last executing test programs: 18.378735316s ago: executing program 2 (id=1957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @remote, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x1, 0x1d, 0x10f, 0x68, 0x0, 0x7f, 0x1, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0x4c, 0xb1, 0x3, 0x4, [{@rand_addr=0x64010100, 0x5}, {@loopback, 0x3}, {@private=0xa010100, 0x401}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xc74e}, {@rand_addr=0x64010102, 0x8}, {@broadcast, 0x10e3}, {@empty, 0xffffff7f}, {@loopback, 0x4}, {@broadcast, 0x6}]}, @end]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xfff7, "2bae57002d42c2fce7bc6e6d1c8f185c2d903604c1ebbc4cc3e57f1f2a9a5e777fc9d3c05b34bfa964885477769385715b483e4d01d561be7d185f62686167a5278076f6f8fde9d7910e5153ac879fd3bf363f11356ccb499aa041fae6ca30917e9235dd56d3e8577f6c360e6a12eb4d654a068ba61b95d03cd0fb4de10bad3805aa426db1f0ab50cc4af7d1789073b727206769e5857a339388ea82d8df9e30fbccc9"}}}}}}, 0x11d) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="1c002d"], 0x38}}, 0x0) (async, rerun: 32) accept$alg(r2, 0x0, 0x0) (async, rerun: 32) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) 18.292268835s ago: executing program 3 (id=1959): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x40) (async, rerun: 64) pread64(r3, &(0x7f0000001840)=""/4096, 0x1003, 0x1) (rerun: 64) close(r0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc, 0x7, {0x0, 0x3bffcb0d8b246a7c}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x68}}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004550", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x10) 18.187833044s ago: executing program 3 (id=1960): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3802000043000701fefffffffcdbdf25027c0000040045801e020180070083005b2400002901c580080016000180000053337b3c99b5b0fd409f8b488ee1ed4f7dde0666fa28dd428e9d16789af4de834b399aeda39832dc98c7e3a440b6c08a329bb904c99a8f4892fa8b1a0cc252abcadb006da04fc1b93c89512ea8d6256128a13300f0a838f59b1fce21b4baef720442706c55017660011a7c9fbed6defab52a4c2559eb0869ac06157f1e0346a43653219e6def84eb246a0d5057ceb274297e347e2b07e87bb809e56fb418a13b769f270fb127d23758136b180f276cb9451209aea3ae7b8cc56d4a4b5c5d363c0044d4a4d3748c80f11545b3e0a214173600736759edd7f4de023df4990c2b158eca3038229a47e6481ec43521f493a05372edbd5500e84426b2b1d90d4b04c9f249fa644eecb50013002073aea7303ecf370cc608005c00", @ANYRES32], 0x238}}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 17.987744518s ago: executing program 4 (id=1963): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2d, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @exit, @jmp={0x5, 0x1, 0xd, 0x7, 0x9, 0xffffffffffffffff, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x401, 0x51, &(0x7f0000000200)=""/81, 0x41000, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x10, 0x18, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r1, r1, r0, r1, r1, r1, r0, r1, r0], &(0x7f0000000340)=[{0x1, 0x3, 0xa, 0x8}], 0x10, 0x5}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) 17.977321764s ago: executing program 2 (id=1965): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f00000003c0)=""/47, 0x2f}, 0x3}], 0x1, 0x22, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x1a) 17.835284761s ago: executing program 2 (id=1967): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='?', 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000500)="419746522bf0fb4ed653f6429f950f053d0c5c7c94a71fab6bf3f938736f490965af40512a85fc2862ca1f344a8e533d541c871bad23b6f63dacf64af2c97057151f0e34638529bba7c49172c00b2f55f8bb1299ef58ca1be42867de6fcb68352b7edafb8cf4f2c5cd4f40ff417ac6a19b1f0375", 0x74}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f00000003c0)="2cf0498f18b5e03c43a3a7ebdbcf2badd8aed9aa8187db526e8b2d7066280ab51fe29cff3ddbad41b9b62d8aaf29c86f65bd21a230adf617c4c9de7b269fbd6929f2aea1317ed028919bedc2aab3e2f3b1b2b7f2c7cd3d5b9085b293eafabd7a9900c65c81ab27c1a25ab8ddbfab158f", 0x70}, {&(0x7f0000000480)="c0ee2aa410c9799ead4f5f01bb46a1c951c23d00424ced22ea535fe11d6be569ed8f9365673c2a37728b4f", 0x2b}, {&(0x7f00000004c0)="59aeab7c87d6d63a87b59a81e8bf7d080719aac7dcd350679b32f21b9dd36ddbe099", 0x22}], 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000580081044e81f782db44b904021d0800090003e6761b4005e6c02b87ff5f8c7c2091b7ed43bd188a62a6385472380dd6bdfe98749d29b17c0a9787b12b02a3840f6c07d6d4d2ad9c029fb16461e3d8b0ffac62ad44f6ebb4fd46b717e1acd6763d097c42a9ff4fc335", 0x6d}, {&(0x7f00000002c0)="38cf0de642b7cb400535086ccaacc35238b8847a1324fe361ac07e2e9432512f3c82c3fceabd01c9ba8cf0c835b1945a1abe74c71570ae3c88e4a052ea5d774a69de40af75593952d979225a2a9d4dcf0b2ad0503276f5dc591b159c5780c347d4fb8c47d8c7b7775edcaf38374e110c71a4bbb30137ae3317286e79a12c1b6333e574a618560f6e46eca1863afdcae7ceb19747f05eb8d47be070c2b15cd5b4924dd8680826d5b30053e01de6711e723813a0662f992e8c020a3b41e68828ff4fbf09ccb0947f7ab37fcd1a30c9cbbfe587d010fed5ed7462e39ef99eaee6a95eccad5161d762f71e258de535713cd182019eb9c8016e63ff68d3d1ff", 0xfd}], 0x2}, 0x44000001) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a0003401108004500003800000000000190780a010102ac1414aa0bd3a000000000000000000000000000002f00007f00000100000000000065580000000029a132cc270940e7"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) recvfrom$unix(r3, &(0x7f0000000200)=""/189, 0xbd, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000840)=""/208, 0xd0, 0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='?', 0x1}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000500)="419746522bf0fb4ed653f6429f950f053d0c5c7c94a71fab6bf3f938736f490965af40512a85fc2862ca1f344a8e533d541c871bad23b6f63dacf64af2c97057151f0e34638529bba7c49172c00b2f55f8bb1299ef58ca1be42867de6fcb68352b7edafb8cf4f2c5cd4f40ff417ac6a19b1f0375", 0x74}], 0x1) (async) accept4$unix(r0, 0x0, 0x0, 0x0) (async) writev(r1, &(0x7f0000000640)=[{&(0x7f00000003c0)="2cf0498f18b5e03c43a3a7ebdbcf2badd8aed9aa8187db526e8b2d7066280ab51fe29cff3ddbad41b9b62d8aaf29c86f65bd21a230adf617c4c9de7b269fbd6929f2aea1317ed028919bedc2aab3e2f3b1b2b7f2c7cd3d5b9085b293eafabd7a9900c65c81ab27c1a25ab8ddbfab158f", 0x70}, {&(0x7f0000000480)="c0ee2aa410c9799ead4f5f01bb46a1c951c23d00424ced22ea535fe11d6be569ed8f9365673c2a37728b4f", 0x2b}, {&(0x7f00000004c0)="59aeab7c87d6d63a87b59a81e8bf7d080719aac7dcd350679b32f21b9dd36ddbe099", 0x22}], 0x3) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000580081044e81f782db44b904021d0800090003e6761b4005e6c02b87ff5f8c7c2091b7ed43bd188a62a6385472380dd6bdfe98749d29b17c0a9787b12b02a3840f6c07d6d4d2ad9c029fb16461e3d8b0ffac62ad44f6ebb4fd46b717e1acd6763d097c42a9ff4fc335", 0x6d}, {&(0x7f00000002c0)="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", 0xfd}], 0x2}, 0x44000001) (async) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a0003401108004500003800000000000190780a010102ac1414aa0bd3a000000000000000000000000000002f00007f00000100000000000065580000000029a132cc270940e7"], 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) (async) recvfrom$unix(r3, &(0x7f0000000200)=""/189, 0xbd, 0x0, 0x0, 0x0) (async) recvfrom$unix(r3, &(0x7f0000000840)=""/208, 0xd0, 0x2, 0x0, 0x0) (async) 17.81995672s ago: executing program 4 (id=1968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@dev}, {@in6=@mcast2}, @in6=@local}}, [@mark={0xc}]}, 0x104}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xc}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffe7c, 0x2, {{0x7c, 0x0, 0xffff8593, 0x1, 0xc}, 0x4, 0xfffffffe, 0x9, 0x5, 0x9, 0x4, 0x6, 0x2, 0x5, 0x1, {0xffff1c72, 0x3, 0xfffffff2, 0x101, 0xfffffffe, 0x80000005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c8f1}, 0x4008000) 17.771512304s ago: executing program 3 (id=1969): r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) 17.64859712s ago: executing program 2 (id=1972): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x5, 0x490, 0x10001, {0x0, 0xea60}, {0x0, 0x2710}, {0x4, 0x1, 0x0, 0x1}, 0x1, @can={{}, 0x5, 0x3, 0x0, 0x0, "d09a62af74fbbea1"}}, 0x48}}, 0x20054004) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x0, 0x34}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0xfffffffd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4625597194dc5b934d523bb90"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) 17.624409952s ago: executing program 3 (id=1973): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffce6, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000034000dc"}}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$isdn(0x22, 0x2, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) close(r4) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@setlink={0x58, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MTU={0x8, 0x4, 0x7e}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}]}]}, 0x58}}, 0x0) 17.614791764s ago: executing program 4 (id=1974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0xa, @local, 0xfffffe4a}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x67, 0x1b1, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x80, [0xffffffff, 0x91ae, 0x2]}}, @generic={0x60, 0xd65, "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"}]}], @param_prob={0x4, 0x0, 0x0, 0x1f, {0x3, 0x6, "2863b9", 0x2c7f, 0x6c, 0x0, @mcast2, @mcast2, [@fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x5, 0x68}, @srh={0x3a, 0x2, 0x4, 0x1, 0x8, 0x8, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x88, 0x0, 0x7, 0x1, 0x0, 0x3, 0x65}, @routing={0x0, 0x8, 0x1, 0xd, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x1b}, @rand_addr=' \x01\x00', @private2]}, @dstopts={0x5c, 0x29, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0xf001}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x2, 0xd9, "93c2a7b2103811aad4bf3480084cff882648d94da95cf69c1f56cdc73c48b2606e42d212ad6ffc1148c67339327ad35d1207b512c69f4304b91659debf96e2fbd45eb8f36e231885e3e807c2c3f3069901a7f9508981cb5e876beb8002e3086d8270993f4b525a5f1cc62dde1e7b39fc68ddf729482f75ab54b3192c61f3c667ff7084c4f7f5fe0086f41998c79fa290e55f2128c54ece29b61a6ca740fa47ee4e373dc665708fb0a39e99494d6d2b7d798bb7550102114641eb70fb07918ff839da14c91a5c029512b45745eceb6cfb5165eef50a7f697b78"}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x6, 0x17, "89627a684dc7d1814a9d1c3cd6b9047ba95a445a9315a8"}, @generic={0xe0, 0x31, "69c8e406b41599ae8828e9adc558ba6794c8b33da5b9986eae990532682b93cca3ff4b67622aa24f77ffa9c7441e694897"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}], "4ae1a92c7465a9b3"}}}}}}, 0xfce) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x2, {0x3, 0xfffffffffffffffb, 0x6, 0x817a, 0x9}}) 17.447152066s ago: executing program 3 (id=1976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000003a000b0026747000ffdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x3e, &(0x7f0000000180)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0x0, 0x99, {0x3, 0xa}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004) setsockopt$sock_void(r4, 0x1, 0x9, 0x0, 0x0) 17.379608815s ago: executing program 2 (id=1978): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x21, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0xc, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, @ldst={0x1, 0x1, 0x3, 0x4, 0x2, 0x40, 0x10}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x98}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query]}, &(0x7f0000000140)='GPL\x00', 0x53, 0xa6, &(0x7f0000000180)=""/166, 0x41000, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x1, 0x3, 0xd}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x2, 0x9, 0x7}, {0x0, 0x2, 0xe, 0x1}, {0x2, 0x3, 0x2, 0x5}, {0x3, 0x4, 0x5, 0x1}, {0x5, 0x4, 0x8, 0x2}, {0x3, 0x2, 0x5, 0x7}, {0x3, 0x3, 0x0, 0x5}, {0x1, 0x2, 0xe, 0x7}], 0x10, 0x57}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=0xffffffffffffffff, 0x7, 0x1, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000600)={0x6, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r3, r0, 0x11, 0x28, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xb}]}, &(0x7f0000000680)='GPL\x00', 0x1, 0xf4, &(0x7f00000006c0)=""/244, 0x40f00, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xf, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@ifindex=r6, r5, 0x17, 0x30, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) r7 = openat$cgroup_ro(r1, &(0x7f00000009c0)='cgroup.controllers\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r7) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000001200)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000a80)={0x6a4, r8, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x2dd, 0x2a, [@random={0xff, 0xe6, "073c1f376406b549b7c75263851f3c78f1a414951b787d2bef3708501ad7cfda90fa3a3b1a35a73c699cd3d6d505138f3ea9f75b83fe1f4c260f333737d45005c2b969630d7beeb3f91a0f9841fed91be8f9db19a1faa90a1a120dda6eb5497f10687637818d01e32c6d554b7cc4a93b4d30719ab9167f2874a11ca27690522606b6f6491fe6a2b70c8f5d40a5ca9ce847edb50c458464fd55d067e10ed6ff401e65a17cdf7386d2e8e11f10602b50158201fa10d2c3b91e0e4ff39c93f57bfe6b7a30b14ea80c9188bb501edbc1137e8aa6c86a75e839e50c2637f938c27f4a7e99efd2daed"}, @gcr_ga={0xbd, 0x6, @broadcast}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0xf, @device_b, 0x3, @value=@device_b, 0x4, 0x4, @device_b, 0x6}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x18, {0xa0b, "ba96164918a5", @long="f81fc62437f5cf31bd3c4cd46718c22d"}}, @tim={0x5, 0x5b, {0x40, 0x1, 0x64, "a9a6a28c0bdaa85a9bf2177ac39c6a7ff0fba1aefd6ce04c3fb545e98181549e4115eecb77345ca0834ba3c486d45f550bf86f10657f7e69cd17baf316751da7a621147c00540ef0ad07fde0df0dee3cc4e9b4c06fb4d027"}}, @perr={0x84, 0x12e, {0x59, 0x12, [{{}, @broadcast, 0x2, @void, 0x31}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x6}, {{}, @broadcast, 0x1ff, @void, 0x7}, {{0x0, 0x1}, @device_b, 0x7ff, @value=@broadcast, 0x1c}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x31}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x2c}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x3f}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x5}, {{}, @device_b, 0x7, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x3e}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0xd}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x26}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x1c}, {{}, @device_a, 0x8, @void, 0x37}, {{}, @broadcast, 0xff}, {{}, @device_b, 0x8000, @void, 0x31}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x2}, {{}, @device_b, 0x9, @void, 0x8}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_chsw={0x76, 0x6, {0x5, 0x3, 0x21, 0x7}}, @mesh_chsw={0x76, 0x6, {0x5, 0x9, 0xe, 0xa}}]}, @NL80211_ATTR_IE={0x31, 0x2a, [@ht={0x2d, 0x1a, {0x1, 0x0, 0x3, 0x0, {0x5, 0x0, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x4b, 0x7}}, @cf={0x4, 0x6, {0x50, 0x6, 0x3, 0x4d0}}, @supported_rates={0x1, 0x7, [{0x30}, {0x18}, {0x12, 0x1}, {0x54}, {0x2}, {0x1b, 0x1}, {0x6}]}]}, @NL80211_ATTR_IE={0x1c1, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xfe, 0x1, @device_a, 0xadc, @value, 0x3, 0xfff, @broadcast, 0x81}}, @perr={0x84, 0x4f, {0x9, 0x5, [{{0x0, 0x1}, @broadcast, 0xb, @value=@device_b, 0x18}, {{0x0, 0x1}, @device_b, 0xe, @value=@broadcast, 0x42}, {{}, @device_b, 0x2, @void, 0x1b}, {{}, @device_a, 0x7, @void, 0xc}, {{}, @device_b, 0x4, @void, 0x1b}]}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x1, 0x8}}, @random_vendor={0xdd, 0x8c, "338fbed3bdcf6c547e2dc21f432f11ad0f6ac4754683f43cf9aa6164803c3ec9f4d3b9daa8d84ad7788c29c716c2b567f0b794cb95bcd2c84c5dc3ea26a34b51589494560dc49e6d9d140a955bca089ccc450674c9510e4533e54addf069cc3352cd0aea9fceced1ce66ee85a8782d38e7666cb4e74b07e7869f7d1245126ee7b4e7411dc73ab3dbdded919a"}, @ibss={0x6, 0x2, 0xff}, @preq={0x82, 0x30, {{0x0, 0x1, 0x1}, 0x27, 0x0, 0x7, @broadcast, 0xfffffffd, @void, 0x80, 0x7f, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0xff}, {{0x0, 0x0, 0x1}, @device_b, 0x3}]}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @measure_req={0x26, 0x6f, {0x0, 0x5, 0x8, "f7741bdcc4fb076f6985300721a82b92cda050fd1702cf6d3daf9ad85d4177a05be9f67601bb2fc6680cab06396a80d42d88018a94b176c742601c3e45d5c899a7a30898742be6edad20bcdb31c1de5f5299c8fd5c1e2b5845bfdf9f1f8d152f13ca1787265487ee3e17b468"}}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@mic={0x8c, 0x18, {0x6fd, "38c2ae05ce39", @long="21c729ec7b1b55d849a285b6e378849f"}}, @supported_rates={0x1, 0x1, [{}]}, @perr={0x84, 0x122, {0x6, 0x12, [{{}, @device_b, 0x7, @void, 0x33}, {{}, @broadcast, 0x6, @void, 0x11}, {{0x0, 0x1}, @device_b, 0x884, @value, 0x3e}, {{}, @device_a, 0x0, @void, 0x18}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x35}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x22}, {{}, @device_b, 0xc, @void, 0x30}, {{}, @broadcast, 0x5, @void, 0x36}, {{}, @device_a, 0xeb, @void, 0x2a}, {{0x0, 0x1}, @broadcast, 0x1000, @value=@device_b, 0x2a}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x7}, {{}, @device_b, 0x8, @void, 0x35}, {{}, @device_b, 0x4, @void, 0x2d}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x3e}, {{0x0, 0x1}, @device_b, 0xe53, @value=@device_b, 0x2e}, {{}, @broadcast, 0x401, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x21}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x2b}]}}, @challenge={0x10, 0x1, 0x70}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x6c, 0x2a, [@prep={0x83, 0x1f, {{}, 0x8, 0x0, @device_b, 0xffff, @void, 0x80, 0x1}}, @sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6, {0x4, 0x5, 0xff04, 0x5}}, @prep={0x83, 0x1f, {{}, 0x4, 0x5, @broadcast, 0x8, @void, 0x5f5, 0x3, @device_b, 0x3}}, @tim={0x5, 0x19, {0x8, 0xfe, 0x9, "c57d18513dd0d80d44f2a1f6c4446e337eba1bff2201"}}]}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x800}, 0x48) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f00000014c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001280)={0x1e8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xe}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0xff}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xa1f4}, {0x5}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8001}, {0x5}, {0x6, 0x11, 0xc5be}, {0x8, 0xb, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xef3}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x9}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0xe, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48005) r9 = socket$netlink(0x10, 0x3, 0x5) socket$inet_sctp(0x2, 0x1, 0x84) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001640), r9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000001700)={'syztnl1\x00', &(0x7f0000001680)={'gretap0\x00', r6, 0x40, 0x8000, 0x6, 0x1, {{0x17, 0x4, 0x2, 0x1, 0x5c, 0x65, 0x0, 0x80, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x68, [@local, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0x83, 0xd, "8722f2c1fed088a9ac9706"}, @noop, @timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x0, [{@loopback, 0x1}]}, @generic={0x82, 0x6, "7fd9f4c6"}, @generic={0x86, 0xa, "4ffac3bb11c4208d"}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, r10, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r12 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000001800), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r12, &(0x7f0000001840)={'pim6reg1', 0x32, 0x38}, 0xb) write$cgroup_subtree(r7, &(0x7f0000001880)={[{0x2b, 'cpu'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2d, 'io'}, {0x2b, 'rlimit'}, {0x2d, 'perf_event'}]}, 0x38) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r14, 0x5462, &(0x7f0000001900)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001980)=@o_path={&(0x7f0000001940)='./file0\x00', r7, 0x4000, r0}, 0x18) mkdirat$cgroup(r1, &(0x7f00000019c0)='syz0\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={r5, 0xe0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001a00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000001ac0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0x39, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) r16 = getpid() r17 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001d40)={r7, r15, 0x25, 0x12, @val=@iter={&(0x7f0000001d00)=@task={r16, r17, r7}, 0x10}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001d80)={r13}) 17.344445424s ago: executing program 4 (id=1979): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0x7, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18) 17.336873206s ago: executing program 3 (id=1980): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}, 0x20) close(r0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}, 0x20) (async) close(r0) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) 17.202154784s ago: executing program 2 (id=1982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r3, 0x18dd9, 0x22008}}, 0x20}}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x40000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x600500, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept(r11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x2, 0x800, 0xf1, 0x10051, 0x1, 0x0, '\x00', r12, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xffffffffffffff01, @void, @value, @value=r6}, 0x50) (rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f0000000440)="bf397588736248e4425ba779b866d5588bf45e0cf8de7a5bcf1ed07c4741bd801aba7aaf4093fc138740fa8fe4782de5425d2c9459b873082ebd21d935a4947e6ce0cf3ac39b77b7929fb6b3d6a4f62d8e0bbf0118b3600a2b61564f21d6eb9addd4e6d4dbeec1f46adbeab6e1a11c4f05d8eb60180ffc2e70c84e5b21f459a04db5e05f589048d845b4d6284c5b5a8bd36d4c0d20c99d4b080df043dbb8ae45dc1b557945c903ed801c0e88e08699dedc29ccb78c9f8bd7c38d568a0c205586fe1267014a95", &(0x7f00000007c0)=""/203, &(0x7f00000006c0)="aa9b45d037c191c324bc513f86f050f40bb4493239245a0b996192485256ca72cd19a1195dd77d8da418a4afee8d34855551136262082cf0d71573dc2f820abe404dfec6bac81bdfd0b2e0b693806aa3ae01f16b2b6ec8d91966cb5024e3352412e15b0bdfe0d04080371de7f2fba8fcf52850eb57a0dc47efa81a83160e65c31089a13368f46781fda393ad9d06cb752d75b782dcad2c9f6aa5d848462a0e29509ad9aeaa54ac9bc0ed5c48a1a996b3773dc505d74d", &(0x7f0000000200)="e2978b58c4470bd833d389b5c78dc21da78780008d7209", 0xfffffb00, r14}, 0x38) (async, rerun: 32) ioctl$sock_bt_hci(r13, 0x400448cb, &(0x7f0000000080)="e17ffbe8b0ec2afcede8edcd39cc9b6a032922b68fc8dcea70e1fe1f92adbef23df377a0a76fb989fd447fe42b2b74153cb389025a2f3365204b45511463acfa13e4b5bf666f10ce8a46b88bcbc6") (rerun: 32) 16.936195541s ago: executing program 0 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000022c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc020000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000100)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x100, 0x5f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 16.873513494s ago: executing program 4 (id=1986): r0 = socket(0x10, 0x6, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a"], 0xc8}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c00000000100000000000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x7fffffff) 16.728016736s ago: executing program 0 (id=1988): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvfrom$inet(r1, &(0x7f0000000780)=""/58, 0x3a, 0x21, 0x0, 0x0) (async) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x140e, 0x200, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000200)=""/99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) listen(r4, 0xfffffffd) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000540)={0x2, 0xfff, "c82b3b", 0x5, 0x2}) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000000080009000095ea54ca5cbf9e0dcb70d7fc000000"], 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r6}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r8, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r9, 0x4) 16.726327546s ago: executing program 4 (id=1989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40401) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$can_j1939(r3, &(0x7f0000000700)={&(0x7f00000002c0)=@isdn, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/242, 0xf2}, {&(0x7f0000000600)=""/137, 0x89}], 0x4}, 0x20) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) (async) shutdown(r3, 0x1) r4 = socket(0x2a, 0x6, 0x8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:null_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4080}, 0x4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f00000009c0)={0x248, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0d4b2d6d9abc9829aa525ba46e638b39bf4aa23f034194ae"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6de77ffcef9718efcb4b7a51e59338b0a8cc1964872b0c52"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0cab6ab6dfa1033d6061f8bc3002ed9a1d93653286373624"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2fe4fcbdf4bad03a39f5c9d939e0ec1e47a79eb6142b3870"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "63b4d8a6191954c66701e199e84e4b9b9b47f97ec96f767c"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1542c43f6939cfbcb1d774ac551a4b61f892026ca71c8a9f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09f23fe74dfd86d2e41e921da220d1e4401232697cb1f2ea"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x248}, 0x1, 0x0, 0x0, 0x4008004}, 0x810) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$nci(r6, &(0x7f0000000d00)=@NCI_OP_CORE_RESET_RSP={0x0, 0x1, 0x2, 0x0, 0xab, {0x0, 0x201f67143b1b1ae3, 0xca}}, 0x6) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f0000001280)=""/6, 0x6, 0x0, &(0x7f00000012c0)=""/29, 0x1d}}, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), r0) (async) connect$ax25(r4, &(0x7f00000013c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001440), 0x8) sendmmsg$alg(r7, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="3acb516b0cc08ac749020a9bd160720c7c5ec1ea262cda648249809868face1f07115b57947807ae12e24755c2736576bff7cc6028080d914d927e3f71253acdd7c84fd218b3f55e64f6c6df6642669573c0d964d186b71b5a8424b139f0bd78afdf05b5140f84f896ace8c8", 0x6c}, {&(0x7f0000002500)="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", 0x1000}], 0x3, 0x0, 0x0, 0x4010}, {0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003540)="7245a8a8eb79215bd76254d33cf4e7fcc722f00f9e12770ab86e94abf395cff9de38e6cd06926b98d4a7e9c0eaf40c8faf4fd7324e8db534a4cdfd3d914e74f38c6d15581af88928cb24943f65815747262df0d414c05bf7add2e9e66367c3ae8be7966a9d5dd978c6bfaa", 0x6b}, {&(0x7f00000035c0)="e194f1e1e593b73c050bf17feaabfd2b5a7b74b4115fdbe98a464c3a87587ab2def46f2c3ba4eecd4002e4f57204a61466131f06088fdc4d7c2815389fb9de9273a94084b659859df58f62093c75da95cdd32bf3b1a5d5d46fefebe2f18ac5ea04cd422dce05b1eabb497b02b0c60b258093ffa075f8947d9ff2cc2f89a5bb757666979d44aa5919c71bbdec6cfa4eb1151c7469698718950a8abce6bff4348f888a3091ecfc1add2afdb9baad76a1d602", 0xb1}, {&(0x7f0000003680)="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", 0xfc}], 0x3, &(0x7f00000037c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x60, 0x24008014}], 0x2, 0x14) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x4c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x19178953acf26764}, 0x40000) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003a40), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x50) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000003b40)={0x0}, &(0x7f0000003b80)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000003bc0)={r9, 0x4a}, &(0x7f0000003c00)=0x8) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000004900)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000048c0)={&(0x7f0000003c80)={0xc08, 0xd, 0xa, 0x401, 0x0, 0x0, {0x8, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xbb8, 0x3, 0x0, 0x1, [{0x3fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x3a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "94153c414016961321f2cd9ff42e1d171116a525b6ca05d8baec20b21c50f4ecf139a952e0b357b4c9f63b74adfb20ceedda4050dc99e0226f17a04f522a554a01b095168706f22466386e77904c8d431940ddc8c349c5e6277c68c96d05a54faaac33853c49aaf5048fe0c108d46c12515b9e19b84800895f7ad5e1d107efec855742c23fd6e5b94a2dce335fa427f4eb2d62610208607c67ef0f8500cabb99112fe02d6220667e80e7b2a7fb7b752245002927759ca3f0888378069240fad69a7a10ccd4a1996c50baa04055b3274d7d8965ea492de7209c9885c92f4dbcdda27079f43caeab"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "b8f89b3a8d95678af6b5f57880dac52e1e1b0d70fec6214ebdc5c23c79c398c4574b13d9235697a7e22f275e589b45dd29cec62976429d43f6fea497a884fef202b9557a3bc2c90af81ea81183facdcc61c06674f6293900d4b4175660227b05acb5990c9b7a7074df2d02ebac83a104d1e47a1280096131639376a6ff11d737f75c013d471f1af90ea0b760ae9f52e87761c337c1da9828bb800d2a4982422b848263d82fd56de64f3ec8436839f623658bfb537c3ce7ff30663008b6fac8ce83dd7c877bf5ccb2288e2e9b1ba11f815a6d60626f75b474fc1167dbffd6296151"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "5a7916e7f5559919299e4c7404b0a2371b82927db0bc67a8437dc9ba0ac766d7dba56d83a51ae910de7b2e1500ac03ceb02b8b14e1d8e99b950524ac231a2ff1e62209344d373ac5d3a51cad862612792dedc5eec1a940d6d3b975abd48048759142cc08423c881c822640fb1a61d233b67b65430cbd8617ca5c5e9570b5d76ba83d27e1942971e917ce9fdd2b002ee03d78652c41b086cbed208812449a38aadaf9a19a675c2182f7adc505d1344e43d7ecb5be72cbf6d0ae87cd0a4abadb99f3a614bc91fd1daa7ffdc25c6fe7"}, @NFTA_DATA_VALUE={0x44, 0x1, "470862f690e0d240c36901e0a059d0432967e243b23f01b927a977d8fb8ece481656d17891057035fc3e655bd8c0d6ef49f5504d117ef14ade7795658b381b87"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}]}, {0x230, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x22c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "b427fc69e4eeb28dab4d486137f3af01688542052d1ecd4fcf2b17f057c06a2b60de81654651ec6a725cff162ab520fdeb91bb791a83b1d8d0337ee263c6e638658ef63e4ad73513d3543a2eb4f290bc8d632b8b78a2b995aebe0bac8a08fb8c46ebfe2553db27d785da957fa76a635cbd83a32dc80a890b5269d5d5a7935d756a"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x9d, 0x1, "fbf11c398aca4b8d7a1243aa6f99d7e730de2113ab625d06a93d3b54366391770962bed7ff111f9ffb6e82f8b1f20a178466ef720bea14d1a77fde53ba532b09619c9ff6873713f3991dca8c0800ce46cd54fbd3b588856d56a8b18e842c7b3086428237a4e5bda45c16a41135d0367a7486539e350165aa2006e64ec55287dc33fe840dd74e4125083162b73d4e8563e3c9705fbecf2e8582"}, @NFTA_DATA_VALUE={0x6, 0x1, "f296"}, @NFTA_DATA_VALUE={0xf3, 0x1, "5fe17566ed16752bb042b6c901d5d52c507f3e30d5f2002465056cfb33709f53c9e36784bc3ae6ce671c7ae05166ce3aff45ed4e8d15f7339cef57103ec8ce08804c93d74239580e4cfb0dae6f19449a6d8926a0f9c02ad47e12cf75f19edb1a66d4c1beecf94b2bbe12611e5de9109638ae03258845a844b2e0d1798970cde454b36e430d8884a76963be2031a3f5e1cd27c978ccb38c8bfebd9923816f289494ce6adb4e3b2a939c186fdde7ffe92ea3d46b5e8df509e16f9f9d97253a97cb37ac5862d837fb0577be558a998e755d4faacd4ba04f9a2b0e3b4a759d93854f77281151c5c55ab712154e85e4f769"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x4}, {0x1d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x50, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0xc7e2e7163ee66861}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "1c0a5d3024aa5f3cff2a945eeb5a4bc7da5a49044839fb1b9acdbf10b9f17b103694f5e3a14c05cf60a99905d274741baca2ccc087c56f62bd1551ee0a862bc6fe9c9311691a4d327f8ee62bcfcc2a3b18052e575ff6e95454bb207e50a06aca"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb, 0x1, "0dac69cd250377"}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x80f}]}}}]}, {0x178, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x168, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "8a35bd7428663d906b233095a372e49d18a880102645a3e11e0017c6a5b6c4f6643be4dd338fc2bcf1411b429651095ec89a3451150a87d57659030faf035c918d9e652c5ea73094f088e5830c1693c1f4cf91c016f662d7d9cb2c4f6432f43948aedcb205489ea93d376fc2cbc078ca51bcba912f6b1a671c380adf04a5e7cee9d8d402434c6d0ae18e418332640d4dc5be91c0a42a790e5753a714565f8c46aee6abcb3a3aad4187c08f04a41d2c2a82de532131079de9d86216a13654ecf7012f01ea52eb8b57265eead8d3b1b6c4ccee5cfb3c1cb031f3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x158, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "11a0efa8f85b61caeef0c011fe08a3edec813dcd28d61126379d0e2d2844cd56e77efbf122fbcfd037c9cbf34ab4b61a692e5c5aef2579947631e1f4735e77ebe5c38d12f2d05aa6c328de8e9c6afc3155e90974f94318d68ef99fe01185a4431f3637478c662f1bf8c7f7bf5b2a79"}, @NFTA_DATA_VALUE={0x5f, 0x1, "62a080ff27d35c3dce2d57ffbb6e92d24fbbf6538982f57960970f6006c867153d7e4370254aaaa4d5be218d89d41efab2ca4d06cd978cf73a085f54f398048f2b0fdb4be5332211b3d6d12dc842c46b971492a03eea0dc7caa208"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "7c19a9624dc233d810d8c5ee719e098b85c7aa3871b6ec1f54e250d61b4fb59e1663b8c893d1dcbf614954991ff86c486b942075079eee57269902f3289e4d2253300c4653bcbab1d7248a6497b4fca2a62f9003921f14c4a1105300b0bfdc"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x84, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x74, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPR={0x44, 0x7, 0x0, 0x1, {{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0xc08}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000010) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000004a80)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x7201d387ea1f7a91}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80000000}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x10) 16.531716563s ago: executing program 0 (id=1991): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0xaeaf9ec181b6dfc9, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x16, &(0x7f0000000100)=@raw=[@generic={0x8, 0x9, 0xb, 0x7afd, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffa}], &(0x7f0000000300)='GPL\x00', 0xc, 0x1d, &(0x7f0000000340)=""/29, 0x41100, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x1, 0x1], &(0x7f0000000400)=[{0x4, 0x3, 0x0, 0xa}, {0x4, 0x1, 0xa, 0x3}, {0x3, 0x5, 0x7, 0xb}], 0x10, 0x8}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4}, 0x94) 16.458033414s ago: executing program 0 (id=1992): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) close(r0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r3], 0x50}}, 0xc0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38, 0x4855}, 0x24000052) 16.3887044s ago: executing program 0 (id=1993): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440), 0x4000000000000d7, 0x48000) (async) r1 = socket$inet(0xa, 0x801, 0x84) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000240)="17", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffc) r3 = socket$inet(0xa, 0x801, 0x84) (async) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) (async) listen(r3, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) (async) listen(r5, 0x1) (async) r7 = socket$netlink(0x10, 0x3, 0x4) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) (async) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) (async) r9 = accept4(r1, 0x0, 0x0, 0x80000) sendto$inet(r4, &(0x7f00000000c0)="ae", 0x1, 0x20040050, 0x0, 0xfffffd23) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x3}, 0x8) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="22df89511c727fe0e42c2f890f", 0xd, 0x4000020, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r10, 0x5}, 0x8) 16.321675911s ago: executing program 0 (id=1995): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000000c0)='cp\x00\x10\x00\x00\x00'}, 0x30) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xd, 0x10, r2, 0xffffe000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) 16.310832678s ago: executing program 1 (id=1996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llu}]}, &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x7f, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) 16.216505448s ago: executing program 1 (id=1997): r0 = socket(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$isdn(r0, &(0x7f00000003c0)={0x3bec, 0x7, "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"}, 0x1008, 0x40000, &(0x7f0000000040)={0x22, 0xdd, 0xa, 0x5, 0x22}, 0x6) (async) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x3e8) 16.216027866s ago: executing program 1 (id=1998): r0 = socket(0x25, 0x5, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010100}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r4, &(0x7f00000000c0), 0x2) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 16.198821478s ago: executing program 1 (id=1999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001080)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 15.170581729s ago: executing program 1 (id=2000): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r2, 0x4, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@delqdisc={0x150, 0x25, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xfff2, 0x1}, {0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4c8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5c050f0c}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x140000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x5, 0xa, 0x7, 0x1, 0xb, 0xd, 0x7, 0xc, 0x5, 0x4, 0x2, 0x2, 0x6, 0xd, 0xb, 0x5], 0x1, [0xa4, 0x34b8, 0x6, 0x1ff, 0x9, 0x1, 0x6d, 0x0, 0xffff, 0x3, 0x6, 0x1000, 0x2, 0xbb, 0x52e, 0x3], [0xfffc, 0x3fc, 0x5, 0x100, 0xc, 0xf, 0x1, 0x1847, 0x6, 0x7, 0x0, 0x8, 0x7, 0x2, 0x9, 0xa90]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xe}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xda}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}]}, 0x150}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 15.118477166s ago: executing program 1 (id=2001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x40800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac141425000000000000000000000000043500000100000000000000000000000000000000000000000000000000000000000000000000003300000002"], 0x23c}}, 0x4004000) 2.090936211s ago: executing program 32 (id=1982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r3, 0x18dd9, 0x22008}}, 0x20}}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x40000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x600500, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept(r11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x2, 0x800, 0xf1, 0x10051, 0x1, 0x0, '\x00', r12, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xffffffffffffff01, @void, @value, @value=r6}, 0x50) (rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f0000000440)="bf397588736248e4425ba779b866d5588bf45e0cf8de7a5bcf1ed07c4741bd801aba7aaf4093fc138740fa8fe4782de5425d2c9459b873082ebd21d935a4947e6ce0cf3ac39b77b7929fb6b3d6a4f62d8e0bbf0118b3600a2b61564f21d6eb9addd4e6d4dbeec1f46adbeab6e1a11c4f05d8eb60180ffc2e70c84e5b21f459a04db5e05f589048d845b4d6284c5b5a8bd36d4c0d20c99d4b080df043dbb8ae45dc1b557945c903ed801c0e88e08699dedc29ccb78c9f8bd7c38d568a0c205586fe1267014a95", &(0x7f00000007c0)=""/203, &(0x7f00000006c0)="aa9b45d037c191c324bc513f86f050f40bb4493239245a0b996192485256ca72cd19a1195dd77d8da418a4afee8d34855551136262082cf0d71573dc2f820abe404dfec6bac81bdfd0b2e0b693806aa3ae01f16b2b6ec8d91966cb5024e3352412e15b0bdfe0d04080371de7f2fba8fcf52850eb57a0dc47efa81a83160e65c31089a13368f46781fda393ad9d06cb752d75b782dcad2c9f6aa5d848462a0e29509ad9aeaa54ac9bc0ed5c48a1a996b3773dc505d74d", &(0x7f0000000200)="e2978b58c4470bd833d389b5c78dc21da78780008d7209", 0xfffffb00, r14}, 0x38) (async, rerun: 32) ioctl$sock_bt_hci(r13, 0x400448cb, &(0x7f0000000080)="e17ffbe8b0ec2afcede8edcd39cc9b6a032922b68fc8dcea70e1fe1f92adbef23df377a0a76fb989fd447fe42b2b74153cb389025a2f3365204b45511463acfa13e4b5bf666f10ce8a46b88bcbc6") (rerun: 32) 2.062557146s ago: executing program 33 (id=1980): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}, 0x20) close(r0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}, 0x20) (async) close(r0) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) 1.047452777s ago: executing program 34 (id=1995): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000000c0)='cp\x00\x10\x00\x00\x00'}, 0x30) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xd, 0x10, r2, 0xffffe000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) 1.015954185s ago: executing program 35 (id=1989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40401) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$can_j1939(r3, &(0x7f0000000700)={&(0x7f00000002c0)=@isdn, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/242, 0xf2}, {&(0x7f0000000600)=""/137, 0x89}], 0x4}, 0x20) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) (async) shutdown(r3, 0x1) r4 = socket(0x2a, 0x6, 0x8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:null_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4080}, 0x4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f00000009c0)={0x248, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0d4b2d6d9abc9829aa525ba46e638b39bf4aa23f034194ae"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6de77ffcef9718efcb4b7a51e59338b0a8cc1964872b0c52"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0cab6ab6dfa1033d6061f8bc3002ed9a1d93653286373624"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2fe4fcbdf4bad03a39f5c9d939e0ec1e47a79eb6142b3870"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "63b4d8a6191954c66701e199e84e4b9b9b47f97ec96f767c"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1542c43f6939cfbcb1d774ac551a4b61f892026ca71c8a9f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09f23fe74dfd86d2e41e921da220d1e4401232697cb1f2ea"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x248}, 0x1, 0x0, 0x0, 0x4008004}, 0x810) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$nci(r6, &(0x7f0000000d00)=@NCI_OP_CORE_RESET_RSP={0x0, 0x1, 0x2, 0x0, 0xab, {0x0, 0x201f67143b1b1ae3, 0xca}}, 0x6) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f0000001280)=""/6, 0x6, 0x0, &(0x7f00000012c0)=""/29, 0x1d}}, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), r0) (async) connect$ax25(r4, &(0x7f00000013c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001440), 0x8) sendmmsg$alg(r7, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="3acb516b0cc08ac749020a9bd160720c7c5ec1ea262cda648249809868face1f07115b57947807ae12e24755c2736576bff7cc6028080d914d927e3f71253acdd7c84fd218b3f55e64f6c6df6642669573c0d964d186b71b5a8424b139f0bd78afdf05b5140f84f896ace8c8", 0x6c}, {&(0x7f0000002500)="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", 0x1000}], 0x3, 0x0, 0x0, 0x4010}, {0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003540)="7245a8a8eb79215bd76254d33cf4e7fcc722f00f9e12770ab86e94abf395cff9de38e6cd06926b98d4a7e9c0eaf40c8faf4fd7324e8db534a4cdfd3d914e74f38c6d15581af88928cb24943f65815747262df0d414c05bf7add2e9e66367c3ae8be7966a9d5dd978c6bfaa", 0x6b}, {&(0x7f00000035c0)="e194f1e1e593b73c050bf17feaabfd2b5a7b74b4115fdbe98a464c3a87587ab2def46f2c3ba4eecd4002e4f57204a61466131f06088fdc4d7c2815389fb9de9273a94084b659859df58f62093c75da95cdd32bf3b1a5d5d46fefebe2f18ac5ea04cd422dce05b1eabb497b02b0c60b258093ffa075f8947d9ff2cc2f89a5bb757666979d44aa5919c71bbdec6cfa4eb1151c7469698718950a8abce6bff4348f888a3091ecfc1add2afdb9baad76a1d602", 0xb1}, {&(0x7f0000003680)="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", 0xfc}], 0x3, &(0x7f00000037c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x60, 0x24008014}], 0x2, 0x14) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x4c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x19178953acf26764}, 0x40000) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003a40), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x50) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000003b40)={0x0}, &(0x7f0000003b80)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000003bc0)={r9, 0x4a}, &(0x7f0000003c00)=0x8) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000004900)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000048c0)={&(0x7f0000003c80)={0xc08, 0xd, 0xa, 0x401, 0x0, 0x0, {0x8, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xbb8, 0x3, 0x0, 0x1, [{0x3fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x3a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "94153c414016961321f2cd9ff42e1d171116a525b6ca05d8baec20b21c50f4ecf139a952e0b357b4c9f63b74adfb20ceedda4050dc99e0226f17a04f522a554a01b095168706f22466386e77904c8d431940ddc8c349c5e6277c68c96d05a54faaac33853c49aaf5048fe0c108d46c12515b9e19b84800895f7ad5e1d107efec855742c23fd6e5b94a2dce335fa427f4eb2d62610208607c67ef0f8500cabb99112fe02d6220667e80e7b2a7fb7b752245002927759ca3f0888378069240fad69a7a10ccd4a1996c50baa04055b3274d7d8965ea492de7209c9885c92f4dbcdda27079f43caeab"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "b8f89b3a8d95678af6b5f57880dac52e1e1b0d70fec6214ebdc5c23c79c398c4574b13d9235697a7e22f275e589b45dd29cec62976429d43f6fea497a884fef202b9557a3bc2c90af81ea81183facdcc61c06674f6293900d4b4175660227b05acb5990c9b7a7074df2d02ebac83a104d1e47a1280096131639376a6ff11d737f75c013d471f1af90ea0b760ae9f52e87761c337c1da9828bb800d2a4982422b848263d82fd56de64f3ec8436839f623658bfb537c3ce7ff30663008b6fac8ce83dd7c877bf5ccb2288e2e9b1ba11f815a6d60626f75b474fc1167dbffd6296151"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "5a7916e7f5559919299e4c7404b0a2371b82927db0bc67a8437dc9ba0ac766d7dba56d83a51ae910de7b2e1500ac03ceb02b8b14e1d8e99b950524ac231a2ff1e62209344d373ac5d3a51cad862612792dedc5eec1a940d6d3b975abd48048759142cc08423c881c822640fb1a61d233b67b65430cbd8617ca5c5e9570b5d76ba83d27e1942971e917ce9fdd2b002ee03d78652c41b086cbed208812449a38aadaf9a19a675c2182f7adc505d1344e43d7ecb5be72cbf6d0ae87cd0a4abadb99f3a614bc91fd1daa7ffdc25c6fe7"}, @NFTA_DATA_VALUE={0x44, 0x1, "470862f690e0d240c36901e0a059d0432967e243b23f01b927a977d8fb8ece481656d17891057035fc3e655bd8c0d6ef49f5504d117ef14ade7795658b381b87"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}]}, {0x230, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x22c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "b427fc69e4eeb28dab4d486137f3af01688542052d1ecd4fcf2b17f057c06a2b60de81654651ec6a725cff162ab520fdeb91bb791a83b1d8d0337ee263c6e638658ef63e4ad73513d3543a2eb4f290bc8d632b8b78a2b995aebe0bac8a08fb8c46ebfe2553db27d785da957fa76a635cbd83a32dc80a890b5269d5d5a7935d756a"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x9d, 0x1, "fbf11c398aca4b8d7a1243aa6f99d7e730de2113ab625d06a93d3b54366391770962bed7ff111f9ffb6e82f8b1f20a178466ef720bea14d1a77fde53ba532b09619c9ff6873713f3991dca8c0800ce46cd54fbd3b588856d56a8b18e842c7b3086428237a4e5bda45c16a41135d0367a7486539e350165aa2006e64ec55287dc33fe840dd74e4125083162b73d4e8563e3c9705fbecf2e8582"}, @NFTA_DATA_VALUE={0x6, 0x1, "f296"}, @NFTA_DATA_VALUE={0xf3, 0x1, "5fe17566ed16752bb042b6c901d5d52c507f3e30d5f2002465056cfb33709f53c9e36784bc3ae6ce671c7ae05166ce3aff45ed4e8d15f7339cef57103ec8ce08804c93d74239580e4cfb0dae6f19449a6d8926a0f9c02ad47e12cf75f19edb1a66d4c1beecf94b2bbe12611e5de9109638ae03258845a844b2e0d1798970cde454b36e430d8884a76963be2031a3f5e1cd27c978ccb38c8bfebd9923816f289494ce6adb4e3b2a939c186fdde7ffe92ea3d46b5e8df509e16f9f9d97253a97cb37ac5862d837fb0577be558a998e755d4faacd4ba04f9a2b0e3b4a759d93854f77281151c5c55ab712154e85e4f769"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x4}, {0x1d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x50, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0xc7e2e7163ee66861}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "1c0a5d3024aa5f3cff2a945eeb5a4bc7da5a49044839fb1b9acdbf10b9f17b103694f5e3a14c05cf60a99905d274741baca2ccc087c56f62bd1551ee0a862bc6fe9c9311691a4d327f8ee62bcfcc2a3b18052e575ff6e95454bb207e50a06aca"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb, 0x1, "0dac69cd250377"}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x80f}]}}}]}, {0x178, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x168, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "8a35bd7428663d906b233095a372e49d18a880102645a3e11e0017c6a5b6c4f6643be4dd338fc2bcf1411b429651095ec89a3451150a87d57659030faf035c918d9e652c5ea73094f088e5830c1693c1f4cf91c016f662d7d9cb2c4f6432f43948aedcb205489ea93d376fc2cbc078ca51bcba912f6b1a671c380adf04a5e7cee9d8d402434c6d0ae18e418332640d4dc5be91c0a42a790e5753a714565f8c46aee6abcb3a3aad4187c08f04a41d2c2a82de532131079de9d86216a13654ecf7012f01ea52eb8b57265eead8d3b1b6c4ccee5cfb3c1cb031f3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x158, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "11a0efa8f85b61caeef0c011fe08a3edec813dcd28d61126379d0e2d2844cd56e77efbf122fbcfd037c9cbf34ab4b61a692e5c5aef2579947631e1f4735e77ebe5c38d12f2d05aa6c328de8e9c6afc3155e90974f94318d68ef99fe01185a4431f3637478c662f1bf8c7f7bf5b2a79"}, @NFTA_DATA_VALUE={0x5f, 0x1, "62a080ff27d35c3dce2d57ffbb6e92d24fbbf6538982f57960970f6006c867153d7e4370254aaaa4d5be218d89d41efab2ca4d06cd978cf73a085f54f398048f2b0fdb4be5332211b3d6d12dc842c46b971492a03eea0dc7caa208"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "7c19a9624dc233d810d8c5ee719e098b85c7aa3871b6ec1f54e250d61b4fb59e1663b8c893d1dcbf614954991ff86c486b942075079eee57269902f3289e4d2253300c4653bcbab1d7248a6497b4fca2a62f9003921f14c4a1105300b0bfdc"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x84, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x74, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPR={0x44, 0x7, 0x0, 0x1, {{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0xc08}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000010) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000004a80)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x7201d387ea1f7a91}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80000000}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x10) 0s ago: executing program 36 (id=2001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x40800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) kernel console output (not intermixed with test programs): veth0_vlan: entered promiscuous mode [ 74.646433][ T5831] veth1_vlan: entered promiscuous mode [ 74.668777][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.685886][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.699380][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.730008][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.739483][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.777538][ T5837] veth0_macvtap: entered promiscuous mode [ 74.825245][ T5837] veth1_macvtap: entered promiscuous mode [ 74.860613][ T5823] veth0_macvtap: entered promiscuous mode [ 74.913090][ T5823] veth1_macvtap: entered promiscuous mode [ 74.940304][ T5831] veth0_macvtap: entered promiscuous mode [ 74.952568][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.973793][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.992893][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.007997][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.017527][ T5831] veth1_macvtap: entered promiscuous mode [ 75.053401][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.084553][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.092513][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.099935][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.101780][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.127170][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.141810][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.150505][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.159698][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.189180][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.198859][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.219878][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.228645][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.243969][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.261433][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.340600][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.355753][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.383302][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.436755][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.470432][ T5833] veth0_vlan: entered promiscuous mode [ 75.483183][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.487433][ T5833] veth1_vlan: entered promiscuous mode [ 75.499431][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.519784][ T5938] tipc: Started in network mode [ 75.525621][ T5938] tipc: Node identity 82f01d1380f7, cluster identity 4711 [ 75.532921][ T5938] tipc: Enabled bearer , priority 0 [ 75.562361][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.575190][ T5839] Bluetooth: hci0: command tx timeout [ 75.576899][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.580859][ T52] Bluetooth: hci1: command tx timeout [ 75.586267][ T5938] syzkaller0: entered promiscuous mode [ 75.600187][ T5938] syzkaller0: entered allmulticast mode [ 75.630567][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.639531][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.656897][ T52] Bluetooth: hci3: command tx timeout [ 75.662871][ T5839] Bluetooth: hci4: command tx timeout [ 75.662879][ T5830] Bluetooth: hci2: command tx timeout [ 75.688244][ T5938] tipc: Resetting bearer [ 75.726021][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.737218][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.746398][ T5937] tipc: Resetting bearer [ 75.758328][ T5937] tipc: Disabling bearer [ 75.769338][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.792967][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.822720][ T5833] veth0_macvtap: entered promiscuous mode [ 75.902512][ T5833] veth1_macvtap: entered promiscuous mode [ 75.911675][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.944402][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.018570][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.141630][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.149657][ T5952] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 76.243319][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.294565][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.324938][ T5956] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8'. [ 76.353868][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.384807][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.407074][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.580916][ T5956] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 76.683164][ T5973] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10'. [ 76.754519][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.755344][ T5973] Zero length message leads to an empty skb [ 76.773385][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.883801][ T5978] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 76.957697][ T5983] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.021526][ T5987] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 77.030504][ T5989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 77.072676][ T5987] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.098698][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.126138][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.142785][ T5989] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 77.158729][ T5989] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 77.191752][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 77.665686][ T52] Bluetooth: hci1: command tx timeout [ 77.671810][ T52] Bluetooth: hci0: command tx timeout [ 77.747013][ T5839] Bluetooth: hci2: command tx timeout [ 77.752458][ T5839] Bluetooth: hci3: command tx timeout [ 77.758217][ T52] Bluetooth: hci4: command tx timeout [ 77.851674][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 77.870930][ T6010] bridge: RTM_NEWNEIGH with invalid ether address [ 77.910006][ T6024] vlan2: entered allmulticast mode [ 78.058631][ T6026] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.106157][ T6026] netlink: 'syz.3.26': attribute type 19 has an invalid length. [ 78.144338][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 78.259660][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 78.280597][ T152] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.285595][ T6026] netlink: 'syz.3.26': attribute type 19 has an invalid length. [ 78.313483][ T152] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.315054][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 78.339937][ T152] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.370574][ T152] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.625980][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 79.015107][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 79.151992][ T6083] tipc: Can't bind to reserved service type 0 [ 79.239038][ T6088] netlink: 'syz.1.46': attribute type 2 has an invalid length. [ 79.282633][ T6087] netlink: 'syz.0.48': attribute type 30 has an invalid length. [ 79.317719][ T6088] : entered promiscuous mode [ 79.346099][ T6092] warning: `syz.0.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.382587][ T6091] netlink: 'syz.2.50': attribute type 12 has an invalid length. [ 79.949210][ T6117] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 80.132248][ T6127] syzkaller0: entered promiscuous mode [ 80.149173][ T6127] syzkaller0: entered allmulticast mode [ 80.765422][ T6157] netlink: 'syz.4.70': attribute type 9 has an invalid length. [ 82.579906][ T6217] netlink: zone id is out of range [ 82.585184][ T6217] netlink: zone id is out of range [ 82.590368][ T6217] netlink: zone id is out of range [ 82.595806][ T6217] netlink: zone id is out of range [ 82.604301][ T6217] netlink: zone id is out of range [ 82.609440][ T6217] netlink: zone id is out of range [ 82.650136][ T6217] netlink: zone id is out of range [ 82.665323][ T6217] netlink: zone id is out of range [ 82.670471][ T6217] netlink: zone id is out of range [ 82.924216][ T6230] __nla_validate_parse: 8 callbacks suppressed [ 82.924233][ T6230] netlink: 72 bytes leftover after parsing attributes in process `syz.0.88'. [ 83.007501][ T6232] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.89'. [ 83.148732][ T6237] validate_nla: 1 callbacks suppressed [ 83.148748][ T6237] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 83.408468][ T6242] netlink: 232 bytes leftover after parsing attributes in process `syz.4.92'. [ 83.954453][ T6259] Illegal XDP return value 2072395809 on prog (id 20) dev N/A, expect packet loss! [ 84.320219][ T6275] netlink: 52 bytes leftover after parsing attributes in process `syz.4.101'. [ 84.534195][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 84.579511][ T6289] macsec1: entered promiscuous mode [ 84.996226][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 85.037671][ T6303] vlan2: entered allmulticast mode [ 85.063465][ T6303] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 85.096865][ T6309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.107'. [ 85.131044][ T6304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.108'. [ 85.213038][ T6310] netlink: 'syz.4.108': attribute type 2 has an invalid length. [ 85.254274][ T6310] netlink: 119 bytes leftover after parsing attributes in process `syz.4.108'. [ 85.351686][ T6083] net_ratelimit: 19 callbacks suppressed [ 85.351706][ T6083] Set syz1 is full, maxelem 65536 reached [ 85.401622][ T6304] syzkaller1: entered promiscuous mode [ 85.427170][ T6304] syzkaller1: entered allmulticast mode [ 85.462678][ T6319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.111'. [ 85.559836][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.113'. [ 85.725499][ T6336] trusted_key: syz.4.116 sent an empty control message without MSG_MORE. [ 86.720694][ T940] cfg80211: failed to load regulatory.db [ 87.011536][ T5910] IPVS: starting estimator thread 0... [ 87.065997][ T6404] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.126934][ T6400] IPVS: using max 29 ests per chain, 69600 per kthread [ 87.170342][ T6405] tipc: Started in network mode [ 87.176094][ T6405] tipc: Node identity 1288a95a0bd6, cluster identity 4711 [ 87.200512][ T6405] tipc: Enabled bearer , priority 0 [ 87.412176][ T6412] syzkaller0: entered promiscuous mode [ 87.417913][ T6412] syzkaller0: entered allmulticast mode [ 87.459746][ T6390] tipc: Resetting bearer [ 87.520990][ T6390] tipc: Disabling bearer [ 87.736597][ T6443] netlink: 'syz.4.150': attribute type 3 has an invalid length. [ 87.749329][ T6443] netlink: 'syz.4.150': attribute type 2 has an invalid length. [ 87.848721][ T6448] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 87.941355][ T6458] __nla_validate_parse: 76 callbacks suppressed [ 87.941372][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 88.161571][ T6467] netlink: 68 bytes leftover after parsing attributes in process `syz.3.157'. [ 88.207817][ T6473] sctp: [Deprecated]: syz.1.159 (pid 6473) Use of int in maxseg socket option. [ 88.207817][ T6473] Use struct sctp_assoc_value instead [ 88.228606][ T6472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.158'. [ 88.520736][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 88.754456][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 89.041635][ T6520] netlink: 'syz.2.173': attribute type 12 has an invalid length. [ 89.089601][ T6520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.678651][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.723202][ T6554] bond0: (slave rose0): Enslaving as an active interface with an up link [ 89.770080][ T6563] netlink: 'syz.0.184': attribute type 22 has an invalid length. [ 89.809315][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 89.866383][ T152] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.875315][ T152] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.884040][ T152] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.887016][ T6563] netlink: 'syz.0.184': attribute type 22 has an invalid length. [ 89.928361][ T152] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.938070][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 90.008440][ T6575] netlink: 232 bytes leftover after parsing attributes in process `syz.3.187'. [ 90.172903][ T6583] netlink: 'syz.1.188': attribute type 8 has an invalid length. [ 90.553352][ T6600] netlink: 'syz.3.192': attribute type 58 has an invalid length. [ 90.561743][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.192'. [ 91.055106][ T6587] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 92.087548][ T6674] netlink: 'syz.1.206': attribute type 3 has an invalid length. [ 92.339909][ T6681] x_tables: duplicate underflow at hook 2 [ 92.349671][ T6682] tipc: Started in network mode [ 92.409592][ T6682] tipc: Node identity 56e6e6dd0e97, cluster identity 4711 [ 92.444353][ T6682] tipc: Enabled bearer , priority 0 [ 92.478273][ T6687] tipc: Started in network mode [ 92.492898][ T6687] tipc: Node identity 4ad8290575e9, cluster identity 4711 [ 92.526242][ T6687] tipc: Enabled bearer , priority 0 [ 92.579173][ T6682] tipc: Disabling bearer [ 92.628103][ T6693] team_slave_1: entered promiscuous mode [ 92.645313][ T6693] team_slave_1: entered allmulticast mode [ 92.682633][ T6708] tipc: Resetting bearer [ 92.684187][ T6709] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 92.781148][ T6686] tipc: Disabling bearer [ 92.915687][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.951566][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.024403][ T6725] netlink: 'syz.1.220': attribute type 2 has an invalid length. [ 93.049554][ T6725] __nla_validate_parse: 6 callbacks suppressed [ 93.049570][ T6725] netlink: 84 bytes leftover after parsing attributes in process `syz.1.220'. [ 93.097746][ T6723] netlink: 300 bytes leftover after parsing attributes in process `syz.3.219'. [ 93.179504][ T6729] xt_limit: Overflow, try lower: 604147548/4200216962 [ 93.327101][ T6745] Cannot find del_set index 512 as target [ 93.582733][ T6759] ip6erspan0: entered promiscuous mode [ 93.614198][ T6759] ip6erspan0: entered allmulticast mode [ 93.836266][ T6770] tipc: Enabling of bearer rejected, media not registered [ 93.902405][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 93.972048][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.234'. [ 93.989920][ T6778] ip6tnl1: entered promiscuous mode [ 94.102712][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 94.115945][ T6794] Bluetooth: MGMT ver 1.23 [ 94.135867][ T6790] netlink: 'syz.3.235': attribute type 58 has an invalid length. [ 94.172087][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 94.292969][ T6804] netlink: 6 bytes leftover after parsing attributes in process `syz.0.238'. [ 94.342945][ T6806] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.125627][ T6838] erspan0: entered promiscuous mode [ 95.142848][ T6838] erspan0: entered allmulticast mode [ 95.419303][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 95.447088][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 95.456683][ T6860] netlink: 'syz.0.251': attribute type 6 has an invalid length. [ 95.528195][ T6865] netlink: 'syz.4.253': attribute type 2 has an invalid length. [ 95.539633][ T6865] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 95.587347][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 95.613326][ T6860] netlink: 'syz.0.251': attribute type 6 has an invalid length. [ 96.263306][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.860977][ T6950] tipc: Enabling of bearer rejected, media not registered [ 97.180417][ T6967] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 97.376345][ T6980] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 97.428232][ T6977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 97.447402][ T6977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 97.477382][ T6977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 97.526794][ T6977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 97.586596][ T6977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 97.643119][ T6977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 97.681006][ T6977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 97.745984][ T6977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 97.780369][ T6977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 132.786493][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.956152][ T7030] netlink: 'syz.2.287': attribute type 29 has an invalid length. [ 158.000627][ T7030] netlink: 'syz.2.287': attribute type 29 has an invalid length. [ 158.191210][ T7046] netlink: 'syz.0.292': attribute type 13 has an invalid length. [ 158.326684][ T7059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 158.865487][ T7085] __nla_validate_parse: 12 callbacks suppressed [ 158.865506][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 158.902687][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 158.967011][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 159.184678][ T7103] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 159.321535][ T7108] netlink: 5 bytes leftover after parsing attributes in process `syz.3.308'. [ 159.334920][ T7108] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 159.367205][ T7108] 0ªî{X¹¦: entered allmulticast mode [ 159.373032][ T7108] net_ratelimit: 7 callbacks suppressed [ 159.373047][ T7108] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 159.507586][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 159.518692][ T7108] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 159.548329][ T7108] bond2 (unregistering): Released all slaves [ 159.566658][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 159.701904][ T7112] lo: Caught tx_queue_len zero misconfig [ 160.082491][ T7142] netlink: 244 bytes leftover after parsing attributes in process `syz.1.315'. [ 160.119594][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 160.119682][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 160.337826][ T7158] bridge1: entered promiscuous mode [ 160.343080][ T7158] bridge1: entered allmulticast mode [ 160.356451][ T7161] netlink: 'syz.1.320': attribute type 21 has an invalid length. [ 160.396742][ T7167] netlink: 64 bytes leftover after parsing attributes in process `syz.0.321'. [ 160.430559][ T7170] netlink: 'syz.4.324': attribute type 9 has an invalid length. [ 160.514516][ T7166] netlink: 'syz.2.322': attribute type 12 has an invalid length. [ 160.544859][ T7166] netlink: 'syz.2.322': attribute type 29 has an invalid length. [ 160.600461][ T7183] netlink: 'syz.3.323': attribute type 21 has an invalid length. [ 160.637160][ T7183] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 160.746953][ T7171] syzkaller1: entered promiscuous mode [ 160.754807][ T7171] syzkaller1: entered allmulticast mode [ 161.127279][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.592253][ T7219] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 162.444531][ T7264] bridge0: port 3(vlan2) entered blocking state [ 162.459323][ T7264] bridge0: port 3(vlan2) entered disabled state [ 162.465163][ T7276] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.489284][ T7264] vlan2: entered allmulticast mode [ 162.500261][ T7264] bridge0: entered allmulticast mode [ 162.512478][ T7264] vlan2: left allmulticast mode [ 162.528002][ T7264] bridge0: left allmulticast mode [ 162.551249][ T7266] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 162.590424][ T7266] team1: entered promiscuous mode [ 162.596013][ T7266] team1: entered allmulticast mode [ 163.213824][ T7323] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 163.364461][ T7330] netlink: 'syz.2.365': attribute type 32 has an invalid length. [ 163.434310][ T7325] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 163.482468][ T7325] bond1 (unregistering): Released all slaves [ 163.673536][ T7330] bond1: option coupled_control: invalid value (109) [ 163.699133][ T7330] bond1 (unregistering): Released all slaves [ 163.887141][ T7363] wg2: entered promiscuous mode [ 163.897869][ T7366] __nla_validate_parse: 17 callbacks suppressed [ 163.897886][ T7366] netlink: 92 bytes leftover after parsing attributes in process `syz.3.373'. [ 163.903707][ T7363] wg2: entered allmulticast mode [ 164.196036][ T7381] netlink: 'syz.3.377': attribute type 83 has an invalid length. [ 164.597564][ T5901] IPVS: starting estimator thread 0... [ 164.602457][ T7404] IPVS: set_ctl: invalid protocol: 37992 0.0.0.3:28944 [ 164.694512][ T7409] IPVS: using max 31 ests per chain, 74400 per kthread [ 164.900698][ T7426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.387'. [ 164.960607][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 164.969565][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058472c00: rx timeout, send abort [ 164.979389][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058472c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.001969][ T7435] netlink: 144 bytes leftover after parsing attributes in process `syz.1.387'. [ 165.260909][ T7438] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.302856][ T7438] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.360764][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 165.402526][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 165.417585][ T7437] netlink: 'syz.2.388': attribute type 3 has an invalid length. [ 165.429819][ T7451] netlink: 'syz.4.391': attribute type 26 has an invalid length. [ 165.477158][ T7438] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.500018][ T7438] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.667438][ T7438] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.694562][ T7438] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.893878][ T7438] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.923699][ T7438] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.139869][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 166.161689][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.192869][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.238095][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.258832][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.321910][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.353086][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.499839][ T1326] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.509380][ T1326] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.512890][ T7518] netlink: 148 bytes leftover after parsing attributes in process `syz.1.405'. [ 166.519195][ T7519] netlink: 148 bytes leftover after parsing attributes in process `syz.1.405'. [ 166.764380][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.409'. [ 166.822980][ T7539] netlink: 'syz.4.410': attribute type 29 has an invalid length. [ 167.026152][ T7544] syzkaller0: entered promiscuous mode [ 167.036292][ T7544] syzkaller0: entered allmulticast mode [ 167.060860][ T7545] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.505835][ T7581] openvswitch: netlink: IP tunnel dst address not specified [ 167.586573][ T7588] IPVS: length: 239 != 24 [ 167.985029][ T7614] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 168.001658][ T7614] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 168.378548][ T7637] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 168.437355][ T7639] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 168.484842][ T7637] veth1_macvtap: left promiscuous mode [ 168.589099][ T7647] ip6tnl0: Caught tx_queue_len zero misconfig [ 168.826719][ T7664] netlink: 'syz.3.437': attribute type 29 has an invalid length. [ 168.855893][ T7664] netlink: 'syz.3.437': attribute type 29 has an invalid length. [ 168.935043][ T7668] netlink: 'syz.0.439': attribute type 8 has an invalid length. [ 169.225710][ T7681] __nla_validate_parse: 6 callbacks suppressed [ 169.225726][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 169.356551][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 169.525921][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.446'. [ 169.568600][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.446'. [ 169.581205][ T7702] ip6gre1: entered promiscuous mode [ 169.598881][ T7702] ip6gre1: entered allmulticast mode [ 169.628839][ T7709] netlink: 80 bytes leftover after parsing attributes in process `syz.4.449'. [ 169.643056][ T7705] netlink: 56 bytes leftover after parsing attributes in process `syz.1.448'. [ 169.840299][ T7725] openvswitch: netlink: Missing valid actions attribute. [ 169.863947][ T7725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.886349][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.4.454'. [ 170.056341][ T7746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.460'. [ 170.105848][ T7746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.460'. [ 170.238362][ T7758] netlink: 112 bytes leftover after parsing attributes in process `syz.0.462'. [ 170.568713][ T7778] netlink: 'syz.1.467': attribute type 2 has an invalid length. [ 170.615741][ T7780] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.135540][ T7810] geneve2: entered promiscuous mode [ 171.357861][ T7826] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 171.429402][ T7826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.595988][ T7832] bond2: (slave veth3): Enslaving as an active interface with a down link [ 171.638322][ T7826] veth5: entered promiscuous mode [ 171.645859][ T7826] bond2: (slave veth5): Enslaving as an active interface with a down link [ 171.661768][ T7837] vlan2: entered allmulticast mode [ 171.667679][ T7837] bond2: entered allmulticast mode [ 171.674638][ T7837] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 171.735541][ T7848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.971210][ T7861] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 171.983741][ T7861] bond1 (unregistering): Released all slaves [ 172.027063][ T7866] gretap0: entered promiscuous mode [ 172.032532][ T7866] vlan2: entered promiscuous mode [ 172.223277][ T7878] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 172.238700][ T7878] netlink: 'syz.3.492': attribute type 4 has an invalid length. [ 172.424768][ T7889] syzkaller0: entered promiscuous mode [ 172.452651][ T7889] syzkaller0: entered allmulticast mode [ 172.535764][ T7900] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 173.743151][ T7910] sit0: entered promiscuous mode [ 173.756696][ T7910] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 173.767526][ T7911] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 173.959782][ T7942] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 173.963972][ T7941] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 174.008183][ T7942] team0: Port device dummy0 added [ 174.038338][ T7944] netlink: 'syz.3.506': attribute type 1 has an invalid length. [ 174.161229][ T7949] netlink: 'syz.0.508': attribute type 58 has an invalid length. [ 174.180404][ T7951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.191193][ T7951] bond3: (slave bond4): making interface the new active one [ 174.199756][ T7951] bond3: (slave bond4): Enslaving as an active interface with an up link [ 174.220337][ T7944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.266391][ T7957] __nla_validate_parse: 19 callbacks suppressed [ 174.266408][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 174.330212][ T7964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.512'. [ 174.532672][ T7967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.561280][ T7971] netlink: 'syz.0.515': attribute type 4 has an invalid length. [ 174.652939][ T7967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.709834][ T7985] netlink: 240 bytes leftover after parsing attributes in process `syz.0.518'. [ 174.860269][ T7967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.958583][ T7967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.277064][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.361144][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.448271][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.522'. [ 175.466560][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.500998][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.527797][ T8001] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 175.583275][ T7999] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 175.614412][ T7999] netlink: 224 bytes leftover after parsing attributes in process `syz.4.523'. [ 175.620091][ T8006] netlink: 'syz.3.524': attribute type 32 has an invalid length. [ 175.644557][ T7998] can: request_module (can-proto-0) failed. [ 175.650863][ T8005] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 175.683428][ T8005] netlink: 224 bytes leftover after parsing attributes in process `syz.4.523'. [ 176.586214][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 177.013051][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.027249][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.108738][ T8038] ip6gre1: left promiscuous mode [ 177.113812][ T8038] ip6gre1: left allmulticast mode [ 177.122976][ T8051] tipc: Enabled bearer , priority 10 [ 177.130179][ T60] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.134611][ T8052] netlink: 'syz.4.532': attribute type 11 has an invalid length. [ 177.148194][ T8052] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.532'. [ 177.149513][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.168593][ T60] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.177543][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.196788][ T60] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.216708][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.245248][ T60] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.293664][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.295792][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 177.601421][ T8080] tipc: Enabling of bearer rejected, failed to enable media [ 178.125518][ T10] tipc: Node number set to 34020627 [ 178.141655][ T8116] IPVS: nq: FWM 3 0x00000003 - no destination available [ 178.150280][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 178.158464][ T8116] netlink: 96 bytes leftover after parsing attributes in process `syz.3.553'. [ 178.177289][ T5901] IPVS: starting estimator thread 0... [ 178.183202][ T8116] 8021q: VLANs not supported on sit0 [ 178.274174][ T8118] IPVS: using max 26 ests per chain, 62400 per kthread [ 178.545554][ T8130] bond5: option lp_interval: invalid value (0) [ 178.563533][ T8130] bond5: option lp_interval: allowed values 1 - 2147483647 [ 178.580696][ T8130] bond5 (unregistering): Released all slaves [ 178.739998][ T8144] syzkaller0: entered promiscuous mode [ 178.746285][ T8144] syzkaller0: entered allmulticast mode [ 178.753712][ T8142] tipc: Enabling of bearer rejected, already enabled [ 178.772068][ T8156] pimreg: entered allmulticast mode [ 178.956285][ T8169] lo: entered allmulticast mode [ 179.026932][ T8173] netlink: 'syz.1.566': attribute type 3 has an invalid length. [ 179.179429][ T8180] netem: unknown loss type 0 [ 179.197096][ T8180] netem: change failed [ 179.307695][ T8191] tipc: Enabled bearer , priority 0 [ 179.316142][ T8191] syzkaller0: entered promiscuous mode [ 179.321633][ T8191] syzkaller0: entered allmulticast mode [ 179.330899][ T8191] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.456104][ T8187] scsi_nl_rcv_msg: discarding partial skb [ 179.598034][ T8203] netlink: 'syz.0.576': attribute type 11 has an invalid length. [ 180.447388][ T8196] tipc: Resetting bearer [ 180.465159][ T8190] tipc: Resetting bearer [ 180.540457][ T8190] tipc: Disabling bearer [ 180.632935][ T8208] netlink: 'syz.0.577': attribute type 64 has an invalid length. [ 180.640909][ T8208] __nla_validate_parse: 1 callbacks suppressed [ 180.640924][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.577'. [ 180.767347][ T8219] openvswitch: netlink: Message has 592 unknown bytes. [ 180.787992][ T8219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.835328][ T8223] netlink: 184 bytes leftover after parsing attributes in process `syz.2.583'. [ 180.848806][ T8219] netlink: 'syz.1.581': attribute type 10 has an invalid length. [ 180.917914][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.952635][ T8219] bridge_slave_1: left allmulticast mode [ 180.961888][ T8219] bridge_slave_1: left promiscuous mode [ 180.968028][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.987304][ T8233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 180.991651][ T8219] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 180.996917][ T8233] netlink: 'syz.2.587': attribute type 7 has an invalid length. [ 181.013878][ T8233] netlink: 'syz.2.587': attribute type 8 has an invalid length. [ 181.083718][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 181.171645][ T8245] syzkaller0: entered promiscuous mode [ 181.177826][ T8245] syzkaller0: entered allmulticast mode [ 181.225129][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.588'. [ 181.630069][ T8275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.599'. [ 181.735915][ T8281] veth0: entered promiscuous mode [ 181.749631][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 181.816228][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 182.438090][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 182.803385][ T8283] ip6erspan0: entered promiscuous mode [ 182.809285][ T8283] ip6erspan0: entered allmulticast mode [ 182.891330][ T8280] veth0: left promiscuous mode [ 182.957766][ T8306] syzkaller1: entered promiscuous mode [ 182.964219][ T8306] syzkaller1: entered allmulticast mode [ 183.057855][ T8311] xt_ecn: cannot match TCP bits for non-tcp packets [ 183.111023][ T8314] tipc: Enabled bearer , priority 0 [ 183.154909][ T8314] syzkaller0: entered promiscuous mode [ 183.160416][ T8314] syzkaller0: entered allmulticast mode [ 183.230782][ T8314] tipc: Resetting bearer [ 183.249893][ T8325] tipc: Enabling of bearer rejected, already enabled [ 183.274255][ T8323] netlink: 10 bytes leftover after parsing attributes in process `syz.4.613'. [ 183.315069][ T8323] pim6reg: entered allmulticast mode [ 183.321715][ T8325] tipc: Resetting bearer [ 183.345847][ T8325] tipc: Disabling bearer [ 183.357034][ T8323] pim6reg: left allmulticast mode [ 183.431904][ T8344] x_tables: duplicate underflow at hook 1 [ 183.681769][ T8362] erspan0: entered promiscuous mode [ 183.687229][ T8362] vlan2: entered promiscuous mode [ 184.291467][ T8376] nbd: couldn't find device at index 61440 [ 184.402584][ T8386] syzkaller1: entered promiscuous mode [ 184.410782][ T8386] syzkaller1: entered allmulticast mode [ 184.465124][ T8389] tipc: Enabled bearer , priority 0 [ 184.559395][ T8392] syzkaller0: entered promiscuous mode [ 184.572495][ T8392] syzkaller0: entered allmulticast mode [ 184.903586][ T8400] tipc: Resetting bearer [ 185.036290][ T8400] tipc: Disabling bearer [ 185.053641][ T8408] syzkaller1: entered promiscuous mode [ 185.088880][ T8408] syzkaller1: entered allmulticast mode [ 185.339953][ T8435] gtp0: entered promiscuous mode [ 185.345340][ T8435] gtp0: entered allmulticast mode [ 185.441964][ T8440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.476672][ T8439] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 185.512044][ T8439] team0: Port device geneve0 added [ 185.519083][ T4492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.535769][ T4492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.564169][ T4492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.594137][ T4492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.684410][ T8456] __nla_validate_parse: 8 callbacks suppressed [ 185.684427][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 185.780898][ T8455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.646'. [ 185.781539][ T8454] IPVS: Unknown mcast interface:  [ 185.900501][ T8467] netlink: 'syz.4.648': attribute type 2 has an invalid length. [ 186.275792][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 186.633469][ T8501] macvlan0: entered promiscuous mode [ 186.640412][ T8501] batadv0: entered promiscuous mode [ 186.647483][ T8501] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 186.659296][ T8501] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 186.670573][ T8501] hsr1: entered allmulticast mode [ 186.675926][ T8501] macvlan0: entered allmulticast mode [ 186.681588][ T8501] batadv0: entered allmulticast mode [ 186.717734][ T8501] macvlan0: left promiscuous mode [ 186.730454][ T8501] batadv0: left promiscuous mode [ 186.947871][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 186.959067][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 186.968862][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 187.399821][ T8536] netlink: 'syz.0.668': attribute type 13 has an invalid length. [ 187.592343][ T8543] netlink: 220 bytes leftover after parsing attributes in process `syz.0.673'. [ 187.605189][ T8544] netlink: 220 bytes leftover after parsing attributes in process `syz.0.673'. [ 187.898446][ T8562] veth1: Caught tx_queue_len zero misconfig [ 187.916939][ T8567] syzkaller1: entered allmulticast mode [ 188.007616][ T8574] syzkaller1: entered promiscuous mode [ 188.013121][ T8574] syzkaller1: entered allmulticast mode [ 188.067634][ T8576] netlink: 48 bytes leftover after parsing attributes in process `syz.3.681'. [ 188.105430][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.681'. [ 188.619759][ T8613] tipc: Enabled bearer , priority 0 [ 188.661647][ T8608] tipc: Enabling of bearer rejected, already enabled [ 188.715286][ T8613] syzkaller0: entered promiscuous mode [ 188.721242][ T8613] syzkaller0: entered allmulticast mode [ 188.811480][ T8608] tipc: Resetting bearer [ 188.869029][ T8606] tipc: Resetting bearer [ 188.936310][ T8606] tipc: Disabling bearer [ 189.332168][ T8667] tipc: Enabled bearer , priority 0 [ 189.355501][ T8667] syzkaller0: entered promiscuous mode [ 189.371783][ T8667] syzkaller0: entered allmulticast mode [ 189.600975][ T8667] tipc: Resetting bearer [ 189.677411][ T8667] tipc: Disabling bearer [ 189.837323][ T8706] tipc: Enabled bearer , priority 0 [ 189.925740][ T8709] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 189.939059][ T8709] bond1 (unregistering): Released all slaves [ 189.981037][ T8706] tipc: Disabling bearer [ 190.172215][ T8730] netlink: 'syz.2.722': attribute type 1 has an invalid length. [ 190.420736][ T8752] syzkaller0: entered promiscuous mode [ 190.447984][ T8752] syzkaller0: entered allmulticast mode [ 190.540893][ T8753] netlink: 'syz.2.729': attribute type 13 has an invalid length. [ 190.542166][ T8760] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 190.643011][ T8763] 8021q: VLANs not supported on vxcan1 [ 190.996884][ T8770] netlink: 'syz.2.735': attribute type 11 has an invalid length. [ 191.021250][ T8770] __nla_validate_parse: 5 callbacks suppressed [ 191.021265][ T8770] netlink: 224 bytes leftover after parsing attributes in process `syz.2.735'. [ 191.159940][ T8776] netlink: 'syz.3.736': attribute type 16 has an invalid length. [ 191.194477][ T8777] netlink: 'syz.3.736': attribute type 16 has an invalid length. [ 191.194546][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.737'. [ 191.209633][ T8776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.736'. [ 191.223280][ T8777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.736'. [ 191.274456][ T8783] netlink: 'syz.0.738': attribute type 5 has an invalid length. [ 191.680557][ T8807] bond1: entered promiscuous mode [ 191.685912][ T8807] bond1: entered allmulticast mode [ 191.691513][ T8807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.052194][ T8828] netlink: 144 bytes leftover after parsing attributes in process `syz.2.754'. [ 192.096873][ T8836] sctp: [Deprecated]: syz.1.757 (pid 8836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.096873][ T8836] Use struct sctp_sack_info instead [ 194.222976][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.299519][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 196.301758][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 196.306090][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 196.313880][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 255.455653][ T8865] IPVS: ip_vs_add_dest(): server weight less than zero [ 255.462790][ T8865] netlink: 236 bytes leftover after parsing attributes in process `syz.1.760'. [ 255.562035][ T8873] rdma_op ffff8880570031f0 conn xmit_rdma 0000000000000000 [ 255.659754][ T8876] netlink: 36 bytes leftover after parsing attributes in process `syz.3.767'. [ 255.660333][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.669434][ T8876] bridge0: entered promiscuous mode [ 255.689012][ T8877] x_tables: duplicate entry at hook 2 [ 255.776650][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.768'. [ 255.948718][ T8900] ipt_rpfilter: unknown options [ 255.973051][ T8903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.772'. [ 256.032223][ T8903] netlink: 5 bytes leftover after parsing attributes in process `syz.4.772'. [ 256.058798][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 256.235926][ T8916] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 256.297877][ T8916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.305929][ T8918] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 256.336125][ T8916] vlan2: entered allmulticast mode [ 256.352829][ T8916] bond1: entered allmulticast mode [ 256.427796][ T8916] bond1: (slave gretap1): making interface the new active one [ 256.484395][ T8916] gretap1: entered allmulticast mode [ 256.492502][ T8916] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 256.519154][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'. [ 256.548824][ T8938] netlink: 108 bytes leftover after parsing attributes in process `syz.4.783'. [ 256.564496][ T8941] netlink: 108 bytes leftover after parsing attributes in process `syz.4.783'. [ 256.600246][ T8916] syz.2.777 (8916) used greatest stack depth: 18536 bytes left [ 256.655099][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.784'. [ 256.696670][ T8947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.075308][ T8975] netlink: 'syz.3.791': attribute type 33 has an invalid length. [ 257.204416][ T8985] netlink: 'syz.1.793': attribute type 12 has an invalid length. [ 257.351784][ T8991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.636653][ T9081] Dead loop on virtual device ip6_vti0, fix it urgently! [ 258.677337][ T9081] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 259.038316][ T9106] team0: Device wireguard0 is of different type [ 259.442559][ T9133] bond2: Unable to set up delay as MII monitoring is disabled [ 259.460200][ T9133] bond2 (unregistering): Released all slaves [ 259.917623][ T9153] ip6tnl0: Caught tx_queue_len zero misconfig [ 260.000776][ T9160] tipc: Enabling of bearer rejected, media not registered [ 260.317198][ T9185] hsr0 speed is unknown, defaulting to 1000 [ 260.327645][ T9185] hsr0 speed is unknown, defaulting to 1000 [ 260.338755][ T9185] hsr0 speed is unknown, defaulting to 1000 [ 260.357131][ T9185] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 260.388872][ T9185] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.470410][ T9185] hsr0 speed is unknown, defaulting to 1000 [ 260.482384][ T9185] hsr0 speed is unknown, defaulting to 1000 [ 260.492599][ T9185] hsr0 speed is unknown, defaulting to 1000 [ 260.500960][ T9185] hsr0 speed is unknown, defaulting to 1000 [ 260.509053][ T9185] hsr0 speed is unknown, defaulting to 1000 [ 260.592156][ T9191] sctp: [Deprecated]: syz.3.859 (pid 9191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.592156][ T9191] Use struct sctp_sack_info instead [ 260.620679][ T9194] SET target dimension over the limit! [ 260.627468][ T9194] syz.1.860: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.642430][ T9194] CPU: 1 UID: 0 PID: 9194 Comm: syz.1.860 Not tainted syzkaller #0 PREEMPT(full) [ 260.642444][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.642456][ T9194] Call Trace: [ 260.642461][ T9194] [ 260.642466][ T9194] dump_stack_lvl+0x189/0x250 [ 260.642494][ T9194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.642507][ T9194] ? __pfx__printk+0x10/0x10 [ 260.642517][ T9194] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.642531][ T9194] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.642544][ T9194] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 260.642558][ T9194] warn_alloc+0x214/0x310 [ 260.642573][ T9194] ? stack_depot_save_flags+0x40/0x860 [ 260.642589][ T9194] ? __pfx_warn_alloc+0x10/0x10 [ 260.642604][ T9194] ? kasan_save_track+0x3e/0x80 [ 260.642616][ T9194] ? __kasan_kmalloc+0x93/0xb0 [ 260.642630][ T9194] ? xsk_setsockopt+0x4dc/0x8d0 [ 260.642641][ T9194] ? do_sock_setsockopt+0x17c/0x1b0 [ 260.642650][ T9194] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 260.642658][ T9194] ? do_syscall_64+0xfa/0xfa0 [ 260.642670][ T9194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.642684][ T9194] __vmalloc_node_range_noprof+0x125/0x12d0 [ 260.642724][ T9194] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.642751][ T9194] ? __kasan_kmalloc+0x93/0xb0 [ 260.642779][ T9194] vmalloc_user_noprof+0xad/0xf0 [ 260.642803][ T9194] ? xskq_create+0xbf/0x170 [ 260.642819][ T9194] xskq_create+0xbf/0x170 [ 260.642832][ T9194] xsk_init_queue+0xb0/0x110 [ 260.642845][ T9194] xsk_setsockopt+0x4dc/0x8d0 [ 260.642858][ T9194] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.642871][ T9194] ? __pfx_aa_sk_perm+0x10/0x10 [ 260.642885][ T9194] ? aa_sock_opt_perm+0xff/0x1b0 [ 260.642901][ T9194] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 260.642918][ T9194] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.642931][ T9194] do_sock_setsockopt+0x17c/0x1b0 [ 260.642952][ T9194] __x64_sys_setsockopt+0x13f/0x1b0 [ 260.642974][ T9194] do_syscall_64+0xfa/0xfa0 [ 260.642996][ T9194] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.643014][ T9194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.643023][ T9194] ? clear_bhb_loop+0x60/0xb0 [ 260.643034][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.643044][ T9194] RIP: 0033:0x7f9780f8f6c9 [ 260.643061][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.643069][ T9194] RSP: 002b:00007f9781db1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.643080][ T9194] RAX: ffffffffffffffda RBX: 00007f97811e5fa0 RCX: 00007f9780f8f6c9 [ 260.643087][ T9194] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 260.643093][ T9194] RBP: 00007f9781011f91 R08: 0000000000000004 R09: 0000000000000000 [ 260.643099][ T9194] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.643104][ T9194] R13: 00007f97811e6038 R14: 00007f97811e5fa0 R15: 00007fff8398c558 [ 260.643120][ T9194] [ 260.643127][ T9194] Mem-Info: [ 260.705082][ T9197] SET target dimension over the limit! [ 260.707749][ T9194] active_anon:8474 inactive_anon:0 isolated_anon:0 [ 260.707749][ T9194] active_file:2501 inactive_file:39903 isolated_file:0 [ 260.707749][ T9194] unevictable:768 dirty:47 writeback:0 [ 260.707749][ T9194] slab_reclaimable:10535 slab_unreclaimable:98060 [ 260.707749][ T9194] mapped:32915 shmem:4208 pagetables:1124 [ 260.707749][ T9194] sec_pagetables:0 bounce:0 [ 260.707749][ T9194] kernel_misc_reclaimable:0 [ 260.707749][ T9194] free:1330976 free_pcp:12566 free_cma:0 [ 260.990494][ T9194] Node 0 active_anon:33900kB inactive_anon:0kB active_file:10004kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131700kB dirty:188kB writeback:0kB shmem:15296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12348kB pagetables:4444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.054301][ T9194] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.111330][ T9194] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.146081][ T9194] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 261.153843][ T9194] Node 0 DMA32 free:1417276kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28792kB inactive_anon:0kB active_file:10004kB inactive_file:159420kB unevictable:1536kB writepending:192kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:40024kB local_pcp:18604kB free_cma:0kB [ 261.191052][ T9194] lowmem_reserve[]: 0 0 0 0 0 [ 261.196384][ T9194] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.227208][ T9194] lowmem_reserve[]: 0 0 0 0 0 [ 261.232958][ T9194] Node 1 Normal free:3891320kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16516kB local_pcp:10532kB free_cma:0kB [ 261.271152][ T9194] lowmem_reserve[]: 0 0 0 0 0 [ 261.276993][ T9194] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.319913][ T9194] Node 0 DMA32: 1587*4kB (UM) 957*8kB (UME) 389*16kB (UME) 318*32kB (UME) 150*64kB (UM) 25*128kB (UM) 45*256kB (UM) 31*512kB (UM) 9*1024kB (UM) 3*2048kB (U) 326*4096kB (UM) = 1421252kB [ 261.337353][ T9206] __nla_validate_parse: 11 callbacks suppressed [ 261.337370][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 261.353999][ T9206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.862'. [ 261.381908][ T9194] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 261.409751][ T9194] Node 1 Normal: 194*4kB (UME) 38*8kB (UME) 34*16kB (UME) 91*32kB (UME) 27*64kB (UME) 10*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891320kB [ 261.475720][ T9194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.541312][ T9194] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.604336][ T9194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.628450][ T9194] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.638991][ T9194] 43780 total pagecache pages [ 261.644049][ T9194] 0 pages in swap cache [ 261.649325][ T9194] Free swap = 124996kB [ 261.653483][ T9194] Total swap = 124996kB [ 261.710278][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 261.715267][ T9194] 2097051 pages RAM [ 261.723237][ T9229] netlink: 1 bytes leftover after parsing attributes in process `syz.3.869'. [ 261.732398][ T9194] 0 pages HighMem/MovableOnly [ 261.741146][ T9194] 424117 pages reserved [ 261.779554][ T9194] 0 pages cma reserved [ 262.077539][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 262.088295][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'. [ 262.708590][ T9324] netlink: 'syz.3.881': attribute type 3 has an invalid length. [ 262.738886][ T9328] bond0: Caught tx_queue_len zero misconfig [ 262.835317][ T9332] netlink: 'syz.1.883': attribute type 29 has an invalid length. [ 262.866525][ T9332] netlink: 'syz.1.883': attribute type 29 has an invalid length. [ 263.004589][ T9343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.886'. [ 263.145264][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 263.180293][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 263.209955][ T9359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.890'. [ 263.236938][ T9353] bridge0: port 2(vlan2) entered blocking state [ 263.250180][ T9353] bridge0: port 2(vlan2) entered disabled state [ 263.257703][ T9353] vlan2: entered allmulticast mode [ 263.263046][ T9353] bridge0: entered allmulticast mode [ 263.272679][ T9353] vlan2: left allmulticast mode [ 263.278689][ T9353] bridge0: left allmulticast mode [ 263.481555][ T9370] xt_cgroup: invalid path, errno=-2 [ 263.514032][ T9375] tunl0: Caught tx_queue_len zero misconfig [ 263.699084][ T9390] bridge3: entered promiscuous mode [ 263.705729][ T9390] bridge3: entered allmulticast mode [ 263.953112][ T9408] netlink: 'syz.1.906': attribute type 23 has an invalid length. [ 263.973561][ T9415] xt_ecn: cannot match TCP bits for non-tcp packets [ 264.395764][ T9444] team0: Caught tx_queue_len zero misconfig [ 264.597312][ T9285] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.618883][ T9285] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.638647][ T9285] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.657099][ T9285] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.051846][ T9478] delete_channel: no stack [ 265.098445][ T9477] hsr0 speed is unknown, defaulting to 1000 [ 265.352251][ T9498] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 265.454226][ T9502] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 265.512383][ T9504] bridge2: entered promiscuous mode [ 265.519261][ T9504] bridge2: entered allmulticast mode [ 266.904606][ T9567] Bluetooth: MGMT ver 1.23 [ 267.581397][ T9582] syzkaller0: entered promiscuous mode [ 267.607445][ T9582] syzkaller0: entered allmulticast mode [ 267.743007][ T9587] lo: Caught tx_queue_len zero misconfig [ 267.773067][ T9592] __nla_validate_parse: 7 callbacks suppressed [ 267.773083][ T9592] netlink: 76 bytes leftover after parsing attributes in process `syz.3.961'. [ 267.847502][ T9595] netlink: 76 bytes leftover after parsing attributes in process `syz.3.961'. [ 267.866963][ T9596] netlink: 68 bytes leftover after parsing attributes in process `syz.4.963'. [ 267.881502][ T9592] netlink: 64 bytes leftover after parsing attributes in process `syz.3.961'. [ 267.896094][ T9598] netlink: 'syz.0.964': attribute type 10 has an invalid length. [ 267.905772][ T9592] block nbd0: not configured, cannot reconfigure [ 267.906451][ T9600] netlink: 68 bytes leftover after parsing attributes in process `syz.4.963'. [ 267.921592][ T9598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.964'. [ 267.940713][ T9598] batadv0: entered promiscuous mode [ 267.948375][ T9598] bridge0: port 3(batadv0) entered blocking state [ 267.959444][ T9598] bridge0: port 3(batadv0) entered disabled state [ 268.026762][ T9281] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 268.036380][ T9281] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 268.274832][ T9624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.973'. [ 268.308349][ T9618] bond5: entered allmulticast mode [ 268.314053][ T9618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.322358][ T9618] bridge0: port 3(bond5) entered blocking state [ 268.329167][ T9618] bridge0: port 3(bond5) entered disabled state [ 268.338537][ T9618] bond5: entered promiscuous mode [ 268.339543][ T9624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.973'. [ 268.345231][ T9618] bridge0: port 3(bond5) entered blocking state [ 268.359036][ T9618] bridge0: port 3(bond5) entered forwarding state [ 268.692805][ T9646] sctp: [Deprecated]: syz.4.981 (pid 9646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.692805][ T9646] Use struct sctp_sack_info instead [ 268.695910][ T9642] tipc: Enabled bearer , priority 0 [ 268.730168][ T9646] x_tables: duplicate underflow at hook 2 [ 268.734835][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 268.737105][ T9648] x_tables: duplicate underflow at hook 2 [ 268.756599][ T9285] bridge0: port 3(bond5) entered disabled state [ 268.765613][ T9642] syzkaller0: entered promiscuous mode [ 268.771106][ T9642] syzkaller0: entered allmulticast mode [ 268.847336][ T9649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.895430][ T9642] tipc: Resetting bearer [ 268.964349][ T9641] tipc: Resetting bearer [ 269.070495][ T9641] tipc: Disabling bearer [ 269.150119][ T9667] dvmrp0: entered allmulticast mode [ 269.167837][ T9667] dvmrp0: left allmulticast mode [ 269.289297][ T9679] nbd: must specify a device to reconfigure [ 269.727541][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1002'. [ 269.932927][ T9716] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 270.014019][ T9716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.101808][ T9722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.116284][ T9722] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 270.129297][ T9722] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 270.169501][ T9731] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 270.228281][ T9716] veth3: entered promiscuous mode [ 270.239108][ T9716] bond2: (slave veth3): Enslaving as an active interface with a down link [ 270.249221][ T9730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.788184][ T9753] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 270.827982][ T9747] tipc: Enabled bearer , priority 0 [ 270.835773][ T9747] syzkaller0: entered promiscuous mode [ 270.841682][ T9747] syzkaller0: entered allmulticast mode [ 270.953652][ T9767] tipc: Resetting bearer [ 270.991487][ T9767] tipc: Disabling bearer [ 271.039978][ T9772] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 272.636296][ T9852] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 272.832672][ T9862] __nla_validate_parse: 11 callbacks suppressed [ 272.832691][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 272.887227][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 272.917807][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 273.253687][ T9881] lo: Caught tx_queue_len zero misconfig [ 273.299551][ T9876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1053'. [ 273.739890][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 273.778443][ T9913] bond0: (slave bond_slave_1): Releasing backup interface [ 273.848765][ T9915] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 273.856248][ T9915] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.998245][ T9918] syzkaller0: entered promiscuous mode [ 274.014552][ T9918] syzkaller0: entered allmulticast mode [ 274.866884][ T9944] netlink: 'syz.1.1072': attribute type 2 has an invalid length. [ 275.232628][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 276.536917][ T9318] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.582870][ T9318] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.617702][ T9318] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.654285][ T9318] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.710625][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1088'. [ 276.791189][ T9998] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 276.985388][T10020] macvtap1: entered promiscuous mode [ 276.994661][T10020] vlan0: entered promiscuous mode [ 277.000732][T10020] macvtap1: entered allmulticast mode [ 277.012588][T10020] vlan0: entered allmulticast mode [ 277.019010][T10020] veth0_vlan: entered allmulticast mode [ 277.092159][T10025] macvtap2: entered promiscuous mode [ 277.097892][T10025] macvtap2: entered allmulticast mode [ 277.221577][T10034] tipc: Enabled bearer , priority 0 [ 277.241265][T10034] netlink: 'syz.0.1098': attribute type 29 has an invalid length. [ 277.264038][T10034] tipc: Resetting bearer [ 277.317395][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 277.368627][T10033] tipc: Disabling bearer [ 277.382202][T10044] netlink: 'syz.2.1103': attribute type 39 has an invalid length. [ 277.662044][T10062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1110'. [ 277.791034][T10062] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1110'. [ 277.820337][T10062] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 277.862274][T10072] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1112'. [ 277.871866][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 277.892108][T10062] 0ªî{X¹¦: entered allmulticast mode [ 277.898630][T10062] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 277.905973][T10072] netlink: 488 bytes leftover after parsing attributes in process `syz.3.1112'. [ 278.014196][T10073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.097420][T10080] netlink: 'syz.3.1116': attribute type 2 has an invalid length. [ 278.183526][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 278.249015][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 278.262604][T10088] netlink: 'syz.2.1120': attribute type 5 has an invalid length. [ 278.271082][T10088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1120'. [ 278.288942][T10088] geneve3: entered promiscuous mode [ 278.294674][T10088] geneve3: entered allmulticast mode [ 278.301535][ T9285] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 278.324582][ T9285] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 278.344395][ T9285] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 278.353127][ T9285] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 278.440205][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 278.486066][ T9318] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 278.498084][T10102] netlink: 'syz.0.1119': attribute type 11 has an invalid length. [ 278.507177][T10102] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.1119'. [ 278.643192][T10107] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 278.651987][T10107] team0: Device macvtap1 is already an upper device of the team interface [ 278.685550][T10110] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1124'. [ 278.700634][T10112] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.807574][T10115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1124'. [ 278.891967][T10123] tipc: Enabling of bearer rejected, already enabled [ 278.979309][T10127] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 279.137093][T10132] bridge5: entered promiscuous mode [ 279.145349][T10132] bridge5: entered allmulticast mode [ 279.183496][T10136] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 279.210840][T10136] netlink: 'syz.3.1134': attribute type 3 has an invalid length. [ 279.235678][T10136] NCSI netlink: No device for ifindex 813332851 [ 279.400927][T10155] x_tables: duplicate underflow at hook 3 [ 280.180703][T10208] netlink: 'syz.0.1148': attribute type 12 has an invalid length. [ 280.197077][T10209] netlink: 'syz.1.1146': attribute type 13 has an invalid length. [ 280.389401][T10211] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 280.398204][T10212] lo: Caught tx_queue_len zero misconfig [ 280.438718][ T5910] hsr0 speed is unknown, defaulting to 1000 [ 280.568956][T10223] tls_set_device_offload: netdev not found [ 280.579292][T10227] xt_bpf: check failed: parse error [ 280.820884][T10242] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 281.190354][T10262] syzkaller0: entered promiscuous mode [ 281.212558][T10262] syzkaller0: entered allmulticast mode [ 281.239095][T10261] tipc: Enabled bearer , priority 0 [ 281.301505][T10270] tipc: Resetting bearer [ 281.329488][T10270] tipc: Disabling bearer [ 281.598611][T10289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.912912][ T9283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.928349][ T9283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.961258][T10308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.010139][T10310] mac80211_hwsim hwsim9 wlan1: Caught tx_queue_len zero misconfig [ 282.022868][T10310] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.193049][T10316] netlink: 'syz.0.1187': attribute type 10 has an invalid length. [ 282.273976][T10316] syzkaller0: entered promiscuous mode [ 282.286475][T10316] syzkaller0: entered allmulticast mode [ 282.550307][T10337] nbd: must specify at least one socket [ 282.591315][T10342] x_tables: duplicate underflow at hook 1 [ 282.721953][T10346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.842931][T10357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.993655][T10369] tipc: Enabled bearer , priority 0 [ 283.001509][T10369] syzkaller0: entered promiscuous mode [ 283.007276][T10369] syzkaller0: entered allmulticast mode [ 283.025797][T10369] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 283.052072][T10368] tipc: Resetting bearer [ 283.069833][T10368] tipc: Disabling bearer [ 283.318160][T10387] tap0: tun_chr_ioctl cmd 1074025677 [ 283.345229][T10387] tap0: linktype set to 65534 [ 283.392692][T10387] tap0: tun_chr_ioctl cmd 2148553947 [ 283.406391][T10387] tap0: tun_chr_ioctl cmd 2165085029 [ 283.821784][T10425] __nla_validate_parse: 22 callbacks suppressed [ 283.821802][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 283.897004][T10428] netlink: 'syz.3.1217': attribute type 7 has an invalid length. [ 283.905488][T10425] chnl_net:caif_netlink_parms(): no params data found [ 284.033981][T10431] netlink: 'syz.0.1218': attribute type 2 has an invalid length. [ 284.068498][T10431] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 284.095330][T10434] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003 [ 284.103784][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1221'. [ 284.139104][T10436] bond0: entered promiscuous mode [ 284.164173][T10436] bond_slave_0: entered promiscuous mode [ 284.171303][T10436] bond_slave_1: entered promiscuous mode [ 284.197794][T10436] batadv0: entered promiscuous mode [ 284.206587][T10436] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 284.236061][T10436] bond0: left promiscuous mode [ 284.241067][T10436] bond_slave_0: left promiscuous mode [ 284.252438][T10436] bond_slave_1: left promiscuous mode [ 284.259343][T10436] batadv0: left promiscuous mode [ 284.389686][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1227'. [ 284.508602][T10454] netlink: 'syz.1.1229': attribute type 21 has an invalid length. [ 284.510405][T10461] smc: net device gre0 applied user defined pnetid SYZ1 [ 284.524339][T10454] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1229'. [ 284.535481][T10458] smc: net device gre0 erased user defined pnetid SYZ1 [ 284.601061][T10463] netlink: ct family unspecified [ 284.607428][T10463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.791215][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 285.072934][T10496] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 285.106309][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'. [ 285.213777][T10506] syzkaller0: entered promiscuous mode [ 285.231767][T10506] syzkaller0: entered allmulticast mode [ 285.484594][T10525] tipc: Enabling of bearer rejected, failed to enable media [ 285.596357][T10533] netlink: 'syz.3.1254': attribute type 10 has an invalid length. [ 285.598245][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 285.617670][T10529] sctp: [Deprecated]: syz.4.1253 (pid 10529) Use of int in max_burst socket option. [ 285.617670][T10529] Use struct sctp_assoc_value instead [ 285.643727][T10533] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 285.715470][T10544] bond0: Caught tx_queue_len zero misconfig [ 285.747735][T10525] syzkaller0: entered promiscuous mode [ 285.753353][T10525] syzkaller0: entered allmulticast mode [ 285.807322][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'. [ 285.811351][T10549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1258'. [ 285.942539][T10538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.998051][T10561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.037346][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 286.151702][T10561] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.165299][T10561] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.172537][T10561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.308304][T10573] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.607960][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.766027][T10596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.781920][T10609] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 286.990598][ T10] IPVS: starting estimator thread 0... [ 287.114360][T10619] IPVS: using max 35 ests per chain, 84000 per kthread [ 287.484895][ T9312] batman_adv: batadv0: IGMP Querier appeared [ 287.491103][ T9312] batman_adv: batadv0: MLD Querier appeared [ 287.520355][T10648] netlink: 'syz.3.1284': attribute type 9 has an invalid length. [ 287.545493][T10653] Bluetooth: hci1: too big key_count value 32778 [ 287.595499][T10656] netlink: 'syz.4.1286': attribute type 3 has an invalid length. [ 287.627136][T10658] netlink: 'syz.1.1287': attribute type 142 has an invalid length. [ 287.741250][T10665] netlink: 'syz.4.1291': attribute type 1 has an invalid length. [ 287.777266][T10666] veth0: entered promiscuous mode [ 287.871398][T10666] veth0: left promiscuous mode [ 288.040524][T10680] openvswitch: netlink: Key type 234 is out of range max 32 [ 288.098642][T10682] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 288.126040][T10682] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 288.144272][T10682] gretap0: entered promiscuous mode [ 288.150367][T10682] gretap0: entered allmulticast mode [ 288.166435][T10677] netlink: 'syz.4.1295': attribute type 5 has an invalid length. [ 288.236252][T10691] bond0: entered promiscuous mode [ 288.250020][T10691] bond_slave_0: entered promiscuous mode [ 288.261566][T10691] bond_slave_1: entered promiscuous mode [ 288.278456][T10691] batadv0: entered promiscuous mode [ 288.298720][T10691] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 288.332248][T10691] bond0: left promiscuous mode [ 288.346061][T10691] bond_slave_0: left promiscuous mode [ 288.362902][T10691] bond_slave_1: left promiscuous mode [ 288.389604][T10691] batadv0: left promiscuous mode [ 288.536680][T10706] syzkaller0: entered promiscuous mode [ 288.542223][T10706] syzkaller0: entered allmulticast mode [ 288.858115][T10726] veth0: entered promiscuous mode [ 288.873253][T10724] veth0: left promiscuous mode [ 288.906300][T10727] __nla_validate_parse: 11 callbacks suppressed [ 288.906317][T10727] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1309'. [ 289.126933][T10743] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002 [ 289.344859][T10758] netlink: 'syz.0.1318': attribute type 1 has an invalid length. [ 289.545249][T10774] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1323'. [ 289.564402][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 289.702058][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1325'. [ 289.761531][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1325'. [ 289.830882][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1326'. [ 289.948512][T10806] netlink: 'syz.2.1329': attribute type 2 has an invalid length. [ 289.970583][T10806] 9: entered promiscuous mode [ 290.091648][T10817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.263202][T10824] batman_adv: batadv0: Adding interface: dummy0 [ 290.270246][T10824] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.297571][T10824] batman_adv: batadv0: Interface activated: dummy0 [ 290.397088][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 290.464696][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 290.473613][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 290.658748][T10829] hsr0 speed is unknown, defaulting to 1000 [ 291.182868][T10859] tipc: Started in network mode [ 291.189238][T10859] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 291.215880][T10859] tipc: Enabled bearer , priority 10 [ 291.226163][T10863] netlink: 'syz.1.1349': attribute type 4 has an invalid length. [ 291.244837][T10861] openvswitch: netlink: Key type 31 is not supported [ 291.244953][T10863] netlink: 'syz.1.1349': attribute type 4 has an invalid length. [ 291.353018][T10866] netlink: 'syz.2.1350': attribute type 21 has an invalid length. [ 291.406101][T10866] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 291.432483][T10866] bond3 (unregistering): Released all slaves [ 291.453964][T10876] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 291.480238][T10880] netlink: 'syz.4.1354': attribute type 10 has an invalid length. [ 291.564018][T10883] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 291.587177][T10883] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 291.598811][T10883] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 291.699446][T10884] caif0: mtu less than device minimum [ 291.718880][T10876] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 291.731688][T10876] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 291.810453][T10888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1354'. [ 291.824507][T10888] tipc: Invalid UDP bearer configuration [ 291.824565][T10888] tipc: Enabling of bearer rejected, failed to enable media [ 292.246356][T10924] 0: reclassify loop, rule prio 0, protocol 800 [ 292.276789][T10927] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 292.334350][ T5955] tipc: Node number set to 4269801492 [ 292.502048][T10940] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 292.526563][T10940] bond3 (unregistering): Released all slaves [ 292.675838][T10958] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 292.714449][ T30] audit: type=1804 audit(1762323089.947:2): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1374" name="/newroot/265/cgroup.controllers" dev="tmpfs" ino=1361 res=1 errno=0 [ 292.778553][ T30] audit: type=1800 audit(1762323089.947:3): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1374" name="cgroup.controllers" dev="tmpfs" ino=1361 res=0 errno=0 [ 292.814028][T10963] netlink: 'syz.0.1376': attribute type 2 has an invalid length. [ 292.852421][T10967] netlink: 'syz.4.1379': attribute type 1 has an invalid length. [ 292.855485][T10965] bond0: Caught tx_queue_len zero misconfig [ 293.011849][T10967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.043805][T10978] netlink: 'syz.1.1384': attribute type 11 has an invalid length. [ 293.091671][T10970] bond2: (slave veth3): Enslaving as an active interface with a down link [ 293.231654][T10997] tipc: Enabled bearer , priority 0 [ 293.244677][T10999] netlink: 'syz.3.1387': attribute type 21 has an invalid length. [ 293.263993][T10990] syzkaller0: entered promiscuous mode [ 293.282311][T10990] syzkaller0: entered allmulticast mode [ 293.360004][T11007] xt_policy: too many policy elements [ 293.368118][T10999] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 293.383105][T10999] bond6 (unregistering): Released all slaves [ 293.520908][T10997] tipc: Resetting bearer [ 293.620217][T10987] tipc: Resetting bearer [ 293.648723][T11030] syz.1.1393: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 293.714197][T11030] CPU: 0 UID: 0 PID: 11030 Comm: syz.1.1393 Not tainted syzkaller #0 PREEMPT(full) [ 293.714233][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.714244][T11030] Call Trace: [ 293.714252][T11030] [ 293.714261][T11030] dump_stack_lvl+0x189/0x250 [ 293.714295][T11030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.714319][T11030] ? __pfx__printk+0x10/0x10 [ 293.714339][T11030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 293.714364][T11030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 293.714391][T11030] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 293.714418][T11030] warn_alloc+0x214/0x310 [ 293.714444][T11030] ? stack_depot_save_flags+0x40/0x860 [ 293.714475][T11030] ? __pfx_warn_alloc+0x10/0x10 [ 293.714502][T11030] ? kasan_save_track+0x3e/0x80 [ 293.714526][T11030] ? __kasan_kmalloc+0x93/0xb0 [ 293.714550][T11030] ? xsk_setsockopt+0x4dc/0x8d0 [ 293.714570][T11030] ? do_sock_setsockopt+0x17c/0x1b0 [ 293.714588][T11030] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 293.714604][T11030] ? do_syscall_64+0xfa/0xfa0 [ 293.714627][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.714656][T11030] __vmalloc_node_range_noprof+0x125/0x12d0 [ 293.714714][T11030] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 293.714743][T11030] ? __kasan_kmalloc+0x93/0xb0 [ 293.714775][T11030] vmalloc_user_noprof+0xad/0xf0 [ 293.714801][T11030] ? xskq_create+0xbf/0x170 [ 293.714825][T11030] xskq_create+0xbf/0x170 [ 293.714851][T11030] xsk_init_queue+0xb0/0x110 [ 293.714876][T11030] xsk_setsockopt+0x4dc/0x8d0 [ 293.714902][T11030] ? __pfx_xsk_setsockopt+0x10/0x10 [ 293.714926][T11030] ? __pfx_aa_sk_perm+0x10/0x10 [ 293.714954][T11030] ? aa_sock_opt_perm+0xff/0x1b0 [ 293.714984][T11030] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 293.715003][T11030] ? __pfx_xsk_setsockopt+0x10/0x10 [ 293.715028][T11030] do_sock_setsockopt+0x17c/0x1b0 [ 293.715052][T11030] __x64_sys_setsockopt+0x13f/0x1b0 [ 293.715076][T11030] do_syscall_64+0xfa/0xfa0 [ 293.715105][T11030] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.715130][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.715149][T11030] ? clear_bhb_loop+0x60/0xb0 [ 293.715172][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.715190][T11030] RIP: 0033:0x7f9780f8f6c9 [ 293.715208][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.715230][T11030] RSP: 002b:00007f9781db1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 293.715251][T11030] RAX: ffffffffffffffda RBX: 00007f97811e5fa0 RCX: 00007f9780f8f6c9 [ 293.715265][T11030] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 293.715276][T11030] RBP: 00007f9781011f91 R08: 0000000000000004 R09: 0000000000000000 [ 293.715288][T11030] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.715299][T11030] R13: 00007f97811e6038 R14: 00007f97811e5fa0 R15: 00007fff8398c558 [ 293.715332][T11030] [ 293.715341][T11030] Mem-Info: [ 294.032297][T10987] tipc: Disabling bearer [ 294.039393][T11030] active_anon:5776 inactive_anon:0 isolated_anon:0 [ 294.039393][T11030] active_file:2501 inactive_file:39917 isolated_file:0 [ 294.039393][T11030] unevictable:772 dirty:37 writeback:0 [ 294.039393][T11030] slab_reclaimable:11005 slab_unreclaimable:99207 [ 294.039393][T11030] mapped:29113 shmem:1356 pagetables:1211 [ 294.039393][T11030] sec_pagetables:0 bounce:0 [ 294.039393][T11030] kernel_misc_reclaimable:0 [ 294.039393][T11030] free:1331368 free_pcp:12810 free_cma:0 [ 294.087663][T11030] Node 0 active_anon:23104kB inactive_anon:0kB active_file:10004kB inactive_file:159468kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:116452kB dirty:144kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14552kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.120286][T11030] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.155628][T11030] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.186038][T11030] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 294.191872][T11030] Node 0 DMA32 free:1418564kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23104kB inactive_anon:0kB active_file:10004kB inactive_file:159468kB unevictable:1552kB writepending:144kB zspages:0kB present:3129332kB managed:2565168kB mlocked:16kB bounce:0kB free_pcp:35424kB local_pcp:20332kB free_cma:0kB [ 294.231277][T11030] lowmem_reserve[]: 0 0 0 0 0 [ 294.239464][T11030] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.270098][T11030] lowmem_reserve[]: 0 0 0 0 0 [ 294.275459][T11030] Node 1 Normal free:3891548kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16256kB local_pcp:10272kB free_cma:0kB [ 294.345830][T11052] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 294.380099][T11030] lowmem_reserve[]: 0 0 0 0 0 [ 294.400341][T11030] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 294.414339][T11030] Node 0 DMA32: 1673*4kB (UM) 986*8kB (UME) 327*16kB (UME) 471*32kB (UME) 104*64kB (UM) 36*128kB (UM) 47*256kB (UME) 29*512kB (UM) 6*1024kB (UME) 6*2048kB (UME) 324*4096kB (UM) = 1418564kB [ 294.433616][T11030] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 294.449024][T11030] Node 1 Normal: 195*4kB (UME) 38*8kB (UME) 34*16kB (UME) 97*32kB (UME) 28*64kB (UME) 10*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891580kB [ 294.470513][T11030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.480296][T11030] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.483005][T11055] bond6: (slave gretap1): making interface the new active one [ 294.489907][T11030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.507302][T11030] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.516920][T11030] 43770 total pagecache pages [ 294.521626][T11030] 0 pages in swap cache [ 294.529828][T11055] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 294.539465][T11030] Free swap = 124996kB [ 294.559654][T11030] Total swap = 124996kB [ 294.564339][T11030] 2097051 pages RAM [ 294.568178][T11030] 0 pages HighMem/MovableOnly [ 294.572880][T11030] 424117 pages reserved [ 294.592924][T11030] 0 pages cma reserved [ 294.604253][T11063] __nla_validate_parse: 7 callbacks suppressed [ 294.604269][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 295.019490][T11103] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1408'. [ 295.054767][T11100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1408'. [ 295.122643][T11106] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1411'. [ 295.395183][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 295.479325][T11126] syzkaller0: entered promiscuous mode [ 295.486737][T11126] syzkaller0: entered allmulticast mode [ 295.735330][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 295.793874][T11150] vcan0: entered allmulticast mode [ 295.910886][T11154] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.012588][T11155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.215793][T11175] openvswitch: netlink: IP tunnel dst address not specified [ 296.223921][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1432'. [ 296.809675][T11198] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1438'. [ 296.966993][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'. [ 297.054587][T11203] validate_nla: 6 callbacks suppressed [ 297.054603][T11203] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 297.093340][T11200] bond3: option xmit_hash_policy: invalid value (64) [ 297.112715][T11200] bond3 (unregistering): Released all slaves [ 297.514637][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1446'. [ 297.613254][T11239] netlink: 'syz.1.1448': attribute type 1 has an invalid length. [ 297.731883][T11239] bond3: entered promiscuous mode [ 297.781446][T11239] bond3: entered allmulticast mode [ 297.810061][T11239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.887231][T11251] macvlan2: entered promiscuous mode [ 297.918745][T11251] macvlan2: entered allmulticast mode [ 297.971601][T11251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.167784][T11269] delete_channel: no stack [ 298.302811][T11264] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 298.362542][T11264] nbd: error processing sock list [ 298.392475][T11264] block nbd0: shutting down sockets [ 298.610017][T11290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.617702][T11290] IPv6: NLM_F_CREATE should be set when creating new route [ 298.638806][T11294] syzkaller1: entered promiscuous mode [ 298.645693][T11294] syzkaller1: entered allmulticast mode [ 298.697577][T11295] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 298.806553][ T5836] Bluetooth: hci4: link tx timeout [ 298.812271][ T5836] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 298.822160][ T5836] Bluetooth: hci4: link tx timeout [ 298.828091][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.838194][ T5836] Bluetooth: hci4: link tx timeout [ 298.843336][ T5836] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 298.852657][ T5836] Bluetooth: hci4: link tx timeout [ 298.858447][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.064004][ T5836] Bluetooth: hci4: link tx timeout [ 299.070303][ T5836] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 299.078580][ T5836] Bluetooth: hci4: link tx timeout [ 299.084007][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.093371][ T5836] Bluetooth: hci4: link tx timeout [ 299.100212][ T5836] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 299.107937][ T5836] Bluetooth: hci4: link tx timeout [ 299.113157][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.476645][T11333] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 299.478019][T11335] syz.3.1471 (11335) used obsolete PPPIOCDETACH ioctl [ 299.733627][T11351] __nla_validate_parse: 8 callbacks suppressed [ 299.733655][T11351] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1476'. [ 299.902038][ T5836] Bluetooth: hci4: link tx timeout [ 299.908163][ T5836] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 299.916865][ T5836] Bluetooth: hci4: link tx timeout [ 299.922005][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.967819][ T5836] Bluetooth: hci4: link tx timeout [ 299.972983][ T5836] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 299.981519][ T5836] Bluetooth: hci4: link tx timeout [ 299.988695][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 300.037440][T11346] syzkaller0: entered promiscuous mode [ 300.047909][T11346] syzkaller0: entered allmulticast mode [ 300.160914][T11372] netlink: 'syz.3.1481': attribute type 12 has an invalid length. [ 300.492026][T11395] bond0: entered promiscuous mode [ 300.497850][T11395] bond_slave_0: entered promiscuous mode [ 300.503795][T11395] bond_slave_1: entered promiscuous mode [ 300.647339][ T5836] Bluetooth: hci4: link tx timeout [ 300.652503][ T5836] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 300.663736][ T5836] Bluetooth: hci4: link tx timeout [ 300.669433][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 300.777047][T11410] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1491'. [ 300.799362][T11410] vlan2: entered allmulticast mode [ 300.804819][T11410] erspan0: entered allmulticast mode [ 300.854261][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 301.043474][T11426] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1494'. [ 301.093333][T11425] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1494'. [ 301.484756][T11450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1499'. [ 301.514421][T11450] veth1: entered promiscuous mode [ 301.969692][T11475] C: renamed from team_slave_0 (while UP) [ 302.002005][T11475] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 302.016415][T11475] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 302.054495][T11480] netlink: ct family unspecified [ 302.064519][T11480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.262506][T11490] lo: entered promiscuous mode [ 302.282097][T11490] netlink: 'syz.3.1507': attribute type 2 has an invalid length. [ 302.309447][T11490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.482824][T11500] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1511'. [ 302.497932][T11505] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1510'. [ 302.528043][T11505] openvswitch: netlink: Missing key (keys=40, expected=100) [ 302.580479][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'. [ 302.838847][T11510] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 302.873996][T11510] bond3 (unregistering): Released all slaves [ 302.934184][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 303.158356][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 303.168876][T11538] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 303.520800][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 304.386743][T11625] netlink: 'syz.4.1542': attribute type 23 has an invalid length. [ 304.821718][T11650] __nla_validate_parse: 6 callbacks suppressed [ 304.821736][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1546'. [ 304.844792][T11656] IPv6: NLM_F_REPLACE set, but no existing node found! [ 305.001500][T11665] xt_policy: output policy not valid in PREROUTING and INPUT [ 305.247043][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1552'. [ 305.268720][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 305.629788][T11691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1557'. [ 305.641077][T11687] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1555'. [ 305.656792][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 305.736774][T11697] netlink: 'syz.3.1559': attribute type 2 has an invalid length. [ 305.925411][T11706] pim6reg527: entered allmulticast mode [ 305.943773][T11704] netlink: 'syz.4.1560': attribute type 8 has an invalid length. [ 305.951909][T11708] tipc: Enabled bearer , priority 0 [ 305.960299][T11708] syzkaller0: entered promiscuous mode [ 305.971888][T11708] syzkaller0: entered allmulticast mode [ 306.027579][T11708] tipc: Resetting bearer [ 306.081749][T11707] tipc: Resetting bearer [ 306.149264][T11707] tipc: Disabling bearer [ 306.191236][T11717] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 306.244899][T11717] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 306.247996][T11720] netlink: 'syz.2.1566': attribute type 1 has an invalid length. [ 306.558230][T11740] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1570'. [ 306.581851][T11745] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1572'. [ 306.591982][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1570'. [ 306.595199][T11745] netlink: 'syz.2.1572': attribute type 9 has an invalid length. [ 306.767892][T11757] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 306.836718][T11757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.845460][T11762] veth0: entered promiscuous mode [ 306.853497][T11761] veth0: left promiscuous mode [ 307.157829][T11780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1585'. [ 307.250547][T11782] tipc: Enabling of bearer rejected, failed to enable media [ 307.630743][T11813] wg1: entered promiscuous mode [ 307.652489][T11813] wg1: entered allmulticast mode [ 307.838155][T11823] bond2: (slave gre0): Device is not bonding slave [ 307.845504][T11823] bond2: option active_slave: invalid value (gre0) [ 307.854651][T11823] bond2 (unregistering): Released all slaves [ 308.520720][T11864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.533281][T11864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.561753][T11864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.573466][T11864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.830207][T11883] netlink: 'syz.0.1611': attribute type 11 has an invalid length. [ 308.858330][T11881] delete_channel: no stack [ 308.891422][T11890] team0: Caught tx_queue_len zero misconfig [ 309.067198][T11895] netlink: 'syz.0.1614': attribute type 4 has an invalid length. [ 309.320315][T11914] netlink: 'syz.0.1619': attribute type 4 has an invalid length. [ 309.371759][T11918] netlink: 'syz.0.1619': attribute type 4 has an invalid length. [ 309.570612][T11928] netlink: 'syz.4.1624': attribute type 1 has an invalid length. [ 309.604701][T11928] bond3: entered promiscuous mode [ 309.610358][T11928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.744291][T11928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.751411][T11928] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 309.766026][T11928] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 309.789579][T11928] bond3: (slave gre2): making interface the new active one [ 309.797419][T11928] gre2: entered promiscuous mode [ 309.804161][T11928] bond3: (slave gre2): Enslaving as an active interface with an up link [ 310.008551][T11956] netlink: 'syz.1.1633': attribute type 12 has an invalid length. [ 310.041527][T11958] netlink: 'syz.0.1634': attribute type 24 has an invalid length. [ 310.183092][T11967] __nla_validate_parse: 38 callbacks suppressed [ 310.183111][T11967] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1636'. [ 310.220837][T11969] tipc: New replicast peer: 255.255.255.255 [ 310.227948][T11969] tipc: Enabled bearer , priority 10 [ 310.329603][T11984] tipc: Trying to set illegal importance in message [ 310.339533][T11979] netlink: 'syz.2.1641': attribute type 10 has an invalid length. [ 310.487553][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 310.716358][T12002] team_slave_1: Caught tx_queue_len zero misconfig [ 310.743690][T12007] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 310.931958][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1654'. [ 311.072568][T12030] netlink: 'syz.1.1655': attribute type 3 has an invalid length. [ 311.224558][ T5901] tipc: Node number set to 425634138 [ 311.271661][T12040] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 311.292719][T12042] netlink: 'syz.3.1660': attribute type 8 has an invalid length. [ 311.311589][T12040] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 311.346678][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 311.544798][T12059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1667'. [ 311.575639][T12059] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1667'. [ 311.650645][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'. [ 311.744574][T12076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1669'. [ 311.787793][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 312.144200][T12098] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1679'. [ 312.161159][T12076] bond4: option coupled_control: invalid value (24) [ 312.196121][T12076] bond4 (unregistering): Released all slaves [ 312.262031][T12104] veth0: entered promiscuous mode [ 312.296119][ T9310] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.307103][ T9310] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.326470][T12096] veth0: left promiscuous mode [ 312.331981][ T9310] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.344594][ T9310] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.592139][T12118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.643342][T12122] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.651589][T12122] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 312.669114][T12122] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 312.771991][T12118] veth7: entered promiscuous mode [ 312.797722][T12118] bond4: (slave veth7): Enslaving as an active interface with a down link [ 312.844475][T12133] team0: Device gtp1 is of different type [ 313.524593][T12180] syzkaller0: entered promiscuous mode [ 313.552586][T12180] syzkaller0: entered allmulticast mode [ 313.941313][T12206] hsr_slave_0 (unregistering): left promiscuous mode [ 313.985724][T12210] syzkaller0: entered promiscuous mode [ 313.991227][T12210] syzkaller0: entered allmulticast mode [ 314.503071][T12263] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 314.589218][T12261] bond7: entered promiscuous mode [ 314.596843][T12261] bond7: entered allmulticast mode [ 314.624748][T12261] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.391555][T12318] xt_CT: No such helper "syz0" [ 315.834518][T12356] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 316.665731][T12407] validate_nla: 11 callbacks suppressed [ 316.665749][T12407] netlink: 'syz.2.1764': attribute type 1 has an invalid length. [ 316.725602][T12407] bond6 (unregistering): Released all slaves [ 316.796942][T12411] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 316.823685][T12411] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 317.018530][T12428] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 317.035426][T12428] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 317.053103][T12434] batadv0: left promiscuous mode [ 317.060742][T12437] __nla_validate_parse: 15 callbacks suppressed [ 317.060757][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'. [ 317.074751][T12434] bridge0: port 3(batadv0) entered disabled state [ 317.103222][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.119135][T12434] bridge_slave_0: left allmulticast mode [ 317.140500][T12434] bridge_slave_0: left promiscuous mode [ 317.154488][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.199558][T12434] bridge_slave_1: left allmulticast mode [ 317.218053][T12434] bridge_slave_1: left promiscuous mode [ 317.235266][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.249094][T12434] bond0: (slave bond_slave_0): Releasing backup interface [ 317.276024][T12434] bond0: (slave bond_slave_1): Releasing backup interface [ 317.286981][T12434] team0: Port device team_slave_0 removed [ 317.298359][T12434] team0: Port device team_slave_1 removed [ 317.305282][T12434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.313660][T12434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.323863][T12434] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 317.356406][T12437] bridge0: port 2(batadv0) entered blocking state [ 317.363112][T12437] bridge0: port 2(batadv0) entered disabled state [ 317.370781][T12437] batadv0: entered allmulticast mode [ 317.402363][T12437] batadv0: entered promiscuous mode [ 317.418018][T12441] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 317.469389][T12445] bond8: entered promiscuous mode [ 317.474640][T12445] bond8: entered allmulticast mode [ 317.480260][T12445] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.510421][T12448] bond9: entered promiscuous mode [ 317.516630][T12448] bond9: entered allmulticast mode [ 317.522406][T12448] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.565669][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 317.844269][ T9309] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 317.853547][ T9309] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 317.989179][T12479] netem: incorrect ge model size [ 317.994579][T12479] netem: change failed [ 318.160150][T12489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1791'. [ 318.189799][T12497] netlink: 'syz.4.1793': attribute type 1 has an invalid length. [ 318.222871][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1792'. [ 318.351269][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1795'. [ 318.400319][T12508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1796'. [ 318.438625][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 318.661662][T12513] sit0: left promiscuous mode [ 318.716217][T12531] netlink: 'syz.1.1803': attribute type 5 has an invalid length. [ 318.727834][T12513] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.766862][T12513] bond0: left promiscuous mode [ 318.774416][T12513] bond_slave_0: left promiscuous mode [ 318.787865][T12513] bond_slave_1: left promiscuous mode [ 319.135527][T12513] team_slave_1: left promiscuous mode [ 319.151772][T12513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.174673][T12513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.339983][T12513] ip6erspan0: left promiscuous mode [ 319.348455][T12513] ip6tnl1: left promiscuous mode [ 319.370398][T12513] veth3: left promiscuous mode [ 319.376957][T12513] geneve3: left promiscuous mode [ 319.386302][T12513] gretap0: left promiscuous mode [ 319.404428][T12513] veth7: left promiscuous mode [ 319.577920][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 319.609376][ T9309] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.634958][ T9309] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.660497][ T9309] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 319.679440][ T9309] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.713164][ T9309] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.723377][ T9309] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 319.789426][T12556] veth5: entered allmulticast mode [ 319.814284][T12543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.816897][ T9309] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.841432][T12543] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 319.854040][ T9309] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.890496][ T9309] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 319.909281][T12543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.934364][T12543] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 319.942684][ T9309] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.999275][ T9309] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.015602][T12543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 320.034649][ T9309] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 320.050500][T12543] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 320.179730][T12543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 320.186051][T12543] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 320.204312][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1813'. [ 320.229597][T12589] netlink: 'syz.1.1814': attribute type 6 has an invalid length. [ 320.242705][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 320.310072][T12587] hsr0 speed is unknown, defaulting to 1000 [ 320.745831][T12625] netlink: 'syz.4.1821': attribute type 1 has an invalid length. [ 320.753612][T12625] netlink: 'syz.4.1821': attribute type 1 has an invalid length. [ 321.022379][T12623] syzkaller0: entered promiscuous mode [ 321.096837][T12623] syzkaller0: entered allmulticast mode [ 322.873756][T12634] __nla_validate_parse: 2 callbacks suppressed [ 322.873779][T12634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1826'. [ 322.914434][T12646] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 322.935993][T12649] macvtap0: mtu less than device minimum [ 322.965157][T12646] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 323.048592][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1833'. [ 323.083208][T12696] netlink: 'syz.3.1833': attribute type 2 has an invalid length. [ 323.093618][T12696] netlink: 'syz.3.1833': attribute type 2 has an invalid length. [ 323.150321][T12696] netlink: 'syz.3.1833': attribute type 33 has an invalid length. [ 323.254722][T12714] netlink: 'syz.2.1837': attribute type 10 has an invalid length. [ 323.274638][T12696] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 323.305352][T12696] bond10 (unregistering): Released all slaves [ 323.370718][T12714] bridge_slave_1: left allmulticast mode [ 323.388133][T12714] bridge_slave_1: left promiscuous mode [ 323.407974][T12714] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.459545][T12714] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 323.658612][T12735] batadv_slave_0: entered promiscuous mode [ 323.694787][T12735] batman_adv: batadv0: Adding interface: macsec1 [ 323.736219][T12735] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.795118][T12735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.804610][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1846'. [ 323.808055][T12735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.847110][T12735] batman_adv: batadv0: Interface activated: macsec1 [ 323.890824][T12748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.134008][T12760] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.1850'. [ 324.501652][T12783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.532482][T12790] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20003 [ 324.557914][T12783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.589444][T12793] Bluetooth: MGMT ver 1.23 [ 324.595867][T12790] sctp: [Deprecated]: syz.1.1856 (pid 12790) Use of int in maxseg socket option. [ 324.595867][T12790] Use struct sctp_assoc_value instead [ 324.802422][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 324.826094][T12798] openvswitch: netlink: Flow actions attr not present in new flow. [ 325.426197][T12836] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1869'. [ 325.436618][T12836] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1869'. [ 325.446017][T12836] netlink: 'syz.1.1869': attribute type 6 has an invalid length. [ 325.453881][T12836] netlink: 'syz.1.1869': attribute type 5 has an invalid length. [ 325.494881][T12836] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1869'. [ 325.627214][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'. [ 325.717130][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'. [ 326.104810][T12873] bond4: Unable to set down delay as MII monitoring is disabled [ 326.186473][T12873] bond4 (unregistering): Released all slaves [ 326.511796][T12904] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 326.643944][T12911] 8021q: adding VLAN 0 to HW filter on device bond11 [ 326.659071][T12911] bond10: (slave bond11): making interface the new active one [ 326.668049][T12911] bond10: (slave bond11): Enslaving as an active interface with an up link [ 326.682321][T12904] 8021q: adding VLAN 0 to HW filter on device bond10 [ 327.109730][T12949] netlink: 'syz.3.1900': attribute type 11 has an invalid length. [ 327.117922][T12951] netlink: 'syz.3.1900': attribute type 11 has an invalid length. [ 327.525693][T12970] netlink: 'syz.2.1903': attribute type 1 has an invalid length. [ 327.596420][T12975] bond4 (unregistering): Released all slaves [ 328.486317][T13021] netlink: 'syz.4.1919': attribute type 1 has an invalid length. [ 328.569601][T13021] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 328.581281][T13021] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 328.656312][T13032] __nla_validate_parse: 13 callbacks suppressed [ 328.656329][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'. [ 328.716055][T13021] gretap1: entered promiscuous mode [ 328.722253][T13032] netlink: 'syz.3.1923': attribute type 11 has an invalid length. [ 328.738354][T13021] bond5: (slave gretap1): making interface the new active one [ 328.747800][T13021] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 328.776426][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'. [ 328.792155][T13032] netlink: 'syz.3.1923': attribute type 11 has an invalid length. [ 328.832651][T13021] macvlan4: entered promiscuous mode [ 328.869430][T13021] macvlan4: entered allmulticast mode [ 328.881287][T13021] bond5: entered promiscuous mode [ 328.903222][T13021] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 328.949063][T13021] bond5: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 328.992623][T13021] bond5: left promiscuous mode [ 329.274319][T13064] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1931'. [ 329.364648][T13069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1933'. [ 329.374902][T13072] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1932'. [ 329.415396][T13069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1933'. [ 329.607962][T13088] IPVS: length: 78 != 8 [ 329.842774][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1942'. [ 329.900096][T13108] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1944'. [ 329.912459][T13110] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1944'. [ 329.964739][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1940'. [ 329.991809][T13111] bond4: option mode: invalid value (14) [ 330.012845][T13111] bond4 (unregistering): Released all slaves [ 330.039128][T13122] netlink: 'syz.1.1943': attribute type 13 has an invalid length. [ 330.365004][T12621] udevd[12621]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 330.416739][T11035] udevd[11035]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 330.690780][T13173] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 330.717072][T13160] bond6: entered allmulticast mode [ 330.721053][T13173] netlink: 'syz.0.1958': attribute type 2 has an invalid length. [ 330.734241][T13160] 8021q: adding VLAN 0 to HW filter on device bond6 [ 330.782429][T13159] bond7: entered allmulticast mode [ 330.790134][T13159] 8021q: adding VLAN 0 to HW filter on device bond7 [ 330.867414][T13181] netlink: zone id is out of range [ 330.891039][T13181] netlink: zone id is out of range [ 330.912410][T13185] netlink: 'syz.0.1962': attribute type 4 has an invalid length. [ 330.916909][T13181] netlink: zone id is out of range [ 330.928692][T13181] netlink: zone id is out of range [ 330.933979][T13181] netlink: zone id is out of range [ 330.943493][T13181] netlink: zone id is out of range [ 330.961305][T13181] netlink: zone id is out of range [ 330.993037][T13181] netlink: zone id is out of range [ 331.016319][T13181] netlink: zone id is out of range [ 331.021569][T13181] netlink: zone id is out of range [ 331.206307][T13201] veth0: entered promiscuous mode [ 331.218826][T13200] veth0: left promiscuous mode [ 331.432716][T13219] delete_channel: no stack [ 331.466021][T13219] bridge0: left promiscuous mode [ 331.712476][T13233] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 331.715229][T13222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.740989][T13222] bond0: (slave bond6): Enslaving as an active interface with an up link [ 331.762402][T13238] bridge_slave_0: left allmulticast mode [ 331.768874][T13238] bridge_slave_0: left promiscuous mode [ 331.825401][T13238] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.870806][T13238] bridge_slave_1: left allmulticast mode [ 331.880817][T13238] bridge_slave_1: left promiscuous mode [ 331.907388][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.945469][T13238] bond0: (slave bond_slave_0): Releasing backup interface [ 331.962243][T13238] bond0: (slave bond_slave_1): Releasing backup interface [ 331.984879][T13238] team0: Port device team_slave_0 removed [ 331.997397][T13238] team0: Port device team_slave_1 removed [ 332.005191][T13238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.012758][T13238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.050777][T13266] netlink: 'syz.0.1984': attribute type 13 has an invalid length. [ 332.074220][T13266] macvtap0: entered allmulticast mode [ 332.090442][T13266] macvtap0: refused to change device tx_queue_len [ 332.135488][T13266] netlink: 'syz.0.1984': attribute type 4 has an invalid length. [ 332.189798][T13274] netlink: 'syz.4.1986': attribute type 24 has an invalid length. [ 332.537426][T13307] 8021q: VLANs not supported on ip6_vti0 [ 378.537101][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.977553][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.014605][ T31] INFO: task syz-executor:5823 blocked for more than 143 seconds. [ 495.022467][ T31] Not tainted syzkaller #0 [ 495.027574][ T31] Blocked by coredump. [ 495.032168][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.041081][ T31] task:syz-executor state:D stack:21544 pid:5823 tgid:5823 ppid:1 task_flags:0x40054c flags:0x00080003 [ 495.053274][ T31] Call Trace: [ 495.056627][ T31] [ 495.059562][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 495.064378][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.069371][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.074742][ T31] ? __pfx___schedule+0x10/0x10 [ 495.079639][ T31] ? schedule+0x91/0x360 [ 495.083907][ T31] schedule+0x165/0x360 [ 495.088153][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.104549][ T31] __mutex_lock+0x7e6/0x1350 [ 495.109203][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.113992][ T31] ? rfkill_unregister+0xc8/0x220 [ 495.141621][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.154392][ T31] ? __pfx_device_del+0x10/0x10 [ 495.159491][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 495.166348][ T31] rfkill_unregister+0xc8/0x220 [ 495.171244][ T31] hci_unregister_dev+0x374/0x510 [ 495.176703][ T31] vhci_release+0x152/0x1a0 [ 495.181242][ T31] ? __pfx_vhci_release+0x10/0x10 [ 495.186739][ T31] __fput+0x44c/0xa70 [ 495.190762][ T31] task_work_run+0x1d4/0x260 [ 495.195468][ T31] ? __pfx_task_work_run+0x10/0x10 [ 495.200591][ T31] ? do_exit+0x6b0/0x2300 [ 495.204985][ T31] ? kmem_cache_free+0x19b/0x690 [ 495.209945][ T31] do_exit+0x6b5/0x2300 [ 495.214329][ T31] ? do_raw_spin_lock+0x121/0x290 [ 495.219372][ T31] ? __pfx_do_exit+0x10/0x10 [ 495.224382][ T31] do_group_exit+0x21c/0x2d0 [ 495.229057][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.234434][ T31] get_signal+0x1285/0x1340 [ 495.238960][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 495.244603][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 495.249904][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 495.256485][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 495.261954][ T31] exit_to_user_mode_loop+0x72/0x130 [ 495.267349][ T31] do_syscall_64+0x2bd/0xfa0 [ 495.271963][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.277260][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.283343][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.288195][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.294162][ T31] RIP: 0033:0x7f4e03385817 [ 495.298582][ T31] RSP: 002b:00007ffeaa911cb0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 495.307140][ T31] RAX: fffffffffffffe00 RBX: 00000000000004a5 RCX: 00007f4e03385817 [ 495.315191][ T31] RDX: 0000000040000000 RSI: 00007ffeaa911d1c RDI: 00000000ffffffff [ 495.323186][ T31] RBP: 00007ffeaa911d1c R08: 0000000000000000 R09: 0000000000000000 [ 495.331206][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000181 [ 495.339525][ T31] R13: 000055556c70c590 R14: 0000000000050fa3 R15: 00007ffeaa911d70 [ 495.347625][ T31] [ 495.350736][ T31] INFO: task kworker/0:11:12540 blocked for more than 143 seconds. [ 495.358671][ T31] Not tainted syzkaller #0 [ 495.363641][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.372380][ T31] task:kworker/0:11 state:D stack:25256 pid:12540 tgid:12540 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 495.384475][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 495.391158][ T31] Call Trace: [ 495.394466][ T31] [ 495.397413][ T31] __schedule+0x1798/0x4cc0 [ 495.401911][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 495.407322][ T31] ? __pfx___schedule+0x10/0x10 [ 495.412188][ T31] ? schedule+0x91/0x360 [ 495.416531][ T31] schedule+0x165/0x360 [ 495.420714][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.426399][ T31] __mutex_lock+0x7e6/0x1350 [ 495.431009][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.435829][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 495.442086][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.447445][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 495.453175][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 495.458956][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 495.465091][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 495.470803][ T31] process_scheduled_works+0xae1/0x17b0 [ 495.476453][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.482453][ T31] worker_thread+0x8a0/0xda0 [ 495.487124][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 495.493474][ T31] ? __kthread_parkme+0x7b/0x200 [ 495.498480][ T31] kthread+0x711/0x8a0 [ 495.502567][ T31] ? __pfx_worker_thread+0x10/0x10 [ 495.507714][ T31] ? __pfx_kthread+0x10/0x10 [ 495.512402][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.517671][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.522878][ T31] ? __pfx_kthread+0x10/0x10 [ 495.527524][ T31] ret_from_fork+0x4bc/0x870 [ 495.532118][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.537443][ T31] ? __switch_to_asm+0x39/0x70 [ 495.542209][ T31] ? __switch_to_asm+0x33/0x70 [ 495.547023][ T31] ? __pfx_kthread+0x10/0x10 [ 495.551634][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.556691][ T31] [ 495.559769][ T31] INFO: task syz.3.1980:13233 blocked for more than 143 seconds. [ 495.567608][ T31] Not tainted syzkaller #0 [ 495.572550][ T31] Blocked by coredump. [ 495.577235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.585943][ T31] task:syz.3.1980 state:D stack:25160 pid:13233 tgid:13232 ppid:5823 task_flags:0x40054c flags:0x00080001 [ 495.597911][ T31] Call Trace: [ 495.601189][ T31] [ 495.604169][ T31] __schedule+0x1798/0x4cc0 [ 495.608722][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.613565][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.618445][ T31] ? __pfx___schedule+0x10/0x10 [ 495.623310][ T31] ? schedule+0x91/0x360 [ 495.627623][ T31] schedule+0x165/0x360 [ 495.631788][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.637326][ T31] __mutex_lock+0x7e6/0x1350 [ 495.641932][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.646730][ T31] ? rfkill_unregister+0xc8/0x220 [ 495.651766][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.656845][ T31] ? __pfx_device_del+0x10/0x10 [ 495.661707][ T31] rfkill_unregister+0xc8/0x220 [ 495.666786][ T31] nfc_unregister_device+0x96/0x2a0 [ 495.671995][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 495.677774][ T31] virtual_ncidev_close+0x56/0x90 [ 495.682814][ T31] __fput+0x44c/0xa70 [ 495.686884][ T31] task_work_run+0x1d4/0x260 [ 495.691492][ T31] ? __pfx_task_work_run+0x10/0x10 [ 495.696695][ T31] ? do_exit+0x6b0/0x2300 [ 495.701063][ T31] ? kmem_cache_free+0x19b/0x690 [ 495.706057][ T31] do_exit+0x6b5/0x2300 [ 495.710229][ T31] ? do_raw_spin_lock+0x121/0x290 [ 495.715288][ T31] ? __pfx_do_exit+0x10/0x10 [ 495.719896][ T31] do_group_exit+0x21c/0x2d0 [ 495.724519][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.729727][ T31] get_signal+0x1285/0x1340 [ 495.734333][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 495.739892][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 495.746106][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.751316][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 495.756874][ T31] exit_to_user_mode_loop+0x72/0x130 [ 495.762164][ T31] do_syscall_64+0x2bd/0xfa0 [ 495.766791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.772000][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.778285][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.782971][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.788895][ T31] RIP: 0033:0x7f4e0338f6c9 [ 495.793330][ T31] RSP: 002b:00007f4e041d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.801810][ T31] RAX: fffffffffffffff4 RBX: 00007f4e035e5fa0 RCX: 00007f4e0338f6c9 [ 495.809848][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 495.818049][ T31] RBP: 00007f4e03411f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.826111][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.834265][ T31] R13: 00007f4e035e6038 R14: 00007f4e035e5fa0 R15: 00007ffeaa911958 [ 495.842281][ T31] [ 495.845584][ T31] INFO: task syz.2.1982:13252 blocked for more than 144 seconds. [ 495.853394][ T31] Not tainted syzkaller #0 [ 495.861323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.870046][ T31] task:syz.2.1982 state:D stack:28296 pid:13252 tgid:13250 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 495.882014][ T31] Call Trace: [ 495.885502][ T31] [ 495.888444][ T31] __schedule+0x1798/0x4cc0 [ 495.892943][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.897834][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.902874][ T31] ? __pfx___schedule+0x10/0x10 [ 495.907790][ T31] ? schedule+0x91/0x360 [ 495.912044][ T31] schedule+0x165/0x360 [ 495.916346][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.921822][ T31] __mutex_lock+0x7e6/0x1350 [ 495.926499][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.931284][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 495.936617][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.941656][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.946889][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 495.953406][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 495.959816][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 495.965689][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 495.970915][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 495.976746][ T31] rfkill_set_block+0x1d2/0x440 [ 495.981623][ T31] rfkill_fop_write+0x44b/0x570 [ 495.986539][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 495.991917][ T31] ? security_file_permission+0x10/0x290 [ 495.997790][ T31] ? rw_verify_area+0x255/0x4d0 [ 496.002657][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.007585][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 496.012976][ T31] vfs_write+0x27e/0xb30 [ 496.017289][ T31] ? __pfx_vfs_write+0x10/0x10 [ 496.022069][ T31] ? __fget_files+0x2a/0x420 [ 496.026801][ T31] ? __fget_files+0x2a/0x420 [ 496.031393][ T31] ? __fget_files+0x3a0/0x420 [ 496.036104][ T31] ? __fget_files+0x2a/0x420 [ 496.040701][ T31] ksys_write+0x145/0x250 [ 496.045115][ T31] ? __pfx_ksys_write+0x10/0x10 [ 496.049979][ T31] ? do_syscall_64+0xbe/0xfa0 [ 496.055000][ T31] do_syscall_64+0xfa/0xfa0 [ 496.059563][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.064795][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.070891][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.075685][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.081585][ T31] RIP: 0033:0x7f63a078f6c9 [ 496.086041][ T31] RSP: 002b:00007f63a153e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 496.094518][ T31] RAX: ffffffffffffffda RBX: 00007f63a09e6090 RCX: 00007f63a078f6c9 [ 496.102500][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 496.110729][ T31] RBP: 00007f63a0811f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.118765][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.126791][ T31] R13: 00007f63a09e6128 R14: 00007f63a09e6090 R15: 00007ffd19171b98 [ 496.134834][ T31] [ 496.137879][ T31] INFO: task syz.4.1989:13284 blocked for more than 144 seconds. [ 496.145679][ T31] Not tainted syzkaller #0 [ 496.150615][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.159506][ T31] task:syz.4.1989 state:D stack:25896 pid:13284 tgid:13282 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 496.171480][ T31] Call Trace: [ 496.174804][ T31] [ 496.177737][ T31] __schedule+0x1798/0x4cc0 [ 496.182239][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.187176][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.192035][ T31] ? __pfx___schedule+0x10/0x10 [ 496.196961][ T31] ? schedule+0x91/0x360 [ 496.201221][ T31] schedule+0x165/0x360 [ 496.205561][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.211032][ T31] __mutex_lock+0x7e6/0x1350 [ 496.216628][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.221537][ T31] ? rfkill_register+0x37/0x8e0 [ 496.227796][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.232939][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 496.238454][ T31] ? device_initialize+0x24b/0x440 [ 496.243579][ T31] rfkill_register+0x37/0x8e0 [ 496.248374][ T31] nfc_register_device+0x14a/0x320 [ 496.253495][ T31] nci_register_device+0x87f/0x9d0 [ 496.258778][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 496.264511][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 496.269794][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 496.275236][ T31] virtual_ncidev_open+0x129/0x1a0 [ 496.280353][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 496.286058][ T31] misc_open+0x2d5/0x350 [ 496.290309][ T31] chrdev_open+0x4cc/0x5e0 [ 496.295002][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.299960][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 496.306383][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.311326][ T31] do_dentry_open+0x953/0x13f0 [ 496.316302][ T31] vfs_open+0x3b/0x340 [ 496.320386][ T31] ? path_openat+0x2ecd/0x3830 [ 496.325246][ T31] path_openat+0x2ee5/0x3830 [ 496.329869][ T31] ? __pfx_path_openat+0x10/0x10 [ 496.335044][ T31] do_filp_open+0x1fa/0x410 [ 496.339659][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.344627][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 496.349704][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.354682][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.359136][ T31] do_sys_openat2+0x121/0x1c0 [ 496.363831][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.369228][ T31] ? rcu_is_watching+0x15/0xb0 [ 496.374013][ T31] __x64_sys_openat+0x138/0x170 [ 496.378973][ T31] do_syscall_64+0xfa/0xfa0 [ 496.383494][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.388779][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.394899][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.399583][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.405554][ T31] RIP: 0033:0x7f0056f8f6c9 [ 496.409971][ T31] RSP: 002b:00007f0057db2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.418473][ T31] RAX: ffffffffffffffda RBX: 00007f00571e5fa0 RCX: 00007f0056f8f6c9 [ 496.426539][ T31] RDX: 0000000000000002 RSI: 0000200000000cc0 RDI: ffffffffffffff9c [ 496.434549][ T31] RBP: 00007f0057011f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.442524][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.450777][ T31] R13: 00007f00571e6038 R14: 00007f00571e5fa0 R15: 00007ffd2add1f28 [ 496.459092][ T31] [ 496.462121][ T31] INFO: task syz.0.1995:13315 blocked for more than 144 seconds. [ 496.470062][ T31] Not tainted syzkaller #0 [ 496.475033][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.483741][ T31] task:syz.0.1995 state:D stack:26856 pid:13315 tgid:13314 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 496.495767][ T31] Call Trace: [ 496.499049][ T31] [ 496.501965][ T31] __schedule+0x1798/0x4cc0 [ 496.506500][ T31] ? security_file_open+0xb1/0x270 [ 496.511622][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.516525][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.521380][ T31] ? __pfx___schedule+0x10/0x10 [ 496.526322][ T31] ? schedule+0x91/0x360 [ 496.530577][ T31] schedule+0x165/0x360 [ 496.534867][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.540348][ T31] __mutex_lock+0x7e6/0x1350 [ 496.544974][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.549751][ T31] ? misc_open+0x51/0x350 [ 496.554133][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.559271][ T31] misc_open+0x51/0x350 [ 496.563417][ T31] chrdev_open+0x4cc/0x5e0 [ 496.568015][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.572967][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 496.579367][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.584365][ T31] do_dentry_open+0x953/0x13f0 [ 496.589159][ T31] vfs_open+0x3b/0x340 [ 496.593241][ T31] ? path_openat+0x2ecd/0x3830 [ 496.598052][ T31] path_openat+0x2ee5/0x3830 [ 496.602692][ T31] ? __pfx_path_openat+0x10/0x10 [ 496.607719][ T31] do_filp_open+0x1fa/0x410 [ 496.612228][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.617220][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 496.622265][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.627157][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.631505][ T31] do_sys_openat2+0x121/0x1c0 [ 496.636204][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.641450][ T31] ? rcu_is_watching+0x15/0xb0 [ 496.646269][ T31] __x64_sys_openat+0x138/0x170 [ 496.651132][ T31] do_syscall_64+0xfa/0xfa0 [ 496.655760][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.660976][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.667111][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.671799][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.677713][ T31] RIP: 0033:0x7f7df7f8f6c9 [ 496.682130][ T31] RSP: 002b:00007f7df8da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.690594][ T31] RAX: ffffffffffffffda RBX: 00007f7df81e5fa0 RCX: 00007f7df7f8f6c9 [ 496.698722][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 496.706811][ T31] RBP: 00007f7df8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.714845][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.722834][ T31] R13: 00007f7df81e6038 R14: 00007f7df81e5fa0 R15: 00007ffd48188938 [ 496.730896][ T31] [ 496.733966][ T31] INFO: task syz.1.2001:13334 blocked for more than 145 seconds. [ 496.742122][ T31] Not tainted syzkaller #0 [ 496.747095][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.755798][ T31] task:syz.1.2001 state:D stack:26688 pid:13334 tgid:13333 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 496.767763][ T31] Call Trace: [ 496.771045][ T31] [ 496.773962][ T31] __schedule+0x1798/0x4cc0 [ 496.778579][ T31] ? security_file_open+0xb1/0x270 [ 496.783715][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.788653][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.793515][ T31] ? __pfx___schedule+0x10/0x10 [ 496.798413][ T31] ? schedule+0x91/0x360 [ 496.802663][ T31] schedule+0x165/0x360 [ 496.806880][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.812347][ T31] __mutex_lock+0x7e6/0x1350 [ 496.816970][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.821745][ T31] ? misc_open+0x51/0x350 [ 496.826195][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.831245][ T31] misc_open+0x51/0x350 [ 496.835555][ T31] chrdev_open+0x4cc/0x5e0 [ 496.840012][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.844995][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 496.851329][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.856447][ T31] do_dentry_open+0x953/0x13f0 [ 496.861237][ T31] vfs_open+0x3b/0x340 [ 496.865347][ T31] ? path_openat+0x2ecd/0x3830 [ 496.870118][ T31] path_openat+0x2ee5/0x3830 [ 496.874763][ T31] ? __pfx_path_openat+0x10/0x10 [ 496.879718][ T31] do_filp_open+0x1fa/0x410 [ 496.884275][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.889139][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 496.894244][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.899103][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.903431][ T31] do_sys_openat2+0x121/0x1c0 [ 496.908178][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.913393][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 496.918650][ T31] __x64_sys_openat+0x138/0x170 [ 496.923511][ T31] do_syscall_64+0xfa/0xfa0 [ 496.928064][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.933273][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.939519][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.944251][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.950137][ T31] RIP: 0033:0x7f9780f8f6c9 [ 496.954598][ T31] RSP: 002b:00007f9781db1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.963024][ T31] RAX: ffffffffffffffda RBX: 00007f97811e5fa0 RCX: 00007f9780f8f6c9 [ 496.971054][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 496.979057][ T31] RBP: 00007f9781011f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.987085][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.995085][ T31] R13: 00007f97811e6038 R14: 00007f97811e5fa0 R15: 00007fff8398c558 [ 497.003061][ T31] [ 497.006132][ T31] INFO: task syz-executor:13341 blocked for more than 145 seconds. [ 497.014026][ T31] Not tainted syzkaller #0 [ 497.019178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.027906][ T31] task:syz-executor state:D stack:27112 pid:13341 tgid:13341 ppid:1 task_flags:0x400040 flags:0x00080000 [ 497.039972][ T31] Call Trace: [ 497.043265][ T31] [ 497.046248][ T31] __schedule+0x1798/0x4cc0 [ 497.050769][ T31] ? security_file_open+0xb1/0x270 [ 497.055924][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.060870][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.065804][ T31] ? __pfx___schedule+0x10/0x10 [ 497.070764][ T31] ? schedule+0x91/0x360 [ 497.075056][ T31] schedule+0x165/0x360 [ 497.079218][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.084740][ T31] __mutex_lock+0x7e6/0x1350 [ 497.089351][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.094401][ T31] ? misc_open+0x51/0x350 [ 497.098746][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.103772][ T31] misc_open+0x51/0x350 [ 497.107987][ T31] chrdev_open+0x4cc/0x5e0 [ 497.112413][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.117417][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 497.123754][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.128752][ T31] do_dentry_open+0x953/0x13f0 [ 497.133541][ T31] vfs_open+0x3b/0x340 [ 497.137671][ T31] ? path_openat+0x2ecd/0x3830 [ 497.142443][ T31] path_openat+0x2ee5/0x3830 [ 497.147095][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 497.152590][ T31] ? count_memcg_event_mm+0x21/0x260 [ 497.157942][ T31] ? __pfx_path_openat+0x10/0x10 [ 497.162892][ T31] ? __pfx___up_read+0x10/0x10 [ 497.167714][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 497.173011][ T31] do_filp_open+0x1fa/0x410 [ 497.177591][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.182448][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 497.187530][ T31] ? _raw_spin_unlock+0x28/0x50 [ 497.192395][ T31] ? alloc_fd+0x64c/0x6c0 [ 497.196818][ T31] do_sys_openat2+0x121/0x1c0 [ 497.201510][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.206859][ T31] ? fd_install+0x97/0x540 [ 497.211292][ T31] ? fd_install+0x30d/0x540 [ 497.215858][ T31] __x64_sys_openat+0x138/0x170 [ 497.220739][ T31] do_syscall_64+0xfa/0xfa0 [ 497.225294][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.230512][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.236599][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.241287][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.247252][ T31] RIP: 0033:0x7f493a38de91 [ 497.251673][ T31] RSP: 002b:00007ffe189f0cd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 497.260666][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f493a38de91 [ 497.268689][ T31] RDX: 0000000000000002 RSI: 00007f493a4129b7 RDI: 00000000ffffff9c [ 497.276741][ T31] RBP: 00007f493a4129b7 R08: 0000000000000000 R09: 00007f493b11d6c0 [ 497.284776][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 497.292744][ T31] R13: 0000000000000003 R14: 00007ffe189f10a8 R15: 0000000000000000 [ 497.300774][ T31] [ 497.303812][ T31] INFO: task syz-executor:13342 blocked for more than 145 seconds. [ 497.311991][ T31] Not tainted syzkaller #0 [ 497.316992][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.325742][ T31] task:syz-executor state:D stack:28008 pid:13342 tgid:13342 ppid:1 task_flags:0x400040 flags:0x00080000 [ 497.337736][ T31] Call Trace: [ 497.341032][ T31] [ 497.343969][ T31] __schedule+0x1798/0x4cc0 [ 497.348567][ T31] ? security_file_open+0xb1/0x270 [ 497.353688][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.358585][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.363452][ T31] ? __pfx___schedule+0x10/0x10 [ 497.368407][ T31] ? schedule+0x91/0x360 [ 497.372978][ T31] schedule+0x165/0x360 [ 497.377197][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.382665][ T31] __mutex_lock+0x7e6/0x1350 [ 497.387306][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.392091][ T31] ? misc_open+0x51/0x350 [ 497.396461][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.401507][ T31] misc_open+0x51/0x350 [ 497.405704][ T31] chrdev_open+0x4cc/0x5e0 [ 497.410125][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.415083][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 497.421415][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.426396][ T31] do_dentry_open+0x953/0x13f0 [ 497.431177][ T31] vfs_open+0x3b/0x340 [ 497.435294][ T31] ? path_openat+0x2ecd/0x3830 [ 497.440075][ T31] path_openat+0x2ee5/0x3830 [ 497.444723][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 497.450211][ T31] ? count_memcg_event_mm+0x21/0x260 [ 497.455553][ T31] ? __pfx_path_openat+0x10/0x10 [ 497.460495][ T31] ? __pfx___up_read+0x10/0x10 [ 497.465306][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 497.470700][ T31] do_filp_open+0x1fa/0x410 [ 497.475246][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.480106][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 497.485235][ T31] ? _raw_spin_unlock+0x28/0x50 [ 497.490093][ T31] ? alloc_fd+0x64c/0x6c0 [ 497.494594][ T31] do_sys_openat2+0x121/0x1c0 [ 497.499280][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.504543][ T31] ? fd_install+0x97/0x540 [ 497.509007][ T31] ? fd_install+0x30d/0x540 [ 497.513500][ T31] __x64_sys_openat+0x138/0x170 [ 497.518382][ T31] do_syscall_64+0xfa/0xfa0 [ 497.522893][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.528145][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.534283][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.538965][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.544891][ T31] RIP: 0033:0x7f2cfcd8de91 [ 497.549303][ T31] RSP: 002b:00007ffd5030f150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 497.557766][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2cfcd8de91 [ 497.565792][ T31] RDX: 0000000000000002 RSI: 00007f2cfce129b7 RDI: 00000000ffffff9c [ 497.573775][ T31] RBP: 00007f2cfce129b7 R08: 0000000000000000 R09: 00007f2cfdb1d6c0 [ 497.581892][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 497.589931][ T31] R13: 0000000000000003 R14: 00007ffd5030f528 R15: 0000000000000000 [ 497.597995][ T31] [ 497.601024][ T31] INFO: task syz-executor:13345 blocked for more than 145 seconds. [ 497.609012][ T31] Not tainted syzkaller #0 [ 497.613944][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.622641][ T31] task:syz-executor state:D stack:28008 pid:13345 tgid:13345 ppid:1 task_flags:0x400040 flags:0x00080000 [ 497.634621][ T31] Call Trace: [ 497.637888][ T31] [ 497.640811][ T31] __schedule+0x1798/0x4cc0 [ 497.645353][ T31] ? security_file_open+0xb1/0x270 [ 497.650477][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.655390][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.660247][ T31] ? __pfx___schedule+0x10/0x10 [ 497.665140][ T31] ? schedule+0x91/0x360 [ 497.669387][ T31] schedule+0x165/0x360 [ 497.673526][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.679037][ T31] __mutex_lock+0x7e6/0x1350 [ 497.683637][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.688470][ T31] ? misc_open+0x51/0x350 [ 497.692812][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.697917][ T31] misc_open+0x51/0x350 [ 497.702082][ T31] chrdev_open+0x4cc/0x5e0 [ 497.706541][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.711490][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 497.717868][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.722803][ T31] do_dentry_open+0x953/0x13f0 [ 497.727621][ T31] vfs_open+0x3b/0x340 [ 497.731692][ T31] ? path_openat+0x2ecd/0x3830 [ 497.736514][ T31] path_openat+0x2ee5/0x3830 [ 497.741114][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 497.746602][ T31] ? count_memcg_event_mm+0x21/0x260 [ 497.751900][ T31] ? __pfx_path_openat+0x10/0x10 [ 497.756868][ T31] ? __pfx___up_read+0x10/0x10 [ 497.761637][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 497.766974][ T31] do_filp_open+0x1fa/0x410 [ 497.771483][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.776363][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 497.781405][ T31] ? _raw_spin_unlock+0x28/0x50 [ 497.786293][ T31] ? alloc_fd+0x64c/0x6c0 [ 497.790645][ T31] do_sys_openat2+0x121/0x1c0 [ 497.795381][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.800585][ T31] ? fd_install+0x97/0x540 [ 497.805030][ T31] ? fd_install+0x30d/0x540 [ 497.809545][ T31] __x64_sys_openat+0x138/0x170 [ 497.814548][ T31] do_syscall_64+0xfa/0xfa0 [ 497.819063][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.824302][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.830371][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.835081][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.840973][ T31] RIP: 0033:0x7fe9e1d8de91 [ 497.845419][ T31] RSP: 002b:00007fffa362a400 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 497.853834][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe9e1d8de91 [ 497.861865][ T31] RDX: 0000000000000002 RSI: 00007fe9e1e129b7 RDI: 00000000ffffff9c [ 497.869860][ T31] RBP: 00007fe9e1e129b7 R08: 0000000000000000 R09: 00007fe9e2b1d6c0 [ 497.877867][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 497.885859][ T31] R13: 0000000000000003 R14: 00007fffa362a7d8 R15: 0000000000000000 [ 497.893826][ T31] [ 497.896877][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 497.905939][ T31] [ 497.905939][ T31] Showing all locks held in the system: [ 497.913651][ T31] 1 lock held by khungtaskd/31: [ 497.918557][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 497.928462][ T31] 2 locks held by getty/5585: [ 497.933118][ T31] #0: ffff88803336e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 497.942931][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 497.953084][ T31] 1 lock held by syz-executor/5823: [ 497.958363][ T31] #0: ffffffff8f5aaee8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 497.968520][ T31] 7 locks held by kworker/u8:55/9309: [ 497.973892][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 497.983869][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 497.992806][ T31] #2: ffff8880b8825958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 498.001810][ T31] #3: ffffffff99a4cc78 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 498.012138][ T31] #4: ffff8880b8825958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 498.021151][ T31] #5: ffffffff99a8e588 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 498.031466][ T31] #6: ffff88801a064078 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x13e/0x210 [ 498.042158][ T31] 3 locks held by kworker/0:11/12540: [ 498.047548][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 498.058736][ T31] #1: ffffc9001c217ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 498.072377][ T31] #2: ffffffff8f5aaee8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 498.083770][ T31] 2 locks held by syz.3.1980/13233: [ 498.089036][ T31] #0: ffff888023978100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 498.098863][ T31] #1: ffffffff8f5aaee8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 498.109018][ T31] 2 locks held by syz.2.1982/13252: [ 498.114254][ T31] #0: ffffffff8f5aaee8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 498.124400][ T31] #1: ffff888023978100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 498.134128][ T31] 3 locks held by syz.4.1989/13284: [ 498.139321][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.148105][ T31] #1: ffff888030eb7100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 498.157713][ T31] #2: ffffffff8f5aaee8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 498.167752][ T31] 1 lock held by syz.0.1995/13315: [ 498.172854][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.181318][ T31] 1 lock held by syz.1.2001/13334: [ 498.186472][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.194984][ T31] 1 lock held by syz-executor/13341: [ 498.200296][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.208805][ T31] 1 lock held by syz-executor/13342: [ 498.214297][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.222768][ T31] 1 lock held by syz-executor/13345: [ 498.228106][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.236603][ T31] 1 lock held by syz-executor/13346: [ 498.241893][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.250437][ T31] 1 lock held by syz-executor/13348: [ 498.255742][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.264241][ T31] 1 lock held by syz-executor/13353: [ 498.269516][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.277988][ T31] 1 lock held by syz-executor/13354: [ 498.283287][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.291776][ T31] 1 lock held by syz-executor/13357: [ 498.297508][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.306052][ T31] 1 lock held by syz-executor/13358: [ 498.311337][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.319813][ T31] 1 lock held by syz-executor/13360: [ 498.325121][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.333573][ T31] 1 lock held by syz-executor/13365: [ 498.338887][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.347385][ T31] 1 lock held by syz-executor/13366: [ 498.352653][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.361154][ T31] 1 lock held by syz-executor/13369: [ 498.366473][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.375010][ T31] 1 lock held by syz-executor/13370: [ 498.380297][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.388816][ T31] 1 lock held by syz-executor/13372: [ 498.394146][ T31] #0: ffffffff8e7750c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.402632][ T31] [ 498.404999][ T31] ============================================= [ 498.404999][ T31] [ 498.413416][ T31] NMI backtrace for cpu 1 [ 498.413433][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 498.413444][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.413451][ T31] Call Trace: [ 498.413456][ T31] [ 498.413461][ T31] dump_stack_lvl+0x189/0x250 [ 498.413481][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.413494][ T31] ? __pfx__printk+0x10/0x10 [ 498.413511][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 498.413524][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 498.413536][ T31] ? __pfx__printk+0x10/0x10 [ 498.413547][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.413564][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 498.413577][ T31] watchdog+0xf60/0xfa0 [ 498.413589][ T31] ? watchdog+0x1e2/0xfa0 [ 498.413602][ T31] kthread+0x711/0x8a0 [ 498.413616][ T31] ? __pfx_watchdog+0x10/0x10 [ 498.413626][ T31] ? __pfx_kthread+0x10/0x10 [ 498.413639][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.413651][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.413663][ T31] ? __pfx_kthread+0x10/0x10 [ 498.413676][ T31] ret_from_fork+0x4bc/0x870 [ 498.413687][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 498.413700][ T31] ? __switch_to_asm+0x39/0x70 [ 498.413712][ T31] ? __switch_to_asm+0x33/0x70 [ 498.413720][ T31] ? __pfx_kthread+0x10/0x10 [ 498.413732][ T31] ret_from_fork_asm+0x1a/0x30 [ 498.413749][ T31] [ 498.413753][ T31] Sending NMI from CPU 1 to CPUs 0: [ 498.559543][ C0] NMI backtrace for cpu 0 [ 498.559559][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 498.559577][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.559587][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 498.559612][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 498.559626][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 498.559640][ C0] RAX: 5924db1ae9fe5a00 RBX: ffffffff81967be7 RCX: 5924db1ae9fe5a00 [ 498.559653][ C0] RDX: 0000000000000001 RSI: ffffffff8d70d527 RDI: ffffffff8bbf05e0 [ 498.559664][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 498.559676][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cdc70 [ 498.559688][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 498.559699][ C0] FS: 0000000000000000(0000) GS:ffff88812613c000(0000) knlGS:0000000000000000 [ 498.559712][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.559723][ C0] CR2: 00005645cdfbf000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 498.559738][ C0] Call Trace: [ 498.559746][ C0] [ 498.559752][ C0] default_idle+0x13/0x20 [ 498.559766][ C0] default_idle_call+0x73/0xb0 [ 498.559781][ C0] do_idle+0x1e7/0x510 [ 498.559802][ C0] ? __pfx_do_idle+0x10/0x10 [ 498.559825][ C0] cpu_startup_entry+0x44/0x60 [ 498.559841][ C0] rest_init+0x2de/0x300 [ 498.559857][ C0] start_kernel+0x3ae/0x410 [ 498.559881][ C0] x86_64_start_reservations+0x24/0x30 [ 498.559900][ C0] x86_64_start_kernel+0x143/0x1c0 [ 498.559918][ C0] common_startup_64+0x13e/0x147 [ 498.559957][ C0] [ 501.418389][ T1299] ieee802154 phy0 wpan0: encryption failed: -22