last executing test programs: 24.563905896s ago: executing program 3 (id=2145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x134}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r5, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd7a}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}]}}]}, 0x68}}, 0x20040054) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdc01}, 0x10}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r11}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="2e9b5b0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) (async) r12 = socket(0x400000000010, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbbd, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x5, 0x2, 0x7fffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) sendmsg$xdp(r12, &(0x7f0000000500)={&(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3e}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="016cea4bb707eefe9e19947899cbf778358ca2b2ee2236363e17dce885104280ab019eef394221af3627af098a55e01aa81ed25ab091da55b8b81cf5e8edde6a24d8b88d911a3aa7425bf52238000a50228e26f3c2d7ca915814e78fd30a3a275c3249ca2a673f0cbe9069322eff7a3f5930cf520257f5defb7203191e44b41cead1c54c9022e013fd97f064d009ccb8da91a6856b700a1770752a188efd939ae46d1e863f14a8", 0xa7}, {&(0x7f0000000240)="61d5244de9fe26f6945b5634e4e21bccaf3895d91b355271d45fb9eae601aca52eeb44862ca63180370eafe5fee719d9704e459ce243e6aa6fce1f2db95d6d851ec1c5a7f919465bcb99cbb9ae", 0x4d}, {&(0x7f0000000480)="4c758be98e5d40fa43dcb0eb0400805c06eb52535ecb326328e9fb83179b461e8ce1faa31228b32948b8915c1982873a8b3dbe8391f5580ac8fa01d8c2ba347166fd0c9953d246bd5a5162458d1b888f5078bd364699125061469bdb9d6bad3e51118746e58f49aab76816361a32", 0x6e}, {&(0x7f0000000140)="760b207f550cd809a321c99d0ab3225e5b0d6559763f563aecab7454bb8784e986f3", 0x22}], 0x4, 0x0, 0x0, 0x40004}, 0x0) 24.176662007s ago: executing program 3 (id=2151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000340)={0x6, 'wg2\x00', {}, 0x3}) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x6c, r8, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x4, 0x0, {0x329, 0xf70, 0x0, 0x319, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf, 0xa, 0x48}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x1, 0x0, {0x400, 0x0, 0x0, 0x3c0, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x2009, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf8bd95529d31095b}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x56}, @void, @val={0xc, 0x99, {0x1000, 0x7c}}}}}, 0x28}}, 0x880) (rerun: 32) 23.928719412s ago: executing program 3 (id=2157): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) recvmmsg(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 23.521507751s ago: executing program 0 (id=2160): socket$rxrpc(0x21, 0x2, 0x2) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @private2}}, 0x24) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000200)={0x0, 'syzkaller1\x00', {0xfffffffd}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfff7fffc, @ipv4={'\x00', '\xff\xff', @dev}, 0xffffdaf0}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "ea00", "91f4de83e53c642c05b4749fd769714a", "e2dfe93c", "9ba50c63d5d9556c"}, 0x28) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) (async) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) 23.462600278s ago: executing program 3 (id=2162): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES64=r8], 0x38}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xa}, {0x6, 0xb}, {0x5, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x1, 0x6}}]}}]}, 0x44}}, 0x44000) 23.209962373s ago: executing program 0 (id=2164): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x80}, 0x1, 0x7}, 0x0) 23.050653128s ago: executing program 0 (id=2166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="18080200d4ff000000000000ff000015182e1b43", @ANYRES32=r1, @ANYBLOB="0000000002000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000040000007300000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0xa}]}, &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x7, 0x2, 0x3, 0x1, 0x4, 0x9}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r5) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r9, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x805}, 0x40) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r10, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x5c, 0x433547ab64d46445, 0xb, 0x16, 0x48, 0x4, 0x18, 0x6c]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) (async) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r7, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x84) 22.886123297s ago: executing program 0 (id=2170): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)='%pB \x00'}, 0x20) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000001000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0xfffffffffffffffe, &(0x7f0000000000)='GPL\x00', 0x9, 0x1000, &(0x7f0000000380)=""/4096, 0x41100, 0x4, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=[r3, r4, r5], 0x0, 0x10, 0xd8d}, 0x94) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, 0x0, &(0x7f00000001c0)=0x54) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000013002f0a2bbd70000000000007006800", @ANYRES32=r1, @ANYBLOB="400900f86422020018001a8009000100766c616e000000000800058004000380"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x8014) 22.842184177s ago: executing program 3 (id=2171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x31, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x19) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="b543000000000000000005"], 0x14}}, 0x0) 22.686057567s ago: executing program 0 (id=2175): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r3 = socket$rds(0x15, 0x5, 0x0) connect$rds(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) (async) socket$rds(0x15, 0x5, 0x0) (async) connect$rds(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) (async) close(r0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) (async) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) (async) 22.685339857s ago: executing program 3 (id=2176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x8004) (async) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r2, 0x410, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20008001) 22.508574896s ago: executing program 0 (id=2178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="100029bd7000fddbdf256f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d600790000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff0000080026009c0100000500190108000000050018010a0000000800a000020000000a000600080211ebff0100000a00060008021100000100000500d6007e00000068f3d35f4f74cf25b91e3a4fa896309e165d5cc91076d48ad2d3e1e51dcae51e903baecb89"], 0x88}, 0x1, 0x0, 0x0, 0x20040445}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x6a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)={0x1, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x6, 0x74, "74a460633ba833b56e1eebfbc36b00d894b28787176c79037e067b5226d35f97e525031ca8fa577a6c7470bfa2ee008b06771f5452c1c6b84d95b8b916971448d0a494d56aba946071f61d13f9c1aab7b2b84da373b5243d5abf8b82766ca317eb6da6d3a5eb515dbd139c9b6aad0428abb138e9"}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x9, [0x6, 0x7, 0x10001, 0x8, 0x2, 0x7]}}, @ra={0x5, 0x2, 0x5}]}, 0xd0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) (async) getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="100029bd7000fddbdf256f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d600790000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff0000080026009c0100000500190108000000050018010a0000000800a000020000000a000600080211ebff0100000a00060008021100000100000500d6007e00000068f3d35f4f74cf25b91e3a4fa896309e165d5cc91076d48ad2d3e1e51dcae51e903baecb89"], 0x88}, 0x1, 0x0, 0x0, 0x20040445}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000"], 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x6a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)={0x1, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x6, 0x74, "74a460633ba833b56e1eebfbc36b00d894b28787176c79037e067b5226d35f97e525031ca8fa577a6c7470bfa2ee008b06771f5452c1c6b84d95b8b916971448d0a494d56aba946071f61d13f9c1aab7b2b84da373b5243d5abf8b82766ca317eb6da6d3a5eb515dbd139c9b6aad0428abb138e9"}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x9, [0x6, 0x7, 0x10001, 0x8, 0x2, 0x7]}}, @ra={0x5, 0x2, 0x5}]}, 0xd0) (async) 16.681467066s ago: executing program 2 (id=2265): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4081) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xc, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r15) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r16 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r18, @ANYRESHEX=r8, @ANYBLOB="0100000000000000000003091d00400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73cee89402ac171721c47e2526dfc34256d77fbb872b3fa6305e50796acd0726159564b6e9aefd963b641135955309ba89060a6c55a3caf47f9887a158cfb38e29c2597ff8271dbb2741e405ef0407207a69"], 0x54}}, 0x4800) 16.559521014s ago: executing program 4 (id=2268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x340, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_PAYLOAD={0x92, 0xa, "c214c8fa60e8e139bbd1602e075046dfab54676ff2644084aeb177e56a02e19f7acee4b516d22b39f4deb086e744721d68d88354d53ad102a8866a751caf98f2963470fc9e11cd54b08ca28f0adad1395a7406c57fbf104496c8bdd5b3d3acdef5572b1fb3de99b8b9c3b8b38c02f77eba2dbf7122808c83ada006dd15b7a3686c52bf47a972f4b54ff6adfe6ae6"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xf9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}]}, @NFQA_EXP={0x240, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x20000001}, 0x2404c841) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffd6a}, 0x1, 0x0, 0x0, 0x810}, 0xb527dfc65a995b1b) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff1, 0x7}, {0xb, 0xf}, {0xffff, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004815}, 0x4008804) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 16.454117662s ago: executing program 2 (id=2269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x9, 0x2, 0x6, 0x2}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) 16.449995454s ago: executing program 4 (id=2270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000020000000003000000"], 0x14}}, 0x0) 16.438039283s ago: executing program 4 (id=2271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r7, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="01c22296"], 0x8) 16.430785164s ago: executing program 2 (id=2272): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a00010008000000fcdbdf2502000000", @ANYRES32=r3, @ANYBLOB="00000009140003000700000000000000000000000000000008000800", @ANYRES32=r3, @ANYBLOB="892135bbf8d6"], 0xfffffffffffffd94}}, 0x4080001) 16.330058077s ago: executing program 2 (id=2273): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x1) connect$rose(r1, &(0x7f0000000e80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @default}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x27, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) 16.250279105s ago: executing program 2 (id=2275): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}}, 0x20000800) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @gue={{0x1, 0x0, 0x3, 0xe4, 0x0, @void}, "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"}}}}, 0xfce) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x100) epoll_create1(0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x1}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000080)={0x10000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r9, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x80, @remote, 0x7}, @in6={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e24, 0x101, @remote, 0x3}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e21, 0xc, @remote, 0x2}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, @in={0x2, 0x4e21, @local}], 0xb0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x80, @remote, 0x7}, @in6={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e24, 0x101, @remote, 0x3}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e21, 0xc, @remote, 0x2}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, @in={0x2, 0x4e21, @local}], 0xb0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0x29, 0x2, 0x0) (async) r11 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/73, 0x49}], 0x4}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400760731a89a42c991d29b8a49c972fae116d5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 16.237905936s ago: executing program 4 (id=2276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 64) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (rerun: 64) shutdown(r0, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000107030000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x0, 0x1}, 0x8) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={r7, 0x2}, &(0x7f0000000480)=0x8) (async) socket$kcm(0x21, 0x2, 0x2) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fddbe2253500000008000700", @ANYRES32, @ANYBLOB="14005500e007e6dc649a36fd3cc36fcd12ed17800a0034000202020202020000"], 0x5c}, 0x1, 0x0, 0x0, 0x200040c1}, 0xa71b3742016f6be8) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r11, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async, rerun: 32) accept(0xffffffffffffffff, &(0x7f00000001c0)=@can={0x1d, 0x0}, &(0x7f0000000040)=0x80) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x50}}, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="00000070f6f16031540bfd103101000180000000000000fdc737540000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r10], 0x48) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000580)=""/169, 0x3ff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYRESDEC=r8], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', r12, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x805}, 0x94) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.08238867s ago: executing program 4 (id=2278): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000001340)=""/4051, 0xfd3}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}], 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket(0x6, 0x3, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x68}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r9}, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x136, &(0x7f0000000000), &(0x7f0000001080)="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"}, 0x50) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, 0x0, &(0x7f0000000800)=0x36) r12 = socket(0x10, 0x803, 0x0) bind$netlink(r12, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) 16.005969258s ago: executing program 4 (id=2279): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x2, 0x0, &(0x7f00000003c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0xfffffffffffffe7a, 0x1, r7}]}, 0x1c}}, 0x240000c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f00000002c0)={"ca6751d5b6fcef5f7168e107b11d5519", 0x0, 0x0, {0x3, 0x3}, {0xc, 0xb}, 0x4, [0x7, 0x3ff, 0x684a, 0x37, 0x9, 0x8000, 0x400, 0xa532, 0x5, 0x1ff, 0x2, 0x800, 0x1, 0x1, 0xfffffffffffffff9, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000400)={{r4}, r10, 0x2, @unused=[0x8, 0xa, 0x80000001], @devid}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(r9, 0x4004f50d, &(0x7f0000000280)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) unshare(0x22020400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r12, 0x0, 0x0}, 0x10) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x11, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xd84af85f5b1c07d4}, 0x8080) 15.620101766s ago: executing program 1 (id=2284): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket(0xa, 0x3, 0x3a) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r2}, 0x18) setsockopt$MRT6_TABLE(r1, 0x29, 0xc8, 0x0, 0xfffffeef) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x23, 0xff20) 15.601434224s ago: executing program 1 (id=2285): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r3 = accept4$tipc(r2, &(0x7f0000000040), &(0x7f00000001c0)=0x10, 0x81800) (async) sendto(r0, &(0x7f0000000740)="2dfcae9f701491a8839ee8880b640e73a431a1409612830bfc0a0c5b6e84fc778e29f846e42688f43d6c67adb9b74d1978f8155da6a5c5d4e4473fcb75a0e5868f3748632745f5facd359af74b779fd287948ddbdbe4816df759fd774245828a945faa78978b9ea8476090949f95cc0dad2a219d0ceae81624229b099067f840457e2c9e6ffb9e9548d629cd8fe0aee95388b9d52063d5", 0x97, 0x40094, &(0x7f0000000140)=@isdn={0x22, 0x78, 0x5, 0x4, 0x6}, 0x80) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x5, 0x2, 0x0, 0x400000}, 0x10}}, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) (async) recvmmsg(r3, &(0x7f0000000640)=[{{&(0x7f0000000240)=@sco={0x1f, @none}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f00000002c0)=""/57, 0x39}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000500)=""/135, 0x87}], 0x5, &(0x7f0000000b40)=""/4096, 0x1000}, 0xff}], 0x1, 0x20, &(0x7f0000000680)={0x77359400}) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x26) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002f00002c0012800b0001006772bfd0743500001c00028006000e00faffffff0700070064010101030010004cdb21a0b51a612cc556c5fe429122", @ANYRES32=r8, @ANYBLOB], 0x54}}, 0x24000000) 15.557735228s ago: executing program 1 (id=2286): syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a820008100000086dd603f1060001b2f00fc000800000000000000000000000000ff0200000000000000000000000000012420810000000000fffb700000000800000086dd0800"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040d8e43006bc76c2efa17e7c33073ba660775f37a2d892f43b7701ba97f1aca7afe1d9a6c593b8e098f331d6"], 0xfc}}, 0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040d8e43006bc76c2efa17e7c33073ba660775f37a2d892f43b7701ba97f1aca7afe1d9a6c593b8e098f331d6"], 0xfc}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0xf02, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) 15.457759933s ago: executing program 1 (id=2287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000001100006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868e6cd1678f74e30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b506971431bb6b1fb46b2aa425833f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa209000000000000003ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x8}, 0x94) 15.457010304s ago: executing program 1 (id=2288): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) (async) r5 = socket$kcm(0x2, 0xa, 0x2) unshare(0x26020480) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0), 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="2e9b5b0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) (async) r6 = socket$inet(0x2, 0x80000, 0xfffffffd) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010225bd7000fddbdf25060000002000018008000100", @ANYRES64=r8, @ANYBLOB="140002e17d7d3f90510337af211ebedb9fb539f742b8e9b74f6752980622e0e640eec8f7068a53a435af30127f6839a9d3063c06c7e77267b47b67a4b44a03adced358461873dda470b22601c5bbfc9c978e11620847450759e7580d16e49c2ab7bbdb0df55a92c2fc5c3371660a031b2e1bc3736dd962f032f100f32f9055baccb06e120c6f4231537c94212c677e6fa0627e6ea092daec"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1f000000060000b3ff000c0000000000e104d7a7da000020f90000", @ANYRES32, @ANYBLOB="fcffbfff00"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="03000000040000000100"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)="5d9e4e4e265429bfc3733286b8d491b10754924383fc3d3c1dc97b3d9a5eb2532713ab8c05f24d45bcb1c0e181942cc5", &(0x7f0000000140), 0x5, r0}, 0x38) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) socketpair(0xa, 0x6, 0x0, &(0x7f0000000300)) 15.250667234s ago: executing program 1 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe18, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000040)={0x1, "c2"}, 0x2) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 32) listen(r2, 0x800) (async, rerun: 32) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async, rerun: 32) r6 = socket(0x2a, 0x2, 0x0) (rerun: 32) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8, 0xb, r7}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}]}}}]}, 0x4c}}, 0x0) 15.208102423s ago: executing program 2 (id=2290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'wg1\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=@delchain={0x38, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfffb}, {}, {0xb, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8808}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newtclass={0x48, 0x28, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc, 0xa}, {0x0, 0xffff}, {0xffe0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x80}}, @TCA_RATE={0x6, 0x5, {0xd, 0xfc}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_prio={0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) 7.136350002s ago: executing program 32 (id=2178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="100029bd7000fddbdf256f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d600790000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff0000080026009c0100000500190108000000050018010a0000000800a000020000000a000600080211ebff0100000a00060008021100000100000500d6007e00000068f3d35f4f74cf25b91e3a4fa896309e165d5cc91076d48ad2d3e1e51dcae51e903baecb89"], 0x88}, 0x1, 0x0, 0x0, 0x20040445}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x6a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)={0x1, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x6, 0x74, "74a460633ba833b56e1eebfbc36b00d894b28787176c79037e067b5226d35f97e525031ca8fa577a6c7470bfa2ee008b06771f5452c1c6b84d95b8b916971448d0a494d56aba946071f61d13f9c1aab7b2b84da373b5243d5abf8b82766ca317eb6da6d3a5eb515dbd139c9b6aad0428abb138e9"}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x9, [0x6, 0x7, 0x10001, 0x8, 0x2, 0x7]}}, @ra={0x5, 0x2, 0x5}]}, 0xd0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) (async) getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="100029bd7000fddbdf256f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d600790000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff0000080026009c0100000500190108000000050018010a0000000800a000020000000a000600080211ebff0100000a00060008021100000100000500d6007e00000068f3d35f4f74cf25b91e3a4fa896309e165d5cc91076d48ad2d3e1e51dcae51e903baecb89"], 0x88}, 0x1, 0x0, 0x0, 0x20040445}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000"], 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x6a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)={0x1, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x6, 0x74, "74a460633ba833b56e1eebfbc36b00d894b28787176c79037e067b5226d35f97e525031ca8fa577a6c7470bfa2ee008b06771f5452c1c6b84d95b8b916971448d0a494d56aba946071f61d13f9c1aab7b2b84da373b5243d5abf8b82766ca317eb6da6d3a5eb515dbd139c9b6aad0428abb138e9"}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x9, [0x6, 0x7, 0x10001, 0x8, 0x2, 0x7]}}, @ra={0x5, 0x2, 0x5}]}, 0xd0) (async) 7.110300261s ago: executing program 33 (id=2176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x8004) (async) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r2, 0x410, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20008001) 64.818034ms ago: executing program 34 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe18, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000040)={0x1, "c2"}, 0x2) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 32) listen(r2, 0x800) (async, rerun: 32) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async, rerun: 32) r6 = socket(0x2a, 0x2, 0x0) (rerun: 32) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8, 0xb, r7}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}]}}}]}, 0x4c}}, 0x0) 38.372921ms ago: executing program 35 (id=2290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'wg1\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=@delchain={0x38, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfffb}, {}, {0xb, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8808}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newtclass={0x48, 0x28, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc, 0xa}, {0x0, 0xffff}, {0xffe0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x80}}, @TCA_RATE={0x6, 0x5, {0xd, 0xfc}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_prio={0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) 0s ago: executing program 36 (id=2279): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x2, 0x0, &(0x7f00000003c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0xfffffffffffffe7a, 0x1, r7}]}, 0x1c}}, 0x240000c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f00000002c0)={"ca6751d5b6fcef5f7168e107b11d5519", 0x0, 0x0, {0x3, 0x3}, {0xc, 0xb}, 0x4, [0x7, 0x3ff, 0x684a, 0x37, 0x9, 0x8000, 0x400, 0xa532, 0x5, 0x1ff, 0x2, 0x800, 0x1, 0x1, 0xfffffffffffffff9, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000400)={{r4}, r10, 0x2, @unused=[0x8, 0xa, 0x80000001], @devid}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(r9, 0x4004f50d, &(0x7f0000000280)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) unshare(0x22020400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r12, 0x0, 0x0}, 0x10) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x11, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xd84af85f5b1c07d4}, 0x8080) kernel console output (not intermixed with test programs): er kthread for wq "bond4": -EINTR [ 113.852956][ T7677] wlan0 speed is unknown, defaulting to 1000 [ 113.925504][ T7677] wlan0 speed is unknown, defaulting to 1000 [ 113.959264][ T7677] wlan0 speed is unknown, defaulting to 1000 [ 113.992986][ T7677] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.038504][ T7677] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.040009][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 114.068763][ T7686] sctp: [Deprecated]: syz.2.494 (pid 7686) Use of int in max_burst socket option. [ 114.068763][ T7686] Use struct sctp_assoc_value instead [ 114.201013][ T7677] wlan0 speed is unknown, defaulting to 1000 [ 114.250358][ T7677] wlan0 speed is unknown, defaulting to 1000 [ 114.282066][ T7677] wlan0 speed is unknown, defaulting to 1000 [ 114.303485][ T7677] wlan0 speed is unknown, defaulting to 1000 [ 114.315342][ T7677] wlan0 speed is unknown, defaulting to 1000 [ 114.658710][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.492'. [ 114.775556][ T7712] veth1_macvtap: left promiscuous mode [ 114.810516][ T7712] macsec0: entered promiscuous mode [ 114.842145][ T7712] macsec0: entered allmulticast mode [ 114.890318][ T7720] veth1_macvtap: entered promiscuous mode [ 114.940168][ T7720] veth1_macvtap: entered allmulticast mode [ 114.997054][ T7720] macsec0: left promiscuous mode [ 115.028865][ T7720] macsec0: left allmulticast mode [ 115.048396][ T7720] veth1_macvtap: left allmulticast mode [ 115.474624][ T7736] netlink: 44 bytes leftover after parsing attributes in process `syz.2.507'. [ 115.741649][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 116.973693][ T7777] syzkaller0: entered promiscuous mode [ 116.998350][ T7777] syzkaller0: entered allmulticast mode [ 117.098621][ T7803] tipc: Enabled bearer , priority 0 [ 117.185910][ T7776] tipc: Resetting bearer [ 117.207392][ T7808] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 117.216956][ T7776] tipc: Disabling bearer [ 117.454022][ T7821] bond4: (slave ip6gretap1): making interface the new active one [ 117.487117][ T7821] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 117.572261][ T7832] netlink: 'syz.3.525': attribute type 1 has an invalid length. [ 117.620953][ T7832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.688885][ T10] wlan0 speed is unknown, defaulting to 1000 [ 117.913429][ T7855] netlink: zone id is out of range [ 117.957331][ T7855] netlink: zone id is out of range [ 117.974497][ T7855] netlink: zone id is out of range [ 117.994762][ T7855] netlink: zone id is out of range [ 118.025956][ T7855] netlink: zone id is out of range [ 118.052007][ T7855] netlink: zone id is out of range [ 118.057246][ T7855] netlink: zone id is out of range [ 118.067056][ T7864] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.102088][ T7855] netlink: set zone limit has 4 unknown bytes [ 118.399023][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.537'. [ 118.441555][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 118.578884][ T7894] netlink: 52 bytes leftover after parsing attributes in process `syz.0.541'. [ 118.621163][ T7900] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 118.658595][ T7900] netlink: 224 bytes leftover after parsing attributes in process `syz.3.542'. [ 119.266356][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 119.349348][ T7943] x_tables: duplicate underflow at hook 2 [ 119.586350][ T7961] bond0: Device is already in use. [ 119.915286][ T7977] bond0: entered allmulticast mode [ 119.963339][ T7977] bond_slave_0: entered allmulticast mode [ 119.984213][ T7977] bond_slave_1: entered allmulticast mode [ 120.515888][ T8006] geneve2: entered promiscuous mode [ 120.540788][ T8006] geneve2: entered allmulticast mode [ 120.548825][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 120.567249][ T2910] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.599585][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 120.666293][ T2910] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.706500][ T2910] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.758347][ T8032] tipc: Enabling of bearer rejected, already enabled [ 120.793072][ T2910] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.996725][ T8043] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 121.798470][ T8090] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 122.819785][ T8090] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 122.879638][ T8117] netlink: 'syz.2.588': attribute type 1 has an invalid length. [ 122.898403][ T8117] netlink: 'syz.2.588': attribute type 3 has an invalid length. [ 122.906438][ T8117] netlink: 172 bytes leftover after parsing attributes in process `syz.2.588'. [ 122.959177][ T8117] NCSI netlink: No device for ifindex 813332851 [ 123.114568][ T8136] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 123.192412][ T8143] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 123.225665][ T8143] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 123.421287][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 123.707744][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 123.918708][ T8185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.148614][ T8191] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 124.183077][ T8191] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 124.204245][ T8191] gretap1: entered promiscuous mode [ 124.213290][ T8191] gretap1: entered allmulticast mode [ 124.219480][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 124.350521][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 124.409095][ T8200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.555793][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 124.706723][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 124.733386][ T8224] netlink: 244 bytes leftover after parsing attributes in process `syz.2.615'. [ 124.751053][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 124.751477][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 125.195472][ T8253] tipc: Enabled bearer , priority 0 [ 125.222928][ T8248] netlink: 44 bytes leftover after parsing attributes in process `syz.2.622'. [ 125.288010][ T8254] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 125.330352][ T8255] tipc: Resetting bearer [ 125.392233][ T5945] IPVS: starting estimator thread 0... [ 125.467476][ T8267] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 125.488570][ T8267] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 125.496451][ T8261] IPVS: using max 28 ests per chain, 67200 per kthread [ 125.516231][ T8267] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 125.554687][ T8267] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 125.635703][ T8272] Bluetooth: MGMT ver 1.23 [ 125.684813][ T8276] xt_l2tp: v2 doesn't support IP mode [ 125.842706][ T8278] batadv_slave_0: entered promiscuous mode [ 125.881231][ T8286] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 125.888391][ T8277] batadv_slave_0: left promiscuous mode [ 126.281192][ T8310] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 126.294423][ T8311] netlink: 'syz.1.634': attribute type 6 has an invalid length. [ 126.341426][ T8314] tipc: Started in network mode [ 126.346573][ T8314] tipc: Node identity 66e2ca5d447c, cluster identity 4711 [ 126.378850][ T8314] tipc: Enabled bearer , priority 11 [ 127.064586][ T8344] netlink: 'syz.1.648': attribute type 3 has an invalid length. [ 127.078851][ T8344] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 127.232518][ T8351] wg1: entered promiscuous mode [ 127.237616][ T8351] wg1: entered allmulticast mode [ 127.530858][ T8372] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 127.542307][ T5945] tipc: Node number set to 580831837 [ 127.559205][ T8376] netlink: 'syz.2.659': attribute type 10 has an invalid length. [ 127.581829][ T8376] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.847326][ T8349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.911981][ T8399] netlink: 'syz.0.664': attribute type 2 has an invalid length. [ 128.102611][ T8410] block nbd0: not configured, cannot reconfigure [ 128.439193][ T8427] __nla_validate_parse: 13 callbacks suppressed [ 128.439211][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 128.440788][ T8428] netlink: 56 bytes leftover after parsing attributes in process `syz.1.673'. [ 128.493473][ T8424] can: request_module (can-proto-0) failed. [ 128.591792][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 128.645919][ T8441] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.678061][ T8445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.674'. [ 128.700221][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 128.794665][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 128.883440][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 128.928326][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 129.039248][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 129.199648][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.290335][ T8469] syz_tun: entered allmulticast mode [ 129.976519][ T8510] IPVS: ip_vs_edit_dest(): server weight less than zero [ 129.984021][ T5906] IPVS: starting estimator thread 0... [ 130.088380][ T8511] IPVS: using max 53 ests per chain, 127200 per kthread [ 130.166008][ T8516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.701'. [ 130.282772][ T8516] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 130.351609][ T8516] 8021q: adding VLAN 0 to HW filter on device bond5 [ 130.399344][ T8528] netlink: 'syz.2.704': attribute type 83 has an invalid length. [ 130.662003][ T8533] geneve3: entered promiscuous mode [ 130.915319][ T8548] x_tables: duplicate underflow at hook 1 [ 131.050393][ T8553] sctp: [Deprecated]: syz.3.712 (pid 8553) Use of int in maxseg socket option. [ 131.050393][ T8553] Use struct sctp_assoc_value instead [ 131.316712][ T8568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.024924][ T8560] lec:lec_atm_close: lec0: Shut down! [ 132.236987][ T8614] bridge0: port 3(batadv1) entered blocking state [ 132.274641][ T8614] bridge0: port 3(batadv1) entered disabled state [ 132.284803][ T8614] batadv1: entered allmulticast mode [ 132.307919][ T8614] batadv1: entered promiscuous mode [ 132.337004][ T8610] syzkaller0: entered promiscuous mode [ 132.343277][ T8610] syzkaller0: entered allmulticast mode [ 132.625761][ T8638] netlink: 'syz.1.730': attribute type 21 has an invalid length. [ 132.685433][ T6639] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.698352][ T8638] netlink: 'syz.1.730': attribute type 21 has an invalid length. [ 132.720681][ T143] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 132.730612][ T143] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 132.773257][ T6639] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.782490][ T6639] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.802467][ T6639] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.973864][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.119277][ T8666] bond2 (unregistering): Released all slaves [ 133.221679][ T8669] netlink: 'syz.0.737': attribute type 13 has an invalid length. [ 133.243370][ T8669] veth0_macvtap: left promiscuous mode [ 133.254720][ T8669] macvtap0: entered allmulticast mode [ 133.279554][ T8669] macvtap0: refused to change device tx_queue_len [ 133.542076][ T8680] netlink: 'syz.0.740': attribute type 6 has an invalid length. [ 133.794051][ T8694] __nla_validate_parse: 9 callbacks suppressed [ 133.794068][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 133.862034][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 134.007137][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.746'. [ 134.222517][ T8723] netlink: 388 bytes leftover after parsing attributes in process `syz.3.749'. [ 134.587656][ T8743] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 134.741815][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 134.787846][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 134.987379][ T8769] netlink: 136 bytes leftover after parsing attributes in process `syz.1.763'. [ 135.036990][ T8765] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 135.084960][ T8756] macvlan0: entered promiscuous mode [ 135.100688][ T8756] macvlan0: entered allmulticast mode [ 135.119462][ T8756] bond2: entered promiscuous mode [ 135.130378][ T8756] bridge0: entered promiscuous mode [ 135.143809][ T8756] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 135.213115][ T8756] bond2: left promiscuous mode [ 135.231783][ T8756] bridge0: left promiscuous mode [ 135.271460][ T8779] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 135.317810][ T8779] netlink: 'syz.1.765': attribute type 2 has an invalid length. [ 135.487017][ T8784] netlink: 68 bytes leftover after parsing attributes in process `syz.3.768'. [ 135.588947][ T8781] veth5: entered allmulticast mode [ 135.618902][ T10] lec:lec_start_xmit: lec0:No lecd attached [ 135.790004][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 135.869738][ T8799] x_tables: duplicate underflow at hook 1 [ 136.031381][ T8818] lo: entered allmulticast mode [ 136.047785][ T8818] lo: left allmulticast mode [ 136.375098][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.780'. [ 136.696012][ T8857] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 137.207698][ T8876] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 137.804358][ T8908] netlink: 'syz.4.797': attribute type 5 has an invalid length. [ 138.723771][ T8950] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 138.742604][ T8950] dummy0: entered promiscuous mode [ 138.754050][ T8950] bridge0: port 3(dummy0) entered blocking state [ 138.764599][ T8950] bridge0: port 3(dummy0) entered disabled state [ 138.772232][ T8950] dummy0: entered allmulticast mode [ 139.497683][ T8997] tipc: Enabling of bearer rejected, failed to enable media [ 139.711695][ T9005] dvmrp0: entered allmulticast mode [ 139.734589][ T9005] dvmrp0: left allmulticast mode [ 139.780252][ T9007] __nla_validate_parse: 16 callbacks suppressed [ 139.780275][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 139.803686][ T9007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.827'. [ 139.952604][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 140.107544][ T9017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.829'. [ 140.146941][ T9017] tipc: Enabling of bearer rejected, already enabled [ 140.656132][ T9047] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 140.730259][ T9047] netlink: 'syz.4.837': attribute type 23 has an invalid length. [ 140.812583][ T9050] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 141.077056][ T9059] bridge_slave_0: default FDB implementation only supports local addresses [ 141.131283][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.840'. [ 141.150247][ T9062] netlink: 64 bytes leftover after parsing attributes in process `syz.1.842'. [ 141.159521][ T9062] block nbd0: not configured, cannot reconfigure [ 141.277411][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.841'. [ 141.286410][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 141.286577][ C1] lec:lec_tx_timeout: lec0 [ 141.302012][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 141.328679][ T9071] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 141.513365][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 141.590554][ T9081] tipc: Started in network mode [ 141.605792][ T9081] tipc: Node identity 9, cluster identity 4711 [ 141.622716][ T9081] tipc: Node number set to 9 [ 141.699208][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.849'. [ 141.830924][ T9093] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 142.067897][ T9107] sit2: entered promiscuous mode [ 142.090489][ T9107] sit2: entered allmulticast mode [ 142.180576][ T9116] lo: entered promiscuous mode [ 142.185494][ T9116] lo: entered allmulticast mode [ 142.426889][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.864'. [ 142.918013][ T9147] netlink: 'syz.1.871': attribute type 29 has an invalid length. [ 142.934619][ T9147] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 142.954548][ T9147] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 143.460586][ T9174] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.956140][ T9200] netlink: 'syz.0.886': attribute type 15 has an invalid length. [ 143.976180][ T1168] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2048 - 0 [ 143.976191][ T9200] netlink: 'syz.0.886': attribute type 15 has an invalid length. [ 144.075822][ T1168] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2048 - 0 [ 144.143695][ T1168] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2048 - 0 [ 144.200051][ T1168] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2048 - 0 [ 144.420484][ T9223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.646197][ T9236] openvswitch: netlink: Flow key attribute not present in set flow. [ 144.976437][ T9249] netlink: 'syz.4.902': attribute type 10 has an invalid length. [ 145.328987][ T9273] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 145.352573][ T9273] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 145.378585][ T9273] tipc: Enabled bearer , priority 0 [ 145.576290][ T9285] __nla_validate_parse: 14 callbacks suppressed [ 145.576308][ T9285] netlink: 44 bytes leftover after parsing attributes in process `syz.4.910'. [ 145.709648][ T9295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.913'. [ 145.831676][ T9302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.915'. [ 146.015175][ T9308] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 146.177899][ T9321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.185571][ T9321] IPv6: NLM_F_CREATE should be set when creating new route [ 146.192962][ T9321] IPv6: NLM_F_CREATE should be set when creating new route [ 146.200335][ T9321] IPv6: NLM_F_CREATE should be set when creating new route [ 146.248189][ T9321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.307029][ T9326] tipc: Enabling of bearer rejected, already enabled [ 146.345190][ T9326] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 146.368708][ T9326] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 146.539237][ T9337] netlink: 'syz.1.927': attribute type 4 has an invalid length. [ 146.586847][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 146.611385][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.927'. [ 146.629611][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 146.644147][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.927'. [ 146.730401][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 146.743344][ T9340] netlink: 104 bytes leftover after parsing attributes in process `syz.0.928'. [ 147.038151][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 147.047334][ C1] lec:lec_tx_timeout: lec0 [ 147.052371][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 147.328010][ T9376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.935'. [ 147.559672][ T9390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.645518][ T9384] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 147.664091][ T9384] bond4 (unregistering): Released all slaves [ 147.805355][ T9401] block nbd0: Unsupported socket: should be TCP or UNIX. [ 147.865216][ T9404] netlink: 'syz.3.943': attribute type 12 has an invalid length. [ 147.936168][ T9409] netlink: 'syz.1.945': attribute type 4 has an invalid length. [ 149.443622][ T9429] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 149.486901][ T9434] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 149.640567][ T9450] siw: device registration error -23 [ 149.758749][ T9455] netlink: 'syz.3.956': attribute type 83 has an invalid length. [ 149.760194][ T9457] netlink: 'syz.4.958': attribute type 3 has an invalid length. [ 150.011224][ T9465] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 150.072394][ T9465] bond3 (unregistering): Released all slaves [ 150.501697][ T9491] v: renamed from vlan0 (while UP) [ 151.015354][ T9512] __nla_validate_parse: 10 callbacks suppressed [ 151.015370][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 151.085268][ T9517] netlink: 'syz.1.971': attribute type 12 has an invalid length. [ 151.211112][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.975'. [ 151.310695][ T9530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.318170][ T9530] IPv6: NLM_F_CREATE should be set when creating new route [ 151.325461][ T9530] IPv6: NLM_F_CREATE should be set when creating new route [ 151.378618][ T9537] netlink: 120 bytes leftover after parsing attributes in process `syz.4.979'. [ 151.735524][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.982'. [ 151.764497][ T9552] ipip0: entered promiscuous mode [ 152.068201][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 152.076386][ C1] lec:lec_tx_timeout: lec0 [ 152.081314][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 152.094596][ T9571] netlink: 312 bytes leftover after parsing attributes in process `syz.3.986'. [ 152.102565][ T9574] bridge2: entered promiscuous mode [ 152.109248][ T9574] bridge2: entered allmulticast mode [ 152.133590][ T9574] team0: Port device bridge2 added [ 152.152866][ T9574] bridge0: port 1(team0) entered blocking state [ 152.173047][ T9574] bridge0: port 1(team0) entered disabled state [ 152.198492][ T9574] team0: entered allmulticast mode [ 152.216920][ T9574] team_slave_0: entered allmulticast mode [ 152.244852][ T9574] team_slave_1: entered allmulticast mode [ 152.283371][ T9574] team0: entered promiscuous mode [ 152.292967][ T9574] team_slave_0: entered promiscuous mode [ 152.302321][ T9574] team_slave_1: entered promiscuous mode [ 152.309190][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.990'. [ 152.309512][ T9574] bridge0: port 1(team0) entered blocking state [ 152.319211][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 152.324809][ T9574] bridge0: port 1(team0) entered forwarding state [ 152.347958][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.990'. [ 152.360202][ T9579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.369681][ T9579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.379400][ T9579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.387437][ T9579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.851501][ T9610] syzkaller0: entered promiscuous mode [ 152.857185][ T9610] syzkaller0: entered allmulticast mode [ 154.062437][ T9620] netlink: 'syz.4.998': attribute type 9 has an invalid length. [ 154.071182][ T9626] tipc: Enabling of bearer rejected, failed to enable media [ 154.090950][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.996'. [ 154.103546][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.996'. [ 155.398592][ T9693] bond4: option xmit_hash_policy: invalid value (64) [ 155.429138][ T9693] bond4 (unregistering): Released all slaves [ 155.468750][ T9708] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 155.731546][ T9716] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 155.866099][ T9723] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.879710][ T9723] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.898668][ T9723] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 156.150214][ T9731] __nla_validate_parse: 5 callbacks suppressed [ 156.150231][ T9731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1024'. [ 156.172245][ T9731] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1024'. [ 156.327311][ T9723] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.356613][ T9723] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.383102][ T9723] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 156.400433][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1031'. [ 156.457460][ T9753] bond4: Unable to set down delay as MII monitoring is disabled [ 156.476050][ T9753] bond4 (unregistering): Released all slaves [ 156.595868][ T9723] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.620839][ T9723] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.632374][ T9723] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 156.659718][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 156.675582][ T9771] ip6t_rpfilter: unknown options [ 156.753051][ T9723] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.772631][ T9723] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.785940][ T9778] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1036'. [ 156.801625][ T9723] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 157.000696][ T6014] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.016646][ T6014] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 157.037546][ T6014] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.087846][ T3489] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.096390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 157.096423][ C1] lec:lec_tx_timeout: lec0 [ 157.105178][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 157.147630][ T3489] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 157.166944][ T3489] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.220699][ T3489] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.245865][ T3489] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 157.274056][ T3489] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.304769][ T3489] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.335866][ T3489] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 157.354708][ T3489] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.377663][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'. [ 157.415282][ T9800] Illegal XDP return value 3005636976 on prog (id 204) dev N/A, expect packet loss! [ 157.752314][ T9819] lo: entered allmulticast mode [ 157.764257][ T9821] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 157.785771][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 157.799669][ T9819] netlink: 'syz.4.1050': attribute type 10 has an invalid length. [ 157.801301][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 157.822806][ T9823] batadv_slave_1: entered promiscuous mode [ 157.837605][ T9819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1050'. [ 157.885881][ T9819] dummy0: entered promiscuous mode [ 157.895609][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 157.913461][ T9819] bridge0: port 3(dummy0) entered blocking state [ 157.954580][ T9819] bridge0: port 3(dummy0) entered disabled state [ 157.985499][ T9819] dummy0: entered allmulticast mode [ 158.006207][ T9819] bridge0: port 3(dummy0) entered blocking state [ 158.012846][ T9819] bridge0: port 3(dummy0) entered forwarding state [ 158.069874][ T9823] bond4: Invalid ad_actor_system MAC address. [ 158.090141][ T9823] bond4: option ad_actor_system: invalid value (1) [ 158.129281][ T9823] bond4 (unregistering): Released all slaves [ 158.224693][ T9850] veth0: entered promiscuous mode [ 158.246412][ T9849] veth0: left promiscuous mode [ 158.279731][ T9822] batadv_slave_1: left promiscuous mode [ 158.631678][ T9876] netlink: 'syz.2.1063': attribute type 10 has an invalid length. [ 158.640772][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.648970][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.695853][ T9876] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.703672][ T9876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.711777][ T9876] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.719913][ T9876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.748343][ T9876] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 158.791105][ T9881] 8021q: VLANs not supported on ip6_vti0 [ 158.834394][ T9889] xt_ecn: cannot match TCP bits for non-tcp packets [ 158.844263][ T9881] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 159.132862][ T9905] netlink: 'syz.1.1073': attribute type 11 has an invalid length. [ 159.217485][ T9915] netlink: 'syz.2.1074': attribute type 21 has an invalid length. [ 159.230285][ T9913] netlink: 'syz.0.1076': attribute type 1 has an invalid length. [ 159.352354][ T9917] x_tables: unsorted entry at hook 3 [ 159.380285][ T9919] netlink: 'syz.4.1078': attribute type 4 has an invalid length. [ 159.860861][ T9926] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 160.317947][ T9963] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.591058][ T9980] netlink: 'syz.3.1094': attribute type 6 has an invalid length. [ 160.615931][ T9980] netlink: 'syz.3.1094': attribute type 5 has an invalid length. [ 160.858293][T10008] syzkaller0: entered promiscuous mode [ 160.866679][T10004] ksmbd: Unknown IPC event: 1, ignore. [ 160.876438][T10008] syzkaller0: entered allmulticast mode [ 161.220651][T10032] __nla_validate_parse: 16 callbacks suppressed [ 161.220670][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 161.249079][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 161.258986][T10032] netlink: 'syz.4.1107': attribute type 3 has an invalid length. [ 161.322477][T10035] openvswitch: netlink: Tunnel attr 195 out of range max 16 [ 161.333013][T10035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1108'. [ 161.444267][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1109'. [ 161.564833][T10044] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 161.651544][T10057] sctp: [Deprecated]: syz.1.1114 (pid 10057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.651544][T10057] Use struct sctp_sack_info instead [ 161.827421][T10067] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1117'. [ 161.948804][T10072] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 162.031890][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 162.054016][T10082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.099484][T10072] 8021q: adding VLAN 0 to HW filter on device bond6 [ 162.108150][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 162.116248][ C1] lec:lec_tx_timeout: lec0 [ 162.121520][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 162.190701][T10079] bond5: Removing last arp target with arp_interval on [ 162.216953][T10080] bond6: (slave geneve3): making interface the new active one [ 162.273801][T10080] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 162.503164][T10068] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1118'. [ 162.770635][T10108] : renamed from hsr0 (while UP) [ 162.999820][T10123] macvlan0: entered promiscuous mode [ 163.093240][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1127'. [ 163.196510][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1130'. [ 163.684718][T10167] erspan0: entered promiscuous mode [ 163.843800][T10174] netem: change failed [ 163.992017][T10183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.003693][T10183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.014020][T10183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.026096][T10183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.055527][T10183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.109885][T10183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.188048][T10194] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1150'. [ 164.511344][T10207] bridge3: entered promiscuous mode [ 164.516623][T10207] bridge3: entered allmulticast mode [ 164.667899][T10228] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 164.713112][T10210] syzkaller1: entered promiscuous mode [ 164.731277][T10210] syzkaller1: entered allmulticast mode [ 164.912564][T10236] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 164.924546][T10236] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 164.932833][T10236] gretap1: entered promiscuous mode [ 164.938456][T10236] gretap1: entered allmulticast mode [ 164.979005][T10237] siw: device registration error -23 [ 165.169872][T10248] tipc: Enabling of bearer rejected, already enabled [ 165.279121][T10251] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 165.313997][T10255] syzkaller0: entered promiscuous mode [ 165.340975][T10255] syzkaller0: entered allmulticast mode [ 165.430538][T10262] Cannot find del_set index 49151 as target [ 165.575541][T10268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.618835][T10272] x_tables: duplicate entry at hook 1 [ 165.891153][T10278] team0: Port device team_slave_0 removed [ 165.953355][T10292] netlink: 'syz.0.1182': attribute type 1 has an invalid length. [ 165.971891][T10295] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 165.988837][T10294] bridge3: entered promiscuous mode [ 165.994303][T10294] bridge3: entered allmulticast mode [ 166.250908][T10309] __nla_validate_parse: 7 callbacks suppressed [ 166.250925][T10309] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.1188'. [ 166.283898][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1189'. [ 166.289259][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'. [ 166.303274][T10309] openvswitch: netlink: Message has 6 unknown bytes. [ 166.320166][T10317] xt_TCPMSS: Only works on TCP SYN packets [ 166.391838][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 167.072081][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1201'. [ 167.128185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 167.136372][ C1] lec:lec_tx_timeout: lec0 [ 167.141261][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 167.311510][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1205'. [ 167.388342][T10383] netlink: 'syz.1.1205': attribute type 7 has an invalid length. [ 167.396353][T10383] netlink: 'syz.1.1205': attribute type 8 has an invalid length. [ 167.404744][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 167.445507][T10396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1211'. [ 167.456537][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 167.900378][T10434] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1218'. [ 168.661747][T10471] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.759506][T10475] x_tables: duplicate underflow at hook 2 [ 168.943152][T10486] netlink: 'syz.1.1233': attribute type 2 has an invalid length. [ 169.442705][T10517] netlink: 'syz.0.1242': attribute type 10 has an invalid length. [ 169.806279][T10534] bridge0: port 3(dummy0) entered disabled state [ 169.813029][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.879611][T10534] bond0: left allmulticast mode [ 169.912788][T10534] bond_slave_0: left allmulticast mode [ 169.932339][T10534] bond_slave_1: left allmulticast mode [ 169.989581][T10534] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 170.095838][T10537] hsr_slave_0: left promiscuous mode [ 170.129030][T10537] hsr_slave_1: left promiscuous mode [ 170.230824][T10557] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 170.762204][T10591] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 171.070355][T10625] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 171.222658][T10633] bridge8: entered promiscuous mode [ 171.235213][T10633] bridge8: entered allmulticast mode [ 171.321757][T10640] netlink: 'syz.1.1276': attribute type 10 has an invalid length. [ 171.366112][T10642] __nla_validate_parse: 5 callbacks suppressed [ 171.366132][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1278'. [ 171.591995][T10658] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20004 [ 171.629193][T10656] netlink: 'syz.4.1283': attribute type 39 has an invalid length. [ 171.997894][T10683] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 172.055850][T10682] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 172.117397][T10691] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1291'. [ 172.148265][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 172.156513][ C1] lec:lec_tx_timeout: lec0 [ 172.161501][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 172.266760][T10700] tipc: MTU too low for tipc bearer [ 172.331156][ T5837] Bluetooth: hci4: link tx timeout [ 172.333843][T10702] netlink: 'syz.4.1295': attribute type 4 has an invalid length. [ 172.337294][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.355190][ T5852] Bluetooth: hci4: link tx timeout [ 172.361086][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.369946][ T5852] Bluetooth: hci4: link tx timeout [ 172.375170][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.383169][ T5852] Bluetooth: hci4: link tx timeout [ 172.388614][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.396373][ T5852] Bluetooth: hci4: link tx timeout [ 172.401851][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.823576][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 172.844069][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 172.860920][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 172.916647][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 172.979151][T10735] netlink: 'syz.4.1305': attribute type 20 has an invalid length. [ 173.010066][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 173.028263][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 173.068326][T10735] netlink: 'syz.4.1305': attribute type 20 has an invalid length. [ 173.227687][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 173.236898][T10761] netlink: 'syz.3.1315': attribute type 30 has an invalid length. [ 173.253610][T10759] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1314'. [ 173.280328][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.302897][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.312186][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.321232][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.435076][T10766] sctp: [Deprecated]: syz.0.1318 (pid 10766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.435076][T10766] Use struct sctp_sack_info instead [ 173.502567][T10766] vlan0: entered promiscuous mode [ 173.509609][T10766] bridge0: entered promiscuous mode [ 173.831862][T10793] netlink: 'syz.0.1327': attribute type 4 has an invalid length. [ 173.964501][T10797] ip6t_srh: unknown srh match flags 5F28 [ 173.991367][T10797] netlink: 'syz.0.1328': attribute type 10 has an invalid length. [ 174.027710][T10797] dummy0: entered promiscuous mode [ 174.042699][T10797] dummy0: entered allmulticast mode [ 174.053690][T10797] team0: Failed to send options change via netlink (err -105) [ 174.063859][T10797] team0: Port device dummy0 added [ 174.402042][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 175.013850][T10874] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 175.575599][T10898] tipc: Enabling of bearer rejected, already enabled [ 175.675181][T10904] IPVS: length: 65 != 8 [ 176.460547][T10942] ieee802154 phy1 wpan1: encryption failed: -126 [ 177.145041][T10984] __nla_validate_parse: 15 callbacks suppressed [ 177.145062][T10984] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1384'. [ 177.167802][T10984] xt_policy: neither incoming nor outgoing policy selected [ 177.175311][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 177.175342][ C1] lec:lec_tx_timeout: lec0 [ 177.175440][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 177.230242][T10988] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.404800][T10999] sctp: [Deprecated]: syz.2.1388 (pid 10999) Use of int in max_burst socket option deprecated. [ 177.404800][T10999] Use struct sctp_assoc_value instead [ 177.612304][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 178.397340][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 178.507490][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1396'. [ 178.677847][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1396'. [ 178.719210][T11080] sctp: [Deprecated]: syz.3.1401 (pid 11080) Use of int in max_burst socket option. [ 178.719210][T11080] Use struct sctp_assoc_value instead [ 178.740579][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1396'. [ 178.749825][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1396'. [ 178.766984][T11064] validate_nla: 2 callbacks suppressed [ 178.767003][T11064] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 178.813431][T11086] sctp: [Deprecated]: syz.3.1401 (pid 11086) Use of int in max_burst socket option. [ 178.813431][T11086] Use struct sctp_assoc_value instead [ 178.843246][T11089] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1403'. [ 179.181005][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1409'. [ 179.223864][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 179.872513][T11154] syz.1.1423: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 179.915836][T11161] veth0: entered promiscuous mode [ 179.922303][T11158] veth0: left promiscuous mode [ 179.924439][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.1.1423 Not tainted syzkaller #0 PREEMPT(full) [ 179.924460][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.924478][T11154] Call Trace: [ 179.924488][T11154] [ 179.924496][T11154] dump_stack_lvl+0x189/0x250 [ 179.924533][T11154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.924551][T11154] ? __pfx__printk+0x10/0x10 [ 179.924572][T11154] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.924596][T11154] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.924621][T11154] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 179.924646][T11154] warn_alloc+0x214/0x310 [ 179.924667][T11154] ? stack_depot_save_flags+0x40/0x850 [ 179.924690][T11154] ? __pfx_warn_alloc+0x10/0x10 [ 179.924711][T11154] ? kasan_save_track+0x3e/0x80 [ 179.924729][T11154] ? __kasan_kmalloc+0x93/0xb0 [ 179.924748][T11154] ? xsk_setsockopt+0x4dc/0x8d0 [ 179.924763][T11154] ? do_sock_setsockopt+0x17c/0x1b0 [ 179.924783][T11154] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 179.924803][T11154] ? do_syscall_64+0xfa/0xf80 [ 179.924821][T11154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.924845][T11154] __vmalloc_node_range_noprof+0x125/0x12d0 [ 179.924894][T11154] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.924917][T11154] ? __kasan_kmalloc+0x93/0xb0 [ 179.924943][T11154] vmalloc_user_noprof+0xad/0xf0 [ 179.924962][T11154] ? xskq_create+0xbf/0x170 [ 179.924980][T11154] xskq_create+0xbf/0x170 [ 179.925000][T11154] xsk_init_queue+0xb0/0x110 [ 179.925020][T11154] xsk_setsockopt+0x4dc/0x8d0 [ 179.925040][T11154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.925056][T11154] ? __pfx_aa_sk_perm+0x10/0x10 [ 179.925081][T11154] ? aa_sock_opt_perm+0xff/0x1a0 [ 179.925099][T11154] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 179.925120][T11154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.925137][T11154] do_sock_setsockopt+0x17c/0x1b0 [ 179.925163][T11154] __x64_sys_setsockopt+0x13f/0x1b0 [ 179.925189][T11154] do_syscall_64+0xfa/0xf80 [ 179.925210][T11154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.925225][T11154] ? clear_bhb_loop+0x60/0xb0 [ 179.925244][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.925259][T11154] RIP: 0033:0x7fcef3d8f749 [ 179.925284][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.925297][T11154] RSP: 002b:00007fcef4c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 179.925315][T11154] RAX: ffffffffffffffda RBX: 00007fcef3fe5fa0 RCX: 00007fcef3d8f749 [ 179.925326][T11154] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 179.925335][T11154] RBP: 00007fcef3e13f91 R08: 0000000000000004 R09: 0000000000000000 [ 179.925344][T11154] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.925353][T11154] R13: 00007fcef3fe6038 R14: 00007fcef3fe5fa0 R15: 00007ffde117ee28 [ 179.925381][T11154] [ 179.925394][T11154] Mem-Info: [ 180.011098][T11163] ÿÿÿÿÿÿ¤lòo¾k‰÷: renamed from lo [ 180.015993][T11155] IPVS: set_ctl: invalid protocol: 98 172.20.20.18:20002 [ 180.045922][T11154] active_anon:5891 inactive_anon:0 isolated_anon:0 [ 180.045922][T11154] active_file:2504 inactive_file:39917 isolated_file:0 [ 180.045922][T11154] unevictable:768 dirty:55 writeback:0 [ 180.045922][T11154] slab_reclaimable:11275 slab_unreclaimable:102619 [ 180.045922][T11154] mapped:29176 shmem:1361 pagetables:1155 [ 180.045922][T11154] sec_pagetables:0 bounce:0 [ 180.045922][T11154] kernel_misc_reclaimable:0 [ 180.045922][T11154] free:1322697 free_pcp:14606 free_cma:0 [ 180.118450][T11155] IPVS: set_ctl: invalid protocol: 98 172.20.20.18:20002 [ 180.128765][T11154] Node 0 active_anon:23464kB inactive_anon:0kB active_file:10016kB inactive_file:159464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116704kB dirty:220kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13432kB pagetables:4564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.341085][T11154] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.389592][T11154] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.422101][T11154] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 180.437639][T11154] Node 0 DMA32 free:1388468kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23564kB inactive_anon:0kB active_file:10016kB inactive_file:159464kB unevictable:1536kB writepending:220kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:38292kB local_pcp:17184kB free_cma:0kB [ 180.491017][T11180] netlink: 'syz.3.1430': attribute type 10 has an invalid length. [ 180.491503][T11154] lowmem_reserve[]: 0 0 0 0 0 [ 180.523822][T11154] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.553726][T11180] team0: Device veth1_macvtap failed to register rx_handler [ 180.561622][T11154] lowmem_reserve[]: 0 0 0 0 0 [ 180.566414][T11154] Node 1 Normal free:3886116kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20448kB local_pcp:8448kB free_cma:0kB [ 180.624810][T11154] lowmem_reserve[]: 0 0 0 0 0 [ 180.708378][T11154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.764804][T11154] Node 0 DMA32: 513*4kB (UME) 758*8kB (UME) 342*16kB (UME) 285*32kB (UME) 67*64kB (ME) 54*128kB (UM) 39*256kB (UM) 19*512kB (UM) 6*1024kB (UME) 5*2048kB (UME) 322*4096kB (UM) = 1388916kB [ 180.797516][T11154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 180.821772][T11201] netlink: 'syz.0.1436': attribute type 22 has an invalid length. [ 180.830221][T11154] Node 1 Normal: 201*4kB (UME) 56*8kB (UME) 40*16kB (UME) 78*32kB (UME) 28*64kB (UME) 8*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3886116kB [ 180.867517][ T6639] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 180.867649][T11201] netlink: 'syz.0.1436': attribute type 22 has an invalid length. [ 180.898455][ T6639] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 180.920360][T11154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.933324][T11154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.945636][T11154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.955920][T11154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.967744][T11154] 43778 total pagecache pages [ 180.973611][T11154] 0 pages in swap cache [ 180.977866][T11154] Free swap = 124996kB [ 180.982103][T11154] Total swap = 124996kB [ 180.986732][T11154] 2097051 pages RAM [ 180.987771][ T6639] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 181.006610][T11154] 0 pages HighMem/MovableOnly [ 181.016728][T11154] 424280 pages reserved [ 181.027695][T11154] 0 pages cma reserved [ 181.037813][ T6639] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 181.274150][T11218] xfrm1: entered allmulticast mode [ 181.574597][T11240] netlink: 'syz.2.1449': attribute type 9 has an invalid length. [ 181.594704][T11242] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 181.604492][T11239] netlink: 'syz.0.1448': attribute type 28 has an invalid length. [ 181.612898][T11239] netlink: 'syz.0.1448': attribute type 3 has an invalid length. [ 181.677005][T11242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.685452][T11239] netlink: 'syz.0.1448': attribute type 4 has an invalid length. [ 181.744370][T11251] bond0: (slave rose0): Enslaving as an active interface with an up link [ 181.811077][T11251] sctp: [Deprecated]: syz.1.1451 (pid 11251) Use of int in maxseg socket option. [ 181.811077][T11251] Use struct sctp_assoc_value instead [ 181.878896][T11260] netlink: zone id is out of range [ 181.888584][T11260] netlink: zone id is out of range [ 181.896926][T11260] netlink: zone id is out of range [ 181.904177][T11260] netlink: zone id is out of range [ 181.910390][T11260] netlink: zone id is out of range [ 181.916218][T11260] netlink: zone id is out of range [ 181.922161][T11260] netlink: zone id is out of range [ 181.927534][T11260] netlink: zone id is out of range [ 181.933423][T11260] netlink: zone id is out of range [ 182.178183][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 182.186223][ C1] lec:lec_tx_timeout: lec0 [ 182.190921][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 182.374644][T11280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.432463][T11280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.825169][T11311] veth11: entered promiscuous mode [ 182.837215][T11310] C: entered promiscuous mode [ 182.842019][T11310] team_slave_1: entered promiscuous mode [ 182.849539][T11310] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 182.866645][T11310] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 182.931677][T11313] __nla_validate_parse: 12 callbacks suppressed [ 182.931694][T11313] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1469'. [ 182.944817][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'. [ 183.222278][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1472'. [ 183.378797][T11337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1477'. [ 183.389202][T11340] lo: left promiscuous mode [ 183.394357][T11340] net_ratelimit: 45 callbacks suppressed [ 183.394371][T11340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.496001][T11340] vlan0: entered promiscuous mode [ 183.527497][T11340] bridge0: entered promiscuous mode [ 183.579208][T11356] veth5: entered allmulticast mode [ 183.602177][T11362] netlink: 'syz.3.1483': attribute type 2 has an invalid length. [ 183.639673][T11362] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1483'. [ 183.679456][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1483'. [ 183.840534][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1488'. [ 183.851502][T11375] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 183.860326][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1488'. [ 183.945184][T11383] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1489'. [ 183.948659][T11375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 183.983779][T11382] pim6reg: entered allmulticast mode [ 184.136126][T11398] bond0: (slave caif0): Error: Device type is different from other slaves [ 184.446105][T11424] netlink: 'syz.4.1502': attribute type 18 has an invalid length. [ 184.453918][T11434] netlink: 'syz.4.1502': attribute type 18 has an invalid length. [ 184.972257][T11442] netlink: 'syz.4.1506': attribute type 21 has an invalid length. [ 185.007972][T11442] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1506'. [ 185.412541][T11475] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 185.574949][T11468] macvlan0: entered promiscuous mode [ 185.580570][T11468] macvlan0: entered allmulticast mode [ 185.587319][T11468] bond5: entered promiscuous mode [ 185.609186][T11468] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 185.632769][T11468] bond5: left promiscuous mode [ 185.747064][T11495] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 185.843886][T11499] netlink: ct family unspecified [ 185.859603][T11499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.135401][T11509] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 186.486299][T11543] syzkaller0: entered promiscuous mode [ 186.492246][T11543] syzkaller0: entered allmulticast mode [ 186.548005][T11550] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 186.599666][T11550] x_tables: duplicate underflow at hook 3 [ 186.746998][T11551] wlan0 speed is unknown, defaulting to 1000 [ 186.763766][T11555] tipc: Enabling of bearer rejected, already enabled [ 186.797133][T11555] tipc: Resetting bearer [ 186.846178][T11557] geneve4: entered promiscuous mode [ 186.853192][T11557] geneve4: entered allmulticast mode [ 187.349234][T11583] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.437381][T11575] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 187.998154][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 188.014607][ C1] lec:lec_tx_timeout: lec0 [ 188.020036][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 188.174826][T11624] Bluetooth: MGMT ver 1.23 [ 188.316168][T11628] __nla_validate_parse: 5 callbacks suppressed [ 188.316187][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1559'. [ 188.402510][T11634] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1561'. [ 188.713880][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 188.813072][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 188.968065][T11657] syzkaller0: entered promiscuous mode [ 188.974396][T11657] syzkaller0: entered allmulticast mode [ 189.437582][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'. [ 189.471979][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 189.482654][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'. [ 189.546153][T11671] x_tables: duplicate underflow at hook 2 [ 189.552072][ T30] audit: type=1107 audit(1765749115.379:2): pid=11667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 189.575120][T11671] gtp0: entered promiscuous mode [ 189.686448][T11675] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 189.704767][T11671] gtp0: entered allmulticast mode [ 189.897326][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1577'. [ 189.915944][T11684] veth0: entered promiscuous mode [ 189.932814][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'. [ 190.031372][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1579'. [ 190.239104][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 190.245848][ T5852] Bluetooth: hci2: command 0x0401 tx timeout [ 190.328011][T11688] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 190.395003][T11688] gretap1: entered promiscuous mode [ 190.446996][T11688] gretap1: entered allmulticast mode [ 191.050138][T11716] pim6reg1: entered promiscuous mode [ 191.068053][T11716] pim6reg1: entered allmulticast mode [ 191.177075][T11723] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 191.223247][T11721] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 191.554039][T11743] bond7: Removing last arp target with arp_interval on [ 191.603566][T11745] bond8: Removing last arp target with arp_interval on [ 191.699507][T11750] netlink: 'syz.3.1595': attribute type 10 has an invalid length. [ 191.707402][T11750] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 191.723050][T11750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 192.255820][T11774] xt_cgroup: xt_cgroup: no path or classid specified [ 192.330366][T11777] netlink: 'syz.0.1606': attribute type 23 has an invalid length. [ 192.773640][T11796] bond5: ARP target 1.0.0.0 is already present [ 192.799617][T11796] bond5: option arp_ip_target: invalid value (1) [ 192.810453][T11796] bond5 (unregistering): Released all slaves [ 192.882151][T11803] dvmrp0: entered allmulticast mode [ 192.981497][T11533] Set syz1 is full, maxelem 65536 reached [ 193.028174][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 193.036261][ C1] lec:lec_tx_timeout: lec0 [ 193.041487][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 193.100775][T11813] syzkaller0: entered promiscuous mode [ 193.110921][T11813] syzkaller0: entered allmulticast mode [ 193.285630][T11823] bridge3: entered promiscuous mode [ 193.294186][T11823] bridge3: entered allmulticast mode [ 193.301098][T11827] netlink: 'syz.4.1620': attribute type 5 has an invalid length. [ 193.311560][T11825] netlink: 'syz.3.1619': attribute type 12 has an invalid length. [ 193.391249][T11830] __nla_validate_parse: 14 callbacks suppressed [ 193.391267][T11830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1621'. [ 193.415249][T11833] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 193.458081][T11835] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1623'. [ 193.481055][T11833] bond4: entered promiscuous mode [ 193.486535][T11833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.495426][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1622'. [ 193.499471][T11835] veth1_macvtap: left promiscuous mode [ 193.514210][T11837] bond4: entered allmulticast mode [ 193.615231][T11837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.642461][T11833] bond4: (slave bridge3): making interface the new active one [ 193.662919][T11833] bridge3: entered promiscuous mode [ 193.671141][T11833] bridge3: entered allmulticast mode [ 193.685737][T11833] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 193.776596][T11842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1625'. [ 193.923449][T11856] netlink: 'syz.2.1630': attribute type 11 has an invalid length. [ 194.405792][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.790724][T11916] netlink: 'syz.3.1645': attribute type 11 has an invalid length. [ 194.863445][T11925] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 194.938466][T11925] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 194.959846][T11925] gretap1: entered promiscuous mode [ 194.965177][T11925] gretap1: entered allmulticast mode [ 195.002659][T11929] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1650'. [ 195.017323][T11929] ieee802154 phy1 wpan1: encryption failed: -126 [ 195.067399][T11936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1652'. [ 195.080941][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 195.410425][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1654'. [ 196.050061][T11979] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1659'. [ 196.243467][T11985] x_tables: duplicate underflow at hook 1 [ 196.335318][T11994] netlink: 'syz.0.1663': attribute type 10 has an invalid length. [ 196.371503][T11996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1665'. [ 196.487959][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 196.487986][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.494300][ T5846] Bluetooth: hci2: command 0x0401 tx timeout [ 196.494337][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 196.632053][T12012] netlink: 'syz.1.1668': attribute type 1 has an invalid length. [ 197.131820][T11994] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.278071][T12057] tipc: Enabling of bearer rejected, already enabled [ 197.319559][T12062] block nbd0: Unsupported socket: should be TCP or UNIX. [ 197.945301][T12104] netlink: 'syz.1.1695': attribute type 1 has an invalid length. [ 198.026368][T12104] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.048166][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 198.056409][ C1] lec:lec_tx_timeout: lec0 [ 198.061248][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 198.122189][T12095] veth15: entered promiscuous mode [ 198.145360][T12095] bond7: (slave veth15): Enslaving as an active interface with a down link [ 198.449659][T12129] __nla_validate_parse: 42 callbacks suppressed [ 198.449679][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1703'. [ 198.558440][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 198.794725][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 198.798469][T12151] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1710'. [ 198.839682][T12157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1711'. [ 199.044781][T12164] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1713'. [ 199.053396][T12162] netlink: 'syz.1.1712': attribute type 1 has an invalid length. [ 199.237076][T12179] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ¤lòo¾k‰÷ may have been left with an inconsistent configuration, please check. [ 199.267192][T12180] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ¤lòo¾k‰÷ may have been left with an inconsistent configuration, please check. [ 199.490513][T12188] vlan2: entered promiscuous mode [ 199.505131][T12188] vlan2: entered allmulticast mode [ 199.515633][T12188] hsr_slave_1: entered allmulticast mode [ 199.610746][T12196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 199.773358][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'. [ 199.834319][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1733'. [ 199.847602][T12216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.033189][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 200.065404][T12226] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 200.086795][T12229] netlink: 'syz.0.1735': attribute type 39 has an invalid length. [ 200.119197][T12229] netlink: 'syz.0.1735': attribute type 39 has an invalid length. [ 200.134193][T12229] netlink: 'syz.0.1735': attribute type 39 has an invalid length. [ 200.157009][T12229] netlink: 'syz.0.1735': attribute type 39 has an invalid length. [ 200.185179][T12229] netlink: 'syz.0.1735': attribute type 39 has an invalid length. [ 200.209740][T12229] netlink: 'syz.0.1735': attribute type 39 has an invalid length. [ 200.463557][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1745'. [ 200.544044][T12263] IPVS: Unknown mcast interface: vcan0 [ 200.723117][T12278] C: renamed from lo (while UP) [ 200.771645][T12278] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.871721][T12284] openvswitch: netlink: Missing valid actions attribute. [ 200.884155][T12284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.407788][T12325] macvlan0: left promiscuous mode [ 201.416789][T12325] validate_nla: 63 callbacks suppressed [ 201.416808][T12325] netlink: 'syz.1.1762': attribute type 2 has an invalid length. [ 201.925768][T12357] tipc: Enabling of bearer rejected, already enabled [ 202.097582][T12362] C: renamed from lo (while UP) [ 202.204796][T12370] netlink: 'syz.2.1779': attribute type 64 has an invalid length. [ 202.266144][T12373] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 202.386660][T12379] bond9: (slave veth3): Enslaving as an active interface with a down link [ 202.419867][T12378] netlink: 'syz.2.1782': attribute type 4 has an invalid length. [ 202.436178][T12373] 8021q: adding VLAN 0 to HW filter on device bond9 [ 202.750093][T12402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.769806][T12401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.777373][T12404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.986531][T12412] bond2: (slave ÿÿÿÿÿÿ¤lòo¾k‰÷): Releasing backup interface [ 203.016601][T12412] bond2: (slave ÿÿÿÿÿÿ¤lòo¾k‰÷): last VLAN challenged slave left bond - VLAN blocking is removed [ 203.036234][T12412] dummy0: left allmulticast mode [ 203.046893][T12412] dummy0: left promiscuous mode [ 203.052749][T12412] bridge0: port 3(dummy0) entered disabled state [ 203.068399][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 203.076582][ C1] lec:lec_tx_timeout: lec0 [ 203.077186][T12412] bridge_slave_0: left promiscuous mode [ 203.081451][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 203.113552][T12412] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.131050][T12412] bridge_slave_1: left allmulticast mode [ 203.147056][T12412] bridge_slave_1: left promiscuous mode [ 203.163908][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.193884][T12412] bond0: (slave bond_slave_0): Releasing backup interface [ 203.217763][T12412] bond0: (slave bond_slave_1): Releasing backup interface [ 203.243443][T12412] team0: Port device team_slave_0 removed [ 203.256361][T12412] team0: Port device team_slave_1 removed [ 203.263464][T12412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.273698][T12412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.283805][T12412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.293970][T12412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.303841][T12412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.339613][T12415] team0: Mode changed to "loadbalance" [ 203.529834][T12426] __nla_validate_parse: 8 callbacks suppressed [ 203.529870][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 203.581560][T12426] IPVS: Unknown mcast interface: vcan0 [ 203.599593][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1795'. [ 203.860953][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'. [ 203.960122][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'. [ 204.012188][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 204.104062][T12458] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 204.906128][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 205.069678][T12483] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1813'. [ 205.110424][T12483] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1813'. [ 205.147612][T12490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.921500][T12524] netlink: 'syz.4.1820': attribute type 21 has an invalid length. [ 205.942713][T12524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1820'. [ 205.962086][T12524] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.976042][T12524] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 205.990612][T12530] netlink: 'syz.3.1823': attribute type 58 has an invalid length. [ 206.019952][T12524] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 206.026741][T12530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1823'. [ 206.049897][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 206.130197][T12524] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.174045][T12524] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 206.201009][T12524] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 206.298065][T12546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.334527][T12524] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.355011][T12524] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 206.367817][T12524] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 206.441205][T12524] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.455632][T12524] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 206.481993][T12524] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 206.571371][T12536] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 206.645555][T12559] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 206.751304][ T9997] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.767087][ T9997] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.776186][ T9997] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.802232][ T9997] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.811529][ T9997] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.821926][ T9997] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.860289][ T9997] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.869055][ T9997] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.877447][ T9997] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.917666][ T9997] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.935250][ T9997] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.951046][ T9997] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.035815][T12578] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.138978][T12584] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 207.152269][T12584] netlink: 'syz.2.1839': attribute type 2 has an invalid length. [ 207.174089][T12584] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 207.247084][T12584] netlink: 'syz.2.1839': attribute type 2 has an invalid length. [ 207.473678][T12613] netlink: 'syz.3.1846': attribute type 9 has an invalid length. [ 207.487509][T12613] netlink: 'syz.3.1846': attribute type 6 has an invalid length. [ 207.737169][T12625] wlan0 speed is unknown, defaulting to 1000 [ 208.098392][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 208.106567][ C1] lec:lec_tx_timeout: lec0 [ 208.111452][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 208.638694][T12695] netlink: 'syz.4.1871': attribute type 10 has an invalid length. [ 208.677664][T12698] openvswitch: netlink: IP tunnel dst address not specified [ 208.693018][T12695] team0: Port device dummy0 added [ 208.713317][T12696] netlink: 'syz.0.1870': attribute type 3 has an invalid length. [ 208.736833][T12695] __nla_validate_parse: 7 callbacks suppressed [ 208.736851][T12695] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1871'. [ 208.936433][T12712] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 208.959376][T12716] netlink: 'syz.0.1876': attribute type 4 has an invalid length. [ 208.970652][T12712] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1878'. [ 209.142605][T12722] bridge0: port 4(ipvlan4) entered blocking state [ 209.175531][T12722] bridge0: port 4(ipvlan4) entered disabled state [ 209.206039][T12722] ipvlan4: entered allmulticast mode [ 209.217974][T12722] bridge0: entered allmulticast mode [ 209.228395][T12722] ipvlan4: left allmulticast mode [ 209.233486][T12722] bridge0: left allmulticast mode [ 209.415303][T12741] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1888'. [ 209.419550][T12744] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1890'. [ 209.462255][T12746] syzkaller1: entered promiscuous mode [ 209.467781][T12746] syzkaller1: entered allmulticast mode [ 209.499330][T12746] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 209.787243][T12769] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 209.866708][T12775] xt_HMARK: spi-set and port-set can't be combined [ 209.916095][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'. [ 209.943128][T12778] tipc: Enabling of bearer rejected, failed to enable media [ 209.964343][T12783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1902'. [ 210.167770][T12799] openvswitch: netlink: Message has 592 unknown bytes. [ 210.210770][T12799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.236535][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 210.236791][T12805] netlink: 'syz.4.1910': attribute type 1 has an invalid length. [ 210.255810][T12806] netlink: 'syz.1.1908': attribute type 11 has an invalid length. [ 210.267017][T12806] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1908'. [ 210.277793][T12807] netlink: 'syz.1.1908': attribute type 11 has an invalid length. [ 210.286858][T12807] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1908'. [ 210.336696][T12805] 8021q: adding VLAN 0 to HW filter on device bond10 [ 210.360651][T12813] bond10: (slave gretap3): making interface the new active one [ 210.372117][T12813] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 210.476331][T12815] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 210.561031][T12815] bond5 (unregistering): Released all slaves [ 210.626668][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 210.800075][T12845] tipc: Enabled bearer , priority 0 [ 210.850502][T12845] syzkaller0: entered promiscuous mode [ 210.872852][T12845] syzkaller0: entered allmulticast mode [ 210.951690][T12843] tipc: Resetting bearer [ 211.047686][T12843] tipc: Disabling bearer [ 211.830530][T12916] tipc: Enabled bearer , priority 0 [ 212.027866][T12916] syzkaller0: entered promiscuous mode [ 212.048224][T12916] syzkaller0: entered allmulticast mode [ 212.059209][T12916] tipc: Resetting bearer [ 212.178965][T12915] tipc: Resetting bearer [ 213.120619][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 213.129315][ C1] lec:lec_tx_timeout: lec0 [ 213.133918][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 213.638429][T12915] tipc: Disabling bearer [ 213.656497][T12950] bridge5: entered promiscuous mode [ 213.662011][T12950] bridge5: entered allmulticast mode [ 213.674089][T12950] team0: Port device bridge5 added [ 213.745562][T12971] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 213.769639][T12971] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 213.886104][T12974] __nla_validate_parse: 3 callbacks suppressed [ 213.886121][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'. [ 213.946670][T12977] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1947'. [ 213.950843][T12980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1949'. [ 214.105110][T12987] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1952'. [ 214.147406][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'. [ 214.163133][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 214.186106][T12992] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 214.561539][T13010] veth5: entered promiscuous mode [ 214.566718][T13010] veth5: entered allmulticast mode [ 214.706936][T13019] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1961'. [ 214.727432][T13022] xt_TCPMSS: Only works on TCP SYN packets [ 214.862762][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 214.909863][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 214.936891][T13032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 214.951401][T13032] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 214.978805][T13032] netlink: 'syz.0.1965': attribute type 11 has an invalid length. [ 215.282338][T13049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.328470][T13049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.621883][T13076] validate_nla: 3 callbacks suppressed [ 215.621902][T13076] netlink: 'syz.0.1976': attribute type 7 has an invalid length. [ 216.028003][T13093] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 216.053045][T13093] bond9 (unregistering): Released all slaves [ 216.289881][T13108] syzkaller0: entered promiscuous mode [ 216.295698][T13108] syzkaller0: entered allmulticast mode [ 216.473989][T13130] x_tables: duplicate underflow at hook 1 [ 216.681994][T13137] openvswitch: netlink: Actions may not be safe on all matching packets [ 216.795481][T13140] netlink: 'syz.3.1995': attribute type 2 has an invalid length. [ 216.805623][T13140] netlink: 'syz.3.1995': attribute type 2 has an invalid length. [ 217.906019][T13117] bridge0: port 1(team0) entered disabled state [ 217.935351][T13133] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 218.057053][T13155] netlink: 'syz.1.1999': attribute type 21 has an invalid length. [ 218.148163][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 218.156319][ C1] lec:lec_tx_timeout: lec0 [ 218.161077][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 218.554431][T13184] tipc: Invalid UDP bearer configuration [ 218.554487][T13184] tipc: Enabling of bearer rejected, failed to enable media [ 218.810570][T13196] syzkaller0: refused to change device tx_queue_len [ 218.948735][T13207] __nla_validate_parse: 15 callbacks suppressed [ 218.948756][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2015'. [ 219.006404][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2015'. [ 219.099667][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 219.410385][T13235] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2023'. [ 219.599196][T13246] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2026'. [ 219.750276][T13255] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2029'. [ 219.760738][T13253] netlink: 'syz.1.2030': attribute type 39 has an invalid length. [ 219.995401][T13273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2035'. [ 220.044729][T13276] netlink: 'syz.4.2034': attribute type 1 has an invalid length. [ 220.141847][T13283] 8021q: adding VLAN 0 to HW filter on device bond9 [ 220.155744][T13288] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2039'. [ 220.195664][T13286] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.260079][T13286] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.265202][T13289] netlink: 'syz.2.2038': attribute type 16 has an invalid length. [ 220.286759][T13289] netlink: 'syz.2.2038': attribute type 17 has an invalid length. [ 220.295275][T13289] lo: left allmulticast mode [ 220.311965][T13289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.168332][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 223.176360][ C1] lec:lec_tx_timeout: lec0 [ 223.181002][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 228.958448][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 228.966513][ C1] lec:lec_tx_timeout: lec0 [ 228.972301][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 233.998312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 234.006621][ C1] lec:lec_tx_timeout: lec0 [ 234.011364][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 239.018243][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 239.026297][ C1] lec:lec_tx_timeout: lec0 [ 239.031108][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 244.038247][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 244.046290][ C1] lec:lec_tx_timeout: lec0 [ 244.051276][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 249.058332][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 249.066360][ C1] lec:lec_tx_timeout: lec0 [ 249.070956][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 254.078257][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 254.086385][ C1] lec:lec_tx_timeout: lec0 [ 254.091201][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 255.842180][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.098323][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 259.106447][ C1] lec:lec_tx_timeout: lec0 [ 259.111386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 264.118227][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 264.126230][ C1] lec:lec_tx_timeout: lec0 [ 264.130838][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.138331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 269.146379][ C1] lec:lec_tx_timeout: lec0 [ 269.150996][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 274.158418][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 274.167267][ C1] lec:lec_tx_timeout: lec0 [ 274.172126][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 279.178342][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 279.186469][ C1] lec:lec_tx_timeout: lec0 [ 279.191088][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.278349][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6090 ms [ 285.286468][ C1] lec:lec_tx_timeout: lec0 [ 285.292116][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 286.133725][T13311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2044'. [ 286.185331][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 286.360542][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 286.439168][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 286.451893][T13317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2044'. [ 286.483816][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2044'. [ 286.582635][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 286.717451][T13349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2054'. [ 286.762198][T13351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2055'. [ 286.855709][T13356] netlink: 'syz.3.2057': attribute type 11 has an invalid length. [ 287.108711][T13366] openvswitch: netlink: IPv4 tun info is not correct [ 287.553386][T13393] team0: left allmulticast mode [ 287.558519][T13393] team_slave_0: left allmulticast mode [ 287.565167][T13393] team_slave_1: left allmulticast mode [ 287.572367][T13393] dummy0: left allmulticast mode [ 287.579083][T13393] team0: left promiscuous mode [ 287.583894][T13393] team_slave_0: left promiscuous mode [ 287.590843][T13393] team_slave_1: left promiscuous mode [ 287.596586][T13393] dummy0: left promiscuous mode [ 287.603187][T13393] bridge0: port 1(team0) entered disabled state [ 287.620335][T13393] team0: Port device dummy0 removed [ 287.653341][T13393] bond1: (slave veth0_to_bond): Releasing active interface [ 287.662224][T13393] veth0_to_bond: left promiscuous mode [ 287.667897][T13393] veth0_to_bond: left allmulticast mode [ 287.689609][T13393] bond0: (slave bond_slave_0): Releasing backup interface [ 287.715939][T13393] bond0: (slave bond_slave_1): Releasing backup interface [ 287.770248][T13393] team0: Port device team_slave_0 removed [ 287.784259][T13393] team0: Port device team_slave_1 removed [ 287.808038][T13393] tipc: Resetting bearer [ 287.820336][T13393] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 287.838040][T13388] tipc: Enabling of bearer rejected, failed to enable media [ 288.226423][T13441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2081'. [ 288.314113][T13439] wlan0 speed is unknown, defaulting to 1000 [ 289.003569][T13469] bond10: option mode: invalid value (133) [ 289.011812][T13469] bond10 (unregistering): Released all slaves [ 289.171512][T13491] geneve5: entered promiscuous mode [ 289.176777][T13491] geneve5: entered allmulticast mode [ 289.439165][T13509] veth0: entered promiscuous mode [ 289.461221][T13511] x_tables: duplicate underflow at hook 1 [ 289.473874][T13513] netlink: 'syz.4.2104': attribute type 21 has an invalid length. [ 289.501108][T13509] veth0 (unregistering): left promiscuous mode [ 289.551479][T13522] x_tables: duplicate underflow at hook 3 [ 289.574534][T13513] netlink: 'syz.4.2104': attribute type 1 has an invalid length. [ 289.604859][T13522] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 289.889968][T13539] : entered promiscuous mode [ 290.155641][T13563] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 290.177554][T13563] netlink: 'syz.1.2117': attribute type 2 has an invalid length. [ 290.201697][T13563] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 290.211192][T13563] netlink: 'syz.1.2117': attribute type 2 has an invalid length. [ 290.492260][T13591] netlink: 'syz.0.2126': attribute type 2 has an invalid length. [ 290.858230][T13619] wlan0 speed is unknown, defaulting to 1000 [ 290.878026][T13619] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 291.038157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 291.046422][ C1] lec:lec_tx_timeout: lec0 [ 291.051256][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 296.058215][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 296.066269][ C1] lec:lec_tx_timeout: lec0 [ 296.071021][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.078299][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 301.086372][ C1] lec:lec_tx_timeout: lec0 [ 301.090975][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 306.098230][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 306.106806][ C1] lec:lec_tx_timeout: lec0 [ 306.111605][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 311.118346][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 311.126385][ C1] lec:lec_tx_timeout: lec0 [ 311.131106][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 316.138285][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 316.147082][ C1] lec:lec_tx_timeout: lec0 [ 316.151752][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.282309][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.158289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 321.166424][ C1] lec:lec_tx_timeout: lec0 [ 321.171041][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 326.178221][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 326.186252][ C1] lec:lec_tx_timeout: lec0 [ 326.190838][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 331.998210][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 332.006270][ C1] lec:lec_tx_timeout: lec0 [ 332.011185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.018274][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.026306][ C1] lec:lec_tx_timeout: lec0 [ 337.030947][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.038230][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 342.046255][ C1] lec:lec_tx_timeout: lec0 [ 342.050921][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 347.058234][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 347.066474][ C1] lec:lec_tx_timeout: lec0 [ 347.071123][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 352.078322][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 352.086448][ C1] lec:lec_tx_timeout: lec0 [ 352.091068][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.976120][T13665] __nla_validate_parse: 20 callbacks suppressed [ 356.976137][T13665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2145'. [ 356.994877][T13661] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2143'. [ 357.057691][T13661] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.075009][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2145'. [ 357.098239][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 357.106382][ C1] lec:lec_tx_timeout: lec0 [ 357.111550][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 357.130221][ T3013] batman_adv: batadv1: IGMP Querier appeared [ 357.136434][ T3013] batman_adv: batadv1: MLD Querier appeared [ 357.696356][T13707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2158'. [ 358.189714][T13719] bond11: invalid ARP target 0.0.0.0 specified for addition [ 358.197355][T13719] bond11: option arp_ip_target: invalid value (0) [ 358.207742][T13719] bond11 (unregistering): Released all slaves [ 358.241340][T13731] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 358.252328][T13732] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 358.388245][T13738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2165'. [ 358.407742][T13728] tipc: Enabling of bearer rejected, already enabled [ 358.450261][T13724] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 358.709683][T13767] netlink: 'syz.2.2172': attribute type 1 has an invalid length. [ 358.764217][T13767] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.802202][T13774] netlink: 'syz.1.2174': attribute type 2 has an invalid length. [ 358.810717][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 358.879725][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.889053][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.913270][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.926052][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.936522][T13772] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.956777][T13785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2172'. [ 358.967718][T13772] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 358.991990][T13772] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 359.066021][T13767] veth9: entered promiscuous mode [ 359.072727][T13785] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.172637][T13803] openvswitch: netlink: IP tunnel dst address not specified [ 359.220704][T13795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 359.231506][T13795] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 359.265999][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 359.268914][T13795] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.284249][T13795] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 359.307650][T13795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.314269][T13795] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 359.332035][T13795] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 359.348606][T13795] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 359.424583][T13820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.429734][T13822] tipc: Enabling of bearer rejected, failed to enable media [ 359.519962][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.529153][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.552051][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.562228][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.624835][T13836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2187'. [ 360.236557][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 360.523645][T13888] netlink: 'syz.4.2201': attribute type 1 has an invalid length. [ 360.533051][T13888] netlink: 'syz.4.2201': attribute type 1 has an invalid length. [ 360.541136][T13888] netlink: 'syz.4.2201': attribute type 1 has an invalid length. [ 360.679125][T13896] syzkaller1: entered promiscuous mode [ 360.684631][T13896] syzkaller1: entered allmulticast mode [ 361.205185][T13931] IPVS: stopping master sync thread 6972 ... [ 361.386433][T13936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.427431][T13933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.464592][T13938] ksmbd: Unknown IPC event: 3, ignore. [ 362.118157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 362.126377][ C1] lec:lec_tx_timeout: lec0 [ 362.132437][T13949] __nla_validate_parse: 10 callbacks suppressed [ 362.132450][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 362.156651][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 362.167244][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 362.176405][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 362.212753][T13954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2222'. [ 362.338071][T13961] tipc: Enabled bearer , priority 0 [ 362.345715][T13961] syzkaller0: entered promiscuous mode [ 362.351965][T13961] syzkaller0: entered allmulticast mode [ 362.363668][T13964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2226'. [ 362.378426][T13964] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2226'. [ 362.387407][T13964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2226'. [ 362.390394][T13962] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 362.479476][T13971] tipc: Resetting bearer [ 362.527210][T13971] tipc: Disabling bearer [ 362.535454][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 362.660801][T13986] netlink: 'syz.2.2232': attribute type 64 has an invalid length. [ 362.668831][T13986] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2232'. [ 362.700036][T13986] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 363.658576][T14037] netlink: 'syz.2.2249': attribute type 11 has an invalid length. [ 363.761897][T14048] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 363.809582][T14048] netlink: 'syz.1.2252': attribute type 2 has an invalid length. [ 363.845841][T14053] veth1_macvtap: left promiscuous mode [ 363.952803][T14063] syzkaller1: entered promiscuous mode [ 363.953336][T14065] sock: sock_timestamping_bind_phc: sock not bind to device [ 363.958475][T14063] syzkaller1: entered allmulticast mode [ 364.061535][T14070] net_ratelimit: 29 callbacks suppressed [ 364.061553][T14070] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 364.372142][T14083] bond11: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 364.638997][ T2941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.649543][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.659733][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.801904][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.065408][T14109] tipc: Enabled bearer , priority 0 [ 365.097833][T14107] tipc: Disabling bearer [ 365.148670][T14112] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 365.282994][ T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.292606][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.301281][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.326329][T14119] syzkaller1: entered promiscuous mode [ 365.334632][T14119] syzkaller1: entered allmulticast mode [ 365.360656][T14124] netlink: 'syz.2.2275': attribute type 6 has an invalid length. [ 365.385520][T14119] netlink: 'syz.2.2275': attribute type 6 has an invalid length. [ 365.413325][T14130] netlink: 'syz.4.2278': attribute type 1 has an invalid length. [ 365.425544][T14130] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 365.524765][T14141] bond12: Unable to set down delay as MII monitoring is disabled [ 365.542631][T14141] bond12 (unregistering): Released all slaves [ 365.918988][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.932010][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.975934][T14173] xt_bpf: check failed: parse error [ 369.438646][ T5953] net_ratelimit: 5 callbacks suppressed [ 369.438661][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.478892][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.718656][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.968722][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.978012][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.987280][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.518577][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.559171][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.601298][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.761416][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.645762][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.678726][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.719454][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.798759][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.806901][ T2941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.815616][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.825093][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.758823][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.721590][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.730103][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 378.799005][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.838621][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.847026][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.879073][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.921608][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.879430][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.958668][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.998444][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 384.006531][ C1] lec:lec_tx_timeout: lec0 [ 384.011400][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.038770][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.918543][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.078754][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.399435][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.118595][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.158710][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.964798][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.198742][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.370691][ T8886] lec:lec_start_xmit: lec0:No lecd attached [ 390.238453][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.279670][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.998519][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.319919][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.358778][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.398519][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.958199][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 394.966309][ C1] lec:lec_tx_timeout: lec0 [ 395.038628][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.439352][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.999879][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.478548][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.519221][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.078486][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.558550][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.598607][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.639875][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.118651][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.678604][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.718625][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.758867][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.158611][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.798581][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.600989][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.838850][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.878823][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.198548][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.918747][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.958596][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.998825][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.238611][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.038714][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.078772][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.118547][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.281913][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.158780][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.198980][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.209283][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.239050][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.318530][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.278567][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.318640][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.358634][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.369570][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.398637][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.438542][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.398502][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.490043][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.518492][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.559450][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.802385][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.438424][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.598523][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.638736][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.678439][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.479939][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.718719][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.758920][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.798689][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.519147][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.838719][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.879098][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.918471][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.398858][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.558807][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.958841][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.998600][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.038676][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.599671][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.078545][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.118725][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.160893][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.167377][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.169494][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 440.638662][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.198626][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.239385][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.278721][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.679664][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.008569][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.318449][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.359502][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.998178][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 446.006217][ C1] lec:lec_tx_timeout: lec0 [ 446.398952][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.728697][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.439057][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.478616][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.518850][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.761353][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.567031][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.598637][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.638727][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.801321][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.598605][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.678955][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.768925][ T8886] lec:lec_start_xmit: lec0:No lecd attached [ 454.718517][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.759338][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.838440][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.798599][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.838668][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.878540][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.888955][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.958219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 458.966296][ C1] lec:lec_tx_timeout: lec0 [ 459.918583][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.958490][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.918473][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.998918][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.038495][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.202139][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.078754][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.968650][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.118686][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.158715][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.199299][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.000462][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.238899][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.278578][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.319238][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.038498][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.358805][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.399633][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.798563][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.438914][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.090467][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.478815][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.518592][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.558897][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.118720][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.598526][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.638624][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.678794][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.158484][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.718724][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.758501][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.398862][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.798562][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.198643][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.838564][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.878904][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.918693][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.240332][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.250726][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.259313][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.267907][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.958676][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.998564][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.038758][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.280248][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.078552][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.119192][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.999178][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.158487][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.321689][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.198643][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.238778][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.278922][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.358744][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.319069][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.358579][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.398524][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.406673][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.438569][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.478538][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.448650][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.518702][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.598747][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.602276][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.615302][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 502.558678][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.598947][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.478746][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.638833][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.678548][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.721678][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.958297][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 506.966326][ C1] lec:lec_tx_timeout: lec0 [ 507.520066][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.759344][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.799192][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.838832][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.558504][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.878506][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.199177][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.938331][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.958497][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.598573][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.998858][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.038981][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.078693][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.638459][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.118496][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.789881][ T8886] lec:lec_start_xmit: lec0:No lecd attached [ 518.158735][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.198458][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.678604][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.158445][ T31] INFO: task syz-executor:5834 blocked for more than 143 seconds. [ 520.166383][ T31] Not tainted syzkaller #0 [ 520.172166][ T31] Blocked by coredump. [ 520.176779][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.185525][ T31] task:syz-executor state:D stack:21368 pid:5834 tgid:5834 ppid:1 task_flags:0x40054c flags:0x00080003 [ 520.197659][ T31] Call Trace: [ 520.200997][ T31] [ 520.203944][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 520.208659][ T31] ? __pfx___schedule+0x10/0x10 [ 520.213967][ T31] ? schedule+0x91/0x360 [ 520.218367][ T31] schedule+0x165/0x360 [ 520.222836][ T31] schedule_preempt_disabled+0x13/0x30 [ 520.230207][ T31] __mutex_lock+0x7e6/0x1350 [ 520.234863][ T31] ? __mutex_lock+0x5bb/0x1350 [ 520.239786][ T31] ? rfkill_unregister+0xc8/0x220 [ 520.240412][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.244830][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 520.294528][ T31] ? __pfx_device_del+0x10/0x10 [ 520.310114][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 520.315351][ T31] ? __cancel_work_sync+0x5c/0x110 [ 520.328331][ T31] rfkill_unregister+0xc8/0x220 [ 520.333429][ T31] hci_unregister_dev+0x374/0x510 [ 520.339040][ T31] vhci_release+0x152/0x1a0 [ 520.343553][ T31] ? __pfx_vhci_release+0x10/0x10 [ 520.348733][ T31] __fput+0x44c/0xa70 [ 520.352737][ T31] task_work_run+0x1d4/0x260 [ 520.357336][ T31] ? __pfx_task_work_run+0x10/0x10 [ 520.362773][ T31] ? kmem_cache_free+0x197/0x620 [ 520.367755][ T31] ? do_exit+0x6c0/0x2310 [ 520.372665][ T31] do_exit+0x6c5/0x2310 [ 520.376943][ T31] ? do_raw_spin_lock+0x121/0x290 [ 520.382088][ T31] ? __pfx_do_exit+0x10/0x10 [ 520.386700][ T31] do_group_exit+0x21c/0x2d0 [ 520.391423][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 520.396641][ T31] get_signal+0x1285/0x1340 [ 520.401412][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 520.406991][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 520.413343][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 520.418891][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 520.424191][ T31] ? rcu_is_watching+0x15/0xb0 [ 520.429146][ T31] do_syscall_64+0x2e3/0xf80 [ 520.433776][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.439974][ T31] ? clear_bhb_loop+0x60/0xb0 [ 520.444667][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.450896][ T31] RIP: 0033:0x7fa1e7b85897 [ 520.455335][ T31] RSP: 002b:00007ffcbe483580 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 520.464180][ T31] RAX: fffffffffffffe00 RBX: 000000000000052d RCX: 00007fa1e7b85897 [ 520.472273][ T31] RDX: 0000000040000000 RSI: 00007ffcbe4835ec RDI: 00000000ffffffff [ 520.481277][ T31] RBP: 00007ffcbe4835ec R08: 0000000000000000 R09: 0000000000000000 [ 520.489320][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001bb [ 520.497312][ T31] R13: 000055556b6c0590 R14: 0000000000057a48 R15: 00007ffcbe483640 [ 520.505532][ T31] [ 520.508617][ T31] INFO: task kworker/1:3:5839 blocked for more than 143 seconds. [ 520.516341][ T31] Not tainted syzkaller #0 [ 520.521370][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.530071][ T31] task:kworker/1:3 state:D stack:23264 pid:5839 tgid:5839 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 520.542208][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 520.548993][ T31] Call Trace: [ 520.552267][ T31] [ 520.555186][ T31] __schedule+0x14bc/0x5000 [ 520.559783][ T31] ? __pfx___schedule+0x10/0x10 [ 520.564739][ T31] ? schedule+0x91/0x360 [ 520.569168][ T31] schedule+0x165/0x360 [ 520.573340][ T31] schedule_preempt_disabled+0x13/0x30 [ 520.578879][ T31] __mutex_lock+0x7e6/0x1350 [ 520.583484][ T31] ? __mutex_lock+0x5bb/0x1350 [ 520.588467][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 520.594746][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 520.599825][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 520.605602][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 520.611369][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 520.617451][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 520.623265][ T31] process_scheduled_works+0xad1/0x1770 [ 520.628894][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 520.634909][ T31] worker_thread+0x8a0/0xda0 [ 520.639597][ T31] kthread+0x711/0x8a0 [ 520.643695][ T31] ? __pfx_worker_thread+0x10/0x10 [ 520.648895][ T31] ? __pfx_kthread+0x10/0x10 [ 520.653499][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.658769][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 520.663981][ T31] ? __pfx_kthread+0x10/0x10 [ 520.668617][ T31] ret_from_fork+0x599/0xb30 [ 520.673231][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 520.678396][ T31] ? __switch_to_asm+0x39/0x70 [ 520.683187][ T31] ? __switch_to_asm+0x33/0x70 [ 520.687946][ T31] ? __pfx_kthread+0x10/0x10 [ 520.692572][ T31] ret_from_fork_asm+0x1a/0x30 [ 520.698949][ T31] [ 520.702156][ T31] INFO: task syz.3.2176:13783 blocked for more than 143 seconds. [ 520.709946][ T31] Not tainted syzkaller #0 [ 520.714892][ T31] Blocked by coredump. [ 520.719547][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.728256][ T31] task:syz.3.2176 state:D stack:25144 pid:13783 tgid:13780 ppid:5834 task_flags:0x40054c flags:0x00080001 [ 520.740581][ T31] Call Trace: [ 520.743866][ T31] [ 520.746794][ T31] __schedule+0x14bc/0x5000 [ 520.751405][ T31] ? __pfx___schedule+0x10/0x10 [ 520.756461][ T31] ? schedule+0x91/0x360 [ 520.760753][ T31] schedule+0x165/0x360 [ 520.765017][ T31] schedule_preempt_disabled+0x13/0x30 [ 520.770531][ T31] __mutex_lock+0x7e6/0x1350 [ 520.775210][ T31] ? __mutex_lock+0x5bb/0x1350 [ 520.780017][ T31] ? rfkill_unregister+0xc8/0x220 [ 520.785058][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 520.790121][ T31] ? __pfx_device_del+0x10/0x10 [ 520.794986][ T31] ? __cancel_work_sync+0x5c/0x110 [ 520.800375][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.800787][ T31] rfkill_unregister+0xc8/0x220 [ 520.814820][ T31] nfc_unregister_device+0x96/0x2a0 [ 520.820364][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 520.826102][ T31] virtual_ncidev_close+0x56/0x90 [ 520.831928][ T31] __fput+0x44c/0xa70 [ 520.835990][ T31] task_work_run+0x1d4/0x260 [ 520.840688][ T31] ? __pfx_task_work_run+0x10/0x10 [ 520.845814][ T31] ? kmem_cache_free+0x197/0x620 [ 520.850929][ T31] ? do_exit+0x6c0/0x2310 [ 520.855285][ T31] do_exit+0x6c5/0x2310 [ 520.859553][ T31] ? do_raw_spin_lock+0x121/0x290 [ 520.864699][ T31] ? __pfx_do_exit+0x10/0x10 [ 520.869584][ T31] ? netlink_sendmsg+0x840/0xb30 [ 520.874567][ T31] do_group_exit+0x21c/0x2d0 [ 520.879393][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 520.884636][ T31] get_signal+0x1285/0x1340 [ 520.889578][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 520.895137][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 520.901370][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 520.906997][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 520.912436][ T31] ? rcu_is_watching+0x15/0xb0 [ 520.917340][ T31] do_syscall_64+0x2e3/0xf80 [ 520.922201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.928456][ T31] ? clear_bhb_loop+0x60/0xb0 [ 520.933239][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.939185][ T31] RIP: 0033:0x7fa1e7b915dc [ 520.943615][ T31] RSP: 002b:00007fa1e8ab3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 520.952082][ T31] RAX: 0000000000000024 RBX: 00007fa1e8ab3fc0 RCX: 00007fa1e7b915dc [ 520.960103][ T31] RDX: 0000000000000024 RSI: 00007fa1e8ab4010 RDI: 0000000000000005 [ 520.968129][ T31] RBP: 0000000000000000 R08: 00007fa1e8ab3f14 R09: 000000000000000c [ 520.976115][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 520.984175][ T31] R13: 00007fa1e8ab3f68 R14: 00007fa1e8ab4010 R15: 0000000000000000 [ 520.992192][ T31] [ 520.995220][ T31] INFO: task syz.0.2178:13795 blocked for more than 144 seconds. [ 521.006697][ T31] Not tainted syzkaller #0 [ 521.011699][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.020398][ T31] task:syz.0.2178 state:D stack:25984 pid:13795 tgid:13793 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 521.032363][ T31] Call Trace: [ 521.035653][ T31] [ 521.040219][ T31] __schedule+0x14bc/0x5000 [ 521.044766][ T31] ? __pfx___schedule+0x10/0x10 [ 521.049661][ T31] ? schedule+0x91/0x360 [ 521.053929][ T31] schedule+0x165/0x360 [ 521.058157][ T31] schedule_preempt_disabled+0x13/0x30 [ 521.063624][ T31] __mutex_lock+0x7e6/0x1350 [ 521.068277][ T31] ? __mutex_lock+0x5bb/0x1350 [ 521.073054][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 521.078390][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 521.083426][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 521.088656][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 521.094565][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 521.100959][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 521.106712][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 521.111900][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 521.117654][ T31] rfkill_set_block+0x1d2/0x440 [ 521.122774][ T31] rfkill_fop_write+0x44b/0x570 [ 521.127653][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 521.133093][ T31] ? security_kernfs_init_security+0x270/0x290 [ 521.139317][ T31] ? rw_verify_area+0x255/0x4d0 [ 521.144190][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 521.149605][ T31] vfs_write+0x27e/0xb30 [ 521.153867][ T31] ? __pfx_vfs_write+0x10/0x10 [ 521.158683][ T31] ? __fget_files+0x2a/0x420 [ 521.163283][ T31] ? __fget_files+0x2a/0x420 [ 521.167901][ T31] ? __fget_files+0x3a0/0x420 [ 521.172627][ T31] ? __fget_files+0x2a/0x420 [ 521.177415][ T31] ksys_write+0x145/0x250 [ 521.181820][ T31] ? __pfx_ksys_write+0x10/0x10 [ 521.186690][ T31] ? do_syscall_64+0xbe/0xf80 [ 521.191444][ T31] do_syscall_64+0xfa/0xf80 [ 521.195973][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.202174][ T31] ? clear_bhb_loop+0x60/0xb0 [ 521.206870][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.212800][ T31] RIP: 0033:0x7f3fbab8f749 [ 521.217398][ T31] RSP: 002b:00007f3fbb955038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.225992][ T31] RAX: ffffffffffffffda RBX: 00007f3fbade5fa0 RCX: 00007f3fbab8f749 [ 521.234026][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 521.242076][ T31] RBP: 00007f3fbac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 521.250100][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.258151][ T31] R13: 00007f3fbade6038 R14: 00007f3fbade5fa0 R15: 00007ffdbc40bcb8 [ 521.266352][ T31] [ 521.269456][ T31] INFO: task syz.4.2279:14137 blocked for more than 144 seconds. [ 521.277181][ T31] Not tainted syzkaller #0 [ 521.282382][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.282427][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.291183][ T31] task:syz.4.2279 state:D stack:26104 pid:14137 tgid:14136 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 521.311440][ T31] Call Trace: [ 521.314737][ T31] [ 521.317664][ T31] __schedule+0x14bc/0x5000 [ 521.322236][ T31] ? __pfx___schedule+0x10/0x10 [ 521.327104][ T31] ? schedule+0x91/0x360 [ 521.331410][ T31] schedule+0x165/0x360 [ 521.335577][ T31] schedule_preempt_disabled+0x13/0x30 [ 521.341076][ T31] __mutex_lock+0x7e6/0x1350 [ 521.345698][ T31] ? __mutex_lock+0x5bb/0x1350 [ 521.350517][ T31] ? rfkill_register+0x37/0x8e0 [ 521.355378][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 521.360490][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 521.365927][ T31] ? device_initialize+0x24b/0x440 [ 521.371106][ T31] rfkill_register+0x37/0x8e0 [ 521.375812][ T31] nfc_register_device+0x14a/0x320 [ 521.380971][ T31] nci_register_device+0x87f/0x9d0 [ 521.386108][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 521.391776][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 521.397076][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 521.402583][ T31] virtual_ncidev_open+0x129/0x1a0 [ 521.407707][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 521.413369][ T31] misc_open+0x2d5/0x350 [ 521.417710][ T31] chrdev_open+0x4cc/0x5e0 [ 521.422185][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 521.427132][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 521.433513][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 521.441447][ T31] do_dentry_open+0x7ce/0x1420 [ 521.446255][ T31] vfs_open+0x3b/0x340 [ 521.450784][ T31] ? path_openat+0x33f3/0x3dd0 [ 521.455565][ T31] path_openat+0x340e/0x3dd0 [ 521.460314][ T31] ? do_sys_openat2+0xbc/0x200 [ 521.465245][ T31] ? __x64_sys_openat+0x138/0x170 [ 521.471562][ T31] ? __pfx_path_openat+0x10/0x10 [ 521.476515][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 521.481601][ T31] do_filp_open+0x1fa/0x410 [ 521.486234][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 521.492305][ T31] ? _raw_spin_unlock+0x28/0x50 [ 521.497299][ T31] ? alloc_fd+0x64c/0x6c0 [ 521.501824][ T31] do_sys_openat2+0x121/0x200 [ 521.506857][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.512197][ T31] ? rcu_is_watching+0x15/0xb0 [ 521.516973][ T31] __x64_sys_openat+0x138/0x170 [ 521.522862][ T31] do_syscall_64+0xfa/0xf80 [ 521.527383][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.533913][ T31] ? clear_bhb_loop+0x60/0xb0 [ 521.538750][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.544663][ T31] RIP: 0033:0x7f639ff8f749 [ 521.549562][ T31] RSP: 002b:00007f63a0e5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.557990][ T31] RAX: ffffffffffffffda RBX: 00007f63a01e5fa0 RCX: 00007f639ff8f749 [ 521.566756][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 521.574936][ T31] RBP: 00007f63a0013f91 R08: 0000000000000000 R09: 0000000000000000 [ 521.583142][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.591258][ T31] R13: 00007f63a01e6038 R14: 00007f63a01e5fa0 R15: 00007ffda2a94bb8 [ 521.599490][ T31] [ 521.602651][ T31] INFO: task syz.1.2289:14188 blocked for more than 144 seconds. [ 521.610520][ T31] Not tainted syzkaller #0 [ 521.615465][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.624208][ T31] task:syz.1.2289 state:D stack:28152 pid:14188 tgid:14186 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 521.636220][ T31] Call Trace: [ 521.639608][ T31] [ 521.642587][ T31] __schedule+0x14bc/0x5000 [ 521.647113][ T31] ? __pfx___schedule+0x10/0x10 [ 521.652087][ T31] ? schedule+0x91/0x360 [ 521.656429][ T31] schedule+0x165/0x360 [ 521.660963][ T31] schedule_preempt_disabled+0x13/0x30 [ 521.666519][ T31] __mutex_lock+0x7e6/0x1350 [ 521.671500][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 521.676460][ T31] ? __mutex_lock+0x5bb/0x1350 [ 521.681459][ T31] ? misc_open+0x51/0x350 [ 521.685824][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 521.690997][ T31] misc_open+0x51/0x350 [ 521.695173][ T31] chrdev_open+0x4cc/0x5e0 [ 521.699737][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 521.704924][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 521.711393][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 521.716477][ T31] do_dentry_open+0x7ce/0x1420 [ 521.721328][ T31] vfs_open+0x3b/0x340 [ 521.725406][ T31] ? path_openat+0x33f3/0x3dd0 [ 521.730262][ T31] path_openat+0x340e/0x3dd0 [ 521.734878][ T31] ? do_syscall_64+0xfa/0xf80 [ 521.739627][ T31] ? do_sys_openat2+0xbc/0x200 [ 521.744394][ T31] ? __x64_sys_openat+0x138/0x170 [ 521.749503][ T31] ? __pfx_path_openat+0x10/0x10 [ 521.754452][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 521.759779][ T31] do_filp_open+0x1fa/0x410 [ 521.764312][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 521.769881][ T31] ? _raw_spin_unlock+0x28/0x50 [ 521.774740][ T31] ? alloc_fd+0x64c/0x6c0 [ 521.779216][ T31] do_sys_openat2+0x121/0x200 [ 521.783913][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.789213][ T31] ? rcu_is_watching+0x15/0xb0 [ 521.793990][ T31] __x64_sys_openat+0x138/0x170 [ 521.798917][ T31] do_syscall_64+0xfa/0xf80 [ 521.803434][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.809632][ T31] ? clear_bhb_loop+0x60/0xb0 [ 521.814326][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.820791][ T31] RIP: 0033:0x7fcef3d8f749 [ 521.825208][ T31] RSP: 002b:00007fcef4c1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.833749][ T31] RAX: ffffffffffffffda RBX: 00007fcef3fe6090 RCX: 00007fcef3d8f749 [ 521.841802][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 521.849893][ T31] RBP: 00007fcef3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 521.857872][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.866082][ T31] R13: 00007fcef3fe6128 R14: 00007fcef3fe6090 R15: 00007ffde117ee28 [ 521.874176][ T31] [ 521.877274][ T31] INFO: task syz.2.2290:14192 blocked for more than 145 seconds. [ 521.885530][ T31] Not tainted syzkaller #0 [ 521.890662][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.899423][ T31] task:syz.2.2290 state:D stack:27840 pid:14192 tgid:14190 ppid:5841 task_flags:0x400040 flags:0x00080002 [ 521.911413][ T31] Call Trace: [ 521.914708][ T31] [ 521.917651][ T31] __schedule+0x14bc/0x5000 [ 521.922396][ T31] ? __pfx___schedule+0x10/0x10 [ 521.927287][ T31] ? schedule+0x91/0x360 [ 521.931671][ T31] schedule+0x165/0x360 [ 521.935860][ T31] schedule_preempt_disabled+0x13/0x30 [ 521.941469][ T31] __mutex_lock+0x7e6/0x1350 [ 521.946080][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 521.951103][ T31] ? __mutex_lock+0x5bb/0x1350 [ 521.955884][ T31] ? misc_open+0x51/0x350 [ 521.960275][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 521.965321][ T31] misc_open+0x51/0x350 [ 521.969680][ T31] chrdev_open+0x4cc/0x5e0 [ 521.974124][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 521.979334][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 521.985849][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 521.991229][ T31] do_dentry_open+0x7ce/0x1420 [ 521.996008][ T31] vfs_open+0x3b/0x340 [ 522.000305][ T31] ? path_openat+0x33f3/0x3dd0 [ 522.005102][ T31] path_openat+0x340e/0x3dd0 [ 522.009827][ T31] ? do_sys_openat2+0xbc/0x200 [ 522.014609][ T31] ? __x64_sys_openat+0x138/0x170 [ 522.019698][ T31] ? __pfx_path_openat+0x10/0x10 [ 522.024647][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 522.029820][ T31] do_filp_open+0x1fa/0x410 [ 522.034348][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 522.039470][ T31] ? _raw_spin_unlock+0x28/0x50 [ 522.044369][ T31] ? alloc_fd+0x64c/0x6c0 [ 522.048823][ T31] do_sys_openat2+0x121/0x200 [ 522.053518][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 522.058826][ T31] ? exc_page_fault+0x82/0x100 [ 522.063610][ T31] __x64_sys_openat+0x138/0x170 [ 522.068736][ T31] do_syscall_64+0xfa/0xf80 [ 522.073345][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.080273][ T31] ? clear_bhb_loop+0x60/0xb0 [ 522.085028][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.091110][ T31] RIP: 0033:0x7fb5e6d8f749 [ 522.095539][ T31] RSP: 002b:00007fb5e4fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 522.104471][ T31] RAX: ffffffffffffffda RBX: 00007fb5e6fe6090 RCX: 00007fb5e6d8f749 [ 522.112500][ T31] RDX: 00000000000e8001 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 522.120524][ T31] RBP: 00007fb5e6e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 522.128751][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.136741][ T31] R13: 00007fb5e6fe6128 R14: 00007fb5e6fe6090 R15: 00007ffdb60dcb18 [ 522.144911][ T31] [ 522.147949][ T31] INFO: task syz.2.2290:14194 blocked for more than 145 seconds. [ 522.155890][ T31] Not tainted syzkaller #0 [ 522.161225][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.170006][ T31] task:syz.2.2290 state:D stack:27904 pid:14194 tgid:14190 ppid:5841 task_flags:0x400040 flags:0x00080002 [ 522.182022][ T31] Call Trace: [ 522.185309][ T31] [ 522.188305][ T31] __schedule+0x14bc/0x5000 [ 522.192838][ T31] ? __pfx___schedule+0x10/0x10 [ 522.197692][ T31] ? schedule+0x91/0x360 [ 522.202020][ T31] schedule+0x165/0x360 [ 522.206210][ T31] schedule_preempt_disabled+0x13/0x30 [ 522.212156][ T31] __mutex_lock+0x7e6/0x1350 [ 522.216759][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 522.221804][ T31] ? __mutex_lock+0x5bb/0x1350 [ 522.226599][ T31] ? misc_open+0x51/0x350 [ 522.231178][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 522.236232][ T31] misc_open+0x51/0x350 [ 522.240645][ T31] chrdev_open+0x4cc/0x5e0 [ 522.245093][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 522.250133][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 522.256480][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 522.261497][ T31] do_dentry_open+0x7ce/0x1420 [ 522.266282][ T31] vfs_open+0x3b/0x340 [ 522.270381][ T31] ? path_openat+0x33f3/0x3dd0 [ 522.275161][ T31] path_openat+0x340e/0x3dd0 [ 522.279971][ T31] ? do_sys_openat2+0xbc/0x200 [ 522.284747][ T31] ? __x64_sys_openat+0x138/0x170 [ 522.289888][ T31] ? __pfx_path_openat+0x10/0x10 [ 522.294853][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 522.299886][ T31] do_filp_open+0x1fa/0x410 [ 522.304406][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 522.309581][ T31] ? _raw_spin_unlock+0x28/0x50 [ 522.314484][ T31] ? alloc_fd+0x64c/0x6c0 [ 522.319565][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.327780][ T31] do_sys_openat2+0x121/0x200 [ 522.332586][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 522.337889][ T31] ? exc_page_fault+0x82/0x100 [ 522.342732][ T31] __x64_sys_openat+0x138/0x170 [ 522.347598][ T31] do_syscall_64+0xfa/0xf80 [ 522.352188][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.358330][ T31] ? clear_bhb_loop+0x60/0xb0 [ 522.363115][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.369189][ T31] RIP: 0033:0x7fb5e6d8f749 [ 522.373611][ T31] RSP: 002b:00007fb5e4fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 522.382111][ T31] RAX: ffffffffffffffda RBX: 00007fb5e6fe6180 RCX: 00007fb5e6d8f749 [ 522.390130][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 522.398203][ T31] RBP: 00007fb5e6e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 522.406196][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.414287][ T31] R13: 00007fb5e6fe6218 R14: 00007fb5e6fe6180 R15: 00007ffdb60dcb18 [ 522.422368][ T31] [ 522.425436][ T31] INFO: task syz-executor:14202 blocked for more than 145 seconds. [ 522.433866][ T31] Not tainted syzkaller #0 [ 522.438889][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.447588][ T31] task:syz-executor state:D stack:27800 pid:14202 tgid:14202 ppid:1 task_flags:0x400040 flags:0x00080000 [ 522.459720][ T31] Call Trace: [ 522.463017][ T31] [ 522.465942][ T31] __schedule+0x14bc/0x5000 [ 522.470535][ T31] ? __pfx___schedule+0x10/0x10 [ 522.475410][ T31] ? schedule+0x91/0x360 [ 522.479904][ T31] schedule+0x165/0x360 [ 522.484084][ T31] schedule_preempt_disabled+0x13/0x30 [ 522.489663][ T31] __mutex_lock+0x7e6/0x1350 [ 522.494273][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 522.499284][ T31] ? __mutex_lock+0x5bb/0x1350 [ 522.504071][ T31] ? misc_open+0x51/0x350 [ 522.508460][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 522.513533][ T31] misc_open+0x51/0x350 [ 522.517795][ T31] chrdev_open+0x4cc/0x5e0 [ 522.522279][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 522.527243][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 522.533737][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 522.539187][ T31] do_dentry_open+0x7ce/0x1420 [ 522.543967][ T31] vfs_open+0x3b/0x340 [ 522.548199][ T31] ? path_openat+0x33f3/0x3dd0 [ 522.552979][ T31] path_openat+0x340e/0x3dd0 [ 522.557592][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 522.563376][ T31] ? __pfx_path_openat+0x10/0x10 [ 522.568426][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 522.573442][ T31] do_filp_open+0x1fa/0x410 [ 522.577948][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 522.583070][ T31] ? _raw_spin_unlock+0x28/0x50 [ 522.587933][ T31] ? alloc_fd+0x64c/0x6c0 [ 522.592345][ T31] do_sys_openat2+0x121/0x200 [ 522.597125][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 522.602467][ T31] ? fd_install+0x95/0x3d0 [ 522.606913][ T31] ? fd_install+0x307/0x3d0 [ 522.611530][ T31] __x64_sys_openat+0x138/0x170 [ 522.616402][ T31] do_syscall_64+0xfa/0xf80 [ 522.620973][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.627052][ T31] ? clear_bhb_loop+0x60/0xb0 [ 522.631819][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.637726][ T31] RIP: 0033:0x7f2d2298df11 [ 522.642293][ T31] RSP: 002b:00007ffd113dd3c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 522.651164][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2d2298df11 [ 522.659217][ T31] RDX: 0000000000000002 RSI: 00007f2d22a149b7 RDI: 00000000ffffff9c [ 522.667198][ T31] RBP: 00007f2d22a149b7 R08: 0000000000000000 R09: 00007f2d2371d6c0 [ 522.675246][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 522.683297][ T31] R13: 0000000000000003 R14: 00007ffd113dd798 R15: 0000000000000000 [ 522.691372][ T31] [ 522.694432][ T31] INFO: task syz-executor:14203 blocked for more than 145 seconds. [ 522.702545][ T31] Not tainted syzkaller #0 [ 522.707491][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.716253][ T31] task:syz-executor state:D stack:27688 pid:14203 tgid:14203 ppid:1 task_flags:0x400040 flags:0x00080000 [ 522.728475][ T31] Call Trace: [ 522.731774][ T31] [ 522.734702][ T31] __schedule+0x14bc/0x5000 [ 522.739308][ T31] ? __pfx___schedule+0x10/0x10 [ 522.740028][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.744183][ T31] ? schedule+0x91/0x360 [ 522.756602][ T31] schedule+0x165/0x360 [ 522.761193][ T31] schedule_preempt_disabled+0x13/0x30 [ 522.766670][ T31] __mutex_lock+0x7e6/0x1350 [ 522.771433][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 522.776390][ T31] ? __mutex_lock+0x5bb/0x1350 [ 522.781217][ T31] ? misc_open+0x51/0x350 [ 522.785583][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 522.790707][ T31] misc_open+0x51/0x350 [ 522.794882][ T31] chrdev_open+0x4cc/0x5e0 [ 522.799359][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 522.804418][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 522.810832][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 522.815788][ T31] do_dentry_open+0x7ce/0x1420 [ 522.820643][ T31] vfs_open+0x3b/0x340 [ 522.824721][ T31] ? path_openat+0x33f3/0x3dd0 [ 522.829556][ T31] path_openat+0x340e/0x3dd0 [ 522.834166][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 522.839723][ T31] ? __pfx_path_openat+0x10/0x10 [ 522.844704][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 522.849739][ T31] do_filp_open+0x1fa/0x410 [ 522.854261][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 522.859383][ T31] ? _raw_spin_unlock+0x28/0x50 [ 522.864248][ T31] ? alloc_fd+0x64c/0x6c0 [ 522.869235][ T31] do_sys_openat2+0x121/0x200 [ 522.874036][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 522.879504][ T31] ? fd_install+0x95/0x3d0 [ 522.883940][ T31] ? fd_install+0x307/0x3d0 [ 522.888647][ T31] __x64_sys_openat+0x138/0x170 [ 522.893572][ T31] do_syscall_64+0xfa/0xf80 [ 522.898072][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.904220][ T31] ? clear_bhb_loop+0x60/0xb0 [ 522.909103][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.915011][ T31] RIP: 0033:0x7f12c3f8df11 [ 522.919575][ T31] RSP: 002b:00007ffd58b3da70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 522.928186][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f12c3f8df11 [ 522.936171][ T31] RDX: 0000000000000002 RSI: 00007f12c40149b7 RDI: 00000000ffffff9c [ 522.944213][ T31] RBP: 00007f12c40149b7 R08: 0000000000000000 R09: 00007f12c4d1d6c0 [ 522.952266][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 522.960445][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms [ 522.960471][ C1] lec:lec_tx_timeout: lec0 [ 522.973472][ T31] R13: 0000000000000003 R14: 00007ffd58b3de48 R15: 0000000000000000 [ 522.982085][ T31] [ 522.985126][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 522.994691][ T31] [ 522.994691][ T31] Showing all locks held in the system: [ 523.002695][ T31] 1 lock held by khungtaskd/31: [ 523.007765][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 523.017789][ T31] 2 locks held by getty/5593: [ 523.022615][ T31] #0: ffff88803320d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 523.032432][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 523.042736][ T31] 1 lock held by syz-executor/5834: [ 523.047969][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 523.058977][ T31] 3 locks held by kworker/1:3/5839: [ 523.064204][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 523.075428][ T31] #1: ffffc9000422fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 523.089274][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 523.101116][ T31] 4 locks held by kworker/u8:34/12921: [ 523.106589][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 523.116930][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 523.126119][ T31] #2: ffff8880b8825f98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 523.135229][ T31] #3: ffffffff99ae39c8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 523.145660][ T31] 2 locks held by syz.3.2176/13783: [ 523.151054][ T31] #0: ffff88806aca4100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 523.160892][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 523.171170][ T31] 2 locks held by syz.0.2178/13795: [ 523.176376][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 523.186645][ T31] #1: ffff88806aca4100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 523.196557][ T31] 3 locks held by syz.4.2279/14137: [ 523.202204][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.211009][ T31] #1: ffff888050d6a100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 523.220756][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 523.230783][ T31] 1 lock held by syz.1.2289/14188: [ 523.235920][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.244531][ T31] 1 lock held by syz.2.2290/14192: [ 523.249683][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.258210][ T31] 1 lock held by syz.2.2290/14194: [ 523.263372][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.271965][ T31] 1 lock held by syz-executor/14202: [ 523.277252][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.285916][ T31] 1 lock held by syz-executor/14203: [ 523.291278][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.300085][ T31] 1 lock held by syz-executor/14207: [ 523.305566][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.314336][ T31] 1 lock held by syz-executor/14208: [ 523.320006][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.329828][ T31] 1 lock held by syz-executor/14209: [ 523.335149][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.343827][ T31] 1 lock held by syz-executor/14215: [ 523.349203][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.357668][ T31] 1 lock held by syz-executor/14216: [ 523.363424][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.371811][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.380384][ T31] 1 lock held by syz-executor/14220: [ 523.385689][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.394225][ T31] 1 lock held by syz-executor/14221: [ 523.399555][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.408197][ T31] 1 lock held by syz-executor/14223: [ 523.413581][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.422556][ T31] 1 lock held by syz-executor/14227: [ 523.427857][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.436490][ T31] 1 lock held by syz-executor/14228: [ 523.442156][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.450841][ T31] 1 lock held by syz-executor/14234: [ 523.456174][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.464683][ T31] 1 lock held by syz-executor/14235: [ 523.470113][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.478819][ T31] 1 lock held by syz-executor/14237: [ 523.484113][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 523.492668][ T31] [ 523.495001][ T31] ============================================= [ 523.495001][ T31] [ 523.503520][ T31] NMI backtrace for cpu 1 [ 523.503541][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 523.503557][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.503565][ T31] Call Trace: [ 523.503571][ T31] [ 523.503578][ T31] dump_stack_lvl+0x189/0x250 [ 523.503603][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.503618][ T31] ? __pfx__printk+0x10/0x10 [ 523.503646][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 523.503679][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 523.503697][ T31] ? __pfx__printk+0x10/0x10 [ 523.503717][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 523.503740][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 523.503759][ T31] watchdog+0xf3c/0xf80 [ 523.503782][ T31] ? watchdog+0x1e2/0xf80 [ 523.503801][ T31] kthread+0x711/0x8a0 [ 523.503819][ T31] ? __pfx_watchdog+0x10/0x10 [ 523.503834][ T31] ? __pfx_kthread+0x10/0x10 [ 523.503849][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.503864][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 523.503878][ T31] ? __pfx_kthread+0x10/0x10 [ 523.503894][ T31] ret_from_fork+0x599/0xb30 [ 523.503914][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 523.503938][ T31] ? __switch_to_asm+0x39/0x70 [ 523.503952][ T31] ? __switch_to_asm+0x33/0x70 [ 523.503965][ T31] ? __pfx_kthread+0x10/0x10 [ 523.503980][ T31] ret_from_fork_asm+0x1a/0x30 [ 523.504006][ T31] [ 523.504014][ T31] Sending NMI from CPU 1 to CPUs 0: [ 523.649980][ C0] NMI backtrace for cpu 0 [ 523.649997][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 523.650015][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.650025][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 523.650051][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 523.650066][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 523.650081][ C0] RAX: 31f1db9f72631200 RBX: ffffffff8197438a RCX: 31f1db9f72631200 [ 523.650094][ C0] RDX: 0000000000000001 RSI: ffffffff8d76be8f RDI: ffffffff8bbfc660 [ 523.650105][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 523.650117][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 523.650129][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 523.650139][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 523.650152][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.650164][ C0] CR2: 0000564b56955000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 523.650179][ C0] Call Trace: [ 523.650187][ C0] [ 523.650193][ C0] default_idle+0x13/0x20 [ 523.650215][ C0] default_idle_call+0x73/0xb0 [ 523.650238][ C0] do_idle+0x1ea/0x520 [ 523.650255][ C0] ? irqentry_exit+0x5ba/0x660 [ 523.650276][ C0] ? __pfx_do_idle+0x10/0x10 [ 523.650299][ C0] cpu_startup_entry+0x44/0x60 [ 523.650315][ C0] rest_init+0x2de/0x300 [ 523.650330][ C0] start_kernel+0x3ae/0x410 [ 523.650347][ C0] x86_64_start_reservations+0x24/0x30 [ 523.650368][ C0] x86_64_start_kernel+0x143/0x1c0 [ 523.650389][ C0] common_startup_64+0x13e/0x147 [ 523.650415][ C0] [ 524.398830][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.439756][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.758630][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.478659][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.200182][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.518594][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.559527][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.799401][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.598648][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog