb8, 0x20008811}, {0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001540)="0349e77210b795b094e0eae2c118a25893bb833f39ea4e64ca22691fd4839626ea83b67447ae4842c8cb3ffb271402c199452d00ee78c7076b2f5a6a6f955bee645f410e55de17782a56bbb54b73f19ab6701b4636bbc92e547e59423b61ab9fd7bc288ba2ce5159751a2117a521148daad6b5aa22cda8efaaea65c58a0300", 0x7f}], 0x1, &(0x7f0000001600)=[@assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x88, 0x117, 0x2, 0x72, "e49761a8123524b8c1f40494c50610543b1e8bb514cca8598787fbe4f8b04d9c4643e7baab3eddc3647c3edfd367518d9b8fa08dc149a27c2be0ed7883dca6ce965f7275c679a7438f0528c6d8ca6a0bbf2973e9d153d66541ec464f6858b74b731800787f625aefe3a6cdd73e67e9543d1a"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x118, 0x117, 0x2, 0xff, "808ce85b079c19a37302df253a7b7af92dfbae79282b0edd2f01b9491e5b8dea2180aab3821dcd3ecff0ce7e26ae2528969f2b9e6d30e0d8a7b5e86c9db247afee4d2a85c0c5c33273fb57d8c0219f0cb777582f9d62dcd1dabe6496826e2933f342acc5832a7b35b6153382af8c5da4b7d736671250559cbd07dc05463a6138f6d99d39ebb69d333998d4fa85b125edf11f5ed184f9026c7a2248813a99aa4877cfc9a7dc4945941b25a1b63c1aefeb4ec133b2d23639e4a2dcb165ec757cf5e93866c90ffad014a47f03c051f6f7f9dc63dd47d97aa1468bfff6d9f6fa4a381bd1216c4c05b6a514e93f6a62b5ccf81b891b9e81a3b0c61f6949c86737a1"}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x1248, 0x408d0}], 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x58, 0x1410, 0x4, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4005}, 0x2000800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002b40)={'syztnl1\x00', &(0x7f0000002a80)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x0, 0x4, {{0x26, 0x4, 0x0, 0x15, 0x98, 0x64, 0x0, 0x7f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_prespec={0x44, 0x1c, 0xcd, 0x3, 0x3, [{@multicast2, 0x7fff}, {@multicast1}, {@local}]}, @cipso={0x86, 0x15, 0x0, [{0xd935fd28a27e0f56, 0xf, "cfc64e0bf9fb76ff515367b41e"}]}, @end, @timestamp_addr={0x44, 0x34, 0xe, 0x1, 0x3, [{@private=0xa010101, 0x3}, {@multicast2, 0x40}, {@broadcast, 0x1}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xc911}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffdf40}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x3c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @loopback]}]}}}}}) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000002b80)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002bc0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e22, 0x8, 0x4e23, 0x9, 0xa, 0x0, 0x0, 0x3a, r10, r11}, {0xd, 0x6, 0x0, 0x3, 0x5, 0x9, 0x4, 0x2267}, {0x6, 0xd, 0x4, 0x719cd642}, 0x451, 0x6e6bbb, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x6c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x0, 0x2, 0x4, 0x2, 0x9, 0xfffffffd}}, 0xe8) pipe(&(0x7f0000002cc0)={0xffffffffffffffff}) setsockopt$MRT6_DEL_MIF(r12, 0x29, 0xcb, &(0x7f0000002d00)={0x0, 0x0, 0x2, r10}, 0xc) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r13, &(0x7f0000002d40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}, 0xa) 16.853636521s ago: executing program 1 (id=1656): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x33, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYRES16=r0], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r8, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="1b000000", @ANYRES16=r7, @ANYBLOB="200028bd7000fddbdf253a00000000009900020000005a000000060065000300000000006500080000001d5df212323d656dbc045dd06503dd3c6a4a76311aa03e56238c708867c78b97e8a1a2d088dc268b3289b04d9abb8e42337b75f664fbd02031f4869ced1ae8d1af1556d21c00105193a7236abef4f24d6392d5a571f67c937a440c831fe4557db132ef06248e306aa831560e1a22bf1bad0f715b6800000000000000"], 0xffffff4e}, 0x1, 0x0, 0x0, 0x40}, 0xc085) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=@newtclass={0x5c, 0x28, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0xfff1}, {0x1, 0x4}, {0xe, 0x10}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xba}}, @TCA_RATE={0x6, 0x5, {0xa, 0x10}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_taprio={0xb}]}, 0x5c}}, 0x800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r10, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x14, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2008000}, 0x4000) 16.767223051s ago: executing program 1 (id=1658): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 16.660022145s ago: executing program 1 (id=1660): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @rand_addr=0x64010101}, {0x6, @broadcast}, 0x4a, {0x2, 0x0, @private=0xa010101}, 'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003840)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}}, 0x20008050) 15.492913126s ago: executing program 0 (id=1668): r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000005c0)={r3, 0xb}, &(0x7f0000000600)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xe, &(0x7f0000000040)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000180)='GPL\x00', 0x0, 0x80, &(0x7f00000001c0)=""/128, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x9}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x4, 0x2}, {0x3, 0x5, 0x1}, {0x1, 0x4, 0xd, 0x9}, {0x0, 0x5, 0xb, 0x6}, {0x3, 0x1, 0xe, 0x8}, {0x2, 0x5, 0x8, 0xa}, {0x4, 0x1, 0xf, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='xs_stream_read_request\x00', r5, 0x0, 0xfe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.353422287s ago: executing program 0 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x10, 0xfc2, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xea42cfc4, 0x67}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x800) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) r3 = gettid() (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240)={0x7, 0x0, 0x7ff, 0x9, 0x5}, 0x14) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000280)=@ccm_128={{0x304}, "2fcf986413d1d83b", "93aedf5d148f4f558360eef56e852e74", "98e5203c", "2d3b9386a278ffcc"}, 0x28) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1d8, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x652, 0x58}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x8000, 0x9, 0x0, 0x6, 0x1, 0x2, 0xffff]}, @NL80211_ATTR_FRAME={0x177, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="bb57939b10ec", {0x7, 0x2}}, 0x1040, 0x22, @default, @val={0x1, 0x4, [{0x4}, {0x24, 0x1}, {0x30, 0x1}, {0x36, 0x1}]}, @void, [{0xdd, 0xcd, "2d53ff616df534c0f6414e40ea52acd763d4ce90fcb0778e26e8fd71f723139aedca5a7adaaacb816c9ee4b87f0ee4e7328d88b337457c4aba243af2c7d7214eed4c4c6ce343980d30684f6f1e966b119271cb7c645abcd5deaab3ba571eefbe4f318e1f7dcf01fbf2c6c25b9c639856904591aed737f66ed2614898af72fdb28d3d1430441f8848d63690335b70ca3774f228bc31de03bcf3a70abca6e45921371ba463d49bcf0fbaff984c4a7bf4b2652b6c5a2d38e6b8ca303f8b7c2fd55d172948bd62a5746fa0aaf916e6"}, {0xdd, 0x7e, "e2a4f194b040bae4546cdf764de17ea2529a17f220fe76e4cf5777621304890a84a85bd91771e10a1e4b938e436c5ec90ee6e1edfcafad4c088c056de6a71c566537a3c8c59369a20afc92afb58f21f0693d7feff202a98c4ae70b396b1e4ffd1268a95e3fd017b0d0d06976b93fd0669e2f6f000d2147dbf14b93b8eab7"}]}}, @NL80211_ATTR_FRAME={0x29, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x80}, @device_b, @broadcast, @initial, {0x4, 0x8}, @value=@ver_80211n={0x0, 0x7ffa, 0x2, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, @addba_req={0x3, 0x0, {0xf7, {0x1, 0x1, 0x2, 0xff}, 0x2, {0x1, 0x3}}}}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x44810}, 0x8004040) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r4) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000005c0), &(0x7f0000000600)=0x14) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8b, 0x74}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xce}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb76}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x20008000) bind$tipc(r4, &(0x7f0000000780)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3, 0x1}}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='memory.swap.current\x00', 0x0, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000800)={0x0, 0xc19, 0x6, 0x7, 0xa, 0x2, 0x9b98, 0x5c600000, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x7, 0xffff, 0x4, 0x1000, 0x6}}, &(0x7f00000008c0)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000900)={r7, @in6={{0xa, 0x4e22, 0x1, @local, 0x4b6}}, 0x4, 0xde2, 0x41, 0xfffffefa, 0xdb9}, &(0x7f00000009c0)=0x98) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000000a00)={{r2}, "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"}) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000001a00)={{r9}, "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"}) (async) pipe(&(0x7f0000002a00)={0xffffffffffffffff}) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$F2FS_IOC_RESIZE_FS(r10, 0x4008f510, &(0x7f0000002a40)=0x7) (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000002a80)=r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48480}, 0x8000) recvfrom$unix(r8, &(0x7f0000002c00)=""/95, 0x5f, 0x42, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) 15.352559284s ago: executing program 0 (id=1670): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000001c0)={r7, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000780)={r7, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100d900000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d61737100000000140002800800024000000011080003400000000009000100797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3803004c", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x338}, 0x1, 0x0, 0x0, 0x80}, 0x4040005) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x18, r9, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) 15.261304426s ago: executing program 0 (id=1671): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) 15.220584344s ago: executing program 0 (id=1672): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a05b200000000000000000a"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0xac}}, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f0000000180)=""/18, 0x12}], 0x3, &(0x7f0000000200)=""/248, 0xf8}, 0x9}, {{&(0x7f0000000300)=@vsock, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/84, 0x54}], 0x4, &(0x7f0000000840)=""/112, 0x70}, 0x7}], 0x2, 0x10000, &(0x7f0000000980)={r1, r2+10000000}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000008c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffd726, 0x0, 0x3, 0x8, 0x7, 0x1}, &(0x7f0000000900)=0x20) 15.141753242s ago: executing program 0 (id=1673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x14, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f933a3c92b", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="2e9b5b0007e03dd65193dfb6c575963f88a86067", 0x14}, {&(0x7f00000006c0)="cb4c", 0x2}], 0x2) 3.111820903s ago: executing program 32 (id=1617): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x4) (async) syz_emit_ethernet(0x92, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x1a, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x3, [{@remote, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x19, 0x1, 0xe, [{@multicast1, 0x88}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@broadcast, 0x8}, {@multicast1, 0x852}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x4}]}, @ssrr={0x89, 0x17, 0xbd, [@multicast2, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback]}, @ra={0x94, 0x4}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x384, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x314, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @random="2734b3328834", @device_a, {0x2, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0xc4, "11126af236cf387052c8a5393a08780f6b97699111e59d22623581fa96d1c4526f117b0c88fb242762c3a59f2a89bfb95a9badcec2a2afe70b6cdccb6ab7bfe6533eded4d232bb259cc77269c08a89e9f05e412620654edb439e103ee3a4b450d83b40ff3d0529765e11c7313c243069486808ef9b7c64fec30c81b53279bb60f7d7d67f5e1380a9e6209a0c11ca4bae29b4d13b3c535547ed9dbf682e45de3daa9100032844e7012c60656bd5dade43f264f180820082d37afbf012d6d98cf29093e61b"}, {@device_a, @device_a, 0x16, "572a1832e9de01334a92cc824e46b30e88b5c27f96d6"}, {@device_b, @device_a, 0xb4, "66b8c24019a4f4dccbbb67c767dbf7356636ba4f18c64f741e9fba7c9138b0cf82ba3750fe6e05e54d2a47f515f7d75d874bf1657fcb8080981593f30126ee1caf2ee532bc47cef8903853f980b1ad8f8ffb9d285a606c0ac421afd4e2f2887c871a7ebef18016170bcfbf00a43140dc2c9ba8caffa2f4c99543d6f2b46c19c351c1bd615a7b8823bda486d042bbc8c684c21c8078877685f1af09fe08fc1fd0a991d496e7687b36c6a1ae221713c9622c7b8a81"}, {@device_b, @broadcast, 0x98, "15e7761fc8e053300dabb08a7e5a076e5b97b9e1609477a4878fb7976eb408bd553183300959253209acc0db90f058b0e0fba44d92744c0a710812b65c518cf61fa446bdac66792e9a05c9024e06c86d0d89a3c2af63f1eb358b406a5f807b7c14163731897f4014ca33f3c206565d61bdd0394245e11b832498428c35745c3227bbecd199867baf911bb9da3aea807df1f8dd8ce64a556e"}, {@device_a, @broadcast, 0x1f, "127d767c701d3091e278f08aa9e3508f149f92f8a41a77f597271eeb8e2681"}, {@device_b, @device_b, 0x4f, "107ad3c4b643abce636ae03a516a9a02d04c4f021f03835563a65b84bcb1091d53764b23b2cc44d30dbd41a8db4a1c241c39c9b76297cd9e6c34837df3d5570231596e096a52a836ffae45a7d9da20"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x30, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @device_a, @random="abfd0f15c67f", {0x2, 0x6}, "", @void, @value=@ver_80211n={0x0, 0x269a, 0x2, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x80}, 0x4040005) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, 0x0, 0x0) (async) write$nci(r6, 0x0, 0xfffffeeb) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) 2.091393873s ago: executing program 33 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x240000c0}, 0x12f7eae2ad6041bf) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ppoll(&(0x7f0000000cc0)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d38a9e572f2c06dcd32", 0x11) 2.0544323s ago: executing program 34 (id=1647): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x14804) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 1.019023947s ago: executing program 35 (id=1660): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @rand_addr=0x64010101}, {0x6, @broadcast}, 0x4a, {0x2, 0x0, @private=0xa010101}, 'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003840)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}}, 0x20008050) 0s ago: executing program 36 (id=1673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x14, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f933a3c92b", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="2e9b5b0007e03dd65193dfb6c575963f88a86067", 0x14}, {&(0x7f00000006c0)="cb4c", 0x2}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 75.681268][ T5852] cgroup: Unknown subsys name 'net' [ 75.834643][ T5852] cgroup: Unknown subsys name 'cpuset' [ 75.843386][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.335254][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.914669][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.923655][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.931859][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.952387][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.973260][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.981603][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.991239][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.992474][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.998991][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.006529][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.014429][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.020433][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.028259][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.039927][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.049093][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.057052][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.064827][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.070896][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.091353][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.104887][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.115459][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.126249][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.134145][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.149814][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.157588][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.713660][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 80.799166][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 80.914657][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 80.939696][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 81.021576][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 81.056107][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.063377][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.071443][ T5862] bridge_slave_0: entered allmulticast mode [ 81.078585][ T5862] bridge_slave_0: entered promiscuous mode [ 81.116421][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.123992][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.131341][ T5862] bridge_slave_1: entered allmulticast mode [ 81.138515][ T5862] bridge_slave_1: entered promiscuous mode [ 81.164423][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.171616][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.178943][ T5871] bridge_slave_0: entered allmulticast mode [ 81.187372][ T5871] bridge_slave_0: entered promiscuous mode [ 81.246321][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.253610][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.260975][ T5871] bridge_slave_1: entered allmulticast mode [ 81.268144][ T5871] bridge_slave_1: entered promiscuous mode [ 81.362262][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.389058][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.402448][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.411962][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.419232][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.427152][ T5866] bridge_slave_0: entered allmulticast mode [ 81.436121][ T5866] bridge_slave_0: entered promiscuous mode [ 81.459476][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.501042][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.508266][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.515556][ T5866] bridge_slave_1: entered allmulticast mode [ 81.523749][ T5866] bridge_slave_1: entered promiscuous mode [ 81.530945][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.538038][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.545275][ T5872] bridge_slave_0: entered allmulticast mode [ 81.552975][ T5872] bridge_slave_0: entered promiscuous mode [ 81.607306][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.616969][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.624210][ T5872] bridge_slave_1: entered allmulticast mode [ 81.631658][ T5872] bridge_slave_1: entered promiscuous mode [ 81.651387][ T5862] team0: Port device team_slave_0 added [ 81.672378][ T5871] team0: Port device team_slave_0 added [ 81.678304][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.686132][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.693489][ T5868] bridge_slave_0: entered allmulticast mode [ 81.700439][ T5868] bridge_slave_0: entered promiscuous mode [ 81.735873][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.746710][ T5862] team0: Port device team_slave_1 added [ 81.758731][ T5871] team0: Port device team_slave_1 added [ 81.765431][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.772842][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.780025][ T5868] bridge_slave_1: entered allmulticast mode [ 81.788513][ T5868] bridge_slave_1: entered promiscuous mode [ 81.798928][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.812491][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.824645][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.963565][ T5872] team0: Port device team_slave_0 added [ 81.971303][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.978254][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.005396][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.018102][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.025224][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.051482][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.065942][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.078190][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.089071][ T5866] team0: Port device team_slave_0 added [ 82.096648][ T5872] team0: Port device team_slave_1 added [ 82.103249][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.110205][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.136776][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.148178][ T5873] Bluetooth: hci3: command tx timeout [ 82.154168][ T5875] Bluetooth: hci1: command tx timeout [ 82.157913][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.167386][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.193394][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.220751][ T5875] Bluetooth: hci0: command tx timeout [ 82.222709][ T5866] team0: Port device team_slave_1 added [ 82.226644][ T5873] Bluetooth: hci4: command tx timeout [ 82.237602][ T5873] Bluetooth: hci2: command tx timeout [ 82.268831][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.276332][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.302375][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.342483][ T5868] team0: Port device team_slave_0 added [ 82.349086][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.356629][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.383225][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.453228][ T5868] team0: Port device team_slave_1 added [ 82.466132][ T5871] hsr_slave_0: entered promiscuous mode [ 82.473354][ T5871] hsr_slave_1: entered promiscuous mode [ 82.480319][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.487649][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.513866][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.586301][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.593454][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.619767][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.636683][ T5862] hsr_slave_0: entered promiscuous mode [ 82.643428][ T5862] hsr_slave_1: entered promiscuous mode [ 82.649562][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 82.655427][ T5862] Cannot create hsr debugfs directory [ 82.677001][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.683994][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.709959][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.722733][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.729680][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.755678][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.773107][ T5872] hsr_slave_0: entered promiscuous mode [ 82.779373][ T5872] hsr_slave_1: entered promiscuous mode [ 82.786053][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 82.792191][ T5872] Cannot create hsr debugfs directory [ 82.978380][ T5868] hsr_slave_0: entered promiscuous mode [ 82.985250][ T5868] hsr_slave_1: entered promiscuous mode [ 82.992402][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 82.998151][ T5868] Cannot create hsr debugfs directory [ 83.020722][ T5866] hsr_slave_0: entered promiscuous mode [ 83.027069][ T5866] hsr_slave_1: entered promiscuous mode [ 83.033737][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 83.039481][ T5866] Cannot create hsr debugfs directory [ 83.514759][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.528347][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.539855][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.558270][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.610005][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.627883][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.638662][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.669666][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.730029][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.741199][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.754710][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.767023][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.881309][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.895544][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.923290][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.958288][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.038163][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.057525][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.074945][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.103075][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.115386][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.136810][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.164457][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.195178][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.202468][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.222019][ T5875] Bluetooth: hci1: command tx timeout [ 84.224007][ T5873] Bluetooth: hci3: command tx timeout [ 84.246119][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.272588][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.279722][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.303974][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.304266][ T5873] Bluetooth: hci2: command tx timeout [ 84.310945][ T5875] Bluetooth: hci4: command tx timeout [ 84.317888][ T5873] Bluetooth: hci0: command tx timeout [ 84.354954][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.362140][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.373900][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.381067][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.428329][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.453430][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.460551][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.471638][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.478766][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.503049][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.553895][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.644309][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.743399][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.750700][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.820576][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.829681][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.836877][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.896874][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.984162][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.991367][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.036948][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.044133][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.242518][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.257931][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.346196][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.400409][ T5872] veth0_vlan: entered promiscuous mode [ 85.455965][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.474139][ T5872] veth1_vlan: entered promiscuous mode [ 85.491922][ T5862] veth0_vlan: entered promiscuous mode [ 85.545248][ T5862] veth1_vlan: entered promiscuous mode [ 85.694427][ T5866] veth0_vlan: entered promiscuous mode [ 85.715200][ T5872] veth0_macvtap: entered promiscuous mode [ 85.743383][ T5866] veth1_vlan: entered promiscuous mode [ 85.787938][ T5872] veth1_macvtap: entered promiscuous mode [ 85.805315][ T5862] veth0_macvtap: entered promiscuous mode [ 85.836632][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.860008][ T5862] veth1_macvtap: entered promiscuous mode [ 85.887640][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.923601][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.944557][ T5866] veth0_macvtap: entered promiscuous mode [ 85.960561][ T2984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.979591][ T2984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.992271][ T5866] veth1_macvtap: entered promiscuous mode [ 86.012309][ T2984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.021841][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.040433][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.053654][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.107115][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.133218][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.147029][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.183972][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.193592][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.205292][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.224492][ T5868] veth0_vlan: entered promiscuous mode [ 86.242320][ T2966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.258434][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.273855][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.299170][ T2966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.308806][ T5873] Bluetooth: hci3: command tx timeout [ 86.310882][ T5873] Bluetooth: hci1: command tx timeout [ 86.316726][ T2966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.348682][ T5871] veth0_vlan: entered promiscuous mode [ 86.358049][ T2966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.381810][ T5875] Bluetooth: hci2: command tx timeout [ 86.387676][ T5863] Bluetooth: hci0: command tx timeout [ 86.393491][ T5873] Bluetooth: hci4: command tx timeout [ 86.416135][ T5871] veth1_vlan: entered promiscuous mode [ 86.439047][ T5868] veth1_vlan: entered promiscuous mode [ 86.481645][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.489506][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.501433][ T5868] veth0_macvtap: entered promiscuous mode [ 86.523124][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.531066][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.553700][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.564772][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.574531][ T5868] veth1_macvtap: entered promiscuous mode [ 86.640391][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.650448][ T5871] veth0_macvtap: entered promiscuous mode [ 86.657565][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.694331][ T5871] veth1_macvtap: entered promiscuous mode [ 86.698869][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.745059][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.752306][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.769663][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.815364][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.854523][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.883189][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.967424][ T2984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.990502][ T2984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.000225][ T2984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.016774][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.098601][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 87.108127][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.127963][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.228469][ T5993] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6'. [ 87.245949][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.275519][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.375908][ T5999] Zero length message leads to an empty skb [ 87.469290][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.489392][ T6001] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.529341][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.597572][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.637760][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.744316][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.760035][ T6009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.790966][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.806731][ T6011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10'. [ 87.919631][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.948814][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.227696][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.395878][ T5873] Bluetooth: hci1: command tx timeout [ 88.402500][ T5873] Bluetooth: hci3: command tx timeout [ 88.445774][ T6033] warning: `syz.1.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.460979][ T5873] Bluetooth: hci4: command tx timeout [ 88.461805][ T5875] Bluetooth: hci2: command tx timeout [ 88.466476][ T5873] Bluetooth: hci0: command tx timeout [ 88.519378][ T6037] Bluetooth: MGMT ver 1.23 [ 88.886233][ T6067] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 89.677829][ T6098] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 89.696215][ T6098] netlink: 204 bytes leftover after parsing attributes in process `syz.0.34'. [ 89.846429][ T6108] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 89.906573][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 90.185022][ T6122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.185638][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 90.420454][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 91.177143][ T6166] syzkaller0: entered promiscuous mode [ 91.215501][ T6166] syzkaller0: entered allmulticast mode [ 91.398664][ T6170] netlink: 'syz.2.50': attribute type 2 has an invalid length. [ 91.450083][ T6163] veth0_to_team: entered promiscuous mode [ 91.457083][ T6163] veth0_to_team: entered allmulticast mode [ 91.473944][ T6165] netlink: 'syz.4.49': attribute type 83 has an invalid length. [ 91.487612][ T6172] bond0: entered promiscuous mode [ 91.501240][ T6172] bond_slave_0: entered promiscuous mode [ 91.523886][ T6172] bond_slave_1: entered promiscuous mode [ 91.574180][ T6172] bond0: left promiscuous mode [ 91.579009][ T6172] bond_slave_0: left promiscuous mode [ 91.588471][ T6172] bond_slave_1: left promiscuous mode [ 91.825864][ T1211] cfg80211: failed to load regulatory.db [ 92.184909][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 92.482609][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 92.997165][ T6213] vlan2: entered allmulticast mode [ 93.002998][ T6213] bridge0: entered allmulticast mode [ 93.105123][ T6217] gretap1: entered promiscuous mode [ 93.118382][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 93.142960][ T6228] netlink: 'syz.3.66': attribute type 3 has an invalid length. [ 93.209243][ T6230] macvtap1: entered promiscuous mode [ 93.215699][ T6230] vlan0: entered promiscuous mode [ 93.222001][ T6230] macvtap1: entered allmulticast mode [ 93.227642][ T6230] vlan0: entered allmulticast mode [ 93.237835][ T6230] veth0_vlan: entered allmulticast mode [ 93.337470][ T6234] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 93.393792][ T6234] netlink: 17 bytes leftover after parsing attributes in process `syz.1.68'. [ 93.450203][ T6239] netlink: 'syz.4.70': attribute type 2 has an invalid length. [ 93.531693][ T6246] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.554176][ T6248] trusted_key: syz.0.71 sent an empty control message without MSG_MORE. [ 93.756604][ T6252] nbd: socks must be embedded in a SOCK_ITEM attr [ 93.885596][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 94.413392][ T6278] bridge0: port 3(syz_tun) entered blocking state [ 94.426263][ T6278] bridge0: port 3(syz_tun) entered disabled state [ 94.450359][ T6278] syz_tun: entered allmulticast mode [ 94.466275][ T6278] syz_tun: entered promiscuous mode [ 94.496743][ T6278] bridge0: port 3(syz_tun) entered blocking state [ 94.503574][ T6278] bridge0: port 3(syz_tun) entered forwarding state [ 94.770862][ T6307] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 94.790182][ T6307] netlink: 224 bytes leftover after parsing attributes in process `syz.4.90'. [ 94.876799][ T6314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.93'. [ 95.033759][ T6324] netlink: 176 bytes leftover after parsing attributes in process `syz.2.97'. [ 95.178666][ T6328] IPVS: set_ctl: invalid protocol: 29 172.20.20.15:20002 [ 95.409438][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 95.420218][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.454123][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.526643][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.547736][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.856033][ T6353] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 95.893071][ T6355] netlink: 'syz.0.107': attribute type 3 has an invalid length. [ 95.948529][ T6355] netlink: 72 bytes leftover after parsing attributes in process `syz.0.107'. [ 96.127647][ T6366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.354767][ T6380] tipc: Started in network mode [ 96.372942][ T6380] tipc: Node identity 9e189379aae1, cluster identity 4711 [ 96.388464][ T6380] tipc: Enabled bearer , priority 0 [ 96.477030][ T6379] tipc: Disabling bearer [ 96.775113][ T6408] netlink: 'syz.0.121': attribute type 1 has an invalid length. [ 96.815023][ T6400] veth0_virt_wifi: renamed from veth0_vlan [ 97.185351][ T6436] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 97.982833][ T6471] netlink: 'syz.2.137': attribute type 32 has an invalid length. [ 98.060769][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.159236][ T6481] __nla_validate_parse: 4 callbacks suppressed [ 98.159256][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 98.507362][ T6492] sock: sock_timestamping_bind_phc: sock not bind to device [ 98.793158][ T5529] veth0_virt_wifi: left promiscuous mode [ 98.850253][ T5529] veth0_virt_wifi: entered promiscuous mode [ 99.405452][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 99.687426][ T6542] bridge_slave_1: left allmulticast mode [ 99.693288][ T6542] bridge_slave_1: left promiscuous mode [ 99.699908][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.722504][ T6542] bridge_slave_0: left allmulticast mode [ 99.728246][ T6542] bridge_slave_0: left promiscuous mode [ 99.738049][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.967446][ T6573] netlink: 64 bytes leftover after parsing attributes in process `syz.1.165'. [ 100.212480][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 100.298125][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.359208][ T6585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.367034][ T6585] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.384743][ T6585] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 100.426031][ T6594] netlink: 'syz.1.170': attribute type 23 has an invalid length. [ 100.504387][ T6580] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 100.734182][ T6603] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 100.769961][ T6603] team0: Device gtp0 is of different type [ 100.809399][ T6608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.175'. [ 100.885004][ T6610] netlink: 45 bytes leftover after parsing attributes in process `syz.1.176'. [ 101.021177][ T6618] team0: Device ip6gre1 is of different type [ 101.172236][ T6628] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.182'. [ 101.186027][ T6629] netlink: 104 bytes leftover after parsing attributes in process `syz.1.181'. [ 101.482157][ T6645] netlink: 'syz.4.188': attribute type 12 has an invalid length. [ 101.551497][ T6652] Illegal XDP return value 1841382925 on prog (id 35) dev N/A, expect packet loss! [ 101.588359][ T6657] netlink: 104 bytes leftover after parsing attributes in process `syz.2.185'. [ 101.666961][ T6661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.189'. [ 101.896498][ T6668] syz_tun: entered allmulticast mode [ 101.907991][ T6667] syz_tun: left allmulticast mode [ 102.956759][ T6704] gtp0: entered promiscuous mode [ 102.972415][ T6704] gtp0: entered allmulticast mode [ 103.225742][ T6726] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 103.374241][ T6735] netlink: 'syz.0.213': attribute type 8 has an invalid length. [ 103.505612][ T6738] __nla_validate_parse: 2 callbacks suppressed [ 103.505626][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 104.804201][ T6707] bond1: entered allmulticast mode [ 104.810035][ T6708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.856753][ T6727] veth3: entered promiscuous mode [ 104.936256][ T6726] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 105.159947][ T6756] netlink: 'syz.1.220': attribute type 2 has an invalid length. [ 105.292638][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 105.392377][ T6767] openvswitch: netlink: IP tunnel dst address not specified [ 105.402656][ T6765] openvswitch: netlink: IP tunnel dst address not specified [ 105.522153][ T6770] netlink: 256 bytes leftover after parsing attributes in process `syz.1.227'. [ 105.545642][ T6773] openvswitch: netlink: Unknown key attributes 2 [ 105.560298][ T6770] netlink: 'syz.1.227': attribute type 9 has an invalid length. [ 105.577395][ T6773] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 105.593327][ T6770] netlink: 256 bytes leftover after parsing attributes in process `syz.1.227'. [ 105.606301][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'. [ 105.619182][ T6770] netlink: 'syz.1.227': attribute type 9 has an invalid length. [ 105.658333][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 105.810274][ T6793] netlink: 'syz.1.232': attribute type 23 has an invalid length. [ 105.849063][ T6773] netlink: 68 bytes leftover after parsing attributes in process `syz.0.226'. [ 105.911309][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 105.925352][ T6792] netlink: 'syz.1.232': attribute type 23 has an invalid length. [ 106.051334][ T6801] netlink: 'syz.4.235': attribute type 2 has an invalid length. [ 106.060453][ T6797] syzkaller1: entered promiscuous mode [ 106.099526][ T6797] syzkaller1: entered allmulticast mode [ 106.110827][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 106.200360][ T6814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.238'. [ 106.236264][ T6814] netlink: 'syz.3.238': attribute type 7 has an invalid length. [ 106.272970][ T6814] netlink: 'syz.3.238': attribute type 8 has an invalid length. [ 106.362213][ T6822] netlink: 'syz.4.241': attribute type 8 has an invalid length. [ 106.510273][ T6832] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 106.570899][ T6832] netlink: 'syz.3.244': attribute type 33 has an invalid length. [ 106.579061][ T6832] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 106.929765][ T6853] netlink: 'syz.1.251': attribute type 25 has an invalid length. [ 107.287470][ T6868] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.332937][ T6880] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 107.607151][ T6892] can: request_module (can-proto-4) failed. [ 108.019215][ T6912] netem: invalid attributes len -24 [ 108.041013][ T6912] netem: change failed [ 108.405050][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.426714][ T6936] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 109.341079][ T5873] Bluetooth: hci2: command 0x0401 tx timeout [ 109.617456][ T6984] team0 (unregistering): Port device team_slave_0 removed [ 109.634881][ T6984] team0 (unregistering): Port device team_slave_1 removed [ 109.937386][ T7019] __nla_validate_parse: 11 callbacks suppressed [ 109.937405][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 111.155334][ T7045] netlink: 84 bytes leftover after parsing attributes in process `syz.4.307'. [ 111.370272][ T7056] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 111.400140][ T7056] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 111.621592][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.315'. [ 112.435413][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 112.535168][ T7103] xfrm1: entered promiscuous mode [ 112.570779][ T7103] xfrm1: entered allmulticast mode [ 113.005113][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 113.177966][ T7143] netlink: 72 bytes leftover after parsing attributes in process `syz.3.332'. [ 113.319599][ T7147] delete_channel: no stack [ 113.535131][ T7161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.337'. [ 113.598750][ T7165] validate_nla: 5 callbacks suppressed [ 113.598767][ T7165] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 113.629500][ T7165] netlink: 244 bytes leftover after parsing attributes in process `syz.2.338'. [ 113.857255][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 114.265213][ T7196] IPVS: Unknown mcast interface: ip6erspan0 [ 114.579047][ T7215] netlink: 80 bytes leftover after parsing attributes in process `syz.2.343'. [ 114.771997][ T7220] ksmbd: Daemon and kernel module version mismatch. ksmbd: 6, kernel module: 1. User-space ksmbd should terminate. [ 116.386824][ T7238] __nla_validate_parse: 1 callbacks suppressed [ 116.386841][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 116.419550][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 116.430095][ T7242] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.354'. [ 116.440755][ T7238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.353'. [ 116.631860][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 117.044650][ T7272] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 117.188078][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 117.467357][ T7292] netlink: 576 bytes leftover after parsing attributes in process `syz.0.369'. [ 117.576651][ T7298] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 117.603033][ T7297] netlink: 'syz.1.373': attribute type 12 has an invalid length. [ 117.807367][ T7305] netlink: 'syz.2.375': attribute type 11 has an invalid length. [ 117.840728][ T7305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.375'. [ 118.596982][ T7332] netlink: 192 bytes leftover after parsing attributes in process `syz.4.383'. [ 118.902325][ T7345] tipc: Started in network mode [ 118.907989][ T7345] tipc: Node identity ee8c1024e192, cluster identity 4711 [ 118.954116][ T7345] tipc: Enabled bearer , priority 0 [ 118.969669][ T7351] syzkaller0: entered promiscuous mode [ 118.976419][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 118.993859][ T7351] syzkaller0: entered allmulticast mode [ 119.034082][ T7345] tipc: Resetting bearer [ 119.100133][ T7345] tipc: Disabling bearer [ 119.123297][ T7354] batadv_slave_1: entered promiscuous mode [ 119.138213][ T7353] batadv_slave_1: left promiscuous mode [ 119.157387][ T7349] syzkaller0: entered promiscuous mode [ 119.177221][ T7349] syzkaller0: entered allmulticast mode [ 119.869169][ T7395] gtp0: entered promiscuous mode [ 119.898658][ T7395] gtp0: entered allmulticast mode [ 120.441060][ T7423] netlink: 'syz.0.406': attribute type 2 has an invalid length. [ 120.765923][ T7400] syz.4.402 (7400) used greatest stack depth: 17896 bytes left [ 120.959372][ T7444] netlink: zone id is out of range [ 120.972954][ T7444] netlink: get zone limit has 8 unknown bytes [ 121.239796][ T7452] tipc: Started in network mode [ 121.247558][ T7452] tipc: Node identity 2a647b08db07, cluster identity 4711 [ 121.255498][ T7452] tipc: Enabled bearer , priority 0 [ 121.413911][ T7456] syzkaller0: entered promiscuous mode [ 121.436553][ T7460] __nla_validate_parse: 5 callbacks suppressed [ 121.436570][ T7460] netlink: 68 bytes leftover after parsing attributes in process `syz.0.415'. [ 121.437357][ T7456] syzkaller0: entered allmulticast mode [ 121.491497][ T7456] tipc: Resetting bearer [ 121.636192][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.418'. [ 121.935234][ T7450] tipc: Resetting bearer [ 121.988740][ T7450] tipc: Disabling bearer [ 122.204642][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 122.402166][ T7503] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 122.422529][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 122.526323][ T7507] pim6reg1: entered promiscuous mode [ 122.535724][ T7507] pim6reg1: entered allmulticast mode [ 122.719024][ T7519] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 122.734006][ T7519] netlink: 224 bytes leftover after parsing attributes in process `syz.4.432'. [ 122.823050][ T7525] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 122.851559][ T7525] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.990973][ T7531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.436'. [ 123.064322][ T7531] sit0: entered promiscuous mode [ 123.073231][ T7531] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 123.088986][ T7531] netlink: 1 bytes leftover after parsing attributes in process `syz.0.436'. [ 123.155366][ T7534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.437'. [ 123.181732][ T7541] netlink: 224 bytes leftover after parsing attributes in process `syz.3.438'. [ 123.229810][ T7545] netlink: 'syz.1.437': attribute type 21 has an invalid length. [ 123.248068][ T7545] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.282767][ T7545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.290260][ T7545] IPv6: NLM_F_CREATE should be set when creating new route [ 123.297590][ T7545] IPv6: NLM_F_CREATE should be set when creating new route [ 123.304883][ T7545] IPv6: NLM_F_CREATE should be set when creating new route [ 123.310472][ T7549] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 124.168902][ T7586] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 124.196349][ T7585] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 124.248053][ T7585] tipc: Enabled bearer , priority 0 [ 124.277061][ T7586] tipc: Enabling of bearer rejected, already enabled [ 124.299574][ T7585] syzkaller0: entered promiscuous mode [ 124.309365][ T7585] syzkaller0: entered allmulticast mode [ 124.326652][ T7593] netlink: 36 bytes leftover after parsing attributes in process `syz.4.456'. [ 124.373749][ T7585] tipc: Resetting bearer [ 124.414624][ T7582] tipc: Resetting bearer [ 124.502294][ T7582] tipc: Disabling bearer [ 124.644316][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.670709][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.721722][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.893006][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.038049][ T7622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.122608][ T7628] netlink: 'syz.4.467': attribute type 2 has an invalid length. [ 125.473830][ T7644] netlink: 'syz.3.472': attribute type 4 has an invalid length. [ 126.467838][ T7724] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 126.499987][ T7733] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 126.545775][ T5916] IPVS: starting estimator thread 0... [ 126.640918][ T7734] IPVS: using max 27 ests per chain, 64800 per kthread [ 126.679858][ T7740] __nla_validate_parse: 14 callbacks suppressed [ 126.679877][ T7740] netlink: 132 bytes leftover after parsing attributes in process `syz.4.492'. [ 126.730518][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 126.741616][ T7749] netlink: 104 bytes leftover after parsing attributes in process `syz.1.494'. [ 126.775464][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 127.020535][ T7755] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 127.237535][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 127.433055][ T7782] Bluetooth: MGMT ver 1.23 [ 127.459758][ T7787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.517294][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.510'. [ 127.600649][ T7797] netlink: 13 bytes leftover after parsing attributes in process `syz.1.512'. [ 127.616494][ T7792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.510'. [ 127.675134][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 127.820034][ T7805] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.513'. [ 128.313277][ T7831] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20000 [ 128.461075][ T7835] netlink: 'syz.3.522': attribute type 13 has an invalid length. [ 128.472288][ T7836] netlink: 'syz.3.522': attribute type 13 has an invalid length. [ 129.196819][ T7835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.234822][ T7836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.261061][ T7843] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 129.299492][ T7845] ipvlan2: entered promiscuous mode [ 129.324262][ T7846] ipvlan3: entered promiscuous mode [ 129.504276][ T5873] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 129.505671][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.586115][ T7860] netlink: 'syz.1.529': attribute type 12 has an invalid length. [ 129.814595][ T7880] netlink: 'syz.1.535': attribute type 4 has an invalid length. [ 130.119164][ T7895] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 130.781876][ T5916] IPVS: starting estimator thread 0... [ 130.900724][ T7938] IPVS: using max 30 ests per chain, 72000 per kthread [ 130.947328][ T7946] IPv6: sit2: Disabled Multicast RS [ 130.981615][ T7946] sit2: entered allmulticast mode [ 131.076480][ T7940] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (640), value rounded to 0 ms [ 131.102665][ T7940] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 131.643054][ T7987] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 131.698227][ T7995] netlink: 'syz.1.567': attribute type 21 has an invalid length. [ 131.754756][ T7995] __nla_validate_parse: 12 callbacks suppressed [ 131.754776][ T7995] netlink: 152 bytes leftover after parsing attributes in process `syz.1.567'. [ 132.760253][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 132.779317][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 132.789909][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.865918][ T8053] bridge_slave_1: left allmulticast mode [ 132.872162][ T8053] bridge_slave_1: left promiscuous mode [ 132.881199][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.932953][ T8053] bridge_slave_0: left allmulticast mode [ 132.938688][ T8053] bridge_slave_0: left promiscuous mode [ 133.000865][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.156336][ T8077] netlink: 348 bytes leftover after parsing attributes in process `syz.2.585'. [ 133.567024][ T8100] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 133.674438][ T8104] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 133.688611][ T8102] 8021q: VLANs not supported on ip6tnl0 [ 134.098848][ T8122] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 134.203661][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 136.170211][ T8138] vlan2: entered allmulticast mode [ 136.175419][ T8138] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 136.193676][ T8156] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 136.402490][ T8166] block nbd0: server does not support multiple connections per device. [ 136.430355][ T8166] block nbd0: shutting down sockets [ 136.450273][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 136.486745][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.669937][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.950386][ T8200] netlink: 'syz.4.612': attribute type 14 has an invalid length. [ 136.974319][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 137.022638][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'. [ 137.045808][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'. [ 137.212728][ T8215] netlink: 64 bytes leftover after parsing attributes in process `syz.4.618'. [ 137.227804][ T8213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.616'. [ 137.295337][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 137.304374][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 137.892249][ T8243] netlink: 'syz.3.627': attribute type 1 has an invalid length. [ 137.962334][ T8243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.108144][ T8252] bond1: (slave veth3): Enslaving as an active interface with a down link [ 138.175993][ T8243] bond1: (slave veth0_to_bond): making interface the new active one [ 138.252681][ T8243] veth0_to_bond: entered promiscuous mode [ 138.311532][ T8243] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.395364][ T8258] bond1: (slave veth5): Enslaving as an active interface with a down link [ 138.425100][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.635'. [ 138.751211][ T8278] netlink: 72 bytes leftover after parsing attributes in process `syz.2.637'. [ 138.769447][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 138.791125][ T8280] netlink: 'syz.1.638': attribute type 5 has an invalid length. [ 138.900352][ T8280] geneve2: entered promiscuous mode [ 138.935820][ T8280] geneve2: entered allmulticast mode [ 138.962543][ T7684] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 138.997146][ T7684] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 139.034535][ T7684] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 139.129600][ T7684] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 139.393671][ T8317] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 139.453303][ T8322] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 139.493701][ T8317] team0: Port device dummy0 added [ 139.613737][ T8322] team0: Port device dummy0 removed [ 139.648480][ T8322] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 139.985732][ T8353] netlink: 'syz.1.653': attribute type 9 has an invalid length. [ 140.218447][ T8362] tipc: Started in network mode [ 140.233502][ T8362] tipc: Node identity feda6399c17a, cluster identity 4711 [ 140.246880][ T8369] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 140.262760][ T8362] tipc: Enabled bearer , priority 0 [ 140.294006][ T8367] syzkaller0: entered promiscuous mode [ 140.303337][ T8367] syzkaller0: entered allmulticast mode [ 140.395865][ T8367] tipc: Resetting bearer [ 140.445043][ T8356] tipc: Resetting bearer [ 140.501276][ T8356] tipc: Disabling bearer [ 140.592038][ T8387] delete_channel: no stack [ 140.605719][ T8387] tipc: Enabled bearer , priority 10 [ 140.622687][ T8386] netlink: 'syz.4.660': attribute type 13 has an invalid length. [ 140.635363][ T8386] veth0_macvtap: left promiscuous mode [ 140.704228][ T8386] macvtap0: entered allmulticast mode [ 140.751258][ T8386] macvtap0: refused to change device tx_queue_len [ 141.594573][ T8434] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 141.735165][ T43] tipc: Node number set to 888771449 [ 142.011557][ T8462] netlink: 'syz.2.679': attribute type 29 has an invalid length. [ 142.019373][ T8462] __nla_validate_parse: 12 callbacks suppressed [ 142.019387][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 142.383024][ T8484] openvswitch: netlink: Missing key (keys=40, expected=100) [ 142.414276][ T8485] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 142.429822][ T8484] openvswitch: netlink: Missing key (keys=40, expected=100) [ 142.448396][ T8485] raw_sendmsg: syz.4.684 forgot to set AF_INET. Fix it! [ 142.475022][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 142.481270][ T8484] openvswitch: netlink: Missing key (keys=40, expected=100) [ 142.495829][ T8489] syz_tun: left allmulticast mode [ 142.508165][ T8489] syz_tun: left promiscuous mode [ 142.514518][ T8489] bridge0: port 3(syz_tun) entered disabled state [ 142.533028][ T8489] bridge_slave_1: left allmulticast mode [ 142.545671][ T8489] bridge_slave_1: left promiscuous mode [ 142.558413][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.580347][ T8489] bridge_slave_0: left allmulticast mode [ 142.590517][ T8489] bridge_slave_0: left promiscuous mode [ 142.610106][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.114786][ T8519] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 143.162531][ T8521] tipc: Enabling of bearer rejected, failed to enable media [ 143.228118][ T8523] netlink: 'syz.3.694': attribute type 15 has an invalid length. [ 143.794041][ T8552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.699'. [ 143.926596][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 144.021237][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.702'. [ 144.340385][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 144.358616][ T8579] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'. [ 144.398417][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 144.451730][ T8579] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'. [ 144.469694][ T8579] netlink: 104 bytes leftover after parsing attributes in process `syz.1.708'. [ 144.495459][ T8590] bridge0: entered promiscuous mode [ 144.540977][ T8590] bridge0: entered allmulticast mode [ 144.578389][ T8594] netlink: 'syz.2.711': attribute type 6 has an invalid length. [ 144.605158][ T8594] netlink: 'syz.2.711': attribute type 6 has an invalid length. [ 144.708608][ T8603] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 144.919544][ T8616] vlan2: entered allmulticast mode [ 144.965832][ T8616] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 145.057176][ T8620] netlink: 'syz.0.717': attribute type 4 has an invalid length. [ 145.418749][ T8638] erspan0: entered promiscuous mode [ 145.902157][ T8663] team0: Cannot enslave team device to itself [ 146.006139][ T8671] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 146.014847][ T8669] team0: No ports can be present during mode change [ 146.142193][ T8680] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 146.439744][ T8689] bridge4: entered promiscuous mode [ 146.455967][ T8689] bridge4: entered allmulticast mode [ 146.886814][ T8721] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 146.913303][ T8721] netlink: 'syz.3.745': attribute type 3 has an invalid length. [ 146.925093][ T8721] NCSI netlink: No device for ifindex 0 [ 147.138399][ T8732] __nla_validate_parse: 47 callbacks suppressed [ 147.138416][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 147.186327][ T8738] netlink: 'syz.0.751': attribute type 21 has an invalid length. [ 147.195399][ T8738] netlink: 132 bytes leftover after parsing attributes in process `syz.0.751'. [ 147.475873][ T8752] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.724391][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 147.861634][ T8772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.963791][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'. [ 147.983739][ T8776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.764'. [ 147.998965][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 148.000192][ T8779] netlink: 'syz.2.765': attribute type 2 has an invalid length. [ 148.008473][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 148.031802][ T8779] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 148.033692][ T8783] netlink: 'syz.4.763': attribute type 4 has an invalid length. [ 148.324380][ T8794] netlink: 'syz.4.769': attribute type 4 has an invalid length. [ 148.353302][ T8789] v: renamed from dummy0 (while UP) [ 148.672935][ T8808] pim6reg1: entered promiscuous mode [ 148.701585][ T8808] pim6reg1: entered allmulticast mode [ 149.018633][ T8827] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 149.033701][ T8827] netlink: 'syz.3.777': attribute type 4 has an invalid length. [ 149.042133][ T8827] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.777'. [ 149.240992][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'. [ 149.535552][ T7689] veth0_to_bond: left promiscuous mode [ 149.793215][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 149.878330][ T8860] syzkaller0: entered promiscuous mode [ 149.891175][ T8860] syzkaller0: entered allmulticast mode [ 151.267930][ T8880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.473462][ T7958] IPVS: starting estimator thread 0... [ 151.581104][ T8906] IPVS: using max 29 ests per chain, 69600 per kthread [ 151.603585][ T8911] netlink: 'syz.0.798': attribute type 7 has an invalid length. [ 151.641837][ T8911] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 151.740429][ T8918] netlink: 'syz.3.801': attribute type 2 has an invalid length. [ 151.774661][ T8920] sock: sock_set_timeout: `syz.1.802' (pid 8920) tries to set negative timeout [ 152.489093][ T8951] __nla_validate_parse: 5 callbacks suppressed [ 152.489110][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 152.528648][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 152.977769][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 153.049263][ T8972] tipc: Enabling of bearer rejected, failed to enable media [ 153.169690][ T8994] netlink: 'syz.4.822': attribute type 30 has an invalid length. [ 153.259286][ T8996] netlink: 'syz.3.823': attribute type 7 has an invalid length. [ 153.591996][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'. [ 153.618448][ T9024] netlink: 112 bytes leftover after parsing attributes in process `syz.3.829'. [ 153.695560][ T9023] netlink: 'syz.4.830': attribute type 10 has an invalid length. [ 153.748240][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.790168][ T9032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 153.973913][ T9038] xt_socket: unknown flags 0xe4 [ 154.151409][ T9049] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 154.259450][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 154.474229][ T9065] netlink: 204 bytes leftover after parsing attributes in process `syz.3.838'. [ 154.589888][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 154.640325][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 154.701748][ T9074] netlink: 'syz.4.842': attribute type 30 has an invalid length. [ 154.730845][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 154.874550][ T9084] vlan3: entered allmulticast mode [ 154.891056][ T9084] bridge1: entered allmulticast mode [ 154.954891][ T5875] Bluetooth: hci2: link tx timeout [ 154.961487][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.972527][ T5875] Bluetooth: hci2: link tx timeout [ 154.977670][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.292527][ T9104] netlink: 'syz.0.848': attribute type 11 has an invalid length. [ 155.387641][ T5875] Bluetooth: hci2: link tx timeout [ 155.393028][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.405360][ T5875] Bluetooth: hci2: link tx timeout [ 155.410605][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.556440][ T5875] Bluetooth: hci2: link tx timeout [ 155.561661][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.626607][ T9118] Unsupported ieee802154 address type: 0 [ 156.308869][ T5875] Bluetooth: hci2: link tx timeout [ 156.314118][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.449977][ T7684] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.501704][ T7684] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.547438][ T7684] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.600087][ T7684] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.652104][ T5875] Bluetooth: hci2: link tx timeout [ 156.657337][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.841696][ T5875] Bluetooth: hci2: link tx timeout [ 156.846986][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.957263][ T9184] bond0: (slave bond_slave_1): Releasing backup interface [ 157.023465][ T5875] Bluetooth: hci2: command 0x0401 tx timeout [ 157.149510][ T9197] IPVS: Unknown mcast interface: nicvf0 [ 158.051636][ T9233] __nla_validate_parse: 10 callbacks suppressed [ 158.051654][ T9233] netlink: 3 bytes leftover after parsing attributes in process `syz.0.877'. [ 158.143161][ T9233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.225873][ T9233] tipc: Enabling of bearer rejected, failed to enable media [ 158.518948][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 158.549967][ T9273] bridge: RTM_NEWNEIGH with invalid ether address [ 158.587940][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 159.353658][ T9297] netlink: 68 bytes leftover after parsing attributes in process `syz.1.893'. [ 159.436841][ T9297] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 159.459415][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 159.497400][ T9300] netlink: 48 bytes leftover after parsing attributes in process `syz.4.894'. [ 159.547035][ T9297] bond3: entered promiscuous mode [ 159.552926][ T9297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.590464][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 159.625974][ T9304] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.635326][ T9304] bond3: (slave bond4): making interface the new active one [ 159.642738][ T9304] bond4: entered promiscuous mode [ 159.648622][ T9304] bond3: (slave bond4): Enslaving as an active interface with an up link [ 159.799193][ T9313] hsr_slave_0 (unregistering): left promiscuous mode [ 159.826403][ T9318] tipc: Enabled bearer , priority 0 [ 159.840695][ T9322] sctp: [Deprecated]: syz.3.898 (pid 9322) Use of int in max_burst socket option deprecated. [ 159.840695][ T9322] Use struct sctp_assoc_value instead [ 159.859750][ T9316] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 159.886631][ T9316] tipc: Resetting bearer [ 159.921623][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 159.945636][ T9327] netlink: 'syz.4.900': attribute type 5 has an invalid length. [ 159.976428][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 159.990002][ T9327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.900'. [ 159.999058][ T9330] netlink: 'syz.4.900': attribute type 5 has an invalid length. [ 160.044213][ T9324] syzkaller0: entered promiscuous mode [ 160.049785][ T9324] syzkaller0: entered allmulticast mode [ 160.077831][ T9335] IPVS: ip_vs_add_dest(): server weight less than zero [ 160.082182][ T9337] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 160.100956][ T9314] tipc: Resetting bearer [ 160.197261][ T9314] tipc: Disabling bearer [ 160.363948][ T9347] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 160.562195][ T9365] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 160.659823][ T9375] lo speed is unknown, defaulting to 1000 [ 160.669487][ T9375] lo speed is unknown, defaulting to 1000 [ 160.677513][ T9375] lo speed is unknown, defaulting to 1000 [ 161.049705][ T9391] erspan0: entered promiscuous mode [ 161.059343][ T9391] gretap0: entered promiscuous mode [ 161.073133][ T9382] gretap0: entered promiscuous mode [ 161.097936][ T9383] 0ªî{X¹¦: renamed from gretap0 [ 161.116492][ T9383] 0ªî{X¹¦: left promiscuous mode [ 161.134049][ T9383] 0ªî{X¹¦: entered allmulticast mode [ 161.164557][ T9383] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 161.194722][ T9375] infiniband syz0: set down [ 161.199433][ T9375] infiniband syz0: added lo [ 161.220838][ T7961] lo speed is unknown, defaulting to 1000 [ 161.257429][ T9375] syz0: rxe_create_cq: returned err = -12 [ 161.271980][ T9375] infiniband syz0: Couldn't create ib_mad CQ [ 161.278172][ T9375] infiniband syz0: Couldn't open port 1 [ 161.289751][ T9398] C: renamed from lo (while UP) [ 161.392802][ T9375] RDS/IB: syz0: added [ 161.397262][ T9375] smc: adding ib device syz0 with port count 1 [ 161.429269][ T9375] smc: ib device syz0 port 1 has pnetid [ 161.439130][ T7961] lo speed is unknown, defaulting to 1000 [ 161.469193][ T9375] lo speed is unknown, defaulting to 1000 [ 162.039101][ T9424] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 162.336549][ T9375] lo speed is unknown, defaulting to 1000 [ 162.504600][ T9436] netlink: 'syz.3.930': attribute type 13 has an invalid length. [ 162.549727][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.560986][ T9436] netlink: 'syz.3.930': attribute type 13 has an invalid length. [ 162.578976][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.599394][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.636785][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.777483][ T9375] lo speed is unknown, defaulting to 1000 [ 162.781603][ T9440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.887496][ T9446] team0: Cannot enslave team device to itself [ 163.295679][ T9461] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 163.397245][ T9464] __nla_validate_parse: 16 callbacks suppressed [ 163.397268][ T9464] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.944'. [ 163.420247][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.943'. [ 163.436425][ T9375] lo speed is unknown, defaulting to 1000 [ 163.460867][ T9467] netlink: 256 bytes leftover after parsing attributes in process `syz.3.942'. [ 163.733171][ T9480] netlink: 'syz.4.946': attribute type 10 has an invalid length. [ 163.741263][ T9479] netlink: 'syz.4.946': attribute type 10 has an invalid length. [ 164.057365][ T9499] netlink: 'syz.2.952': attribute type 7 has an invalid length. [ 164.137095][ T9500] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 164.301926][ T9375] lo speed is unknown, defaulting to 1000 [ 164.579556][ T9520] bridge0: port 1(veth0_to_bridge) entered blocking state [ 164.590856][ T9520] bridge0: port 1(veth0_to_bridge) entered disabled state [ 164.610299][ T9520] veth0_to_bridge: entered allmulticast mode [ 164.619697][ T9520] veth0_to_bridge: entered promiscuous mode [ 164.631193][ T9520] bridge0: port 1(veth0_to_bridge) entered blocking state [ 164.638398][ T9520] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 164.660077][ T9527] tipc: Started in network mode [ 164.669356][ T9527] tipc: Node identity eaed4097c3ad, cluster identity 4711 [ 164.689698][ T9527] tipc: Enabled bearer , priority 0 [ 164.707080][ T9523] syzkaller0: entered promiscuous mode [ 164.743135][ T9523] syzkaller0: entered allmulticast mode [ 164.815443][ T9523] tipc: Resetting bearer [ 164.884209][ T9523] tipc: Disabling bearer [ 165.002550][ T9535] openvswitch: netlink: IPv4 tunnel dst address is zero [ 165.093478][ T9538] netlink: 'syz.3.963': attribute type 1 has an invalid length. [ 165.115449][ T9538] netlink: 'syz.3.963': attribute type 10 has an invalid length. [ 165.137861][ T9538] netlink: 236 bytes leftover after parsing attributes in process `syz.3.963'. [ 165.414820][ T9547] netlink: 256 bytes leftover after parsing attributes in process `syz.4.965'. [ 165.431605][ T9547] netlink: 'syz.4.965': attribute type 13 has an invalid length. [ 165.439611][ T9547] lo: entered promiscuous mode [ 165.448484][ T9547] lo: entered allmulticast mode [ 165.473554][ T9547] tunl0: entered promiscuous mode [ 165.489131][ T9547] tunl0: entered allmulticast mode [ 165.532634][ T9547] gre0: entered promiscuous mode [ 165.537667][ T9547] gre0: entered allmulticast mode [ 165.571048][ T9547] gretap0: entered promiscuous mode [ 165.583877][ T9547] gretap0: entered allmulticast mode [ 165.620157][ T9547] gretap0: refused to change device tx_queue_len [ 165.630745][ T9547] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.927793][ T9571] netlink: 44 bytes leftover after parsing attributes in process `syz.0.975'. [ 165.972871][ T9575] pim6reg: entered allmulticast mode [ 165.992701][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 166.147140][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 166.160260][ T9585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.980'. [ 166.202730][ T9583] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 166.210531][ T9583] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 166.232271][ T9583] netlink: 51 bytes leftover after parsing attributes in process `syz.4.979'. [ 166.508754][ T9602] netlink: 'syz.2.985': attribute type 28 has an invalid length. [ 166.518504][ T9602] netlink: 'syz.2.985': attribute type 3 has an invalid length. [ 166.684040][ T9608] block nbd0: Unsupported socket: shutdown callout must be supported. [ 166.956996][ T9625] tipc: Enabled bearer , priority 0 [ 166.994402][ T9625] syzkaller0: entered promiscuous mode [ 167.004280][ T9625] syzkaller0: entered allmulticast mode [ 167.149146][ T9625] tipc: Resetting bearer [ 167.188097][ T9625] tipc: Disabling bearer [ 167.254758][ T9648] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 168.201451][ T9654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.228828][ T9654] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 168.266152][ T9654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.288265][ T9654] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 168.433154][ T9654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.439124][ T9654] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 168.513046][ T30] audit: type=1107 audit(1755123791.276:2): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='.Ž. y߈YÙå' [ 168.559377][ T9654] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.580541][ T9654] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 168.661434][ T9654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.682593][ T9721] lo speed is unknown, defaulting to 1000 [ 168.692146][ T9654] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 168.714039][ T9727] Bluetooth: MGMT ver 1.23 [ 169.575786][ T9751] __nla_validate_parse: 6 callbacks suppressed [ 169.575805][ T9751] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1024'. [ 169.752265][ T9758] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 170.083910][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 170.152910][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 170.205734][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 170.261123][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 170.520082][ T9798] netlink: 'syz.4.1034': attribute type 18 has an invalid length. [ 170.567643][ T9800] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1035'. [ 170.816972][ T9815] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 170.898736][ T9815] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 171.075376][ T9825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1041'. [ 171.174909][ T9834] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1045'. [ 171.374244][ T9852] syz.3.1049: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 171.410311][ T9852] CPU: 0 UID: 0 PID: 9852 Comm: syz.3.1049 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) [ 171.410339][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.410358][ T9852] Call Trace: [ 171.410367][ T9852] [ 171.410376][ T9852] dump_stack_lvl+0x189/0x250 [ 171.410410][ T9852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.410436][ T9852] ? __pfx__printk+0x10/0x10 [ 171.410466][ T9852] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.410492][ T9852] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.410518][ T9852] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 171.410550][ T9852] warn_alloc+0x214/0x310 [ 171.410583][ T9852] ? stack_depot_save_flags+0x40/0x860 [ 171.410610][ T9852] ? __pfx_warn_alloc+0x10/0x10 [ 171.410642][ T9852] ? kasan_save_track+0x4f/0x80 [ 171.410667][ T9852] ? xskq_create+0x56/0x170 [ 171.410706][ T9852] ? xsk_init_queue+0xb0/0x110 [ 171.410725][ T9852] ? xsk_setsockopt+0x4dc/0x8d0 [ 171.410742][ T9852] ? do_sock_setsockopt+0x179/0x1b0 [ 171.410770][ T9852] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 171.410795][ T9852] ? do_syscall_64+0xfa/0x3b0 [ 171.410819][ T9852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.410846][ T9852] __vmalloc_node_range_noprof+0x125/0x12f0 [ 171.410905][ T9852] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 171.410941][ T9852] ? __kasan_kmalloc+0x93/0xb0 [ 171.410969][ T9852] vmalloc_user_noprof+0xad/0xf0 [ 171.410998][ T9852] ? xskq_create+0xbf/0x170 [ 171.411020][ T9852] xskq_create+0xbf/0x170 [ 171.411062][ T9852] xsk_init_queue+0xb0/0x110 [ 171.411086][ T9852] xsk_setsockopt+0x4dc/0x8d0 [ 171.411110][ T9852] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.411131][ T9852] ? __pfx_aa_sk_perm+0x10/0x10 [ 171.411161][ T9852] ? aa_sock_opt_perm+0xff/0x1b0 [ 171.411193][ T9852] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 171.411215][ T9852] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.411238][ T9852] do_sock_setsockopt+0x179/0x1b0 [ 171.411282][ T9852] __x64_sys_setsockopt+0x13f/0x1b0 [ 171.411332][ T9852] do_syscall_64+0xfa/0x3b0 [ 171.411357][ T9852] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.411382][ T9852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.411402][ T9852] ? clear_bhb_loop+0x60/0xb0 [ 171.411427][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.411448][ T9852] RIP: 0033:0x7ffb9518ebe9 [ 171.411476][ T9852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.411493][ T9852] RSP: 002b:00007ffb960ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.411512][ T9852] RAX: ffffffffffffffda RBX: 00007ffb953b5fa0 RCX: 00007ffb9518ebe9 [ 171.411526][ T9852] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 171.411538][ T9852] RBP: 00007ffb95211e19 R08: 0000000000000004 R09: 0000000000000000 [ 171.411549][ T9852] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.411561][ T9852] R13: 00007ffb953b6038 R14: 00007ffb953b5fa0 R15: 00007ffed38f6378 [ 171.411593][ T9852] [ 171.730812][ T9852] Mem-Info: [ 171.734061][ T9852] active_anon:4566 inactive_anon:0 isolated_anon:0 [ 171.734061][ T9852] active_file:1464 inactive_file:39864 isolated_file:0 [ 171.734061][ T9852] unevictable:768 dirty:114 writeback:25 [ 171.734061][ T9852] slab_reclaimable:11135 slab_unreclaimable:119533 [ 171.734061][ T9852] mapped:29272 shmem:1367 pagetables:1038 [ 171.734061][ T9852] sec_pagetables:0 bounce:0 [ 171.734061][ T9852] kernel_misc_reclaimable:0 [ 171.734061][ T9852] free:1311132 free_pcp:14888 free_cma:0 [ 171.815478][ T9859] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 171.847143][ T9852] Node 0 active_anon:18532kB inactive_anon:0kB active_file:5852kB inactive_file:159260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117156kB dirty:92kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12972kB pagetables:3956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.916575][ T9852] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.959065][ T9852] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.985317][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 171.989834][ T9852] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 172.080744][ T9852] Node 0 DMA32 free:1338496kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18288kB inactive_anon:0kB active_file:5852kB inactive_file:157688kB unevictable:1536kB writepending:92kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:40892kB local_pcp:20692kB free_cma:0kB [ 172.116281][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 172.118785][ T9852] lowmem_reserve[]: 0 0 1 1 1 [ 172.138320][ T9852] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 172.204132][ T9852] lowmem_reserve[]: 0 0 0 0 0 [ 172.214499][ T9852] Node 1 Normal free:3891436kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18208kB local_pcp:9952kB free_cma:0kB [ 172.277774][ T9880] nftables ruleset with unbound set [ 172.317268][ T9852] lowmem_reserve[]: 0 0 0 0 0 [ 172.322871][ T9852] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.336537][ T9852] Node 0 DMA32: 903*4kB (UME) 455*8kB (UME) 161*16kB (UM) 279*32kB (UME) 36*64kB (UME) 19*128kB (UME) 3*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 318*4096kB (M) = 1334980kB [ 172.359152][ T9852] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 172.374317][ T9852] Node 1 Normal: 205*4kB (UME) 53*8kB (UME) 49*16kB (UME) 114*32kB (UME) 27*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3891436kB [ 172.482294][ T9852] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.496023][ T9852] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.505713][ T9852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.534242][ T9894] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 172.546813][ T9852] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.559664][ T9852] 42693 total pagecache pages [ 172.564665][ T9852] 0 pages in swap cache [ 172.568943][ T9852] Free swap = 124996kB [ 172.577036][ T9852] Total swap = 124996kB [ 172.581513][ T9852] 2097051 pages RAM [ 172.585867][ T9852] 0 pages HighMem/MovableOnly [ 172.634254][ T9852] 425645 pages reserved [ 172.638458][ T9852] 0 pages cma reserved [ 172.673863][ T9901] openvswitch: netlink: Multiple metadata blocks provided [ 172.971678][ T9925] netlink: 'syz.0.1072': attribute type 10 has an invalid length. [ 173.144224][ T9925] syz_tun: entered promiscuous mode [ 173.225649][ T9925] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 173.505709][ T9963] veth0: entered promiscuous mode [ 173.569914][ T9968] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 173.923984][ T9987] veth1: entered allmulticast mode [ 194.225178][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.505997][T10021] __nla_validate_parse: 3 callbacks suppressed [ 196.506015][T10021] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1099'. [ 196.584412][T10029] sctp: [Deprecated]: syz.0.1100 (pid 10029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.584412][T10029] Use struct sctp_sack_info instead [ 196.863335][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1106'. [ 196.977320][T10045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.997274][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1103'. [ 197.059539][T10048] vxcan1 speed is unknown, defaulting to 1000 [ 197.073066][T10048] vxcan1 speed is unknown, defaulting to 1000 [ 197.082132][T10048] vxcan1 speed is unknown, defaulting to 1000 [ 197.125520][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 197.410017][T10048] infiniband syz2: set active [ 197.416526][ T7955] vxcan1 speed is unknown, defaulting to 1000 [ 197.427998][T10048] infiniband syz2: added vxcan1 [ 197.428060][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 197.474401][T10048] RDS/IB: syz2: added [ 197.479189][T10048] smc: adding ib device syz2 with port count 1 [ 197.486579][T10048] smc: ib device syz2 port 1 has pnetid [ 197.504109][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 197.514246][T10060] netlink: 'syz.2.1111': attribute type 3 has an invalid length. [ 197.522439][ T7959] vxcan1 speed is unknown, defaulting to 1000 [ 197.529328][T10048] vxcan1 speed is unknown, defaulting to 1000 [ 197.786087][T10076] IPVS: length: 8 != 187415912 [ 197.861425][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1114'. [ 197.945215][T10088] tap0: tun_chr_ioctl cmd 1074025672 [ 197.960805][T10088] tap0: ignored: set checksum disabled [ 197.967077][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 197.999544][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'. [ 198.057537][T10048] vxcan1 speed is unknown, defaulting to 1000 [ 198.368595][T10102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1125'. [ 198.458258][T10048] vxcan1 speed is unknown, defaulting to 1000 [ 198.747348][T10048] vxcan1 speed is unknown, defaulting to 1000 [ 198.985985][T10116] bond3: entered promiscuous mode [ 198.995374][T10116] bond3: entered allmulticast mode [ 199.003020][T10116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.010399][T10118] tipc: Enabling of bearer rejected, media not registered [ 199.041659][T10118] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.171101][T10125] bond0: entered promiscuous mode [ 199.187943][T10125] bond_slave_0: entered promiscuous mode [ 199.209792][T10125] batadv0: entered promiscuous mode [ 199.223900][T10125] debugfs: 'hsr1' already exists in 'hsr' [ 199.230045][T10125] Cannot create hsr debugfs directory [ 199.239034][T10125] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 199.253387][T10125] hsr1: entered allmulticast mode [ 199.258440][T10125] bond0: entered allmulticast mode [ 199.277070][T10125] bond_slave_0: entered allmulticast mode [ 199.296205][T10125] batadv0: entered allmulticast mode [ 199.303988][T10125] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 199.312563][T10125] bond0: left promiscuous mode [ 199.317740][T10125] bond_slave_0: left promiscuous mode [ 199.327207][T10125] batadv0: left promiscuous mode [ 199.379932][T10048] vxcan1 speed is unknown, defaulting to 1000 [ 199.571530][T10141] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 199.799459][T10150] lo speed is unknown, defaulting to 1000 [ 200.014949][T10165] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 200.210821][T10048] vxcan1 speed is unknown, defaulting to 1000 [ 200.558449][T10182] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.475087][T10236] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 201.513682][T10240] __nla_validate_parse: 6 callbacks suppressed [ 201.513700][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 201.550291][T10240] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1165'. [ 201.660756][T10244] netlink: 'syz.3.1166': attribute type 8 has an invalid length. [ 202.037464][T10250] bond0: (slave bond_slave_0): Releasing backup interface [ 202.066923][T10250] bond0: (slave bond_slave_1): Releasing backup interface [ 202.135385][T10250] team0: Port device team_slave_0 removed [ 202.175407][T10250] team0: Port device team_slave_1 removed [ 202.186577][T10250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.196543][T10250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.209295][T10250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.218822][T10250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.246099][T10250] bond0: (slave wlan1): Releasing backup interface [ 202.468898][T10277] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1177'. [ 202.476539][T10274] tipc: New replicast peer: 255.255.255.255 [ 202.510241][T10274] tipc: Enabled bearer , priority 10 [ 202.521205][T10278] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1175'. [ 202.629833][T10285] netlink: 'syz.2.1179': attribute type 10 has an invalid length. [ 202.708122][T10285] team0: Device veth1_macvtap failed to register rx_handler [ 202.908212][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 202.940283][T10293] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1183'. [ 202.960014][T10293] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1183'. [ 202.987209][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 202.997087][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 203.156055][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 203.501677][T10332] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 203.535851][T10332] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 203.612971][T10335] netlink: 'syz.1.1193': attribute type 13 has an invalid length. [ 203.650137][ T7685] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.663426][T10335] netlink: 'syz.1.1193': attribute type 13 has an invalid length. [ 203.689176][ T7685] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.699694][ T7685] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.724355][ T7685] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.740319][T10343] tipc: Enabled bearer , priority 0 [ 203.748470][T10340] syzkaller0: entered promiscuous mode [ 203.765021][T10340] syzkaller0: entered allmulticast mode [ 203.821653][T10340] tipc: Resetting bearer [ 203.871495][T10340] tipc: Disabling bearer [ 204.051132][T10367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.123416][T10362] syzkaller0: entered promiscuous mode [ 204.156105][T10362] syzkaller0: entered allmulticast mode [ 204.290042][T10379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.785861][T10403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.036613][T10406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.046064][T10406] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 205.069773][T10406] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 205.173402][T10425] vlan2: entered allmulticast mode [ 205.178562][T10425] bridge0: entered allmulticast mode [ 205.194365][T10425] bridge4: port 1(vlan2) entered blocking state [ 205.203978][T10425] bridge4: port 1(vlan2) entered disabled state [ 205.222385][T10425] vlan2: entered promiscuous mode [ 205.268310][T10425] bridge0: entered promiscuous mode [ 205.341306][T10421] gretap1: entered promiscuous mode [ 205.348769][T10421] bridge4: port 2(gretap1) entered blocking state [ 205.356805][T10421] bridge4: port 2(gretap1) entered disabled state [ 205.368445][T10421] gretap1: entered allmulticast mode [ 205.539231][T10437] wg1: entered promiscuous mode [ 205.564339][T10437] wg1: entered allmulticast mode [ 205.807416][T10451] netlink: 'syz.1.1224': attribute type 10 has an invalid length. [ 205.841478][T10451] team0: Device veth1_macvtap failed to register rx_handler [ 206.162242][T10463] bond2 (unregistering): Released all slaves [ 206.201054][T10469] netlink: 'syz.3.1229': attribute type 4 has an invalid length. [ 206.584819][T10483] __nla_validate_parse: 16 callbacks suppressed [ 206.584837][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 206.746612][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 206.788509][T10506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.963790][T10515] block nbd0: Unsupported socket: shutdown callout must be supported. [ 207.091388][T10525] netlink: 'syz.4.1248': attribute type 1 has an invalid length. [ 207.112008][T10523] netlink: 'syz.4.1248': attribute type 1 has an invalid length. [ 207.152203][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'. [ 207.161427][T10528] tc_dump_action: action bad kind [ 207.191038][T10530] geneve3: entered promiscuous mode [ 207.244617][T10533] openvswitch: netlink: Flow actions attr not present in new flow. [ 207.631580][T10555] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1258'. [ 207.838980][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 207.919098][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 208.259178][T10588] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 208.288676][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 208.335830][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 208.568442][T10598] 8021q: VLANs not supported on vxcan1 [ 208.604102][T10598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.634291][T10598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.870139][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 208.960034][T10628] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1278'. [ 209.027698][T10632] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 209.339880][T10648] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.531614][T10654] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 209.566126][T10654] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 209.616230][T10654] gretap1: entered promiscuous mode [ 209.633627][T10654] gretap1: entered allmulticast mode [ 210.557346][T10692] vlan3: entered promiscuous mode [ 210.562555][T10692] bridge0: entered promiscuous mode [ 212.989631][T10700] __nla_validate_parse: 6 callbacks suppressed [ 212.989650][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1302'. [ 213.176856][T10727] pim6reg: entered allmulticast mode [ 213.856439][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 213.876119][T10765] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1321'. [ 214.028963][T10775] netlink: 'syz.1.1324': attribute type 13 has an invalid length. [ 214.303082][T10789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1327'. [ 214.434137][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 214.456039][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'. [ 214.884447][T10808] 8021q: VLANs not supported on vxcan1 [ 215.407012][T10832] bond2: entered promiscuous mode [ 215.412164][T10832] bond2: entered allmulticast mode [ 215.417694][T10832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.631200][T10845] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 216.406366][T10869] infiniband syz1: set active [ 216.411407][T10869] infiniband syz1: added bond0 [ 216.468202][T10869] RDS/IB: syz1: added [ 216.472429][T10869] smc: adding ib device syz1 with port count 1 [ 216.478756][T10869] smc: ib device syz1 port 1 has pnetid [ 216.718669][T10724] Set syz1 is full, maxelem 65536 reached [ 216.766820][T10895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.047608][T10902] syzkaller0: entered promiscuous mode [ 217.057499][T10902] syzkaller0: entered allmulticast mode [ 218.389625][T10934] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1369'. [ 218.578170][T10940] netlink: 'syz.0.1373': attribute type 1 has an invalid length. [ 218.925543][T10952] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1374'. [ 219.159014][T10967] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1378'. [ 219.375364][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 219.535477][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 219.559127][T10976] lo speed is unknown, defaulting to 1000 [ 219.568125][T10970] netlink: 'syz.2.1380': attribute type 2 has an invalid length. [ 219.590641][T10970] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.1380'. [ 219.618913][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 219.628879][T10978] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 219.650951][T10978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.703010][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 219.801910][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1383'. [ 219.834395][T10983] geneve2: entered promiscuous mode [ 219.846277][T10983] geneve2: entered allmulticast mode [ 219.894707][T10989] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 219.931309][T10989] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 219.941505][T10992] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 220.008502][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 220.266625][T11003] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20001 [ 220.404504][T10976] vxcan1 speed is unknown, defaulting to 1000 [ 220.669404][T11019] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.983708][T11031] lo: left promiscuous mode [ 220.998384][T11031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.311886][T11043] netlink: 'syz.4.1402': attribute type 5 has an invalid length. [ 221.430992][T11044] vcan0: entered allmulticast mode [ 221.542653][T11050] netlink: 'syz.4.1403': attribute type 10 has an invalid length. [ 221.565370][T11050] netlink: 'syz.4.1403': attribute type 10 has an invalid length. [ 223.214686][T11112] netlink: 'syz.1.1420': attribute type 4 has an invalid length. [ 223.515211][T11127] __nla_validate_parse: 9 callbacks suppressed [ 223.515245][T11127] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1423'. [ 223.706305][T11149] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 223.878041][T11160] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1432'. [ 223.880000][T11162] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1431'. [ 223.897291][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1431'. [ 223.974676][T11169] syzkaller0: entered promiscuous mode [ 223.980363][T11169] syzkaller0: entered allmulticast mode [ 223.993647][T11160] openvswitch: netlink: Missing valid actions attribute. [ 224.002268][T11160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.480266][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 224.499495][T11205] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 224.520015][T11203] bond0: (slave dummy0): Releasing backup interface [ 224.553391][T11203] bridge_slave_0: left allmulticast mode [ 224.561889][T11203] bridge_slave_0: left promiscuous mode [ 224.589433][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.670123][T11215] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.682928][T11203] bridge_slave_1: left allmulticast mode [ 224.688593][T11203] bridge_slave_1: left promiscuous mode [ 224.708121][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.722306][T11203] bond0: (slave bond_slave_0): Releasing backup interface [ 224.734804][T11203] bond0: (slave bond_slave_1): Releasing backup interface [ 224.799697][T11203] team0: Port device team_slave_0 removed [ 224.817687][T11228] sctp: [Deprecated]: syz.2.1448 (pid 11228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.817687][T11228] Use struct sctp_sack_info instead [ 224.818683][T11203] team0: Port device team_slave_1 removed [ 224.870070][T11203] bond3: (slave bond4): Releasing backup interface [ 224.882122][T11203] bond4: left promiscuous mode [ 224.961438][T11211] team0: Mode changed to "activebackup" [ 225.029641][T11215] vlan0: entered promiscuous mode [ 225.061944][T11215] team0: Port device vlan0 added [ 225.070344][T11224] syzkaller0: entered promiscuous mode [ 225.114167][T11224] syzkaller0: entered allmulticast mode [ 225.209349][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1452'. [ 225.339741][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 225.393981][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 225.706022][T11268] wg1: entered promiscuous mode [ 225.763369][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 225.941701][T11281] pim6reg1: entered promiscuous mode [ 225.958793][T11281] pim6reg1: entered allmulticast mode [ 226.868666][T11342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1483'. [ 226.887014][T11350] tipc: Enabled bearer , priority 0 [ 226.903644][T11350] syzkaller0: entered promiscuous mode [ 226.929809][T11350] syzkaller0: entered allmulticast mode [ 227.065883][T11350] tipc: Resetting bearer [ 227.123772][T11348] tipc: Resetting bearer [ 227.163481][T11348] tipc: Disabling bearer [ 227.174315][T11369] netlink: 'syz.1.1489': attribute type 1 has an invalid length. [ 227.189760][T11369] netlink: 'syz.1.1489': attribute type 3 has an invalid length. [ 227.764159][T11412] netlink: 'syz.3.1504': attribute type 1 has an invalid length. [ 227.959793][T11414] bond4 (unregistering): Released all slaves [ 227.982260][T11419] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 227.997202][T10004] udevd[10004]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 228.035961][T11412] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 228.064459][T11419] syz_tun: entered promiscuous mode [ 228.080254][T11419] syz_tun: entered allmulticast mode [ 228.125031][T11427] lo speed is unknown, defaulting to 1000 [ 228.137844][T11438] batadv_slave_0: entered allmulticast mode [ 228.200041][T11442] IPVS: ip_vs_edit_dest(): server weight less than zero [ 228.550390][T11427] vxcan1 speed is unknown, defaulting to 1000 [ 228.597527][T11461] __nla_validate_parse: 9 callbacks suppressed [ 228.597544][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1516'. [ 228.777247][T11466] sctp: [Deprecated]: syz.3.1517 (pid 11466) Use of int in maxseg socket option. [ 228.777247][T11466] Use struct sctp_assoc_value instead [ 228.812026][T11466] netlink: 'syz.3.1517': attribute type 11 has an invalid length. [ 228.825935][T11466] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1517'. [ 228.875721][T11469] openvswitch: netlink: Multiple metadata blocks provided [ 229.265063][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 229.275968][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 229.288727][T11491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'. [ 229.313961][T11491] netlink: 'syz.1.1529': attribute type 10 has an invalid length. [ 229.357786][T11491] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 229.587307][T11507] netlink: 'syz.2.1533': attribute type 3 has an invalid length. [ 229.610416][T11507] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1533'. [ 229.649520][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 229.702407][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 229.718074][T11513] netlink: 'syz.0.1535': attribute type 22 has an invalid length. [ 229.730303][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 229.840358][T11513] netlink: 'syz.0.1535': attribute type 22 has an invalid length. [ 229.852390][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 230.364216][T11537] netlink: 'syz.1.1542': attribute type 11 has an invalid length. [ 230.570078][T11546] netlink: 'syz.0.1545': attribute type 1 has an invalid length. [ 230.654589][T11544] veth0: entered promiscuous mode [ 230.801638][T11558] nbd: must specify at least one socket [ 230.813580][T11558] openvswitch: netlink: Key type 29 is not supported [ 230.889253][T11550] bond0 (unregistering): Released all slaves [ 230.948393][T11542] veth0: left promiscuous mode [ 231.537254][T11595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.903910][T11627] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 232.015807][T11633] pimreg: entered allmulticast mode [ 232.173256][T11644] syzkaller1: entered promiscuous mode [ 232.178966][T11644] syzkaller1: entered allmulticast mode [ 232.196895][T11646] IPv6: sit1: Disabled Multicast RS [ 232.356838][T11657] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 232.367294][T11657] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 232.452632][T11661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.867447][T11691] netem: unknown loss type 0 [ 232.876658][T11691] netem: change failed [ 232.885510][T11692] validate_nla: 7 callbacks suppressed [ 232.885524][T11692] netlink: 'syz.2.1590': attribute type 10 has an invalid length. [ 232.901904][T11691] netlink: 'syz.2.1590': attribute type 10 has an invalid length. [ 232.962119][T11694] sctp: [Deprecated]: syz.1.1591 (pid 11694) Use of int in maxseg socket option. [ 232.962119][T11694] Use struct sctp_assoc_value instead [ 233.288694][T11713] unknown channel width for channel at 909000KHz? [ 233.557695][T11731] openvswitch: netlink: Unknown nsh attribute 0 [ 233.575281][T11731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.756767][T11744] __nla_validate_parse: 21 callbacks suppressed [ 233.756788][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 233.787295][T11749] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 233.814180][T11744] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 233.829851][T11744] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 233.843376][T11749] netlink: 'syz.0.1605': attribute type 1 has an invalid length. [ 233.858285][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'. [ 234.002827][T11759] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 234.026122][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 234.038062][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 234.062501][T11705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.134066][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1610'. [ 234.157658][T11767] bond0: (slave syz_tun): Releasing backup interface [ 234.421369][T11780] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1615'. [ 234.731950][T11806] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1623'. [ 234.929624][T11823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.132851][T11835] netlink: 'syz.1.1631': attribute type 3 has an invalid length. [ 235.147749][T11835] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1631'. [ 235.429368][T11858] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1639'. [ 235.585648][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1642'. [ 235.777289][T11877] nbd: must specify a size in bytes for the device [ 235.895446][T11887] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.942752][T11893] netlink: 'syz.1.1648': attribute type 12 has an invalid length. [ 235.973713][T11893] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 236.119351][T11905] can: request_module (can-proto-0) failed. [ 236.147256][T11912] dvmrp1: entered allmulticast mode [ 236.365769][T11925] netlink: 'syz.0.1657': attribute type 3 has an invalid length. [ 236.613385][T11940] netlink: 'syz.0.1662': attribute type 10 has an invalid length. [ 236.625667][T11940] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 236.637662][T11940] macvlan0: entered promiscuous mode [ 236.643082][T11940] macvlan0: entered allmulticast mode [ 237.124512][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888032abb800: rx timeout, send abort [ 237.625636][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880585dc000: rx timeout, send abort [ 237.634193][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888032abb800: abort rx timeout. Force session deactivation [ 237.857950][T11971] veth0: entered promiscuous mode [ 237.896237][T11970] veth0: left promiscuous mode [ 238.134119][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880585dc000: abort rx timeout. Force session deactivation [ 255.663979][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.103383][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.543759][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.380755][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 382.388352][ T31] Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 [ 382.396060][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.404866][ T31] task:kworker/1:1 state:D stack:22728 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 382.417109][ T31] Workqueue: events rfkill_sync_work [ 382.422742][ T31] Call Trace: [ 382.426041][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 382.428985][ T31] __schedule+0x1798/0x4cc0 [ 382.433939][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 382.439699][ T31] ? __pfx___schedule+0x10/0x10 [ 382.445311][ T31] ? schedule+0x91/0x360 [ 382.449640][ T31] schedule+0x165/0x360 [ 382.454600][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.460099][ T31] __mutex_lock+0x7e6/0x1360 [ 382.483881][ T31] ? __mutex_lock+0x5b6/0x1360 [ 382.488722][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 382.525893][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 382.535144][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.540404][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 382.547094][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.554306][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 382.560071][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 382.565324][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 382.571112][ T31] rfkill_set_block+0x1cf/0x440 [ 382.575964][ T31] rfkill_sync_work+0x114/0x200 [ 382.581198][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 382.586936][ T31] process_scheduled_works+0xade/0x17b0 [ 382.592558][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 382.598566][ T31] worker_thread+0x8a0/0xda0 [ 382.603385][ T31] kthread+0x70e/0x8a0 [ 382.607510][ T31] ? __pfx_worker_thread+0x10/0x10 [ 382.613006][ T31] ? __pfx_kthread+0x10/0x10 [ 382.617625][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.623252][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.628473][ T31] ? __pfx_kthread+0x10/0x10 [ 382.633176][ T31] ret_from_fork+0x3fc/0x770 [ 382.637801][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 382.643226][ T31] ? __switch_to_asm+0x39/0x70 [ 382.648008][ T31] ? __switch_to_asm+0x33/0x70 [ 382.652832][ T31] ? __pfx_kthread+0x10/0x10 [ 382.657436][ T31] ret_from_fork_asm+0x1a/0x30 [ 382.662352][ T31] [ 382.665522][ T31] INFO: task kworker/1:6:5951 blocked for more than 143 seconds. [ 382.674771][ T31] Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 [ 382.682142][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.690843][ T31] task:kworker/1:6 state:D stack:22728 pid:5951 tgid:5951 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 382.703214][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 382.709914][ T31] Call Trace: [ 382.714961][ T31] [ 382.717926][ T31] __schedule+0x1798/0x4cc0 [ 382.722719][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 382.728146][ T31] ? __pfx___schedule+0x10/0x10 [ 382.733151][ T31] ? schedule+0x91/0x360 [ 382.737429][ T31] schedule+0x165/0x360 [ 382.741970][ T31] schedule_preempt_disabled+0x13/0x30 [ 382.747453][ T31] __mutex_lock+0x7e6/0x1360 [ 382.752111][ T31] ? __mutex_lock+0x5b6/0x1360 [ 382.756893][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 382.763186][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 382.768234][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 382.774285][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 382.780030][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 382.786275][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 382.792064][ T31] process_scheduled_works+0xade/0x17b0 [ 382.797655][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 382.804012][ T31] worker_thread+0x8a0/0xda0 [ 382.808639][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.815127][ T31] ? __kthread_parkme+0x7b/0x200 [ 382.820113][ T31] kthread+0x70e/0x8a0 [ 382.824561][ T31] ? __pfx_worker_thread+0x10/0x10 [ 382.829703][ T31] ? __pfx_kthread+0x10/0x10 [ 382.834654][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.839865][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.845127][ T31] ? __pfx_kthread+0x10/0x10 [ 382.849747][ T31] ret_from_fork+0x3fc/0x770 [ 382.854437][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 382.859579][ T31] ? __switch_to_asm+0x39/0x70 [ 382.864817][ T31] ? __switch_to_asm+0x33/0x70 [ 382.869597][ T31] ? __pfx_kthread+0x10/0x10 [ 382.874259][ T31] ret_from_fork_asm+0x1a/0x30 [ 382.879061][ T31] [ 382.882183][ T31] INFO: task syz.4.1617:11783 blocked for more than 143 seconds. [ 382.889906][ T31] Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 [ 382.901300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.910085][ T31] task:syz.4.1617 state:D stack:25096 pid:11783 tgid:11783 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 382.922678][ T31] Call Trace: [ 382.926000][ T31] [ 382.928929][ T31] __schedule+0x1798/0x4cc0 [ 382.933549][ T31] ? validate_chain+0x897/0x2140 [ 382.938533][ T31] ? __lock_acquire+0xab9/0xd20 [ 382.945179][ T31] ? __pfx___schedule+0x10/0x10 [ 382.950078][ T31] ? schedule+0x91/0x360 [ 382.955061][ T31] schedule+0x165/0x360 [ 382.959253][ T31] schedule_timeout+0x9a/0x270 [ 382.964238][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 382.969735][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.974999][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.980240][ T31] ? wait_for_completion+0x267/0x5d0 [ 382.985883][ T31] wait_for_completion+0x2bf/0x5d0 [ 382.991058][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 382.996713][ T31] ? __flush_work+0xd2/0xbc0 [ 383.001416][ T31] ? __flush_work+0xd2/0xbc0 [ 383.006025][ T31] __flush_work+0x9b9/0xbc0 [ 383.010835][ T31] ? __flush_work+0xd2/0xbc0 [ 383.015450][ T31] ? __pfx___flush_work+0x10/0x10 [ 383.020660][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 383.025975][ T31] ? __pfx___cancel_work+0x10/0x10 [ 383.031155][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 383.036815][ T31] __cancel_work_sync+0xbe/0x110 [ 383.042116][ T31] rfkill_unregister+0x92/0x220 [ 383.046997][ T31] nfc_unregister_device+0x96/0x2a0 [ 383.052347][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 383.058109][ T31] virtual_ncidev_close+0x56/0x90 [ 383.063550][ T31] __fput+0x44c/0xa70 [ 383.067590][ T31] task_work_run+0x1d4/0x260 [ 383.072578][ T31] ? __pfx_task_work_run+0x10/0x10 [ 383.077727][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 383.083242][ T31] exit_to_user_mode_loop+0xec/0x110 [ 383.088561][ T31] do_syscall_64+0x2bd/0x3b0 [ 383.093207][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.098427][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.104945][ T31] ? clear_bhb_loop+0x60/0xb0 [ 383.109651][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.115646][ T31] RIP: 0033:0x7f8de978ebe9 [ 383.120076][ T31] RSP: 002b:00007ffcb1c31588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 383.128541][ T31] RAX: 0000000000000000 RBX: 00000000000393da RCX: 00007f8de978ebe9 [ 383.136763][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 383.144823][ T31] RBP: 00007f8de99b7da0 R08: 0000000000000001 R09: 00000014b1c3187f [ 383.152842][ T31] R10: 0000001b32520000 R11: 0000000000000246 R12: 00007f8de99b5fac [ 383.161137][ T31] R13: 00007f8de99b5fa0 R14: ffffffffffffffff R15: 00007ffcb1c316a0 [ 383.169125][ T31] [ 383.172368][ T31] INFO: task syz.3.1647:11885 blocked for more than 144 seconds. [ 383.180095][ T31] Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 [ 383.190110][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.198908][ T31] task:syz.3.1647 state:D stack:26088 pid:11885 tgid:11884 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 383.211247][ T31] Call Trace: [ 383.214544][ T31] [ 383.217478][ T31] __schedule+0x1798/0x4cc0 [ 383.222049][ T31] ? __lock_acquire+0xab9/0xd20 [ 383.226921][ T31] ? __lock_acquire+0xab9/0xd20 [ 383.231856][ T31] ? __pfx___schedule+0x10/0x10 [ 383.236738][ T31] ? schedule+0x91/0x360 [ 383.241313][ T31] schedule+0x165/0x360 [ 383.245479][ T31] schedule_preempt_disabled+0x13/0x30 [ 383.251024][ T31] __mutex_lock+0x7e6/0x1360 [ 383.255643][ T31] ? __mutex_lock+0x5b6/0x1360 [ 383.260414][ T31] ? rfkill_register+0x37/0x8e0 [ 383.265480][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 383.270978][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 383.276375][ T31] ? device_initialize+0x24b/0x440 [ 383.281539][ T31] rfkill_register+0x37/0x8e0 [ 383.286236][ T31] nfc_register_device+0x14a/0x320 [ 383.291465][ T31] nci_register_device+0x87f/0x9d0 [ 383.296621][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 383.304900][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 383.310233][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 383.315984][ T31] virtual_ncidev_open+0x129/0x1a0 [ 383.321177][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 383.326828][ T31] misc_open+0x2bc/0x330 [ 383.331124][ T31] chrdev_open+0x4c9/0x5e0 [ 383.335600][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 383.341454][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 383.347819][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 383.352808][ T31] do_dentry_open+0x953/0x13f0 [ 383.357609][ T31] vfs_open+0x3b/0x340 [ 383.361753][ T31] ? path_openat+0x2ecd/0x3830 [ 383.366542][ T31] path_openat+0x2ee5/0x3830 [ 383.371470][ T31] ? arch_stack_walk+0xfc/0x150 [ 383.376370][ T31] ? stack_depot_save_flags+0x40/0x860 [ 383.382044][ T31] ? __pfx_path_openat+0x10/0x10 [ 383.387006][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.393355][ T31] do_filp_open+0x1fa/0x410 [ 383.397905][ T31] ? __lock_acquire+0xab9/0xd20 [ 383.403231][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 383.408294][ T31] ? _raw_spin_unlock+0x28/0x50 [ 383.414947][ T31] ? alloc_fd+0x64c/0x6c0 [ 383.419328][ T31] do_sys_openat2+0x121/0x1c0 [ 383.424118][ T31] ? __se_sys_futex+0x36f/0x400 [ 383.429024][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.434611][ T31] ? rcu_is_watching+0x15/0xb0 [ 383.439422][ T31] __x64_sys_openat+0x138/0x170 [ 383.444430][ T31] do_syscall_64+0xfa/0x3b0 [ 383.448969][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.454269][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.460358][ T31] ? clear_bhb_loop+0x60/0xb0 [ 383.465433][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.471394][ T31] RIP: 0033:0x7ffb9518ebe9 [ 383.475826][ T31] RSP: 002b:00007ffb960ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.484326][ T31] RAX: ffffffffffffffda RBX: 00007ffb953b5fa0 RCX: 00007ffb9518ebe9 [ 383.492750][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 383.500892][ T31] RBP: 00007ffb95211e19 R08: 0000000000000000 R09: 0000000000000000 [ 383.508901][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.516942][ T31] R13: 00007ffb953b6038 R14: 00007ffb953b5fa0 R15: 00007ffed38f6378 [ 383.526640][ T31] [ 383.529703][ T31] INFO: task syz.2.1651:11903 blocked for more than 144 seconds. [ 383.537519][ T31] Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 [ 383.545008][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.554006][ T31] task:syz.2.1651 state:D stack:28328 pid:11903 tgid:11899 ppid:5866 task_flags:0x400040 flags:0x00004004 [ 383.565995][ T31] Call Trace: [ 383.569280][ T31] [ 383.572277][ T31] __schedule+0x1798/0x4cc0 [ 383.576803][ T31] ? kasan_save_free_info+0x46/0x50 [ 383.582445][ T31] ? __lock_acquire+0xab9/0xd20 [ 383.587339][ T31] ? __lock_acquire+0xab9/0xd20 [ 383.592242][ T31] ? __pfx___schedule+0x10/0x10 [ 383.597120][ T31] ? schedule+0x91/0x360 [ 383.601500][ T31] schedule+0x165/0x360 [ 383.605673][ T31] schedule_preempt_disabled+0x13/0x30 [ 383.611679][ T31] __mutex_lock+0x7e6/0x1360 [ 383.616280][ T31] ? __mutex_lock+0x5b6/0x1360 [ 383.621209][ T31] ? misc_open+0x51/0x330 [ 383.625571][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 383.631793][ T31] misc_open+0x51/0x330 [ 383.635982][ T31] chrdev_open+0x4c9/0x5e0 [ 383.640434][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 383.645841][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 383.652271][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 383.657227][ T31] do_dentry_open+0x953/0x13f0 [ 383.664169][ T31] vfs_open+0x3b/0x340 [ 383.668301][ T31] ? path_openat+0x2ecd/0x3830 [ 383.673657][ T31] path_openat+0x2ee5/0x3830 [ 383.678281][ T31] ? arch_stack_walk+0xfc/0x150 [ 383.683579][ T31] ? stack_depot_save_flags+0x40/0x860 [ 383.689066][ T31] ? __pfx_path_openat+0x10/0x10 [ 383.694103][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.700355][ T31] do_filp_open+0x1fa/0x410 [ 383.704981][ T31] ? __lock_acquire+0xab9/0xd20 [ 383.709864][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 383.715350][ T31] ? _raw_spin_unlock+0x28/0x50 [ 383.720254][ T31] ? alloc_fd+0x64c/0x6c0 [ 383.724783][ T31] do_sys_openat2+0x121/0x1c0 [ 383.729490][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.734761][ T31] ? exc_page_fault+0x76/0xf0 [ 383.739466][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 383.745245][ T31] __x64_sys_openat+0x138/0x170 [ 383.750146][ T31] do_syscall_64+0xfa/0x3b0 [ 383.754958][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.760195][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.766338][ T31] ? clear_bhb_loop+0x60/0xb0 [ 383.771346][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.777264][ T31] RIP: 0033:0x7feacb78ebe9 [ 383.781796][ T31] RSP: 002b:00007feacc56e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.790229][ T31] RAX: ffffffffffffffda RBX: 00007feacb9b6180 RCX: 00007feacb78ebe9 [ 383.798261][ T31] RDX: 00000000000a2f01 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 383.806512][ T31] RBP: 00007feacb811e19 R08: 0000000000000000 R09: 0000000000000000 [ 383.814592][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.822770][ T31] R13: 00007feacb9b6218 R14: 00007feacb9b6180 R15: 00007ffd91205198 [ 383.831103][ T31] [ 383.834146][ T31] INFO: task syz.1.1660:11931 blocked for more than 144 seconds. [ 383.842088][ T31] Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 [ 383.849374][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.858105][ T31] task:syz.1.1660 state:D stack:28328 pid:11931 tgid:11930 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 383.870394][ T31] Call Trace: [ 383.873725][ T31] [ 383.876667][ T31] __schedule+0x1798/0x4cc0 [ 383.881247][ T31] ? kasan_save_free_info+0x46/0x50 [ 383.886499][ T31] ? __lock_acquire+0xab9/0xd20 [ 383.891694][ T31] ? __lock_acquire+0xab9/0xd20 [ 383.896594][ T31] ? __pfx___schedule+0x10/0x10 [ 383.901564][ T31] ? schedule+0x91/0x360 [ 383.905823][ T31] schedule+0x165/0x360 [ 383.909975][ T31] schedule_preempt_disabled+0x13/0x30 [ 383.915468][ T31] __mutex_lock+0x7e6/0x1360 [ 383.920099][ T31] ? __mutex_lock+0x5b6/0x1360 [ 383.925224][ T31] ? misc_open+0x51/0x330 [ 383.929565][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 383.934683][ T31] misc_open+0x51/0x330 [ 383.938875][ T31] chrdev_open+0x4c9/0x5e0 [ 383.943369][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 383.948350][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 383.955061][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 383.960020][ T31] do_dentry_open+0x953/0x13f0 [ 383.964862][ T31] vfs_open+0x3b/0x340 [ 383.968951][ T31] ? path_openat+0x2ecd/0x3830 [ 383.973919][ T31] path_openat+0x2ee5/0x3830 [ 383.978528][ T31] ? arch_stack_walk+0xfc/0x150 [ 383.987117][ T31] ? stack_depot_save_flags+0x40/0x860 [ 383.992632][ T31] ? __pfx_path_openat+0x10/0x10 [ 383.997591][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.003753][ T31] do_filp_open+0x1fa/0x410 [ 384.008279][ T31] ? __lock_acquire+0xab9/0xd20 [ 384.013482][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 384.018543][ T31] ? _raw_spin_unlock+0x28/0x50 [ 384.023497][ T31] ? alloc_fd+0x64c/0x6c0 [ 384.027862][ T31] do_sys_openat2+0x121/0x1c0 [ 384.032609][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.037826][ T31] ? exc_page_fault+0x76/0xf0 [ 384.042871][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 384.048196][ T31] __x64_sys_openat+0x138/0x170 [ 384.053143][ T31] do_syscall_64+0xfa/0x3b0 [ 384.057671][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.063087][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.069171][ T31] ? clear_bhb_loop+0x60/0xb0 [ 384.074199][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.080115][ T31] RIP: 0033:0x7fdef818ebe9 [ 384.084792][ T31] RSP: 002b:00007fdef90d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 384.093253][ T31] RAX: ffffffffffffffda RBX: 00007fdef83b5fa0 RCX: 00007fdef818ebe9 [ 384.101552][ T31] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 384.109533][ T31] RBP: 00007fdef8211e19 R08: 0000000000000000 R09: 0000000000000000 [ 384.117630][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.125699][ T31] R13: 00007fdef83b6038 R14: 00007fdef83b5fa0 R15: 00007ffcd4dd0c88 [ 384.134054][ T31] [ 384.137121][ T31] INFO: task syz.1.1660:11932 blocked for more than 145 seconds. [ 384.145048][ T31] Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 [ 384.152399][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.161463][ T31] task:syz.1.1660 state:D stack:27736 pid:11932 tgid:11930 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 384.173479][ T31] Call Trace: [ 384.176772][ T31] [ 384.179706][ T31] __schedule+0x1798/0x4cc0 [ 384.184291][ T31] ? kasan_save_free_info+0x46/0x50 [ 384.189528][ T31] ? __lock_acquire+0xab9/0xd20 [ 384.194876][ T31] ? __lock_acquire+0xab9/0xd20 [ 384.199832][ T31] ? __pfx___schedule+0x10/0x10 [ 384.204749][ T31] ? schedule+0x91/0x360 [ 384.209019][ T31] schedule+0x165/0x360 [ 384.213215][ T31] schedule_preempt_disabled+0x13/0x30 [ 384.218688][ T31] __mutex_lock+0x7e6/0x1360 [ 384.223608][ T31] ? __mutex_lock+0x5b6/0x1360 [ 384.228389][ T31] ? misc_open+0x51/0x330 [ 384.232752][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 384.237831][ T31] misc_open+0x51/0x330 [ 384.242063][ T31] chrdev_open+0x4c9/0x5e0 [ 384.246521][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 384.251823][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 384.258180][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 384.263187][ T31] do_dentry_open+0x953/0x13f0 [ 384.267971][ T31] vfs_open+0x3b/0x340 [ 384.272097][ T31] ? path_openat+0x2ecd/0x3830 [ 384.276897][ T31] path_openat+0x2ee5/0x3830 [ 384.281861][ T31] ? arch_stack_walk+0xfc/0x150 [ 384.286751][ T31] ? stack_depot_save_flags+0x40/0x860 [ 384.292310][ T31] ? __pfx_path_openat+0x10/0x10 [ 384.297298][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.303749][ T31] do_filp_open+0x1fa/0x410 [ 384.308274][ T31] ? __lock_acquire+0xab9/0xd20 [ 384.313506][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 384.318586][ T31] ? _raw_spin_unlock+0x28/0x50 [ 384.323485][ T31] ? alloc_fd+0x64c/0x6c0 [ 384.327847][ T31] do_sys_openat2+0x121/0x1c0 [ 384.332571][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.337802][ T31] ? exc_page_fault+0x76/0xf0 [ 384.342802][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 384.348110][ T31] __x64_sys_openat+0x138/0x170 [ 384.353045][ T31] do_syscall_64+0xfa/0x3b0 [ 384.357574][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.362839][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.368955][ T31] ? clear_bhb_loop+0x60/0xb0 [ 384.374002][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.379918][ T31] RIP: 0033:0x7fdef818ebe9 [ 384.384626][ T31] RSP: 002b:00007fdef90b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 384.393175][ T31] RAX: ffffffffffffffda RBX: 00007fdef83b6090 RCX: 00007fdef818ebe9 [ 384.401505][ T31] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 384.409486][ T31] RBP: 00007fdef8211e19 R08: 0000000000000000 R09: 0000000000000000 [ 384.417670][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.425713][ T31] R13: 00007fdef83b6128 R14: 00007fdef83b6090 R15: 00007ffcd4dd0c88 [ 384.433965][ T31] [ 384.436993][ T31] INFO: task syz.0.1673:11978 blocked for more than 145 seconds. [ 384.445106][ T31] Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 [ 384.452882][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.461744][ T31] task:syz.0.1673 state:D stack:28328 pid:11978 tgid:11977 ppid:5872 task_flags:0x400040 flags:0x00004004 [ 384.474294][ T31] Call Trace: [ 384.477724][ T31] [ 384.480720][ T31] __schedule+0x1798/0x4cc0 [ 384.485256][ T31] ? kasan_save_free_info+0x46/0x50 [ 384.490575][ T31] ? __lock_acquire+0xab9/0xd20 [ 384.495465][ T31] ? __lock_acquire+0xab9/0xd20 [ 384.500351][ T31] ? __pfx___schedule+0x10/0x10 [ 384.505620][ T31] ? schedule+0x91/0x360 [ 384.509877][ T31] schedule+0x165/0x360 [ 384.514086][ T31] schedule_preempt_disabled+0x13/0x30 [ 384.519563][ T31] __mutex_lock+0x7e6/0x1360 [ 384.524440][ T31] ? __mutex_lock+0x5b6/0x1360 [ 384.529228][ T31] ? misc_open+0x51/0x330 [ 384.533911][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 384.538975][ T31] misc_open+0x51/0x330 [ 384.543199][ T31] chrdev_open+0x4c9/0x5e0 [ 384.547665][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 384.552660][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 384.559035][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 384.564315][ T31] do_dentry_open+0x953/0x13f0 [ 384.569116][ T31] vfs_open+0x3b/0x340 [ 384.573341][ T31] ? path_openat+0x2ecd/0x3830 [ 384.578124][ T31] path_openat+0x2ee5/0x3830 [ 384.582777][ T31] ? arch_stack_walk+0xfc/0x150 [ 384.587660][ T31] ? stack_depot_save_flags+0x40/0x860 [ 384.593553][ T31] ? __pfx_path_openat+0x10/0x10 [ 384.598519][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.604676][ T31] do_filp_open+0x1fa/0x410 [ 384.609207][ T31] ? __lock_acquire+0xab9/0xd20 [ 384.614155][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 384.619260][ T31] ? _raw_spin_unlock+0x28/0x50 [ 384.624650][ T31] ? alloc_fd+0x64c/0x6c0 [ 384.629022][ T31] do_sys_openat2+0x121/0x1c0 [ 384.633922][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.639141][ T31] ? exc_page_fault+0x76/0xf0 [ 384.643858][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 384.649197][ T31] __x64_sys_openat+0x138/0x170 [ 384.654419][ T31] do_syscall_64+0xfa/0x3b0 [ 384.658938][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.664198][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.670289][ T31] ? clear_bhb_loop+0x60/0xb0 [ 384.675042][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.681322][ T31] RIP: 0033:0x7f3e2038ebe9 [ 384.685748][ T31] RSP: 002b:00007f3e21209038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 384.694265][ T31] RAX: ffffffffffffffda RBX: 00007f3e205b5fa0 RCX: 00007f3e2038ebe9 [ 384.702449][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 384.710432][ T31] RBP: 00007f3e20411e19 R08: 0000000000000000 R09: 0000000000000000 [ 384.718712][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.726755][ T31] R13: 00007f3e205b6038 R14: 00007f3e205b5fa0 R15: 00007fff623572b8 [ 384.734823][ T31] [ 384.737893][ T31] [ 384.737893][ T31] Showing all locks held in the system: [ 384.746078][ T31] 1 lock held by khungtaskd/31: [ 384.750992][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 384.761161][ T31] 4 locks held by kworker/1:1/43: [ 384.766190][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 384.777538][ T31] #1: ffffc90000b37bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 384.790024][ T31] #2: ffffffff8f80e428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 384.800108][ T31] #3: ffff888021e8d100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 384.810091][ T31] 2 locks held by getty/5627: [ 384.814831][ T31] #0: ffff88803356e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 384.824658][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 384.835106][ T31] 3 locks held by kworker/1:6/5951: [ 384.840305][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 384.851501][ T31] #1: ffffc900047d7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 384.865472][ T31] #2: ffffffff8f80e428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 384.876865][ T31] 1 lock held by syz.4.1617/11783: [ 384.882002][ T31] #0: ffff888021e8d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 384.892102][ T31] 3 locks held by syz.3.1647/11885: [ 384.897338][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 384.905874][ T31] #1: ffff88807b703100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 384.915542][ T31] #2: ffffffff8f80e428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 384.925782][ T31] 1 lock held by syz.2.1651/11903: [ 384.930954][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 384.939431][ T31] 1 lock held by syz.1.1660/11931: [ 384.944787][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 384.953615][ T31] 1 lock held by syz.1.1660/11932: [ 384.958720][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 384.967413][ T31] 1 lock held by syz.0.1673/11978: [ 384.972604][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 384.981457][ T31] 1 lock held by syz-executor/11984: [ 384.986751][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 384.995228][ T31] 1 lock held by syz-executor/11987: [ 385.000608][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.009051][ T31] 1 lock held by syz-executor/11988: [ 385.014709][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.023429][ T31] 1 lock held by syz-executor/11990: [ 385.028726][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.037489][ T31] 1 lock held by syz-executor/11992: [ 385.043120][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.051632][ T31] 1 lock held by syz-executor/11994: [ 385.056934][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.065447][ T31] 1 lock held by syz-executor/11997: [ 385.071212][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.079700][ T31] 1 lock held by syz-executor/11998: [ 385.085110][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.093654][ T31] 1 lock held by syz-executor/12000: [ 385.098972][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.107749][ T31] 1 lock held by syz-executor/12002: [ 385.113132][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.121636][ T31] 1 lock held by syz-executor/12004: [ 385.126925][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.135807][ T31] 1 lock held by syz-executor/12007: [ 385.141154][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.149650][ T31] 1 lock held by syz-executor/12008: [ 385.154969][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.163687][ T31] 1 lock held by syz-executor/12010: [ 385.168962][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.177476][ T31] 1 lock held by syz-executor/12012: [ 385.182911][ T31] #0: ffffffff8e9be128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 385.191959][ T31] [ 385.194298][ T31] ============================================= [ 385.194298][ T31] [ 385.203167][ T31] NMI backtrace for cpu 0 [ 385.203190][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) [ 385.203212][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.203225][ T31] Call Trace: [ 385.203232][ T31] [ 385.203239][ T31] dump_stack_lvl+0x189/0x250 [ 385.203277][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.203301][ T31] ? __pfx__printk+0x10/0x10 [ 385.203341][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 385.203364][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 385.203386][ T31] ? __pfx__printk+0x10/0x10 [ 385.203417][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 385.203450][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 385.203473][ T31] watchdog+0xf93/0xfe0 [ 385.203504][ T31] ? watchdog+0x1de/0xfe0 [ 385.203536][ T31] kthread+0x70e/0x8a0 [ 385.203563][ T31] ? __pfx_watchdog+0x10/0x10 [ 385.203590][ T31] ? __pfx_kthread+0x10/0x10 [ 385.203616][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.203639][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.203661][ T31] ? __pfx_kthread+0x10/0x10 [ 385.203687][ T31] ret_from_fork+0x3fc/0x770 [ 385.203711][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 385.203738][ T31] ? __switch_to_asm+0x39/0x70 [ 385.203762][ T31] ? __switch_to_asm+0x33/0x70 [ 385.203787][ T31] ? __pfx_kthread+0x10/0x10 [ 385.203813][ T31] ret_from_fork_asm+0x1a/0x30 [ 385.203854][ T31] [ 385.203862][ T31] Sending NMI from CPU 0 to CPUs 1: [ 385.352744][ C1] NMI backtrace for cpu 1 [ 385.352759][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) [ 385.352777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.352787][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 385.352827][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 385.352842][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 385.352857][ C1] RAX: de3efa42040f3a00 RBX: ffffffff81968308 RCX: de3efa42040f3a00 [ 385.352869][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b4911 RDI: ffffffff8be32680 [ 385.352880][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 385.352892][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa34630 [ 385.352904][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d7b40 [ 385.352914][ C1] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 385.352927][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.352937][ C1] CR2: 00007f99684e7d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 385.352952][ C1] Call Trace: [ 385.352958][ C1] [ 385.352964][ C1] default_idle+0x13/0x20 [ 385.352986][ C1] default_idle_call+0x74/0xb0 [ 385.353011][ C1] do_idle+0x1e8/0x510 [ 385.353025][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 385.353047][ C1] ? __pfx_do_idle+0x10/0x10 [ 385.353067][ C1] ? do_idle+0x4ec/0x510 [ 385.353085][ C1] cpu_startup_entry+0x44/0x60 [ 385.353101][ C1] start_secondary+0x101/0x110 [ 385.353126][ C1] common_startup_64+0x13e/0x147 [ 385.353156][ C1] [ 385.353801][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 385.532471][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) [ 385.543932][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.553991][ T31] Call Trace: [ 385.557272][ T31] [ 385.560212][ T31] dump_stack_lvl+0x99/0x250 [ 385.564831][ T31] ? __asan_memcpy+0x40/0x70 [ 385.569429][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.574631][ T31] ? __pfx__printk+0x10/0x10 [ 385.579252][ T31] vpanic+0x281/0x750 [ 385.583243][ T31] ? __pfx_vpanic+0x10/0x10 [ 385.587748][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 385.593296][ T31] ? preempt_schedule+0xae/0xc0 [ 385.598151][ T31] ? preempt_schedule_common+0x83/0xd0 [ 385.603629][ T31] panic+0xb9/0xc0 [ 385.607366][ T31] ? __pfx_panic+0x10/0x10 [ 385.611791][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 385.617177][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 385.623334][ T31] watchdog+0xfd2/0xfe0 [ 385.627520][ T31] ? watchdog+0x1de/0xfe0 [ 385.631859][ T31] kthread+0x70e/0x8a0 [ 385.635931][ T31] ? __pfx_watchdog+0x10/0x10 [ 385.640632][ T31] ? __pfx_kthread+0x10/0x10 [ 385.645231][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.650440][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.655651][ T31] ? __pfx_kthread+0x10/0x10 [ 385.660244][ T31] ret_from_fork+0x3fc/0x770 [ 385.664842][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 385.669964][ T31] ? __switch_to_asm+0x39/0x70 [ 385.674733][ T31] ? __switch_to_asm+0x33/0x70 [ 385.679528][ T31] ? __pfx_kthread+0x10/0x10 [ 385.684146][ T31] ret_from_fork_asm+0x1a/0x30 [ 385.688965][ T31] [ 385.692391][ T31] Kernel Offset: disabled [ 385.696714][ T31] Rebooting in 86400 seconds..