last executing test programs: 19.340602042s ago: executing program 2 (id=1483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x9, 0x6, 0x300, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffff8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffff9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10001}}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9b}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x4804}, 0x4000014) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000700000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028008000240000000010d000100434f4e4e4d41524b0000000014000300e4624777db9d97adbf2cd16d6fb1131f0900020073797a32000000000900010073797a30"], 0x98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r2, 0x4) 18.30291317s ago: executing program 0 (id=1505): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/229, 0xe5}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000180)=""/236, 0xec}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000380)=""/114, 0x72}], 0x5, &(0x7f0000000580)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001780)=""/4096, 0x1000}, &(0x7f0000000000), 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x6}, &(0x7f0000000480)=0x5, &(0x7f00000004c0)=0xb, 0xff, 0x13, 0x3}}, @cswp={0x58, 0x114, 0x7, {{0x5, 0x7}, &(0x7f0000000500)=0x7fff, &(0x7f0000000540)=0x7, 0x3, 0xca, 0xffffffffffffffff, 0x1, 0x0, 0x3}}], 0xe0, 0x4000004}, 0x0) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) 18.231663418s ago: executing program 0 (id=1506): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000008c4f6a2175783ab60003000000080000000100000f02000000180000000101000000002800646c0000002e00"], &(0x7f00000003c0)=""/236, 0x37, 0xec, 0x0, 0xff, 0x10000}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x20000220, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r5, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x6, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r8}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x96a, '\x00', 0x0, r1, 0x1, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1}, &(0x7f00000007c0), &(0x7f00000008c0)=r8}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x7fff, 0x1, 0x3, 0x42464, 0xffffffffffffffff, 0x3, '\x00', r9, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xe}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='percpu_alloc_percpu_fail\x00', r11}, 0x18) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r10, r14, 0x11, 0x0, 0x0, @void, @value=r13}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 18.174923944s ago: executing program 0 (id=1507): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x1, 0x4, 0x8, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 18.065162727s ago: executing program 0 (id=1510): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@dev, @dev, 0x0}, &(0x7f0000000100)=0xc) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd28, 0x25dfdc00, {0xa, 0x18, 0x0, 0xc8, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x83, 0x6, 0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010) 18.048841592s ago: executing program 0 (id=1512): r0 = socket(0x1a, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x47, &(0x7f0000000380), &(0x7f00000003c0)=0x8) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'pimreg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4c005) 18.004447291s ago: executing program 4 (id=1513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r1 = socket(0x840000000002, 0x3, 0x102) socket$nl_route(0x10, 0x3, 0x0) socketpair(0xf, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x40021}, [@IFLA_NET_NS_FD={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x32, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000280)={0x2, 'veth1_vlan\x00', {0xca}, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) 17.914413732s ago: executing program 0 (id=1516): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0xfffffffffffffffc, 0x103a000, 0x1000, 0x0, 0x7}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000001440)={@local, @private=0xa010102}, 0x8) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000001900)={0xa, 0x4e22, 0x9, @mcast2, 0xa}, 0x1c) bind$nfc_llcp(r2, &(0x7f0000001580)={0x27, r4, 0xffffffffffffffff, 0x5, 0x2, 0xf8, "d32984bd1ca44c066af51c08ee3401a077609475b78411e88549de050000000000f2170e65e3f50327e422000000100000000000001200000000001900", 0x3c}, 0x60) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, &(0x7f00000000c0)={0x27, r4, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r3) sendmsg$sock(r2, &(0x7f00000018c0)={&(0x7f0000001300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000001880)}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400)=0xffffffffffffffff, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000012c0)=ANY=[], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x3a, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff39, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f00000014c0)='rpm_return_int\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001380)=ANY=[@ANYRES32=r7, @ANYRES8=r6, @ANYBLOB="56bd08b2f98eb8ef8aab01bae1adca40dddb09bb7bfd0e00bf05629594daac87e191be2c11111f1cf77d123d0ab5d0a1959fff98b5d0752c240324c1ad50a176dba99c9923da6fe648c6067d2319fc547b7cfdb152b031f0f75117246e23f76d943616ead170559c4d7c4264fa"], 0x40}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[], 0x114}], 0x1}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0xb, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001500)='kmem_cache_free\x00', r9}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r13, 0x5411, &(0x7f0000000a80)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 17.856983792s ago: executing program 4 (id=1517): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000008c4f6a2175783ab60003000000080000000100000f02000000180000000101000000002800646c0000002e00"], &(0x7f00000003c0)=""/236, 0x37, 0xec, 0x0, 0xff, 0x10000}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x20000220, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r5, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x6, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r8}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x96a, '\x00', 0x0, r1, 0x1, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1}, &(0x7f00000007c0), &(0x7f00000008c0)=r8}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x7fff, 0x1, 0x3, 0x42464, 0xffffffffffffffff, 0x3, '\x00', r9, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xe}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='percpu_alloc_percpu_fail\x00', r11}, 0x18) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000140)='GPL\x00', 0x2, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r10, r14, 0x11, 0x0, 0x0, @void, @value=r13}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 17.820244783s ago: executing program 4 (id=1518): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0xe3, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20004844) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@bcast, @rose, @remote, @null, @null, @rose, @default, @bcast]}, &(0x7f0000000080)=0x48, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffff3500000000000000002e"], 0x0, 0x46}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0xe03, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xff84}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000100)={0x0, 'tunl0\x00', {0x4}, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$tun(r4, &(0x7f0000000ac0)={@val={0x0, 0x9000}, @void, @ipv6=@gre_packet={0x2, 0x6, "ecaee7", 0x1277, 0x2f, 0xff, @local, @dev={0xfe, 0x80, '\x00', 0x42}, {[@dstopts={0x4, 0x20d, '\x00', [@generic={0x5, 0x1000, "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"}, @calipso={0x7, 0x50, {0x0, 0x12, 0xe5, 0x6, [0x3, 0x5, 0xfffffffffffffffe, 0x6, 0xffff, 0xfffffffffffffffe, 0x1, 0xffffffffffff47d7, 0xfffffffffffffffd]}}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x86, 0x2, [], "0e1eb18b0589ddca7812fb2881b63e6e0db7e2f450174a9cb602af06e0f90fc3000814477c5c3503760f39971f3f6ad380bb3a1d54ba718f13dbfa372e478f52431e8c7f00b39fd98e984c7ce3fe45546c608bbfb0cbaefe25aae1f8620077700fae57f5c9b3a12c934007cdc843df7d6d429fa899de4ca2143528684dc104db44b5ee8cae44"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "d1d92d60d2c9d059c4f4e486e950374721d1ade0e085edcf62d3cc53a60d5a8aa7410b7982c17061ea47c172727b8647ffc1ef6ed0b264d43ddb1da9b91d96c8aaadfb721f8e73eaf7399c61c85b6c1fbffdb6465a3211383feb55a47a1492d842c7e5b3f762fef1938c037efadf8c8e74a3ac23591c41c7cd768715b55f575250671efad3a86fde615c0cbaf9cdd6668868e722c0668c50f3c47044268d12086dae859f5ded729277b58445124ecca69286423f58f401f32c20de08c85546a7bf64f83cf3b8b7f196a1870f953d440e438e1f0b529a951975729dc0"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xb9c5, 0xc], "0c1b00c71349c2a3e5be23c4b6f99f82f91d23f64c72e0b7a184619eb6709dcc097f50781c64"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x5, 0x1, 0x1, 0x0, 0x4, 0xf0}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x1, 0x2, 0x1, 0x2, 0x3, 0x50}, 0x2, {0xffffffd6, 0x3, 0x3, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "723186ce77bb6ad8a2577a920a8125eb1e5a66a1142e4078decf5c07c3c0793b3f9093cdde24713876f465746ff660"}}}}}, 0x12a3) 17.749073663s ago: executing program 4 (id=1519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x4}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000084000000160a010100000000000000000100000058000380540003801400010067656e65766531000000000000000000140001006d6163736563300000000000c498d61050000100766574683100000000000000000000001400010073797a6b616c6c6572310000000000000900010073797a30000000000900020073797a30"], 0x10c}}, 0x0) 17.581080706s ago: executing program 4 (id=1520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x3ff}, &(0x7f0000000180)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x4) 17.569188328s ago: executing program 4 (id=1521): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0xff0, 0x3, 0x0, 0xfff}, &(0x7f0000000100)=0x14) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$isdn(0x22, 0x2, 0x21) close(r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x40000061) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 16.382343091s ago: executing program 3 (id=1539): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000008c4f6a2175783ab60003000000080000000100000f02000000180000000101000000002800646c0000002e00"], &(0x7f00000003c0)=""/236, 0x37, 0xec, 0x0, 0xff, 0x10000}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x20000220, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r5, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x6, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r8}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x96a, '\x00', 0x0, r1, 0x1, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1}, &(0x7f00000007c0), &(0x7f00000008c0)=r8}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x7fff, 0x1, 0x3, 0x42464, 0xffffffffffffffff, 0x3, '\x00', r9, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xe}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='percpu_alloc_percpu_fail\x00', r11}, 0x18) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r10, r14, 0x11, 0x0, 0x0, @void, @value=r13}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 16.292142685s ago: executing program 2 (id=1540): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xfc, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0xe8, 0x1, [@m_csum={0xb4, 0x34, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}]}, {0x69, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be57063196181"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 16.250851187s ago: executing program 3 (id=1541): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0a022cbd7000fbdbdf2501000000050011000100000006000800000000000500110009000000050011000700000006000a00030000000c000900"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x80c4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r2, &(0x7f00000000c0)="a6bea8a120e5f8320c30ce50869c", 0xe, 0x48810, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="e6883490c5fc"}, 0x14) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 16.22201027s ago: executing program 2 (id=1542): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}}, 0x0) 16.13274312s ago: executing program 3 (id=1543): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000480), &(0x7f0000000500)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x138, r10, 0x302, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbc, 0x64}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0xac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x8d, 0xb, "a6fd495fd4eeb510456169c6a3644b3a1e6256d5271c26ab4f43cb68bc7f19892a3c2e2b1eafeb57864aec38ad92145c922bf73cb4720a33de695e82f6a4998c714333ba67ed9362ad49762e5671950aea772dda8eb0b30f23ac7d1e073a887e77d5cdb933255e120ff121c5218ab1b78b1837ad8ef73a67b5ea03703cdf7110e03c5b36a04871f80d"}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xa3}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x50, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0x34, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r12, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x30, 0x49, 0x300, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x1f, 0x0, r11, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 16.132327908s ago: executing program 2 (id=1544): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r2, 0x5}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r7, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}], 0x1}}], 0x2, 0x4000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r9 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x8040) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f00000001c0)={0xe83, 0x4, 0x0, 0x80000002, 0x1, 0x0, [{0x7, 0x10000, 0xd, '\x00', 0x2902}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 16.108798116s ago: executing program 3 (id=1545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000340), 0x12) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="86636a39250000009973f84f685062f4bd71624a285c0200c0c1e01922ca1b5b47596b846b38b510364a09d628b7a4d9f97ece7cc496e31389c6efc7b12e2de7d24d42ec6ba9a9fb030f1273da2bf793cd94e139b76f159beff99b0e5c5fff89c7d9ed396d86d7206bca3f2020c70ad1a8c3fa28de14c04c3f3201", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf25030000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x274, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1080}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_VFINFO_LIST={0x218, 0x16, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0xb9fd}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x7fff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x28, 0x8, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffff8, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x5e, @local}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x65a4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x8}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7a5, 0xc42, 0x15b7, 0x8100}}, {0x14, 0x1, {0x9, 0xa96, 0x0, 0x88a8}}, {0x14, 0x1, {0x2, 0xd17, 0xc, 0x8100}}, {0x14, 0x1, {0x6, 0xad3, 0x6d27, 0x8100}}, {0x14, 0x1, {0x9, 0x60d, 0x7, 0x88a8}}, {0x14, 0x1, {0x8, 0xae5, 0x4, 0x88a8}}, {0x14, 0x1, {0x1, 0xe24, 0x7, 0x9a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x80000000}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x78, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xdee, 0xffffffff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1000, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x401}}, @IFLA_VF_VLAN={0x10, 0x2, {0xd, 0x9f3, 0x80}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x1000}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x1, 0xffffffff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x42d77f51, 0x10001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0xc}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x4}}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40051}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$AUDIT_TRIM(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x200, 0x70bd27, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x84}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x24000, 0x4) pread64(r3, &(0x7f0000000100)=""/93, 0x5d, 0x0) 16.047775686s ago: executing program 2 (id=1546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000060000000010000010900010073797a310000000038000000030a01040000000000000000010000000900030073797a31000000000900010073797a31000000000c0004"], 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 15.993032837s ago: executing program 2 (id=1547): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0xffff}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x4}, 0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2a, 0x98, {0x0, 0x0, 0x0, r1, {0x10, 0x4}, {0xa, 0xf}, {0xffe0, 0xf}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20008000) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 64) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000040)=0x1) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008c4}, 0x10) (async) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x3a) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) readv(r10, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_int(r9, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) (async, rerun: 32) r11 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r11, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r11, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f92d", 0x2}], 0x1}, 0x4000080) (async) sendmsg$inet(r11, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) sendto$inet6(r9, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4804) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c92ad6ab8055fe39a5a9615d5ba410de"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "988f88d52ae2aa1e44f0e5686a8da5d9"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (rerun: 32) 15.992312013s ago: executing program 3 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400c400001400028008001300000000000800120000000000a4f582dad8"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x804) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x74, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x30}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e5357821dec0"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d9efc505c129"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2f01e14135fc"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20004811) 15.882722876s ago: executing program 3 (id=1550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xfdcc99ee6dbb1eef, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 32) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x0) (async) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000240)="7d2371115107f171844664966c7b4091f4a0ea10dc11cde5ca83a343f041cbcc0e38bab9d8eca40f33212671f6ea152d8ab7477fd9c725a3553553f4010a0b57334934bf1d4f05dd307d859e38f3e3e9676a45a79b01", 0x56}], 0x1) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) getsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000440), 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001f40)={'dummy0\x00', &(0x7f0000001f00)=@ethtool_sfeatures={0x3b, 0x2, [{0xa, 0x4}, {0x0, 0x2}]}}) close(r3) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@getqdisc={0x40, 0x26, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x5, 0xd}, {0x2, 0xfff1}, {0x7, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) writev(r1, &(0x7f0000000680)=[{&(0x7f00000002c0)="05026a4dd7d81ed4b8c03c21bf353002de783effbf939be55a6da73e4fea42e6397d7f5a7d611457b87e78e5872256999a301950a7fd90b8387738fb95ab942288aa918406ec50d1f5278a80053830be13b9a45a72e4c398eead152e19ef74ee9519", 0x62}, {&(0x7f0000000480)="46f9e7c9a992d435da1e9de7c6c1aa1e4983c590efe2b919ad81d4ab5dfe2ae77b4414bca44e9e8475ea180c7e42e6d3dadf26a1ee49ca0419de53b759a2cf31ff", 0x41}, {&(0x7f0000000500)="27646aee357f0c9c7fd1cd749142d7f109b0b8119dbe6f86f389311672ffc9d072e2b8e51f1ba5edd91ba2e978492948587081c166f60c9a076310fffe7bade1eef13dcf33e8aa27c2f020b04a5e9a9a5084977bce16fabdf832a4668e01e7ef74a633abd8dc0ec71c", 0x69}, {&(0x7f0000000200)="ad4280a224790e9f4519b903c8efd6df2cf8d89d566422110f05ffb4d3b3062a43964dea396c131bc49a68c5654c550afffc0bdb76", 0x35}, {&(0x7f00000005c0)="9d6a0f24530d41c4a6cd9d2db1c4e47a1e39e83e6ee23fa93d8be4d5fdd1005f47d23a5b9d443f7a52ad5ea9f692201402f0fba76b84d25fdabaf632d7462f5f641d93520987bc5d11036627d21916fa2afbfb2ca72dbd4bfcd716b72eff4b1970e75eb5b69555ffdc2b7a982159660a17edc1b0f661fdd07f8a08ec4e31e5251bf83620b9736d1e629fc75fcc02822f6e0d6fc43462f8bfd0d631d8796abb4b605180a2dafb71de33952a697ae1dd6c9f10c1b380298fde48", 0xb9}], 0x5) (async) socket$unix(0x1, 0x3, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@delchain={0x1a1c, 0x65, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xfff1}, {0x1, 0xffff}, {0x12, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x19d4, 0x2, [@TCA_CGROUP_POLICE={0x85c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x10001, 0x3, 0x80, {0x86, 0x1, 0x8, 0x7f, 0x9, 0x1}, {0x9, 0x1, 0x35a9, 0x4, 0x3}, 0xa85, 0x9fc, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x2, 0x9, 0x9, 0x0, 0x88, 0x2, 0xff, 0x1, 0x1000, 0x6, 0x5, 0x9, 0x800, 0xfffffffd, 0x9, 0x3, 0x80000001, 0x23b, 0x366, 0x8, 0xc0000, 0x4, 0x3, 0x0, 0xb, 0x9, 0x5, 0xfe00, 0x3, 0x6, 0x2, 0x9, 0x9, 0x2, 0x9, 0x80, 0x1, 0xa, 0x53, 0x5bd, 0x913, 0x7, 0x80000000, 0x100, 0x4, 0x3, 0x2, 0x7, 0x2, 0x6, 0x9, 0x3, 0xffffffff, 0x3d17e2a6, 0x4, 0x8000, 0x0, 0x8, 0x2, 0x3, 0x5, 0x6, 0x80, 0x8, 0x2, 0x200, 0x8, 0x8001, 0x3ff, 0x800, 0x80000000, 0xff3, 0x2, 0x6, 0x401, 0x6, 0x8001, 0x2, 0x8, 0x3, 0x2, 0xb7, 0xffffffff, 0x2, 0x3ff, 0xd, 0x6, 0x6d9, 0x9, 0x100, 0x1, 0x2, 0xa, 0x5, 0x8, 0xff, 0x8d, 0xf1c, 0x1, 0xdf2, 0x7, 0x98, 0x2, 0x7b, 0x2, 0x78e3dc3a, 0x7fffffff, 0x1, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2, 0xa2, 0x1, 0x5e3, 0x8000, 0x6, 0x3, 0xa2, 0xd7, 0xc, 0x3, 0x5cd, 0x9ff, 0x7fffffff, 0x4, 0x4, 0x9, 0x360f, 0x10000, 0x8, 0x5e1, 0x6, 0x4, 0x9, 0x80, 0x1, 0x33de, 0x7ff, 0x2, 0x9, 0x401, 0x5, 0xfffffffa, 0xfffffff7, 0x2, 0xfffffe00, 0x3, 0x3, 0x9, 0x7, 0x0, 0x2, 0xffffff3d, 0x8000, 0x7a9, 0x1, 0x7, 0x232, 0x2, 0x0, 0x1, 0x2f7, 0x0, 0x0, 0x3, 0x8, 0xffffffff, 0x8, 0xffffffff, 0x6, 0x8000, 0x7ff, 0x1, 0x6, 0x0, 0x9, 0xd3a0, 0x1, 0x7, 0x1, 0x9dc6, 0x8, 0x5, 0x7ff, 0x18000, 0x0, 0x9, 0x5, 0x655, 0x5, 0x8a72, 0x80000000, 0x0, 0x1, 0xe1, 0x2, 0x7cfc, 0x8b05, 0x5, 0x40a4, 0x3, 0x41, 0x925, 0x9, 0x1, 0x2000000, 0x5, 0x8, 0x7, 0x6, 0x7, 0xb, 0x1, 0xffffff42, 0x2, 0x2d, 0x2, 0x5e9, 0xffffffff, 0x9, 0x7ff, 0xdf4, 0x1, 0x8e, 0x0, 0x100000, 0x5, 0x80000001, 0x101, 0x5, 0x4, 0x1, 0x3, 0x8, 0x1, 0xd442, 0xfffffffc, 0x8, 0xd18, 0x9, 0x7, 0x4, 0x0, 0x6, 0x1e76a906, 0xff, 0x6, 0x688c, 0x1, 0x4, 0x842, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x5, 0xb, 0x30, 0x80000000, 0x3, 0x2, 0x8, 0x4a8, 0x1, 0x6, 0x8, 0x3, 0x3, 0x1ff, 0x1, 0x4289, 0xfff, 0xfffffffc, 0x0, 0x7, 0x7f, 0x80000001, 0x1, 0x3, 0x7fff, 0x5, 0x7fffffff, 0x8000, 0x8, 0x3, 0x1000, 0x7, 0x1000, 0xe6f, 0x9, 0x6, 0x5, 0xb032, 0x80000000, 0x0, 0x0, 0x5, 0x1, 0x7, 0x4, 0x7, 0x2, 0x7, 0xc773, 0x89d, 0x80, 0x0, 0x4, 0x8000, 0x5, 0x18000, 0x81, 0xf5, 0x2, 0x3b, 0x3, 0x8, 0x2, 0xdc37, 0x8001, 0x40, 0x7, 0xb7c, 0x3, 0x0, 0x5, 0x800, 0x5, 0x8f6, 0x2, 0x3, 0x3ff, 0x723c, 0x4, 0x401, 0x4, 0xcc, 0x373, 0x455, 0x3, 0x7, 0xbf, 0x2, 0x1ba, 0xfff, 0x40, 0x5ad, 0x4, 0x3, 0x7f, 0x80, 0x867, 0x401, 0x1, 0xfffffffc, 0xbb7, 0x8001, 0x5, 0x6, 0x5, 0xc6, 0x6, 0x2, 0x88ee, 0x7, 0x1000, 0x2, 0x5, 0x7d, 0x4, 0xc, 0x80000000, 0x6, 0xf, 0xffffffa3, 0x8, 0x800, 0x9, 0x4, 0x40, 0xfffffffa, 0x1, 0x8001, 0xc, 0x5, 0x6, 0x5, 0x8, 0x100, 0x81, 0x0, 0xe, 0x7, 0x2, 0x7, 0x7, 0x53a, 0xc, 0x1000, 0x0, 0x6, 0x4, 0x7ff, 0x4, 0x0, 0x164a, 0x80000000, 0x851, 0x4cc2, 0x6, 0xe31, 0xc, 0x3, 0x9, 0xff, 0x81, 0x80000000, 0x0, 0x6, 0x8000, 0x8, 0xd2, 0x6, 0x4, 0x6, 0x4, 0x6, 0x6, 0x5, 0x9, 0xc4c4, 0x68c22d13, 0x0, 0x9, 0xbc9, 0xff, 0x3, 0x9, 0x1000, 0x1, 0x0, 0x6, 0x4, 0xb878, 0x6, 0x9, 0x762, 0x7, 0x9, 0xf2, 0x98bd, 0x7, 0xbb, 0x2, 0x4, 0x4, 0x86, 0x7, 0x3, 0x4, 0x1, 0x0, 0x1, 0x9, 0xfae, 0xfff, 0x81, 0x101, 0xfa, 0x6, 0x8, 0x0, 0xe6, 0x6, 0xd16, 0x10000, 0xfff, 0xfffffff7, 0xffffff6f, 0x15, 0x0, 0x1ff, 0x7f, 0xd, 0x10001, 0x0, 0xf1d, 0x60a, 0x4, 0x5, 0x4, 0x2, 0x6, 0x7, 0x9, 0xfffffffa, 0x40, 0x8, 0x6, 0x7ff, 0x0, 0xfffffffe, 0x9, 0x10, 0x5, 0x7f, 0xffffffff, 0x1, 0xb1, 0x401]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_CGROUP_ACT={0x344, 0x1, [@m_nat={0x1f4, 0x1a, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0xffffffffffffffff, 0xf5, 0xfffff765}, @empty, @dev={0xac, 0x14, 0x14, 0x34}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff8, 0xa, 0x20000000, 0x7, 0x1}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0x4, 0x10001, 0xfffffe01}, @local, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xa15, 0x3, 0x5, 0x1}, @multicast1, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xfffffffc, 0xffffffffffffffff, 0x7, 0x8001}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3ff}, @loopback, @broadcast, 0xffffffff, 0x1}}]}, {0xdb, 0x6, "14057e646efa5f363c93435110f64f9f4dd42e61d40601c86ac228d637835c7545f877d2249eaecf05e797995f0857482d6b0ee40c33a471c8e7be545e54f8cab29c6f5722f17dd1fed2c2ac99c2c0856690dd26309eb4ab8390b60e0200f38b5b9d8668ab52b70692c2989e1f844e9d54962e37aa5751e2f2abe3e13f00749cb06ed2d8adb26fa3db64b62f2d25a0ec8fd3d03e061c1a3e77f4f9ef39b073210c23079614ec41ac42a44cc39e088806c3e62e6d56b9b5bd5c59e207d9eb508629c3c1975925f8a11151b6b3b3a352d9761d495ea950a3"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x54, 0x1c, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x16, 0x6, "a84fe52d2fd327660c0f070e3f59412f7f2c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xf8, 0x8, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x201, 0x6, 0x0, 0x2f8a, 0x6}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xff}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfa495}]}, {0x88, 0x6, "e62806ca28945f811a71918d0bacd0bf98e71204862e31ddf70c76a8429db8fa35e2b6e5ded44502ad3226aef55fdee2c13c3d9e6bbde16634ad4587a3b688fef8950273a542ba197186a7e4a6fc90aa80a5f7d0eddae7c57ae2cbfc847c6b22f6dfb15a65ab187c3b73c19424e7c18301faf8e2f4207466f6531abaf404983c59afd13b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x880, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x5e, 0x3, 0x8, 0xfffffffe, 0x5, 0x36ff, 0x0, 0x9, 0x7fff, 0x8, 0xe8, 0x8, 0xb4, 0x5, 0x91, 0x3, 0xffffffff, 0xfffffffc, 0x5, 0x3, 0x6, 0x1, 0x2, 0x80, 0x8, 0x101, 0x8, 0xfffffffa, 0x10000, 0x206, 0x4, 0x9000000, 0x1, 0xb5d9, 0x1be, 0xfffffff3, 0xffffff76, 0x6, 0x401, 0x800, 0x90a, 0x7, 0x838, 0x100, 0x9, 0x3, 0x7, 0x4, 0x2, 0x3, 0x7, 0x2, 0xc66, 0x4, 0xad, 0x8a0b, 0x8, 0x3, 0x0, 0x5, 0x1000, 0x8, 0x2, 0x1, 0x90a7fd2, 0x7, 0x0, 0xf4d, 0x800, 0x10001, 0xeae9, 0x5, 0x1, 0x0, 0x4b7261f8, 0x4, 0x9, 0x6173, 0x9, 0x9f5, 0xfffffffc, 0x1, 0x0, 0x5, 0x3, 0x6, 0xff, 0x7ff, 0xb, 0x7fff, 0x1fd4, 0x42d, 0x1, 0x1, 0x4, 0x9, 0x7ff, 0x4, 0x0, 0x3, 0xf, 0x6, 0x6, 0x2, 0x1, 0x3, 0x200, 0x7fffffff, 0x1, 0x6, 0xffff, 0xa, 0x5, 0x7, 0x1, 0x5, 0x25efdafb, 0x80000000, 0x5, 0x2, 0x3, 0x8001, 0x4e7, 0x4, 0x2, 0xf0000000, 0x9, 0x4, 0x10, 0x9fda, 0x7ff, 0xfff77fff, 0x1, 0xfffffff7, 0x5d6f, 0xffffffcc, 0xfffff01d, 0x2, 0x8, 0x6, 0x6, 0xffffffff, 0x4, 0x9, 0xc8a, 0x9, 0x200000, 0x6, 0x3, 0x1000, 0x5, 0x1, 0x7fffffff, 0x3, 0x9, 0x7ff, 0x4f, 0x1, 0x6, 0xb3a5, 0x2b380, 0x4, 0x8, 0x2, 0x6, 0x1, 0x7, 0x7, 0x9, 0x4e, 0x0, 0x0, 0x7ff800, 0xd8, 0x8, 0x9eb, 0x7e15, 0x7e, 0x2, 0x1000, 0x1, 0x238, 0x3ff, 0xffff, 0x6, 0x80000001, 0xfff, 0x5, 0x80000000, 0x7, 0x2, 0xf, 0x2be, 0x6, 0x7, 0x800, 0x7, 0x80, 0x8, 0xce, 0x98, 0x8, 0x80000001, 0x2, 0x7, 0x3ff, 0x6, 0x35c, 0x9, 0x2, 0x168, 0x7, 0x2, 0x8, 0x100000, 0xb, 0x6, 0x2, 0x0, 0x800, 0xfff, 0x3ff, 0xfffffffb, 0x9, 0x1, 0x7ff, 0x2, 0x5, 0x3, 0xd4, 0x9, 0x1ff, 0x3, 0x1, 0xb9a, 0xe, 0x7, 0x1, 0x1, 0x2, 0x75f2, 0x9, 0x1, 0x8, 0x6, 0x3, 0x9, 0x8, 0x80000000, 0x2, 0x4, 0x80000001, 0x8, 0xfff, 0xa, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x6, 0x0, 0xfffffffb, {0x8b, 0x1, 0x9, 0x2, 0x5, 0x6}, {0x2, 0x1, 0x5, 0x401, 0x401}, 0x2, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5, 0xd, 0x1, 0x0, 0x14000, 0xfffff7b1, 0x1, 0x80000001, 0xb658, 0xb, 0x3, 0xb, 0x5, 0xde, 0x3, 0x6, 0x2, 0x71, 0x7, 0x8, 0x5, 0x2, 0x8000, 0xb734, 0x4, 0xd1, 0x8001, 0x8, 0x80000000, 0x7, 0x6, 0x9, 0xfffffffe, 0x8, 0x1, 0x2, 0x5, 0x1, 0x7, 0x28, 0x1, 0x8, 0x0, 0x4, 0x4, 0x20ad2ae4, 0x3, 0x1, 0x0, 0x1, 0x6, 0x5, 0x800, 0x401, 0x8, 0x6, 0x6, 0x2, 0xd, 0xffffffff, 0x10000, 0x9b, 0x0, 0x4, 0x4, 0x8, 0x7, 0x4, 0x0, 0x6, 0x4, 0x0, 0x4, 0x0, 0x9, 0x9, 0x180, 0x3, 0x7, 0x7, 0x80000001, 0x3, 0x400000, 0x8001, 0x7, 0x9, 0x12, 0x40, 0x5, 0x828, 0x5, 0x7fff, 0x1a1, 0xc20, 0x2, 0x0, 0x7, 0x10, 0x9, 0x7, 0x9, 0x2, 0x100, 0xaab4, 0x0, 0xfdcc, 0x9, 0x9, 0x5, 0x43, 0x1c00000, 0x7203, 0xfffffffa, 0x6, 0xffffffff, 0x9c, 0x2, 0x1, 0x3ff, 0x4, 0xb821, 0x1, 0x9, 0xfffffffc, 0x38bc, 0x6, 0x7, 0x0, 0x2, 0x2, 0xc2, 0x7, 0xd, 0x0, 0x1, 0x8, 0x4, 0x700, 0x3, 0x40, 0xfffffaac, 0x2, 0x10, 0xcc, 0x0, 0xca, 0x8, 0x8, 0x8, 0x2d038238, 0xf, 0xb, 0x2, 0x10, 0x8, 0x6, 0xe, 0x2, 0x9, 0x1, 0xfffffeff, 0x7fffffff, 0x0, 0x2, 0x1000, 0x4, 0x1, 0xa, 0x3, 0x3, 0xfff, 0x9, 0x4, 0xffffffff, 0x9, 0x9, 0x5, 0x4, 0x5, 0x10, 0x1, 0x8001, 0x0, 0x0, 0x1, 0x5, 0x6, 0x4, 0x80000000, 0x7, 0x2, 0x9, 0x7, 0x10000, 0x1, 0x7, 0x3ff, 0x6, 0x6, 0x5, 0x4, 0x4, 0x5, 0x3, 0x5, 0x9, 0xfffffffa, 0x1ff, 0x9, 0x8020, 0x0, 0x1, 0x6, 0xf8, 0x6, 0x8000, 0xff, 0x7, 0x8, 0x2bd8, 0xb14e, 0x3, 0x10, 0x8, 0x0, 0x6, 0x101, 0xefa, 0x9c, 0x0, 0x9, 0x81, 0x32, 0x0, 0x1, 0x5, 0x0, 0x6, 0x10001, 0xfffffffa, 0x7, 0x300000, 0x7, 0x9, 0x5, 0x1, 0x2, 0x0, 0x80000001, 0x8, 0x2, 0xb, 0x8a68, 0x40000000, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10}]}, @TCA_CGROUP_EMATCHES={0x19c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x17c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x1}, {0x4, 0x5, 0x4}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0xa5, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x37, 0x2, [@TCF_META_TYPE_VAR="d70034", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="d0a45a445dfae13b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="2094c0428ac5", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5e48fdd8788d858fb461", @TCF_META_TYPE_INT]}]}}, @TCF_EM_CONTAINER={0x108, 0x1, 0x0, 0x0, {{0xff}, "2db635e46bb674f4313821fb055a07db15ac1855b861d30e89e1ea697b4ac55c4bd1af6394fc843fc7136afff09b73d858b0a77c3270c49727ab3de94b9dc4700de1288b335bb6647ea9e7780a2525a1509c85b9127b522d9184c26cc1669edc985af4f594410947e156d26a9426f37281e11b71953f918b5325044ddb6ed0089093f99357d9266ca6420dde822cfa15b981e00a624828ba9514ce72296ac7cc3e815d4b9131b9ea189d3680d5b197c5d2b5c77eb610f063f84ee71797bb77ced5b31973aa45dfd4ec4fed1cdd228032571d2a657302d368b1e0451a617e743e1eab5205c587d4895be1cf7172a8ee622f1f59fda1d6641592"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7fff}, {0x4d, 0x4, 0xef, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xfeff}, {0x6, 0xbb4, 0x41b6, 0x4, 0xf, 0x1}}}]}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x8001, 0x4, 0xffffffff, 0x85, 0x7ff, 0x10001, 0xe82, 0x9, 0x80000000, 0xa, 0x9, 0x8, 0xeb4, 0x1de000, 0x7, 0x2, 0x7, 0x77, 0x9, 0x1, 0x6b7f, 0x1, 0x101, 0xffffffff, 0x5, 0x1, 0x8, 0x80000000, 0x10000, 0x5, 0xb4, 0x200, 0xa, 0x9, 0x28, 0x1, 0xb, 0x7, 0x7, 0x6, 0x2, 0x5, 0x0, 0xc, 0xfffffffe, 0x6, 0x4, 0xd3, 0x1, 0x637e, 0x8, 0x81, 0x2, 0x8, 0x9, 0x2, 0xc200000, 0x0, 0xa93d, 0x7, 0x4, 0x1, 0xa, 0x5, 0x4, 0x1, 0x2, 0x42, 0x6, 0x3, 0xfffffffa, 0x7, 0x5b76af72, 0x9, 0x0, 0x4, 0x8ba3, 0x4, 0x80, 0xfff, 0x6, 0x2, 0x8, 0x8, 0xfffffffb, 0x2, 0x2, 0xfffffffd, 0xba, 0x24, 0x80, 0xf, 0x7f, 0x0, 0x401, 0x1, 0x0, 0x3, 0x9, 0x5, 0x7f, 0x5, 0x10000, 0xea75, 0x4c, 0x2, 0x8, 0x200, 0xa04, 0x2, 0xe0000000, 0x1, 0x8001, 0x1, 0xf5, 0x1, 0x6, 0x0, 0xc825, 0x2, 0x401, 0x3, 0x0, 0x0, 0x3, 0x7, 0x8001, 0x5, 0x28, 0x0, 0x8, 0x9, 0x7, 0x3, 0x7f, 0x5, 0x6, 0x81, 0xfffffeff, 0xe12, 0xe64, 0x946, 0x6, 0x0, 0x2, 0x0, 0x8, 0x1400, 0x10, 0x7, 0x3, 0x7, 0x9, 0x2ed, 0x5a, 0x1, 0x6, 0x459, 0xb, 0x5, 0x4, 0x5, 0x9, 0x3, 0x4, 0x6cc, 0x0, 0x693a2508, 0x10001, 0x58f2, 0xa9, 0x2, 0x2f, 0x7fff, 0x10000, 0x2, 0xffff, 0x800, 0x1, 0x7fffffff, 0x3, 0x400, 0x0, 0x8001, 0xfff, 0x6, 0x7fff, 0x400, 0x6, 0x8, 0x5, 0xf5, 0x401, 0xfffffff8, 0x1, 0x10001, 0x6, 0x2, 0x5, 0x9, 0x5, 0x5, 0x7d20ed66, 0x4, 0xe, 0xffffb6bf, 0x1, 0x9, 0x401, 0x0, 0x400, 0x9, 0x6d2, 0x200000, 0x2, 0x9, 0x7, 0xd, 0x81, 0x0, 0x72, 0x4, 0x0, 0x0, 0x0, 0xd8, 0xfa, 0x6, 0x8, 0xe, 0x1ff, 0xa, 0x0, 0x675d, 0x1ff, 0x4, 0x0, 0x100, 0x2, 0x1000, 0x5, 0x2, 0x0, 0x3ff, 0x8000, 0x8, 0x9, 0xffffff99, 0x3, 0xfffffffd, 0x8, 0x3, 0x1, 0x945]}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x1a1c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.839061742s ago: executing program 1 (id=1551): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000008c4f6a2175783ab60003000000080000000100000f02000000180000000101000000002800646c0000002e00"], &(0x7f00000003c0)=""/236, 0x37, 0xec, 0x0, 0xff, 0x10000}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x20000220, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r5, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x6, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r8}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x96a, '\x00', 0x0, r1, 0x1, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1}, &(0x7f00000007c0), &(0x7f00000008c0)=r8}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x7fff, 0x1, 0x3, 0x42464, 0xffffffffffffffff, 0x3, '\x00', r9, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xe}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='percpu_alloc_percpu_fail\x00', r11}, 0x18) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r10, r14, 0x11, 0x0, 0x0, @void, @value=r13}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 15.800048217s ago: executing program 1 (id=1552): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xfc, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0xe8, 0x1, [@m_csum={0xb4, 0x34, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}]}, {0x69, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be57063196181"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15.762645441s ago: executing program 1 (id=1553): r0 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xc, 0x4, 0x260, 0xffffffff, 0x130, 0x98, 0x0, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r2, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) 15.692961381s ago: executing program 1 (id=1554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6481}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}}, 0x0) 15.690626521s ago: executing program 1 (id=1555): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000b575cb2398001001000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x10, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) 15.671745407s ago: executing program 1 (id=1556): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100003e000701feffffff00000000047c00000800428004000800b80009"], 0x180}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 2.616511983s ago: executing program 32 (id=1516): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0xfffffffffffffffc, 0x103a000, 0x1000, 0x0, 0x7}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000001440)={@local, @private=0xa010102}, 0x8) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000001900)={0xa, 0x4e22, 0x9, @mcast2, 0xa}, 0x1c) bind$nfc_llcp(r2, &(0x7f0000001580)={0x27, r4, 0xffffffffffffffff, 0x5, 0x2, 0xf8, "d32984bd1ca44c066af51c08ee3401a077609475b78411e88549de050000000000f2170e65e3f50327e422000000100000000000001200000000001900", 0x3c}, 0x60) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, &(0x7f00000000c0)={0x27, r4, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r3) sendmsg$sock(r2, &(0x7f00000018c0)={&(0x7f0000001300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000001880)}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400)=0xffffffffffffffff, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000012c0)=ANY=[], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x3a, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff39, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f00000014c0)='rpm_return_int\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001380)=ANY=[@ANYRES32=r7, @ANYRES8=r6, @ANYBLOB="56bd08b2f98eb8ef8aab01bae1adca40dddb09bb7bfd0e00bf05629594daac87e191be2c11111f1cf77d123d0ab5d0a1959fff98b5d0752c240324c1ad50a176dba99c9923da6fe648c6067d2319fc547b7cfdb152b031f0f75117246e23f76d943616ead170559c4d7c4264fa"], 0x40}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[], 0x114}], 0x1}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0xb, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001500)='kmem_cache_free\x00', r9}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r13, 0x5411, &(0x7f0000000a80)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.612671227s ago: executing program 33 (id=1521): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0xff0, 0x3, 0x0, 0xfff}, &(0x7f0000000100)=0x14) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$isdn(0x22, 0x2, 0x21) close(r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x40000061) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 110.317221ms ago: executing program 34 (id=1556): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100003e000701feffffff00000000047c00000800428004000800b80009"], 0x180}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 60.350822ms ago: executing program 35 (id=1547): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0xffff}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x4}, 0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2a, 0x98, {0x0, 0x0, 0x0, r1, {0x10, 0x4}, {0xa, 0xf}, {0xffe0, 0xf}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20008000) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 64) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000040)=0x1) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008c4}, 0x10) (async) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x3a) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) readv(r10, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_int(r9, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) (async, rerun: 32) r11 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r11, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r11, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f92d", 0x2}], 0x1}, 0x4000080) (async) sendmsg$inet(r11, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) sendto$inet6(r9, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4804) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c92ad6ab8055fe39a5a9615d5ba410de"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "988f88d52ae2aa1e44f0e5686a8da5d9"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (rerun: 32) 0s ago: executing program 36 (id=1550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xfdcc99ee6dbb1eef, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 32) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x0) (async) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000240)="7d2371115107f171844664966c7b4091f4a0ea10dc11cde5ca83a343f041cbcc0e38bab9d8eca40f33212671f6ea152d8ab7477fd9c725a3553553f4010a0b57334934bf1d4f05dd307d859e38f3e3e9676a45a79b01", 0x56}], 0x1) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) getsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000440), 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001f40)={'dummy0\x00', &(0x7f0000001f00)=@ethtool_sfeatures={0x3b, 0x2, [{0xa, 0x4}, {0x0, 0x2}]}}) close(r3) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@getqdisc={0x40, 0x26, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x5, 0xd}, {0x2, 0xfff1}, {0x7, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) writev(r1, &(0x7f0000000680)=[{&(0x7f00000002c0)="05026a4dd7d81ed4b8c03c21bf353002de783effbf939be55a6da73e4fea42e6397d7f5a7d611457b87e78e5872256999a301950a7fd90b8387738fb95ab942288aa918406ec50d1f5278a80053830be13b9a45a72e4c398eead152e19ef74ee9519", 0x62}, {&(0x7f0000000480)="46f9e7c9a992d435da1e9de7c6c1aa1e4983c590efe2b919ad81d4ab5dfe2ae77b4414bca44e9e8475ea180c7e42e6d3dadf26a1ee49ca0419de53b759a2cf31ff", 0x41}, {&(0x7f0000000500)="27646aee357f0c9c7fd1cd749142d7f109b0b8119dbe6f86f389311672ffc9d072e2b8e51f1ba5edd91ba2e978492948587081c166f60c9a076310fffe7bade1eef13dcf33e8aa27c2f020b04a5e9a9a5084977bce16fabdf832a4668e01e7ef74a633abd8dc0ec71c", 0x69}, {&(0x7f0000000200)="ad4280a224790e9f4519b903c8efd6df2cf8d89d566422110f05ffb4d3b3062a43964dea396c131bc49a68c5654c550afffc0bdb76", 0x35}, {&(0x7f00000005c0)="9d6a0f24530d41c4a6cd9d2db1c4e47a1e39e83e6ee23fa93d8be4d5fdd1005f47d23a5b9d443f7a52ad5ea9f692201402f0fba76b84d25fdabaf632d7462f5f641d93520987bc5d11036627d21916fa2afbfb2ca72dbd4bfcd716b72eff4b1970e75eb5b69555ffdc2b7a982159660a17edc1b0f661fdd07f8a08ec4e31e5251bf83620b9736d1e629fc75fcc02822f6e0d6fc43462f8bfd0d631d8796abb4b605180a2dafb71de33952a697ae1dd6c9f10c1b380298fde48", 0xb9}], 0x5) (async) socket$unix(0x1, 0x3, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@delchain={0x1a1c, 0x65, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xfff1}, {0x1, 0xffff}, {0x12, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x19d4, 0x2, [@TCA_CGROUP_POLICE={0x85c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x10001, 0x3, 0x80, {0x86, 0x1, 0x8, 0x7f, 0x9, 0x1}, {0x9, 0x1, 0x35a9, 0x4, 0x3}, 0xa85, 0x9fc, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x2, 0x9, 0x9, 0x0, 0x88, 0x2, 0xff, 0x1, 0x1000, 0x6, 0x5, 0x9, 0x800, 0xfffffffd, 0x9, 0x3, 0x80000001, 0x23b, 0x366, 0x8, 0xc0000, 0x4, 0x3, 0x0, 0xb, 0x9, 0x5, 0xfe00, 0x3, 0x6, 0x2, 0x9, 0x9, 0x2, 0x9, 0x80, 0x1, 0xa, 0x53, 0x5bd, 0x913, 0x7, 0x80000000, 0x100, 0x4, 0x3, 0x2, 0x7, 0x2, 0x6, 0x9, 0x3, 0xffffffff, 0x3d17e2a6, 0x4, 0x8000, 0x0, 0x8, 0x2, 0x3, 0x5, 0x6, 0x80, 0x8, 0x2, 0x200, 0x8, 0x8001, 0x3ff, 0x800, 0x80000000, 0xff3, 0x2, 0x6, 0x401, 0x6, 0x8001, 0x2, 0x8, 0x3, 0x2, 0xb7, 0xffffffff, 0x2, 0x3ff, 0xd, 0x6, 0x6d9, 0x9, 0x100, 0x1, 0x2, 0xa, 0x5, 0x8, 0xff, 0x8d, 0xf1c, 0x1, 0xdf2, 0x7, 0x98, 0x2, 0x7b, 0x2, 0x78e3dc3a, 0x7fffffff, 0x1, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2, 0xa2, 0x1, 0x5e3, 0x8000, 0x6, 0x3, 0xa2, 0xd7, 0xc, 0x3, 0x5cd, 0x9ff, 0x7fffffff, 0x4, 0x4, 0x9, 0x360f, 0x10000, 0x8, 0x5e1, 0x6, 0x4, 0x9, 0x80, 0x1, 0x33de, 0x7ff, 0x2, 0x9, 0x401, 0x5, 0xfffffffa, 0xfffffff7, 0x2, 0xfffffe00, 0x3, 0x3, 0x9, 0x7, 0x0, 0x2, 0xffffff3d, 0x8000, 0x7a9, 0x1, 0x7, 0x232, 0x2, 0x0, 0x1, 0x2f7, 0x0, 0x0, 0x3, 0x8, 0xffffffff, 0x8, 0xffffffff, 0x6, 0x8000, 0x7ff, 0x1, 0x6, 0x0, 0x9, 0xd3a0, 0x1, 0x7, 0x1, 0x9dc6, 0x8, 0x5, 0x7ff, 0x18000, 0x0, 0x9, 0x5, 0x655, 0x5, 0x8a72, 0x80000000, 0x0, 0x1, 0xe1, 0x2, 0x7cfc, 0x8b05, 0x5, 0x40a4, 0x3, 0x41, 0x925, 0x9, 0x1, 0x2000000, 0x5, 0x8, 0x7, 0x6, 0x7, 0xb, 0x1, 0xffffff42, 0x2, 0x2d, 0x2, 0x5e9, 0xffffffff, 0x9, 0x7ff, 0xdf4, 0x1, 0x8e, 0x0, 0x100000, 0x5, 0x80000001, 0x101, 0x5, 0x4, 0x1, 0x3, 0x8, 0x1, 0xd442, 0xfffffffc, 0x8, 0xd18, 0x9, 0x7, 0x4, 0x0, 0x6, 0x1e76a906, 0xff, 0x6, 0x688c, 0x1, 0x4, 0x842, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x5, 0xb, 0x30, 0x80000000, 0x3, 0x2, 0x8, 0x4a8, 0x1, 0x6, 0x8, 0x3, 0x3, 0x1ff, 0x1, 0x4289, 0xfff, 0xfffffffc, 0x0, 0x7, 0x7f, 0x80000001, 0x1, 0x3, 0x7fff, 0x5, 0x7fffffff, 0x8000, 0x8, 0x3, 0x1000, 0x7, 0x1000, 0xe6f, 0x9, 0x6, 0x5, 0xb032, 0x80000000, 0x0, 0x0, 0x5, 0x1, 0x7, 0x4, 0x7, 0x2, 0x7, 0xc773, 0x89d, 0x80, 0x0, 0x4, 0x8000, 0x5, 0x18000, 0x81, 0xf5, 0x2, 0x3b, 0x3, 0x8, 0x2, 0xdc37, 0x8001, 0x40, 0x7, 0xb7c, 0x3, 0x0, 0x5, 0x800, 0x5, 0x8f6, 0x2, 0x3, 0x3ff, 0x723c, 0x4, 0x401, 0x4, 0xcc, 0x373, 0x455, 0x3, 0x7, 0xbf, 0x2, 0x1ba, 0xfff, 0x40, 0x5ad, 0x4, 0x3, 0x7f, 0x80, 0x867, 0x401, 0x1, 0xfffffffc, 0xbb7, 0x8001, 0x5, 0x6, 0x5, 0xc6, 0x6, 0x2, 0x88ee, 0x7, 0x1000, 0x2, 0x5, 0x7d, 0x4, 0xc, 0x80000000, 0x6, 0xf, 0xffffffa3, 0x8, 0x800, 0x9, 0x4, 0x40, 0xfffffffa, 0x1, 0x8001, 0xc, 0x5, 0x6, 0x5, 0x8, 0x100, 0x81, 0x0, 0xe, 0x7, 0x2, 0x7, 0x7, 0x53a, 0xc, 0x1000, 0x0, 0x6, 0x4, 0x7ff, 0x4, 0x0, 0x164a, 0x80000000, 0x851, 0x4cc2, 0x6, 0xe31, 0xc, 0x3, 0x9, 0xff, 0x81, 0x80000000, 0x0, 0x6, 0x8000, 0x8, 0xd2, 0x6, 0x4, 0x6, 0x4, 0x6, 0x6, 0x5, 0x9, 0xc4c4, 0x68c22d13, 0x0, 0x9, 0xbc9, 0xff, 0x3, 0x9, 0x1000, 0x1, 0x0, 0x6, 0x4, 0xb878, 0x6, 0x9, 0x762, 0x7, 0x9, 0xf2, 0x98bd, 0x7, 0xbb, 0x2, 0x4, 0x4, 0x86, 0x7, 0x3, 0x4, 0x1, 0x0, 0x1, 0x9, 0xfae, 0xfff, 0x81, 0x101, 0xfa, 0x6, 0x8, 0x0, 0xe6, 0x6, 0xd16, 0x10000, 0xfff, 0xfffffff7, 0xffffff6f, 0x15, 0x0, 0x1ff, 0x7f, 0xd, 0x10001, 0x0, 0xf1d, 0x60a, 0x4, 0x5, 0x4, 0x2, 0x6, 0x7, 0x9, 0xfffffffa, 0x40, 0x8, 0x6, 0x7ff, 0x0, 0xfffffffe, 0x9, 0x10, 0x5, 0x7f, 0xffffffff, 0x1, 0xb1, 0x401]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_CGROUP_ACT={0x344, 0x1, [@m_nat={0x1f4, 0x1a, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0xffffffffffffffff, 0xf5, 0xfffff765}, @empty, @dev={0xac, 0x14, 0x14, 0x34}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff8, 0xa, 0x20000000, 0x7, 0x1}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0x4, 0x10001, 0xfffffe01}, @local, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xa15, 0x3, 0x5, 0x1}, @multicast1, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xfffffffc, 0xffffffffffffffff, 0x7, 0x8001}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3ff}, @loopback, @broadcast, 0xffffffff, 0x1}}]}, {0xdb, 0x6, "14057e646efa5f363c93435110f64f9f4dd42e61d40601c86ac228d637835c7545f877d2249eaecf05e797995f0857482d6b0ee40c33a471c8e7be545e54f8cab29c6f5722f17dd1fed2c2ac99c2c0856690dd26309eb4ab8390b60e0200f38b5b9d8668ab52b70692c2989e1f844e9d54962e37aa5751e2f2abe3e13f00749cb06ed2d8adb26fa3db64b62f2d25a0ec8fd3d03e061c1a3e77f4f9ef39b073210c23079614ec41ac42a44cc39e088806c3e62e6d56b9b5bd5c59e207d9eb508629c3c1975925f8a11151b6b3b3a352d9761d495ea950a3"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x54, 0x1c, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x16, 0x6, "a84fe52d2fd327660c0f070e3f59412f7f2c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xf8, 0x8, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x201, 0x6, 0x0, 0x2f8a, 0x6}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xff}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfa495}]}, {0x88, 0x6, "e62806ca28945f811a71918d0bacd0bf98e71204862e31ddf70c76a8429db8fa35e2b6e5ded44502ad3226aef55fdee2c13c3d9e6bbde16634ad4587a3b688fef8950273a542ba197186a7e4a6fc90aa80a5f7d0eddae7c57ae2cbfc847c6b22f6dfb15a65ab187c3b73c19424e7c18301faf8e2f4207466f6531abaf404983c59afd13b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x880, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x5e, 0x3, 0x8, 0xfffffffe, 0x5, 0x36ff, 0x0, 0x9, 0x7fff, 0x8, 0xe8, 0x8, 0xb4, 0x5, 0x91, 0x3, 0xffffffff, 0xfffffffc, 0x5, 0x3, 0x6, 0x1, 0x2, 0x80, 0x8, 0x101, 0x8, 0xfffffffa, 0x10000, 0x206, 0x4, 0x9000000, 0x1, 0xb5d9, 0x1be, 0xfffffff3, 0xffffff76, 0x6, 0x401, 0x800, 0x90a, 0x7, 0x838, 0x100, 0x9, 0x3, 0x7, 0x4, 0x2, 0x3, 0x7, 0x2, 0xc66, 0x4, 0xad, 0x8a0b, 0x8, 0x3, 0x0, 0x5, 0x1000, 0x8, 0x2, 0x1, 0x90a7fd2, 0x7, 0x0, 0xf4d, 0x800, 0x10001, 0xeae9, 0x5, 0x1, 0x0, 0x4b7261f8, 0x4, 0x9, 0x6173, 0x9, 0x9f5, 0xfffffffc, 0x1, 0x0, 0x5, 0x3, 0x6, 0xff, 0x7ff, 0xb, 0x7fff, 0x1fd4, 0x42d, 0x1, 0x1, 0x4, 0x9, 0x7ff, 0x4, 0x0, 0x3, 0xf, 0x6, 0x6, 0x2, 0x1, 0x3, 0x200, 0x7fffffff, 0x1, 0x6, 0xffff, 0xa, 0x5, 0x7, 0x1, 0x5, 0x25efdafb, 0x80000000, 0x5, 0x2, 0x3, 0x8001, 0x4e7, 0x4, 0x2, 0xf0000000, 0x9, 0x4, 0x10, 0x9fda, 0x7ff, 0xfff77fff, 0x1, 0xfffffff7, 0x5d6f, 0xffffffcc, 0xfffff01d, 0x2, 0x8, 0x6, 0x6, 0xffffffff, 0x4, 0x9, 0xc8a, 0x9, 0x200000, 0x6, 0x3, 0x1000, 0x5, 0x1, 0x7fffffff, 0x3, 0x9, 0x7ff, 0x4f, 0x1, 0x6, 0xb3a5, 0x2b380, 0x4, 0x8, 0x2, 0x6, 0x1, 0x7, 0x7, 0x9, 0x4e, 0x0, 0x0, 0x7ff800, 0xd8, 0x8, 0x9eb, 0x7e15, 0x7e, 0x2, 0x1000, 0x1, 0x238, 0x3ff, 0xffff, 0x6, 0x80000001, 0xfff, 0x5, 0x80000000, 0x7, 0x2, 0xf, 0x2be, 0x6, 0x7, 0x800, 0x7, 0x80, 0x8, 0xce, 0x98, 0x8, 0x80000001, 0x2, 0x7, 0x3ff, 0x6, 0x35c, 0x9, 0x2, 0x168, 0x7, 0x2, 0x8, 0x100000, 0xb, 0x6, 0x2, 0x0, 0x800, 0xfff, 0x3ff, 0xfffffffb, 0x9, 0x1, 0x7ff, 0x2, 0x5, 0x3, 0xd4, 0x9, 0x1ff, 0x3, 0x1, 0xb9a, 0xe, 0x7, 0x1, 0x1, 0x2, 0x75f2, 0x9, 0x1, 0x8, 0x6, 0x3, 0x9, 0x8, 0x80000000, 0x2, 0x4, 0x80000001, 0x8, 0xfff, 0xa, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x6, 0x0, 0xfffffffb, {0x8b, 0x1, 0x9, 0x2, 0x5, 0x6}, {0x2, 0x1, 0x5, 0x401, 0x401}, 0x2, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5, 0xd, 0x1, 0x0, 0x14000, 0xfffff7b1, 0x1, 0x80000001, 0xb658, 0xb, 0x3, 0xb, 0x5, 0xde, 0x3, 0x6, 0x2, 0x71, 0x7, 0x8, 0x5, 0x2, 0x8000, 0xb734, 0x4, 0xd1, 0x8001, 0x8, 0x80000000, 0x7, 0x6, 0x9, 0xfffffffe, 0x8, 0x1, 0x2, 0x5, 0x1, 0x7, 0x28, 0x1, 0x8, 0x0, 0x4, 0x4, 0x20ad2ae4, 0x3, 0x1, 0x0, 0x1, 0x6, 0x5, 0x800, 0x401, 0x8, 0x6, 0x6, 0x2, 0xd, 0xffffffff, 0x10000, 0x9b, 0x0, 0x4, 0x4, 0x8, 0x7, 0x4, 0x0, 0x6, 0x4, 0x0, 0x4, 0x0, 0x9, 0x9, 0x180, 0x3, 0x7, 0x7, 0x80000001, 0x3, 0x400000, 0x8001, 0x7, 0x9, 0x12, 0x40, 0x5, 0x828, 0x5, 0x7fff, 0x1a1, 0xc20, 0x2, 0x0, 0x7, 0x10, 0x9, 0x7, 0x9, 0x2, 0x100, 0xaab4, 0x0, 0xfdcc, 0x9, 0x9, 0x5, 0x43, 0x1c00000, 0x7203, 0xfffffffa, 0x6, 0xffffffff, 0x9c, 0x2, 0x1, 0x3ff, 0x4, 0xb821, 0x1, 0x9, 0xfffffffc, 0x38bc, 0x6, 0x7, 0x0, 0x2, 0x2, 0xc2, 0x7, 0xd, 0x0, 0x1, 0x8, 0x4, 0x700, 0x3, 0x40, 0xfffffaac, 0x2, 0x10, 0xcc, 0x0, 0xca, 0x8, 0x8, 0x8, 0x2d038238, 0xf, 0xb, 0x2, 0x10, 0x8, 0x6, 0xe, 0x2, 0x9, 0x1, 0xfffffeff, 0x7fffffff, 0x0, 0x2, 0x1000, 0x4, 0x1, 0xa, 0x3, 0x3, 0xfff, 0x9, 0x4, 0xffffffff, 0x9, 0x9, 0x5, 0x4, 0x5, 0x10, 0x1, 0x8001, 0x0, 0x0, 0x1, 0x5, 0x6, 0x4, 0x80000000, 0x7, 0x2, 0x9, 0x7, 0x10000, 0x1, 0x7, 0x3ff, 0x6, 0x6, 0x5, 0x4, 0x4, 0x5, 0x3, 0x5, 0x9, 0xfffffffa, 0x1ff, 0x9, 0x8020, 0x0, 0x1, 0x6, 0xf8, 0x6, 0x8000, 0xff, 0x7, 0x8, 0x2bd8, 0xb14e, 0x3, 0x10, 0x8, 0x0, 0x6, 0x101, 0xefa, 0x9c, 0x0, 0x9, 0x81, 0x32, 0x0, 0x1, 0x5, 0x0, 0x6, 0x10001, 0xfffffffa, 0x7, 0x300000, 0x7, 0x9, 0x5, 0x1, 0x2, 0x0, 0x80000001, 0x8, 0x2, 0xb, 0x8a68, 0x40000000, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10}]}, @TCA_CGROUP_EMATCHES={0x19c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x17c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x1}, {0x4, 0x5, 0x4}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0xa5, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x37, 0x2, [@TCF_META_TYPE_VAR="d70034", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="d0a45a445dfae13b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="2094c0428ac5", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5e48fdd8788d858fb461", @TCF_META_TYPE_INT]}]}}, @TCF_EM_CONTAINER={0x108, 0x1, 0x0, 0x0, {{0xff}, "2db635e46bb674f4313821fb055a07db15ac1855b861d30e89e1ea697b4ac55c4bd1af6394fc843fc7136afff09b73d858b0a77c3270c49727ab3de94b9dc4700de1288b335bb6647ea9e7780a2525a1509c85b9127b522d9184c26cc1669edc985af4f594410947e156d26a9426f37281e11b71953f918b5325044ddb6ed0089093f99357d9266ca6420dde822cfa15b981e00a624828ba9514ce72296ac7cc3e815d4b9131b9ea189d3680d5b197c5d2b5c77eb610f063f84ee71797bb77ced5b31973aa45dfd4ec4fed1cdd228032571d2a657302d368b1e0451a617e743e1eab5205c587d4895be1cf7172a8ee622f1f59fda1d6641592"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7fff}, {0x4d, 0x4, 0xef, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xfeff}, {0x6, 0xbb4, 0x41b6, 0x4, 0xf, 0x1}}}]}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x8001, 0x4, 0xffffffff, 0x85, 0x7ff, 0x10001, 0xe82, 0x9, 0x80000000, 0xa, 0x9, 0x8, 0xeb4, 0x1de000, 0x7, 0x2, 0x7, 0x77, 0x9, 0x1, 0x6b7f, 0x1, 0x101, 0xffffffff, 0x5, 0x1, 0x8, 0x80000000, 0x10000, 0x5, 0xb4, 0x200, 0xa, 0x9, 0x28, 0x1, 0xb, 0x7, 0x7, 0x6, 0x2, 0x5, 0x0, 0xc, 0xfffffffe, 0x6, 0x4, 0xd3, 0x1, 0x637e, 0x8, 0x81, 0x2, 0x8, 0x9, 0x2, 0xc200000, 0x0, 0xa93d, 0x7, 0x4, 0x1, 0xa, 0x5, 0x4, 0x1, 0x2, 0x42, 0x6, 0x3, 0xfffffffa, 0x7, 0x5b76af72, 0x9, 0x0, 0x4, 0x8ba3, 0x4, 0x80, 0xfff, 0x6, 0x2, 0x8, 0x8, 0xfffffffb, 0x2, 0x2, 0xfffffffd, 0xba, 0x24, 0x80, 0xf, 0x7f, 0x0, 0x401, 0x1, 0x0, 0x3, 0x9, 0x5, 0x7f, 0x5, 0x10000, 0xea75, 0x4c, 0x2, 0x8, 0x200, 0xa04, 0x2, 0xe0000000, 0x1, 0x8001, 0x1, 0xf5, 0x1, 0x6, 0x0, 0xc825, 0x2, 0x401, 0x3, 0x0, 0x0, 0x3, 0x7, 0x8001, 0x5, 0x28, 0x0, 0x8, 0x9, 0x7, 0x3, 0x7f, 0x5, 0x6, 0x81, 0xfffffeff, 0xe12, 0xe64, 0x946, 0x6, 0x0, 0x2, 0x0, 0x8, 0x1400, 0x10, 0x7, 0x3, 0x7, 0x9, 0x2ed, 0x5a, 0x1, 0x6, 0x459, 0xb, 0x5, 0x4, 0x5, 0x9, 0x3, 0x4, 0x6cc, 0x0, 0x693a2508, 0x10001, 0x58f2, 0xa9, 0x2, 0x2f, 0x7fff, 0x10000, 0x2, 0xffff, 0x800, 0x1, 0x7fffffff, 0x3, 0x400, 0x0, 0x8001, 0xfff, 0x6, 0x7fff, 0x400, 0x6, 0x8, 0x5, 0xf5, 0x401, 0xfffffff8, 0x1, 0x10001, 0x6, 0x2, 0x5, 0x9, 0x5, 0x5, 0x7d20ed66, 0x4, 0xe, 0xffffb6bf, 0x1, 0x9, 0x401, 0x0, 0x400, 0x9, 0x6d2, 0x200000, 0x2, 0x9, 0x7, 0xd, 0x81, 0x0, 0x72, 0x4, 0x0, 0x0, 0x0, 0xd8, 0xfa, 0x6, 0x8, 0xe, 0x1ff, 0xa, 0x0, 0x675d, 0x1ff, 0x4, 0x0, 0x100, 0x2, 0x1000, 0x5, 0x2, 0x0, 0x3ff, 0x8000, 0x8, 0x9, 0xffffff99, 0x3, 0xfffffffd, 0x8, 0x3, 0x1, 0x945]}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x1a1c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 67.139511][ T5854] cgroup: Unknown subsys name 'net' [ 67.278321][ T5854] cgroup: Unknown subsys name 'cpuset' [ 67.286738][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.664785][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.359003][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365428][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.455003][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.467908][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.477875][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.515424][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.523478][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.587367][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.606411][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.626356][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.634598][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.642982][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.651177][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.687340][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.695008][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.703022][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.713455][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.762639][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.771049][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.779070][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.787188][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.796053][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.846719][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.854892][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.862892][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.871196][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.879007][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.107425][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 73.347994][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.356104][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.363634][ T5864] bridge_slave_0: entered allmulticast mode [ 73.372820][ T5864] bridge_slave_0: entered promiscuous mode [ 73.382635][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.389902][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.398277][ T5864] bridge_slave_1: entered allmulticast mode [ 73.406014][ T5864] bridge_slave_1: entered promiscuous mode [ 73.474293][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 73.511661][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.542770][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 73.559266][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.677485][ T5864] team0: Port device team_slave_0 added [ 73.691694][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 73.709470][ T5864] team0: Port device team_slave_1 added [ 73.803299][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.810605][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.838205][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.926101][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.933068][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.961294][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.978474][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.985796][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.992982][ T5868] bridge_slave_0: entered allmulticast mode [ 74.000282][ T5868] bridge_slave_0: entered promiscuous mode [ 74.051671][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.058886][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.066675][ T5868] bridge_slave_1: entered allmulticast mode [ 74.073896][ T5868] bridge_slave_1: entered promiscuous mode [ 74.083864][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.091679][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.098966][ T5869] bridge_slave_0: entered allmulticast mode [ 74.107557][ T5869] bridge_slave_0: entered promiscuous mode [ 74.115860][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.122980][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.130430][ T5869] bridge_slave_1: entered allmulticast mode [ 74.137522][ T5869] bridge_slave_1: entered promiscuous mode [ 74.145049][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 74.238433][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.245797][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.252984][ T5879] bridge_slave_0: entered allmulticast mode [ 74.260617][ T5879] bridge_slave_0: entered promiscuous mode [ 74.270639][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.282288][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.309939][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.317724][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.324866][ T5879] bridge_slave_1: entered allmulticast mode [ 74.332031][ T5879] bridge_slave_1: entered promiscuous mode [ 74.340807][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.352240][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.368246][ T5864] hsr_slave_0: entered promiscuous mode [ 74.374473][ T5864] hsr_slave_1: entered promiscuous mode [ 74.494424][ T5869] team0: Port device team_slave_0 added [ 74.507129][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.518552][ T5868] team0: Port device team_slave_0 added [ 74.526886][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.544774][ T5869] team0: Port device team_slave_1 added [ 74.556174][ T5865] Bluetooth: hci0: command tx timeout [ 74.578480][ T5868] team0: Port device team_slave_1 added [ 74.643542][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.651350][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.659097][ T5875] bridge_slave_0: entered allmulticast mode [ 74.666467][ T5875] bridge_slave_0: entered promiscuous mode [ 74.693811][ T5879] team0: Port device team_slave_0 added [ 74.700436][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.707874][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.733944][ T5865] Bluetooth: hci1: command tx timeout [ 74.740390][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.752984][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.759991][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.786268][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.797121][ T5865] Bluetooth: hci2: command tx timeout [ 74.812503][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.819708][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.827174][ T5875] bridge_slave_1: entered allmulticast mode [ 74.834195][ T5875] bridge_slave_1: entered promiscuous mode [ 74.856595][ T5879] team0: Port device team_slave_1 added [ 74.870486][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.878041][ T5865] Bluetooth: hci3: command tx timeout [ 74.878996][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.910146][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.952511][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.959725][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.985811][ T5865] Bluetooth: hci4: command tx timeout [ 74.986237][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.069628][ T5869] hsr_slave_0: entered promiscuous mode [ 75.075983][ T5869] hsr_slave_1: entered promiscuous mode [ 75.081981][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 75.088336][ T5869] Cannot create hsr debugfs directory [ 75.096847][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.109462][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.125763][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.132750][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.159287][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.171659][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.178853][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.205239][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.306382][ T5868] hsr_slave_0: entered promiscuous mode [ 75.312601][ T5868] hsr_slave_1: entered promiscuous mode [ 75.319817][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 75.326042][ T5868] Cannot create hsr debugfs directory [ 75.404719][ T5875] team0: Port device team_slave_0 added [ 75.431396][ T5879] hsr_slave_0: entered promiscuous mode [ 75.437701][ T5879] hsr_slave_1: entered promiscuous mode [ 75.443726][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 75.449516][ T5879] Cannot create hsr debugfs directory [ 75.463818][ T5875] team0: Port device team_slave_1 added [ 75.571380][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.578523][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.607920][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.657757][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.664735][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.691171][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.853831][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.874340][ T5875] hsr_slave_0: entered promiscuous mode [ 75.881135][ T5875] hsr_slave_1: entered promiscuous mode [ 75.887950][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 75.893677][ T5875] Cannot create hsr debugfs directory [ 75.924965][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.938069][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.978218][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.122770][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.134426][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.163568][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.175489][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.289459][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.321624][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.333450][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.344796][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.438547][ T5879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.461300][ T5879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.489153][ T5879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.500124][ T5879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.597582][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.608299][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.620489][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.631971][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.639238][ T5865] Bluetooth: hci0: command tx timeout [ 76.667146][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.741017][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.752740][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.796375][ T5865] Bluetooth: hci1: command tx timeout [ 76.812795][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.820080][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.848529][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.860462][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.867588][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.875810][ T5865] Bluetooth: hci2: command tx timeout [ 76.899171][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.906741][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.920291][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.938988][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.946146][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.956377][ T5865] Bluetooth: hci3: command tx timeout [ 77.022396][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.035465][ T5865] Bluetooth: hci4: command tx timeout [ 77.074168][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.087493][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.094593][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.108791][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.140412][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.147585][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.192177][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.212956][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.272040][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.279246][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.294640][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.301767][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.346890][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.354051][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.378227][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.385420][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.600524][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.802821][ T5864] veth0_vlan: entered promiscuous mode [ 77.853209][ T5864] veth1_vlan: entered promiscuous mode [ 77.961870][ T5864] veth0_macvtap: entered promiscuous mode [ 77.993404][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.027655][ T5864] veth1_macvtap: entered promiscuous mode [ 78.112801][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.138669][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.154912][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.168583][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.209412][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.232466][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.252424][ T5869] veth0_vlan: entered promiscuous mode [ 78.281303][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.290984][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.324388][ T5869] veth1_vlan: entered promiscuous mode [ 78.340844][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.473842][ T5875] veth0_vlan: entered promiscuous mode [ 78.523585][ T5868] veth0_vlan: entered promiscuous mode [ 78.537783][ T5868] veth1_vlan: entered promiscuous mode [ 78.559408][ T5869] veth0_macvtap: entered promiscuous mode [ 78.585303][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.588192][ T5869] veth1_macvtap: entered promiscuous mode [ 78.599621][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.613026][ T5875] veth1_vlan: entered promiscuous mode [ 78.682192][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.684713][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.695188][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.726232][ T5865] Bluetooth: hci0: command tx timeout [ 78.729148][ T5875] veth0_macvtap: entered promiscuous mode [ 78.743441][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.777957][ T5868] veth0_macvtap: entered promiscuous mode [ 78.786801][ T5875] veth1_macvtap: entered promiscuous mode [ 78.819603][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.827696][ T5868] veth1_macvtap: entered promiscuous mode [ 78.844106][ T5879] veth0_vlan: entered promiscuous mode [ 78.852972][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.862102][ T3506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.872633][ T3506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.882874][ T5865] Bluetooth: hci1: command tx timeout [ 78.916321][ T3506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.944480][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.956319][ T5865] Bluetooth: hci2: command tx timeout [ 78.971586][ T3506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.988352][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.014390][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.025212][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.035912][ T5865] Bluetooth: hci3: command tx timeout [ 79.050149][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.062534][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.072119][ T5879] veth1_vlan: entered promiscuous mode [ 79.127243][ T5865] Bluetooth: hci4: command tx timeout [ 79.147302][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.207458][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.220174][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.231719][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.241303][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.264631][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.278039][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.327204][ T5879] veth0_macvtap: entered promiscuous mode [ 79.381052][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.381441][ T5879] veth1_macvtap: entered promiscuous mode [ 79.394737][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.479344][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.497287][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.506841][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.541584][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.551932][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.599626][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.626373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.645942][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.776462][ T5990] sctp: [Deprecated]: syz.0.9 (pid 5990) Use of int in maxseg socket option. [ 79.776462][ T5990] Use struct sctp_assoc_value instead [ 79.800521][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.827151][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.861764][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.869564][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.971543][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.982858][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.030960][ T5998] unknown channel width for channel at 909000KHz? [ 80.040641][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 80.052836][ T5998] unknown channel width for channel at 909000KHz? [ 80.243348][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.285473][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.286997][ T6007] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 80.345843][ T6006] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 80.353522][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12'. [ 80.418954][ T6007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12'. [ 80.440839][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.446684][ T6011] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 80.473967][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.491685][ T6006] dummy0: entered promiscuous mode [ 80.512720][ T6006] bridge0: port 3(dummy0) entered blocking state [ 80.523577][ T6006] bridge0: port 3(dummy0) entered disabled state [ 80.549414][ T6006] dummy0: entered allmulticast mode [ 80.568645][ T6006] bridge0: port 3(dummy0) entered blocking state [ 80.575280][ T6006] bridge0: port 3(dummy0) entered forwarding state [ 80.788367][ T6021] tipc: Started in network mode [ 80.793371][ T6021] tipc: Node identity 6e7777a3bcf, cluster identity 4711 [ 80.804341][ T6021] tipc: Enabled bearer , priority 0 [ 80.812893][ T5865] Bluetooth: hci0: command tx timeout [ 80.929535][ T6021] syzkaller0: entered promiscuous mode [ 80.935238][ T6021] syzkaller0: entered allmulticast mode [ 80.955813][ T5865] Bluetooth: hci1: command tx timeout [ 80.996540][ T6021] tipc: Resetting bearer [ 81.022204][ T6038] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.034798][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 81.047678][ T5865] Bluetooth: hci2: command tx timeout [ 81.068601][ T6021] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 81.115446][ T5865] Bluetooth: hci3: command tx timeout [ 81.195475][ T5865] Bluetooth: hci4: command tx timeout [ 81.252409][ T6020] tipc: Resetting bearer [ 81.350920][ T6020] tipc: Disabling bearer [ 81.664177][ T6069] netlink: 204 bytes leftover after parsing attributes in process `syz.3.29'. [ 81.792304][ T6077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.553880][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 82.631573][ T1155] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 83.253208][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 83.332765][ T6134] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.478630][ T6137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42'. [ 83.513079][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 83.537559][ T6136] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 83.548652][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.550821][ T6141] netlink: 'syz.3.45': attribute type 19 has an invalid length. [ 83.788813][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 84.346928][ T121] cfg80211: failed to load regulatory.db [ 84.384134][ T6176] veth1_macvtap: left promiscuous mode [ 84.578541][ T6185] Zero length message leads to an empty skb [ 86.231187][ T6223] __nla_validate_parse: 1 callbacks suppressed [ 86.231206][ T6223] netlink: 108 bytes leftover after parsing attributes in process `syz.3.73'. [ 86.707265][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 86.876222][ T6258] netlink: 348 bytes leftover after parsing attributes in process `syz.2.84'. [ 86.893470][ T6258] netlink: 348 bytes leftover after parsing attributes in process `syz.2.84'. [ 87.010910][ T6257] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 87.032594][ T6257] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 87.059171][ T6265] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 87.071968][ T6265] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 87.310679][ T6239] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.322780][ T6239] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 87.416886][ T6281] netlink: 108 bytes leftover after parsing attributes in process `syz.0.88'. [ 87.433751][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.4.87'. [ 87.488950][ T6239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.508082][ T6284] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 87.510479][ T6239] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 87.546639][ T6284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.90'. [ 87.750692][ T6292] bond0: entered promiscuous mode [ 87.774066][ T6239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.790773][ T6292] bond_slave_0: entered promiscuous mode [ 87.810965][ T6239] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 87.825893][ T6292] bond_slave_1: entered promiscuous mode [ 87.837724][ T6292] batadv0: entered promiscuous mode [ 87.853807][ T6292] hsr1: entered allmulticast mode [ 87.862999][ T6239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.867469][ T6292] bond0: entered allmulticast mode [ 87.883432][ T6239] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 87.886404][ T6292] bond_slave_0: entered allmulticast mode [ 87.897535][ T6292] bond_slave_1: entered allmulticast mode [ 87.903440][ T6292] batadv0: entered allmulticast mode [ 87.910665][ T6292] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 87.920509][ T6239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 87.927626][ T6292] bond0: left promiscuous mode [ 87.932655][ T6292] bond_slave_0: left promiscuous mode [ 87.936914][ T6239] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 87.938708][ T6292] bond_slave_1: left promiscuous mode [ 87.952836][ T6292] batadv0: left promiscuous mode [ 87.994481][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 88.229901][ T6313] netlink: 72 bytes leftover after parsing attributes in process `syz.2.96'. [ 88.248155][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'. [ 89.575052][ T6390] veth0: entered promiscuous mode [ 89.601524][ T6389] veth0: left promiscuous mode [ 89.791821][ T6405] pimreg3: entered allmulticast mode [ 89.937806][ T6403] netlink: 'syz.2.121': attribute type 1 has an invalid length. [ 89.966656][ T6403] netlink: 'syz.2.121': attribute type 1 has an invalid length. [ 90.159413][ T6415] syz.0.123 (6415) used greatest stack depth: 17864 bytes left [ 90.979174][ T6453] team0 (unregistering): Port device team_slave_0 removed [ 91.000872][ T6453] team0 (unregistering): Port device team_slave_1 removed [ 91.046906][ T6475] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 91.077548][ T6475] bond1: entered promiscuous mode [ 91.082895][ T6475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.217481][ T6475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.235607][ T6475] bond1: (slave bond2): making interface the new active one [ 91.242941][ T6475] bond2: entered promiscuous mode [ 91.249455][ T6475] bond1: (slave bond2): Enslaving as an active interface with an up link [ 91.296136][ T6483] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 91.418914][ T6494] netlink: 'syz.3.146': attribute type 3 has an invalid length. [ 91.696905][ T6510] __nla_validate_parse: 7 callbacks suppressed [ 91.696923][ T6510] netlink: 108 bytes leftover after parsing attributes in process `syz.1.147'. [ 91.805532][ T6509] syzkaller1: entered promiscuous mode [ 91.815293][ T6509] syzkaller1: entered allmulticast mode [ 91.939579][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 92.240539][ T6534] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 92.471134][ T6551] FAULT_INJECTION: forcing a failure. [ 92.471134][ T6551] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.546910][ T6551] CPU: 1 UID: 0 PID: 6551 Comm: syz.1.161 Not tainted syzkaller #0 PREEMPT(full) [ 92.546934][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.546950][ T6551] Call Trace: [ 92.546958][ T6551] [ 92.546965][ T6551] dump_stack_lvl+0x189/0x250 [ 92.546992][ T6551] ? __pfx____ratelimit+0x10/0x10 [ 92.547015][ T6551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.547033][ T6551] ? __pfx__printk+0x10/0x10 [ 92.547054][ T6551] ? __might_fault+0xb0/0x130 [ 92.547084][ T6551] should_fail_ex+0x414/0x560 [ 92.547110][ T6551] _copy_from_iter+0x1de/0x1790 [ 92.547134][ T6551] ? policy_nodemask+0x27c/0x720 [ 92.547161][ T6551] ? __pfx__copy_from_iter+0x10/0x10 [ 92.547175][ T6551] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 92.547195][ T6551] ? set_page_refcounted+0xa0/0x1e0 [ 92.547221][ T6551] ? __sk_mem_schedule+0x7f/0xf0 [ 92.547238][ T6551] ? skb_page_frag_refill+0x199/0x320 [ 92.547260][ T6551] mptcp_sendmsg+0xd6e/0x1970 [ 92.547306][ T6551] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 92.547322][ T6551] ? __fget_files+0x2a/0x420 [ 92.547336][ T6551] ? sock_rps_record_flow+0x19/0x410 [ 92.547359][ T6551] ? inet_sendmsg+0x2f4/0x370 [ 92.547376][ T6551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 92.547397][ T6551] __sock_sendmsg+0x19c/0x270 [ 92.547422][ T6551] __sys_sendto+0x3bd/0x520 [ 92.547441][ T6551] ? __pfx___sys_sendto+0x10/0x10 [ 92.547455][ T6551] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 92.547485][ T6551] ? __fget_files+0x3a0/0x420 [ 92.547512][ T6551] ? ksys_write+0x22a/0x250 [ 92.547535][ T6551] ? __pfx_ksys_write+0x10/0x10 [ 92.547553][ T6551] ? rcu_is_watching+0x15/0xb0 [ 92.547575][ T6551] __x64_sys_sendto+0xde/0x100 [ 92.547594][ T6551] do_syscall_64+0xfa/0x3b0 [ 92.547609][ T6551] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.547629][ T6551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.547645][ T6551] ? clear_bhb_loop+0x60/0xb0 [ 92.547664][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.547680][ T6551] RIP: 0033:0x7f3f2838ebe9 [ 92.547701][ T6551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.547712][ T6551] RSP: 002b:00007f3f291cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 92.547733][ T6551] RAX: ffffffffffffffda RBX: 00007f3f285c5fa0 RCX: 00007f3f2838ebe9 [ 92.547745][ T6551] RDX: 0000000000300000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 92.547756][ T6551] RBP: 00007f3f291cf090 R08: 0000000000000000 R09: 0000000000000000 [ 92.547766][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.547776][ T6551] R13: 00007f3f285c6038 R14: 00007f3f285c5fa0 R15: 00007ffc8c1d1c88 [ 92.547802][ T6551] [ 92.859825][ T6548] netlink: 64 bytes leftover after parsing attributes in process `syz.4.160'. [ 92.875079][ T6549] netlink: 3 bytes leftover after parsing attributes in process `syz.4.160'. [ 92.932848][ T6556] !: renamed from bond_slave_0 (while UP) [ 92.950215][ T6549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.065483][ T6556] netlink: 'syz.2.163': attribute type 5 has an invalid length. [ 93.238263][ T6575] FAULT_INJECTION: forcing a failure. [ 93.238263][ T6575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.279479][ T6575] CPU: 1 UID: 0 PID: 6575 Comm: syz.3.166 Not tainted syzkaller #0 PREEMPT(full) [ 93.279504][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.279514][ T6575] Call Trace: [ 93.279521][ T6575] [ 93.279528][ T6575] dump_stack_lvl+0x189/0x250 [ 93.279552][ T6575] ? __pfx____ratelimit+0x10/0x10 [ 93.279575][ T6575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.279593][ T6575] ? __pfx__printk+0x10/0x10 [ 93.279615][ T6575] ? __might_fault+0xb0/0x130 [ 93.279646][ T6575] should_fail_ex+0x414/0x560 [ 93.279673][ T6575] _copy_from_user+0x2d/0xb0 [ 93.279692][ T6575] ___sys_recvmsg+0x12e/0x510 [ 93.279717][ T6575] ? __pfx____sys_recvmsg+0x10/0x10 [ 93.279757][ T6575] ? __fget_files+0x3a0/0x420 [ 93.279783][ T6575] do_recvmmsg+0x307/0x770 [ 93.279811][ T6575] ? __pfx_do_recvmmsg+0x10/0x10 [ 93.279848][ T6575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.279882][ T6575] __x64_sys_recvmmsg+0x190/0x240 [ 93.279903][ T6575] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 93.279919][ T6575] ? rcu_is_watching+0x15/0xb0 [ 93.279940][ T6575] ? do_syscall_64+0xbe/0x3b0 [ 93.279959][ T6575] do_syscall_64+0xfa/0x3b0 [ 93.279973][ T6575] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.279995][ T6575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.280010][ T6575] ? clear_bhb_loop+0x60/0xb0 [ 93.280030][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.280045][ T6575] RIP: 0033:0x7f4c2898ebe9 [ 93.280060][ T6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.280073][ T6575] RSP: 002b:00007f4c29760038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 93.280091][ T6575] RAX: ffffffffffffffda RBX: 00007f4c28bc5fa0 RCX: 00007f4c2898ebe9 [ 93.280103][ T6575] RDX: 0000000000000004 RSI: 0000200000001b00 RDI: 0000000000000003 [ 93.280113][ T6575] RBP: 00007f4c29760090 R08: 0000000000000000 R09: 0000000000000000 [ 93.280123][ T6575] R10: 00000000400060a2 R11: 0000000000000246 R12: 0000000000000001 [ 93.280133][ T6575] R13: 00007f4c28bc6038 R14: 00007f4c28bc5fa0 R15: 00007fff45e28958 [ 93.280161][ T6575] [ 93.526965][ T6578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.169'. [ 93.902953][ T6596] bond0: entered promiscuous mode [ 93.919661][ T6596] bond_slave_0: entered promiscuous mode [ 93.934401][ T6596] bond_slave_1: entered promiscuous mode [ 93.961327][ T6596] batadv0: entered promiscuous mode [ 93.979731][ T6596] hsr1: entered allmulticast mode [ 93.992762][ T6596] bond0: entered allmulticast mode [ 94.013565][ T6596] bond_slave_0: entered allmulticast mode [ 94.022976][ T6596] bond_slave_1: entered allmulticast mode [ 94.030105][ T6596] batadv0: entered allmulticast mode [ 94.035913][ T6596] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 94.044739][ T6596] bond0: left promiscuous mode [ 94.049918][ T6596] bond_slave_0: left promiscuous mode [ 94.055903][ T6596] bond_slave_1: left promiscuous mode [ 94.072888][ T6596] batadv0: left promiscuous mode [ 94.118449][ T6597] syzkaller0: entered promiscuous mode [ 94.124798][ T6597] syzkaller0: entered allmulticast mode [ 94.513467][ T6629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.613418][ T6636] netlink: 'syz.2.184': attribute type 3 has an invalid length. [ 94.742267][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 95.152299][ T6654] veth0_to_team: entered promiscuous mode [ 95.196191][ T6654] veth0_to_team: entered allmulticast mode [ 95.419727][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.193'. [ 95.507943][ T5938] IPVS: starting estimator thread 0... [ 95.615305][ T6668] IPVS: using max 32 ests per chain, 76800 per kthread [ 95.781008][ T6684] netlink: 108 bytes leftover after parsing attributes in process `syz.1.200'. [ 95.818041][ T6684] netlink: 108 bytes leftover after parsing attributes in process `syz.1.200'. [ 95.842626][ T6684] netlink: 108 bytes leftover after parsing attributes in process `syz.1.200'. [ 96.210796][ T6707] dummy0: left allmulticast mode [ 96.225700][ T6707] bridge0: port 3(dummy0) entered disabled state [ 96.291604][ T6707] bridge_slave_1: left allmulticast mode [ 96.323270][ T6711] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 96.345274][ T6707] bridge_slave_1: left promiscuous mode [ 96.351878][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.370660][ T6707] bridge_slave_0: left allmulticast mode [ 96.378930][ T6707] bridge_slave_0: left promiscuous mode [ 96.390340][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.764070][ T6729] netlink: 'syz.3.217': attribute type 1 has an invalid length. [ 96.784292][ T6729] netlink: 'syz.3.217': attribute type 1 has an invalid length. [ 96.872533][ T6738] netlink: 'syz.0.221': attribute type 12 has an invalid length. [ 96.944613][ T6740] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 96.987808][ T6740] __nla_validate_parse: 2 callbacks suppressed [ 96.987823][ T6740] netlink: 228 bytes leftover after parsing attributes in process `syz.4.222'. [ 97.008332][ T6750] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 97.165270][ T6758] netlink: 'syz.2.229': attribute type 1 has an invalid length. [ 97.190275][ T6758] netlink: 228 bytes leftover after parsing attributes in process `syz.2.229'. [ 97.214414][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 97.408212][ T6769] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 97.423647][ T6767] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 97.442147][ T6767] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 97.850396][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 98.098548][ T6808] FAULT_INJECTION: forcing a failure. [ 98.098548][ T6808] name failslab, interval 1, probability 0, space 0, times 0 [ 98.136789][ T6808] CPU: 0 UID: 0 PID: 6808 Comm: syz.4.247 Not tainted syzkaller #0 PREEMPT(full) [ 98.136814][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.136823][ T6808] Call Trace: [ 98.136830][ T6808] [ 98.136839][ T6808] dump_stack_lvl+0x189/0x250 [ 98.136863][ T6808] ? __pfx____ratelimit+0x10/0x10 [ 98.136886][ T6808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.136905][ T6808] ? __pfx__printk+0x10/0x10 [ 98.136931][ T6808] ? __pfx___might_resched+0x10/0x10 [ 98.136953][ T6808] should_fail_ex+0x414/0x560 [ 98.136980][ T6808] should_failslab+0xa8/0x100 [ 98.137003][ T6808] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 98.137025][ T6808] ? __alloc_skb+0x112/0x2d0 [ 98.137045][ T6808] __alloc_skb+0x112/0x2d0 [ 98.137066][ T6808] netlink_dump+0x1b7/0xe90 [ 98.137087][ T6808] ? __pfx__copy_to_iter+0x10/0x10 [ 98.137102][ T6808] ? __skb_try_recv_from_queue+0x58f/0x730 [ 98.137130][ T6808] ? __pfx_netlink_dump+0x10/0x10 [ 98.137176][ T6808] netlink_recvmsg+0x676/0xa30 [ 98.137202][ T6808] ? __pfx_netlink_recvmsg+0x10/0x10 [ 98.137222][ T6808] ? __lock_acquire+0xab9/0xd20 [ 98.137241][ T6808] ? aa_sock_msg_perm+0xf1/0x1d0 [ 98.137260][ T6808] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 98.137279][ T6808] ? __pfx_netlink_recvmsg+0x10/0x10 [ 98.137295][ T6808] sock_recvmsg_nosec+0x183/0x1c0 [ 98.137322][ T6808] ____sys_recvmsg+0x3aa/0x460 [ 98.137355][ T6808] ? __pfx_____sys_recvmsg+0x10/0x10 [ 98.137390][ T6808] ? import_iovec+0x74/0xa0 [ 98.137412][ T6808] ___sys_recvmsg+0x1b5/0x510 [ 98.137437][ T6808] ? __pfx____sys_recvmsg+0x10/0x10 [ 98.137488][ T6808] ? __might_fault+0xb0/0x130 [ 98.137512][ T6808] do_recvmmsg+0x307/0x770 [ 98.137540][ T6808] ? __pfx_do_recvmmsg+0x10/0x10 [ 98.137572][ T6808] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.137606][ T6808] __x64_sys_recvmmsg+0x190/0x240 [ 98.137628][ T6808] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 98.137644][ T6808] ? rcu_is_watching+0x15/0xb0 [ 98.137666][ T6808] ? do_syscall_64+0xbe/0x3b0 [ 98.137686][ T6808] do_syscall_64+0xfa/0x3b0 [ 98.137700][ T6808] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.137721][ T6808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.137737][ T6808] ? clear_bhb_loop+0x60/0xb0 [ 98.137757][ T6808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.137772][ T6808] RIP: 0033:0x7f5b5818ebe9 [ 98.137788][ T6808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.137800][ T6808] RSP: 002b:00007f5b58f29038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 98.137816][ T6808] RAX: ffffffffffffffda RBX: 00007f5b583c5fa0 RCX: 00007f5b5818ebe9 [ 98.137827][ T6808] RDX: 0000000000000004 RSI: 0000200000001b00 RDI: 0000000000000003 [ 98.137836][ T6808] RBP: 00007f5b58f29090 R08: 0000000000000000 R09: 0000000000000000 [ 98.137846][ T6808] R10: 00000000400060a2 R11: 0000000000000246 R12: 0000000000000001 [ 98.137856][ T6808] R13: 00007f5b583c6038 R14: 00007f5b583c5fa0 R15: 00007ffcb43bdbf8 [ 98.137881][ T6808] [ 98.441207][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dfdd800: rx timeout, send abort [ 98.511430][ T6810] bond0: entered promiscuous mode [ 98.517476][ T6810] !: entered promiscuous mode [ 98.522734][ T6810] bond_slave_1: entered promiscuous mode [ 98.532875][ T6810] batadv0: entered promiscuous mode [ 98.544394][ T6810] hsr1: entered allmulticast mode [ 98.553234][ T6810] bond0: entered allmulticast mode [ 98.563859][ T6810] !: entered allmulticast mode [ 98.580033][ T6810] bond_slave_1: entered allmulticast mode [ 98.586494][ T6810] batadv0: entered allmulticast mode [ 98.592378][ T6810] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 98.628249][ T6810] bond0: left promiscuous mode [ 98.633136][ T6810] !: left promiscuous mode [ 98.642544][ T6810] bond_slave_1: left promiscuous mode [ 98.683426][ T6810] batadv0: left promiscuous mode [ 98.756764][ T6820] syzkaller0: entered promiscuous mode [ 98.762370][ T6820] syzkaller0: entered allmulticast mode [ 98.950296][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dfdd800: abort rx timeout. Force session deactivation [ 99.127525][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.258'. [ 100.639507][ T6879] netlink: 108 bytes leftover after parsing attributes in process `syz.4.272'. [ 100.889087][ T6891] netlink: 256 bytes leftover after parsing attributes in process `syz.3.277'. [ 101.443094][ T6913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.283'. [ 101.961727][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 101.990338][ T6948] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 102.010418][ T6948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.164315][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 102.323901][ T6967] bond0: entered promiscuous mode [ 102.343145][ T6967] bond_slave_0: entered promiscuous mode [ 102.357628][ T6967] bond_slave_1: entered promiscuous mode [ 102.375398][ T6967] batadv0: entered promiscuous mode [ 102.383328][ T6967] hsr1: entered allmulticast mode [ 102.395389][ T6967] bond0: entered allmulticast mode [ 102.400904][ T6967] bond_slave_0: entered allmulticast mode [ 102.409626][ T6967] bond_slave_1: entered allmulticast mode [ 102.423643][ T6967] batadv0: entered allmulticast mode [ 102.429942][ T6967] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 102.439396][ T6967] bond0: left promiscuous mode [ 102.455231][ T6967] bond_slave_0: left promiscuous mode [ 102.462674][ T6967] bond_slave_1: left promiscuous mode [ 102.472162][ T6967] batadv0: left promiscuous mode [ 102.608846][ T6987] netlink: 88 bytes leftover after parsing attributes in process `syz.0.311'. [ 102.620622][ T6987] openvswitch: netlink: Flow key attr not present in new flow. [ 102.725629][ T6995] nftables ruleset with unbound set [ 102.817441][ T30] audit: type=1800 audit(1757125674.584:2): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.318" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=324 res=0 errno=0 [ 102.860212][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 102.886296][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 102.892671][ T7006] syzkaller0: entered allmulticast mode [ 103.154343][ T7023] bond0: entered promiscuous mode [ 103.172936][ T7023] bond_slave_0: entered promiscuous mode [ 103.181268][ T7023] bond_slave_1: entered promiscuous mode [ 103.201167][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.328'. [ 103.202609][ T7023] batadv0: entered promiscuous mode [ 103.219416][ T7023] hsr1: entered allmulticast mode [ 103.225090][ T7023] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 103.234183][ T7023] bond0: left promiscuous mode [ 103.239930][ T7023] bond_slave_0: left promiscuous mode [ 103.245750][ T7023] bond_slave_1: left promiscuous mode [ 103.253228][ T7023] batadv0: left promiscuous mode [ 103.529202][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 103.711197][ T7062] tipc: Started in network mode [ 103.716699][ T7062] tipc: Node identity 6a0bd8a97c6e, cluster identity 4711 [ 103.724025][ T7062] tipc: Enabled bearer , priority 0 [ 103.734242][ T7062] syzkaller0: entered promiscuous mode [ 103.739932][ T7062] syzkaller0: entered allmulticast mode [ 103.751285][ T7062] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 103.770881][ T7062] tipc: Resetting bearer [ 103.795315][ T7061] tipc: Resetting bearer [ 103.818594][ T7061] tipc: Disabling bearer [ 104.051630][ T7077] bond0: entered promiscuous mode [ 104.057255][ T7077] bond_slave_0: entered promiscuous mode [ 104.063060][ T7077] bond_slave_1: entered promiscuous mode [ 104.070394][ T7077] batadv0: entered promiscuous mode [ 104.079243][ T7077] hsr1: entered allmulticast mode [ 104.084281][ T7077] bond0: entered allmulticast mode [ 104.090157][ T7077] bond_slave_0: entered allmulticast mode [ 104.096454][ T7077] bond_slave_1: entered allmulticast mode [ 104.102531][ T7077] batadv0: entered allmulticast mode [ 104.103624][ T7078] netlink: 216 bytes leftover after parsing attributes in process `syz.3.343'. [ 104.108919][ T7077] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 104.124211][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 104.133320][ T7077] bond0: left promiscuous mode [ 104.139351][ T7077] bond_slave_0: left promiscuous mode [ 104.144993][ T7077] bond_slave_1: left promiscuous mode [ 104.151589][ T7077] batadv0: left promiscuous mode [ 104.176422][ T7075] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.192707][ T7075] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.426649][ T7088] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 105.314312][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 105.334033][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.363'. [ 106.282567][ T7164] syzkaller0: entered promiscuous mode [ 106.289972][ T7164] syzkaller0: entered allmulticast mode [ 106.523618][ T7185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.677488][ T7191] netlink: 'syz.3.382': attribute type 10 has an invalid length. [ 108.152130][ T7191] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 108.178476][ T7191] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 108.214150][ T7202] bond0: entered promiscuous mode [ 108.221318][ T7202] bond_slave_0: entered promiscuous mode [ 108.229780][ T7202] bond_slave_1: entered promiscuous mode [ 108.237777][ T7202] batadv0: entered promiscuous mode [ 108.244198][ T7202] hsr1: entered allmulticast mode [ 108.256006][ T7202] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 108.267147][ T7202] bond0: left promiscuous mode [ 108.272022][ T7202] bond_slave_0: left promiscuous mode [ 108.279950][ T7202] bond_slave_1: left promiscuous mode [ 108.288320][ T7202] batadv0: left promiscuous mode [ 108.312894][ T7212] Bluetooth: MGMT ver 1.23 [ 108.341066][ T7207] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 108.456518][ T7214] tap0: tun_chr_ioctl cmd 1074025672 [ 108.461847][ T7214] tap0: ignored: set checksum disabled [ 108.511451][ T7221] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 108.530983][ T7222] netlink: 'syz.4.392': attribute type 13 has an invalid length. [ 108.532756][ T7221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.538774][ T7222] netlink: 'syz.4.392': attribute type 58 has an invalid length. [ 108.538790][ T7222] __nla_validate_parse: 8 callbacks suppressed [ 108.538799][ T7222] netlink: 152 bytes leftover after parsing attributes in process `syz.4.392'. [ 108.540274][ T7222] netlink: 'syz.4.392': attribute type 15 has an invalid length. [ 108.611173][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 108.620335][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.392'. [ 108.633535][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.394'. [ 108.831098][ T7243] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.899255][ T7248] bond0: entered promiscuous mode [ 108.909252][ T7248] bond_slave_0: entered promiscuous mode [ 108.915288][ T7248] bond_slave_1: entered promiscuous mode [ 108.922585][ T7248] batadv0: entered promiscuous mode [ 108.937068][ T7248] hsr1: entered allmulticast mode [ 108.947376][ T7248] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 108.972715][ T7248] bond0: left promiscuous mode [ 108.980848][ T7248] bond_slave_0: left promiscuous mode [ 108.986723][ T7248] bond_slave_1: left promiscuous mode [ 108.994416][ T7248] batadv0: left promiscuous mode [ 109.049195][ T7251] veth0: entered promiscuous mode [ 109.055438][ T7249] veth0: left promiscuous mode [ 109.760455][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 109.811836][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 109.812269][ T7308] netlink: 'syz.3.414': attribute type 23 has an invalid length. [ 110.134007][ T3506] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 110.293126][ T7336] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 110.433998][ T7344] netlink: 14 bytes leftover after parsing attributes in process `syz.2.425'. [ 110.491499][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 110.542914][ T7344] bond0 (unregistering): (slave 1!): Releasing backup interface [ 110.551912][ T7344] !: left allmulticast mode [ 110.563882][ T7344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.574522][ T7344] bond_slave_1: left allmulticast mode [ 110.584482][ T7344] bond0 (unregistering): Released all slaves [ 110.686746][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.426'. [ 110.812883][ T7353] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 110.872707][ T7353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.934048][ T7353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.941235][ T7353] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.960752][ T7353] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 111.013255][ T7364] veth3: entered promiscuous mode [ 111.029430][ T7364] bond1: (slave veth3): Enslaving as an active interface with a down link [ 111.088033][ T7368] vlan2: entered allmulticast mode [ 111.093189][ T7368] bond1: entered allmulticast mode [ 111.533722][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'. [ 111.581062][ T7399] xfrm1: entered promiscuous mode [ 111.594154][ T7409] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 111.603033][ T7399] xfrm1: entered allmulticast mode [ 111.604547][ T7409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.774425][ T7420] sctp: [Deprecated]: syz.3.453 (pid 7420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.774425][ T7420] Use struct sctp_sack_info instead [ 112.103346][ T7434] tipc: Enabled bearer , priority 0 [ 112.149641][ T7434] syzkaller0: entered promiscuous mode [ 112.158744][ T7434] syzkaller0: entered allmulticast mode [ 112.183283][ T7434] tipc: Resetting bearer [ 112.282212][ T7432] tipc: Resetting bearer [ 112.353296][ T7432] tipc: Disabling bearer [ 113.267474][ T7519] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 113.754052][ T7544] bond0: entered promiscuous mode [ 113.778743][ T7544] bond_slave_0: entered promiscuous mode [ 113.801769][ T7544] bond_slave_1: entered promiscuous mode [ 113.819772][ T7544] batadv0: entered promiscuous mode [ 113.853309][ T7544] hsr1: entered allmulticast mode [ 113.880148][ T7544] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 113.892366][ T7544] bond0: left promiscuous mode [ 113.903136][ T7544] bond_slave_0: left promiscuous mode [ 113.911508][ T7544] bond_slave_1: left promiscuous mode [ 113.920560][ T7544] batadv0: left promiscuous mode [ 113.980273][ T7554] wlan1 speed is unknown, defaulting to 1000 [ 113.988484][ T7561] netlink: 'syz.0.495': attribute type 2 has an invalid length. [ 114.002141][ T7554] wlan1 speed is unknown, defaulting to 1000 [ 114.035357][ T7554] wlan1 speed is unknown, defaulting to 1000 [ 114.231609][ T7573] __nla_validate_parse: 12 callbacks suppressed [ 114.231628][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 114.472663][ T7585] tipc: Started in network mode [ 114.478777][ T7585] tipc: Node identity ac14142f, cluster identity 4711 [ 114.486618][ T7585] tipc: New replicast peer: 0.0.0.0 [ 114.514512][ T7585] tipc: Enabled bearer , priority 10 [ 114.559461][ T5924] wlan1 speed is unknown, defaulting to 1000 [ 114.569084][ T7554] infiniband syz0: set down [ 114.573747][ T7554] infiniband syz0: added wlan1 [ 114.604346][ T7595] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 114.616798][ T7595] bond0: (slave wlan1): Opening slave failed [ 114.636410][ T7554] RDS/IB: syz0: added [ 114.642447][ T7554] smc: adding ib device syz0 with port count 1 [ 114.649505][ T7554] smc: ib device syz0 port 1 has pnetid [ 114.664402][ T5938] wlan1 speed is unknown, defaulting to 1000 [ 114.673507][ T7554] wlan1 speed is unknown, defaulting to 1000 [ 114.792495][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 114.940805][ T7604] vxcan1: entered allmulticast mode [ 114.979399][ T7554] wlan1 speed is unknown, defaulting to 1000 [ 115.055201][ T7608] nbd0: detected capacity change from 0 to 63 [ 115.066596][ T5865] block nbd0: Receive control failed (result -32) [ 115.223051][ T7618] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.515'. [ 115.352430][ T7554] wlan1 speed is unknown, defaulting to 1000 [ 115.355347][ T7620] nbd1: detected capacity change from 0 to 127 [ 115.403864][ T5865] block nbd1: Receive control failed (result -32) [ 115.437747][ T7627] netlink: 68 bytes leftover after parsing attributes in process `syz.1.519'. [ 115.571179][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 115.626548][ T5938] tipc: Node number set to 2886997039 [ 115.732686][ T7641] sctp: [Deprecated]: syz.1.526 (pid 7641) Use of int in max_burst socket option deprecated. [ 115.732686][ T7641] Use struct sctp_assoc_value instead [ 115.864329][ T7645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.871823][ T7645] IPv6: NLM_F_CREATE should be set when creating new route [ 115.953233][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 116.152891][ T7661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.160178][ T7661] IPv6: NLM_F_CREATE should be set when creating new route [ 116.172969][ T7554] wlan1 speed is unknown, defaulting to 1000 [ 116.220221][ T7661] netlink: 136 bytes leftover after parsing attributes in process `syz.1.532'. [ 116.273577][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 116.406606][ T7672] netlink: 6 bytes leftover after parsing attributes in process `syz.2.538'. [ 116.435381][ T7672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.653338][ T7684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.543'. [ 116.713628][ T7554] wlan1 speed is unknown, defaulting to 1000 [ 116.812704][ T7695] ip6gre1: entered allmulticast mode [ 117.010674][ T7706] bond0: entered promiscuous mode [ 117.018709][ T7706] bond_slave_0: entered promiscuous mode [ 117.033078][ T7706] bond_slave_1: entered promiscuous mode [ 117.048951][ T7706] batadv0: entered promiscuous mode [ 117.061085][ T7706] hsr1: entered allmulticast mode [ 117.068111][ T7706] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 117.079848][ T7706] bond0: left promiscuous mode [ 117.084688][ T7706] bond_slave_0: left promiscuous mode [ 117.091995][ T7706] bond_slave_1: left promiscuous mode [ 117.102317][ T7706] batadv0: left promiscuous mode [ 117.396843][ T7723] nbd2: detected capacity change from 0 to 63 [ 117.430603][ T5865] block nbd2: Receive control failed (result -32) [ 118.255719][ T7785] nbd3: detected capacity change from 0 to 63 [ 118.267361][ T5865] block nbd3: Receive control failed (result -32) [ 118.890111][ T7832] openvswitch: netlink: Multiple metadata blocks provided [ 119.135977][ T7847] netlink: set zone limit has 8 unknown bytes [ 119.217349][ T7856] netlink: 'syz.0.603': attribute type 8 has an invalid length. [ 119.435818][ T7868] netlink: 'syz.4.607': attribute type 13 has an invalid length. [ 119.443619][ T7868] __nla_validate_parse: 14 callbacks suppressed [ 119.443634][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 119.464023][ T7869] netlink: 108 bytes leftover after parsing attributes in process `syz.1.608'. [ 119.563372][ T1147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.582009][ T1147] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.612179][ T1147] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.665877][ T7883] tipc: Enabled bearer , priority 0 [ 119.691177][ T7883] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 119.727256][ T7883] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 119.750236][ T1147] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.772110][ T7891] bond0: entered promiscuous mode [ 119.785760][ T7891] bond_slave_0: entered promiscuous mode [ 119.802223][ T7891] bond_slave_1: entered promiscuous mode [ 119.809964][ T7891] batadv0: entered promiscuous mode [ 119.816771][ T7891] hsr1: entered allmulticast mode [ 119.822867][ T7891] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 119.831937][ T7891] bond0: left promiscuous mode [ 119.837726][ T7891] bond_slave_0: left promiscuous mode [ 119.843451][ T7891] bond_slave_1: left promiscuous mode [ 119.852802][ T7891] batadv0: left promiscuous mode [ 119.860202][ T7902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'. [ 119.913858][ T7883] tipc: Resetting bearer [ 119.996078][ T7912] vxcan1: tx address claim with different name [ 120.154342][ T7920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.196441][ T7926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.627'. [ 120.369368][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 120.383981][ T7940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 120.414270][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 120.456036][ T7942] netlink: 'syz.1.633': attribute type 8 has an invalid length. [ 120.558902][ T7950] bridge0: port 1(syz_tun) entered blocking state [ 120.574212][ T7950] bridge0: port 1(syz_tun) entered disabled state [ 120.583354][ T7950] syz_tun: entered allmulticast mode [ 120.598271][ T7950] syz_tun: entered promiscuous mode [ 120.612899][ T7950] bridge0: port 1(syz_tun) entered blocking state [ 120.619565][ T7950] bridge0: port 1(syz_tun) entered forwarding state [ 120.660671][ T7949] tipc: Started in network mode [ 120.670012][ T7949] tipc: Node identity 0e2da91cc7c1, cluster identity 4711 [ 120.677929][ T7949] tipc: Enabled bearer , priority 0 [ 120.695337][ T7951] tipc: Enabling of bearer rejected, already enabled [ 120.732333][ T7949] syzkaller0: entered promiscuous mode [ 120.746336][ T7949] syzkaller0: entered allmulticast mode [ 120.765579][ T24] tipc: Node number set to 3532093347 [ 120.786393][ T7949] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 120.826086][ T7951] tipc: Resetting bearer [ 120.832885][ T7949] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 120.843709][ T7947] tipc: Resetting bearer [ 120.971388][ T7947] tipc: Disabling bearer [ 120.980858][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 121.124835][ T7981] IPVS: set_ctl: invalid protocol: 0 172.20.20.49:20002 [ 121.167576][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 121.223276][ T7985] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 121.289332][ T7992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.654'. [ 121.346282][ T7995] tipc: Enabling of bearer rejected, failed to enable media [ 121.437291][ T8002] ipvlan0: entered promiscuous mode [ 121.442534][ T8002] ipvlan0: entered allmulticast mode [ 121.475455][ T8002] veth0_vlan: entered allmulticast mode [ 121.756090][ T8031] syzkaller0: entered promiscuous mode [ 121.768260][ T8027] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 121.775661][ T8027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.823145][ T8031] syzkaller0: entered allmulticast mode [ 121.993528][ T8041] tipc: Started in network mode [ 122.013219][ T8041] tipc: Node identity 5ac9a273512, cluster identity 4711 [ 122.022224][ T8041] tipc: Enabled bearer , priority 0 [ 122.040843][ T8041] syzkaller0: entered promiscuous mode [ 122.060127][ T8041] syzkaller0: entered allmulticast mode [ 122.064253][ T8047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.137804][ T8041] tipc: Resetting bearer [ 122.173952][ T8038] tipc: Resetting bearer [ 122.219089][ T8038] tipc: Disabling bearer [ 122.337149][ T8065] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 122.356685][ T8065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.314596][ T8126] FAULT_INJECTION: forcing a failure. [ 123.314596][ T8126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.385533][ T8126] CPU: 1 UID: 0 PID: 8126 Comm: syz.1.697 Not tainted syzkaller #0 PREEMPT(full) [ 123.385578][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.385598][ T8126] Call Trace: [ 123.385613][ T8126] [ 123.385629][ T8126] dump_stack_lvl+0x189/0x250 [ 123.385676][ T8126] ? __pfx____ratelimit+0x10/0x10 [ 123.385743][ T8126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.385762][ T8126] ? __pfx__printk+0x10/0x10 [ 123.385782][ T8126] ? __might_fault+0xb0/0x130 [ 123.385813][ T8126] should_fail_ex+0x414/0x560 [ 123.385839][ T8126] _copy_from_user+0x2d/0xb0 [ 123.385866][ T8126] ___sys_sendmsg+0x158/0x2a0 [ 123.385888][ T8126] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.385940][ T8126] ? __fget_files+0x2a/0x420 [ 123.385954][ T8126] ? __fget_files+0x3a0/0x420 [ 123.385979][ T8126] __x64_sys_sendmsg+0x19b/0x260 [ 123.386000][ T8126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.386027][ T8126] ? __pfx_ksys_write+0x10/0x10 [ 123.386045][ T8126] ? rcu_is_watching+0x15/0xb0 [ 123.386067][ T8126] ? do_syscall_64+0xbe/0x3b0 [ 123.386084][ T8126] do_syscall_64+0xfa/0x3b0 [ 123.386097][ T8126] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.386119][ T8126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.386134][ T8126] ? clear_bhb_loop+0x60/0xb0 [ 123.386151][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.386165][ T8126] RIP: 0033:0x7f3f2838ebe9 [ 123.386181][ T8126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.386193][ T8126] RSP: 002b:00007f3f291cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.386212][ T8126] RAX: ffffffffffffffda RBX: 00007f3f285c5fa0 RCX: 00007f3f2838ebe9 [ 123.386224][ T8126] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 123.386235][ T8126] RBP: 00007f3f291cf090 R08: 0000000000000000 R09: 0000000000000000 [ 123.386245][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.386254][ T8126] R13: 00007f3f285c6038 R14: 00007f3f285c5fa0 R15: 00007ffc8c1d1c88 [ 123.386282][ T8126] [ 123.630848][ T8129] netlink: 'syz.3.699': attribute type 12 has an invalid length. [ 124.501321][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.509075][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.714107][ T8193] __nla_validate_parse: 19 callbacks suppressed [ 124.714125][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 124.978100][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 125.017197][ T8219] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 125.026562][ T8219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.058097][ T8233] bridge_slave_0: invalid flags given to default FDB implementation [ 125.156560][ T8242] tipc: Enabling of bearer rejected, failed to enable media [ 125.253141][ T8244] tipc: Enabled bearer , priority 0 [ 125.280454][ T8244] syzkaller0: entered promiscuous mode [ 125.293706][ T8244] syzkaller0: entered allmulticast mode [ 125.330128][ T8244] tipc: Resetting bearer [ 125.338708][ T8243] tipc: Resetting bearer [ 125.353965][ T8243] tipc: Disabling bearer [ 125.636036][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 125.707988][ T10] IPVS: starting estimator thread 0... [ 125.805357][ T8273] IPVS: using max 32 ests per chain, 76800 per kthread [ 125.878432][ T8279] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 125.941746][ T8279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.018860][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'. [ 126.110471][ T8283] veth7: entered promiscuous mode [ 126.153288][ T8283] bond2: (slave veth7): Enslaving as an active interface with a down link [ 126.206406][ T8287] netlink: 72 bytes leftover after parsing attributes in process `syz.3.747'. [ 126.256951][ T8299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.277962][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.750'. [ 126.327940][ T8287] netlink: 72 bytes leftover after parsing attributes in process `syz.3.747'. [ 126.445919][ T8302] FAULT_INJECTION: forcing a failure. [ 126.445919][ T8302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.470131][ T8302] CPU: 0 UID: 0 PID: 8302 Comm: syz.4.752 Not tainted syzkaller #0 PREEMPT(full) [ 126.470155][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.470164][ T8302] Call Trace: [ 126.470171][ T8302] [ 126.470179][ T8302] dump_stack_lvl+0x189/0x250 [ 126.470203][ T8302] ? __pfx____ratelimit+0x10/0x10 [ 126.470225][ T8302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.470243][ T8302] ? __pfx__printk+0x10/0x10 [ 126.470263][ T8302] ? __might_fault+0xb0/0x130 [ 126.470294][ T8302] should_fail_ex+0x414/0x560 [ 126.470318][ T8302] _copy_from_iter+0x1de/0x1790 [ 126.470341][ T8302] ? rcu_is_watching+0x15/0xb0 [ 126.470358][ T8302] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 126.470380][ T8302] ? __pfx__copy_from_iter+0x10/0x10 [ 126.470397][ T8302] ? __build_skb_around+0x257/0x3e0 [ 126.470418][ T8302] ? netlink_sendmsg+0x642/0xb30 [ 126.470431][ T8302] ? skb_put+0x11b/0x210 [ 126.470450][ T8302] netlink_sendmsg+0x6b2/0xb30 [ 126.470474][ T8302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.470493][ T8302] ? aa_sock_msg_perm+0xf1/0x1d0 [ 126.470510][ T8302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.470527][ T8302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.470542][ T8302] __sock_sendmsg+0x21c/0x270 [ 126.470567][ T8302] ____sys_sendmsg+0x505/0x830 [ 126.470590][ T8302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.470615][ T8302] ? import_iovec+0x74/0xa0 [ 126.470642][ T8302] ___sys_sendmsg+0x21f/0x2a0 [ 126.470660][ T8302] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.470712][ T8302] ? __fget_files+0x2a/0x420 [ 126.470726][ T8302] ? __fget_files+0x3a0/0x420 [ 126.470752][ T8302] __x64_sys_sendmsg+0x19b/0x260 [ 126.470773][ T8302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.470800][ T8302] ? __pfx_ksys_write+0x10/0x10 [ 126.470818][ T8302] ? rcu_is_watching+0x15/0xb0 [ 126.470835][ T8302] ? do_syscall_64+0xbe/0x3b0 [ 126.470865][ T8302] do_syscall_64+0xfa/0x3b0 [ 126.470879][ T8302] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.470900][ T8302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.470916][ T8302] ? clear_bhb_loop+0x60/0xb0 [ 126.470934][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.470948][ T8302] RIP: 0033:0x7f5b5818ebe9 [ 126.470963][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.470976][ T8302] RSP: 002b:00007f5b58f29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.470993][ T8302] RAX: ffffffffffffffda RBX: 00007f5b583c5fa0 RCX: 00007f5b5818ebe9 [ 126.471005][ T8302] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 126.471015][ T8302] RBP: 00007f5b58f29090 R08: 0000000000000000 R09: 0000000000000000 [ 126.471025][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.471035][ T8302] R13: 00007f5b583c6038 R14: 00007f5b583c5fa0 R15: 00007ffcb43bdbf8 [ 126.471063][ T8302] [ 126.913547][ T8313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.758'. [ 126.987847][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 126.996172][ T8323] openvswitch: netlink: Multiple metadata blocks provided [ 127.358141][ T8345] FAULT_INJECTION: forcing a failure. [ 127.358141][ T8345] name failslab, interval 1, probability 0, space 0, times 0 [ 127.408259][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(full) [ 127.408282][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.408292][ T8345] Call Trace: [ 127.408300][ T8345] [ 127.408308][ T8345] dump_stack_lvl+0x189/0x250 [ 127.408333][ T8345] ? __pfx____ratelimit+0x10/0x10 [ 127.408356][ T8345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.408375][ T8345] ? __pfx__printk+0x10/0x10 [ 127.408398][ T8345] ? __lock_acquire+0xab9/0xd20 [ 127.408430][ T8345] should_fail_ex+0x414/0x560 [ 127.408464][ T8345] should_failslab+0xa8/0x100 [ 127.408489][ T8345] kmem_cache_alloc_noprof+0x73/0x3c0 [ 127.408509][ T8345] ? skb_clone+0x212/0x3a0 [ 127.408533][ T8345] skb_clone+0x212/0x3a0 [ 127.408555][ T8345] __netlink_deliver_tap+0x404/0x850 [ 127.408591][ T8345] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.408615][ T8345] netlink_deliver_tap+0x19c/0x1b0 [ 127.408638][ T8345] netlink_unicast+0x7fa/0x9e0 [ 127.408668][ T8345] ? __pfx_netlink_unicast+0x10/0x10 [ 127.408692][ T8345] ? netlink_sendmsg+0x642/0xb30 [ 127.408705][ T8345] ? skb_put+0x11b/0x210 [ 127.408725][ T8345] netlink_sendmsg+0x805/0xb30 [ 127.408750][ T8345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.408770][ T8345] ? aa_sock_msg_perm+0xf1/0x1d0 [ 127.408788][ T8345] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.408804][ T8345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.408821][ T8345] __sock_sendmsg+0x21c/0x270 [ 127.408845][ T8345] ____sys_sendmsg+0x505/0x830 [ 127.408870][ T8345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.408897][ T8345] ? import_iovec+0x74/0xa0 [ 127.408920][ T8345] ___sys_sendmsg+0x21f/0x2a0 [ 127.408940][ T8345] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.408995][ T8345] ? __fget_files+0x2a/0x420 [ 127.409009][ T8345] ? __fget_files+0x3a0/0x420 [ 127.409034][ T8345] __x64_sys_sendmsg+0x19b/0x260 [ 127.409054][ T8345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.409082][ T8345] ? __pfx_ksys_write+0x10/0x10 [ 127.409099][ T8345] ? rcu_is_watching+0x15/0xb0 [ 127.409120][ T8345] ? do_syscall_64+0xbe/0x3b0 [ 127.409140][ T8345] do_syscall_64+0xfa/0x3b0 [ 127.409155][ T8345] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.409175][ T8345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.409191][ T8345] ? clear_bhb_loop+0x60/0xb0 [ 127.409211][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.409227][ T8345] RIP: 0033:0x7f4c2898ebe9 [ 127.409243][ T8345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.409255][ T8345] RSP: 002b:00007f4c29760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.409274][ T8345] RAX: ffffffffffffffda RBX: 00007f4c28bc5fa0 RCX: 00007f4c2898ebe9 [ 127.409286][ T8345] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 127.409296][ T8345] RBP: 00007f4c29760090 R08: 0000000000000000 R09: 0000000000000000 [ 127.409306][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.409316][ T8345] R13: 00007f4c28bc6038 R14: 00007f4c28bc5fa0 R15: 00007fff45e28958 [ 127.409345][ T8345] [ 128.018171][ T8375] syzkaller0: entered promiscuous mode [ 128.023972][ T8375] syzkaller0: entered allmulticast mode [ 128.032205][ T8373] tipc: Enabled bearer , priority 0 [ 128.062216][ T8373] tipc: Resetting bearer [ 128.265082][ T8373] tipc: Disabling bearer [ 128.409778][ T8392] FAULT_INJECTION: forcing a failure. [ 128.409778][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 128.446356][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.0.784 Not tainted syzkaller #0 PREEMPT(full) [ 128.446379][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.446389][ T8392] Call Trace: [ 128.446405][ T8392] [ 128.446412][ T8392] dump_stack_lvl+0x189/0x250 [ 128.446436][ T8392] ? __pfx____ratelimit+0x10/0x10 [ 128.446456][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.446475][ T8392] ? __pfx__printk+0x10/0x10 [ 128.446501][ T8392] ? __pfx___might_resched+0x10/0x10 [ 128.446516][ T8392] ? fs_reclaim_acquire+0x7d/0x100 [ 128.446542][ T8392] should_fail_ex+0x414/0x560 [ 128.446568][ T8392] should_failslab+0xa8/0x100 [ 128.446591][ T8392] __kmalloc_cache_noprof+0x70/0x3d0 [ 128.446611][ T8392] ? rtm_new_nexthop+0x2704/0x7eb0 [ 128.446633][ T8392] rtm_new_nexthop+0x2704/0x7eb0 [ 128.446651][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.446682][ T8392] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 128.446712][ T8392] ? kasan_quarantine_put+0xdd/0x220 [ 128.446735][ T8392] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.446762][ T8392] ? nlmon_xmit+0xb0/0x100 [ 128.446776][ T8392] ? kmem_cache_free+0x18f/0x400 [ 128.446803][ T8392] ? __local_bh_enable_ip+0x12d/0x1c0 [ 128.446820][ T8392] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.446842][ T8392] ? __local_bh_enable_ip+0x12d/0x1c0 [ 128.446858][ T8392] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 128.446894][ T8392] ? __lock_acquire+0xab9/0xd20 [ 128.446943][ T8392] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 128.446960][ T8392] rtnetlink_rcv_msg+0x7cf/0xb70 [ 128.446987][ T8392] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 128.447008][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.447027][ T8392] ? ref_tracker_free+0x63a/0x7d0 [ 128.447049][ T8392] ? __asan_memcpy+0x40/0x70 [ 128.447066][ T8392] ? __pfx_ref_tracker_free+0x10/0x10 [ 128.447085][ T8392] ? __skb_clone+0x63/0x7a0 [ 128.447112][ T8392] netlink_rcv_skb+0x205/0x470 [ 128.447137][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.447161][ T8392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.447195][ T8392] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.447226][ T8392] netlink_unicast+0x82c/0x9e0 [ 128.447256][ T8392] ? __pfx_netlink_unicast+0x10/0x10 [ 128.447279][ T8392] ? netlink_sendmsg+0x642/0xb30 [ 128.447293][ T8392] ? skb_put+0x11b/0x210 [ 128.447314][ T8392] netlink_sendmsg+0x805/0xb30 [ 128.447339][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.447358][ T8392] ? aa_sock_msg_perm+0xf1/0x1d0 [ 128.447376][ T8392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.447402][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.447420][ T8392] __sock_sendmsg+0x21c/0x270 [ 128.447445][ T8392] ____sys_sendmsg+0x505/0x830 [ 128.447469][ T8392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.447497][ T8392] ? import_iovec+0x74/0xa0 [ 128.447520][ T8392] ___sys_sendmsg+0x21f/0x2a0 [ 128.447541][ T8392] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.447599][ T8392] ? __fget_files+0x2a/0x420 [ 128.447613][ T8392] ? __fget_files+0x3a0/0x420 [ 128.447639][ T8392] __x64_sys_sendmsg+0x19b/0x260 [ 128.447660][ T8392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.447689][ T8392] ? __pfx_ksys_write+0x10/0x10 [ 128.447707][ T8392] ? rcu_is_watching+0x15/0xb0 [ 128.447729][ T8392] ? do_syscall_64+0xbe/0x3b0 [ 128.447749][ T8392] do_syscall_64+0xfa/0x3b0 [ 128.447763][ T8392] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.447784][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.447800][ T8392] ? clear_bhb_loop+0x60/0xb0 [ 128.447821][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.447837][ T8392] RIP: 0033:0x7f227898ebe9 [ 128.447853][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.447867][ T8392] RSP: 002b:00007f22798e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.447885][ T8392] RAX: ffffffffffffffda RBX: 00007f2278bc5fa0 RCX: 00007f227898ebe9 [ 128.447897][ T8392] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 128.447908][ T8392] RBP: 00007f22798e9090 R08: 0000000000000000 R09: 0000000000000000 [ 128.447918][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.447928][ T8392] R13: 00007f2278bc6038 R14: 00007f2278bc5fa0 R15: 00007ffd5a511378 [ 128.447958][ T8392] [ 128.546945][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 128.880528][ T8403] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 128.887947][ T8403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.239619][ T8438] FAULT_INJECTION: forcing a failure. [ 129.239619][ T8438] name failslab, interval 1, probability 0, space 0, times 0 [ 129.284396][ T8438] CPU: 1 UID: 0 PID: 8438 Comm: syz.4.801 Not tainted syzkaller #0 PREEMPT(full) [ 129.284418][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.284427][ T8438] Call Trace: [ 129.284434][ T8438] [ 129.284442][ T8438] dump_stack_lvl+0x189/0x250 [ 129.284465][ T8438] ? __pfx____ratelimit+0x10/0x10 [ 129.284497][ T8438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.284515][ T8438] ? __pfx__printk+0x10/0x10 [ 129.284541][ T8438] ? __pfx___might_resched+0x10/0x10 [ 129.284562][ T8438] ? fs_reclaim_acquire+0x7d/0x100 [ 129.284588][ T8438] should_fail_ex+0x414/0x560 [ 129.284614][ T8438] should_failslab+0xa8/0x100 [ 129.284637][ T8438] __kmalloc_cache_noprof+0x70/0x3d0 [ 129.284656][ T8438] ? rtm_new_nexthop+0x28c2/0x7eb0 [ 129.284679][ T8438] rtm_new_nexthop+0x28c2/0x7eb0 [ 129.284702][ T8438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.284737][ T8438] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 129.284770][ T8438] ? kasan_quarantine_put+0xdd/0x220 [ 129.284792][ T8438] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.284819][ T8438] ? nlmon_xmit+0xb0/0x100 [ 129.284834][ T8438] ? kmem_cache_free+0x18f/0x400 [ 129.284862][ T8438] ? __local_bh_enable_ip+0x12d/0x1c0 [ 129.284879][ T8438] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.284901][ T8438] ? __local_bh_enable_ip+0x12d/0x1c0 [ 129.284917][ T8438] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 129.284954][ T8438] ? __lock_acquire+0xab9/0xd20 [ 129.284999][ T8438] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 129.285016][ T8438] rtnetlink_rcv_msg+0x7cf/0xb70 [ 129.285042][ T8438] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 129.285063][ T8438] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.285082][ T8438] ? ref_tracker_free+0x63a/0x7d0 [ 129.285105][ T8438] ? __asan_memcpy+0x40/0x70 [ 129.285120][ T8438] ? __pfx_ref_tracker_free+0x10/0x10 [ 129.285137][ T8438] ? __skb_clone+0x63/0x7a0 [ 129.285181][ T8438] netlink_rcv_skb+0x205/0x470 [ 129.285205][ T8438] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.285229][ T8438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.285264][ T8438] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.285295][ T8438] netlink_unicast+0x82c/0x9e0 [ 129.285320][ T8438] ? __pfx_netlink_unicast+0x10/0x10 [ 129.285342][ T8438] ? netlink_sendmsg+0x642/0xb30 [ 129.285356][ T8438] ? skb_put+0x11b/0x210 [ 129.285375][ T8438] netlink_sendmsg+0x805/0xb30 [ 129.285398][ T8438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.285417][ T8438] ? aa_sock_msg_perm+0xf1/0x1d0 [ 129.285435][ T8438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.285452][ T8438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.285467][ T8438] __sock_sendmsg+0x21c/0x270 [ 129.285492][ T8438] ____sys_sendmsg+0x505/0x830 [ 129.285516][ T8438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.285543][ T8438] ? import_iovec+0x74/0xa0 [ 129.285572][ T8438] ___sys_sendmsg+0x21f/0x2a0 [ 129.285592][ T8438] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.285648][ T8438] ? __fget_files+0x2a/0x420 [ 129.285662][ T8438] ? __fget_files+0x3a0/0x420 [ 129.285687][ T8438] __x64_sys_sendmsg+0x19b/0x260 [ 129.285707][ T8438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.285734][ T8438] ? __pfx_ksys_write+0x10/0x10 [ 129.285751][ T8438] ? rcu_is_watching+0x15/0xb0 [ 129.285772][ T8438] ? do_syscall_64+0xbe/0x3b0 [ 129.285792][ T8438] do_syscall_64+0xfa/0x3b0 [ 129.285805][ T8438] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.285826][ T8438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.285842][ T8438] ? clear_bhb_loop+0x60/0xb0 [ 129.285862][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.285877][ T8438] RIP: 0033:0x7f5b5818ebe9 [ 129.285892][ T8438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.285904][ T8438] RSP: 002b:00007f5b58f29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.285921][ T8438] RAX: ffffffffffffffda RBX: 00007f5b583c5fa0 RCX: 00007f5b5818ebe9 [ 129.285932][ T8438] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 129.285942][ T8438] RBP: 00007f5b58f29090 R08: 0000000000000000 R09: 0000000000000000 [ 129.285952][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.285961][ T8438] R13: 00007f5b583c6038 R14: 00007f5b583c5fa0 R15: 00007ffcb43bdbf8 [ 129.285987][ T8438] [ 129.721033][ T8441] __nla_validate_parse: 2 callbacks suppressed [ 129.721051][ T8441] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.802'. [ 130.098962][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 130.122135][ T5865] block nbd4: Receive control failed (result -32) [ 130.365396][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 130.376221][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.817'. [ 130.387022][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 130.570293][ T8511] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 130.584882][ T8511] netlink: 188 bytes leftover after parsing attributes in process `syz.3.822'. [ 130.722969][ T8519] vlan2: entered allmulticast mode [ 130.730561][ T8519] hsr0: entered allmulticast mode [ 130.744660][ T8519] hsr_slave_0: entered allmulticast mode [ 130.763952][ T8519] hsr_slave_1: entered allmulticast mode [ 130.773960][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 130.906066][ T8532] netlink: 48 bytes leftover after parsing attributes in process `syz.2.830'. [ 131.018798][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.107241][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 131.138718][ T8553] syzkaller1: entered promiscuous mode [ 131.144222][ T8553] syzkaller1: entered allmulticast mode [ 131.531201][ T8578] wlan1 speed is unknown, defaulting to 1000 [ 131.684858][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 132.264973][ T8615] veth1_macvtap: left promiscuous mode [ 132.276919][ T8615] macsec0: entered promiscuous mode [ 132.290210][ T8615] macsec0: entered allmulticast mode [ 132.304667][ T8617] veth1_macvtap: entered promiscuous mode [ 132.305636][ T8620] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 132.310673][ T8617] veth1_macvtap: entered allmulticast mode [ 132.324557][ T8617] macsec0: left promiscuous mode [ 132.330557][ T8617] macsec0: left allmulticast mode [ 132.337002][ T8617] veth1_macvtap: left allmulticast mode [ 132.809015][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872872][ T8644] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 132.881593][ T8644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.993386][ T8650] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 133.005884][ T8648] nbd5: detected capacity change from 0 to 63 [ 133.019165][ T5865] block nbd5: Receive control failed (result -32) [ 133.028190][ T8652] veth0: entered promiscuous mode [ 133.067991][ T8651] veth0: left promiscuous mode [ 133.192694][ T8656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.202497][ T8659] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 133.217361][ T8656] team0: Port device bond2 added [ 133.268079][ T8659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.454088][ T8681] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 133.477067][ T8681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.652624][ T8697] FAULT_INJECTION: forcing a failure. [ 133.652624][ T8697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.671150][ T8697] CPU: 0 UID: 0 PID: 8697 Comm: syz.2.887 Not tainted syzkaller #0 PREEMPT(full) [ 133.671185][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.671194][ T8697] Call Trace: [ 133.671201][ T8697] [ 133.671209][ T8697] dump_stack_lvl+0x189/0x250 [ 133.671234][ T8697] ? __pfx____ratelimit+0x10/0x10 [ 133.671256][ T8697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.671274][ T8697] ? __pfx__printk+0x10/0x10 [ 133.671308][ T8697] should_fail_ex+0x414/0x560 [ 133.671334][ T8697] _copy_to_user+0x31/0xb0 [ 133.671355][ T8697] simple_read_from_buffer+0xe1/0x170 [ 133.671382][ T8697] proc_fail_nth_read+0x1b3/0x220 [ 133.671405][ T8697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.671426][ T8697] ? rw_verify_area+0x2a6/0x4d0 [ 133.671445][ T8697] ? __lock_acquire+0xab9/0xd20 [ 133.671465][ T8697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.671484][ T8697] vfs_read+0x200/0xa30 [ 133.671503][ T8697] ? fdget_pos+0x247/0x320 [ 133.671522][ T8697] ? __pfx___mutex_lock+0x10/0x10 [ 133.671539][ T8697] ? __pfx_vfs_read+0x10/0x10 [ 133.671561][ T8697] ? __fget_files+0x2a/0x420 [ 133.671580][ T8697] ? __fget_files+0x3a0/0x420 [ 133.671593][ T8697] ? __fget_files+0x2a/0x420 [ 133.671616][ T8697] ksys_read+0x145/0x250 [ 133.671638][ T8697] ? __pfx_ksys_read+0x10/0x10 [ 133.671655][ T8697] ? rcu_is_watching+0x15/0xb0 [ 133.671676][ T8697] ? do_syscall_64+0xbe/0x3b0 [ 133.671697][ T8697] do_syscall_64+0xfa/0x3b0 [ 133.671711][ T8697] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.671733][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.671748][ T8697] ? clear_bhb_loop+0x60/0xb0 [ 133.671768][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.671784][ T8697] RIP: 0033:0x7fe65758d5fc [ 133.671799][ T8697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.671812][ T8697] RSP: 002b:00007fe658411030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.671829][ T8697] RAX: ffffffffffffffda RBX: 00007fe6577c5fa0 RCX: 00007fe65758d5fc [ 133.671840][ T8697] RDX: 000000000000000f RSI: 00007fe6584110a0 RDI: 0000000000000004 [ 133.671850][ T8697] RBP: 00007fe658411090 R08: 0000000000000000 R09: 0000000000000000 [ 133.671860][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.671870][ T8697] R13: 00007fe6577c6038 R14: 00007fe6577c5fa0 R15: 00007ffec9a2a628 [ 133.671898][ T8697] [ 134.654313][ T8759] netlink: 'syz.3.912': attribute type 1 has an invalid length. [ 134.666688][ T8759] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 134.683918][ T8759] netlink: 'syz.3.912': attribute type 4 has an invalid length. [ 134.823953][ T8770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.975072][ T8777] __nla_validate_parse: 18 callbacks suppressed [ 135.002157][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 135.126077][ T8787] netlink: 'syz.1.922': attribute type 5 has an invalid length. [ 135.126308][ T8785] tipc: New replicast peer: 255.255.255.255 [ 135.144865][ T8785] tipc: Enabled bearer , priority 10 [ 135.309785][ T8796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.107009][ T8840] netlink: 108 bytes leftover after parsing attributes in process `syz.2.944'. [ 136.255303][ T5916] tipc: Node number set to 375773353 [ 136.548070][ T8859] macvtap1: entered promiscuous mode [ 136.554498][ T8859] vlan0: entered promiscuous mode [ 136.563545][ T8859] macvtap1: entered allmulticast mode [ 136.570401][ T8859] vlan0: entered allmulticast mode [ 136.582405][ T8859] veth0_vlan: entered allmulticast mode [ 136.584558][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 136.590813][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.949'. [ 136.608062][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.949'. [ 136.608525][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 136.641333][ T8860] macvtap2: entered promiscuous mode [ 136.647051][ T8860] macvtap2: entered allmulticast mode [ 136.840542][ T8871] netlink: 72 bytes leftover after parsing attributes in process `syz.4.954'. [ 136.887665][ T8873] netlink: 108 bytes leftover after parsing attributes in process `syz.4.955'. [ 136.928919][ T8875] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 137.003644][ T8879] netlink: 144 bytes leftover after parsing attributes in process `syz.4.958'. [ 137.267764][ T8884] wlan1 speed is unknown, defaulting to 1000 [ 137.828785][ T8904] netlink: 'syz.2.962': attribute type 28 has an invalid length. [ 137.865210][ T8904] netlink: 'syz.2.962': attribute type 3 has an invalid length. [ 137.873073][ T8904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.962'. [ 138.550531][ T8928] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 138.579017][ T8929] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 138.609552][ T8929] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 138.612324][ T8928] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 138.628474][ T8938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.715496][ T8934] bond3 (unregistering): Released all slaves [ 138.774869][ T8948] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 139.031180][ T8968] xfrm1: entered promiscuous mode [ 139.045888][ T8968] xfrm1: entered allmulticast mode [ 139.063074][ T8966] unsupported nlmsg_type 40 [ 139.082837][ T8966] bond0: entered promiscuous mode [ 139.092622][ T8966] bond_slave_0: entered promiscuous mode [ 139.099284][ T8966] bond_slave_1: entered promiscuous mode [ 139.655031][ T9002] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 139.817378][ T9008] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 140.080018][ T9020] tipc: Enabled bearer , priority 0 [ 140.089333][ T9020] syzkaller0: entered promiscuous mode [ 140.094827][ T9020] syzkaller0: entered allmulticast mode [ 140.111949][ T9020] __nla_validate_parse: 12 callbacks suppressed [ 140.111965][ T9020] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1010'. [ 140.179912][ T9019] tipc: Resetting bearer [ 140.225378][ T9019] tipc: Disabling bearer [ 140.234087][ T9027] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1014'. [ 140.919584][ T9059] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 140.939351][ T9062] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 140.997061][ T9067] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1026'. [ 141.062646][ T9059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.082276][ T9070] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1026'. [ 141.142432][ T9068] bond3: (slave ip6erspan0): making interface the new active one [ 141.180636][ T9068] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 141.187570][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 141.201075][ T9073] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 141.227298][ T9073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.501625][ T9086] tipc: Enabling of bearer rejected, already enabled [ 141.550822][ T9090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1035'. [ 141.721935][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 141.761830][ T9098] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 141.808556][ T9098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.141034][ T9124] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1047'. [ 142.177494][ T9124] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1047'. [ 142.219731][ T9126] C: renamed from lo (while UP) [ 142.387313][ T9146] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1053'. [ 142.511629][ T9149] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 142.525246][ T9149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.818972][ T9170] netlink: 'syz.0.1060': attribute type 9 has an invalid length. [ 142.854322][ T982] IPVS: starting estimator thread 0... [ 142.938720][ T9168] raw_sendmsg: syz.1.1062 forgot to set AF_INET. Fix it! [ 142.971701][ T9174] IPVS: using max 29 ests per chain, 69600 per kthread [ 143.002816][ T9181] trusted_key: syz.2.1066 sent an empty control message without MSG_MORE. [ 143.203314][ T9193] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 143.222361][ T9189] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 143.291403][ T9196] bridge_slave_0: left allmulticast mode [ 143.328490][ T9196] bridge_slave_0: left promiscuous mode [ 143.334325][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.414202][ T9196] bridge_slave_1: left allmulticast mode [ 143.459267][ T9196] bridge_slave_1: left promiscuous mode [ 143.480490][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.568884][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.602091][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.620851][ T9196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.665369][ T9196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.372737][ T9230] team0: Port device team_slave_1 removed [ 145.149775][ T9235] netlink: 'syz.1.1087': attribute type 1 has an invalid length. [ 145.203122][ T9235] __nla_validate_parse: 6 callbacks suppressed [ 145.203139][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1087'. [ 145.285298][ T9247] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1092'. [ 145.300645][ T9249] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 145.311622][ T9250] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1091'. [ 145.478930][ T9263] net_ratelimit: 3 callbacks suppressed [ 145.478949][ T9263] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 145.562562][ T9263] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.615680][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 145.820919][ T9281] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 146.082243][ T9288] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1107'. [ 146.122131][ T9291] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1108'. [ 146.346422][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 146.364973][ T9306] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 146.393254][ T9306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.449170][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 146.538882][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 146.871207][ T9333] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1124'. [ 146.991782][ T9337] dvmrp0: entered allmulticast mode [ 147.103966][ T9352] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 147.179066][ T9354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.267640][ T9354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.337504][ T9354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.398619][ T9354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.509015][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.553007][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.569910][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.607950][ T1147] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.950624][ T9396] Bluetooth: MGMT ver 1.23 [ 148.091119][ T9404] netlink: 'syz.4.1138': attribute type 4 has an invalid length. [ 148.142150][ T9407] netlink: 'syz.4.1138': attribute type 4 has an invalid length. [ 148.223472][ T9404] pim6reg: entered allmulticast mode [ 148.253540][ T9415] tipc: Enabling of bearer rejected, already enabled [ 148.617886][ T9436] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.658393][ T9441] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 149.584751][ T9490] wlan1 speed is unknown, defaulting to 1000 [ 150.204352][ T9538] netlink: 'syz.3.1182': attribute type 7 has an invalid length. [ 150.285034][ T9543] __nla_validate_parse: 9 callbacks suppressed [ 150.285054][ T9543] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1185'. [ 150.516229][ T9554] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1188'. [ 150.938834][ T9574] tipc: New replicast peer: 255.255.255.255 [ 150.951845][ T9574] tipc: Enabled bearer , priority 10 [ 150.999163][ T9580] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1199'. [ 151.044817][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 151.296286][ T9597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1209'. [ 151.420297][ T9498] tipc: Subscription rejected, illegal request [ 151.504864][ T9615] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1213'. [ 151.549431][ T9617] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 151.577881][ T9617] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1215'. [ 151.600647][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 151.751633][ T9633] netlink: 'syz.0.1220': attribute type 29 has an invalid length. [ 151.794221][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 151.820652][ T9634] netlink: 'syz.0.1220': attribute type 29 has an invalid length. [ 151.839594][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 151.940320][ T9644] erspan0: entered promiscuous mode [ 151.960389][ T9644] erspan0: entered allmulticast mode [ 152.003440][ T9650] netlink: 'syz.4.1227': attribute type 6 has an invalid length. [ 152.602649][ T9701] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 152.980933][ T9729] netlink: 'syz.0.1255': attribute type 10 has an invalid length. [ 153.033202][ T9729] batman_adv: batadv0: Adding interface: team0 [ 153.063523][ T9729] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.094170][ T9729] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 153.356308][ T9764] nft_compat: unsupported protocol 0 [ 153.530102][ T9776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.538614][ T9776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.549736][ T9776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.557393][ T9776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.241314][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.759894][ T9791] netlink: 'syz.2.1270': attribute type 11 has an invalid length. [ 205.801269][ T9791] netlink: 'syz.2.1270': attribute type 11 has an invalid length. [ 205.844915][ T9791] __nla_validate_parse: 6 callbacks suppressed [ 205.844933][ T9791] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1270'. [ 206.141377][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1279'. [ 206.204811][ T9815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.214755][ T9824] IPVS: Unknown mcast interface: nicvf0 [ 206.234324][ T9825] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 206.655004][ T9849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1288'. [ 206.817405][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1293'. [ 206.874725][ T9858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.906830][ T9863] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 207.124175][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 207.156315][ T9872] sch_tbf: burst 0 is lower than device lo mtu (17233) ! [ 207.286062][ T9883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1301'. [ 207.581422][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 207.629543][ T9900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.682474][ T9900] bond5: (slave veth0_to_bond): Releasing backup interface [ 207.731468][ T9900] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 207.815965][ T9915] tipc: Enabled bearer , priority 0 [ 207.859354][ T9915] syzkaller0: entered promiscuous mode [ 207.875490][ T9915] syzkaller0: entered allmulticast mode [ 207.963689][ T9922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1314'. [ 208.089597][ T9926] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1315'. [ 208.284041][ T9935] netlink: 'syz.2.1317': attribute type 21 has an invalid length. [ 208.292148][ T9936] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1319'. [ 208.633878][ T9911] tipc: Resetting bearer [ 208.679728][ T9911] tipc: Disabling bearer [ 208.774799][ T9951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.840826][ T9957] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 208.923970][ T9963] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 209.052032][ T9954] wlan1 speed is unknown, defaulting to 1000 [ 209.267765][ T9982] tipc: Enabled bearer , priority 0 [ 209.282931][ T9982] syzkaller0: MTU too low for tipc bearer [ 209.315524][ T9982] tipc: Disabling bearer [ 209.834381][T10019] netlink: 'syz.4.1340': attribute type 33 has an invalid length. [ 210.214420][T10033] netlink: 'syz.0.1348': attribute type 83 has an invalid length. [ 210.315849][T10038] tipc: Enabling of bearer rejected, failed to enable media [ 210.509829][ T10] IPVS: starting estimator thread 0... [ 210.518059][T10042] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.607244][T10048] IPVS: using max 27 ests per chain, 64800 per kthread [ 210.658078][T10055] sctp: [Deprecated]: syz.4.1356 (pid 10055) Use of int in max_burst socket option. [ 210.658078][T10055] Use struct sctp_assoc_value instead [ 211.174230][T10096] __nla_validate_parse: 15 callbacks suppressed [ 211.174248][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1367'. [ 211.472720][T10131] smc: net device bond0 applied user defined pnetid SYZ2 [ 211.491366][T10130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1377'. [ 211.557440][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 211.709988][T10144] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1382'. [ 211.753676][T10146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1383'. [ 211.859845][T10155] tipc: Enabled bearer , priority 0 [ 211.886016][T10155] syzkaller0: entered promiscuous mode [ 211.901864][T10155] syzkaller0: entered allmulticast mode [ 211.959557][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'. [ 212.029823][T10155] tipc: Resetting bearer [ 212.052603][T10154] tipc: Resetting bearer [ 212.060718][T10171] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1390'. [ 212.124467][T10154] tipc: Disabling bearer [ 212.157478][T10172] tipc: Enabling of bearer rejected, already enabled [ 212.373301][T10186] bond1: entered promiscuous mode [ 212.381471][T10186] bond1: entered allmulticast mode [ 212.462041][T10186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.629937][T10210] tipc: Enabled bearer , priority 10 [ 212.755483][T10216] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1403'. [ 212.841586][T10216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.970514][T10231] IPv6: sit3: Disabled Multicast RS [ 212.976947][T10231] sit3: entered allmulticast mode [ 213.213080][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1412'. [ 213.229288][T10246] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1410'. [ 213.235410][T10245] : renamed from vlan0 (while UP) [ 213.278120][T10247] syzkaller1: entered promiscuous mode [ 213.283765][T10247] syzkaller1: entered allmulticast mode [ 213.745438][ T10] tipc: Node number set to 3387730204 [ 213.920217][T10255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.934859][T10256] 8021q: VLANs not supported on ip_vti0 [ 213.950312][T10259] bond4: (slave veth0_to_bond): Releasing backup interface [ 213.964011][T10259] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 214.257865][T10289] netlink: 'syz.1.1424': attribute type 7 has an invalid length. [ 214.286164][T10289] netlink: 'syz.1.1424': attribute type 8 has an invalid length. [ 214.789173][T10327] netlink: 'syz.3.1435': attribute type 10 has an invalid length. [ 214.856323][T10330] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 214.864947][T10327] team0: Port device geneve0 added [ 214.909013][T10333] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 214.938853][T10333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.306847][T10354] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 215.410077][T10357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.472646][T10362] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 215.940066][T10404] netlink: 'syz.4.1461': attribute type 2 has an invalid length. [ 216.049224][T10412] netlink: 'syz.1.1464': attribute type 33 has an invalid length. [ 216.311943][T10426] __nla_validate_parse: 14 callbacks suppressed [ 216.311961][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 216.379311][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'. [ 216.720043][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1480'. [ 216.756342][T10451] 8021q: adding VLAN 0 to HW filter on device bond7 [ 216.793851][T10451] bond6: (slave veth0_to_bond): Releasing backup interface [ 216.805834][T10454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.826624][T10451] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 216.962479][T10466] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 217.022488][T10471] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 217.034537][T10471] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 217.171867][T10481] netlink: 'syz.1.1490': attribute type 16 has an invalid length. [ 217.184435][T10481] netlink: 'syz.1.1490': attribute type 17 has an invalid length. [ 217.232392][T10481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.492648][T10496] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1494'. [ 217.570814][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 217.594030][T10504] tun0: tun_chr_ioctl cmd 1074025675 [ 217.599756][T10504] tun0: persist disabled [ 217.604867][T10504] netlink: 'syz.1.1497': attribute type 5 has an invalid length. [ 217.659562][T10511] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1499'. [ 217.879238][T10526] team0: Device veth1_macvtap failed to register rx_handler [ 217.927688][T10526] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1504'. [ 217.939779][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1503'. [ 217.949866][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1503'. [ 217.967247][T10526] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1504'. [ 218.042631][T10533] veth1_to_hsr: entered promiscuous mode [ 218.054317][T10532] veth1_to_hsr: left promiscuous mode [ 218.213717][T10548] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 218.778369][T10587] delete_channel: no stack [ 218.824588][T10589] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 219.036333][ T5865] Bluetooth: hci0: command tx timeout [ 219.060478][T10595] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 219.083878][T10595] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 219.393365][T10611] dvmrp1: entered allmulticast mode [ 219.483400][T10618] bridge0: entered promiscuous mode [ 219.489299][T10618] macsec1: entered promiscuous mode [ 219.495007][T10618] macsec1: entered allmulticast mode [ 219.501287][T10618] bridge0: entered allmulticast mode [ 220.039327][T10642] sctp: [Deprecated]: syz.3.1543 (pid 10642) Use of int in maxseg socket option. [ 220.039327][T10642] Use struct sctp_assoc_value instead [ 220.232186][T10653] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 220.243452][T10653] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 255.677998][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.127968][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.075413][ T31] INFO: task kworker/1:4:5938 blocked for more than 143 seconds. [ 374.083175][ T31] Not tainted syzkaller #0 [ 374.088146][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.096854][ T31] task:kworker/1:4 state:D stack:23144 pid:5938 tgid:5938 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 374.108957][ T31] Workqueue: events rfkill_sync_work [ 374.114281][ T31] Call Trace: [ 374.117657][ T31] [ 374.120602][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 374.125173][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 374.130715][ T31] ? __pfx___schedule+0x10/0x10 [ 374.135657][ T31] ? schedule+0x91/0x360 [ 374.140173][ T31] schedule+0x165/0x360 [ 374.144351][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.149951][ T31] __mutex_lock+0x7e6/0x1350 [ 374.154560][ T31] ? __mutex_lock+0x5bb/0x1350 [ 374.159437][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 374.164731][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.195063][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.200318][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 374.235175][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 374.241554][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 374.252368][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 374.257615][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 374.263355][ T31] rfkill_set_block+0x1cf/0x440 [ 374.268254][ T31] rfkill_sync_work+0x114/0x200 [ 374.273115][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 374.278910][ T31] process_scheduled_works+0xae1/0x17b0 [ 374.284493][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.291629][ T31] worker_thread+0x8a0/0xda0 [ 374.296280][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 374.302615][ T31] ? __kthread_parkme+0x7b/0x200 [ 374.307614][ T31] kthread+0x70e/0x8a0 [ 374.311686][ T31] ? __pfx_worker_thread+0x10/0x10 [ 374.317298][ T31] ? __pfx_kthread+0x10/0x10 [ 374.321905][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.327164][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.332393][ T31] ? __pfx_kthread+0x10/0x10 [ 374.337005][ T31] ret_from_fork+0x3fc/0x770 [ 374.341579][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 374.346722][ T31] ? __switch_to_asm+0x39/0x70 [ 374.351488][ T31] ? __switch_to_asm+0x33/0x70 [ 374.356277][ T31] ? __pfx_kthread+0x10/0x10 [ 374.360883][ T31] ret_from_fork_asm+0x1a/0x30 [ 374.365755][ T31] [ 374.368826][ T31] INFO: task kworker/1:5:5953 blocked for more than 143 seconds. [ 374.376603][ T31] Not tainted syzkaller #0 [ 374.381578][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.390462][ T31] task:kworker/1:5 state:D stack:23448 pid:5953 tgid:5953 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 374.402710][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 374.409547][ T31] Call Trace: [ 374.412856][ T31] [ 374.415800][ T31] __schedule+0x1798/0x4cc0 [ 374.420300][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 374.425755][ T31] ? __pfx___schedule+0x10/0x10 [ 374.430623][ T31] ? schedule+0x91/0x360 [ 374.434851][ T31] schedule+0x165/0x360 [ 374.439022][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.444493][ T31] __mutex_lock+0x7e6/0x1350 [ 374.449154][ T31] ? __mutex_lock+0x5bb/0x1350 [ 374.453971][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 374.460231][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.465278][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 374.471051][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 374.478178][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 374.484266][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 374.490008][ T31] process_scheduled_works+0xae1/0x17b0 [ 374.495582][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.501557][ T31] worker_thread+0x8a0/0xda0 [ 374.506170][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 374.512506][ T31] ? __kthread_parkme+0x7b/0x200 [ 374.517501][ T31] kthread+0x70e/0x8a0 [ 374.521578][ T31] ? __pfx_worker_thread+0x10/0x10 [ 374.526732][ T31] ? __pfx_kthread+0x10/0x10 [ 374.531321][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.536571][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.541771][ T31] ? __pfx_kthread+0x10/0x10 [ 374.546405][ T31] ret_from_fork+0x3fc/0x770 [ 374.550994][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 374.556140][ T31] ? __switch_to_asm+0x39/0x70 [ 374.560929][ T31] ? __switch_to_asm+0x33/0x70 [ 374.565722][ T31] ? __pfx_kthread+0x10/0x10 [ 374.570342][ T31] ret_from_fork_asm+0x1a/0x30 [ 374.575163][ T31] [ 374.578208][ T31] INFO: task syz.0.1516:10558 blocked for more than 143 seconds. [ 374.586060][ T31] Not tainted syzkaller #0 [ 374.591000][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.599736][ T31] task:syz.0.1516 state:D stack:26280 pid:10558 tgid:10556 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 374.611699][ T31] Call Trace: [ 374.615017][ T31] [ 374.617957][ T31] __schedule+0x1798/0x4cc0 [ 374.622474][ T31] ? validate_chain+0x897/0x2140 [ 374.627495][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 374.633395][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.638657][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.643527][ T31] ? __pfx___schedule+0x10/0x10 [ 374.648571][ T31] ? schedule+0x91/0x360 [ 374.652849][ T31] schedule+0x165/0x360 [ 374.657072][ T31] schedule_timeout+0x9a/0x270 [ 374.661848][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 374.667253][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.672440][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.677656][ T31] ? wait_for_completion+0x267/0x5d0 [ 374.682950][ T31] wait_for_completion+0x2bf/0x5d0 [ 374.688086][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 374.693711][ T31] ? __flush_work+0xd2/0xbc0 [ 374.698315][ T31] ? __flush_work+0xd2/0xbc0 [ 374.702905][ T31] __flush_work+0x9b9/0xbc0 [ 374.707464][ T31] ? __flush_work+0xd2/0xbc0 [ 374.712041][ T31] ? __pfx___flush_work+0x10/0x10 [ 374.717097][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 374.722390][ T31] ? __pfx___cancel_work+0x10/0x10 [ 374.727522][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 374.733145][ T31] __cancel_work_sync+0xbe/0x110 [ 374.738099][ T31] rfkill_unregister+0x92/0x220 [ 374.742958][ T31] nfc_unregister_device+0x96/0x2a0 [ 374.748285][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 374.754018][ T31] virtual_ncidev_close+0x56/0x90 [ 374.759071][ T31] __fput+0x449/0xa70 [ 374.763068][ T31] fput_close_sync+0x119/0x200 [ 374.767854][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 374.773134][ T31] __x64_sys_close+0x7f/0x110 [ 374.777866][ T31] do_syscall_64+0xfa/0x3b0 [ 374.782372][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.787619][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.793670][ T31] ? clear_bhb_loop+0x60/0xb0 [ 374.798378][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.804326][ T31] RIP: 0033:0x7f227898ebe9 [ 374.808766][ T31] RSP: 002b:00007f22798e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 374.817219][ T31] RAX: ffffffffffffffda RBX: 00007f2278bc5fa0 RCX: 00007f227898ebe9 [ 374.825248][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 374.833220][ T31] RBP: 00007f2278a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 374.841226][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.849209][ T31] R13: 00007f2278bc6038 R14: 00007f2278bc5fa0 R15: 00007ffd5a511378 [ 374.857246][ T31] [ 374.860320][ T31] INFO: task syz.4.1521:10580 blocked for more than 144 seconds. [ 374.871146][ T31] Not tainted syzkaller #0 [ 374.876931][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.885681][ T31] task:syz.4.1521 state:D stack:26440 pid:10580 tgid:10576 ppid:5879 task_flags:0x400140 flags:0x00004004 [ 374.897663][ T31] Call Trace: [ 374.900955][ T31] [ 374.903895][ T31] __schedule+0x1798/0x4cc0 [ 374.908452][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.913300][ T31] ? __lock_acquire+0xab9/0xd20 [ 374.918191][ T31] ? __pfx___schedule+0x10/0x10 [ 374.923056][ T31] ? schedule+0x91/0x360 [ 374.927326][ T31] schedule+0x165/0x360 [ 374.931477][ T31] schedule_preempt_disabled+0x13/0x30 [ 374.936989][ T31] __mutex_lock+0x7e6/0x1350 [ 374.941600][ T31] ? __mutex_lock+0x5bb/0x1350 [ 374.946400][ T31] ? rfkill_register+0x37/0x8e0 [ 374.951245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 374.956290][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 374.961671][ T31] ? device_initialize+0x24b/0x440 [ 374.966821][ T31] rfkill_register+0x37/0x8e0 [ 374.971492][ T31] nfc_register_device+0x14a/0x320 [ 374.976642][ T31] nci_register_device+0x87f/0x9d0 [ 374.981786][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 374.987436][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 374.992708][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 374.998110][ T31] virtual_ncidev_open+0x129/0x1a0 [ 375.003228][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 375.008907][ T31] misc_open+0x2bc/0x330 [ 375.013155][ T31] chrdev_open+0x4cc/0x5e0 [ 375.017600][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.022556][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 375.028926][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.033865][ T31] do_dentry_open+0x953/0x13f0 [ 375.038704][ T31] vfs_open+0x3b/0x340 [ 375.042779][ T31] ? path_openat+0x2ecd/0x3830 [ 375.047562][ T31] path_openat+0x2ee5/0x3830 [ 375.052136][ T31] ? arch_stack_walk+0xfc/0x150 [ 375.057029][ T31] ? stack_depot_save_flags+0x40/0x860 [ 375.062503][ T31] ? __pfx_path_openat+0x10/0x10 [ 375.067454][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.073529][ T31] do_filp_open+0x1fa/0x410 [ 375.078070][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.082965][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 375.088020][ T31] ? _raw_spin_unlock+0x28/0x50 [ 375.092862][ T31] ? alloc_fd+0x64c/0x6c0 [ 375.097250][ T31] do_sys_openat2+0x121/0x1c0 [ 375.101943][ T31] ? __se_sys_futex+0x36f/0x400 [ 375.106819][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.112004][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.116814][ T31] __x64_sys_openat+0x138/0x170 [ 375.121669][ T31] do_syscall_64+0xfa/0x3b0 [ 375.126812][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.132020][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.138101][ T31] ? clear_bhb_loop+0x60/0xb0 [ 375.142783][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.148729][ T31] RIP: 0033:0x7f5b5818ebe9 [ 375.153142][ T31] RSP: 002b:00007f5b563f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.161599][ T31] RAX: ffffffffffffffda RBX: 00007f5b583c6090 RCX: 00007f5b5818ebe9 [ 375.169590][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 375.177593][ T31] RBP: 00007f5b58211e19 R08: 0000000000000000 R09: 0000000000000000 [ 375.185620][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.193587][ T31] R13: 00007f5b583c6128 R14: 00007f5b583c6090 R15: 00007ffcb43bdbf8 [ 375.201618][ T31] [ 375.204647][ T31] INFO: task syz.2.1547:10651 blocked for more than 144 seconds. [ 375.212399][ T31] Not tainted syzkaller #0 [ 375.217379][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.226086][ T31] task:syz.2.1547 state:D stack:28328 pid:10651 tgid:10649 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 375.238030][ T31] Call Trace: [ 375.241304][ T31] [ 375.244234][ T31] __schedule+0x1798/0x4cc0 [ 375.248751][ T31] ? kasan_save_free_info+0x46/0x50 [ 375.253968][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.258910][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.263776][ T31] ? __pfx___schedule+0x10/0x10 [ 375.268743][ T31] ? schedule+0x91/0x360 [ 375.273008][ T31] schedule+0x165/0x360 [ 375.277805][ T31] schedule_preempt_disabled+0x13/0x30 [ 375.283276][ T31] __mutex_lock+0x7e6/0x1350 [ 375.287924][ T31] ? __mutex_lock+0x5bb/0x1350 [ 375.292684][ T31] ? misc_open+0x51/0x330 [ 375.297104][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 375.302139][ T31] misc_open+0x51/0x330 [ 375.306456][ T31] chrdev_open+0x4cc/0x5e0 [ 375.310883][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.315864][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 375.322187][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.327152][ T31] do_dentry_open+0x953/0x13f0 [ 375.331924][ T31] vfs_open+0x3b/0x340 [ 375.336005][ T31] ? path_openat+0x2ecd/0x3830 [ 375.340766][ T31] path_openat+0x2ee5/0x3830 [ 375.345405][ T31] ? arch_stack_walk+0xfc/0x150 [ 375.350289][ T31] ? stack_depot_save_flags+0x40/0x860 [ 375.356257][ T31] ? __pfx_path_openat+0x10/0x10 [ 375.361207][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.367371][ T31] do_filp_open+0x1fa/0x410 [ 375.371882][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.376802][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 375.381843][ T31] ? _raw_spin_unlock+0x28/0x50 [ 375.386817][ T31] ? alloc_fd+0x64c/0x6c0 [ 375.391170][ T31] do_sys_openat2+0x121/0x1c0 [ 375.395989][ T31] ? __se_sys_futex+0x36f/0x400 [ 375.400847][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.406261][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.411027][ T31] __x64_sys_openat+0x138/0x170 [ 375.416020][ T31] do_syscall_64+0xfa/0x3b0 [ 375.420536][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.425869][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.431947][ T31] ? clear_bhb_loop+0x60/0xb0 [ 375.436808][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.442709][ T31] RIP: 0033:0x7fe65758ebe9 [ 375.447207][ T31] RSP: 002b:00007fe6583f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.455734][ T31] RAX: ffffffffffffffda RBX: 00007fe6577c6090 RCX: 00007fe65758ebe9 [ 375.463710][ T31] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 375.471711][ T31] RBP: 00007fe657611e19 R08: 0000000000000000 R09: 0000000000000000 [ 375.479713][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.487720][ T31] R13: 00007fe6577c6128 R14: 00007fe6577c6090 R15: 00007ffec9a2a628 [ 375.495803][ T31] [ 375.498837][ T31] INFO: task syz.3.1550:10662 blocked for more than 144 seconds. [ 375.506740][ T31] Not tainted syzkaller #0 [ 375.511677][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.521823][ T31] task:syz.3.1550 state:D stack:28328 pid:10662 tgid:10659 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 375.533849][ T31] Call Trace: [ 375.537276][ T31] [ 375.540211][ T31] __schedule+0x1798/0x4cc0 [ 375.544725][ T31] ? kasan_save_free_info+0x46/0x50 [ 375.550154][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.555109][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.559971][ T31] ? __pfx___schedule+0x10/0x10 [ 375.564820][ T31] ? schedule+0x91/0x360 [ 375.569174][ T31] schedule+0x165/0x360 [ 375.573344][ T31] schedule_preempt_disabled+0x13/0x30 [ 375.579062][ T31] __mutex_lock+0x7e6/0x1350 [ 375.583640][ T31] ? __mutex_lock+0x5bb/0x1350 [ 375.588623][ T31] ? misc_open+0x51/0x330 [ 375.592966][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 375.599258][ T31] misc_open+0x51/0x330 [ 375.603405][ T31] chrdev_open+0x4cc/0x5e0 [ 375.608021][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.612961][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 375.619378][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.624330][ T31] do_dentry_open+0x953/0x13f0 [ 375.629145][ T31] vfs_open+0x3b/0x340 [ 375.633196][ T31] ? path_openat+0x2ecd/0x3830 [ 375.638105][ T31] path_openat+0x2ee5/0x3830 [ 375.642679][ T31] ? arch_stack_walk+0xfc/0x150 [ 375.647656][ T31] ? stack_depot_save_flags+0x40/0x860 [ 375.653131][ T31] ? __pfx_path_openat+0x10/0x10 [ 375.658095][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.664152][ T31] do_filp_open+0x1fa/0x410 [ 375.668920][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.673775][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 375.678911][ T31] ? _raw_spin_unlock+0x28/0x50 [ 375.683770][ T31] ? alloc_fd+0x64c/0x6c0 [ 375.688249][ T31] do_sys_openat2+0x121/0x1c0 [ 375.692913][ T31] ? __se_sys_futex+0x36f/0x400 [ 375.698064][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.703265][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.708066][ T31] __x64_sys_openat+0x138/0x170 [ 375.712903][ T31] do_syscall_64+0xfa/0x3b0 [ 375.717441][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.722627][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.728838][ T31] ? clear_bhb_loop+0x60/0xb0 [ 375.733500][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.739401][ T31] RIP: 0033:0x7f4c2898ebe9 [ 375.743794][ T31] RSP: 002b:00007f4c29760038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.752236][ T31] RAX: ffffffffffffffda RBX: 00007f4c28bc5fa0 RCX: 00007f4c2898ebe9 [ 375.760433][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 375.768437][ T31] RBP: 00007f4c28a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 375.776438][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.784411][ T31] R13: 00007f4c28bc6038 R14: 00007f4c28bc5fa0 R15: 00007fff45e28958 [ 375.792767][ T31] [ 375.796057][ T31] INFO: task syz.3.1550:10665 blocked for more than 145 seconds. [ 375.803825][ T31] Not tainted syzkaller #0 [ 375.808943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.817883][ T31] task:syz.3.1550 state:D stack:28328 pid:10665 tgid:10659 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 375.829823][ T31] Call Trace: [ 375.833087][ T31] [ 375.836580][ T31] __schedule+0x1798/0x4cc0 [ 375.841101][ T31] ? kasan_save_free_info+0x46/0x50 [ 375.846469][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.851330][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.856192][ T31] ? __pfx___schedule+0x10/0x10 [ 375.861035][ T31] ? schedule+0x91/0x360 [ 375.865316][ T31] schedule+0x165/0x360 [ 375.869472][ T31] schedule_preempt_disabled+0x13/0x30 [ 375.874912][ T31] __mutex_lock+0x7e6/0x1350 [ 375.879634][ T31] ? __mutex_lock+0x5bb/0x1350 [ 375.884379][ T31] ? misc_open+0x51/0x330 [ 375.888753][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 375.893767][ T31] misc_open+0x51/0x330 [ 375.897975][ T31] chrdev_open+0x4cc/0x5e0 [ 375.902406][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.907725][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 375.914068][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 375.919200][ T31] do_dentry_open+0x953/0x13f0 [ 375.923983][ T31] vfs_open+0x3b/0x340 [ 375.928115][ T31] ? path_openat+0x2ecd/0x3830 [ 375.932889][ T31] path_openat+0x2ee5/0x3830 [ 375.937765][ T31] ? arch_stack_walk+0xfc/0x150 [ 375.942622][ T31] ? stack_depot_save_flags+0x40/0x860 [ 375.948126][ T31] ? __pfx_path_openat+0x10/0x10 [ 375.953052][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.959165][ T31] do_filp_open+0x1fa/0x410 [ 375.963654][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.968658][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 375.973681][ T31] ? _raw_spin_unlock+0x28/0x50 [ 375.978562][ T31] ? alloc_fd+0x64c/0x6c0 [ 375.982883][ T31] do_sys_openat2+0x121/0x1c0 [ 375.987581][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.992763][ T31] ? exc_page_fault+0x76/0xf0 [ 375.997849][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 376.003149][ T31] __x64_sys_openat+0x138/0x170 [ 376.009382][ T31] do_syscall_64+0xfa/0x3b0 [ 376.013904][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.019318][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.025535][ T31] ? clear_bhb_loop+0x60/0xb0 [ 376.030218][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.036205][ T31] RIP: 0033:0x7f4c2898ebe9 [ 376.040621][ T31] RSP: 002b:00007f4c2971e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 376.049163][ T31] RAX: ffffffffffffffda RBX: 00007f4c28bc6180 RCX: 00007f4c2898ebe9 [ 376.057292][ T31] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 376.065501][ T31] RBP: 00007f4c28a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 376.073487][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.081505][ T31] R13: 00007f4c28bc6218 R14: 00007f4c28bc6180 R15: 00007fff45e28958 [ 376.089579][ T31] [ 376.092617][ T31] INFO: task syz.1.1556:10682 blocked for more than 145 seconds. [ 376.100431][ T31] Not tainted syzkaller #0 [ 376.105531][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.114194][ T31] task:syz.1.1556 state:D stack:26632 pid:10682 tgid:10680 ppid:5875 task_flags:0x400040 flags:0x00004004 [ 376.126893][ T31] Call Trace: [ 376.130196][ T31] [ 376.133132][ T31] __schedule+0x1798/0x4cc0 [ 376.137957][ T31] ? kasan_save_free_info+0x46/0x50 [ 376.143172][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.148082][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.152941][ T31] ? __pfx___schedule+0x10/0x10 [ 376.157852][ T31] ? schedule+0x91/0x360 [ 376.162104][ T31] schedule+0x165/0x360 [ 376.166272][ T31] schedule_preempt_disabled+0x13/0x30 [ 376.171716][ T31] __mutex_lock+0x7e6/0x1350 [ 376.176405][ T31] ? __mutex_lock+0x5bb/0x1350 [ 376.181166][ T31] ? misc_open+0x51/0x330 [ 376.185532][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 376.190569][ T31] misc_open+0x51/0x330 [ 376.194710][ T31] chrdev_open+0x4cc/0x5e0 [ 376.199160][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 376.204088][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 376.210441][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 376.215485][ T31] do_dentry_open+0x953/0x13f0 [ 376.220271][ T31] vfs_open+0x3b/0x340 [ 376.224320][ T31] ? path_openat+0x2ecd/0x3830 [ 376.229108][ T31] path_openat+0x2ee5/0x3830 [ 376.233683][ T31] ? arch_stack_walk+0xfc/0x150 [ 376.238603][ T31] ? stack_depot_save_flags+0x40/0x860 [ 376.244085][ T31] ? __pfx_path_openat+0x10/0x10 [ 376.249057][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.255272][ T31] do_filp_open+0x1fa/0x410 [ 376.259786][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.264627][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 376.269710][ T31] ? _raw_spin_unlock+0x28/0x50 [ 376.274547][ T31] ? alloc_fd+0x64c/0x6c0 [ 376.278893][ T31] do_sys_openat2+0x121/0x1c0 [ 376.283558][ T31] ? __se_sys_futex+0x36f/0x400 [ 376.288415][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 376.293601][ T31] ? rcu_is_watching+0x15/0xb0 [ 376.298454][ T31] __x64_sys_openat+0x138/0x170 [ 376.303311][ T31] do_syscall_64+0xfa/0x3b0 [ 376.308227][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.314296][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.320906][ T31] ? clear_bhb_loop+0x60/0xb0 [ 376.325645][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.331523][ T31] RIP: 0033:0x7f3f2838ebe9 [ 376.336145][ T31] RSP: 002b:00007f3f291ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 376.344560][ T31] RAX: ffffffffffffffda RBX: 00007f3f285c6090 RCX: 00007f3f2838ebe9 [ 376.352690][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 376.360781][ T31] RBP: 00007f3f28411e19 R08: 0000000000000000 R09: 0000000000000000 [ 376.368823][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.376901][ T31] R13: 00007f3f285c6128 R14: 00007f3f285c6090 R15: 00007ffc8c1d1c88 [ 376.385066][ T31] [ 376.388113][ T31] [ 376.388113][ T31] Showing all locks held in the system: [ 376.396313][ T31] 1 lock held by khungtaskd/31: [ 376.401169][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 376.411118][ T31] 2 locks held by getty/5632: [ 376.415955][ T31] #0: ffff888033f3f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 376.425789][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 376.435952][ T31] 4 locks held by kworker/1:4/5938: [ 376.441167][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.452272][ T31] #1: ffffc90004ccfbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.464713][ T31] #2: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 376.474765][ T31] #3: ffff88805b10e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 376.484493][ T31] 3 locks held by kworker/1:5/5953: [ 376.489729][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.500763][ T31] #1: ffffc90004d8fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.514278][ T31] #2: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 376.525652][ T31] 1 lock held by syz.0.1516/10558: [ 376.530757][ T31] #0: ffff88805b10e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 376.540528][ T31] 3 locks held by syz.4.1521/10580: [ 376.545757][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.554216][ T31] #1: ffff888059e7d100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 376.563829][ T31] #2: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 376.573847][ T31] 1 lock held by syz.2.1547/10651: [ 376.578981][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.587478][ T31] 1 lock held by syz.3.1550/10662: [ 376.592585][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.601055][ T31] 1 lock held by syz.3.1550/10665: [ 376.606176][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.614647][ T31] 1 lock held by syz.1.1556/10682: [ 376.619769][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.628239][ T31] 1 lock held by syz-executor/10686: [ 376.633531][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.642148][ T31] 1 lock held by syz-executor/10688: [ 376.647660][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.656168][ T31] 1 lock held by syz-executor/10693: [ 376.661431][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.669994][ T31] 1 lock held by syz-executor/10694: [ 376.675315][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.683786][ T31] 1 lock held by syz-executor/10695: [ 376.689101][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.697625][ T31] 1 lock held by syz-executor/10701: [ 376.702908][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.711357][ T31] 1 lock held by syz-executor/10702: [ 376.716700][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.725209][ T31] 1 lock held by syz-executor/10704: [ 376.730486][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.738938][ T31] 1 lock held by syz-executor/10707: [ 376.744209][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.752666][ T31] 1 lock held by syz-executor/10708: [ 376.757963][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.766424][ T31] 1 lock held by syz-executor/10716: [ 376.771699][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.780157][ T31] 1 lock held by syz-executor/10717: [ 376.785461][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.793917][ T31] 1 lock held by syz-executor/10719: [ 376.799251][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.807806][ T31] 1 lock held by syz-executor/10722: [ 376.813082][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.821591][ T31] 1 lock held by syz-executor/10723: [ 376.826905][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 376.835428][ T31] [ 376.837747][ T31] ============================================= [ 376.837747][ T31] [ 376.846312][ T31] NMI backtrace for cpu 0 [ 376.846329][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 376.846340][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.846346][ T31] Call Trace: [ 376.846350][ T31] [ 376.846356][ T31] dump_stack_lvl+0x189/0x250 [ 376.846379][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.846390][ T31] ? __pfx__printk+0x10/0x10 [ 376.846410][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 376.846424][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 376.846438][ T31] ? __pfx__printk+0x10/0x10 [ 376.846453][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 376.846470][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 376.846484][ T31] watchdog+0xf93/0xfe0 [ 376.846500][ T31] ? watchdog+0x1de/0xfe0 [ 376.846516][ T31] kthread+0x70e/0x8a0 [ 376.846530][ T31] ? __pfx_watchdog+0x10/0x10 [ 376.846543][ T31] ? __pfx_kthread+0x10/0x10 [ 376.846556][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.846570][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.846583][ T31] ? __pfx_kthread+0x10/0x10 [ 376.846595][ T31] ret_from_fork+0x3fc/0x770 [ 376.846607][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.846619][ T31] ? __switch_to_asm+0x39/0x70 [ 376.846631][ T31] ? __switch_to_asm+0x33/0x70 [ 376.846642][ T31] ? __pfx_kthread+0x10/0x10 [ 376.846654][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.846674][ T31] [ 376.846678][ T31] Sending NMI from CPU 0 to CPUs 1: [ 376.991681][ C1] NMI backtrace for cpu 1 [ 376.991698][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 376.991714][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.991724][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 376.991748][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 37 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 376.991761][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 376.991776][ C1] RAX: a86702a052a8e300 RBX: ffffffff819683f8 RCX: a86702a052a8e300 [ 376.991788][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 376.991799][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 376.991810][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa39730 [ 376.991822][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 376.991832][ C1] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 376.991845][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.991856][ C1] CR2: 0000563b062ae000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 376.991871][ C1] Call Trace: [ 376.991877][ C1] [ 376.991883][ C1] default_idle+0x13/0x20 [ 376.991898][ C1] default_idle_call+0x74/0xb0 [ 376.991915][ C1] do_idle+0x1e8/0x510 [ 376.991933][ C1] ? __pfx_do_idle+0x10/0x10 [ 376.991946][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.991974][ C1] cpu_startup_entry+0x44/0x60 [ 376.991988][ C1] start_secondary+0x101/0x110 [ 376.992008][ C1] common_startup_64+0x13e/0x147 [ 376.992035][ C1] [ 376.992957][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 377.163830][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 377.172920][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.182959][ T31] Call Trace: [ 377.186227][ T31] [ 377.189145][ T31] dump_stack_lvl+0x99/0x250 [ 377.193721][ T31] ? __asan_memcpy+0x40/0x70 [ 377.198295][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.203481][ T31] ? __pfx__printk+0x10/0x10 [ 377.208067][ T31] vpanic+0x281/0x750 [ 377.212037][ T31] ? __pfx_vpanic+0x10/0x10 [ 377.216524][ T31] ? preempt_schedule+0xae/0xc0 [ 377.221365][ T31] ? preempt_schedule_common+0x83/0xd0 [ 377.226819][ T31] panic+0xb9/0xc0 [ 377.230527][ T31] ? __pfx_panic+0x10/0x10 [ 377.234927][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 377.240292][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 377.246434][ T31] watchdog+0xfd2/0xfe0 [ 377.250583][ T31] ? watchdog+0x1de/0xfe0 [ 377.254925][ T31] kthread+0x70e/0x8a0 [ 377.258988][ T31] ? __pfx_watchdog+0x10/0x10 [ 377.263651][ T31] ? __pfx_kthread+0x10/0x10 [ 377.268232][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.273419][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.278605][ T31] ? __pfx_kthread+0x10/0x10 [ 377.283186][ T31] ret_from_fork+0x3fc/0x770 [ 377.287766][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 377.292865][ T31] ? __switch_to_asm+0x39/0x70 [ 377.297611][ T31] ? __switch_to_asm+0x33/0x70 [ 377.302385][ T31] ? __pfx_kthread+0x10/0x10 [ 377.306962][ T31] ret_from_fork_asm+0x1a/0x30 [ 377.311725][ T31] [ 377.314984][ T31] Kernel Offset: disabled [ 377.319295][ T31] Rebooting in 86400 seconds..