last executing test programs: 4m14.885214325s ago: executing program 4 (id=2741): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000009700060000071a80010061cc", 0x10) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x44000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000dcdf251700000008000300", @ANYRES32=r6, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038006000100000000080800020023e8ffff05000300feff00000800010000000000050002"], 0x64}}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001fff000000000000000000000000850a36c56bbd3efb8b9b8a4a506e2b5410b472e2d23b1f0ce6748428667678dc69417de92be4e8be42bee6f2f74a7b1a4e6871148399ed008a410c9eeedda7f45eee19f7ae0e2d44af8cef3f41b2aaa17a1052af64d6dc", @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028008000100", @ANYRES32=r7, @ANYBLOB="08000700ac141428"], 0x44}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) 4m14.66860831s ago: executing program 4 (id=2746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x95}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x3, 0x62, &(0x7f00000001c0)=""/98, 0x24fa2a31693776f3, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x6, 0x0, 0x68}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[r0, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x4, 0x3, 0x10, 0xb}, {0x2, 0x3, 0xe}, {0x4, 0x3, 0x10, 0x2}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x1d, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, 0xffffffffffffffff, 0x24, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r2}}, 0x1c) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32], 0x40}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x24004044) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4) (rerun: 32) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0x27, 0x0, 0x0, @void, @value=r1}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000001040), r0) (rerun: 32) 4m14.417133882s ago: executing program 4 (id=2751): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0x13, 0x3169, 0x9, 0x1, 0x6, 0x9, 0x8, 0x2, 0x8000fff, 0x10000, 0x4, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5, 0x1, 0x2400, 0xf529, 0x9, 0xede, 0x80000000}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000000000000020020000004c000480240001800b0001001190736f636b657400001400028008000240000000030800030000000049240001800b0001007470726f787900001400028008000140000000020800034000000010140000001100010000000000000000000a00"], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x40880) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x2, 0x0}}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000680)={0x18, 0x2, {0x0, @empty}}, 0x1e) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000440)="330520000a00160006007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae76", 0x2a, 0x801, &(0x7f0000000000)={0x11, 0x8, r7, 0x1, 0x8, 0x6, @local}, 0x14) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x80000) sendto$inet(r8, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r8, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="100a06000908010014001a80100004800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 4m14.009872054s ago: executing program 4 (id=2757): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x3, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x1}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x6}}, @fwd={0x2}, @struct={0x5, 0x4, 0x0, 0x4, 0x0, 0x5, [{0x4, 0x3, 0x3}, {0x9, 0x0, 0x257e}, {0xf, 0x4, 0x9}, {0x4, 0x5, 0x3}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x1, 0x4}]}, @struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x9, [{0xb, 0x5, 0x7}, {0xc, 0x5, 0x793}, {0x4, 0x5, 0x40000000}]}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/93, 0xdf, 0x5d, 0x0, 0xffffff80}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00'}) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) 4m13.776209415s ago: executing program 4 (id=2762): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x4, 0x0, 0x5}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r1, 0x940, 0x22265}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8014) 4m13.539965081s ago: executing program 4 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f00000008c0)="01b4945c76f43bf9e6e466072364b370a2e1ac03", 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 4m13.252910144s ago: executing program 32 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f00000008c0)="01b4945c76f43bf9e6e466072364b370a2e1ac03", 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 19.456169849s ago: executing program 2 (id=5270): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 19.377529142s ago: executing program 2 (id=5271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002940)={&(0x7f00000000c0)={0x2840, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x157}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x0, 0x2, 0xb, 0x8, 0x6]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x62}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8]}]}, @NL80211_ATTR_CSA_IES={0x2790, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x32, 0x101, 0x4, 0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x0, 0x5, 0xfff, 0xa5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x7db, 0x1]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x2f, 0x80, [@ibss={0x6, 0x2, 0xfc00}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0xa8, 0xff, @device_a, 0x8, 0xfff, 0x26df4153}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xdb}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@link_id={0x65, 0x12, {@random="c701f898fe78", @device_a, @broadcast}}]}, @NL80211_ATTR_PROBE_RESP={0x2f7, 0x91, "fe9d082ad6f9c570d7754fa2e1559c46686026e9fc6e6000fd5e4d55c05fdf85cac9491eab132c2f65cd30c8cd14ce4b0b3cb0055156cd788a971c22d7f0f5a1726ea0b9cfed09a7acc63e7fbe5bbe7a0641afb338f9f867f6ff1259436fc32d36401a56a8c16bb0611d248aa6a889840bb424eef2c4d6462fe20ddad7fe3259297f302a8d20ecfb4ca073ca6475182a81adcc5817ea27de846ecfbca63410bf6fd4e5ac3d54a1df44e04243b97da3388bd8ce8faa24bd2a27016067ce7a4bed8d09f42d75905f3c7786c5bc1a21c63556377470d7b7c7878dbeeb15a2d9ed87cb7007ae2c4688007eb26124158a7ac176714e9bfb8af49acf6e55504a8d0145318dab2c96b9656848baeacbfc10180956a217f09c60d548ab4fc9b686389984dde74efbf614713451052b220a9a6fe436feda4640f0bb8d66e41607cebff4a6605306650f8cc13688748da2841d1fa528abe70f1413c41c35fef1fcfbc61e11ecbba0e3fbf965b1a94579723687c3ff432a3ec9b003ff0c4e15709ebef82d4c05cdf29c2d1dce82ed63cc38950ee457e7e307dc2051b83fc12ca8674dd481a7362bd2eb813d51df92538587b3cfd22b0d6499fc7747b6d858c38fbfcb7ceb7decc2ca6aa8a72be406f9aba32dab3491faf0196277531abceb565cdad918e41d045c18258daaf8c28230f278844386d301fbc429fcbebb5665efde0136afda9ff195349fc1cafe4ba9bfa15a88e3826c27cee457bad1921ef6abfb1a029519d194054f9d299285224468a95bc34733e1b0c5074040f1f4036d4c3d2bfc6cf6aa16f527f2b34cd76cd26ffb9c072d01bba758ec04de06fe31524053df1a77bc1d4231d6bd08da839b9284a1d252970d867113a49c525bfa6210f79a3ad1160d8ec88c49e9dddd3364da7fde3db38d443988b5d243f3fb9658190986a3298bb056c6879cd6ca2af9640600ab67c30b4e88e9e6de0ae579a448dea5adc9f676fc086c28ba41bee3f717f57c4e36675500f73211b1bd2e7eee5bc614d383a25f055d102a1aa682644f665d5f20c050f24265cad1b5"}, @NL80211_ATTR_IE_PROBE_RESP={0x20, 0x7f, [@ht={0x2d, 0x1a, {0x2000, 0x2, 0x5, 0x0, {0xc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x6, 0x26, 0x10}}]}, @NL80211_ATTR_PROBE_RESP={0x823, 0x91, "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"}, @NL80211_ATTR_IE={0x2a0, 0x2a, [@perr={0x84, 0x134, {0x8c, 0x12, [{{}, @device_a, 0x6, @void, 0x2b}, {{0x0, 0x1}, @broadcast, 0x7b1f, @value=@broadcast, 0x3}, {{0x0, 0x1}, @device_b, 0xffffff81, @value=@device_b, 0x2}, {{}, @device_a, 0x6, @void, 0x39}, {{}, @device_a, 0xdef1, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0x6e3, @value=@broadcast, 0x12}, {{0x0, 0x1}, @device_b, 0x7, @value, 0x35}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x2}, {{0x0, 0x1}, @device_b, 0x81, @value=@device_b, 0x2f}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x13}, {{}, @broadcast, 0x3c2d161b, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x10, @value, 0x20}, {{0x0, 0x1}, @device_b, 0x54, @value, 0x25}, {{0x0, 0x1}, @device_a, 0x592c26d, @value, 0x13}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x19}, {{0x0, 0x1}, @device_b, 0x3937, @value=@device_b, 0x16}, {{}, @device_a, 0x80000000, @void, 0x15}, {{}, @broadcast, 0xc12, @void, 0x1e}]}}, @dsss={0x3, 0x1, 0x38}, @prep={0x83, 0x1f, {{}, 0x6, 0x9, @broadcast, 0x8, @void, 0x5, 0x3, @device_b}}, @mic={0x8c, 0x18, {0x210, "19a07ad29ddf", @long="6ca58c77bb93daba4be683be646e028a"}}, @random_vendor={0xdd, 0x9d, "4639832b19e38f59f64ef35d9495e7a2ffbeb6e8931f0732e442048118a151b217b10e6c35129a4ba3e5ccaae76e4e868a84adee2ef05c1fff60595cf803b2f97bdd002d420d39762dd89086e0ea507682aa1bed01b0632b0ac1351116a9d4dffce670ff46f485d7f780001e96dbeb7a0c305f7b2079eeacb3efc90f6fb1359a62e06a7fdc2681e435665bf206c23d5914b5168a9fea0710388f03af81"}, @random={0x5, 0x87, "bc4b515940cab944bec936a0af2c09f23286226fad225f8ed7f5f90a8718ee2c8246f2c61c325730a0ca150c2a65a95dc744e7cd3b83d0e248bff8deeef39ef192f8ff0f5f1f91142b10ce949baf29049e784affccdb4b0f0b670c0a91a88162e919df7a071e8775714977010f37fcf8dea4a1ff3be982ccebffc9b1fe6b3a238d8a3a7cf02826"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa8, 0x7f, [@peer_mgmt={0x75, 0x16, {0x0, 0x2, @void, @val=0x28, @val="16847384ebdbc3d163f88f7773980537"}}, @tim={0x5, 0x4b, {0x4, 0xef, 0x24, "176c4fa18c8b14f2480d04898ca2d0e713c9c6e76bcda7e0ba5b2730901b259c17887a4ec6b10a331675ca60b78f27b85244bdff7cb2260a1f115f960ccea4fcd29afbace41070a0"}}, @channel_switch={0x25, 0x3, {0x0, 0x8c, 0x1}}, @supported_rates, @prep={0x83, 0x1f, {{}, 0xfe, 0xad, @device_b, 0x101, @void, 0xa9, 0x3, @broadcast, 0xc}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x66, 0x2c, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xb8, 0x40}}, @gcr_ga={0xbd, 0x6, @broadcast}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x30, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x4}, 0x7, 0x10, @broadcast, 0x1, 0x3, 0x7fff80}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xb1, 0x4}}, @ibss={0x6, 0x2, 0x6}, @dsss={0x3, 0x1, 0x9d}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x5b1, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x10b8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x22, 0x2, "6be4d9b69469d04d63881375cd3788d9847fa843b320ebfd27e08ddaeafc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "f14ad3d582f7b9c26e9bcc8bbc3c716bdbc5ae7bca4e22eb540b26e63a0ab7ba82f259b8844fd73ac69933c3bbe79c077f7804d5576a187b4014a17ebec418e392240171eb2c599f428ee0e2dbab945321571f98386c667e8ea13e2e4101e404557073edc4be70c2e7774f11a2316274ae410c9b19200a092f901f6d7edca616a76bdf7f34e2c881655b2a2274f775b65c989137984166e0772051d3054e9eb741f71ad7914fe835962445ec4ae33690d71677aef9eface52249e4601d51b92a1482a545abd912e262578d29a7b3a10b7be2405ee83995af95b2020a804c09e0f8cd4c3888d586f2f53e39d1fbfc24662c1109462f9b86c4928c0e5b5375060d5c196860610c4227e9796a8cb8f51db8e9bee1e9f658535074d7fe0b0786f0ec24efcf83b15cd7451d6213091b0738849c0159f3f194557e54435eae4cef2fc7317c77a243445b689ea95f14c50aa555581f437e57d358892b66a55cfb941ccdefe8a712440e69dff25208e24e308a9bf4cd7803d7a1d5c469d434db236075e72c1e96f567fe8b2b162f30f01507f84e6093aa9cd4f739e0741c14e2b97fb0e8ab5763f9fdffd7d7a6fb388dce667715f96049ccc0262c7a892ae2c805e2a5fab56cf1b1c5bfd5527a6de2b04c9434ffe9225fca02bb8e260a44ab154b0f6c931656332bde85f8795b24e0ecc2600d3a2677b622687984d75767c58f894fbc1da545545673a5967abf3779242a59298c4e25093cd24886d1a649ed276d8714ecd0591e6bbb208e3bf05f2f2c6a9c9f8fb35a71eeee95368eda8733616ca41bae51d48a3377713d9932742e5bd52c7d0ab22e40b032ae43a6c9645a2a7c0c5696a02cf5c5751196c625f7f262996d00f7929e64716167fabeea183843ed06eb0d8d4d85fc53afdb9b5d9c98efc2bf67f55f30f3ed607f7acc40b8aeeeb52eea8b72620495c92d977b6e54fef08d4dd3d140caef9b65637d6678e52a7a8eb26bcc866c4e0e8b30e814f1d93b85f96756533bc1070ad1d0c904e29ada608df3aadc6bc9a293acca3df3823467200cc0c5c82ba88dcb6c44656f9aadf8e63b60184e31414f487250af1afb9d541073c0df93331df34d46208ab8c4a4979775e3843e0ef46bb516e42be929337295da0f9290ce11b707a450d023edf26ab078747d985c0092f9c475872bcc14582e5d900a47bf5b1bb9cefe35cf2640d082d1dc3ad9231b8fa1bc74d62c2033f113209ac43f548215ec1ec9620b9e2302f9e8895a24e7622115ce39ad1720fe22544a258b870ee7417791a92e30debc4ae4dff2879971d7d33731bce81875a0cc73f95a8443abb6e05c6922b6c3e214b1fa84aa1ac2bae7dd34aace436fb881c779aa194e6099ff7026af60f551e826b45fe56f4e8272d2b66f095cfcdf34128bf06886410b701665768be6abb2109616209fbca970208fa18bca431b0c6bd33ac64db27611af7b0e0f6e9eca3944dd655af218bb94ff25cfb80d1c720526a655e42ca9e36d616dbf6e70a40b362ed449bda446a2a9e6023c958c9cca2c48cede2c1186aea4101222fa73484cdf9391a4e27e19aeb08c14b28f5e6578f507a065fbdcfb6889ff2d5862ea43467c750d5b5f9a3586949973edd00dac04526acd4f6d9688180e7f585010ab05c7889e545f8ff965d4dd5b991ab9e8cf4360a50d1820115cfc39c8b18705e57462b17dd0cb497f4ff0246fa17c566d00e9dbbad4764a6885a1ad601f593f9ba48d2e87f1c4b57f9526dbad1efcc4d68afb53ee8116771f4d64aeb366c017ef83283c98e201401e5312b46d75ac2fa323611a060e86a46d728ee93b0f2a06ef47aa94f2954dc979b87efd7efd89994057b3bc1380635fc2496cf756072fa089d62055a00007e2d8d7864e3603016c39ae988d6b95f4557e6a0fce5273cda8daf20b65d940b51a8d29d4e0e65f5b954a2263477ce8a217a25dace1ce8062f8afe91e3c999f37dade6039767d6be26e46162c70afe8a2356e2dc555a5507a9121ddcff244d57ec8e11421750e115215853331939cf783bc2004ad93387752e9b71e9e69a17590e9fc4c3620555753447abba182e56ee4ebe3438f45a7858d9a1fcf0b87febdce5fd3c2a9890f8234287848bbae2caa460fda0b1d35c3ef968e6e04bbda0f3866f569a6e7d685869df2d3d79b9edd6556fb9aa297bd6a4ed115515ae6432eb7090b4e883548d01843d5d532b76215b90ef7e2c71817fdef2439f936a89be2c7e048ce11cbdec90c7638fd85b655672bf06f6919e2f6649c7a8c52e460a82482b6941227da2f5df3fe98ecf6ff7738140702cd033b845cf46fc934155ca825e24294305df2ac069d386f1522ef44e2ee846484c2ce9ae33dd95313524d5a45f8a5477c11d6ab57e2e6072dec0918c023018f4e90b83187310cc55ed112c52540d901d5ceb53aa8ea06b14e2f13a60906706ce464d5354dadb93e87c137179040cd7e206ad828b894569b46242176554d2b64e8ecd128e26092e02d3fd05a028c393f75aee879cedea87e5db16460e72859785266e0af880d8b82673589186fa8aed54a8bc7065ee6a43f163a36a117a5027290f03596672a57df7a62603f53d96e8e8d09a3c636f9b3fac4f489961df83fff9533bf7f448a2466bb26c24e37696c0fc27bcd506b10cb1db0b4ff67b7ab262407a011153f88faede0968bf10c85dd81ba4b01ba82e68daf20e7d16f29884204dd9c5448b3363ec24535778f45ead15c3b0a10049ee4a91301abdfb8f03a4e23b18be0281e258ac1f93951e358753d8eb923709e91e3c757e8c1188fadc7587b5f82af83ba0ae3b59b6c6cad4541e04fcc1edb53a02f1c0054b431e7ff33763cabe6bf7e79332577781616664bd3150c780961df3a347518135ed26d5185485944224221f020c75f9cfb1b06d6771155c488863507dc51063e09b86f8753949219dad06e8cec80c40f22c2355fe505d5353a7a44189c52cf2836108de99ae94999aa3e67b5cc8722ff7fcf99cf83eea9a67d0a4505e27df73d57c59fb48e6406b15939379e3d261c7896f72e1fc1b675ac3de9e22e835ed02097f9a0aa1a7dc049d363fea9a61f86e5c983b43709d01015a97b1e552a6f3b47fc8adfbb35593a751d0175a11871fcf76154043aa6ce614b8cbb3e1c1dbe77b8f8b089f85f780a92f4a7cc9200acfb6c44693e72f05b88d9512eb621f37af9d78ab04f9cc9a664119ab8bf907a822f52a10e76e0a57af24e82911760603a5363822ed7894d63649c313be91146fad3e92623f7ae2a861e27f95deb0cf6d2158fafa2250c46e3f6ba9abed4e3c01ad9c7752149b054d2b5fcf2038902e287c7e8319817828a4aeec206635ca5ab7d7f0ff990131922d95ef882230c455e4be4d364dfb6c128fb410f862c92539164e42dc77034476264af927860971e437c3d57ae380fd321334766e1d3510c8662d83281d64d7a19a90ac9ec999af75da1e37a6f60a0ad76086644d528c0a879902b61094ac24827441cb6436d6c866c3622b0f7c80caf61cad6025ca2fbc7160b9e0d43e9bd0fd6e0335693af2ab220b0cde23eb392c6b4f539252d9ae2ed5fb5c02e4e1af5396d25e16f229f57a43a8d84db325afeb02fc92c7e2eabaf3ceb22348db466874dc7dc1c870dd0ccccd89ee29502b6d1bf06a6e5a1d77c17f5f0ab6d82fb5de767ed96b01495ee5f03ffc16f8df85d217d26917e9bbc707dbc285a00ddfe97e4ea9897c3f824e69e911ac391dee166e198627b1e813ba3132c0cbee7e0ef6ab52ed27ec0ca96bc336ea497a2ede636f788dbf47e8962e6ed849f078b5f19e397f5d9f76882e026ecee5e568b0e430ebfe7646342b407544f677f7fa0624a0830239b1faee44e1b2ea22571ce8226a8fe50ad2ef676ef7b0ca9ad89aeb9a825e7cd66d67713eb3ed07e25e72c3606e494d88c962a06b99158d0d2a6959765f2ea9b97c50be2a14bef0d5c9afcbcb92dd62b93a89bfe7098406f153785e6303694a57f9014b83a6cc7cdfb62da2c3e3e5ee6c5d16e112fda63cc79d30a26fe4029c11a8f7f37cf8e9d0a6fe983f8334bf9b10d52a84acd547ed9862e13119b6f3dc6f719df012cd3d0ddf67cbd830cd621324efd34f5330df7e48beeadb802d9150c1f80a217de26b00aff224d97821576fc12c9385a886aa0f4897e5f180f2fe64c5a90f1708dece9cf0c67f0bdf830662240c7b96ee53dcb976bde65849f5628e2c1c25cc5d81399adb26453044200c9591fdd2e3510e06ebf070a9e95f35bf061b55dc06ed787994f26eae15df1b8f80901ad3c58e63d4b57e1fd19ad0d535fae81966016a05489b572b52105f706a061a4fe0ae00a62f4699e87fc06067c76fe70b05fde6cdd1eada537e77caf3ce6f56f5592715a3533ded8996f1e16fb4d35c7f82801c0598c837c47b649da9107deb654b4acd1b27bfdc02f18d213298466d7eec1cbe924f8b9670a0a466b9a206d8f24980dacdc10bbff2a0a72ea9323e80e6a8441c500dad0826e83b06fd3981cb205217a94f51ca0b66ca549f46a7c6393c2dece48e86da0b5f80b577530ac0dded92baee10aa8122a0c44ee54dd1bffb903bfdd5483cee65bfdbc46eb80ee8a5ddf439769ec40a66b9945426ef82f9cd7dfa7c4f2444f1357aaf884ccebe3cc5633e72355c40b3957b24afb4189add200692f1d7fd22ba9ad6c0c5dbccd3bc312c34b676befbb093513186b0d282a3c8053e258fc38051ada6c0a23af05cd242c66264e597987cc3754f090a1970a4ccce7687eb02bb359c504d07602abd3d9ccf1ffe293182a5e2912de1c3bc42d9ea3c23656f8c1bfd798bdecd100e955170f72ed32632a940ef0ecf03a7d003f9ffda4dcd37a73a90b1eda5748b0487ae8ba7d7cb41b29cd54a48d9581f19895b3ab313df10832008c893964d894ed1c89b53c0dab23c7c1f4cfc809a7c7b3f6a427bdda5882b1e79f8ee78f51c5750f6afcedf9f3eb4c685ad408b5be20018d0e0b00f721bd19f63fc8b931c857e5f54266103a2f2f9338d891b6c307b3b2373e5c47a374103f9417a0476f432ba7abed99bad7155a4b6a978712f1abb3e4affc856e89247b049d6d6d88185b6cd7814919af89f2396af80c257802fd7f9f678281edd5fed6f3c8adb618b2e2489aa00bfa09404ebbfb829456dfb2ddca615a54702c089f361cce9c144b17d622dc26d29caea241b8ed2a5e5e94c3f24d76e7c5c76e515a0f82d83946d8689f7663f6aff490163708ae5282a58df86e44fd7e42e1e27f3c0da8ad499b5ad66f13f8764c0760de0ea4832fc1bca10b77021954f3787707f7d01c8128ffd90f7542e72086c8bfcb8634926de7ca985a79e4e85e1ed4812fbef3c51cebc957b92492b81d3f132d7a8b17d9b9acac6e032533d449890444de83189d33edd19c0e383760c0161888f6847eb951be24e536c42047a765f159972c992931c5944459dc2ca26f0ddbc905f210bcaa0907b3cb87539b735829c0747c36897d50b71dfccfe8636bbdb568112bc3e22c20600113f36bf56ca0742a27bf21e7a52f01623c6eab05256c18bc94738ff22503af2cb625fe4c18a6257e069f79bd0804cb68b872f81b9b142ceebdabd3964e0f8e37680a3680afc2965d0ec662bc0717877604fb1918d74a33e1c412553707d75c7a76123441961a0e3db6d6d0645bc77ea8730b615730646666a96a22642b7215f0138c7581861e2ba59346fade9e8bc122e10ac25ed1189b51354ae8c01ac0795ed9aabc276bc870501f82be1865"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x17, 0x3, "4f5effc512ef024ada9102b6db44d5ec2e04e7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6a, 0x3, "58dfa6b436fb3930b1a453ea4d8378028406ce490379ddb9b07b0dd2ebc20b07fc73c2387b226c49ddda6864f0a3106f620f077a25b08220a1c80558dc226a58facd68cf443f9b17e3065a4c3f820a8b7e2d42f20eef535b02abdaa2e010782d5f938cc88822"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x1dd, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x3]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5e}]}, 0x2840}, 0x1, 0x0, 0x0, 0x40008}, 0x48014) r3 = accept4(r0, &(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000002a40)=0x80, 0x800) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002ac0), r0) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004041) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c00), r0) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x5c, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002d80), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r8, 0x8, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x60, 0x140b, 0x10, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008894}, 0x800) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x34, r9, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000003140)=[{r4, 0x100}, {r0, 0x20}, {r11, 0x208}, {r0, 0xb039}, {r0, 0x8001}, {r0, 0x100}, {r0, 0x4100}], 0x7, &(0x7f0000003180)={0x0, 0x989680}, &(0x7f00000031c0)={[0x100]}, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000003200), r7) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003280), r7) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x24, r12, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000035c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000003380)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000033c0)='GPL\x00', 0x4, 0xec, &(0x7f0000003400)=""/236, 0x40f00, 0x41, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2e656, 0xffffffffffffffff, 0x7, &(0x7f0000003500)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000003540)=[{0x2, 0x2, 0x2, 0xa}, {0x1, 0x1, 0x4, 0x2}, {0x4, 0x3, 0xa, 0x5}, {0x1, 0x4, 0xd, 0x1}, {0x1, 0x1, 0x3, 0x8}, {0x5, 0x5, 0xf, 0x1}, {0x3, 0x2, 0x2, 0x3}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000003680)=r13, 0x4) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000003780)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x14, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8050) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f00000037c0)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000038c0)={&(0x7f0000003840)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc6, 0x4b}}}}, [@NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044085) r14 = accept4$alg(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r14, &(0x7f0000005180)=[{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003940)="c590b6d42610b2c0f0912414febb39a32edb111c05531b7cfadfc4b0d167f8396cc611e92ececb934beb4581662e270fde2afa0cc5667053fe5d57f2d18fe18b9bd4d945d76e4a44ac0baa780b3893b30276871f85f3c2abbc3f8efac6f8c16d56cc2ade8045b2c5d228b1d84e381a57d4f59a1c439061bbcc57c9eaae6e399e187571c2876d46832f0ae2ee847c40dcf3ca3c71b41885c09764ec85e4ac7e25ef53581e857d1863ab194262df6a9d87822c2c271e8bd1ebab78d2801c255b9525e0f6d2cab614faae46d74b48fb34d388fd0331330e044df98b6e7427", 0xdd}, {&(0x7f0000003a40)="272c14b5c7eb7c8a818df3ef440c92c11f2b5d5f20943402d3a6254e9bcb9e6b2efdc1dba37cd5369e192aa12f75a6328b27d8331dd7", 0x36}, {&(0x7f0000003a80)="68d3ce185520e342c3d4c5652d7f6a2dc83d9a07f7f191fc78451c6ae0121650c06e2cf70cac67af773d6b84a7ca65d8014d4ddd73e30aebbbe99afb01ef7ae2baee4bf0b4ce2466d04808fbe45a5fd08950c72e", 0x54}], 0x3, 0x0, 0x0, 0x90}, {0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003b40)="218b29a4dd040dfaf0da9ede73612407403f21d7f0d321641db82169cac23d4561ee37314c21f0aeceae6d31d9db69ccfd544ad43d235f3c9f1d88d94c939046c8d592d73cb7f2d45a23", 0x4a}, {&(0x7f0000003bc0)="ed3042f21bc714968f2a80a4b270712e7f0a65170bb73f23c9032c60f54b748fe1aa438df0dba1be0de540e3b9bcf1873c632befe3f953a110826b4fe618e3fa93b990c32ef8de63bc9604dd41c9aea80476b7d9d985b3362b3bf494e9235a5c3003b0308d30d38d00a7897a5b0acea615832b651f701c885da8e71985eef5efac6ede8d1e7b23334139afb4b9149841bf5374817750a99aa19010aaadc1e00b06cfec072958fc0078ec4e5b1761553f9439222f27e6d600cf5969d61e5cac43a4103578489b08cfd811d360612e9d3cca54f69621cabdacca19", 0xda}, {&(0x7f0000003cc0)="fdce75753b497df4a23aa7d44175a1905a297067d530c5bec2a1a16802df8252e25a02fe6cde7ee32d67cdd6d43565bbde6c6fa4d8deb02cb9e08a0852b2edeb35a07b106d8fe158e7aa09603ab845e5b6e3d97c668ff00c16cbf5172c6abdfb1c670aca9e4296", 0x67}, {&(0x7f0000003d40)="7fce38a1f620d1c35ccc13d5b51fc41ebe598f60bbf23b77f4804fbfb30dac0db0395d6e0398371ce5cba42bf66cc457ffa2b56e75f7e68c5c9a05c738f8e19047e5bdc87c4e87c29c15fa0aaa2b8aa920f51ddc2b89f0b3b16c6182ea28a9dbd173d5ade7ca311648ded4e742270d9bc0d43e527cdb818e1e7c2e", 0x7b}, {&(0x7f0000003dc0)="b8e34f45ecc34ae835ad6db1d0084125b04b7f0d43967a2bc7079f8a1732697a", 0x20}, {&(0x7f0000003e00)="956514fac2e2e08863c12bfe4c18090bf0dc3d5afcf02ab3c12f03dd2ff78010dd7055a9e3a941ead1488d6aa8880b6bdad0c510049a51ce94ab181dd204aab3ac6d6f6a0f550063b956ce7d198934ccf90e0867b2168fbe424963e33be053ee5453cb8846d569fa9a1067172864a63372a292c49739acb18c", 0x79}, {&(0x7f0000003e80)="7d335bade9da33122b6369f7ffe567cb6a4ccfd7b465bd634e0cc6fe900e321bd20e8265e5e2982831e96ec8bfc6f5ab314b83a0c9510caf9532825655a5bd38a20aee65b6f9fb1df53799b828243a5b6fdbdf070c6769960a248d464c8f057573fb9b9b675eb8ad87aa28a4a1a894618a3c4140f72d064839de2459db905e27bc48e38cb8bdf7508ec308c6f2fe99aaba24c65709a610c2bca3ede75850c85557481982f73f3854bb5230beede35e2ac406f74f6a474673068fede5fa06c1d605b057e37dad31273ea1d71c228b4239e88fb175cca53fd768ddca769e02d4c2205431080d6fb099c1dc87f693730e22a6", 0xf1}, {&(0x7f0000003f80)="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", 0x1000}], 0x8, &(0x7f0000005000)=[@assoc={0x18, 0x117, 0x4, 0xe}, @op={0x18}, @iv={0x40, 0x117, 0x2, 0x28, "9956bff04a6e591aaf30b026e73ab12fd79fc154e3387f5047730f7521790a3afcb66e858504643c"}], 0x70, 0x4000001}, {0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000005080)="a570e18d104729af54a44e1fea04175c11ab885166dce5c6a0d1d59f1c3db7d8d84bbdb9b3889ee32f8495b6349c95b05be9c37d8d6c07c834ee500189614580dbcb3b05db9f8f3ec6b5cb1b3d189b53901520102aa391184350667279ea013eca3755a3663c56104f668580a06229f46ef1edb0aaf598fad317d186c4e627f43959748a743cbd8535a9437d1f14f9187f1b14cd1e6703e31e1ad103e1d1", 0x9e}], 0x1, 0x0, 0x0, 0x4008884}], 0x3, 0x80) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000005240), 0x2041, 0x0) ioctl$TUNSETOWNER(r15, 0x400454cc, 0x0) 19.22032378s ago: executing program 2 (id=5275): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x8000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000001040300000000000000000000000007050001000100"], 0x1c}}, 0x0) close(0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x4e21, 0x0, @private1, 0x7}, @in6={0xa, 0x4e22, 0x4, @private2, 0x7e271620}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r9, 0x2}, 0xc) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, 0x7, 0xc, 0x3, 0x0, {r8, @in={{0x2, 0x4e24, @rand_addr=0x64010105}}, 0x10000, 0x7, 0x2, 0x9, 0xb}}, &(0x7f0000000240)=0xb0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00050801000100ffffffe50000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r10, 0x1, 0x70bd2f, 0x259fdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x8, 0x1}}}}, 0x80}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r3) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x80000c, 0x80010, r2, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x41071, 0xffffffffffffffff, 0x201000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6gre0\x00'}) 19.100467927s ago: executing program 2 (id=5278): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) close(r2) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff51, &(0x7f0000002400)=[{&(0x7f0000000140)=""/157}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000000080)=""/96}, {&(0x7f0000001200)=""/126}, {&(0x7f0000001280)=""/252}, {&(0x7f0000002480)=""/4102}, {&(0x7f0000002380)=""/102}], 0x100000000000009b}, 0x0) 18.910654858s ago: executing program 2 (id=5281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1810b82c65aff862272f073c972164c90946cd8f1d9fc1db47"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000700)='cachefiles_ondemand_copen\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000002c0)="e55c909ab5c7d25f9cb97ccba057d52605a427ca46bbfa2cdaa63c5f70a02f1cb8e6e60579550dba0a334ba7e395bfecd2f9d84d32b4ecd3ce19ffda559c1f4f90942a2ebc5493c6d80dc744953a678aed13bfb32e53033f3e95b53d085602d6b9d4a19beb280e23563d640c99154a32fee7d4e3d657067fceb1f70515b581f2134e36a4c4e3ca840851d5fac54f428a19193d1023d8f528e683c094a1b8601e74e78b2f183a6c8262f463a8caa33399af665b1002e3", 0xb6}, {&(0x7f0000000380)="e45c03ce50091e5c65ab3e359683e1004240c60655295e60b3f669afce81be466574ff006f56cd4da9be1688b572ac52033880d6c98ce2d84dc1730805cc5caf6c45aa5b96cc5f275e191c7f6cd8d0d93a8b0301c17ec4562ced7fcbb5819f94f1fc8c533dceaf540cd43b40ea5f64cac34bb1fb8ea9e1", 0x77}, {&(0x7f00000005c0)="4c1413714b7bb102825aad63bca74699115ef6541c3d1b551de5adf0e77ac2ee5f1703089d0ee06c2cccac0220fd56714bdf59d231093d5e41097fdff1ed169e7fb835b2821b1443efb733ce", 0x4c}], 0x3, &(0x7f0000000640)=[@hopopts={{0x30, 0x29, 0x36, {0x62, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x1, 0x6, "48a235f3aacc"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8001}}], 0x48}}], 0x1, 0xc044) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002000c0002001b0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x60}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000000901080000000000000000010000060c00048008000140000000080c000480080001400000ffff080005400000001f0900010073797a300000000008000640000000010800064000000000b8000200060003400003000014000180080001000a01010208000200e00000012c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f00000108000200ac1414340c0002"], 0x108}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1810b82c65aff862272f073c972164c90946cd8f1d9fc1db47"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000700)='cachefiles_ondemand_copen\x00', r3}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000002c0)="e55c909ab5c7d25f9cb97ccba057d52605a427ca46bbfa2cdaa63c5f70a02f1cb8e6e60579550dba0a334ba7e395bfecd2f9d84d32b4ecd3ce19ffda559c1f4f90942a2ebc5493c6d80dc744953a678aed13bfb32e53033f3e95b53d085602d6b9d4a19beb280e23563d640c99154a32fee7d4e3d657067fceb1f70515b581f2134e36a4c4e3ca840851d5fac54f428a19193d1023d8f528e683c094a1b8601e74e78b2f183a6c8262f463a8caa33399af665b1002e3", 0xb6}, {&(0x7f0000000380)="e45c03ce50091e5c65ab3e359683e1004240c60655295e60b3f669afce81be466574ff006f56cd4da9be1688b572ac52033880d6c98ce2d84dc1730805cc5caf6c45aa5b96cc5f275e191c7f6cd8d0d93a8b0301c17ec4562ced7fcbb5819f94f1fc8c533dceaf540cd43b40ea5f64cac34bb1fb8ea9e1", 0x77}, {&(0x7f00000005c0)="4c1413714b7bb102825aad63bca74699115ef6541c3d1b551de5adf0e77ac2ee5f1703089d0ee06c2cccac0220fd56714bdf59d231093d5e41097fdff1ed169e7fb835b2821b1443efb733ce", 0x4c}], 0x3, &(0x7f0000000640)=[@hopopts={{0x30, 0x29, 0x36, {0x62, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x1, 0x6, "48a235f3aacc"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8001}}], 0x48}}], 0x1, 0xc044) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002000c0002001b0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x60}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000000901080000000000000000010000060c00048008000140000000080c000480080001400000ffff080005400000001f0900010073797a300000000008000640000000010800064000000000b8000200060003400003000014000180080001000a01010208000200e00000012c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f00000108000200ac1414340c0002"], 0x108}}, 0x0) (async) 18.500687109s ago: executing program 2 (id=5288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) 17.811355364s ago: executing program 5 (id=5298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x2000}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4881) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f5, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r1, @ANYBLOB="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"/269, @ANYRES32=0x0, @ANYBLOB="84a29ca511efd3a394a093cbc8f311cd996d233db52ebbca4cf3b0b213c4c99f73e631308cbe6a41d6682f55523bd9a776a9258507a656715853d5e0d8d0ca16a993cd354494b46231af778bb7a7397f8d7e16cfce791efb22831ea69634bd061a7ace7e76d884e1b7e8f5cd558be7dfe2e7e43fed7370de9071bfde676b0ce46c8bd7875f336918065e8e3882e564639a964a7c42eb055a1281a2", @ANYRESOCT=r4], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r6}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010fe54525c882841be991000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000c40000000020800034000000110140000001000010000000000000000000084000a6a2262aaf877c76fe04849c5e9544939370c105e27563858e3ff73d3e01a2e564d6813f8d1818747b3596f402400389915902e0e424b9507b92342c8ec68248318a2175d5b7ca845943d54d7ec7ec9e56c629a76"], 0x94}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xd, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000fcffffff0000000006000000cb75500008000000181100e1", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14}}, 0x60}}, 0x801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="91b882b09a5bbbbbbbbbbbff0f00000000380000000000019078ac1e0001ac141426030490781202183f25000fff00000000000100000a0101016401010008000071ae9b1c43"], 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000000)={0x30000011}) close(r14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xefff, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0312800c00010074ada128efa7281c2b67fc516898426d000000000000000000", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 17.679944517s ago: executing program 5 (id=5300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 17.561181764s ago: executing program 5 (id=5301): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250f0000000500370000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004040) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xf, 0xffff, 0x40, 0x20, 0x1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x1}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) (async) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r7, r6, 0x0, 0x0, 0x0}, 0x30) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r7, r8, 0x0, 0x0, 0x0}, 0x30) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, 0x0, 0x43059294f10fa146) (async) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000015a40)={0x38, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x38}}, 0x4) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f00000004c0)={0x0, 0x0, [0xfffffffffffffff7, 0x1, 0x0, 0x5, 0xfffffffffffffffa, 0x76]}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x4a, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 17.340864983s ago: executing program 5 (id=5305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="a000000000010104000000000000000002000000240001801452018e2794cf9c00018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e00000023c0401802c0001801400090000000000000000000000ffff0000000014000400fc0000000000000000000000000000010c00028005000100110000000800034000000000"], 0xa0}}, 0x0) 17.33537214s ago: executing program 1 (id=5306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@rand_addr, @empty, 0x0}, &(0x7f00000001c0)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r3, r2, 0x4}, 0x10) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400864937a69ae5672c3300fadac42db70fca9a48baecdbabdc51ef0178a5a29ea579c15247f7cb2612cb", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090000000000080006006f766600080008000000000008000b0073697000"], 0x54}}, 0x0) 17.26152111s ago: executing program 5 (id=5307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x43) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) socketpair(0x5, 0x800, 0x4cf, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x6, @any, 0xd, 0x2}, 0xe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x10, 0x3, 0x1, 0x7fff, 0x4, 0x5, 0xffffffff, 0x3}, &(0x7f0000000140)=0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48088}, 0x4004000) 17.041247194s ago: executing program 1 (id=5309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x8703268b, @local}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000080)={0x1d, r7}, 0x10) close(r6) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 16.806747977s ago: executing program 1 (id=5311): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x4008000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4000054}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r3, 0x50f, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006001700800a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 16.672771483s ago: executing program 1 (id=5312): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x184, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6542}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x10}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x2830}}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) r1 = socket$kcm(0x29, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000500)={{r0}, r2, 0x14, @inherit={0x78, &(0x7f0000000480)={0x0, 0x6, 0x8, 0x435e3804, {0x46, 0x1, 0x8, 0x101, 0x8000000000000000}, [0x3, 0x0, 0x4, 0x800, 0x1, 0x2]}}, @name="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"}) syz_genetlink_get_family_id$l2tp(&(0x7f0000001500), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = openat$cgroup_ro(r0, &(0x7f0000001640)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001680)={0x0, 0x3ff, 0x20}, &(0x7f00000016c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001700)={0x5, 0x0, 0x3, 0x7f, r4}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001740)={0x2, 'rose0\x00', {0x5}, 0x4}) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000001780)=0xffffffffffffffff, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x6, 0xfffffff9, 0x20, @remote, @mcast1, 0x8000, 0x40, 0x3e6, 0x7}}) bind$packet(r3, &(0x7f0000001880)={0x11, 0x9, r5, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000018c0)={0x0, 'bond0\x00', {0x1}, 0x7f}) sendmsg$nl_route(r3, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c0}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) bind$rds(0xffffffffffffffff, &(0x7f0000001b00)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet6_buf(r3, 0x29, 0x2d, &(0x7f0000001b40)=""/108, &(0x7f0000001bc0)=0x6c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000001c00)=0x8001, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = accept4$bt_l2cap(r3, &(0x7f0000001c40), &(0x7f0000001c80)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000001cc0), &(0x7f0000001d00)=0x4) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000001d40)) ioctl$int_in(r1, 0x5452, &(0x7f0000001d80)=0xffffffffffffff00) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e80), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) 16.629828529s ago: executing program 1 (id=5313): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESOCT=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) 16.556769768s ago: executing program 0 (id=5314): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000008c0)=@generic={0x15, "7b69557f9e4f3a35fee8d7a7eeec18d8746db1b831689d5107cd29f42506b22d988f64ab6ad206702001aba97007342a50d9ce8ada7ad49c5ac10f2951a54f56bcba07e07f2402c509e40d28de8d0ee0b89babbe4fe7e091966d98aa0d3dfaa3297de5bf43fd20771e9fea48dc742cf43a9b92f83d507c9f9c82d6d72df3"}, 0x80, 0x0, 0x0, &(0x7f0000001b80)}}, {{0x0, 0x0, &(0x7f0000001e40)}}], 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a40)=""/4105, &(0x7f0000000040)=0x1009) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x6e) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000640)='nv', 0x2) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001ec0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4884) recvfrom$inet(r4, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x0, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa4}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r8}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000050005000a000004000000000012000300686173683a6e65742c706f72740000001400078008000840000000000800064000000000000000"], 0x60}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) 16.55621984s ago: executing program 1 (id=5315): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf4e) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRESDEC, @ANYBLOB="1de627c68f3355518be6d52dde06ff3cbd25c3b87db9bf2001a3ed5c4949afce75baa7dc4349f2bfa83997dcc6d201e35d5e4d469014777527ba2cb893eac193954302053356723afd251f50176b6a2492a4319360e4b4ef96e4757c6b1288ed4635e01ed16fb781208d14f67272df8a0256dba9fc4e32eb6ed86823215f51f2fbcc273eaa9f106af8adcde493f27a04149475053a81c1395d290b48da4d5827e532342a0a1a1d6a294f9972cb2536cdff320e8756e3d7532b1cbb4526baba6e6a28b5c597082bf701952e5f163337ca45c15045e8e6e85418e1141d378c6f8688ca2fb1b59dc283ddc8e79283eb0e0685dd3036183ea957ae", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ff42ee73818ae35c00000000100000001003000000000000020000002008000000ffffff010000000073a800"], 0x0, 0x2c}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x809, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="19026b02d5e5f29e59e1a7caec33eb76d2430da474d87a55891f7e367f6598d022438b65eda8341073b6752abdcee080c8e1e876b25227c37dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa2100", 0x7f}], 0x2) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040884}, 0x4000000) 16.413245464s ago: executing program 0 (id=5316): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x300, 0x70bd2d, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x920, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}}, 0x20004002) 16.372673s ago: executing program 0 (id=5317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x1bd, 0x9ffffd}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket(0x10, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/299], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) socket$kcm(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r5 = socket(0x2, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4c20, 0x10000, 0xcd}}, 0x44) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, 0x0, 0x0) (async) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) 16.341103881s ago: executing program 5 (id=5318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) sendmmsg$inet(r2, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 16.200495784s ago: executing program 0 (id=5319): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1, 0x3) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0xffffffffffffff9a) sendmmsg$inet(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f00000004c0)="a62dab6ddfa1eb2f4c2bee82fef0a5122d677e41e5f9a16ad052a71be02b56ee2e9eb9109c03684bde89b2792101af51350d86667728f47c54361e8270f129b5f970fb9725aa5414e451e6c2151d7ad32c6d046f1906fcd426b9d387f900d7c937e923b9849ce5443eebb5e8cbd86ed7fb8350c45584bdb57cf54fd62bc839db7de526", 0x83}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='X', 0x1}, {&(0x7f0000000000)='\b', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)='t', 0x1}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000000bc0)="4441b8300bd0d3cd2fcec768126396ea5a348c642d87bbc47ec2b1825f3c7ce90b5e9a14a9b4b268bf0df0dd9bcdfd389addbb13b80c89fc5407159a50f2f0f5585c029cdbe873d344a1836d7996260d4907ac49a483aa9909b36a43fcd9f9799993c222f4a90e139077fff15c2c6c80f3f0b7d38c45338cffbaefef7c6b18e52cb42a2dc442afed0d0fe0bad35876a28bd73bd0ac0000000000c7d862043bb614f73300794212cd239c433e75e953e1fd98a00d5d830849b0a7aee6e909805840e77da86f9094dc897146afae585f074606436aab77d6fdafdd305d5d15711a3803aa6e6256123cc4ee7b40b0f8b3b19703b1e66bb1359a0df2a7df11c92eb4e4d47525c6e3273867c0827fef194a3176ac5b3611815068fdb0c256f8924fb6bf572eaa4f4cf9dec5c2676efb8553e7712c617e9082bfa8dc72fe297875b0144d30dd112f", 0x145}], 0x5}}], 0x2, 0x4008440) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="826d87688c04", 0x6}, {&(0x7f0000001a40)="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", 0xebb}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 16.081285099s ago: executing program 0 (id=5320): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r1, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@enum64={0x5, 0x5, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x101}, {0x2, 0x6248, 0x8}, {0xc, 0x1800000, 0x7}, {0x4, 0x7, 0x4}, {0x3, 0x1, 0x3}]}]}, {0x0, [0x2e, 0x5f, 0x61]}}, &(0x7f0000000000)=""/38, 0x65, 0x26, 0x0, 0x1ff, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 16.063127058s ago: executing program 0 (id=5321): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg(r7, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20000000) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0x409, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe1b}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$AUDIT_TTY_SET(r8, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x3f9, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r13 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r13, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x20047f7f) r14 = socket$key(0xf, 0x3, 0x2) r15 = socket$inet6_sctp(0xa, 0x801, 0x84) ppoll(&(0x7f00000001c0)=[{r15, 0x5107}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$key(r14, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r14], 0xe0}}, 0x0) 16.017118042s ago: executing program 3 (id=5322): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x90) 15.929368254s ago: executing program 3 (id=5323): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xffffffffffffffe6, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x3, @mcast1, 0xe}]}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={r2}, &(0x7f0000001080)=0x8) 15.927902727s ago: executing program 3 (id=5324): r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r0, 0x10f, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x5, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x10f, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 15.862639986s ago: executing program 3 (id=5325): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) (async) accept$alg(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) close(0x4) (async) close(0x4) 15.780825722s ago: executing program 3 (id=5326): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001007f00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900040000002a0000001400040070696d367265673000000000000000000800050006000000040017800a00e800ffffffffffff00001c00e7001bbf2aa82959c70c48b51d6afc65cb1e9f56c42ed1e07ba31c00e700ae767f724192fd7b2176f2322811d764fe3f7166999f06fc0a00e800ffffffffffff0000"], 0xa0}}, 0x0) 15.693090978s ago: executing program 3 (id=5327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000001300)={0x11a4, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x55}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x1008, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}]}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_PROBE_RESP={0x176, 0x91, "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"}]}, 0x11a4}, 0x1, 0x0, 0x0, 0x10048000}, 0x4040050) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0xc}], 0x10, 0xfffffffe}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9fb030781000000000000000000", 0x0, 0x800fe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00'}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xf, "c22f7a58ab539894c41f7c73cd7c26"}, &(0x7f0000000340)=0x17) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0xfffffffffffffeef, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000005c0)={r8, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000380)=0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd28, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x10000}, [""]}, 0x1c}, 0x1, 0xba01, 0x0, 0x400c014}, 0x8840) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000400)={r13, @in6={{0xa, 0x43, 0x0, @rand_addr=' \x01\x00', 0x3ff}}}, &(0x7f0000000180)=0x84) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5, 0x5}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 3.13229325s ago: executing program 33 (id=5288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) 1.111372882s ago: executing program 34 (id=5315): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf4e) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRESDEC, @ANYBLOB="1de627c68f3355518be6d52dde06ff3cbd25c3b87db9bf2001a3ed5c4949afce75baa7dc4349f2bfa83997dcc6d201e35d5e4d469014777527ba2cb893eac193954302053356723afd251f50176b6a2492a4319360e4b4ef96e4757c6b1288ed4635e01ed16fb781208d14f67272df8a0256dba9fc4e32eb6ed86823215f51f2fbcc273eaa9f106af8adcde493f27a04149475053a81c1395d290b48da4d5827e532342a0a1a1d6a294f9972cb2536cdff320e8756e3d7532b1cbb4526baba6e6a28b5c597082bf701952e5f163337ca45c15045e8e6e85418e1141d378c6f8688ca2fb1b59dc283ddc8e79283eb0e0685dd3036183ea957ae", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ff42ee73818ae35c00000000100000001003000000000000020000002008000000ffffff010000000073a800"], 0x0, 0x2c}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x809, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="19026b02d5e5f29e59e1a7caec33eb76d2430da474d87a55891f7e367f6598d022438b65eda8341073b6752abdcee080c8e1e876b25227c37dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa2100", 0x7f}], 0x2) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040884}, 0x4000000) 1.071123015s ago: executing program 35 (id=5318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) sendmmsg$inet(r2, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 38.864821ms ago: executing program 36 (id=5321): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg(r7, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20000000) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0x409, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe1b}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$AUDIT_TTY_SET(r8, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x3f9, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r13 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r13, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x20047f7f) r14 = socket$key(0xf, 0x3, 0x2) r15 = socket$inet6_sctp(0xa, 0x801, 0x84) ppoll(&(0x7f00000001c0)=[{r15, 0x5107}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$key(r14, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r14], 0xe0}}, 0x0) 0s ago: executing program 37 (id=5327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000001300)={0x11a4, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x55}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x1008, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}]}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_PROBE_RESP={0x176, 0x91, "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"}]}, 0x11a4}, 0x1, 0x0, 0x0, 0x10048000}, 0x4040050) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0xc}], 0x10, 0xfffffffe}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9fb030781000000000000000000", 0x0, 0x800fe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00'}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xf, "c22f7a58ab539894c41f7c73cd7c26"}, &(0x7f0000000340)=0x17) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0xfffffffffffffeef, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000005c0)={r8, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000380)=0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd28, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x10000}, [""]}, 0x1c}, 0x1, 0xba01, 0x0, 0x400c014}, 0x8840) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000400)={r13, @in6={{0xa, 0x43, 0x0, @rand_addr=' \x01\x00', 0x3ff}}}, &(0x7f0000000180)=0x84) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5, 0x5}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) kernel console output (not intermixed with test programs): - 0 [ 376.129206][T17760] syzkaller0: entered promiscuous mode [ 376.136311][T17760] syzkaller0: entered allmulticast mode [ 376.249720][T12065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.270765][T12065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.357392][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.366142][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.886706][T17794] tipc: Started in network mode [ 376.912683][T17794] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 376.932465][T17794] tipc: Enabled bearer , priority 2 [ 377.000551][T17804] netlink: 'syz.3.3262': attribute type 1 has an invalid length. [ 377.080221][T17808] Cannot find add_set index 0 as target [ 377.099368][T17804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.181502][T17811] bond1: (slave geneve2): making interface the new active one [ 377.216102][ T53] Bluetooth: hci0: command tx timeout [ 377.221899][T17811] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 377.279423][T12073] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 377.321930][T12073] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 377.432668][T12073] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 377.471100][T12073] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 377.848613][T17871] Cannot find add_set index 0 as target [ 377.878569][T17871] Cannot find add_set index 0 as target [ 378.056177][ T10] tipc: Node number set to 10463914 [ 378.228814][T17886] __nla_validate_parse: 17 callbacks suppressed [ 378.228838][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3281'. [ 378.421133][T17886] hsr_slave_1 (unregistering): left promiscuous mode [ 378.790235][T17909] netlink: 'syz.1.3289': attribute type 1 has an invalid length. [ 378.797173][T17915] digital: digital_start_poll: Unknown protocol [ 379.098581][T17934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3294'. [ 379.138571][T17934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3294'. [ 379.227466][T17925] sctp: [Deprecated]: syz.3.3291 (pid 17925) Use of int in maxseg socket option. [ 379.227466][T17925] Use struct sctp_assoc_value instead [ 379.313107][ T53] Bluetooth: hci0: command tx timeout [ 379.509260][T17949] netlink: 'syz.3.3300': attribute type 12 has an invalid length. [ 379.698054][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.164609][T17983] netlink: 'syz.2.3306': attribute type 4 has an invalid length. [ 380.179308][T17983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3306'. [ 380.189872][T17983] netlink: 'syz.2.3306': attribute type 4 has an invalid length. [ 380.204531][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 380.258460][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.311646][T17992] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 380.336358][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.356581][T17992] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 380.470035][T18000] netlink: 'syz.2.3311': attribute type 10 has an invalid length. [ 380.510107][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.517395][T18000] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 380.541131][T18000] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 380.779271][T18023] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 380.807871][T18017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3318'. [ 380.983914][T18034] netlink: 'syz.0.3324': attribute type 1 has an invalid length. [ 381.236480][T18048] gtp0: entered promiscuous mode [ 381.241625][T18048] gtp0: entered allmulticast mode [ 381.259614][T18049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3327'. [ 381.283942][T18049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3327'. [ 381.297423][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.319807][T18051] syzkaller0: entered promiscuous mode [ 381.325407][T18051] syzkaller0: entered allmulticast mode [ 381.354910][T18055] netlink: 'syz.0.3330': attribute type 3 has an invalid length. [ 381.360157][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3327'. [ 381.493126][T18027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.511226][T18027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.616620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.669008][T18049] macvtap1: entered promiscuous mode [ 381.674387][T18049] vlan0: entered promiscuous mode [ 381.684512][T18049] macvtap1: entered allmulticast mode [ 381.707930][T18049] vlan0: entered allmulticast mode [ 381.713122][T18049] veth0_vlan: entered allmulticast mode [ 381.831513][T18027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.857716][T18027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.939842][T12063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.999612][T18027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.014551][T18027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.061382][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3339'. [ 382.124282][T18027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.144316][T18027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.151954][T18098] netlink: 'syz.0.3341': attribute type 23 has an invalid length. [ 382.192303][T18100] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 382.214088][T18100] bond1: (slave lo): Enslaving as a backup interface with an up link [ 382.255269][T18101] netlink: 'syz.0.3341': attribute type 23 has an invalid length. [ 382.288449][ T3567] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.308601][ T3567] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.371128][ T3567] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.384319][ T3567] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.404820][T18109] vcan0: tx drop: invalid sa for name 0x0000800000000000 [ 382.437137][ T3567] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.445406][ T3567] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.520812][T18111] netlink: 'syz.0.3345': attribute type 75 has an invalid length. [ 382.542722][ T3567] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.556007][ T3567] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.886199][T18130] tipc: Enabled bearer , priority 10 [ 383.260611][T18164] __nla_validate_parse: 3 callbacks suppressed [ 383.260633][T18164] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3359'. [ 383.660134][T18188] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3369'. [ 383.803706][T18195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3371'. [ 383.911928][T18198] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3374'. [ 384.220831][T18223] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 384.238458][T18223] bond2 (unregistering): Released all slaves [ 384.256074][T18225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3378'. [ 384.274299][T18229] validate_nla: 2 callbacks suppressed [ 384.274319][T18229] netlink: 'syz.2.3381': attribute type 4 has an invalid length. [ 384.308452][T18229] netlink: 'syz.2.3381': attribute type 4 has an invalid length. [ 384.510357][T18243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3385'. [ 384.556822][T18243] veth4: entered allmulticast mode [ 385.048617][T18282] netlink: 'syz.1.3394': attribute type 1 has an invalid length. [ 385.054665][T18284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3395'. [ 385.057798][T18282] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3394'. [ 385.465683][ T5942] net_ratelimit: 11 callbacks suppressed [ 385.465704][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.418460][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.426747][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.500270][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.860350][T18309] netlink: 'syz.1.3402': attribute type 1 has an invalid length. [ 386.939842][T18309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.002415][T18309] syzkaller0: entered promiscuous mode [ 387.008314][T18309] syzkaller0: entered allmulticast mode [ 387.053589][T18319] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 387.066869][T12073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.082957][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.094085][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.253372][T18322] netlink: 'syz.5.3406': attribute type 4 has an invalid length. [ 387.317872][T18324] tipc: Started in network mode [ 387.323381][T18324] tipc: Node identity 86705d204337, cluster identity 4711 [ 387.341129][T18324] tipc: Enabled bearer , priority 0 [ 387.349669][T18329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3407'. [ 387.367212][T18324] syzkaller0: entered promiscuous mode [ 387.373183][T18324] syzkaller0: entered allmulticast mode [ 387.390892][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'. [ 387.412650][T18324] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 387.440629][T18332] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 387.473759][T18324] veth0_to_hsr: mtu greater than device maximum [ 387.485226][T18321] tipc: Resetting bearer [ 387.504346][T18321] tipc: Disabling bearer [ 387.530340][T18337] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 388.110007][T18362] xt_hashlimit: max too large, truncated to 1048576 [ 388.142490][T18364] Cannot find add_set index 0 as target [ 388.501192][T18382] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.508807][T18382] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.613676][T18382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.630585][T18382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.777747][T18395] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3425'. [ 388.795760][T12076] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.821544][T12076] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.855834][T12076] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.896221][T12065] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.928761][T18397] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3426'. [ 388.972136][T18402] delete_channel: no stack [ 389.008246][T18400] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3428'. [ 389.556427][T18442] syzkaller0: entered promiscuous mode [ 389.562061][T18442] syzkaller0: entered allmulticast mode [ 389.570880][T18439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3441'. [ 389.752899][T18449] netlink: 'syz.5.3445': attribute type 39 has an invalid length. [ 389.915450][T18457] syz.2.3447 uses old SIOCAX25GETINFO [ 389.920966][T18459] netlink: 'syz.1.3449': attribute type 1 has an invalid length. [ 390.016965][ T53] Bluetooth: hci1: command tx timeout [ 390.059843][T18468] syz.1.3451: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 390.075429][T18468] CPU: 0 UID: 0 PID: 18468 Comm: syz.1.3451 Not tainted syzkaller #0 PREEMPT(full) [ 390.075462][T18468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.075481][T18468] Call Trace: [ 390.075495][T18468] [ 390.075506][T18468] dump_stack_lvl+0x189/0x250 [ 390.075541][T18468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.075566][T18468] ? __pfx__printk+0x10/0x10 [ 390.075595][T18468] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 390.075642][T18468] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 390.075678][T18468] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 390.075713][T18468] warn_alloc+0x214/0x310 [ 390.075742][T18468] ? stack_depot_save_flags+0x40/0x850 [ 390.075771][T18468] ? __pfx_warn_alloc+0x10/0x10 [ 390.075800][T18468] ? kasan_save_track+0x3e/0x80 [ 390.075824][T18468] ? __kasan_kmalloc+0x93/0xb0 [ 390.075852][T18468] ? xsk_setsockopt+0x4dc/0x8d0 [ 390.075871][T18468] ? do_sock_setsockopt+0x17c/0x1b0 [ 390.075899][T18468] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 390.075926][T18468] ? do_syscall_64+0xfa/0xf80 [ 390.075950][T18468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.075982][T18468] __vmalloc_node_range_noprof+0x125/0x12d0 [ 390.076042][T18468] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 390.076073][T18468] ? __kasan_kmalloc+0x93/0xb0 [ 390.076108][T18468] vmalloc_user_noprof+0xad/0xf0 [ 390.076136][T18468] ? xskq_create+0xbf/0x170 [ 390.076161][T18468] xskq_create+0xbf/0x170 [ 390.076188][T18468] xsk_init_queue+0xb0/0x110 [ 390.076214][T18468] xsk_setsockopt+0x4dc/0x8d0 [ 390.076239][T18468] ? __pfx_xsk_setsockopt+0x10/0x10 [ 390.076263][T18468] ? __pfx_aa_sk_perm+0x10/0x10 [ 390.076296][T18468] ? aa_sock_opt_perm+0xff/0x1a0 [ 390.076320][T18468] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 390.076347][T18468] ? __pfx_xsk_setsockopt+0x10/0x10 [ 390.076371][T18468] do_sock_setsockopt+0x17c/0x1b0 [ 390.076406][T18468] __x64_sys_setsockopt+0x13f/0x1b0 [ 390.076443][T18468] do_syscall_64+0xfa/0xf80 [ 390.076497][T18468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.076518][T18468] ? clear_bhb_loop+0x60/0xb0 [ 390.076541][T18468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.076562][T18468] RIP: 0033:0x7f0e61d8f749 [ 390.076581][T18468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.076599][T18468] RSP: 002b:00007f0e62c68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 390.076630][T18468] RAX: ffffffffffffffda RBX: 00007f0e61fe5fa0 RCX: 00007f0e61d8f749 [ 390.076646][T18468] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 390.076659][T18468] RBP: 00007f0e61e13f91 R08: 0000000000000004 R09: 0000000000000000 [ 390.076673][T18468] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.076685][T18468] R13: 00007f0e61fe6038 R14: 00007f0e61fe5fa0 R15: 00007ffca4ee6488 [ 390.076721][T18468] [ 390.368491][T18468] Mem-Info: [ 390.371678][T18468] active_anon:4696 inactive_anon:0 isolated_anon:0 [ 390.371678][T18468] active_file:2758 inactive_file:40027 isolated_file:0 [ 390.371678][T18468] unevictable:768 dirty:83 writeback:0 [ 390.371678][T18468] slab_reclaimable:12340 slab_unreclaimable:142126 [ 390.371678][T18468] mapped:29048 shmem:1353 pagetables:1093 [ 390.371678][T18468] sec_pagetables:0 bounce:0 [ 390.371678][T18468] kernel_misc_reclaimable:0 [ 390.371678][T18468] free:1278353 free_pcp:13829 free_cma:0 [ 390.418525][T18468] Node 0 active_anon:18784kB inactive_anon:0kB active_file:11032kB inactive_file:159908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116192kB dirty:332kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15352kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.452468][T18468] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.484546][T18468] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.488358][T18475] netlink: 'syz.2.3453': attribute type 178 has an invalid length. [ 390.515664][T18468] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 390.515730][T18468] Node 0 DMA32 free:1202524kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18784kB inactive_anon:0kB active_file:11032kB inactive_file:159908kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:38932kB local_pcp:21148kB free_cma:0kB [ 390.515800][T18468] lowmem_reserve[]: 0 0 0 0 0 [ 390.515847][T18468] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.598909][T18468] lowmem_reserve[]: 0 0 0 0 0 [ 390.603790][T18468] Node 1 Normal free:3895528kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16888kB local_pcp:9320kB free_cma:0kB [ 390.607308][T18469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.636553][T18468] lowmem_reserve[]: 0 0 0 0 0 [ 390.636613][T18468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 390.636763][T18468] Node 0 DMA32: 830*4kB (UME) 294*8kB (UME) 351*16kB (UME) 130*32kB (UME) 21*64kB (UME) 15*128kB (UM) 2*256kB (UM) 13*512kB (UM) 7*1024kB (U) 7*2048kB (ME) 282*4096kB (UM) = 1202456kB [ 390.636976][T18468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 390.637100][T18468] Node 1 Normal: 97*4kB (UM) 49*8kB (UME) 51*16kB (UME) 165*32kB (UME) 41*64kB (UME) 6*128kB (UME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895580kB [ 390.714177][T18468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.723899][T18468] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.733366][T18468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.743405][T18468] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.752814][T18468] 44134 total pagecache pages [ 390.757892][T18468] 0 pages in swap cache [ 390.762079][T18468] Free swap = 124996kB [ 390.766642][T18468] Total swap = 124996kB [ 390.770843][T18468] 2097051 pages RAM [ 390.774726][T18468] 0 pages HighMem/MovableOnly [ 390.779514][T18468] 424280 pages reserved [ 390.783703][T18468] 0 pages cma reserved [ 390.807005][T18481] net_ratelimit: 3 callbacks suppressed [ 390.807025][T18481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.821714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.834611][T18481] tipc: Enabling of bearer rejected, failed to enable media [ 391.037096][ T30] audit: type=1800 audit(1765168803.032:6): pid=18492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3459" name="memory.events" dev="tmpfs" ino=404 res=0 errno=0 [ 391.041077][T18484] syzkaller0: entered promiscuous mode [ 391.081643][ T30] audit: type=1804 audit(1765168803.032:7): pid=18492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3459" name="/newroot/76/memory.events" dev="tmpfs" ino=404 res=1 errno=0 [ 391.146218][T18484] syzkaller0: entered allmulticast mode [ 391.163637][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'. [ 391.213918][T18503] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 391.234220][T18503] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3460'. [ 391.355321][T18511] netlink: 'syz.2.3463': attribute type 1 has an invalid length. [ 391.363344][T18511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3463'. [ 391.370246][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3462'. [ 391.782371][T18536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.397557][T18554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.406995][T18554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.420896][T18554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.438234][T18554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.447004][T18554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.459008][T18554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.476519][T18554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.646382][T18565] netlink: 'syz.3.3474': attribute type 21 has an invalid length. [ 393.655431][T18565] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.726956][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'. [ 393.820562][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'. [ 394.015940][T18598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3484'. [ 394.049671][T18598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3484'. [ 394.172234][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3487'. [ 394.197785][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3487'. [ 394.510656][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'. [ 394.766679][T18641] netlink: 'syz.0.3496': attribute type 4 has an invalid length. [ 394.775339][T18641] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3496'. [ 394.797610][T18642] tipc: Enabling of bearer rejected, media not registered [ 394.807046][T18641] tipc: Enabling of bearer rejected, media not registered [ 394.948932][T18653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3501'. [ 394.987687][T12075] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.987800][T18653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3501'. [ 395.010479][T12075] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.021363][T12075] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.039681][T12075] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.231570][T18668] netlink: 'syz.1.3507': attribute type 1 has an invalid length. [ 395.551046][T18683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3509'. [ 395.871630][T18701] netlink: 'syz.2.3511': attribute type 2 has an invalid length. [ 395.880675][T18701] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 395.908038][T18702] netlink: 'syz.1.3514': attribute type 10 has an invalid length. [ 395.968027][T18701] bond4 (unregistering): Released all slaves [ 396.008205][T18712] netlink: 'syz.5.3516': attribute type 11 has an invalid length. [ 396.022415][T18702] veth0_virt_wifi: entered allmulticast mode [ 396.035311][T18712] netlink: 'syz.5.3516': attribute type 4 has an invalid length. [ 396.057450][T18702] team0: Port device veth0_virt_wifi added [ 396.128799][T18714] Cannot find add_set index 0 as target [ 396.137070][T18714] netlink: 'syz.0.3517': attribute type 1 has an invalid length. [ 396.242261][T18721] bond1: (slave bridge1): making interface the new active one [ 396.268473][T18721] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 396.279985][T18723] netlink: 'syz.1.3520': attribute type 4 has an invalid length. [ 396.441532][T18730] netlink: 'syz.0.3522': attribute type 1 has an invalid length. [ 396.486396][T18730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.496850][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 396.825519][T18756] x_tables: duplicate underflow at hook 1 [ 396.957457][T18762] bond4: entered promiscuous mode [ 396.963877][T18762] bond4: entered allmulticast mode [ 396.970417][T18762] 8021q: adding VLAN 0 to HW filter on device bond4 [ 397.911839][T18819] ip6t_REJECT: ECHOREPLY is not supported [ 398.067946][T18829] tipc: Enabling of bearer rejected, failed to enable media [ 398.272512][T18843] netlink: 'syz.5.3552': attribute type 1 has an invalid length. [ 398.426505][T18853] digital: digital_start_poll: Unknown protocol [ 398.477212][T18854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.650746][T18854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.989533][T18887] __nla_validate_parse: 7 callbacks suppressed [ 398.989553][T18887] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3567'. [ 399.224339][T18903] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3571'. [ 399.245329][T18903] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3571'. [ 399.877621][T18949] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3586'. [ 399.882277][T18943] syz.3.3583 (18943) used obsolete PPPIOCDETACH ioctl [ 399.894115][T18948] tipc: Can't bind to reserved service type 1 [ 399.894785][T18949] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3586'. [ 399.917869][T18949] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3586'. [ 400.034403][T18959] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3587'. [ 400.085774][ C0] net_ratelimit: 225 callbacks suppressed [ 400.085795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.118295][T18961] vxlan0: entered promiscuous mode [ 400.128058][T18961] vxlan0: entered allmulticast mode [ 400.128219][T18949] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3586'. [ 400.137063][ T3567] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.152431][T18949] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3586'. [ 400.195734][T18949] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3586'. [ 400.208442][ T3567] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.259081][ T3567] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.286454][ T3567] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.426458][T18982] GUP no longer grows the stack in syz.5.3593 (18982): 200000003000-20000000a000 (200000001000) [ 400.471979][T18982] CPU: 0 UID: 0 PID: 18982 Comm: syz.5.3593 Not tainted syzkaller #0 PREEMPT(full) [ 400.472012][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.472026][T18982] Call Trace: [ 400.472036][T18982] [ 400.472045][T18982] dump_stack_lvl+0x189/0x250 [ 400.472078][T18982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.472101][T18982] ? __pfx__printk+0x10/0x10 [ 400.472126][T18982] ? find_vma+0xe7/0x160 [ 400.472165][T18982] __get_user_pages+0x2470/0x2a00 [ 400.472217][T18982] ? rcu_is_watching+0x15/0xb0 [ 400.472250][T18982] __gup_longterm_locked+0xde4/0x1660 [ 400.472280][T18982] ? try_grab_folio_fast+0x1bf/0x6a0 [ 400.472323][T18982] ? gup_fast_fallback+0x1b86/0x22d0 [ 400.472352][T18982] gup_fast_fallback+0x1d65/0x22d0 [ 400.472417][T18982] ? __pfx_gup_fast_fallback+0x10/0x10 [ 400.472438][T18982] ? __mutex_lock+0x335/0x1350 [ 400.472478][T18982] ? is_valid_gup_args+0x11f/0x200 [ 400.472505][T18982] ? get_user_pages_fast+0x4d/0xb0 [ 400.472533][T18982] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 400.472571][T18982] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 400.472593][T18982] ? wait_for_space+0x248/0x2d0 [ 400.472618][T18982] iov_iter_get_pages2+0x5e/0xa0 [ 400.472651][T18982] __se_sys_vmsplice+0x548/0x10d0 [ 400.472694][T18982] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 400.472719][T18982] ? __pfx_futex_wake+0x10/0x10 [ 400.472746][T18982] ? restore_signal_shadow_stack+0x3b7/0x480 [ 400.472778][T18982] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 400.472862][T18982] ? do_syscall_64+0xbe/0xf80 [ 400.472895][T18982] do_syscall_64+0xfa/0xf80 [ 400.472924][T18982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.472944][T18982] ? clear_bhb_loop+0x60/0xb0 [ 400.472980][T18982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.473001][T18982] RIP: 0033:0x7f2387f8f749 [ 400.473019][T18982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.473037][T18982] RSP: 002b:00007f2388dc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 400.473060][T18982] RAX: ffffffffffffffda RBX: 00007f23881e6090 RCX: 00007f2387f8f749 [ 400.473076][T18982] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000010 [ 400.473089][T18982] RBP: 00007f2388013f91 R08: 0000000000000000 R09: 0000000000000000 [ 400.473102][T18982] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 400.473116][T18982] R13: 00007f23881e6128 R14: 00007f23881e6090 R15: 00007ffd0e5db998 [ 400.473153][T18982] [ 400.474504][T18987] validate_nla: 2 callbacks suppressed [ 400.474524][T18987] netlink: 'syz.3.3596': attribute type 3 has an invalid length. [ 401.104148][T19001] syzkaller0: entered promiscuous mode [ 401.125121][T19011] netlink: 'syz.5.3603': attribute type 2 has an invalid length. [ 401.125436][T19001] syzkaller0: entered allmulticast mode [ 401.146714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.178311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.787445][T19011] netlink: 'syz.5.3603': attribute type 5 has an invalid length. [ 402.919342][T19033] netlink: 'syz.2.3609': attribute type 12 has an invalid length. [ 403.011274][T19035] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.048769][T19035] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.262610][T19042] syzkaller1: entered promiscuous mode [ 403.269458][T19042] syzkaller1: entered allmulticast mode [ 403.296366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.477135][T19064] bond3: Unable to set up delay as MII monitoring is disabled [ 403.488932][T19064] bond3 (unregistering): Released all slaves [ 404.001286][T19103] netlink: 'syz.0.3629': attribute type 24 has an invalid length. [ 404.079697][T19109] __nla_validate_parse: 9 callbacks suppressed [ 404.079717][T19109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3629'. [ 404.099920][T19112] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3631'. [ 404.163458][T19112] openvswitch: netlink: Flow key attr not present in new flow. [ 404.181500][T19103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 404.244469][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3632'. [ 404.309258][T19119] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3632'. [ 404.573379][T19137] macsec1: entered promiscuous mode [ 404.624243][T19139] pim6reg1: entered promiscuous mode [ 404.635952][T19139] pim6reg1: entered allmulticast mode [ 404.697624][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.705391][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.713370][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.740752][T19141] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 404.827422][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.842076][T19129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.853100][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.875153][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.883689][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.894194][T19148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.894419][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.912110][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.927936][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.961734][T19141] wg1 speed is unknown, defaulting to 1000 [ 404.970786][T19141] wg1 speed is unknown, defaulting to 1000 [ 405.265557][T19164] can: request_module (can-proto-0) failed. [ 405.297846][T19168] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 405.539548][T19194] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3655'. [ 405.762525][T19205] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3659'. [ 405.855775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.003431][T19225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.124052][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3665'. [ 406.152722][T19230] lo: entered allmulticast mode [ 406.161085][T19230] lo: left allmulticast mode [ 406.360282][T19244] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3671'. [ 406.373894][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3670'. [ 406.584714][ T5985] IPVS: starting estimator thread 0... [ 406.687326][T19264] batadv_slave_1: entered promiscuous mode [ 406.705913][T19261] IPVS: using max 28 ests per chain, 67200 per kthread [ 406.807815][T19277] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 406.896024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.448361][T19263] batadv_slave_1: left promiscuous mode [ 407.741682][T19328] netlink: 'syz.3.3698': attribute type 5 has an invalid length. [ 407.758756][T19330] netlink: 'syz.2.3697': attribute type 1 has an invalid length. [ 407.859246][T19335] netlink: 'syz.0.3700': attribute type 1 has an invalid length. [ 407.936087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.936980][T19335] bond3: entered promiscuous mode [ 407.954084][T19335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.777530][T19382] geneve3: entered promiscuous mode [ 408.791022][T19384] netlink: 'syz.1.3712': attribute type 11 has an invalid length. [ 408.975739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.506903][T19421] __nla_validate_parse: 12 callbacks suppressed [ 409.506924][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3725'. [ 409.617174][T19429] syzkaller0: entered promiscuous mode [ 409.622773][T19429] syzkaller0: entered allmulticast mode [ 409.912730][T19443] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3730'. [ 410.015788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.023676][T12078] tipc: Resetting bearer [ 410.063602][T19459] sctp: [Deprecated]: syz.3.3735 (pid 19459) Use of int in max_burst socket option deprecated. [ 410.063602][T19459] Use struct sctp_assoc_value instead [ 410.191489][T19461] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3736'. [ 410.212238][T19465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3737'. [ 410.307443][T19469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'. [ 410.689538][T19494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.747261][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3749'. [ 410.756991][T19502] netlink: 'syz.1.3749': attribute type 30 has an invalid length. [ 410.765794][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3749'. [ 410.841931][T19503] bond3: Unable to set up delay as MII monitoring is disabled [ 410.856999][T19503] bond3 (unregistering): Released all slaves [ 410.943863][T19513] x_tables: duplicate underflow at hook 1 [ 411.055989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.073024][T19524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3757'. [ 411.153459][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3758'. [ 411.163513][T19527] tipc: Enabled bearer , priority 0 [ 411.186944][T19529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3758'. [ 411.208032][T19527] tipc: Resetting bearer [ 411.260768][T19525] tipc: Disabling bearer [ 411.270342][T19536] netlink: 'syz.3.3761': attribute type 23 has an invalid length. [ 411.401942][T19547] netlink: 'syz.5.3764': attribute type 8 has an invalid length. [ 411.436352][T19550] tipc: Started in network mode [ 411.447646][T19550] tipc: Node identity ac14140f, cluster identity 4711 [ 411.455236][T19550] tipc: New replicast peer: 255.255.255.255 [ 411.478019][T19550] tipc: Enabled bearer , priority 10 [ 411.816428][T19574] netlink: 'syz.0.3771': attribute type 1 has an invalid length. [ 411.960780][T19580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.970114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.095743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.245076][T19596] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 412.270576][T19596] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 412.491373][ T9] tipc: Node number set to 2886997007 [ 412.541199][T19610] syzkaller0: entered promiscuous mode [ 412.566045][T19610] syzkaller0: entered allmulticast mode [ 412.709564][T19588] netlink: 'syz.2.3776': attribute type 16 has an invalid length. [ 412.718283][T19588] netlink: 'syz.2.3776': attribute type 17 has an invalid length. [ 412.765577][T19588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.794142][T19588] eql: remember to turn off Van-Jacobson compression on your slave devices [ 412.834764][T19588] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 413.135725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.442145][T19653] xt_TPROXY: Can be used only with -p tcp or -p udp [ 413.593862][T19665] syz_tun: entered allmulticast mode [ 413.964714][T19691] netlink: 'syz.5.3802': attribute type 1 has an invalid length. [ 414.063595][T19698] netlink: 'syz.1.3807': attribute type 6 has an invalid length. [ 414.214587][T19698] netlink: 'syz.1.3807': attribute type 15 has an invalid length. [ 414.242315][T19691] macvlan2: entered promiscuous mode [ 414.259827][T19691] macvlan2: entered allmulticast mode [ 414.283841][T19691] bond1: entered promiscuous mode [ 414.321395][T19691] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.343980][T19691] bond1: left promiscuous mode [ 414.420218][T19698] netlink: 'syz.1.3807': attribute type 15 has an invalid length. [ 414.672043][T19721] __nla_validate_parse: 20 callbacks suppressed [ 414.672066][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'. [ 414.816995][T19732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3813'. [ 414.937941][T19736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3820'. [ 415.107882][T19750] openvswitch: netlink: Message has 564 unknown bytes. [ 415.129948][T19750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.166584][T19753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3824'. [ 415.176438][T19755] tipc: Enabled bearer , priority 0 [ 415.223574][T19756] syzkaller0: entered promiscuous mode [ 415.230143][T19756] syzkaller0: entered allmulticast mode [ 415.279290][T19757] tipc: Resetting bearer [ 415.339007][T19757] tipc: Disabling bearer [ 415.347225][T19760] netlink: 'syz.0.3826': attribute type 1 has an invalid length. [ 415.355041][T19760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3826'. [ 415.395460][T19762] tipc: Enabled bearer , priority 0 [ 415.406349][T19764] tipc: Enabled bearer , priority 0 [ 415.414204][T19762] syzkaller0: entered promiscuous mode [ 415.420748][T19762] syzkaller0: entered allmulticast mode [ 415.429416][T19764] syzkaller0: entered promiscuous mode [ 415.435129][T19764] syzkaller0: entered allmulticast mode [ 415.449166][T19762] tipc: Resetting bearer [ 415.463152][T19767] netlink: 'syz.0.3829': attribute type 12 has an invalid length. [ 415.477859][T19767] netlink: 'syz.0.3829': attribute type 29 has an invalid length. [ 415.486781][T19767] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3829'. [ 415.498145][T19767] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3829'. [ 415.508447][T19762] tipc: Resetting bearer [ 415.540606][T19762] tipc: Disabling bearer [ 415.566543][T19764] tipc: Resetting bearer [ 415.578932][T19763] tipc: Resetting bearer [ 415.654142][T19763] tipc: Disabling bearer [ 415.727045][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3833'. [ 415.745663][T19779] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3832'. [ 415.875120][T19787] netlink: 'syz.3.3833': attribute type 12 has an invalid length. [ 415.916563][T19787] netlink: 'syz.3.3833': attribute type 29 has an invalid length. [ 415.944679][T19787] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3833'. [ 416.074963][T19795] veth7: entered promiscuous mode [ 416.097453][T19795] veth7: entered allmulticast mode [ 416.105859][T19800] tipc: Started in network mode [ 416.113064][T19800] tipc: Node identity ac14140f, cluster identity 4711 [ 416.121141][T19800] tipc: New replicast peer: 255.255.255.255 [ 416.129129][T19800] tipc: Enabled bearer , priority 10 [ 416.137378][T19802] netlink: 'syz.0.3839': attribute type 1 has an invalid length. [ 416.668004][T19838] tipc: Enabling of bearer rejected, failed to enable media [ 417.017908][T19864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.025246][T19864] IPv6: NLM_F_CREATE should be set when creating new route [ 417.032575][T19864] IPv6: NLM_F_CREATE should be set when creating new route [ 417.039891][T19864] IPv6: NLM_F_CREATE should be set when creating new route [ 417.071627][T19869] : entered promiscuous mode [ 417.102666][T19864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.307283][ T5909] tipc: Node number set to 2886997007 [ 417.723438][T19907] dvmrp0: entered allmulticast mode [ 418.308395][T19932] C: renamed from lo [ 418.318615][T19932] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 418.583958][T19946] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 418.887238][T19966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.924866][T19971] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 4, id = 0 [ 419.110955][ T10] IPVS: starting estimator thread 0... [ 419.117913][T19984] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 419.205780][T19992] IPVS: using max 27 ests per chain, 64800 per kthread [ 419.403456][T20003] dvmrp8: entered allmulticast mode [ 419.434508][T20005] validate_nla: 3 callbacks suppressed [ 419.434528][T20005] netlink: 'syz.3.3893': attribute type 10 has an invalid length. [ 419.448948][T20005] bridge0: port 3(team0) entered blocking state [ 419.455466][T20005] bridge0: port 3(team0) entered disabled state [ 419.464049][T20005] team0: entered allmulticast mode [ 419.476351][T20005] team_slave_0: entered allmulticast mode [ 419.483498][T20005] team_slave_1: entered allmulticast mode [ 419.493615][T20005] team0: entered promiscuous mode [ 419.502453][T20005] team_slave_0: entered promiscuous mode [ 419.512333][T20005] team_slave_1: entered promiscuous mode [ 419.527588][T20007] netlink: 'syz.1.3895': attribute type 30 has an invalid length. [ 419.695925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.708651][T20015] bond0: entered promiscuous mode [ 419.719230][T20015] bond_slave_0: entered promiscuous mode [ 419.730680][T20015] bond_slave_1: entered promiscuous mode [ 419.739559][T20015] batadv0: entered promiscuous mode [ 419.747301][T20015] debugfs: 'hsr1' already exists in 'hsr' [ 419.758020][T20015] Cannot create hsr debugfs directory [ 419.764075][T20015] hsr1: entered allmulticast mode [ 419.773652][T20015] bond0: entered allmulticast mode [ 419.780480][T20015] bond_slave_0: entered allmulticast mode [ 419.788165][T20015] bond_slave_1: entered allmulticast mode [ 419.793971][T20015] batadv0: entered allmulticast mode [ 419.799981][T20015] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 419.808538][T20015] bond0: left promiscuous mode [ 419.813367][T20015] bond_slave_0: left promiscuous mode [ 419.819824][T20015] bond_slave_1: left promiscuous mode [ 419.826692][T20015] batadv0: left promiscuous mode [ 420.218134][T20047] netlink: 'syz.1.3906': attribute type 29 has an invalid length. [ 420.227947][T20047] netlink: 'syz.1.3906': attribute type 29 has an invalid length. [ 420.375576][T20056] IPv6: sit1: Disabled Multicast RS [ 420.392470][T20056] sit1: entered allmulticast mode [ 420.554869][T20063] __nla_validate_parse: 13 callbacks suppressed [ 420.554894][T20063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3911'. [ 420.592240][T20067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.603765][T20067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.614051][T20067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.646518][T20067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.654991][T20067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.678119][T20063] macsec2: entered promiscuous mode [ 420.685316][T20063] macsec2: entered allmulticast mode [ 420.691739][T20063] bond3: (slave macsec2): Error -34 calling dev_set_mtu [ 420.709721][T20067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.740007][T20075] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 420.789142][T20075] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3913'. [ 420.898798][ T43] IPVS: starting estimator thread 0... [ 420.920335][T20085] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3919'. [ 420.986189][T20083] IPVS: using max 27 ests per chain, 64800 per kthread [ 421.069322][T20093] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 421.220354][T20100] lo: entered allmulticast mode [ 421.225830][T20100] lo: left allmulticast mode [ 421.237493][T20101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3926'. [ 421.325980][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3927'. [ 421.349062][T20108] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3928'. [ 421.407035][T20108] syzkaller0: entered promiscuous mode [ 421.412673][T20108] syzkaller0: entered allmulticast mode [ 421.422036][T20108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3928'. [ 423.206808][T20121] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 423.218995][T20123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3933'. [ 423.468487][T20150] Bluetooth: MGMT ver 1.23 [ 423.538168][T20151] bridge: RTM_NEWNEIGH with invalid ether address [ 423.575837][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3935'. [ 423.607044][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3935'. [ 423.764218][T20170] 8021q: VLANs not supported on ip_vti0 [ 423.777670][T20170] 8021q: VLANs not supported on ip_vti0 [ 424.135008][T20194] team0: Device wireguard0 is of different type [ 424.285020][ C0] Illegal XDP return value 16128 on prog (id 979) dev bond_slave_0, expect packet loss! [ 424.697182][T20223] team0: Port device team_slave_0 removed [ 424.698241][T20226] x_tables: duplicate underflow at hook 1 [ 424.937988][T20238] net_ratelimit: 10 callbacks suppressed [ 424.938010][T20238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.023008][T20247] ipt_REJECT: TCP_RESET invalid for non-tcp [ 425.058917][T20246] tipc: Enabled bearer , priority 0 [ 425.123549][T20246] syzkaller0: entered allmulticast mode [ 425.150740][T20246] tipc: Resetting bearer [ 425.174407][T20245] tipc: Resetting bearer [ 425.233746][T20245] tipc: Disabling bearer [ 425.550932][T20283] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 425.689086][T20291] macvtap1: entered allmulticast mode [ 425.694746][T20291] veth0_macvtap: entered allmulticast mode [ 425.755799][T20295] __nla_validate_parse: 6 callbacks suppressed [ 425.755819][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3978'. [ 425.866166][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3982'. [ 426.016429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.047374][T20308] ip6tnl1: entered promiscuous mode [ 426.065218][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'. [ 426.085412][T20310] tipc: Enabled bearer , priority 0 [ 426.099147][T20310] +: renamed from syzkaller0 [ 426.117933][T20310] tipc: Disabling bearer [ 426.267050][T20325] netlink: 'syz.5.3989': attribute type 1 has an invalid length. [ 426.362869][T20325] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.387792][T20325] bond4: (slave bond5): making interface the new active one [ 426.403822][T20325] bond4: (slave bond5): Enslaving as an active interface with an up link [ 426.454132][T20325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3989'. [ 426.480495][T20332] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 426.500766][T20325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.710634][T20344] syzkaller1: entered promiscuous mode [ 426.719911][T20344] syzkaller1: entered allmulticast mode [ 426.729512][T20344] netlink: 'syz.5.3993': attribute type 21 has an invalid length. [ 426.907501][T20346] netlink: 'syz.1.3994': attribute type 11 has an invalid length. [ 426.936470][T20346] netlink: 'syz.1.3994': attribute type 11 has an invalid length. [ 426.946438][T20346] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3994'. [ 427.061209][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3997'. [ 427.065887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.173558][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3997'. [ 427.413289][T20380] SET target dimension over the limit! [ 427.427079][T20380] netlink: 'syz.3.4002': attribute type 16 has an invalid length. [ 427.435199][T20380] netlink: 'syz.3.4002': attribute type 17 has an invalid length. [ 427.480632][T20380] bridge0: port 3(team0) entered blocking state [ 427.487256][T20380] bridge0: port 3(team0) entered forwarding state [ 427.500145][T20380] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.538190][T20380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.614192][T20390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4006'. [ 427.889892][T20409] bond4: option all_slaves_active: invalid value (222) [ 427.906200][T20409] bond4 (unregistering): Released all slaves [ 428.106205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.152965][T20423] macvlan4: entered promiscuous mode [ 428.206688][T20424] macvlan5: entered promiscuous mode [ 428.264249][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4008'. [ 428.541550][T20443] netlink: 'syz.1.4020': attribute type 7 has an invalid length. [ 428.697172][T20448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4021'. [ 428.739277][T20446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.765315][T20446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.808697][T20446] tipc: Resetting bearer [ 428.816429][T20456] netlink: 'syz.0.4026': attribute type 3 has an invalid length. [ 428.844577][T20446] tipc: Disabling bearer [ 429.135708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.413910][T20490] netlink: 'syz.5.4035': attribute type 10 has an invalid length. [ 429.448449][T20490] bridge_slave_1: left allmulticast mode [ 429.454248][T20490] bridge_slave_1: left promiscuous mode [ 429.496629][T20490] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.533042][T20490] bridge_slave_1: entered allmulticast mode [ 429.543222][T20490] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 429.770138][T20511] netlink: zone id is out of range [ 429.783227][T20511] netlink: zone id is out of range [ 429.793508][T20511] netlink: zone id is out of range [ 429.844202][T20519] tipc: New replicast peer: 172.30.1.1 [ 429.858713][T20519] xt_l2tp: missing protocol rule (udp|l2tpip) [ 430.113666][T20527] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 430.133820][T20527] bond3 (unregistering): Released all slaves [ 430.175798][ C0] net_ratelimit: 51 callbacks suppressed [ 430.175820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.395248][T20550] gre1: entered promiscuous mode [ 430.445999][T20550] gre1: entered allmulticast mode [ 430.481193][T20549] gre1: entered promiscuous mode [ 430.489106][T20549] gre1: entered allmulticast mode [ 430.505126][T20543] netlink: 'syz.5.4055': attribute type 9 has an invalid length. [ 430.537757][T20561] netlink: 'syz.1.4058': attribute type 25 has an invalid length. [ 430.546917][T20561] netlink: 'syz.1.4058': attribute type 25 has an invalid length. [ 430.708440][T20569] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 430.721220][T20569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.871240][T20580] __nla_validate_parse: 14 callbacks suppressed [ 430.871262][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4064'. [ 431.039623][T20589] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4068'. [ 431.092816][T20594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4070'. [ 431.264370][T20606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4073'. [ 431.414751][T20614] tipc: Enabled bearer , priority 0 [ 431.443266][T20614] syzkaller0: entered promiscuous mode [ 431.451996][T20614] syzkaller0: entered allmulticast mode [ 431.518732][T20621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4079'. [ 431.526432][T20614] tipc: Resetting bearer [ 431.536783][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4079'. [ 431.564466][T20623] IPv6: sit1: Disabled Multicast RS [ 431.575762][T20621] block nbd1: Unsupported socket: should be TCP or UNIX. [ 431.582394][T20623] sit1: entered allmulticast mode [ 431.642843][T20613] tipc: Resetting bearer [ 431.676713][T20613] tipc: Disabling bearer [ 431.910755][T20638] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 432.080628][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 432.170557][T20651] bond3: ARP target 1.0.0.0 is already present [ 432.205849][T20651] bond3: option arp_ip_target: invalid value (1) [ 432.332433][T20651] bond3 (unregistering): Released all slaves [ 432.483762][T20665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.588308][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4093'. [ 432.682583][T20678] sctp: [Deprecated]: syz.3.4092 (pid 20678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.682583][T20678] Use struct sctp_sack_info instead [ 432.703115][T20679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4094'. [ 432.794305][T20684] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4095'. [ 433.313243][T20710] Bluetooth: MGMT ver 1.23 [ 433.489461][T20715] netlink: 'syz.5.4104': attribute type 6 has an invalid length. [ 433.699526][T20726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.185302][T20770] sit0: Master is either lo or non-ether device [ 434.497089][T20796] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 434.548288][T20800] xt_cluster: node mask cannot exceed total number of nodes [ 434.819326][T20822] xt_recent: Unsupported userspace flags (000000b1) [ 435.066630][T20831] openvswitch: netlink: Flow key attr not present in new flow. [ 435.689298][T20842] openvswitch: netlink: Missing key (keys=40, expected=80) [ 436.093575][T20870] netlink: 'syz.0.4147': attribute type 4 has an invalid length. [ 436.102445][T20870] __nla_validate_parse: 11 callbacks suppressed [ 436.103420][T20870] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4147'. [ 436.144550][T20870] netlink: 'syz.0.4147': attribute type 11 has an invalid length. [ 436.461335][T20885] bond4: option mode: unable to set because the bond device is up [ 436.473874][T20886] bond4: option mode: unable to set because the bond device is up [ 436.630518][T20896] bridge_slave_0: left allmulticast mode [ 436.650613][T20896] bridge_slave_0: left promiscuous mode [ 436.668440][T20896] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.729910][T20896] bridge_slave_1: left allmulticast mode [ 436.775799][T20896] bridge_slave_1: left promiscuous mode [ 436.781692][T20896] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.830458][T20896] bond0: (slave bond_slave_0): Releasing backup interface [ 436.840737][T20896] bond0: (slave bond_slave_1): Releasing backup interface [ 436.859682][T20896] team0: Port device team_slave_1 removed [ 436.870141][T20896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.880717][T20896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.890554][T20896] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.918576][T20905] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4156'. [ 436.946750][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4156'. [ 437.054503][T20912] xt_TCPMSS: Only works on TCP SYN packets [ 437.079039][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4159'. [ 437.108718][T20915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4159'. [ 437.127700][T20921] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4158'. [ 437.169847][T20924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4162'. [ 437.243324][T20926] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 437.257705][T20926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4163'. [ 437.316539][T20933] syzkaller0: entered promiscuous mode [ 437.322413][T20933] syzkaller0: entered allmulticast mode [ 437.369341][T20936] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 437.610148][T20946] syzkaller0: entered promiscuous mode [ 437.611056][T20949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4170'. [ 437.649162][T20946] syzkaller0: entered allmulticast mode [ 437.743834][T20960] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 438.198899][T20977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.213470][T20978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4177'. [ 439.967026][T20988] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 440.005094][T20988] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 440.055461][T20988] gretap1: entered promiscuous mode [ 440.062395][T20988] gretap1: entered allmulticast mode [ 440.391029][T21036] batadv1: entered allmulticast mode [ 440.520526][T21053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.549543][T21053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.830695][T21078] netlink: 'syz.3.4199': attribute type 1 has an invalid length. [ 441.354280][T21110] __nla_validate_parse: 7 callbacks suppressed [ 441.354302][T21110] netlink: 45 bytes leftover after parsing attributes in process `syz.2.4205'. [ 441.523386][T21114] bond5: entered promiscuous mode [ 441.560537][T21114] bond5: entered allmulticast mode [ 441.587321][T21114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.166370][T21146] v: renamed from veth0_vlan [ 443.187342][T21153] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4220'. [ 443.219695][T21153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4220'. [ 443.252838][T21151] syzkaller0: entered promiscuous mode [ 443.269044][T21151] syzkaller0: entered allmulticast mode [ 443.382776][T21163] netlink: 'syz.0.4221': attribute type 1 has an invalid length. [ 443.638274][T21181] netlink: 'syz.1.4226': attribute type 3 has an invalid length. [ 443.648736][T21186] 8021q: VLANs not supported on sit0 [ 443.810950][T21196] netlink: 'syz.5.4232': attribute type 1 has an invalid length. [ 443.823941][T21196] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4232'. [ 443.844088][T21196] NCSI netlink: No device for ifindex 0 [ 444.028729][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4235'. [ 444.045050][T21212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4237'. [ 444.160519][T21215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4239'. [ 444.186847][T21218] netlink: 'syz.5.4241': attribute type 1 has an invalid length. [ 444.214554][T21215] syzkaller0: entered promiscuous mode [ 444.223280][T21219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4240'. [ 444.227523][T21215] syzkaller0: entered allmulticast mode [ 444.376436][T21224] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4242'. [ 444.502917][T21234] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4245'. [ 444.561362][T21229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.598603][T21229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 444.803282][T21229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.818126][T21248] netlink: 'syz.2.4251': attribute type 1 has an invalid length. [ 444.823012][T21229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 444.951316][T21248] bond6: entered promiscuous mode [ 444.965523][T21248] 8021q: adding VLAN 0 to HW filter on device bond6 [ 444.993404][T21229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.008827][T21229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 445.073075][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.119548][T21229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.131507][T21229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 445.163561][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.188123][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.401139][ T4523] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 445.410500][ T4523] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.531817][ T4523] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 445.546047][ T4523] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.555113][ T4523] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 445.564718][ T4523] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.659786][ T2963] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 445.684643][ T2963] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.759286][T21262] infiniband syz2: set down [ 445.764107][T21262] infiniband syz2: added ip6_vti0 [ 445.782657][ T43] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.879147][T21262] RDS/IB: syz2: added [ 445.884109][T21262] smc: adding ib device syz2 with port count 1 [ 445.916215][T21262] smc: ib device syz2 port 1 has no pnetid [ 445.949564][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.984314][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.319693][T21312] x_tables: duplicate underflow at hook 2 [ 446.343294][T21312] sctp: [Deprecated]: syz.2.4271 (pid 21312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.343294][T21312] Use struct sctp_sack_info instead [ 446.367215][T21317] netlink: 'syz.5.4273': attribute type 13 has an invalid length. [ 446.443562][T21321] openvswitch: netlink: Flow key attr not present in new flow. [ 446.485059][T21317] ip6tnl0: left promiscuous mode [ 446.624680][T21317] tipc: Resetting bearer [ 446.693100][T21317] tipc: Resetting bearer [ 446.721323][T21326] __nla_validate_parse: 7 callbacks suppressed [ 446.721346][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4276'. [ 446.783531][T21317] geneve1: left promiscuous mode [ 446.791400][T21317] ip6gre1: left allmulticast mode [ 446.810834][T21317] veth7: left promiscuous mode [ 446.817720][T21317] veth7: left allmulticast mode [ 446.891720][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.918848][T21329] netlink: 'syz.1.4276': attribute type 4 has an invalid length. [ 447.089959][T21335] pimreg3: entered allmulticast mode [ 447.509911][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 447.553000][T21360] netlink: 'syz.3.4287': attribute type 4 has an invalid length. [ 447.907539][T21379] netlink: 'syz.1.4294': attribute type 15 has an invalid length. [ 447.953536][T21383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4295'. [ 447.975414][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4295'. [ 447.999216][T21386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4297'. [ 448.020655][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4295'. [ 448.021075][T21386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4297'. [ 448.087362][T21393] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4297'. [ 448.107287][T21393] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4297'. [ 448.250247][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.551434][T21423] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4306'. [ 448.563902][T21423] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4306'. [ 448.656547][T21431] netlink: 'syz.5.4307': attribute type 2 has an invalid length. [ 448.891428][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.922100][T21439] delete_channel: no stack [ 449.227173][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 449.544032][T21450] policy can only be matched on NF_INET_PRE_ROUTING [ 449.544056][T21450] unable to load match [ 449.576081][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 449.678262][T21457] netlink: 'syz.1.4316': attribute type 19 has an invalid length. [ 449.699436][T21457] netlink: 'syz.1.4316': attribute type 19 has an invalid length. [ 449.997042][T21474] openvswitch: netlink: IPv4 tunnel dst address is zero [ 450.200824][T21479] syzkaller0: entered promiscuous mode [ 450.211359][T21479] syzkaller0: entered allmulticast mode [ 450.211586][T21484] sctp: [Deprecated]: syz.5.4326 (pid 21484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.211586][T21484] Use struct sctp_sack_info instead [ 450.220965][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.340518][T21482] syzkaller0: entered promiscuous mode [ 450.346422][T21482] syzkaller0: entered allmulticast mode [ 452.213447][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 452.368614][T21517] __nla_validate_parse: 9 callbacks suppressed [ 452.368637][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4335'. [ 452.388750][T21517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4335'. [ 452.508606][ T53] Bluetooth: hci3: command 0x040f tx timeout [ 452.751463][T21532] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:512 [ 454.308518][T21543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4341'. [ 454.430201][T21552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.757264][T21574] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4347'. [ 454.779253][T21577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4348'. [ 455.138240][T21592] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 455.264506][T21604] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.4357'. [ 455.396244][T21612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4359'. [ 455.506021][T21622] netlink: 'syz.0.4363': attribute type 3 has an invalid length. [ 455.513997][T21622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4363'. [ 455.537900][T21611] ip6_vti0 speed is unknown, defaulting to 1000 [ 455.789023][T21631] netlink: 'syz.0.4366': attribute type 1 has an invalid length. [ 455.815698][T21631] netlink: 'syz.0.4366': attribute type 2 has an invalid length. [ 455.941052][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4368'. [ 456.366728][T21661] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 456.426935][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4376'. [ 457.497432][T21730] __nla_validate_parse: 3 callbacks suppressed [ 457.497460][T21730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4398'. [ 457.529938][T21732] netlink: 'syz.0.4397': attribute type 9 has an invalid length. [ 457.550478][T21732] netlink: 'syz.0.4397': attribute type 11 has an invalid length. [ 457.564312][T21731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4395'. [ 457.601532][T21732] netlink: 'syz.0.4397': attribute type 12 has an invalid length. [ 457.609660][T21732] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4397'. [ 457.974887][T21744] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4402'. [ 458.118799][T21754] tipc: Enabled bearer , priority 0 [ 458.131353][T21754] syzkaller0: entered promiscuous mode [ 458.145106][T21754] syzkaller0: entered allmulticast mode [ 458.167314][T21754] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 458.168362][T21756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4407'. [ 458.213297][T21754] tipc: Resetting bearer [ 458.227968][T21752] tipc: Resetting bearer [ 458.326605][T21752] tipc: Disabling bearer [ 458.828101][T21792] veth0: entered promiscuous mode [ 458.868999][T21792] veth0: left promiscuous mode [ 458.875081][T21792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.114438][T21805] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4421'. [ 459.129850][T21802] ip6_vti0 speed is unknown, defaulting to 1000 [ 459.147609][T21797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.207008][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4424'. [ 459.223592][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4421'. [ 459.397247][T21816] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 459.641858][T21834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4427'. [ 459.748122][T21837] bridge3: entered promiscuous mode [ 459.753480][T21837] bridge3: entered allmulticast mode [ 459.932013][T21846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4432'. [ 459.951889][T21834] hsr_slave_0 (unregistering): left promiscuous mode [ 460.251585][T21855] netlink: 'syz.5.4434': attribute type 4 has an invalid length. [ 461.505127][T21919] pimreg: entered allmulticast mode [ 461.831532][T21938] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 461.849009][T21938] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20003 [ 462.004265][T21946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.380492][T21973] tipc: Enabling of bearer rejected, failed to enable media [ 462.740053][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 462.766084][T21985] pim6reg527: entered allmulticast mode [ 462.929637][T22003] __nla_validate_parse: 9 callbacks suppressed [ 462.929658][T22003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4481'. [ 462.970710][T21999] gretap0: entered promiscuous mode [ 462.978765][T21999] vlan2: entered promiscuous mode [ 463.219451][T22019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4488'. [ 463.281695][T22024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.760367][T22045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.774990][T22045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.811815][T22045] veth0_virt_wifi: left allmulticast mode [ 463.871349][T22045] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 463.924155][T22045] vlan0: left allmulticast mode [ 463.931660][T22045] veth0_vlan: left allmulticast mode [ 463.937361][T22045] vlan0: left promiscuous mode [ 463.942677][T22045] macvtap1: left promiscuous mode [ 463.948058][T22045] macvtap1: left allmulticast mode [ 463.965885][T22045] bond5: left promiscuous mode [ 463.970819][T22045] bond5: left allmulticast mode [ 464.014983][ T3567] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.038790][ T3567] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.057452][ T3567] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.083063][ T3567] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.133186][ T3567] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.155789][ T3567] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.164777][ T3567] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.209952][ T3567] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.231132][T22074] xt_cgroup: xt_cgroup: no path or classid specified [ 464.320131][T22079] syzkaller1: entered promiscuous mode [ 464.352870][T22079] syzkaller1: entered allmulticast mode [ 464.383875][T22083] kthread_run failed with err -4 [ 464.670924][T22111] syzkaller0: entered allmulticast mode [ 464.678727][T22111] netlink: 'syz.0.4514': attribute type 1 has an invalid length. [ 464.737103][T22111] macvlan2: entered promiscuous mode [ 464.742775][T22111] macvlan2: entered allmulticast mode [ 464.751745][T22111] bond6: entered promiscuous mode [ 464.758006][T22111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.793755][T22111] bond6: left promiscuous mode [ 465.029456][T22123] syzkaller0: entered promiscuous mode [ 465.056557][T22123] syzkaller0: entered allmulticast mode [ 465.096362][T22134] netlink: 'syz.0.4523': attribute type 11 has an invalid length. [ 465.107097][T22134] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.4523'. [ 465.153742][T22134] netlink: 'syz.0.4523': attribute type 1 has an invalid length. [ 465.167145][T22133] netlink: 'syz.1.4522': attribute type 4 has an invalid length. [ 465.226062][T22137] netlink: 'syz.1.4522': attribute type 4 has an invalid length. [ 465.325403][T22133] syzkaller0: entered promiscuous mode [ 465.331391][T22133] syzkaller0: entered allmulticast mode [ 465.449543][T22149] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4529'. [ 465.463540][T22149] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4529'. [ 465.704953][T22165] netlink: 'syz.3.4532': attribute type 4 has an invalid length. [ 465.786852][T22170] syzkaller1: entered promiscuous mode [ 465.792990][T22170] syzkaller1: entered allmulticast mode [ 466.076606][T22179] team0: left allmulticast mode [ 466.083526][T22179] team_slave_0: left allmulticast mode [ 466.106410][T22179] team_slave_1: left allmulticast mode [ 466.128180][T22179] team0: left promiscuous mode [ 466.134750][T22179] team_slave_0: left promiscuous mode [ 466.140927][T22179] team_slave_1: left promiscuous mode [ 466.147449][T22179] bridge0: port 3(team0) entered disabled state [ 466.172202][T22179] bridge_slave_0: left allmulticast mode [ 466.178456][T22179] bridge_slave_0: left promiscuous mode [ 466.186385][T22179] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.200672][T22179] bridge_slave_1: left allmulticast mode [ 466.206887][T22179] bridge_slave_1: left promiscuous mode [ 466.212781][T22179] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.232673][T22179] bond0: (slave bond_slave_0): Releasing backup interface [ 466.251437][T22179] bond0: (slave bond_slave_1): Releasing backup interface [ 466.271807][T22179] team0: Port device team_slave_0 removed [ 466.286639][T22179] team0: Port device team_slave_1 removed [ 466.295423][T22179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 466.343822][T22200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4542'. [ 466.395085][T22192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4541'. [ 466.456041][T22208] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 466.464078][T22209] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 466.483043][T22207] tipc: Enabled bearer , priority 0 [ 466.497173][T22207] syzkaller0: entered promiscuous mode [ 466.504012][T22207] syzkaller0: entered allmulticast mode [ 466.524978][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4545'. [ 466.543041][T22207] tipc: Resetting bearer [ 466.560409][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4543'. [ 466.601037][T22207] gretap0: entered promiscuous mode [ 466.645464][T22205] tipc: Resetting bearer [ 466.738778][T22205] tipc: Disabling bearer [ 466.903159][T22237] netlink: 'syz.2.4550': attribute type 13 has an invalid length. [ 467.054208][T22237] gretap0: refused to change device tx_queue_len [ 467.069743][T22237] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 467.241145][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4554'. [ 467.325038][T22261] veth0: entered promiscuous mode [ 467.373528][T22265] IPv6: sit1: Disabled Multicast RS [ 467.538041][T22276] ipt_REJECT: TCP_RESET invalid for non-tcp [ 467.577830][T22276] ipt_REJECT: TCP_RESET invalid for non-tcp [ 467.898048][T22301] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 468.773421][ T10] hid-generic 0005:0006:5508.0004: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 468.981147][T22368] __nla_validate_parse: 3 callbacks suppressed [ 468.981169][T22368] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4580'. [ 469.085065][T22371] ip6_vti0 speed is unknown, defaulting to 1000 [ 469.914973][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4595'. [ 469.924431][T22422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4595'. [ 469.963713][T22426] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 470.003188][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4595'. [ 470.047765][T22428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4595'. [ 470.411185][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4604'. [ 470.439878][T22446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4604'. [ 470.481677][T22449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'. [ 470.682949][T22449] syzkaller0: entered promiscuous mode [ 470.690541][T22449] syzkaller0: entered allmulticast mode [ 470.721619][T22478] Cannot find set identified by id 0 to match [ 470.741780][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4610'. [ 472.710226][T22499] netlink: 'syz.5.4617': attribute type 5 has an invalid length. [ 472.800873][T22506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4621'. [ 472.908287][T22507] syzkaller0: entered promiscuous mode [ 472.923446][T22507] syzkaller0: entered allmulticast mode [ 475.031220][T22562] netlink: 'syz.5.4633': attribute type 10 has an invalid length. [ 475.047330][T22562] __nla_validate_parse: 1 callbacks suppressed [ 475.047351][T22562] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4633'. [ 475.230492][T22573] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 475.367438][T22579] openvswitch: netlink: Missing valid actions attribute. [ 475.374679][T22579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.402826][T22580] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4639'. [ 475.560247][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4643'. [ 475.594036][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4644'. [ 475.624579][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4643'. [ 475.842635][T22615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'. [ 475.873072][T22595] team0 (unregistering): Port device team_slave_0 removed [ 475.882954][T22595] team0 (unregistering): Port device team_slave_1 removed [ 475.891902][T22595] team0 (unregistering): Port device veth0_virt_wifi removed [ 475.939866][T22617] tipc: Enabled bearer , priority 13 [ 476.034463][T22621] xt_addrtype: ipv6 does not support BROADCAST matching [ 476.141357][T22626] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4653'. [ 476.648782][T22657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4662'. [ 476.792572][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4664'. [ 476.803779][T22664] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4664'. [ 477.156507][T22686] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.164020][T22686] team0: Cannot enslave team device to itself [ 477.306574][T22697] netlink: 'syz.2.4673': attribute type 9 has an invalid length. [ 477.435008][T22703] Bluetooth: MGMT ver 1.23 [ 477.852335][T22734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.893928][T22739] x_tables: duplicate underflow at hook 3 [ 478.135519][T22750] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 478.165930][T22750] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 478.494753][T22777] A link change request failed with some changes committed already. Interface lok may have been left with an inconsistent configuration, please check. [ 478.561161][T22783] geneve5: entered promiscuous mode [ 478.570391][T22783] geneve5: entered allmulticast mode [ 478.594158][ T2963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.634695][ T2963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.667015][T22795] x_tables: duplicate underflow at hook 1 [ 478.712562][T22794] netlink: zone id is out of range [ 478.728401][T22800] netlink: zone id is out of range [ 478.742053][T22794] netlink: get zone limit has 8 unknown bytes [ 478.758592][T22800] netlink: get zone limit has 8 unknown bytes [ 478.795349][ T2963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.817244][ T2963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.286572][T22830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.647921][T22851] syzkaller0: entered promiscuous mode [ 479.653492][T22851] syzkaller0: entered allmulticast mode [ 479.766837][T22856] pim6reg1: entered promiscuous mode [ 479.772304][T22856] pim6reg1: entered allmulticast mode [ 479.934136][T17569] tipc: Subscription rejected, illegal request [ 479.980761][T22863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.248812][T22881] tipc: Enabled bearer , priority 0 [ 480.280186][T22881] syzkaller0: entered promiscuous mode [ 480.302335][T22881] syzkaller0: entered allmulticast mode [ 480.430956][T22895] __nla_validate_parse: 15 callbacks suppressed [ 480.430978][T22895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4727'. [ 480.616964][T22904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4730'. [ 480.676131][T22878] tipc: Resetting bearer [ 480.712595][T22911] netlink: 'syz.5.4732': attribute type 1 has an invalid length. [ 480.732938][T22878] tipc: Disabling bearer [ 480.806952][T22909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.927966][T22911] bond7: entered promiscuous mode [ 480.940021][T22911] 8021q: adding VLAN 0 to HW filter on device bond7 [ 481.007694][T22911] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4732'. [ 481.020733][T22918] bond7: (slave bridge3): making interface the new active one [ 481.028943][T22918] bridge3: entered promiscuous mode [ 481.040062][T22918] bridge3: left promiscuous mode [ 481.130885][T22938] x_tables: unsorted underflow at hook 3 [ 481.249696][T22944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4742'. [ 481.400721][T22945] IPv6: sit3: Disabled Multicast RS [ 481.418729][T22945] sit3: entered allmulticast mode [ 481.509811][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4745'. [ 481.523537][T22955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4745'. [ 481.532873][T22955] netlink: 'syz.1.4745': attribute type 12 has an invalid length. [ 481.545352][T22955] netlink: 'syz.1.4745': attribute type 11 has an invalid length. [ 481.658466][T22967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4748'. [ 481.678088][T22962] xt_ecn: cannot match TCP bits for non-tcp packets [ 481.925874][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'. [ 482.146129][T22993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4755'. [ 482.155502][T22993] netlink: 'syz.0.4755': attribute type 20 has an invalid length. [ 482.227005][T22995] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4756'. [ 482.238108][T22993] netlink: 'syz.0.4755': attribute type 20 has an invalid length. [ 482.770841][T23026] netlink: 'syz.3.4766': attribute type 1 has an invalid length. [ 482.873716][T23035] bond3: (slave ip6gretap1): making interface the new active one [ 482.893375][T23035] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 483.215859][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 483.418946][T23065] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 483.566012][T23077] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 483.646085][T23075] geneve2: entered promiscuous mode [ 483.654640][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.667114][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.681754][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.695325][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.799908][T23087] netlink: 'syz.1.4784': attribute type 22 has an invalid length. [ 483.808605][T23087] netlink: 'syz.1.4784': attribute type 22 has an invalid length. [ 483.942716][T23092] netlink: 'syz.2.4785': attribute type 9 has an invalid length. [ 483.956077][T23092] netlink: 'syz.2.4785': attribute type 11 has an invalid length. [ 484.608453][T23144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.962126][T23166] syzkaller0: entered promiscuous mode [ 484.968387][T23166] syzkaller0: entered allmulticast mode [ 485.762465][T23214] validate_nla: 3 callbacks suppressed [ 485.762485][T23214] netlink: 'syz.0.4820': attribute type 33 has an invalid length. [ 485.781400][T23215] netlink: 'syz.0.4820': attribute type 33 has an invalid length. [ 485.986723][T23224] geneve2: entered promiscuous mode [ 485.993208][T23225] netlink: 'syz.2.4824': attribute type 8 has an invalid length. [ 486.006671][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.020574][T23225] __nla_validate_parse: 19 callbacks suppressed [ 486.020599][T23225] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4824'. [ 486.042914][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.058926][T23228] netlink: 'syz.5.4826': attribute type 11 has an invalid length. [ 486.061878][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.074877][T23228] netlink: 'syz.5.4826': attribute type 11 has an invalid length. [ 486.086324][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.108918][T23228] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4826'. [ 486.497507][T23249] netlink: 'syz.0.4835': attribute type 30 has an invalid length. [ 486.708907][T23265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4840'. [ 486.725240][T23266] bond0: entered allmulticast mode [ 486.754683][T23266] bond_slave_0: entered allmulticast mode [ 486.762377][T23265] netlink: zone id is out of range [ 486.776634][T23266] bond_slave_1: entered allmulticast mode [ 486.777610][T23265] netlink: del zone limit has 4 unknown bytes [ 486.783011][T23266] bridge_slave_1: entered allmulticast mode [ 486.809235][T23272] netlink: 'syz.1.4842': attribute type 1 has an invalid length. [ 486.819868][T23266] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 486.820129][T23272] netlink: 'syz.1.4842': attribute type 2 has an invalid length. [ 486.848816][T23266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.045083][T23294] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 487.060336][T23294] veth0: entered promiscuous mode [ 487.119187][T23292] veth0: left promiscuous mode [ 487.469683][T23311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4856'. [ 487.652256][T23321] xt_ecn: cannot match TCP bits for non-tcp packets [ 487.659238][T23324] xt_ecn: cannot match TCP bits for non-tcp packets [ 487.667228][T23325] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4859'. [ 487.715689][T23325] vlan2: entered allmulticast mode [ 487.728116][T23325] gretap0: entered allmulticast mode [ 487.746423][T23327] netlink: 'syz.1.4859': attribute type 1 has an invalid length. [ 487.778895][T23299] netlink: 'syz.5.4850': attribute type 16 has an invalid length. [ 487.787091][T23299] netlink: 'syz.5.4850': attribute type 17 has an invalid length. [ 487.852150][T23331] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4850'. [ 487.869054][T23299] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.876326][T23299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.903265][T23327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.928686][T23299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.958141][T23336] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4860'. [ 487.987334][T23336] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4860'. [ 488.006810][T23336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4860'. [ 488.030314][T23339] sctp: [Deprecated]: syz.0.4863 (pid 23339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.030314][T23339] Use struct sctp_sack_info instead [ 488.243491][T23348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4866'. [ 488.255120][ T5842] Bluetooth: hci1: link tx timeout [ 488.268767][ T5842] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 488.292750][T23356] netlink: 'syz.5.4867': attribute type 2 has an invalid length. [ 488.719412][T23384] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.434957][T23430] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 490.975875][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 534.327102][T23438] validate_nla: 1 callbacks suppressed [ 534.327124][T23438] netlink: 'syz.1.4888': attribute type 3 has an invalid length. [ 534.366702][ T13] tipc: Subscription rejected, illegal request [ 534.425189][T23449] vlan2: entered promiscuous mode [ 534.443299][T23452] xt_hashlimit: size too large, truncated to 1048576 [ 534.445936][T23449] bond0: entered promiscuous mode [ 534.477240][T23449] bond0: (slave vlan2): Opening slave failed [ 534.734340][T23470] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 535.079618][T23487] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20000 [ 535.112373][T23487] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20000 [ 535.140718][T23488] __nla_validate_parse: 8 callbacks suppressed [ 535.140738][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4900'. [ 535.144417][T23495] block nbd1: Unsupported socket: should be TCP or UNIX. [ 535.222293][T23495] block nbd1: Unsupported socket: should be TCP or UNIX. [ 535.501877][T23518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4909'. [ 536.081463][T23548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4918'. [ 536.187581][T23519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 536.196775][T23519] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 536.231028][T23556] netlink: 'syz.5.4920': attribute type 4 has an invalid length. [ 536.348528][T23519] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 536.353219][T23558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4921'. [ 536.354483][T23519] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 536.384100][T23556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4920'. [ 536.419001][T23559] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.430161][T23559] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.487107][T23519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 536.493081][T23519] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 536.555446][T23559] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.570109][T23559] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.612725][T23568] netlink: 'syz.2.4924': attribute type 25 has an invalid length. [ 536.630430][T23568] netlink: 'syz.2.4924': attribute type 1 has an invalid length. [ 536.639594][T23568] netlink: 'syz.2.4924': attribute type 7 has an invalid length. [ 536.660012][T23519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 536.667832][T23519] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 536.675996][T23568] netlink: 'syz.2.4924': attribute type 8 has an invalid length. [ 536.677185][T23559] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.684576][T23568] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4924'. [ 536.696130][T23559] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.718804][T23575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4926'. [ 536.719539][T23568] NCSI netlink: No device for ifindex 65584 [ 536.732250][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4926'. [ 536.832389][T23559] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.867455][T23559] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.897213][T23574] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.992158][T23581] netlink: 'syz.1.4928': attribute type 29 has an invalid length. [ 537.027200][T23581] netlink: 'syz.1.4928': attribute type 29 has an invalid length. [ 537.048944][T23581] netlink: 'syz.1.4928': attribute type 29 has an invalid length. [ 537.092312][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4929'. [ 537.101874][T23581] netlink: 'syz.1.4928': attribute type 29 has an invalid length. [ 537.117081][ T3450] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.139951][ T3450] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.170858][T23589] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.4930'. [ 537.176669][ T3450] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.197065][T23589] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 537.208027][ T3450] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.247065][ T3450] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.264220][ T3450] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.305494][ T3528] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.323630][ T3528] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.465877][T23602] bond0: (slave rose0): Error: Device can not be enslaved while up [ 538.153564][T23617] bond8 (unregistering): Released all slaves [ 538.210439][T23628] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 538.476614][T23636] syzkaller0: entered promiscuous mode [ 538.482122][T23636] syzkaller0: entered allmulticast mode [ 538.620513][T23647] bond8 (unregistering): Released all slaves [ 539.241647][T23679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.686071][T23689] __nla_validate_parse: 5 callbacks suppressed [ 540.686092][T23689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4957'. [ 540.707410][T23694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4958'. [ 540.743068][T23694] hsr_slave_0: left promiscuous mode [ 540.754552][T23694] hsr_slave_1: left promiscuous mode [ 540.806877][T23695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4958'. [ 540.889049][T23695] validate_nla: 6 callbacks suppressed [ 540.889068][T23695] netlink: 'syz.0.4958': attribute type 3 has an invalid length. [ 540.908316][T23706] syzkaller0: entered promiscuous mode [ 540.913850][T23706] syzkaller0: entered allmulticast mode [ 541.132231][T23719] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 541.202720][T23724] netlink: 'syz.5.4968': attribute type 21 has an invalid length. [ 541.269833][T23727] xt_socket: unknown flags 0x50 [ 541.329300][T23730] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 541.348042][T23734] syz_tun: entered allmulticast mode [ 541.485457][T23740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 541.698335][T23757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4980'. [ 541.729526][T23757] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 541.922204][T23775] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4983'. [ 542.017493][T23779] netlink: 'syz.3.4982': attribute type 16 has an invalid length. [ 542.025387][T23779] netlink: 'syz.3.4982': attribute type 17 has an invalid length. [ 542.054886][T23775] syzkaller0: entered promiscuous mode [ 542.106569][T23775] syzkaller0: entered allmulticast mode [ 542.279781][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a9f9000: rx timeout, send abort [ 542.561511][T23801] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4989'. [ 542.782404][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a9f9400: rx timeout, send abort [ 542.791012][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a9f9000: abort rx timeout. Force session deactivation [ 543.290771][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a9f9400: abort rx timeout. Force session deactivation [ 544.140368][T23779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.478054][T23832] netlink: 'syz.1.4997': attribute type 18 has an invalid length. [ 544.497401][T23832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4997'. [ 544.509937][T23832] netlink: 'syz.1.4997': attribute type 18 has an invalid length. [ 544.555308][T23832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4997'. [ 544.713272][T23847] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5003'. [ 544.723125][T23847] netlink: 'syz.5.5003': attribute type 5 has an invalid length. [ 544.736982][T23851] netlink: 'syz.5.5003': attribute type 5 has an invalid length. [ 544.913177][T23859] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 545.705078][T23883] __nla_validate_parse: 8 callbacks suppressed [ 545.705116][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5011'. [ 545.729352][T23882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5013'. [ 545.739179][T23881] xt_l2tp: v2 doesn't support IP mode [ 545.781893][T23883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5011'. [ 545.804151][T23877] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 545.829066][T23877] bond4 (unregistering): Released all slaves [ 546.069053][T23899] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5018'. [ 546.249307][T23908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5019'. [ 546.366577][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5022'. [ 546.419145][T23915] vlan2: entered promiscuous mode [ 546.431003][T23918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.441035][T23915] bridge0: entered promiscuous mode [ 546.522825][T23930] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5027'. [ 546.767076][T23943] netlink: 'syz.2.5030': attribute type 1 has an invalid length. [ 546.789678][T23950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5029'. [ 546.915028][T23958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5035'. [ 547.118893][T23961] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 547.155675][T23959] nftables ruleset with unbound chain [ 547.210885][T23961] bond8: (slave lo): Enslaving as a backup interface with an up link [ 547.243165][T23961] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 547.288211][T23968] syzkaller1: entered allmulticast mode [ 547.321510][T23947] syz.0.5029: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 547.360310][T23947] CPU: 1 UID: 0 PID: 23947 Comm: syz.0.5029 Not tainted syzkaller #0 PREEMPT(full) [ 547.360340][T23947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.360353][T23947] Call Trace: [ 547.360362][T23947] [ 547.360371][T23947] dump_stack_lvl+0x189/0x250 [ 547.360405][T23947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.360428][T23947] ? __pfx__printk+0x10/0x10 [ 547.360456][T23947] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 547.360489][T23947] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 547.360524][T23947] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 547.360559][T23947] warn_alloc+0x214/0x310 [ 547.360594][T23947] ? __pfx_warn_alloc+0x10/0x10 [ 547.360633][T23947] ? __get_vm_area_node+0x28f/0x300 [ 547.360659][T23947] ? xskq_create+0xbf/0x170 [ 547.360686][T23947] __vmalloc_node_range_noprof+0x690/0x12d0 [ 547.360747][T23947] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 547.360778][T23947] ? __kasan_kmalloc+0x93/0xb0 [ 547.360813][T23947] vmalloc_user_noprof+0xad/0xf0 [ 547.360839][T23947] ? xskq_create+0xbf/0x170 [ 547.360862][T23947] xskq_create+0xbf/0x170 [ 547.360889][T23947] xsk_init_queue+0xb0/0x110 [ 547.360914][T23947] xsk_setsockopt+0x57b/0x8d0 [ 547.360939][T23947] ? __pfx_xsk_setsockopt+0x10/0x10 [ 547.360964][T23947] ? __pfx_aa_sk_perm+0x10/0x10 [ 547.360998][T23947] ? aa_sock_opt_perm+0xff/0x1a0 [ 547.361022][T23947] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 547.361057][T23947] ? __pfx_xsk_setsockopt+0x10/0x10 [ 547.361080][T23947] do_sock_setsockopt+0x17c/0x1b0 [ 547.361117][T23947] __x64_sys_setsockopt+0x13f/0x1b0 [ 547.361153][T23947] do_syscall_64+0xfa/0xf80 [ 547.361181][T23947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.361201][T23947] ? clear_bhb_loop+0x60/0xb0 [ 547.361226][T23947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.361245][T23947] RIP: 0033:0x7ff08bf8f749 [ 547.361264][T23947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.361282][T23947] RSP: 002b:00007ff08ce81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 547.361304][T23947] RAX: ffffffffffffffda RBX: 00007ff08c1e5fa0 RCX: 00007ff08bf8f749 [ 547.361318][T23947] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 547.361331][T23947] RBP: 00007ff08c013f91 R08: 0000000000000004 R09: 0000000000000000 [ 547.361343][T23947] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 547.361355][T23947] R13: 00007ff08c1e6038 R14: 00007ff08c1e5fa0 R15: 00007fff32d291c8 [ 547.361392][T23947] [ 547.361400][T23947] Mem-Info: [ 547.689049][T23947] active_anon:4782 inactive_anon:0 isolated_anon:0 [ 547.689049][T23947] active_file:2758 inactive_file:40071 isolated_file:0 [ 547.689049][T23947] unevictable:768 dirty:51 writeback:0 [ 547.689049][T23947] slab_reclaimable:13815 slab_unreclaimable:164582 [ 547.689049][T23947] mapped:29054 shmem:1353 pagetables:1193 [ 547.689049][T23947] sec_pagetables:0 bounce:0 [ 547.689049][T23947] kernel_misc_reclaimable:0 [ 547.689049][T23947] free:1244913 free_pcp:13499 free_cma:0 [ 547.769264][T23947] Node 0 active_anon:18928kB inactive_anon:0kB active_file:11032kB inactive_file:160084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116216kB dirty:204kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16184kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 547.804726][T23947] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 547.842145][T23996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.851441][T23947] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.932137][T23996] veth5: entered allmulticast mode [ 547.933284][T23947] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 547.964923][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5045'. [ 547.978302][T23947] Node 0 DMA32 free:1067784kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19128kB inactive_anon:0kB active_file:11032kB inactive_file:160084kB unevictable:1536kB writepending:204kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:38020kB local_pcp:19272kB free_cma:0kB [ 548.026291][T23947] lowmem_reserve[]: 0 0 0 0 0 [ 548.031090][T23947] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 548.121334][T23947] lowmem_reserve[]: 0 0 0 0 0 [ 548.151941][T23947] Node 1 Normal free:3895876kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16616kB local_pcp:9088kB free_cma:0kB [ 548.230376][T24014] netlink: 'syz.5.5048': attribute type 1 has an invalid length. [ 548.249825][T23947] lowmem_reserve[]: 0 0 0 0 0 [ 548.254629][T23947] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 548.297826][T23947] Node 0 DMA32: 472*4kB (UME) 101*8kB (UM) 9*16kB (ME) 41*32kB (UM) 53*64kB (UME) 16*128kB (UM) 3*256kB (M) 16*512kB (UME) 1*1024kB (U) 2*2048kB (M) 255*4096kB (M) = 1068152kB [ 548.328184][T23947] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 548.343486][T23947] Node 1 Normal: 3*4kB (UM) 5*8kB (UME) 51*16kB (UME) 185*32kB (UME) 45*64kB (UME) 7*128kB (UME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895876kB [ 548.363153][T23947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.378155][T23947] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 548.390610][T23947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.400598][T23947] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 548.417175][T23947] 44178 total pagecache pages [ 548.422867][T23947] 0 pages in swap cache [ 548.449008][T23947] Free swap = 124996kB [ 548.453313][T23947] Total swap = 124996kB [ 548.458151][T23947] 2097051 pages RAM [ 548.461999][T23947] 0 pages HighMem/MovableOnly [ 548.482770][T23947] 424280 pages reserved [ 548.489518][T23947] 0 pages cma reserved [ 548.588689][T24029] netlink: 'syz.5.5054': attribute type 1 has an invalid length. [ 548.758981][T24037] openvswitch: netlink: EtherType 50a is less than min 600 [ 549.207338][T24065] netlink: 'syz.0.5066': attribute type 1 has an invalid length. [ 549.334425][T24074] bond8: (slave lok): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 549.356478][T24074] bond8: (slave lok): Enslaving as a backup interface with an up link [ 549.369523][T24074] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 549.390595][T24065] bond8 (unregistering): Released all slaves [ 549.603258][T24089] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 549.626811][T24092] netlink: 'syz.3.5070': attribute type 3 has an invalid length. [ 550.018541][T24121] netlink: 'syz.1.5081': attribute type 25 has an invalid length. [ 550.040106][T24121] netlink: 'syz.1.5081': attribute type 25 has an invalid length. [ 550.390314][T24144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.510589][T24149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.525876][T24149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.577316][T24157] netlink: 'syz.5.5092': attribute type 13 has an invalid length. [ 550.610647][T24157] tipc: Resetting bearer [ 550.701484][T24149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.713456][T24149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.751926][T24152] syz_tun: left allmulticast mode [ 550.896333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.022637][T24149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.036759][T24149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.155988][T24149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.166832][T24149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.411065][ T34] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.422162][T24192] __nla_validate_parse: 19 callbacks suppressed [ 551.422185][T24192] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5098'. [ 551.430521][ T34] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.469443][T24192] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5098'. [ 551.527359][ T34] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.540358][ T34] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.600923][ T34] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.620085][ T34] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.642653][ T34] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.655143][T24194] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5099'. [ 551.666592][T24194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5099'. [ 551.677296][ T34] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.771705][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5104'. [ 551.778777][T24207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5103'. [ 551.854222][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5105'. [ 551.953565][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5106'. [ 552.057390][T24230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5107'. [ 552.088082][T24229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5107'. [ 553.129995][T24284] syzkaller0: entered promiscuous mode [ 553.150548][T24284] syzkaller0: entered allmulticast mode [ 555.430356][T24317] netem: change failed [ 555.559042][T24325] syzkaller0: entered promiscuous mode [ 555.564680][T24325] syzkaller0: entered allmulticast mode [ 555.866199][T24344] syzkaller1: entered promiscuous mode [ 555.871761][T24344] syzkaller1: entered allmulticast mode [ 555.967144][T24359] ip6tnl0: Caught tx_queue_len zero misconfig [ 556.645358][T24400] __nla_validate_parse: 15 callbacks suppressed [ 556.645381][T24400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5152'. [ 556.681705][T24401] netlink: 'syz.3.5153': attribute type 10 has an invalid length. [ 556.757380][T24410] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5155'. [ 556.872673][T24420] netlink: 'syz.1.5157': attribute type 7 has an invalid length. [ 556.902886][T24401] team0: Port device dummy0 added [ 557.027571][T24420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.082427][T24431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5161'. [ 557.120742][T24431] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5161'. [ 557.184755][T24433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5160'. [ 557.200044][T24440] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5161'. [ 557.210572][T24439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5163'. [ 557.273002][T24433] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5160'. [ 557.295856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.644258][T24469] netlink: 'syz.0.5171': attribute type 1 has an invalid length. [ 557.668948][T24473] lo: Caught tx_queue_len zero misconfig [ 557.769458][T24479] netlink: 'syz.5.5175': attribute type 11 has an invalid length. [ 557.789372][T24482] netlink: 'syz.2.5176': attribute type 1 has an invalid length. [ 557.789404][T24475] bond8: (slave gretap2): making interface the new active one [ 557.811691][T24475] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 557.813972][T24484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'. [ 557.821783][T24469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5171'. [ 557.837900][T24483] netlink: 'syz.2.5176': attribute type 1 has an invalid length. [ 558.045988][T24482] 8021q: adding VLAN 0 to HW filter on device bond10 [ 558.055106][T24482] bond9: (slave bond10): making interface the new active one [ 558.085257][T24482] bond9: (slave bond10): Enslaving as an active interface with an up link [ 558.120123][T24501] netlink: 'syz.0.5178': attribute type 7 has an invalid length. [ 558.128459][T24501] netlink: 'syz.0.5178': attribute type 8 has an invalid length. [ 558.833408][T24550] netlink: 'syz.3.5195': attribute type 1 has an invalid length. [ 558.891512][T24550] bond4: (slave bridge5): making interface the new active one [ 558.901613][T24550] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 559.067002][T24559] bond5: Removing last ns target with arp_interval on [ 559.206926][T24569] netlink: 'syz.3.5201': attribute type 12 has an invalid length. [ 560.165066][T24623] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 560.472069][T24632] syzkaller1: entered promiscuous mode [ 560.508322][T24632] syzkaller1: entered allmulticast mode [ 560.608539][T24640] netlink: 'syz.2.5220': attribute type 11 has an invalid length. [ 560.749469][T24642] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 561.218694][T24673] xt_hashlimit: max too large, truncated to 1048576 [ 561.258771][T24675] macvlan0: entered promiscuous mode [ 561.545270][T24684] macsec1: entered promiscuous mode [ 561.559826][T24684] macsec1: entered allmulticast mode [ 561.565261][T24684] bridge0: entered allmulticast mode [ 561.571803][T24684] bridge0: port 1(macsec1) entered blocking state [ 561.581580][T24684] bridge0: port 1(macsec1) entered disabled state [ 561.623301][T24684] bridge0: left allmulticast mode [ 561.651011][T24690] netlink: 'syz.1.5240': attribute type 4 has an invalid length. [ 561.754880][T24687] IPVS: persistence engine module ip_vs_pe_ not found [ 561.861274][T24701] __nla_validate_parse: 14 callbacks suppressed [ 561.861300][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5243'. [ 561.982714][T24707] netlink: 'syz.3.5247': attribute type 11 has an invalid length. [ 562.053405][T24711] !: renamed from dummy0 [ 562.059898][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5246'. [ 562.071950][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5246'. [ 562.098554][T24709] netlink: 'syz.1.5246': attribute type 12 has an invalid length. [ 562.100715][T24714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5249'. [ 562.136352][T24709] netlink: 'syz.1.5246': attribute type 11 has an invalid length. [ 562.398995][T24735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5255'. [ 562.573014][T24742] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5258'. [ 562.701805][T24752] Cannot find add_set index 65532 as target [ 562.750008][T24758] netlink: 512 bytes leftover after parsing attributes in process `syz.0.5262'. [ 562.789983][T24754] netlink: 512 bytes leftover after parsing attributes in process `syz.0.5262'. [ 562.794847][T24757] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5264'. [ 563.180967][T24785] bond7 (unregistering): Released all slaves [ 563.197266][T24792] netlink: 'syz.1.5273': attribute type 1 has an invalid length. [ 563.380495][T24792] bond7 (unregistering): Released all slaves [ 563.580500][T24817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5284'. [ 563.600017][T24816] vlan3: entered promiscuous mode [ 563.607016][T24816] bond0: entered promiscuous mode [ 563.621651][T24822] netlink: 'syz.2.5281': attribute type 1 has an invalid length. [ 563.638190][T24816] bond_slave_0: entered promiscuous mode [ 563.654529][T24816] bond_slave_1: entered promiscuous mode [ 563.696623][T24822] netlink: 'syz.2.5281': attribute type 1 has an invalid length. [ 563.714345][T24822] netlink: 'syz.2.5281': attribute type 1 has an invalid length. [ 563.717640][T24816] bridge_slave_1: entered promiscuous mode [ 563.724036][T24822] netlink: 'syz.2.5281': attribute type 2 has an invalid length. [ 564.339450][T24858] delete_channel: no stack [ 564.528178][T24863] pim6reg: entered allmulticast mode [ 564.616276][T24866] netlink: 'syz.3.5297': attribute type 1 has an invalid length. [ 564.753344][T24875] tipc: Enabling of bearer rejected, failed to enable media [ 565.079574][T24893] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.119178][T24893] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.200307][T24893] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.216598][T24893] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.328028][T24893] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.359730][T24893] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.426555][T24908] netlink: 'syz.1.5309': attribute type 1 has an invalid length. [ 565.468884][T24893] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.508972][T24893] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.630861][T24916] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 565.649922][ T34] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.665009][ T34] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.692275][ T34] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.701755][ T34] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.752923][ T34] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.764763][ T34] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.794137][ T34] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.807040][ T34] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.016053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.216454][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 719.224333][ T31] Not tainted syzkaller #0 [ 719.229970][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.239349][ T31] task:kworker/0:0 state:D stack:23288 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 719.251743][ T31] Workqueue: events rfkill_sync_work [ 719.257169][ T31] Call Trace: [ 719.260473][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 719.263416][ T31] __schedule+0x14bc/0x5000 [ 719.268199][ T31] ? __pfx___schedule+0x10/0x10 [ 719.273257][ T31] ? schedule+0x91/0x360 [ 719.278434][ T31] schedule+0x165/0x360 [ 719.282665][ T31] schedule_preempt_disabled+0x13/0x30 [ 719.288412][ T31] __mutex_lock+0x7e6/0x1350 [ 719.293099][ T31] ? __mutex_lock+0x5bb/0x1350 [ 719.298047][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 719.339845][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 719.344966][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 719.365951][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 719.371971][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 719.385697][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 719.391499][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 719.403332][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 719.409287][ T31] rfkill_set_block+0x1d2/0x440 [ 719.414168][ T31] rfkill_sync_work+0x114/0x200 [ 719.419270][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 719.425019][ T31] process_scheduled_works+0xad1/0x1770 [ 719.430990][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 719.437090][ T31] worker_thread+0x8a0/0xda0 [ 719.442240][ T31] kthread+0x711/0x8a0 [ 719.446522][ T31] ? __pfx_worker_thread+0x10/0x10 [ 719.451668][ T31] ? __pfx_kthread+0x10/0x10 [ 719.456787][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 719.462034][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 719.467379][ T31] ? __pfx_kthread+0x10/0x10 [ 719.471991][ T31] ret_from_fork+0x599/0xb30 [ 719.476656][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 719.481796][ T31] ? __switch_to_asm+0x39/0x70 [ 719.486920][ T31] ? __switch_to_asm+0x33/0x70 [ 719.491704][ T31] ? __pfx_kthread+0x10/0x10 [ 719.496368][ T31] ret_from_fork_asm+0x1a/0x30 [ 719.501159][ T31] [ 719.504200][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 719.511927][ T31] Not tainted syzkaller #0 [ 719.517239][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.526203][ T31] task:kworker/0:1 state:D stack:21600 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 719.538337][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 719.545066][ T31] Call Trace: [ 719.548870][ T31] [ 719.551850][ T31] __schedule+0x14bc/0x5000 [ 719.556522][ T31] ? __pfx___schedule+0x10/0x10 [ 719.561408][ T31] ? schedule+0x91/0x360 [ 719.566909][ T31] schedule+0x165/0x360 [ 719.571107][ T31] schedule_preempt_disabled+0x13/0x30 [ 719.576853][ T31] __mutex_lock+0x7e6/0x1350 [ 719.581475][ T31] ? __mutex_lock+0x5bb/0x1350 [ 719.586468][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 719.592740][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 719.597946][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 719.603690][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 719.609810][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 719.616040][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 719.621806][ T31] process_scheduled_works+0xad1/0x1770 [ 719.627664][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 719.633715][ T31] worker_thread+0x8a0/0xda0 [ 719.638651][ T31] kthread+0x711/0x8a0 [ 719.642746][ T31] ? __pfx_worker_thread+0x10/0x10 [ 719.648002][ T31] ? __pfx_kthread+0x10/0x10 [ 719.652611][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 719.657879][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 719.663093][ T31] ? __pfx_kthread+0x10/0x10 [ 719.668074][ T31] ret_from_fork+0x599/0xb30 [ 719.672693][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 719.677999][ T31] ? __switch_to_asm+0x39/0x70 [ 719.682780][ T31] ? __switch_to_asm+0x33/0x70 [ 719.687763][ T31] ? __pfx_kthread+0x10/0x10 [ 719.692448][ T31] ret_from_fork_asm+0x1a/0x30 [ 719.697938][ T31] [ 719.701259][ T31] INFO: task syz.2.5288:24832 blocked for more than 143 seconds. [ 719.709306][ T31] Not tainted syzkaller #0 [ 719.714272][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.723137][ T31] task:syz.2.5288 state:D stack:25784 pid:24832 tgid:24832 ppid:16206 task_flags:0x400040 flags:0x00080002 [ 719.735742][ T31] Call Trace: [ 719.739081][ T31] [ 719.742049][ T31] __schedule+0x14bc/0x5000 [ 719.746686][ T31] ? stack_trace_save+0x9c/0xe0 [ 719.751603][ T31] ? __pfx___schedule+0x10/0x10 [ 719.756692][ T31] ? schedule+0x91/0x360 [ 719.760962][ T31] schedule+0x165/0x360 [ 719.765132][ T31] schedule_timeout+0x9a/0x270 [ 719.770218][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 719.775844][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 719.781167][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 719.786541][ T31] ? wait_for_completion+0x267/0x5d0 [ 719.791841][ T31] wait_for_completion+0x2bf/0x5d0 [ 719.797323][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 719.802978][ T31] ? __flush_work+0xd2/0xbc0 [ 719.807649][ T31] ? __flush_work+0xd2/0xbc0 [ 719.812259][ T31] __flush_work+0x9b9/0xbc0 [ 719.816951][ T31] ? __flush_work+0xd2/0xbc0 [ 719.821588][ T31] ? __pfx___flush_work+0x10/0x10 [ 719.827001][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 719.832349][ T31] ? __pfx___cancel_work+0x10/0x10 [ 719.837661][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 719.843357][ T31] ? __cancel_work_sync+0x5c/0x110 [ 719.848546][ T31] __cancel_work_sync+0xbe/0x110 [ 719.853507][ T31] rfkill_unregister+0x92/0x220 [ 719.858973][ T31] nfc_unregister_device+0x96/0x2a0 [ 719.864219][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 719.870022][ T31] virtual_ncidev_close+0x56/0x90 [ 719.875061][ T31] __fput+0x44c/0xa70 [ 719.879217][ T31] task_work_run+0x1d4/0x260 [ 719.883827][ T31] ? __pfx_task_work_run+0x10/0x10 [ 719.889225][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 719.894622][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 719.900321][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 719.905686][ T31] ? rcu_is_watching+0x15/0xb0 [ 719.910487][ T31] do_syscall_64+0x2e3/0xf80 [ 719.915113][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.921579][ T31] ? clear_bhb_loop+0x60/0xb0 [ 719.926343][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.932268][ T31] RIP: 0033:0x7f0870f8f749 [ 719.936906][ T31] RSP: 002b:00007ffd78fe6c48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 719.945354][ T31] RAX: 0000000000000000 RBX: 0000000000089abb RCX: 00007f0870f8f749 [ 719.953667][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 719.961792][ T31] RBP: 00007f08711e7da0 R08: 0000000000000001 R09: 0000000778fe6f3f [ 719.969862][ T31] R10: 0000001b2f920000 R11: 0000000000000246 R12: 00007f08711e5fac [ 719.978199][ T31] R13: 00007f08711e5fa0 R14: ffffffffffffffff R15: 00007ffd78fe6d60 [ 719.986258][ T31] [ 719.989306][ T31] INFO: task syz.1.5315:24924 blocked for more than 144 seconds. [ 720.002184][ T31] Not tainted syzkaller #0 [ 720.007502][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 720.016500][ T31] task:syz.1.5315 state:D stack:25912 pid:24924 tgid:24922 ppid:17147 task_flags:0x400140 flags:0x00080002 [ 720.028549][ T31] Call Trace: [ 720.031836][ T31] [ 720.034862][ T31] __schedule+0x14bc/0x5000 [ 720.039778][ T31] ? __pfx___schedule+0x10/0x10 [ 720.044655][ T31] ? schedule+0x91/0x360 [ 720.048962][ T31] schedule+0x165/0x360 [ 720.053143][ T31] schedule_preempt_disabled+0x13/0x30 [ 720.058747][ T31] __mutex_lock+0x7e6/0x1350 [ 720.063364][ T31] ? __mutex_lock+0x5bb/0x1350 [ 720.068409][ T31] ? rfkill_register+0x37/0x8e0 [ 720.073282][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 720.078452][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 720.083853][ T31] ? device_initialize+0x24b/0x440 [ 720.089036][ T31] rfkill_register+0x37/0x8e0 [ 720.093737][ T31] nfc_register_device+0x14a/0x320 [ 720.099317][ T31] nci_register_device+0x87f/0x9d0 [ 720.104458][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 720.110229][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 720.115840][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 720.121273][ T31] virtual_ncidev_open+0x129/0x1a0 [ 720.126805][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 720.132485][ T31] misc_open+0x2d5/0x350 [ 720.136926][ T31] chrdev_open+0x4cc/0x5e0 [ 720.141365][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 720.146394][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 720.152761][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 720.158103][ T31] do_dentry_open+0x7ce/0x1420 [ 720.162899][ T31] vfs_open+0x3b/0x340 [ 720.167024][ T31] ? path_openat+0x33f3/0x3dd0 [ 720.171804][ T31] path_openat+0x340e/0x3dd0 [ 720.176570][ T31] ? do_sys_openat2+0xbc/0x200 [ 720.181354][ T31] ? __x64_sys_openat+0x138/0x170 [ 720.186775][ T31] ? __pfx_path_openat+0x10/0x10 [ 720.191738][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 720.196840][ T31] do_filp_open+0x1fa/0x410 [ 720.201361][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 720.206483][ T31] ? _raw_spin_unlock+0x28/0x50 [ 720.211348][ T31] ? alloc_fd+0x64c/0x6c0 [ 720.216202][ T31] do_sys_openat2+0x121/0x200 [ 720.220919][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 720.226277][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 720.231494][ T31] __x64_sys_openat+0x138/0x170 [ 720.236615][ T31] do_syscall_64+0xfa/0xf80 [ 720.241143][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.247490][ T31] ? clear_bhb_loop+0x60/0xb0 [ 720.252184][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.258539][ T31] RIP: 0033:0x7f0e61d8f749 [ 720.262990][ T31] RSP: 002b:00007f0e62c68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 720.271495][ T31] RAX: ffffffffffffffda RBX: 00007f0e61fe5fa0 RCX: 00007f0e61d8f749 [ 720.279843][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 720.287882][ T31] RBP: 00007f0e61e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 720.296040][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.304026][ T31] R13: 00007f0e61fe6038 R14: 00007f0e61fe5fa0 R15: 00007ffca4ee6488 [ 720.312324][ T31] [ 720.315372][ T31] INFO: task syz.5.5318:24938 blocked for more than 144 seconds. [ 720.323301][ T31] Not tainted syzkaller #0 [ 720.328295][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 720.337403][ T31] task:syz.5.5318 state:D stack:28152 pid:24938 tgid:24937 ppid:15869 task_flags:0x400040 flags:0x00080002 [ 720.349428][ T31] Call Trace: [ 720.352714][ T31] [ 720.355850][ T31] __schedule+0x14bc/0x5000 [ 720.360457][ T31] ? __pfx___schedule+0x10/0x10 [ 720.365380][ T31] ? schedule+0x91/0x360 [ 720.369941][ T31] schedule+0x165/0x360 [ 720.374114][ T31] schedule_preempt_disabled+0x13/0x30 [ 720.379801][ T31] __mutex_lock+0x7e6/0x1350 [ 720.384469][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 720.389474][ T31] ? __mutex_lock+0x5bb/0x1350 [ 720.394264][ T31] ? misc_open+0x51/0x350 [ 720.398978][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 720.404036][ T31] misc_open+0x51/0x350 [ 720.408304][ T31] chrdev_open+0x4cc/0x5e0 [ 720.412763][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 720.417859][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 720.424203][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 720.429421][ T31] do_dentry_open+0x7ce/0x1420 [ 720.434223][ T31] vfs_open+0x3b/0x340 [ 720.438443][ T31] ? path_openat+0x33f3/0x3dd0 [ 720.443228][ T31] path_openat+0x340e/0x3dd0 [ 720.447980][ T31] ? do_sys_openat2+0xbc/0x200 [ 720.452754][ T31] ? __x64_sys_openat+0x138/0x170 [ 720.458279][ T31] ? __pfx_path_openat+0x10/0x10 [ 720.463247][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 720.468344][ T31] do_filp_open+0x1fa/0x410 [ 720.472864][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 720.478061][ T31] ? _raw_spin_unlock+0x28/0x50 [ 720.482949][ T31] ? alloc_fd+0x64c/0x6c0 [ 720.487566][ T31] do_sys_openat2+0x121/0x200 [ 720.492256][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 720.497665][ T31] ? exc_page_fault+0x82/0x100 [ 720.502473][ T31] __x64_sys_openat+0x138/0x170 [ 720.507433][ T31] do_syscall_64+0xfa/0xf80 [ 720.511955][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.518395][ T31] ? clear_bhb_loop+0x60/0xb0 [ 720.523091][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.529111][ T31] RIP: 0033:0x7f2387f8f749 [ 720.533562][ T31] RSP: 002b:00007f2388de3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 720.542315][ T31] RAX: ffffffffffffffda RBX: 00007f23881e5fa0 RCX: 00007f2387f8f749 [ 720.550624][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 720.558853][ T31] RBP: 00007f2388013f91 R08: 0000000000000000 R09: 0000000000000000 [ 720.566921][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.574902][ T31] R13: 00007f23881e6038 R14: 00007f23881e5fa0 R15: 00007ffd0e5db998 [ 720.583285][ T31] [ 720.586401][ T31] INFO: task syz.0.5321:24950 blocked for more than 144 seconds. [ 720.594135][ T31] Not tainted syzkaller #0 [ 720.599765][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 720.608716][ T31] task:syz.0.5321 state:D stack:27640 pid:24950 tgid:24949 ppid:17508 task_flags:0x400140 flags:0x00080002 [ 720.620817][ T31] Call Trace: [ 720.624143][ T31] [ 720.627168][ T31] __schedule+0x14bc/0x5000 [ 720.631735][ T31] ? __pfx___schedule+0x10/0x10 [ 720.636965][ T31] ? schedule+0x91/0x360 [ 720.641228][ T31] schedule+0x165/0x360 [ 720.645402][ T31] schedule_preempt_disabled+0x13/0x30 [ 720.650942][ T31] __mutex_lock+0x7e6/0x1350 [ 720.655758][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 720.660755][ T31] ? __mutex_lock+0x5bb/0x1350 [ 720.666438][ T31] ? misc_open+0x51/0x350 [ 720.670839][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 720.676112][ T31] misc_open+0x51/0x350 [ 720.680296][ T31] chrdev_open+0x4cc/0x5e0 [ 720.684734][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 720.689758][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 720.696463][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 720.701425][ T31] do_dentry_open+0x7ce/0x1420 [ 720.706295][ T31] vfs_open+0x3b/0x340 [ 720.710492][ T31] ? path_openat+0x33f3/0x3dd0 [ 720.715288][ T31] path_openat+0x340e/0x3dd0 [ 720.720249][ T31] ? do_sys_openat2+0xbc/0x200 [ 720.725033][ T31] ? __x64_sys_openat+0x138/0x170 [ 720.730366][ T31] ? __pfx_path_openat+0x10/0x10 [ 720.735329][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 720.740534][ T31] do_filp_open+0x1fa/0x410 [ 720.745070][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 720.750223][ T31] ? _raw_spin_unlock+0x28/0x50 [ 720.755097][ T31] ? alloc_fd+0x64c/0x6c0 [ 720.759803][ T31] do_sys_openat2+0x121/0x200 [ 720.764504][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 720.769816][ T31] ? rcu_is_watching+0x15/0xb0 [ 720.774615][ T31] __x64_sys_openat+0x138/0x170 [ 720.779868][ T31] do_syscall_64+0xfa/0xf80 [ 720.784397][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.790753][ T31] ? clear_bhb_loop+0x60/0xb0 [ 720.795461][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.801610][ T31] RIP: 0033:0x7ff08bf8f749 [ 720.806141][ T31] RSP: 002b:00007ff08ce81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 720.814589][ T31] RAX: ffffffffffffffda RBX: 00007ff08c1e5fa0 RCX: 00007ff08bf8f749 [ 720.822965][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 720.831122][ T31] RBP: 00007ff08c013f91 R08: 0000000000000000 R09: 0000000000000000 [ 720.839296][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.847648][ T31] R13: 00007ff08c1e6038 R14: 00007ff08c1e5fa0 R15: 00007fff32d291c8 [ 720.855853][ T31] [ 720.858920][ T31] INFO: task syz.3.5327:24972 blocked for more than 145 seconds. [ 720.866920][ T31] Not tainted syzkaller #0 [ 720.871864][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 720.880909][ T31] task:syz.3.5327 state:D stack:24880 pid:24972 tgid:24971 ppid:16610 task_flags:0x400140 flags:0x00080002 [ 720.893035][ T31] Call Trace: [ 720.896462][ T31] [ 720.899411][ T31] __schedule+0x14bc/0x5000 [ 720.903948][ T31] ? __pfx___schedule+0x10/0x10 [ 720.909110][ T31] ? schedule+0x91/0x360 [ 720.913378][ T31] schedule+0x165/0x360 [ 720.917706][ T31] schedule_preempt_disabled+0x13/0x30 [ 720.923279][ T31] __mutex_lock+0x7e6/0x1350 [ 720.927962][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 720.932955][ T31] ? __mutex_lock+0x5bb/0x1350 [ 720.938191][ T31] ? misc_open+0x51/0x350 [ 720.942547][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 720.947708][ T31] misc_open+0x51/0x350 [ 720.951920][ T31] chrdev_open+0x4cc/0x5e0 [ 720.956517][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 720.961493][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 720.968237][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 720.973479][ T31] do_dentry_open+0x7ce/0x1420 [ 720.978419][ T31] vfs_open+0x3b/0x340 [ 720.982508][ T31] ? path_openat+0x33f3/0x3dd0 [ 720.987356][ T31] path_openat+0x340e/0x3dd0 [ 720.991993][ T31] ? do_sys_openat2+0xbc/0x200 [ 720.997178][ T31] ? __x64_sys_openat+0x138/0x170 [ 721.002224][ T31] ? __pfx_path_openat+0x10/0x10 [ 721.007256][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 721.012229][ T31] do_filp_open+0x1fa/0x410 [ 721.016886][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 721.021951][ T31] ? _raw_spin_unlock+0x28/0x50 [ 721.027184][ T31] ? alloc_fd+0x64c/0x6c0 [ 721.031551][ T31] do_sys_openat2+0x121/0x200 [ 721.036366][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 721.041584][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 721.046871][ T31] __x64_sys_openat+0x138/0x170 [ 721.051738][ T31] do_syscall_64+0xfa/0xf80 [ 721.056726][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.062849][ T31] ? clear_bhb_loop+0x60/0xb0 [ 721.067607][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.073601][ T31] RIP: 0033:0x7fe84dd8f749 [ 721.078188][ T31] RSP: 002b:00007fe84ec77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 721.087030][ T31] RAX: ffffffffffffffda RBX: 00007fe84dfe5fa0 RCX: 00007fe84dd8f749 [ 721.095047][ T31] RDX: 0000000000000702 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 721.103382][ T31] RBP: 00007fe84de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 721.111578][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.119962][ T31] R13: 00007fe84dfe6038 R14: 00007fe84dfe5fa0 R15: 00007fff1844f278 [ 721.128109][ T31] [ 721.131177][ T31] [ 721.131177][ T31] Showing all locks held in the system: [ 721.139258][ T31] 4 locks held by kworker/0:0/9: [ 721.144232][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 721.155735][ T31] #1: ffffc900000e7b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 721.168288][ T31] #2: ffffffff8f5e1628 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 721.178576][ T31] #3: ffff888075510100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 721.188594][ T31] 3 locks held by kworker/0:1/10: [ 721.193626][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 721.204797][ T31] #1: ffffc900000f7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 721.218743][ T31] #2: ffffffff8f5e1628 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 721.230197][ T31] 1 lock held by khungtaskd/31: [ 721.235280][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 721.245343][ T31] 2 locks held by getty/5598: [ 721.250307][ T31] #0: ffff888033b990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 721.260224][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 721.270450][ T31] 1 lock held by syz.2.5288/24832: [ 721.276112][ T31] #0: ffff888075510100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 721.286016][ T31] 3 locks held by syz.1.5315/24924: [ 721.291239][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.300018][ T31] #1: ffff88805ccfa100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 721.309964][ T31] #2: ffffffff8f5e1628 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 721.320115][ T31] 1 lock held by syz.5.5318/24938: [ 721.325234][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.333867][ T31] 1 lock held by syz.0.5321/24950: [ 721.339327][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.347873][ T31] 1 lock held by syz.3.5327/24972: [ 721.353011][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.361709][ T31] 1 lock held by syz-executor/24980: [ 721.367288][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.375938][ T31] 1 lock held by syz-executor/24983: [ 721.381231][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.389784][ T31] 1 lock held by syz-executor/24984: [ 721.395079][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.403959][ T31] 1 lock held by syz-executor/24988: [ 721.409308][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.417936][ T31] 1 lock held by syz-executor/24989: [ 721.423250][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.432139][ T31] 1 lock held by syz-executor/24993: [ 721.437641][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.446180][ T31] 1 lock held by syz-executor/24996: [ 721.451730][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.460640][ T31] 1 lock held by syz-executor/24997: [ 721.466111][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.474637][ T31] 1 lock held by syz-executor/25000: [ 721.480179][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.489077][ T31] 1 lock held by syz-executor/25001: [ 721.494462][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.503123][ T31] 1 lock held by syz-executor/25007: [ 721.508566][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.517398][ T31] 1 lock held by syz-executor/25010: [ 721.522694][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.531271][ T31] 1 lock held by syz-executor/25011: [ 721.536683][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.545170][ T31] 1 lock held by syz-executor/25014: [ 721.550840][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.559474][ T31] 1 lock held by syz-executor/25015: [ 721.564764][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 721.573322][ T31] [ 721.576089][ T31] ============================================= [ 721.576089][ T31] [ 721.584521][ T31] NMI backtrace for cpu 0 [ 721.584537][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 721.584554][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 721.584563][ T31] Call Trace: [ 721.584571][ T31] [ 721.584579][ T31] dump_stack_lvl+0x189/0x250 [ 721.584603][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.584619][ T31] ? __pfx__printk+0x10/0x10 [ 721.584649][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 721.584667][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 721.584684][ T31] ? __pfx__printk+0x10/0x10 [ 721.584707][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 721.584731][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 721.584748][ T31] watchdog+0xf3c/0xf80 [ 721.584771][ T31] ? watchdog+0x1e2/0xf80 [ 721.584794][ T31] kthread+0x711/0x8a0 [ 721.584816][ T31] ? __pfx_watchdog+0x10/0x10 [ 721.584833][ T31] ? __pfx_kthread+0x10/0x10 [ 721.584852][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 721.584869][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 721.584886][ T31] ? __pfx_kthread+0x10/0x10 [ 721.584904][ T31] ret_from_fork+0x599/0xb30 [ 721.584929][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 721.584965][ T31] ? __switch_to_asm+0x39/0x70 [ 721.584981][ T31] ? __switch_to_asm+0x33/0x70 [ 721.584997][ T31] ? __pfx_kthread+0x10/0x10 [ 721.585015][ T31] ret_from_fork_asm+0x1a/0x30 [ 721.585046][ T31] [ 721.585051][ T31] Sending NMI from CPU 0 to CPUs 1: [ 721.732489][ C1] NMI backtrace for cpu 1 [ 721.732511][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 721.732531][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 721.732542][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 721.732570][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 721.732586][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 721.732602][ C1] RAX: 0da16167afd9af00 RBX: ffffffff8197438a RCX: 0da16167afd9af00 [ 721.732615][ C1] RDX: 0000000000000001 RSI: ffffffff8d76bd90 RDI: ffffffff8bbfc660 [ 721.732627][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 721.732641][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 721.732654][ C1] R13: 1ffff11003952b70 R14: 0000000000000001 R15: 0000000000000001 [ 721.732666][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 721.732680][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 721.732692][ C1] CR2: 00007f6d48717d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 721.732708][ C1] Call Trace: [ 721.732718][ C1] [ 721.732725][ C1] default_idle+0x13/0x20 [ 721.732750][ C1] default_idle_call+0x73/0xb0 [ 721.732778][ C1] do_idle+0x1ea/0x520 [ 721.732796][ C1] ? irqentry_exit+0x5ba/0x660 [ 721.732822][ C1] ? __pfx_do_idle+0x10/0x10 [ 721.732855][ C1] cpu_startup_entry+0x44/0x60 [ 721.732873][ C1] start_secondary+0x101/0x110 [ 721.732898][ C1] common_startup_64+0x13e/0x147 [ 721.732928][ C1] [ 726.896124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog