last executing test programs: 19.97420177s ago: executing program 4 (id=1413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0297374ccebe0565e0958263e2233e478ab315b14041b9039ed63c83f6fd39d53e9fbe4c39b6000009900006201932062316842d875be3b9c14f69eeb5e48178d2db21bf487f78757aa439b85e6231080ecd881906ed616b18a7ad177e069ee71b85b4dd79435d08a7000fdc390cb30e6c48d7cd6b57c2c6442197f5bcb9ac081da6d4a2d597e3bf0b048d166e1e58e368bee6e75", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf25090000001800018014000300fe8000000000000000000000000000135c00038008000300030000001400020073697430000000000000000000000000060007004e220000050008000800000014000600fe8000000000000000000000000000aa05000800060000000800030004000000050008000c000000"], 0x88}, 0x1, 0x0, 0x0, 0x4824}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0x4, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x100, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x33, 0x2, 0x800, 0x3, 0x9, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x10000, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x8, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d912, 0xff, 0x2, 0x7, 0x80000001, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x20, 0x10000, 0x0, 0x3, 0x5, 0xfffffffd, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e3, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x613, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x803, 0x25f, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}}, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) (async, rerun: 64) ioctl$sock_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000100)) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) 19.745549893s ago: executing program 4 (id=1417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000001"], 0x114}], 0x1}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$netlink(0x10, 0x3, 0xb) listen(r3, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$can_bcm(r5, 0x0, 0x4008000) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c0000000001010400000000000000000100b93cec3831a96ad20240000000750800034000000008080001400000000508000240000000f254001980080001000000000100020000000800010022080000080001001008000008000200000000000800010000000000080002001000000008001100"/140], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r6 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfffd}, 0x90) connect$netlink(r2, &(0x7f0000000240)=@unspec, 0xc) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 18.842498794s ago: executing program 3 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='.\\:\x00', 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="cc0000001b00010000000000000000000000000000000000000200000000000000020000000000002000000000000001", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1}, 0x10020) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000840)="a9", 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x2b, r9, r10}, {0x837a, 0x6c, 0x6, 0x9, 0x1, 0xff, 0xc, 0x7}, {0x1, 0xd6a, 0x6, 0x100000001}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d3, 0x3c}, 0xb, @in=@multicast1, 0x34ff, 0x3, 0x2, 0x98, 0x979e, 0x17, 0x6}}, 0xe8) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r11, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 18.804635902s ago: executing program 4 (id=1431): sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="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", 0x114, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x2, 0x6, 0x6, 0x403b, 0x2, 0x1, 0xc00000}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 18.610644379s ago: executing program 4 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)=r3}, 0x20) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) 18.479865274s ago: executing program 4 (id=1436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800090000000000080008f2ffffffff130001"], 0x64}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000080)=0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, 0x0, 0xffdd) 18.123709929s ago: executing program 4 (id=1444): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000fb9f000000000000000000"], 0xe) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@deltclass={0x490, 0x29, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xf, 0x10}, {0xe, 0x80ccc450b8fed703}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_htb={{0x8}, {0x40c, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xffffffff, 0x633f, 0xfffffe01, 0x0, 0x8000, 0x5, 0xff, 0x6, 0x2, 0x3, 0x4, 0x10, 0x9, 0x8, 0x2000000, 0x2, 0x7, 0x200, 0x8000, 0x5, 0x7f, 0x9, 0x1000, 0x7b1, 0x4, 0x7f4, 0x8, 0xc348, 0x5, 0x7, 0x4, 0xa0000000, 0xff, 0x80000000, 0x2, 0x89, 0x8, 0x0, 0x7, 0x7, 0x5, 0x8, 0x9d, 0x6, 0x0, 0xb913eec0, 0x7, 0x0, 0x7, 0x100, 0x2, 0x6, 0xd, 0x9, 0xfffffe01, 0x5, 0x5, 0x3, 0x3, 0xfffffffe, 0x7d, 0xe393, 0x77b, 0x8, 0x8, 0x37ec, 0xffff, 0x80000000, 0x6, 0x7fffffff, 0x8, 0x0, 0x5, 0x1ff, 0x0, 0x9, 0xd, 0x9, 0x1, 0x2, 0x0, 0x100, 0x5eef, 0x1, 0x9, 0x7, 0xcd3, 0xffff, 0x7, 0x40eb, 0xd6, 0x704, 0x8, 0xfc, 0x4, 0x10000, 0x0, 0x40, 0xf9, 0x61, 0x7, 0xffffff05, 0x80000000, 0x400, 0x7, 0x7fffffff, 0x6, 0x4, 0xb7b, 0x9811, 0x9e21, 0x3, 0xe, 0x27d, 0x80000000, 0x6, 0x3, 0xadce000, 0x2, 0x5, 0x80, 0xff, 0x5, 0x55be, 0x2, 0x7e8, 0x242, 0x401, 0x57105123, 0x1, 0x0, 0x4, 0x7f, 0x6, 0xc, 0x800, 0x8, 0x6e6e, 0xfffffffd, 0x5, 0x2, 0x0, 0x5e61631d, 0x3, 0x100, 0x3, 0x8, 0x7, 0x8, 0xfffffeb3, 0x8, 0x20, 0x6, 0x4, 0x7, 0x2, 0x1, 0x8, 0x2, 0xcab8, 0xc9e, 0xe, 0x400, 0x1000, 0xa, 0x8, 0x3a, 0xe, 0xf7, 0x7f, 0x15, 0x8001, 0x52f, 0xce5, 0x326, 0x5, 0x7e0b, 0x5, 0x3, 0x7, 0x1, 0x9, 0x4, 0x3ff, 0x5, 0x0, 0x575, 0x5, 0x9, 0xed, 0x7ff, 0x189f, 0x8f, 0x7, 0x1, 0x200, 0x800, 0xfff, 0x1, 0x9, 0xa, 0x1000, 0x6, 0x678, 0x0, 0xfffffff7, 0x9, 0xd, 0x0, 0x1, 0x0, 0x5, 0xa847, 0x5, 0x2, 0xd116, 0x81, 0x3, 0xffff, 0x4, 0x8, 0x6f4, 0xfffffffa, 0x80, 0x8001, 0x2, 0x4, 0x6, 0x81, 0xc, 0x1, 0xb3c, 0x1, 0x4, 0x5, 0x80000000, 0x6, 0x3, 0x3a6, 0xfffffffa, 0x1, 0xa, 0x8000, 0x7c, 0x200, 0x1, 0x40, 0x5, 0x8, 0x2, 0x8, 0x0, 0x9, 0x6, 0x3ff, 0x9]}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x80, 0xf}}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8000}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x800}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x80000000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x831f}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x2c, r4, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000c50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb) (async) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x6, 0x0) (async) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14, 0x14}}, 0x1c}}, 0x0) splice(r5, &(0x7f0000000080)=0x6fe, r7, &(0x7f00000000c0)=0xfffffffe00000000, 0x3, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) write$nci(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="6103050481020509012f01"], 0xb) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000800001c0040"], 0x50}}, 0x20004040) 17.907742232s ago: executing program 0 (id=1447): r0 = socket(0x0, 0x5, 0xfffffffe) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @dev={0xfe, 0x80, '\x00', 0xf}}}) (async, rerun: 64) connect$netlink(r0, 0x0, 0x0) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000c100000000000000000000d600004794c2e87ae39af331169500c425db5d4a54c2c3e9a31192a1b51f8bd896522ce9a09b1e5ffde459256989d347f26e34a28d6e75834f5a230555e1c6116c15d97407c3a4c8d5551ae0d5ab5402b4ccfe76b07a3f347a92278474a7d7acf8fbe9d5e0c2c9472b173e65661c49c7bc740e68e6ee645347ddc39bdfbeb4e1497dee09dc84f8888fd6545aa22e29f8e104a33561507c3465ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8a688648d50c4021ed719c7fafb40ec83c0000002d000104030000", @ANYRES32=0x0, @ANYBLOB="00010000000000001c0012804f7cc25c626f6e64000000000c00028005001d008a"], 0x3c}}, 0x54) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x5460, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0xffff, @broadcast}, {0x0, @local}, 0x8, {0x2, 0x0, @rand_addr=0x64010102}, 'tunl0\x00'}) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) setsockopt$inet6_int(r8, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r9, &(0x7f0000000080)=0x1, 0x12) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x4, 0x48, 0x0, 0x7, 0x0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x10, 0xfffffffe, 0xffffffff}}) (async, rerun: 32) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4) (rerun: 32) 17.89573777s ago: executing program 3 (id=1449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r0, 0x0, 0x8001}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) accept(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 17.873978635s ago: executing program 2 (id=1450): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0x3a}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000080001006401010214001680100008800c000680080001"], 0x38}}, 0x20000054) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 17.715560517s ago: executing program 0 (id=1452): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 17.591850593s ago: executing program 3 (id=1454): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", ""]}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) write(r0, &(0x7f0000000100)="7a6376e90745e9c3de6c28643c98290301fb83877fa314d1ee014fabf834ae70a7e1c5e2b699c36f26d20020437b4958c98704a57e17127e2c92b1c8b09f7cfa4e6121dcf102e428c0c9638b66bb0a7d3aaa2975866fcaa379910f40a796e2c33ceacaa8f290b37573e09a893814b9586d58c187de432736409afb461fb115e7cdd7b2d03a263f042d8dcd3bdf1d6b1bc61d0696d9b94a88b5a3f4", 0x9b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}}, 0x0, 0x4e}, 0x20) 17.556480344s ago: executing program 0 (id=1455): socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x203, @private0, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)}}], 0x2, 0x40) 17.50539485s ago: executing program 2 (id=1456): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r0, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0, 0x700}, {&(0x7f0000000200)="97ff70f871", 0x5}], 0x2}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044942, 0xfffffffffffffffe) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x18, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 17.303637966s ago: executing program 0 (id=1457): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x80811501, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x10d00, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000002c0)=0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="dd8ebbf6d0caaf9b7f7b869f922e5162a3cf181cb13b7d5d8f914d35dcd67638d98019223b3bcdddaa7bcb74de142ad158825463e2ccfe7ee75786d08f25688e4b2b49", 0x43}, {&(0x7f0000000140)="01e6aab3507ac402b8dbd4051f31e52e1775316c81105b1e48355ccf41fdac72758ed4364e7c13df4148baf89052e87dfe73df1f6a010db1d945413e63fe3045d1fd3063ab78aa25e53f026ffcc985532a6424c3a331b6b40cc8051655106d0fcf82d4fe27d6b8e3fc5d9a2fe05807f3ef842ddf334b1c7126027f775d280e0c70ca54d47b5fcefa841d48ccd75fe2ee4ec7f9b06fbb1bb68343411e5d150356b08c6c978108b91674dbf855ce1e76cd0b47d737d522d3c2b7f05c74857a18e6a96238642ac0312850cf84d456f3d25ed23c04d0a1c5e1d6a2b24560b391", 0xde}, {&(0x7f0000000240)="4bec08980e4ea85ba8dbac93c3cab4c55322c9ee4fc8859645ae4c1ab04b52b46e4570f599388f0b01dc6957e1359c2a39f6daf8a1fb7046fff613ab36ea5bc86d2cfaad76fd45d1e5fd5a2dea62c9b208690ac282e1f128014d1efbcb63c57594da4c351da848031d1828d5ce", 0x6d}, {&(0x7f00000003c0)="c54a98be0f89cf0e2f1212bcadb6fd67a9312875e3a544add4d516cc79013175acb3cd51b6d216af94729a01750b54919ad1a6f3742634c32977c94d05a77a95ef348162e2e5174adb5e35761b997ed8951f9978076315f1ee9881005cd1dc307574c5e04ac1627e0a53a2041f4eeb95e92c1f0de79c7f3a867b8f303043786991103268fad698dcb2d0bce00d6a514c5f1c908bb076435493d90b9b24a39f357ef20a177c061b99a116db9d0f2a1a5d8607e26f3f19eb28a26d4bb9e3a72b89d0c80fbeb242bcba16a5d3e99098", 0xce}], 0x4}, 0x10000000) socket$nl_route(0x10, 0x3, 0x0) 17.298172184s ago: executing program 2 (id=1458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) write$tun(r4, &(0x7f0000000140)={@val={0x0, 0x9300}, @val={0x1, 0x80, 0x5, 0x8, 0x43, 0xa0}, @eth={@link_local, @random="e2ef2b7a4e17", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@arp={0x806, @generic={0x339, 0x6007, 0x6, 0x0, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}}}}}, 0x34) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010802000000030000008ed7000008000300", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0xfffa, 0xfff2}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000006, 0xfffffc00, 0x7, 0x1, {0x8, 0x2, 0xfffb, 0x800, 0x6, 0x8}, {0xfc, 0x0, 0x0, 0xd, 0x4b, 0x800}, 0x4, 0x4, 0x9}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="4a911c4f12b5e9c144f31be7156833dec4c9fd71433244b733a5b2aceede4fc56ef4c3133e149c5a0d0374454bd70591b3992b5bb3915e837334b09b859151301eefb36cd20da8717fb3fae83d39877042e809c544fff0346faf02a355fe3bd0aa35769bd0de684e65243d", 0x6b}, {&(0x7f0000000480)="d8e746acd0f3722f0e50a72e4c19f2ad905638fcfc784468f117a3fe2f30aa5df758767b7c857615acf0966313a54a01faf2f788fbe26ec22e3b7c8a8e85352746d6ea1c15606dad9dec8d013bf56782903a5a5f7dc53c6cabcc15145ae8b82cad62c160dbacd41db57fb5259b61cbd55fe767497548d45cb771af281ac2ce11ab67dc216550d545ab3b12a9b4845bf1e6a8cf6855d2171d13a2931ea8e6", 0x9e}, {&(0x7f0000000740)="8ffacda9a5efb8b5887b9f40e0023818a11eb719d7c6e29f5e8f74214fa01f46c01a9d645c4fa038ec4a859cc4435984478d2521bc5f509ac6a303eccbdfb3c8f466f54c528c7e2319945f84dacb4073f7b939f6dfb74e45d0d95a562ce06c02041cb28942cea27813ffabeb9331248944e7fd4f8c4350ecc61e4a5644530773ed9349", 0x83}, {&(0x7f0000000800)="7b72747fa745a0c3f6a297831cbd012f6437b13c42e0f8db0676efca80bed4c423d6b2f42c25b175e2ff45c9d7c4896b27202401f345849622957d5a220d4f9ff5ac5c3606ae078e6061ba7af748ffdf188993ce6da3c9e56b87e1c61574daad1a81e6a7e6335db100e4b9ebb0eba89eecbbc3486ec4a493073f4684add4a3613546c1726fe08fca9e41fd4bf1b11804a85300f42a510f0431f1d3432c80259f88bf5de48862f5f537", 0xa9}], 0x4, &(0x7f00000008c0)=[@ip_retopts={{0xd0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x3b, 0x1, 0x0, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2}, 0x24df}, {@multicast1, 0xfff}]}, @timestamp_addr={0x44, 0xc, 0xdf, 0x1, 0x8, [{@empty, 0xff}]}, @timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0xd, [{@loopback, 0xcb7}, {@multicast1, 0xffff}, {@remote, 0x2d6}, {@remote, 0x7}, {@private=0xa010100, 0x4}, {@loopback, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x50, 0x3, 0x3, [{@remote, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0xc3}, {@multicast1, 0x3}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd3}]}, @timestamp_prespec={0x44, 0xc, 0xac, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x2}]}, @ssrr={0x89, 0x1b, 0xf, [@remote, @remote, @multicast2, @local, @loopback, @empty]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x94, 0x3, 0x3, [{@multicast2, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x6}, {@remote}, {@empty, 0xd3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x34, [@rand_addr=0x64010101, @loopback, @empty, @broadcast]}, @timestamp={0x44, 0xc, 0xe4, 0x0, 0x8, [0x0, 0x26]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x53c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x2b}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x23}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010100, @local}}}], 0x210}, 0x4000) 17.163854287s ago: executing program 3 (id=1460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) close(0x3) 17.035709436s ago: executing program 3 (id=1463): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r1, 0x4}, 0x8) socketpair(0x1e, 0x800, 0x1e7, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1, 0x100, 0x8, 0x7, 0x7}, &(0x7f0000000000)=0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.631577019s ago: executing program 1 (id=1470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a14010000000000000000000800030000000000080003"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="360000e5", @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c00028008000400eb430000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$unix(r7, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000700)='dctcp-reno\x00', 0xb) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x298, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b33}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff99}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3738}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52e19b13}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x234}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52085348}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x810}, 0x40080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @local, 0xfee9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x7f}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6bbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4894}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000006c0)={0x10}) socket$inet6(0xa, 0x80000, 0x37) 16.483803144s ago: executing program 1 (id=1471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x24000090) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xb0, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x249}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004000}, 0x400c800) (rerun: 32) 16.416558539s ago: executing program 0 (id=1472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r2, 0x8b20, &(0x7f0000000080)) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100025ff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000014001280090001007663616e000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16.307489536s ago: executing program 1 (id=1473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x1, 0x1, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0xb9}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x3504, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000400), 0x4) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x11) 16.306188724s ago: executing program 2 (id=1474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x89e0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0x800803fc) shutdown(r3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x40}}, 0x0) 16.263286907s ago: executing program 0 (id=1475): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x8, 0x4, {{0x13, 0x4, 0x0, 0x26, 0x4c, 0x64, 0x0, 0x42, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@cipso={0x86, 0x35, 0x1, [{0x0, 0xb, "26afad9eb9c8342c09"}, {0x5, 0xd, "e89a647d9898af0230342f"}, {0x7, 0x8, "7c131bb91242"}, {0x7, 0xf, "9c5055fae25e3a1fd8be1a1144"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@loopback, @dev, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x100, 0xdd, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x68, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @empty, {[@timestamp={0x44, 0xc, 0xa8, 0x0, 0xe, [0x8, 0x0]}, @ssrr={0x89, 0xb, 0xb7, [@rand_addr=0x64010102, @private=0xa010100]}, @cipso={0x86, 0x27, 0x1, [{0x0, 0x5, "ced748"}, {0x2, 0xa, "ab1705213085a988"}, {0x2, 0x12, "36e7f0fa1a74cd44fe034a86bf7d6463"}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)={0x6a8, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x2c4, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0xfb, 0x3, 0x7ee4}, {0xd3f7, 0x0, 0x2, 0xff}, {0x9, 0x1, 0x5, 0x400}, {0x56, 0x6, 0x6, 0x2}, {0x9, 0x92, 0x6, 0xfffff3b8}, {0x2, 0x5, 0xb, 0x40}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0x4, 0x2, 0xfffffeff}, {0x92a7, 0xf4, 0x40, 0x6}, {0x2, 0x5, 0x7f, 0x9}, {0x5, 0x3, 0x80, 0x4}, {0x2222, 0xd, 0x5, 0x8}, {0x6, 0x0, 0x27, 0x5}, {0x6, 0xd7, 0x0, 0x5}, {0x8000, 0x9, 0x80, 0x6419502}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x91}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x80000}, 0x4004042) r14 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000c80)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000cc0)={'xfrm0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x2004) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r15, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, r16, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000f80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @remote, 0x7, 0x5, 0x9, 0x180, 0x5, 0x4, r8}) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r17, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x3, 0x6, 0xf5eb065c00591b50, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x3000880}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r16, 0x106, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0c1}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f0000001240)={@empty, @random="1306d087e9df", @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "d5966e59ab897283"}}}}, &(0x7f0000001280)={0x0, 0x3, [0xfb9, 0x602, 0xbeb, 0x11a]}) r18 = syz_genetlink_get_family_id$gtp(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r15, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x78, r18, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x40) 16.245386317s ago: executing program 1 (id=1476): syz_emit_ethernet(0x4e, &(0x7f0000000880)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @empty}}}}}}, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r1, 0x12a, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 16.139712218s ago: executing program 2 (id=1477): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket(0x10, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400010000000000f00000000000ffff81"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x148}, 0x10) write(r4, &(0x7f0000000480)="240000001e005f0214fffffffffffff8070000e6b700000000000001080008001d000000", 0x54) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000001100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe0351244d391edad}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x4, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "527b5ff867216b003c9a0e6e83551c2b"}]}}}}}}}, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16.139135289s ago: executing program 3 (id=1478): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d010000000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc303000010010000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8cc658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ad539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c97888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5a444a41bac326ddea7d7b9c90d44f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2a4d39b43878b6ef26ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee92ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93b71db0a2366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000000000009a8329eb97567787ff28dd96c8e0f9e3c84394afc8f83dc6c6c813fafed61cdd6117092562837a3fa3fc388ab57429a9ecc4fddb0f0a7e4a1415d82d8bac999696d9130e36fc86df796a72559c523fae90d0b742d09cd2edf652c67aa62742e9ce0ff5283f627b622a83576f57d0899e0da8483f9dc296"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0x740, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @mcast1, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xc, @mcast2, 0x7fffffff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x5cc, 0x8, 0x0, 0x1, [{0x580, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6ae56328faa2db99b099b1b6a45547f66bf4ebd8414b82a10c0454d6fbea3f9a"}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x4}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @loopback, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "98574e0e75438fdeb89a4311d3b062e7ea1b2149778587d0e2e98b04168dfa1b"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}]}, 0x740}, 0x1, 0x0, 0x0, 0x5}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 16.119807177s ago: executing program 1 (id=1479): unshare(0x22020600) r0 = socket(0x29, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 16.068360008s ago: executing program 2 (id=1480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8, 0x81, 0xf8, 0xfffffff3}, {0x0, 0xf4, 0x18, 0x7}, {0x1, 0xff, 0x7, 0x3}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 16.007517815s ago: executing program 1 (id=1481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002100010000bf0000000000000a000000000000000000000008000d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x19, 0x0, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) syz_80211_inject_frame(&(0x7f0000001d00), &(0x7f0000001d40)=@ctrl_frame=@ba={{}, {0x9}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x5, {0x2, 0x8a1}, "0a7744bb986ee73f"}, {0x0, 0x6, {0x6, 0x6}, "37fb3b2b134f154f"}, {0x0, 0x2, {0x8, 0x6}, "547de6caca9fa64d"}, {0x0, 0x0, {0x3, 0x2}, "90af0236f0639e05"}, {0x0, 0x5, {0x3, 0x11}, "4061a1b707c1b6d6"}, {0x0, 0x2, {0x6, 0x8}, "8e01dbffd8a06731"}, {0x0, 0x3, {0x7, 0x10}, "bb9a6f81d1fd7369"}, {0x0, 0x2, {0x4, 0x9}, "d79d34a8cea914ad"}], {0x0, 0x0, {0x3, 0x4}, "a3dfb2e51a424137"}}}, 0x7e) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r7, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) close(r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x10, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x20008004) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000001c0)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10040}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x36}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x4000) 3.142251145s ago: executing program 32 (id=1444): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000fb9f000000000000000000"], 0xe) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@deltclass={0x490, 0x29, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xf, 0x10}, {0xe, 0x80ccc450b8fed703}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_htb={{0x8}, {0x40c, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xffffffff, 0x633f, 0xfffffe01, 0x0, 0x8000, 0x5, 0xff, 0x6, 0x2, 0x3, 0x4, 0x10, 0x9, 0x8, 0x2000000, 0x2, 0x7, 0x200, 0x8000, 0x5, 0x7f, 0x9, 0x1000, 0x7b1, 0x4, 0x7f4, 0x8, 0xc348, 0x5, 0x7, 0x4, 0xa0000000, 0xff, 0x80000000, 0x2, 0x89, 0x8, 0x0, 0x7, 0x7, 0x5, 0x8, 0x9d, 0x6, 0x0, 0xb913eec0, 0x7, 0x0, 0x7, 0x100, 0x2, 0x6, 0xd, 0x9, 0xfffffe01, 0x5, 0x5, 0x3, 0x3, 0xfffffffe, 0x7d, 0xe393, 0x77b, 0x8, 0x8, 0x37ec, 0xffff, 0x80000000, 0x6, 0x7fffffff, 0x8, 0x0, 0x5, 0x1ff, 0x0, 0x9, 0xd, 0x9, 0x1, 0x2, 0x0, 0x100, 0x5eef, 0x1, 0x9, 0x7, 0xcd3, 0xffff, 0x7, 0x40eb, 0xd6, 0x704, 0x8, 0xfc, 0x4, 0x10000, 0x0, 0x40, 0xf9, 0x61, 0x7, 0xffffff05, 0x80000000, 0x400, 0x7, 0x7fffffff, 0x6, 0x4, 0xb7b, 0x9811, 0x9e21, 0x3, 0xe, 0x27d, 0x80000000, 0x6, 0x3, 0xadce000, 0x2, 0x5, 0x80, 0xff, 0x5, 0x55be, 0x2, 0x7e8, 0x242, 0x401, 0x57105123, 0x1, 0x0, 0x4, 0x7f, 0x6, 0xc, 0x800, 0x8, 0x6e6e, 0xfffffffd, 0x5, 0x2, 0x0, 0x5e61631d, 0x3, 0x100, 0x3, 0x8, 0x7, 0x8, 0xfffffeb3, 0x8, 0x20, 0x6, 0x4, 0x7, 0x2, 0x1, 0x8, 0x2, 0xcab8, 0xc9e, 0xe, 0x400, 0x1000, 0xa, 0x8, 0x3a, 0xe, 0xf7, 0x7f, 0x15, 0x8001, 0x52f, 0xce5, 0x326, 0x5, 0x7e0b, 0x5, 0x3, 0x7, 0x1, 0x9, 0x4, 0x3ff, 0x5, 0x0, 0x575, 0x5, 0x9, 0xed, 0x7ff, 0x189f, 0x8f, 0x7, 0x1, 0x200, 0x800, 0xfff, 0x1, 0x9, 0xa, 0x1000, 0x6, 0x678, 0x0, 0xfffffff7, 0x9, 0xd, 0x0, 0x1, 0x0, 0x5, 0xa847, 0x5, 0x2, 0xd116, 0x81, 0x3, 0xffff, 0x4, 0x8, 0x6f4, 0xfffffffa, 0x80, 0x8001, 0x2, 0x4, 0x6, 0x81, 0xc, 0x1, 0xb3c, 0x1, 0x4, 0x5, 0x80000000, 0x6, 0x3, 0x3a6, 0xfffffffa, 0x1, 0xa, 0x8000, 0x7c, 0x200, 0x1, 0x40, 0x5, 0x8, 0x2, 0x8, 0x0, 0x9, 0x6, 0x3ff, 0x9]}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x80, 0xf}}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8000}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x800}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x80000000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x831f}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x2c, r4, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000c50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb) (async) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x6, 0x0) (async) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14, 0x14}}, 0x1c}}, 0x0) splice(r5, &(0x7f0000000080)=0x6fe, r7, &(0x7f00000000c0)=0xfffffffe00000000, 0x3, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) write$nci(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="6103050481020509012f01"], 0xb) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000800001c0040"], 0x50}}, 0x20004040) 1.1115401s ago: executing program 33 (id=1475): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x8, 0x4, {{0x13, 0x4, 0x0, 0x26, 0x4c, 0x64, 0x0, 0x42, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@cipso={0x86, 0x35, 0x1, [{0x0, 0xb, "26afad9eb9c8342c09"}, {0x5, 0xd, "e89a647d9898af0230342f"}, {0x7, 0x8, "7c131bb91242"}, {0x7, 0xf, "9c5055fae25e3a1fd8be1a1144"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@loopback, @dev, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x100, 0xdd, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x68, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @empty, {[@timestamp={0x44, 0xc, 0xa8, 0x0, 0xe, [0x8, 0x0]}, @ssrr={0x89, 0xb, 0xb7, [@rand_addr=0x64010102, @private=0xa010100]}, @cipso={0x86, 0x27, 0x1, [{0x0, 0x5, "ced748"}, {0x2, 0xa, "ab1705213085a988"}, {0x2, 0x12, "36e7f0fa1a74cd44fe034a86bf7d6463"}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000500)={0x6a8, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x2c4, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0xfb, 0x3, 0x7ee4}, {0xd3f7, 0x0, 0x2, 0xff}, {0x9, 0x1, 0x5, 0x400}, {0x56, 0x6, 0x6, 0x2}, {0x9, 0x92, 0x6, 0xfffff3b8}, {0x2, 0x5, 0xb, 0x40}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0x4, 0x2, 0xfffffeff}, {0x92a7, 0xf4, 0x40, 0x6}, {0x2, 0x5, 0x7f, 0x9}, {0x5, 0x3, 0x80, 0x4}, {0x2222, 0xd, 0x5, 0x8}, {0x6, 0x0, 0x27, 0x5}, {0x6, 0xd7, 0x0, 0x5}, {0x8000, 0x9, 0x80, 0x6419502}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x91}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x80000}, 0x4004042) r14 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000c80)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000cc0)={'xfrm0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x2004) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r15, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, r16, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000f80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @remote, 0x7, 0x5, 0x9, 0x180, 0x5, 0x4, r8}) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r17, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x3, 0x6, 0xf5eb065c00591b50, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x3000880}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r16, 0x106, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0c1}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f0000001240)={@empty, @random="1306d087e9df", @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "d5966e59ab897283"}}}}, &(0x7f0000001280)={0x0, 0x3, [0xfb9, 0x602, 0xbeb, 0x11a]}) r18 = syz_genetlink_get_family_id$gtp(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r15, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x78, r18, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x40) 1.064409097s ago: executing program 34 (id=1478): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0x740, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @mcast1, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xc, @mcast2, 0x7fffffff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x5cc, 0x8, 0x0, 0x1, [{0x580, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6ae56328faa2db99b099b1b6a45547f66bf4ebd8414b82a10c0454d6fbea3f9a"}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x4}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @loopback, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "98574e0e75438fdeb89a4311d3b062e7ea1b2149778587d0e2e98b04168dfa1b"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}]}, 0x740}, 0x1, 0x0, 0x0, 0x5}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 35.983987ms ago: executing program 35 (id=1481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002100010000bf0000000000000a000000000000000000000008000d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x19, 0x0, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) syz_80211_inject_frame(&(0x7f0000001d00), &(0x7f0000001d40)=@ctrl_frame=@ba={{}, {0x9}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x5, {0x2, 0x8a1}, "0a7744bb986ee73f"}, {0x0, 0x6, {0x6, 0x6}, "37fb3b2b134f154f"}, {0x0, 0x2, {0x8, 0x6}, "547de6caca9fa64d"}, {0x0, 0x0, {0x3, 0x2}, "90af0236f0639e05"}, {0x0, 0x5, {0x3, 0x11}, "4061a1b707c1b6d6"}, {0x0, 0x2, {0x6, 0x8}, "8e01dbffd8a06731"}, {0x0, 0x3, {0x7, 0x10}, "bb9a6f81d1fd7369"}, {0x0, 0x2, {0x4, 0x9}, "d79d34a8cea914ad"}], {0x0, 0x0, {0x3, 0x4}, "a3dfb2e51a424137"}}}, 0x7e) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r7, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) close(r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x10, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x20008004) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000001c0)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10040}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x36}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x4000) 0s ago: executing program 36 (id=1480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8, 0x81, 0xf8, 0xfffffff3}, {0x0, 0xf4, 0x18, 0x7}, {0x1, 0xff, 0x7, 0x3}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 82.746533][ T5850] cgroup: Unknown subsys name 'net' [ 82.943850][ T5850] cgroup: Unknown subsys name 'cpuset' [ 82.953492][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.702469][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.487482][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.500947][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.531986][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.540679][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.541252][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.549216][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.562699][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.572730][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.580064][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.580922][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.594922][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.597514][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.603146][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.612396][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.618394][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.625318][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.632182][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.639008][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.646143][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.660055][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.672506][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.682219][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.693642][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.706342][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.720280][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.290374][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 90.491628][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 90.556476][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 90.644671][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 90.706867][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.714228][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.721833][ T5871] bridge_slave_0: entered allmulticast mode [ 90.729229][ T5871] bridge_slave_0: entered promiscuous mode [ 90.737902][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 90.787295][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.794776][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.802636][ T5871] bridge_slave_1: entered allmulticast mode [ 90.810229][ T5871] bridge_slave_1: entered promiscuous mode [ 90.941994][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.955300][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.992435][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.999650][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.007520][ T5860] bridge_slave_0: entered allmulticast mode [ 91.016025][ T5860] bridge_slave_0: entered promiscuous mode [ 91.072402][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.079587][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.087195][ T5863] bridge_slave_0: entered allmulticast mode [ 91.095075][ T5863] bridge_slave_0: entered promiscuous mode [ 91.103834][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.111376][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.118653][ T5860] bridge_slave_1: entered allmulticast mode [ 91.127287][ T5860] bridge_slave_1: entered promiscuous mode [ 91.175209][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.182709][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.190786][ T5863] bridge_slave_1: entered allmulticast mode [ 91.198184][ T5863] bridge_slave_1: entered promiscuous mode [ 91.221660][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.228867][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.237245][ T5861] bridge_slave_0: entered allmulticast mode [ 91.245452][ T5861] bridge_slave_0: entered promiscuous mode [ 91.273668][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.284292][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.291990][ T5862] bridge_slave_0: entered allmulticast mode [ 91.299489][ T5862] bridge_slave_0: entered promiscuous mode [ 91.310139][ T5871] team0: Port device team_slave_0 added [ 91.317300][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.325032][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.332361][ T5862] bridge_slave_1: entered allmulticast mode [ 91.339993][ T5862] bridge_slave_1: entered promiscuous mode [ 91.388740][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.396071][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.403517][ T5861] bridge_slave_1: entered allmulticast mode [ 91.411135][ T5861] bridge_slave_1: entered promiscuous mode [ 91.419498][ T5871] team0: Port device team_slave_1 added [ 91.459587][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.474646][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.516743][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.528527][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.557350][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.611314][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.665668][ T5860] team0: Port device team_slave_0 added [ 91.676929][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.688042][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.695733][ T5867] Bluetooth: hci0: command tx timeout [ 91.701850][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.728065][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.755536][ T5863] team0: Port device team_slave_0 added [ 91.764082][ T5860] team0: Port device team_slave_1 added [ 91.770844][ T5876] Bluetooth: hci2: command tx timeout [ 91.776653][ T5876] Bluetooth: hci1: command tx timeout [ 91.782792][ T5873] Bluetooth: hci3: command tx timeout [ 91.788792][ T5867] Bluetooth: hci4: command tx timeout [ 91.799414][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.809578][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.816830][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.843679][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.865899][ T5862] team0: Port device team_slave_0 added [ 91.874641][ T5862] team0: Port device team_slave_1 added [ 91.883493][ T5863] team0: Port device team_slave_1 added [ 91.904212][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.911588][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.938777][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.011133][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.018166][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.044955][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.064520][ T5861] team0: Port device team_slave_0 added [ 92.072974][ T5861] team0: Port device team_slave_1 added [ 92.153324][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.160505][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.187910][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.200756][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.207859][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.234284][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.247086][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.254269][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.280831][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.316688][ T5871] hsr_slave_0: entered promiscuous mode [ 92.325242][ T5871] hsr_slave_1: entered promiscuous mode [ 92.333927][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.341605][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.369860][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.402953][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.410328][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.437390][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.498171][ T5860] hsr_slave_0: entered promiscuous mode [ 92.504810][ T5860] hsr_slave_1: entered promiscuous mode [ 92.512303][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 92.518181][ T5860] Cannot create hsr debugfs directory [ 92.555353][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.564719][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.600803][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.706516][ T5863] hsr_slave_0: entered promiscuous mode [ 92.713868][ T5863] hsr_slave_1: entered promiscuous mode [ 92.720758][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 92.726620][ T5863] Cannot create hsr debugfs directory [ 92.809570][ T5862] hsr_slave_0: entered promiscuous mode [ 92.817412][ T5862] hsr_slave_1: entered promiscuous mode [ 92.824634][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 92.831407][ T5862] Cannot create hsr debugfs directory [ 92.937473][ T5861] hsr_slave_0: entered promiscuous mode [ 92.946662][ T5861] hsr_slave_1: entered promiscuous mode [ 92.955346][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 92.961278][ T5861] Cannot create hsr debugfs directory [ 93.488366][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.502062][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.514079][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.525575][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.604809][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.635838][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.659164][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.672210][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.757139][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.771358][ T5867] Bluetooth: hci0: command tx timeout [ 93.784728][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.796722][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.823900][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.850139][ T5867] Bluetooth: hci4: command tx timeout [ 93.851048][ T5872] Bluetooth: hci3: command tx timeout [ 93.855718][ T5867] Bluetooth: hci2: command tx timeout [ 93.862324][ T5876] Bluetooth: hci1: command tx timeout [ 93.961604][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.977751][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.988851][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.000975][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.065748][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.160476][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.184949][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.197349][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.211921][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.241659][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.270034][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.277650][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.302591][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.309903][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.334748][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.400977][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.453063][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.506462][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.518256][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.525605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.538515][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.569557][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.576766][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.595775][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.607064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.614297][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.644044][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.651284][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.676315][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.683567][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.718580][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.725797][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.907219][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.004334][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.063700][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.070952][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.098225][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.105543][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.267884][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.565720][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.594857][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.766880][ T5861] veth0_vlan: entered promiscuous mode [ 95.807754][ T5861] veth1_vlan: entered promiscuous mode [ 95.860470][ T5876] Bluetooth: hci0: command tx timeout [ 95.868616][ T5860] veth0_vlan: entered promiscuous mode [ 95.898539][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.919449][ T5860] veth1_vlan: entered promiscuous mode [ 95.930250][ T5876] Bluetooth: hci1: command tx timeout [ 95.935740][ T5872] Bluetooth: hci3: command tx timeout [ 95.935762][ T5867] Bluetooth: hci4: command tx timeout [ 95.941904][ T5873] Bluetooth: hci2: command tx timeout [ 95.972352][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.016502][ T5861] veth0_macvtap: entered promiscuous mode [ 96.029430][ T5861] veth1_macvtap: entered promiscuous mode [ 96.056798][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.069230][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.132861][ T3479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.146168][ T3479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.168845][ T1089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.179590][ T1089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.205017][ T5860] veth0_macvtap: entered promiscuous mode [ 96.218154][ T5860] veth1_macvtap: entered promiscuous mode [ 96.338502][ T5862] veth0_vlan: entered promiscuous mode [ 96.349020][ T5863] veth0_vlan: entered promiscuous mode [ 96.362480][ T5871] veth0_vlan: entered promiscuous mode [ 96.395576][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.402008][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.424773][ T5871] veth1_vlan: entered promiscuous mode [ 96.432355][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.446970][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.456496][ T5863] veth1_vlan: entered promiscuous mode [ 96.486334][ T5862] veth1_vlan: entered promiscuous mode [ 96.525205][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.535287][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.551780][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.560806][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.575010][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.599270][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.704843][ T5863] veth0_macvtap: entered promiscuous mode [ 96.714580][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.723151][ T5863] veth1_macvtap: entered promiscuous mode [ 96.746770][ T5862] veth0_macvtap: entered promiscuous mode [ 96.783079][ T5871] veth0_macvtap: entered promiscuous mode [ 96.798887][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.803506][ T5871] veth1_macvtap: entered promiscuous mode [ 96.827526][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.840604][ T5862] veth1_macvtap: entered promiscuous mode [ 96.924417][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.947667][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.976905][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.983491][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.992590][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.026181][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.075092][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.103373][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.123365][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.148936][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.222280][ T24] cfg80211: failed to load regulatory.db [ 97.243289][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.255471][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.282151][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.341384][ T5992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 97.355053][ T5993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 97.364367][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.374417][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.406239][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.497246][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.537406][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.577038][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.624978][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.673321][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.705826][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.838826][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.858449][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.930126][ T5872] Bluetooth: hci0: command tx timeout [ 98.010866][ T5872] Bluetooth: hci3: command tx timeout [ 98.016551][ T5872] Bluetooth: hci1: command tx timeout [ 98.022982][ T5876] Bluetooth: hci2: command tx timeout [ 98.027290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.029629][ T5876] Bluetooth: hci4: command tx timeout [ 98.054627][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.143161][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.163216][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.228736][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.243525][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.407610][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.456376][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.568972][ T6022] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.631755][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.208800][ T6035] sctp: failed to load transform for md5: -4 [ 102.240938][ T6090] veth0_vlan: entered allmulticast mode [ 102.257830][ T6093] veth0_vlan: left promiscuous mode [ 102.266914][ T6093] veth0_vlan: entered promiscuous mode [ 102.280471][ T6103] veth0_vlan: entered allmulticast mode [ 102.362477][ T6106] ÿÿÿÿÿÿ: renamed from vlan1 [ 105.001450][ T6162] syzkaller0: entered promiscuous mode [ 105.007270][ T6162] syzkaller0: entered allmulticast mode [ 110.031786][ T6281] pim6reg1: entered promiscuous mode [ 110.037172][ T6281] pim6reg1: entered allmulticast mode [ 111.005818][ T6320] netlink: 'syz.4.128': attribute type 19 has an invalid length. [ 111.018923][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 111.057212][ T6320] Zero length message leads to an empty skb [ 111.364423][ T6327] warning: `syz.1.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.414758][ T6328] veth0_to_bridge: entered promiscuous mode [ 111.600842][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 111.612371][ T6340] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 111.633571][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.642382][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.710799][ T6328] veth0_to_bridge: left promiscuous mode [ 112.182721][ T6363] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 112.199881][ T6363] netlink: 244 bytes leftover after parsing attributes in process `syz.4.142'. [ 112.210171][ T6364] netlink: 9 bytes leftover after parsing attributes in process `syz.1.141'. [ 112.220290][ T6364] gretap0: entered promiscuous mode [ 112.254634][ T6364] netlink: 5 bytes leftover after parsing attributes in process `syz.1.141'. [ 112.263021][ T6363] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.278016][ T6364] 0ªî{X¹¦: renamed from gretap0 [ 112.287021][ T6364] 0ªî{X¹¦: left promiscuous mode [ 112.301168][ T6364] 0ªî{X¹¦: entered allmulticast mode [ 112.309334][ T6364] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 112.589306][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.145'. [ 112.634523][ T6376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.348010][ T6407] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.153'. [ 113.388566][ T6411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.643711][ T6424] veth0_to_bridge: entered promiscuous mode [ 113.650596][ T6424] veth0_to_bridge: left promiscuous mode [ 113.863620][ T6433] netlink: 104 bytes leftover after parsing attributes in process `syz.4.161'. [ 113.885329][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 113.905479][ T6435] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 113.925510][ T6435] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 113.932571][ T6432] netlink: 104 bytes leftover after parsing attributes in process `syz.4.161'. [ 114.613402][ T6498] team_slave_0: entered allmulticast mode [ 115.129608][ T6516] netlink: 'syz.3.178': attribute type 7 has an invalid length. [ 115.138173][ T6516] netlink: 'syz.3.178': attribute type 8 has an invalid length. [ 115.456797][ T6523] netlink: 'syz.0.181': attribute type 10 has an invalid length. [ 115.496220][ T6530] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 115.534710][ T6530] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 115.566739][ T6523] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.668040][ T6535] IPVS: stopping master sync thread 6542 ... [ 115.674997][ T6542] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 115.696594][ T6506] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 116.041684][ T6555] bond0: entered allmulticast mode [ 116.077656][ T6555] bond_slave_0: entered allmulticast mode [ 116.110397][ T6555] bond_slave_1: entered allmulticast mode [ 116.692908][ T6582] bridge: RTM_NEWNEIGH with invalid ether address [ 116.730712][ T5876] Bluetooth: hci0: command 0x080f tx timeout [ 116.742291][ T6540] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.837728][ T6540] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 117.037465][ T6590] netlink: 'syz.1.196': attribute type 1 has an invalid length. [ 117.080072][ T6590] netlink: 'syz.1.196': attribute type 3 has an invalid length. [ 117.123247][ T6590] __nla_validate_parse: 4 callbacks suppressed [ 117.123266][ T6590] netlink: 216 bytes leftover after parsing attributes in process `syz.1.196'. [ 117.202299][ T6590] NCSI netlink: No device for ifindex 813332851 [ 117.209591][ T6597] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 117.382906][ T6607] netlink: 'syz.4.199': attribute type 3 has an invalid length. [ 117.411590][ T6607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.446949][ T6540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.473899][ T6540] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 117.565234][ T6613] netlink: 'syz.3.201': attribute type 4 has an invalid length. [ 117.626495][ T6540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.649884][ T6540] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 117.724240][ T6619] netlink: 'syz.1.202': attribute type 2 has an invalid length. [ 117.767239][ T6620] openvswitch: netlink: Message has 4 unknown bytes. [ 117.784994][ T6619] netlink: 188 bytes leftover after parsing attributes in process `syz.1.202'. [ 117.809080][ T6540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.860068][ T6540] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 117.937455][ T6540] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 117.949982][ T6540] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 117.986767][ T6626] nbd: must specify at least one socket [ 118.075941][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 118.117983][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 119.004090][ T6659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.211'. [ 119.040208][ T6624] netlink: 60 bytes leftover after parsing attributes in process `syz.3.205'. [ 119.535368][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.861363][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.216'. [ 119.942297][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.216'. [ 120.025907][ T6688] syzkaller0: entered promiscuous mode [ 120.037655][ T6688] syzkaller0: entered allmulticast mode [ 120.079623][ T6688] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 120.106658][ T6688] netlink: 'syz.3.219': attribute type 21 has an invalid length. [ 120.503804][ T6709] tls_set_device_offload: netdev not found [ 120.549181][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.221'. [ 120.955252][ T6721] syz.0.224 uses obsolete (PF_INET,SOCK_PACKET) [ 121.004973][ T5981] IPVS: starting estimator thread 0... [ 121.122286][ T6733] IPVS: using max 27 ests per chain, 64800 per kthread [ 121.528043][ T6759] netlink: 'syz.2.231': attribute type 21 has an invalid length. [ 121.569434][ T6759] netlink: 'syz.2.231': attribute type 5 has an invalid length. [ 121.600582][ T6758] tipc: Invalid UDP bearer configuration [ 121.600641][ T6758] tipc: Enabling of bearer rejected, failed to enable media [ 122.335186][ T6802] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 122.605341][ T6813] C: renamed from team_slave_0 (while UP) [ 122.636044][ T6813] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 122.666809][ T6813] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 122.786813][ T6821] vlan0: entered promiscuous mode [ 122.797900][ T6821] vlan0: entered allmulticast mode [ 122.804156][ T6821] veth0_vlan: entered allmulticast mode [ 122.842218][ T6804] __nla_validate_parse: 7 callbacks suppressed [ 122.842238][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 122.935217][ T6829] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.160165][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'. [ 123.383878][ T6847] netlink: 104 bytes leftover after parsing attributes in process `syz.4.251'. [ 124.459402][ T6898] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 124.673415][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 124.683941][ T6905] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 124.683975][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.265'. [ 124.697789][ T6905] netlink: 236 bytes leftover after parsing attributes in process `syz.2.266'. [ 124.743779][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.758428][ T6908] netlink: 72 bytes leftover after parsing attributes in process `syz.4.267'. [ 124.928874][ T6898] bridge_slave_1 (unregistering): left allmulticast mode [ 124.969907][ T6898] bridge_slave_1 (unregistering): left promiscuous mode [ 124.979905][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.482348][ T6933] team0: Device ip6gre1 is of different type [ 125.556512][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'. [ 125.567215][ T6947] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.277'. [ 125.618573][ T6940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.275'. [ 125.933104][ T6965] netlink: 'syz.3.282': attribute type 13 has an invalid length. [ 126.156798][ T6965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.247166][ T6970] netem: change failed [ 126.415831][ T6983] netlink: 'syz.1.284': attribute type 33 has an invalid length. [ 126.582199][ T6990] Bluetooth: MGMT ver 1.23 [ 126.976291][ T7014] sock: sock_timestamping_bind_phc: sock not bind to device [ 127.552612][ T7045] unsupported nlmsg_type 40 [ 128.169243][ T7074] __nla_validate_parse: 8 callbacks suppressed [ 128.169263][ T7074] netlink: 10 bytes leftover after parsing attributes in process `syz.1.310'. [ 128.342878][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 128.448603][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 128.475459][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 128.535153][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 128.682442][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 128.787544][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 128.866373][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 128.958327][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 129.063503][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 129.271421][ T7123] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 129.280530][ T7124] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 129.468762][ T7131] netlink: 'syz.0.327': attribute type 8 has an invalid length. [ 130.142025][ T7159] netlink: 'syz.2.335': attribute type 20 has an invalid length. [ 130.193429][ T7169] netlink: 'syz.2.335': attribute type 20 has an invalid length. [ 130.874180][ T7204] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 130.909580][ T7206] netlink: 'syz.3.349': attribute type 10 has an invalid length. [ 130.976734][ T7206] team0: Device hsr_slave_0 failed to register rx_handler [ 131.032620][ T7204] veth1_to_bond: entered allmulticast mode [ 131.104013][ T7214] netlink: 'syz.0.352': attribute type 4 has an invalid length. [ 131.128167][ T7204] veth1_to_bond: left allmulticast mode [ 131.555561][ T7235] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 132.033030][ T5955] IPVS: starting estimator thread 0... [ 132.036315][ T7253] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 132.149910][ T7261] IPVS: using max 28 ests per chain, 67200 per kthread [ 132.257880][ T7268] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 132.294953][ T7268] bridge0: port 3(team0) entered blocking state [ 132.322357][ T7268] bridge0: port 3(team0) entered disabled state [ 132.339495][ T7268] team0: entered allmulticast mode [ 132.369369][ T7268] team_slave_1: entered allmulticast mode [ 132.409570][ T7268] team0: entered promiscuous mode [ 132.416613][ T7268] team_slave_0: entered promiscuous mode [ 132.434186][ T7268] team_slave_1: entered promiscuous mode [ 132.628533][ T7282] tipc: Enabling of bearer rejected, failed to enable media [ 132.752474][ T7288] bridge0: port 2(vlan2) entered blocking state [ 132.777864][ T7288] bridge0: port 2(vlan2) entered disabled state [ 132.778466][ T7289] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20000 [ 132.786376][ T7288] vlan2: entered allmulticast mode [ 132.801230][ T7288] bridge0: entered allmulticast mode [ 132.810772][ T7288] vlan2: left allmulticast mode [ 132.816044][ T7288] bridge0: left allmulticast mode [ 133.156962][ T7300] netlink: 'syz.2.381': attribute type 11 has an invalid length. [ 133.179827][ T7300] netlink: 'syz.2.381': attribute type 11 has an invalid length. [ 133.218176][ T7300] __nla_validate_parse: 12 callbacks suppressed [ 133.218198][ T7300] netlink: 224 bytes leftover after parsing attributes in process `syz.2.381'. [ 133.974897][ T7310] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 134.010848][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 134.015218][ T7310] netlink: 224 bytes leftover after parsing attributes in process `syz.0.385'. [ 134.230597][ T7328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.391'. [ 134.330210][ T7338] bridge: RTM_NEWNEIGH with invalid ether address [ 134.465742][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 134.532402][ T7345] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 134.543382][ T7345] netlink: 236 bytes leftover after parsing attributes in process `syz.0.397'. [ 135.052331][ T7369] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 135.069061][ T7369] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.403'. [ 135.129361][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.404'. [ 135.151937][ T7371] netlink: 10 bytes leftover after parsing attributes in process `syz.2.404'. [ 135.250124][ T7374] 8021q: VLANs not supported on xfrm0 [ 135.632711][ T7404] delete_channel: no stack [ 135.708231][ T7398] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 135.725097][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 135.751752][ T7398] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 135.760637][ T7398] gretap1: entered promiscuous mode [ 135.766002][ T7398] gretap1: entered allmulticast mode [ 136.258484][ T7425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.467882][ T7441] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 136.522558][ T7443] sock: sock_timestamping_bind_phc: sock not bind to device [ 136.754104][ T7456] netlink: 'syz.4.428': attribute type 1 has an invalid length. [ 136.857521][ T7456] bond2: entered promiscuous mode [ 136.861952][ T7463] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 136.877537][ T7456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.971006][ T7461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.978537][ T7461] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 136.989948][ T7461] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 137.010858][ T7461] bond2: (slave wireguard0): making interface the new active one [ 137.019018][ T7461] wireguard0: entered promiscuous mode [ 137.032589][ T7461] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 137.045585][ T7463] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 137.341704][ T7472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.374055][ T7467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.462430][ T7476] team0: Device vti0 is of different type [ 137.766403][ T7486] veth1_to_bond: entered allmulticast mode [ 137.888082][ T7486] veth1_to_bond: left allmulticast mode [ 138.175556][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.190378][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.235905][ T7507] netlink: 'syz.0.446': attribute type 24 has an invalid length. [ 138.743281][ T7532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.907072][ T7541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.000255][ T7542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.809187][ T7578] __nla_validate_parse: 3 callbacks suppressed [ 139.809207][ T7578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.464'. [ 140.886525][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.894593][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.102991][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.125101][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.175875][ T7625] vlan0: left promiscuous mode [ 141.181290][ T7625] vlan0: left allmulticast mode [ 141.186387][ T7625] veth0_vlan: left allmulticast mode [ 141.381427][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.392232][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.429798][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.456049][ T3518] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.487262][ T7654] nbd: must specify an index to disconnect [ 141.673906][ T7668] netlink: 88 bytes leftover after parsing attributes in process `syz.1.483'. [ 141.811229][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 142.162173][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 142.172127][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 142.195950][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 142.742603][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 142.763134][ T7713] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.498'. [ 142.798212][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'. [ 142.931678][ T7717] netlink: 'syz.2.497': attribute type 8 has an invalid length. [ 142.939500][ T7717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.497'. [ 143.760951][ T7764] netlink: del zone limit has 4 unknown bytes [ 143.819451][ T7765] netlink: del zone limit has 4 unknown bytes [ 143.874136][ T7763] netlink: set zone limit has 4 unknown bytes [ 143.987725][ T7773] sctp: [Deprecated]: syz.2.511 (pid 7773) Use of int in maxseg socket option. [ 143.987725][ T7773] Use struct sctp_assoc_value instead [ 144.004169][ T7776] unknown channel width for channel at 909000KHz? [ 144.368395][ T7792] netlink: 'syz.3.517': attribute type 21 has an invalid length. [ 144.722117][ T7803] vxcan1: entered allmulticast mode [ 145.102737][ T7818] __nla_validate_parse: 1 callbacks suppressed [ 145.102758][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 145.166609][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 145.170848][ T7816] : entered promiscuous mode [ 145.199541][ T7819] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 145.427814][ T7834] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 145.465420][ T7834] netlink: 224 bytes leftover after parsing attributes in process `syz.3.530'. [ 145.502973][ T7834] nbd: illegal input index 1048576 [ 145.566346][ T7834] netlink: 'syz.3.530': attribute type 10 has an invalid length. [ 145.608732][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.643053][ T7834] bridge_slave_1: left allmulticast mode [ 145.671263][ T7834] bridge_slave_1: left promiscuous mode [ 145.693712][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.741650][ T7834] bridge_slave_1: entered allmulticast mode [ 145.766020][ T7834] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 146.101111][ T7854] netlink: 68 bytes leftover after parsing attributes in process `syz.3.537'. [ 146.424050][ T7857] netlink: 'syz.3.539': attribute type 2 has an invalid length. [ 146.761788][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 146.892086][ T7882] netlink: 68 bytes leftover after parsing attributes in process `syz.2.545'. [ 146.928963][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 146.941132][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.545'. [ 147.329063][ T7902] netlink: 56 bytes leftover after parsing attributes in process `syz.0.551'. [ 147.356284][ T7900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.550'. [ 147.394897][ T7906] ip6gre1: entered allmulticast mode [ 147.460296][ T7908] veth1: entered promiscuous mode [ 147.465409][ T7908] veth1: entered allmulticast mode [ 147.717387][ T7916] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 147.807982][ T7916] veth5: entered promiscuous mode [ 148.540249][ T7947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.580878][ T7947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.095922][ T7962] netlink: 'syz.0.569': attribute type 33 has an invalid length. [ 149.614368][ T7988] tipc: Can't bind to reserved service type 1 [ 150.048350][ T7998] netlink: 'syz.2.580': attribute type 3 has an invalid length. [ 150.559474][ T8019] __nla_validate_parse: 9 callbacks suppressed [ 150.559495][ T8019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.586'. [ 150.902824][ T8038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.592'. [ 150.917115][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 151.133638][ T8052] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 151.151474][ T8052] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 151.361002][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.602'. [ 151.407167][ T8064] : renamed from bridge_slave_0 (while UP) [ 151.442751][ T8063] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 151.806619][ T8089] netlink: 3 bytes leftover after parsing attributes in process `syz.3.608'. [ 151.834373][ T8089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.047334][ T8104] bridge_slave_0: default FDB implementation only supports local addresses [ 152.329530][ T8117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.617'. [ 152.341731][ T8117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.617'. [ 152.351952][ T8117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.617'. [ 152.368037][ T8117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.617'. [ 152.400275][ T8117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.617'. [ 152.814025][ T8137] 8021q: VLANs not supported on ip6_vti0 [ 153.087124][ T8156] netlink: 'syz.4.628': attribute type 3 has an invalid length. [ 153.741393][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.861819][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.928405][ T8193] tipc: Started in network mode [ 153.934052][ T8193] tipc: Node identity 321c45a7f2f, cluster identity 4711 [ 153.947327][ T8193] tipc: Enabled bearer , priority 0 [ 154.026816][ T8193] tipc: Disabling bearer [ 154.533411][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056219400: rx timeout, send abort [ 154.800596][ T8234] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 154.917848][ T5919] udevd[5919]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 155.033539][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561fa000: rx timeout, send abort [ 155.042836][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056219400: abort rx timeout. Force session deactivation [ 155.092440][ T8253] netlink: 'syz.2.653': attribute type 2 has an invalid length. [ 155.542093][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561fa000: abort rx timeout. Force session deactivation [ 155.581978][ T8275] syzkaller1: entered promiscuous mode [ 155.591757][ T8275] syzkaller1: entered allmulticast mode [ 155.658882][ T8280] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.658882][ T8279] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.107531][ T8297] __nla_validate_parse: 37 callbacks suppressed [ 156.107552][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 156.137196][ T8298] netlink: 'syz.1.665': attribute type 7 has an invalid length. [ 156.594627][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 156.666194][ T8324] netlink: 'syz.0.672': attribute type 3 has an invalid length. [ 156.701589][ T8324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.738359][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.673'. [ 156.882256][ T8336] tipc: Enabled bearer , priority 0 [ 156.960183][ T8336] tipc: Disabling bearer [ 157.291129][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.682'. [ 157.300594][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.681'. [ 157.697952][ T8376] netlink: 'syz.1.686': attribute type 16 has an invalid length. [ 157.729337][ T8376] netlink: 'syz.1.686': attribute type 17 has an invalid length. [ 157.797947][ T8376] 0ªî{X¹¦: left allmulticast mode [ 157.813581][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 157.865674][ T8376] bridge0: port 3(team0) entered blocking state [ 157.872422][ T8376] bridge0: port 3(team0) entered forwarding state [ 157.879316][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.886578][ T8376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.894352][ T8376] bridge0: port 1() entered blocking state [ 157.900512][ T8376] bridge0: port 1() entered forwarding state [ 157.997380][ T8376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.603756][ T8423] netlink: 76 bytes leftover after parsing attributes in process `syz.4.699'. [ 158.996687][ T8441] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 159.021006][ T8441] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 159.040613][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 159.095601][ T8443] veth0_to_bridge: entered promiscuous mode [ 159.124324][ T8442] veth0_to_bridge: left promiscuous mode [ 159.131802][ T8441] netlink: 'syz.1.704': attribute type 1 has an invalid length. [ 159.155799][ T8441] netlink: 'syz.1.704': attribute type 1 has an invalid length. [ 159.207656][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 159.413345][ T8452] bridge_slave_0: left allmulticast mode [ 159.419174][ T8452] bridge_slave_0: left promiscuous mode [ 159.426802][ T8458] netlink: 'syz.2.714': attribute type 30 has an invalid length. [ 159.429445][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.472501][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 159.484581][ T8452] bridge_slave_1: left allmulticast mode [ 159.517215][ T8452] bridge_slave_1: left promiscuous mode [ 159.538312][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.562186][ T8452] bond0: (slave bond_slave_0): Releasing backup interface [ 159.587270][ T8452] bond0: (slave bond_slave_1): Releasing backup interface [ 159.620022][ T8452] team0: Port device team_slave_0 removed [ 159.653778][ T8452] team0: Port device team_slave_1 removed [ 159.661548][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.669116][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.679030][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.690829][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.723500][ T8452] bond2: (slave wireguard0): Releasing backup interface [ 159.731347][ T8452] wireguard0: left promiscuous mode [ 159.791883][ T8457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.857160][ T8457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.163369][ T8482] : entered promiscuous mode [ 160.423809][ T8495] netlink: 'syz.4.726': attribute type 64 has an invalid length. [ 160.451339][ T8495] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 161.150765][ T8540] netlink: 'syz.2.740': attribute type 33 has an invalid length. [ 161.166205][ T8540] __nla_validate_parse: 5 callbacks suppressed [ 161.166224][ T8540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.740'. [ 161.261526][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.742'. [ 161.433877][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 161.477298][ T8554] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 161.486245][ T8554] netlink: 'syz.0.745': attribute type 2 has an invalid length. [ 161.574172][ T8554] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 161.607873][ T8551] netlink: 'syz.3.744': attribute type 12 has an invalid length. [ 161.607915][ T8554] netlink: 'syz.0.745': attribute type 2 has an invalid length. [ 161.617703][ T8551] netlink: 'syz.3.744': attribute type 29 has an invalid length. [ 161.659550][ T8551] netlink: 148 bytes leftover after parsing attributes in process `syz.3.744'. [ 161.674019][ T8551] netlink: 59 bytes leftover after parsing attributes in process `syz.3.744'. [ 161.683533][ T8561] 8021q: VLANs not supported on vcan0 [ 161.896164][ T8569] IPv6: sit1: Disabled Multicast RS [ 161.918042][ T8573] netlink: 256 bytes leftover after parsing attributes in process `syz.2.751'. [ 162.219770][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 162.268965][ T8582] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 162.308599][ T8582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.571917][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 162.634176][ T8607] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 162.651308][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 162.673362][ T8607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.763'. [ 162.689206][ T8611] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 162.758295][ T8607] ipvlan1: entered promiscuous mode [ 162.789083][ T8607] ipvlan1: entered allmulticast mode [ 162.798226][ T8607] bridge0: port 4(ipvlan1) entered blocking state [ 162.806621][ T8607] bridge0: port 4(ipvlan1) entered disabled state [ 162.816945][ T8607] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 162.878546][ T8616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.887874][ T8616] bond2: (slave bond3): making interface the new active one [ 162.896376][ T8616] bond2: (slave bond3): Enslaving as an active interface with an up link [ 162.933147][ T8611] bond2: (slave gretap0): Enslaving as a backup interface with an up link [ 163.199128][ T8643] Bluetooth: MGMT ver 1.23 [ 163.518460][ T8649] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.652917][ T8649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.714628][ T8666] trusted_key: syz.1.781 sent an empty control message without MSG_MORE. [ 163.791234][ T8649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.393048][ T8649] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.828274][ T1102] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.873338][ T6502] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.933568][ T6503] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.983696][ T6483] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.211599][ T8701] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 165.305985][ T8702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.428677][ T8718] tipc: Started in network mode [ 165.472407][ T8718] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 165.491463][ T8718] tipc: Enabled bearer , priority 10 [ 165.844196][ T8744] validate_nla: 4 callbacks suppressed [ 165.844218][ T8744] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 165.984610][ T8745] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 166.039964][ T8745] netlink: 'syz.4.805': attribute type 2 has an invalid length. [ 166.175152][ T8763] netlink: 'syz.2.809': attribute type 3 has an invalid length. [ 166.184487][ T8763] netlink: 'syz.2.809': attribute type 3 has an invalid length. [ 166.215654][ T8763] team0: No ports can be present during mode change [ 166.260702][ T8770] __nla_validate_parse: 12 callbacks suppressed [ 166.260722][ T8770] netlink: 52 bytes leftover after parsing attributes in process `syz.0.812'. [ 166.419061][ T8776] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 166.443427][ T8776] netlink: 224 bytes leftover after parsing attributes in process `syz.2.815'. [ 166.455315][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 166.478542][ T8782] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 166.486979][ T8782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.576313][ T8787] netlink: 'syz.0.818': attribute type 1 has an invalid length. [ 166.612763][ T5864] tipc: Node number set to 4269801514 [ 166.789120][ T8787] netlink: 108 bytes leftover after parsing attributes in process `syz.0.818'. [ 166.804047][ T8790] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 166.842287][ T8790] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 166.901844][ T8792] gretap1: entered promiscuous mode [ 167.278967][ T8819] netlink: 144 bytes leftover after parsing attributes in process `syz.0.824'. [ 167.295530][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.823'. [ 167.320003][ T8827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.825'. [ 167.443844][ T8831] IPv6: sit1: Disabled Multicast RS [ 167.464180][ T8836] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 167.605365][ T8839] sctp: [Deprecated]: syz.3.828 (pid 8839) Use of int in max_burst socket option deprecated. [ 167.605365][ T8839] Use struct sctp_assoc_value instead [ 167.725173][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 167.752602][ T8848] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 167.784374][ T8848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.103709][ T8867] netlink: 48 bytes leftover after parsing attributes in process `syz.4.837'. [ 168.190816][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 168.250974][ T8878] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 168.331369][ T8878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.386296][ T8883] bond3: (slave veth3): Enslaving as an active interface with a down link [ 168.403672][ T8890] netlink: 'syz.2.844': attribute type 7 has an invalid length. [ 168.617236][ T8902] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 168.709345][ T8905] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 169.059466][ T8936] netlink: 'syz.0.857': attribute type 9 has an invalid length. [ 169.414934][ T8949] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 169.470400][ T8949] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 169.477485][ T8949] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 169.589432][ T8962] sctp: [Deprecated]: syz.3.867 (pid 8962) Use of int in maxseg socket option. [ 169.589432][ T8962] Use struct sctp_assoc_value instead [ 169.713117][ T8965] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.763931][ T8972] vlan1: entered promiscuous mode [ 169.769047][ T8972] bond4: entered promiscuous mode [ 169.774573][ T8972] vlan1: entered allmulticast mode [ 169.783929][ T8972] bond4: entered allmulticast mode [ 170.556648][ T6482] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.610596][ T6482] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.629367][ T6482] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.662924][ T6482] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.143261][ T9052] validate_nla: 4 callbacks suppressed [ 171.143284][ T9052] netlink: 'syz.1.895': attribute type 11 has an invalid length. [ 171.183366][ T9055] netlink: 'syz.4.897': attribute type 2 has an invalid length. [ 171.365004][ T9067] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 171.698939][ T9086] __nla_validate_parse: 17 callbacks suppressed [ 171.698963][ T9086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'. [ 171.807641][ T9096] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.833833][ T9096] netlink: 'syz.0.911': attribute type 12 has an invalid length. [ 171.852603][ T9096] netlink: 'syz.0.911': attribute type 29 has an invalid length. [ 171.879474][ T9096] netlink: 148 bytes leftover after parsing attributes in process `syz.0.911'. [ 171.900795][ T9096] netlink: 59 bytes leftover after parsing attributes in process `syz.0.911'. [ 172.187974][ T9118] tc_dump_action: action bad kind [ 172.200524][ T9121] netlink: 'syz.3.920': attribute type 21 has an invalid length. [ 172.210836][ T9117] netlink: 'syz.1.918': attribute type 19 has an invalid length. [ 172.251358][ T9121] netlink: 132 bytes leftover after parsing attributes in process `syz.3.920'. [ 172.421324][ T9136] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 172.482536][ T9140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.678387][ T9151] Dead loop on virtual device ip6_vti0, fix it urgently! [ 172.763506][ T9156] batadv_slave_0: entered promiscuous mode [ 172.948073][ T9174] netlink: 512 bytes leftover after parsing attributes in process `syz.4.937'. [ 173.018773][ T9168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.047369][ T9160] batadv_slave_0: left promiscuous mode [ 173.148973][ T9190] netlink: 'syz.0.940': attribute type 83 has an invalid length. [ 173.216533][ T9168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.362147][ T9168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.431872][ T9208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.947'. [ 173.458145][ T9209] openvswitch: netlink: Unknown key attributes 2 [ 173.761969][ T9168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.270803][ T9224] netlink: 184 bytes leftover after parsing attributes in process `syz.3.951'. [ 174.513906][ T6483] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.515134][ T9235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.954'. [ 174.526213][ T6483] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.559096][ T6483] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.613104][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 174.638199][ T6483] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.000244][ T9266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.153615][ T9282] netlink: 'syz.0.967': attribute type 3 has an invalid length. [ 175.409158][ T9294] tipc: Started in network mode [ 175.422477][ T9294] tipc: Node identity , cluster identity 4711 [ 175.444323][ T9294] tipc: Failed to set node id, please configure manually [ 175.454483][ T9294] tipc: Enabling of bearer rejected, failed to enable media [ 175.738701][ T9316] IPv6: NLM_F_REPLACE set, but no existing node found! [ 175.800250][ T9322] netlink: 'syz.1.976': attribute type 10 has an invalid length. [ 175.827050][ T9320] Illegal XDP return value 3805366029 on prog (id 313) dev N/A, expect packet loss! [ 175.864656][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.940070][ T9322] bridge_slave_1: left allmulticast mode [ 175.964536][ T9322] bridge_slave_1: left promiscuous mode [ 176.016696][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.642155][ T9322] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 176.798897][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 176.815960][ T9348] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 176.840732][ T9348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 176.884986][ T9351] team0: Device is already in use. [ 176.937184][ T9356] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.985'. [ 177.067853][ T9358] syz.0.986: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.156223][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz.0.986 Not tainted syzkaller #0 PREEMPT(full) [ 177.156255][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.156276][ T9358] Call Trace: [ 177.156286][ T9358] [ 177.156295][ T9358] dump_stack_lvl+0x189/0x250 [ 177.156337][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.156364][ T9358] ? __pfx__printk+0x10/0x10 [ 177.156396][ T9358] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 177.156423][ T9358] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 177.156451][ T9358] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 177.156480][ T9358] warn_alloc+0x214/0x310 [ 177.156521][ T9358] ? __pfx_warn_alloc+0x10/0x10 [ 177.156565][ T9358] ? __get_vm_area_node+0x28f/0x300 [ 177.156596][ T9358] ? packet_set_ring+0x6f4/0x2350 [ 177.156626][ T9358] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 177.156702][ T9358] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.156737][ T9358] ? alloc_pages_mpol+0x3cd/0x4a0 [ 177.156770][ T9358] ? packet_set_ring+0x6f4/0x2350 [ 177.156795][ T9358] vzalloc_noprof+0xb2/0xf0 [ 177.156826][ T9358] ? packet_set_ring+0x6f4/0x2350 [ 177.156852][ T9358] packet_set_ring+0x6f4/0x2350 [ 177.156903][ T9358] ? __pfx_packet_set_ring+0x10/0x10 [ 177.156950][ T9358] ? _copy_from_user+0x94/0xb0 [ 177.156982][ T9358] packet_setsockopt+0xc5a/0x12c0 [ 177.157010][ T9358] ? __pfx_packet_setsockopt+0x10/0x10 [ 177.157041][ T9358] ? __lock_acquire+0xab9/0xd20 [ 177.157080][ T9358] ? aa_sk_perm+0x81e/0x950 [ 177.157117][ T9358] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.157152][ T9358] ? __fget_files+0x2a/0x420 [ 177.157183][ T9358] ? aa_sock_opt_perm+0xff/0x1b0 [ 177.157207][ T9358] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 177.157230][ T9358] ? __pfx_packet_setsockopt+0x10/0x10 [ 177.157256][ T9358] do_sock_setsockopt+0x17c/0x1b0 [ 177.157296][ T9358] __x64_sys_setsockopt+0x13f/0x1b0 [ 177.157324][ T9358] do_syscall_64+0xfa/0x3b0 [ 177.157354][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.157382][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.157403][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 177.157430][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.157451][ T9358] RIP: 0033:0x7ff4fab8ebe9 [ 177.157479][ T9358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.157497][ T9358] RSP: 002b:00007ff4fb91a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.157520][ T9358] RAX: ffffffffffffffda RBX: 00007ff4fadb5fa0 RCX: 00007ff4fab8ebe9 [ 177.157536][ T9358] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 177.157548][ T9358] RBP: 00007ff4fac11e19 R08: 000000000000001c R09: 0000000000000000 [ 177.157561][ T9358] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.157574][ T9358] R13: 00007ff4fadb6038 R14: 00007ff4fadb5fa0 R15: 00007fff3a6147a8 [ 177.157609][ T9358] [ 177.157623][ T9358] Mem-Info: [ 177.489853][ T9358] active_anon:8456 inactive_anon:0 isolated_anon:0 [ 177.489853][ T9358] active_file:3021 inactive_file:39860 isolated_file:0 [ 177.489853][ T9358] unevictable:768 dirty:129 writeback:0 [ 177.489853][ T9358] slab_reclaimable:11535 slab_unreclaimable:120327 [ 177.489853][ T9358] mapped:28988 shmem:5442 pagetables:1116 [ 177.489853][ T9358] sec_pagetables:0 bounce:0 [ 177.489853][ T9358] kernel_misc_reclaimable:0 [ 177.489853][ T9358] free:1297656 free_pcp:14758 free_cma:0 [ 177.586352][ T9358] Node 0 active_anon:30524kB inactive_anon:0kB active_file:12084kB inactive_file:159232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115952kB dirty:516kB writeback:0kB shmem:17232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12600kB pagetables:4232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.644525][ T9358] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.725266][ T9358] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.750477][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 177.790576][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 177.812591][ T9358] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 177.819937][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.994'. [ 177.829891][ T9358] Node 0 DMA32 free:1290888kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20576kB inactive_anon:0kB active_file:12084kB inactive_file:157652kB unevictable:1536kB writepending:516kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:44524kB local_pcp:22700kB free_cma:0kB [ 177.848487][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.994'. [ 177.870927][ T9358] lowmem_reserve[]: 0 0 1 1 1 [ 177.877575][ T9358] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 177.914175][ T9358] lowmem_reserve[]: 0 0 0 0 0 [ 177.921139][ T9358] Node 1 Normal free:3896576kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16064kB local_pcp:8032kB free_cma:0kB [ 177.930764][ T9382] delete_channel: no stack [ 177.968511][ T9358] lowmem_reserve[]: 0 0 0 0 0 [ 177.973651][ T9358] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.992883][ T9358] Node 0 DMA32: 609*4kB (UM) 499*8kB (UM) 318*16kB (UM) 813*32kB (UM) 253*64kB (UME) 110*128kB (UME) 75*256kB (UME) 37*512kB (UM) 13*1024kB (UME) 0*2048kB 287*4096kB (M) = 1294812kB [ 178.056664][ T9358] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.100083][ T9358] Node 1 Normal: 202*4kB (UE) 39*8kB (UME) 46*16kB (UME) 104*32kB (UME) 27*64kB (UME) 8*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896576kB [ 178.168826][ T9358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.182270][ T9395] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 178.191313][ T9396] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 178.199175][ T9396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.997'. [ 178.209422][ T9358] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.220229][ T9358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.234956][ T9358] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.245510][ T9396] batadv0: entered promiscuous mode [ 178.251250][ T9396] batadv0: entered allmulticast mode [ 178.256875][ T9358] 44237 total pagecache pages [ 178.262825][ T9396] bridge0: port 2(batadv0) entered blocking state [ 178.269530][ T9358] 0 pages in swap cache [ 178.275295][ T9358] Free swap = 124996kB [ 178.277665][ T9396] bridge0: port 2(batadv0) entered disabled state [ 178.280350][ T9358] Total swap = 124996kB [ 178.288008][ T9378] delete_channel: no stack [ 178.298161][ T9358] 2097051 pages RAM [ 178.302418][ T9358] 0 pages HighMem/MovableOnly [ 178.307237][ T9358] 425656 pages reserved [ 178.316086][ T9358] 0 pages cma reserved [ 178.365359][ T9396] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 178.392773][ T9402] tipc: Enabled bearer , priority 0 [ 178.415019][ T9399] syzkaller0: entered promiscuous mode [ 178.423180][ T9399] syzkaller0: entered allmulticast mode [ 178.472989][ T9399] tipc: Resetting bearer [ 178.496362][ T9398] tipc: Resetting bearer [ 178.537684][ T9398] tipc: Disabling bearer [ 178.572592][ T9404] can: request_module (can-proto-4) failed. [ 178.764628][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'. [ 178.862025][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 179.250808][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 179.270430][ T9420] netlink: 'syz.1.1003': attribute type 5 has an invalid length. [ 179.284856][ T9447] netlink: 'syz.4.1011': attribute type 9 has an invalid length. [ 179.418646][ T9457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.725477][ T9470] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 179.907010][ T9482] tipc: Started in network mode [ 179.918211][ T9482] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 179.943491][ T9482] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 179.960764][ T9482] tipc: Enabled bearer , priority 10 [ 180.005537][ T9491] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 180.131205][ T30] audit: type=1804 audit(1755788548.572:2): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1029" name="/newroot/208/cgroup.controllers" dev="tmpfs" ino=1074 res=1 errno=0 [ 180.176772][ T30] audit: type=1800 audit(1755788548.602:3): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1029" name="cgroup.controllers" dev="tmpfs" ino=1074 res=0 errno=0 [ 180.209759][ T30] audit: type=1800 audit(1755788548.612:4): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1029" name="cgroup.controllers" dev="tmpfs" ino=1074 res=0 errno=0 [ 180.817692][ T9543] netlink: 'syz.2.1039': attribute type 4 has an invalid length. [ 181.079969][ T10] tipc: Node number set to 1 [ 181.387763][ T9571] netlink: 'syz.0.1050': attribute type 83 has an invalid length. [ 181.658208][ T9582] bond2: entered allmulticast mode [ 181.664986][ T9582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.673305][ T9582] bridge0: port 2(bond2) entered blocking state [ 181.683630][ T9582] bridge0: port 2(bond2) entered disabled state [ 181.693135][ T9582] bond2: entered promiscuous mode [ 181.698958][ T9582] bridge0: port 2(bond2) entered blocking state [ 181.705382][ T9582] bridge0: port 2(bond2) entered forwarding state [ 181.724078][ T1102] bridge0: port 2(bond2) entered disabled state [ 181.814540][ T9593] __nla_validate_parse: 45 callbacks suppressed [ 181.814561][ T9593] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1056'. [ 181.943901][ T9597] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1058'. [ 181.980888][ T9602] : renamed from bridge_slave_0 (while UP) [ 181.994043][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 182.016175][ T30] audit: type=1800 audit(1755788550.462:5): pid=9602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1060" name="memory.events" dev="tmpfs" ino=1117 res=0 errno=0 [ 182.052346][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 182.082611][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 183.124872][ T9666] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1083'. [ 183.212029][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1084'. [ 183.222093][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1084'. [ 183.333217][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1085'. [ 183.670367][ T9698] netlink: 'syz.0.1090': attribute type 21 has an invalid length. [ 183.700179][ T9698] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.718207][ T9698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.725680][ T9698] IPv6: NLM_F_CREATE should be set when creating new route [ 183.733105][ T9698] IPv6: NLM_F_CREATE should be set when creating new route [ 183.740452][ T9698] IPv6: NLM_F_CREATE should be set when creating new route [ 183.796495][ T9710] netlink: 'syz.1.1093': attribute type 10 has an invalid length. [ 183.807668][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1093'. [ 183.956420][ T9710] geneve0: entered promiscuous mode [ 183.990196][ T9710] geneve0: entered allmulticast mode [ 184.011498][ T9710] team0: Port device geneve0 added [ 184.394718][ T9741] netlink: 'syz.1.1101': attribute type 13 has an invalid length. [ 184.427119][ T9741] lo: entered promiscuous mode [ 184.433952][ T9747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.435668][ T9741] lo: entered allmulticast mode [ 184.498454][ T9741] tunl0: entered promiscuous mode [ 184.520316][ T9741] tunl0: entered allmulticast mode [ 184.543358][ T9741] gre0: entered promiscuous mode [ 184.560122][ T9741] gre0: entered allmulticast mode [ 184.591356][ T9741] 0ªî{X¹¦: entered promiscuous mode [ 184.597212][ T9741] 0ªî{X¹¦: entered allmulticast mode [ 184.754880][ T9741] 0ªî{X¹¦: refused to change device tx_queue_len [ 184.762100][ T9741] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 185.794459][ T1102] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.840759][ T1102] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.874881][ T1102] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.900476][ T1102] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.737547][ T9864] hsr_slave_1 (unregistering): left promiscuous mode [ 186.774438][ T9871] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 186.992306][ T9879] veth5: entered allmulticast mode [ 187.357893][ T9908] __nla_validate_parse: 13 callbacks suppressed [ 187.357917][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 187.440485][ T9918] netlink: 'syz.4.1152': attribute type 6 has an invalid length. [ 187.886655][ T9938] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 187.983049][ T9938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.045244][ T9950] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1164'. [ 188.050718][ T9946] netlink: 'syz.0.1163': attribute type 83 has an invalid length. [ 188.101618][ T9944] bond3: (slave veth5): Enslaving as an active interface with a down link [ 188.205832][ T9959] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:0 [ 188.337121][ T9966] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1167'. [ 188.365200][ T9970] netlink: 'syz.1.1171': attribute type 58 has an invalid length. [ 188.378380][ T9965] netlink: 'syz.0.1168': attribute type 1 has an invalid length. [ 188.391406][ T9965] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1168'. [ 188.407743][ T9970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 188.503178][ T9977] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1172'. [ 188.545696][ T9977] bond0: (slave rose0): Error: Device can not be enslaved while up [ 188.755433][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 188.906375][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 188.907274][ T9995] batadv_slave_1: entered allmulticast mode [ 188.929060][ T9998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1176'. [ 188.967286][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 189.015344][ T9993] netlink: 'syz.4.1175': attribute type 6 has an invalid length. [ 189.087966][T10008] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 189.180808][T10011] netlink: ct family unspecified [ 189.185894][T10011] openvswitch: netlink: Actions may not be safe on all matching packets [ 189.221297][T10011] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 189.237686][T10014] openvswitch: netlink: Duplicate or invalid key (type 0). [ 189.273166][T10014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.292541][ T9997] batadv_slave_1: left allmulticast mode [ 189.697253][T10035] netlink: 'syz.0.1185': attribute type 21 has an invalid length. [ 189.925432][T10049] syzkaller1: entered promiscuous mode [ 189.939036][T10049] syzkaller1: entered allmulticast mode [ 190.092941][T10057] veth0: entered promiscuous mode [ 190.112079][T10055] veth0: left promiscuous mode [ 190.122645][T10056] lo: left allmulticast mode [ 190.236713][T10066] netlink: 'syz.2.1196': attribute type 4 has an invalid length. [ 190.713994][ T6503] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.741848][ T6503] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.774473][ T6503] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.802213][ T6503] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.003490][T10117] dummy0: entered promiscuous mode [ 191.022570][T10117] batadv_slave_1: entered promiscuous mode [ 191.307838][T10144] openvswitch: netlink: Message has 4 unknown bytes. [ 192.078015][T10174] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 192.088080][T10174] netlink: 'syz.2.1228': attribute type 2 has an invalid length. [ 192.108275][T10174] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 192.126828][T10174] netlink: 'syz.2.1228': attribute type 2 has an invalid length. [ 192.433935][T10192] __nla_validate_parse: 20 callbacks suppressed [ 192.433957][T10192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1233'. [ 192.502194][T10194] tipc: Enabled bearer , priority 0 [ 192.515532][T10194] syzkaller0: entered promiscuous mode [ 192.529484][T10194] syzkaller0: entered allmulticast mode [ 192.580028][T10194] tipc: Resetting bearer [ 192.599299][T10194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.610188][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 192.619579][T10193] tipc: Resetting bearer [ 192.648344][T10193] tipc: Disabling bearer [ 193.251516][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1250'. [ 193.507955][T10248] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 193.882432][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1256'. [ 193.956110][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 194.494722][T10305] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 194.522315][T10305] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1266'. [ 194.559925][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 194.891050][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 194.904554][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1273'. [ 195.285973][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'. [ 195.591456][T10364] wireguard: wg1: Could not create IPv4 socket [ 195.714526][T10368] netlink: 'syz.2.1287': attribute type 16 has an invalid length. [ 195.730330][T10368] netlink: 'syz.2.1287': attribute type 17 has an invalid length. [ 195.791613][T10372] openvswitch: netlink: Flow key attr not present in new flow. [ 195.863497][T10368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.884911][T10368] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.898314][T10368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.055419][T10380] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 196.855987][T10413] netlink: 'syz.0.1301': attribute type 11 has an invalid length. [ 196.984193][T10420] openvswitch: netlink: Multiple metadata blocks provided [ 196.984193][T10421] openvswitch: netlink: Multiple metadata blocks provided [ 197.018586][T10421] IPVS: Unknown mcast interface: vcan0 [ 197.063241][T10420] IPVS: Unknown mcast interface: vcan0 [ 197.492069][T10447] __nla_validate_parse: 6 callbacks suppressed [ 197.492092][T10447] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1312'. [ 197.558963][T10447] hsr_slave_0: left promiscuous mode [ 197.576498][T10447] hsr_slave_1: left promiscuous mode [ 197.652040][T10454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1314'. [ 197.898768][T10467] veth7: entered allmulticast mode [ 197.998457][T10472] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 198.064471][T10472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.080244][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 198.140772][T10481] bridge0: port 3(team0) entered disabled state [ 198.147304][T10481] bridge0: port 1() entered disabled state [ 198.502785][T10501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.755531][T10515] vxcan1 speed is unknown, defaulting to 1000 [ 198.819479][T10515] vxcan1 speed is unknown, defaulting to 1000 [ 198.865688][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.897602][T10515] vxcan1 speed is unknown, defaulting to 1000 [ 199.308721][T10515] infiniband syz2: set active [ 199.319125][ T5955] vxcan1 speed is unknown, defaulting to 1000 [ 199.326400][T10515] infiniband syz2: added vxcan1 [ 199.387167][T10515] RDS/IB: syz2: added [ 199.392150][T10515] smc: adding ib device syz2 with port count 1 [ 199.398703][T10515] smc: ib device syz2 port 1 has pnetid [ 199.407267][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 199.416395][T10515] vxcan1 speed is unknown, defaulting to 1000 [ 199.617348][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.804816][T10515] vxcan1 speed is unknown, defaulting to 1000 [ 200.177982][T10515] vxcan1 speed is unknown, defaulting to 1000 [ 200.495796][T10572] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1352'. [ 200.542679][T10515] vxcan1 speed is unknown, defaulting to 1000 [ 200.648745][T10577] netlink: 'syz.0.1354': attribute type 1 has an invalid length. [ 200.656940][T10577] netlink: 'syz.0.1354': attribute type 2 has an invalid length. [ 200.683589][T10577] netlink: 'syz.0.1354': attribute type 3 has an invalid length. [ 200.895577][T10515] vxcan1 speed is unknown, defaulting to 1000 [ 201.437838][T10602] netlink: 'syz.2.1363': attribute type 1 has an invalid length. [ 201.485315][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 201.944744][T10628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1373'. [ 202.011607][T10631] pim6reg1: entered promiscuous mode [ 202.030126][T10631] pim6reg1: entered allmulticast mode [ 202.091340][T10637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.087442][T10708] syzkaller1: entered promiscuous mode [ 203.104860][T10708] syzkaller1: entered allmulticast mode [ 203.775446][T10748] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 203.798844][T10748] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1406'. [ 204.079477][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1409'. [ 204.100613][T10763] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1409'. [ 204.121624][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 204.418461][T10784] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1417'. [ 204.688568][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 204.831892][T10810] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 204.934595][T10810] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.959156][T10813] bond4: (slave geneve2): making interface the new active one [ 204.968937][T10813] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 205.007534][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.072567][ T6494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.105763][ T6494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.151195][ T6494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.243047][T10830] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 205.351894][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1431'. [ 205.381375][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1430'. [ 205.523394][T10846] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 205.599251][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 205.608759][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 205.618266][T10859] netlink: 'syz.0.1437': attribute type 14 has an invalid length. [ 205.627852][T10859] netlink: 'syz.0.1437': attribute type 13 has an invalid length. [ 205.899149][T10874] veth0: entered promiscuous mode [ 205.914762][T10873] veth0: left promiscuous mode [ 206.008903][T10883] netlink: 'syz.4.1444': attribute type 64 has an invalid length. [ 206.153312][T10893] netem: unknown loss type 0 [ 206.158280][T10893] netem: change failed [ 206.369182][T10907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.602758][T10915] veth5: entered allmulticast mode [ 206.664573][T10924] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 207.081079][T10950] netlink: 'syz.3.1463': attribute type 7 has an invalid length. [ 207.187394][T10956] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 207.314936][T10960] 8021q: VLANs not supported on sit0 [ 207.473052][T10967] tipc: New replicast peer: 255.255.255.255 [ 207.484405][T10967] tipc: Enabled bearer , priority 10 [ 207.494518][T10967] tipc: Enabling of bearer rejected, already enabled [ 208.238880][T11007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.255898][T11007] tipc: Enabling of bearer rejected, failed to enable media [ 209.210010][ T5876] Bluetooth: hci0: command tx timeout [ 261.055115][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.494099][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 369.213337][ T31] INFO: task kworker/1:3:5864 blocked for more than 143 seconds. [ 369.221810][ T31] Not tainted syzkaller #0 [ 369.226887][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.235907][ T31] task:kworker/1:3 state:D stack:23496 pid:5864 tgid:5864 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 369.248684][ T31] Workqueue: events rfkill_sync_work [ 369.254755][ T31] Call Trace: [ 369.258512][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.261642][ T31] __schedule+0x1798/0x4cc0 [ 369.266507][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 369.272117][ T31] ? __pfx___schedule+0x10/0x10 [ 369.277723][ T31] ? schedule+0x91/0x360 [ 369.282893][ T31] schedule+0x165/0x360 [ 369.287843][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.293658][ T31] __mutex_lock+0x7e6/0x1360 [ 369.298761][ T31] ? __mutex_lock+0x5b6/0x1360 [ 369.304151][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 369.319792][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.342907][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.348742][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 369.377028][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.395127][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 369.401241][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 369.406589][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 369.413087][ T31] rfkill_set_block+0x1d2/0x440 [ 369.418300][ T31] rfkill_sync_work+0x114/0x200 [ 369.423655][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 369.429531][ T31] process_scheduled_works+0xae1/0x17b0 [ 369.435719][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.442928][ T31] worker_thread+0x8a0/0xda0 [ 369.447583][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.455319][ T31] ? __kthread_parkme+0x7b/0x200 [ 369.461101][ T31] kthread+0x711/0x8a0 [ 369.465410][ T31] ? __pfx_worker_thread+0x10/0x10 [ 369.470745][ T31] ? __pfx_kthread+0x10/0x10 [ 369.475486][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.481255][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.486708][ T31] ? __pfx_kthread+0x10/0x10 [ 369.492076][ T31] ret_from_fork+0x3f9/0x770 [ 369.496922][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 369.502164][ T31] ? __switch_to_asm+0x39/0x70 [ 369.507023][ T31] ? __switch_to_asm+0x33/0x70 [ 369.511884][ T31] ? __pfx_kthread+0x10/0x10 [ 369.516617][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.521916][ T31] [ 369.525229][ T31] INFO: task kworker/1:5:5928 blocked for more than 143 seconds. [ 369.533138][ T31] Not tainted syzkaller #0 [ 369.538564][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.547579][ T31] task:kworker/1:5 state:D stack:24360 pid:5928 tgid:5928 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 369.560371][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 369.568591][ T31] Call Trace: [ 369.572934][ T31] [ 369.576006][ T31] __schedule+0x1798/0x4cc0 [ 369.580843][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 369.586328][ T31] ? __pfx___schedule+0x10/0x10 [ 369.592488][ T31] ? schedule+0x91/0x360 [ 369.597579][ T31] schedule+0x165/0x360 [ 369.601966][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.608391][ T31] __mutex_lock+0x7e6/0x1360 [ 369.614824][ T31] ? __mutex_lock+0x5b6/0x1360 [ 369.619960][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 369.626372][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.632722][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 369.638596][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 369.644687][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 369.652054][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 369.658036][ T31] process_scheduled_works+0xae1/0x17b0 [ 369.664539][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.671111][ T31] worker_thread+0x8a0/0xda0 [ 369.676109][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.683894][ T31] ? __kthread_parkme+0x7b/0x200 [ 369.691488][ T31] kthread+0x711/0x8a0 [ 369.695854][ T31] ? __pfx_worker_thread+0x10/0x10 [ 369.701418][ T31] ? __pfx_kthread+0x10/0x10 [ 369.706428][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.712585][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.718014][ T31] ? __pfx_kthread+0x10/0x10 [ 369.723396][ T31] ret_from_fork+0x3f9/0x770 [ 369.728259][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 369.733630][ T31] ? __switch_to_asm+0x39/0x70 [ 369.738654][ T31] ? __switch_to_asm+0x33/0x70 [ 369.743877][ T31] ? __pfx_kthread+0x10/0x10 [ 369.748543][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.753756][ T31] [ 369.757540][ T31] INFO: task syz.4.1444:10877 blocked for more than 143 seconds. [ 369.765781][ T31] Not tainted syzkaller #0 [ 369.771016][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.780643][ T31] task:syz.4.1444 state:D stack:25096 pid:10877 tgid:10877 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 369.792997][ T31] Call Trace: [ 369.796531][ T31] [ 369.799861][ T31] __schedule+0x1798/0x4cc0 [ 369.804521][ T31] ? validate_chain+0x897/0x2140 [ 369.810579][ T31] ? __lock_acquire+0xab9/0xd20 [ 369.816401][ T31] ? __pfx___schedule+0x10/0x10 [ 369.821645][ T31] ? schedule+0x91/0x360 [ 369.826050][ T31] schedule+0x165/0x360 [ 369.831022][ T31] schedule_timeout+0x9a/0x270 [ 369.836153][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 369.843738][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.849029][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.854933][ T31] ? wait_for_completion+0x267/0x5d0 [ 369.861076][ T31] wait_for_completion+0x2bf/0x5d0 [ 369.867725][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 369.876632][ T31] ? __flush_work+0xd2/0xbc0 [ 369.882626][ T31] ? __flush_work+0xd2/0xbc0 [ 369.888788][ T31] __flush_work+0x9b9/0xbc0 [ 369.894411][ T31] ? __flush_work+0xd2/0xbc0 [ 369.900140][ T31] ? __pfx___flush_work+0x10/0x10 [ 369.907231][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 369.915063][ T31] ? __pfx___cancel_work+0x10/0x10 [ 369.921534][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 369.928057][ T31] __cancel_work_sync+0xbe/0x110 [ 369.933755][ T31] rfkill_unregister+0x92/0x220 [ 369.939729][ T31] nfc_unregister_device+0x96/0x2a0 [ 369.945557][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 369.951905][ T31] virtual_ncidev_close+0x56/0x90 [ 369.957110][ T31] __fput+0x44c/0xa70 [ 369.961894][ T31] task_work_run+0x1d1/0x260 [ 369.967538][ T31] ? __pfx_task_work_run+0x10/0x10 [ 369.972858][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 369.978368][ T31] exit_to_user_mode_loop+0xec/0x110 [ 369.984754][ T31] do_syscall_64+0x2bd/0x3b0 [ 369.991073][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.996542][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.003026][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.007779][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.013969][ T31] RIP: 0033:0x7f5c1cf8ebe9 [ 370.018833][ T31] RSP: 002b:00007ffe71192b58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 370.027937][ T31] RAX: 0000000000000000 RBX: 0000000000032444 RCX: 00007f5c1cf8ebe9 [ 370.036717][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 370.045811][ T31] RBP: 00007f5c1d1b7da0 R08: 0000000000000001 R09: 0000001c71192e4f [ 370.054422][ T31] R10: 0000001b32320000 R11: 0000000000000246 R12: 00007f5c1d1b609c [ 370.062713][ T31] R13: 00007f5c1d1b6090 R14: ffffffffffffffff R15: 00007ffe71192c70 [ 370.071175][ T31] [ 370.074470][ T31] INFO: task syz.0.1475:10983 blocked for more than 144 seconds. [ 370.090985][ T31] Not tainted syzkaller #0 [ 370.096187][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.106198][ T31] task:syz.0.1475 state:D stack:26248 pid:10983 tgid:10982 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 370.119241][ T31] Call Trace: [ 370.122805][ T31] [ 370.126340][ T31] __schedule+0x1798/0x4cc0 [ 370.131708][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.136996][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.142841][ T31] ? __pfx___schedule+0x10/0x10 [ 370.147763][ T31] ? schedule+0x91/0x360 [ 370.152334][ T31] schedule+0x165/0x360 [ 370.156659][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.162775][ T31] __mutex_lock+0x7e6/0x1360 [ 370.167491][ T31] ? __mutex_lock+0x5b6/0x1360 [ 370.173104][ T31] ? rfkill_register+0x37/0x8e0 [ 370.178116][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.183288][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 370.188974][ T31] ? device_initialize+0x24b/0x440 [ 370.194465][ T31] rfkill_register+0x37/0x8e0 [ 370.199326][ T31] nfc_register_device+0x14a/0x320 [ 370.205708][ T31] nci_register_device+0x87f/0x9d0 [ 370.212216][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 370.218946][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 370.224680][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 370.230840][ T31] virtual_ncidev_open+0x129/0x1a0 [ 370.236030][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 370.241982][ T31] misc_open+0x2b9/0x330 [ 370.246274][ T31] chrdev_open+0x4c9/0x5e0 [ 370.250967][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.255962][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 370.263021][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.268052][ T31] do_dentry_open+0x950/0x13f0 [ 370.273199][ T31] vfs_open+0x3b/0x340 [ 370.277485][ T31] ? path_openat+0x2ecd/0x3830 [ 370.282882][ T31] path_openat+0x2ee5/0x3830 [ 370.287593][ T31] ? arch_stack_walk+0xfc/0x150 [ 370.293012][ T31] ? stack_depot_save_flags+0x40/0x860 [ 370.298529][ T31] ? __pfx_path_openat+0x10/0x10 [ 370.303830][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.310283][ T31] do_filp_open+0x1fa/0x410 [ 370.314971][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.320342][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 370.325807][ T31] ? _raw_spin_unlock+0x28/0x50 [ 370.331383][ T31] ? alloc_fd+0x64c/0x6c0 [ 370.335871][ T31] do_sys_openat2+0x121/0x1c0 [ 370.340647][ T31] ? __se_sys_futex+0x36f/0x400 [ 370.345638][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.351509][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.356456][ T31] __x64_sys_openat+0x138/0x170 [ 370.361629][ T31] do_syscall_64+0xfa/0x3b0 [ 370.366169][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.371586][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.377757][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.383160][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.389529][ T31] RIP: 0033:0x7ff4fab8ebe9 [ 370.394505][ T31] RSP: 002b:00007ff4fb91a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.403433][ T31] RAX: ffffffffffffffda RBX: 00007ff4fadb5fa0 RCX: 00007ff4fab8ebe9 [ 370.412410][ T31] RDX: 0000000000000002 RSI: 0000200000001200 RDI: ffffffffffffff9c [ 370.420533][ T31] RBP: 00007ff4fac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 370.428637][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.437247][ T31] R13: 00007ff4fadb6038 R14: 00007ff4fadb5fa0 R15: 00007fff3a6147a8 [ 370.445609][ T31] [ 370.448679][ T31] INFO: task syz.3.1478:10991 blocked for more than 144 seconds. [ 370.456910][ T31] Not tainted syzkaller #0 [ 370.462051][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.471353][ T31] task:syz.3.1478 state:D stack:24824 pid:10991 tgid:10990 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 370.483370][ T31] Call Trace: [ 370.486677][ T31] [ 370.491476][ T31] __schedule+0x1798/0x4cc0 [ 370.496351][ T31] ? kasan_save_free_info+0x46/0x50 [ 370.501930][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.506918][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.511910][ T31] ? __pfx___schedule+0x10/0x10 [ 370.516811][ T31] ? schedule+0x91/0x360 [ 370.521164][ T31] schedule+0x165/0x360 [ 370.525360][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.531154][ T31] __mutex_lock+0x7e6/0x1360 [ 370.535859][ T31] ? __mutex_lock+0x5b6/0x1360 [ 370.540792][ T31] ? misc_open+0x51/0x330 [ 370.545172][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.550696][ T31] misc_open+0x51/0x330 [ 370.554998][ T31] chrdev_open+0x4c9/0x5e0 [ 370.560128][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.565331][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 370.572148][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.577610][ T31] do_dentry_open+0x950/0x13f0 [ 370.582889][ T31] vfs_open+0x3b/0x340 [ 370.587165][ T31] ? path_openat+0x2ecd/0x3830 [ 370.592459][ T31] path_openat+0x2ee5/0x3830 [ 370.597200][ T31] ? arch_stack_walk+0xfc/0x150 [ 370.602327][ T31] ? stack_depot_save_flags+0x40/0x860 [ 370.607951][ T31] ? __pfx_path_openat+0x10/0x10 [ 370.613039][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.619164][ T31] do_filp_open+0x1fa/0x410 [ 370.624171][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.629055][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 370.634293][ T31] ? _raw_spin_unlock+0x28/0x50 [ 370.639332][ T31] ? alloc_fd+0x64c/0x6c0 [ 370.643993][ T31] do_sys_openat2+0x121/0x1c0 [ 370.648780][ T31] ? __se_sys_futex+0x36f/0x400 [ 370.654154][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.659436][ T31] ? rcu_is_watching+0x15/0xb0 [ 370.664518][ T31] __x64_sys_openat+0x138/0x170 [ 370.669418][ T31] do_syscall_64+0xfa/0x3b0 [ 370.674098][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.679358][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.686050][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.691105][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.697037][ T31] RIP: 0033:0x7f110998ebe9 [ 370.701675][ T31] RSP: 002b:00007f110a787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.710411][ T31] RAX: ffffffffffffffda RBX: 00007f1109bb5fa0 RCX: 00007f110998ebe9 [ 370.718600][ T31] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 370.726825][ T31] RBP: 00007f1109a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 370.735597][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.744207][ T31] R13: 00007f1109bb6038 R14: 00007f1109bb5fa0 R15: 00007ffca9fae7e8 [ 370.752718][ T31] [ 370.755791][ T31] INFO: task syz.2.1480:10999 blocked for more than 144 seconds. [ 370.763877][ T31] Not tainted syzkaller #0 [ 370.769109][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.778658][ T31] task:syz.2.1480 state:D stack:28328 pid:10999 tgid:10998 ppid:5860 task_flags:0x400040 flags:0x00004004 [ 370.791439][ T31] Call Trace: [ 370.794824][ T31] [ 370.798428][ T31] __schedule+0x1798/0x4cc0 [ 370.803616][ T31] ? kasan_save_free_info+0x46/0x50 [ 370.808942][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.814551][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.819757][ T31] ? __pfx___schedule+0x10/0x10 [ 370.824930][ T31] ? schedule+0x91/0x360 [ 370.829482][ T31] schedule+0x165/0x360 [ 370.834658][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.840395][ T31] __mutex_lock+0x7e6/0x1360 [ 370.845142][ T31] ? __mutex_lock+0x5b6/0x1360 [ 370.850500][ T31] ? misc_open+0x51/0x330 [ 370.854869][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.860481][ T31] misc_open+0x51/0x330 [ 370.864824][ T31] chrdev_open+0x4c9/0x5e0 [ 370.869913][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.874913][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 370.882419][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 370.887611][ T31] do_dentry_open+0x950/0x13f0 [ 370.893316][ T31] vfs_open+0x3b/0x340 [ 370.897545][ T31] ? path_openat+0x2ecd/0x3830 [ 370.902510][ T31] path_openat+0x2ee5/0x3830 [ 370.907289][ T31] ? arch_stack_walk+0xfc/0x150 [ 370.912574][ T31] ? stack_depot_save_flags+0x40/0x860 [ 370.918119][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.923398][ T31] ? __pfx_path_openat+0x10/0x10 [ 370.928634][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.934905][ T31] do_filp_open+0x1fa/0x410 [ 370.939617][ T31] ? __lock_acquire+0xab9/0xd20 [ 370.944643][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 370.950286][ T31] ? _raw_spin_unlock+0x28/0x50 [ 370.955350][ T31] ? alloc_fd+0x64c/0x6c0 [ 370.959941][ T31] do_sys_openat2+0x121/0x1c0 [ 370.964780][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.970256][ T31] __x64_sys_openat+0x138/0x170 [ 370.975138][ T31] do_syscall_64+0xfa/0x3b0 [ 370.980372][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.985792][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.992052][ T31] ? clear_bhb_loop+0x60/0xb0 [ 370.997044][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.003273][ T31] RIP: 0033:0x7fa7b258ebe9 [ 371.007734][ T31] RSP: 002b:00007fa7b335b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.017774][ T31] RAX: ffffffffffffffda RBX: 00007fa7b27b5fa0 RCX: 00007fa7b258ebe9 [ 371.026127][ T31] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 371.034344][ T31] RBP: 00007fa7b2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 371.042732][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.051041][ T31] R13: 00007fa7b27b6038 R14: 00007fa7b27b5fa0 R15: 00007fffe1421188 [ 371.059256][ T31] [ 371.062428][ T31] INFO: task syz.1.1481:11005 blocked for more than 145 seconds. [ 371.070791][ T31] Not tainted syzkaller #0 [ 371.075764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.084528][ T31] task:syz.1.1481 state:D stack:27016 pid:11005 tgid:11000 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 371.096884][ T31] Call Trace: [ 371.100668][ T31] [ 371.103725][ T31] __schedule+0x1798/0x4cc0 [ 371.108711][ T31] ? kasan_save_free_info+0x46/0x50 [ 371.114298][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 371.120503][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.125839][ T31] ? __pfx___schedule+0x10/0x10 [ 371.131674][ T31] ? schedule+0x91/0x360 [ 371.136083][ T31] schedule+0x165/0x360 [ 371.140522][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.146135][ T31] __mutex_lock+0x7e6/0x1360 [ 371.151369][ T31] ? __mutex_lock+0x5b6/0x1360 [ 371.156266][ T31] ? misc_open+0x51/0x330 [ 371.161311][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.166689][ T31] misc_open+0x51/0x330 [ 371.171032][ T31] chrdev_open+0x4c9/0x5e0 [ 371.175794][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.180997][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 371.187720][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.193343][ T31] do_dentry_open+0x950/0x13f0 [ 371.198340][ T31] vfs_open+0x3b/0x340 [ 371.202931][ T31] ? path_openat+0x2ecd/0x3830 [ 371.207724][ T31] path_openat+0x2ee5/0x3830 [ 371.212637][ T31] ? arch_stack_walk+0xfc/0x150 [ 371.217530][ T31] ? stack_depot_save_flags+0x40/0x860 [ 371.223499][ T31] ? __pfx_path_openat+0x10/0x10 [ 371.228756][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.235258][ T31] do_filp_open+0x1fa/0x410 [ 371.240071][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.245446][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 371.251351][ T31] ? _raw_spin_unlock+0x28/0x50 [ 371.256277][ T31] ? alloc_fd+0x64c/0x6c0 [ 371.260921][ T31] do_sys_openat2+0x121/0x1c0 [ 371.265897][ T31] ? __se_sys_futex+0x36f/0x400 [ 371.270949][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.276325][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.281616][ T31] __x64_sys_openat+0x138/0x170 [ 371.286946][ T31] do_syscall_64+0xfa/0x3b0 [ 371.291968][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.297218][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.304047][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.308962][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.315401][ T31] RIP: 0033:0x7f617d58ebe9 [ 371.320228][ T31] RSP: 002b:00007f617e45c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.329292][ T31] RAX: ffffffffffffffda RBX: 00007f617d7b6090 RCX: 00007f617d58ebe9 [ 371.337707][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 371.346127][ T31] RBP: 00007f617d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 371.354672][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.362803][ T31] R13: 00007f617d7b6128 R14: 00007f617d7b6090 R15: 00007fff6791f3a8 [ 371.371839][ T31] [ 371.374928][ T31] INFO: task syz.1.1481:11006 blocked for more than 145 seconds. [ 371.382891][ T31] Not tainted syzkaller #0 [ 371.388065][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.397230][ T31] task:syz.1.1481 state:D stack:28328 pid:11006 tgid:11000 ppid:5861 task_flags:0x400040 flags:0x00004006 [ 371.410064][ T31] Call Trace: [ 371.413486][ T31] [ 371.416563][ T31] __schedule+0x1798/0x4cc0 [ 371.421198][ T31] ? kasan_save_free_info+0x46/0x50 [ 371.426810][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.431896][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.436929][ T31] ? __pfx___schedule+0x10/0x10 [ 371.442844][ T31] ? schedule+0x91/0x360 [ 371.447821][ T31] schedule+0x165/0x360 [ 371.452473][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.459267][ T31] __mutex_lock+0x7e6/0x1360 [ 371.464725][ T31] ? __mutex_lock+0x5b6/0x1360 [ 371.470534][ T31] ? misc_open+0x51/0x330 [ 371.475234][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.480585][ T31] misc_open+0x51/0x330 [ 371.484792][ T31] chrdev_open+0x4c9/0x5e0 [ 371.489268][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.494416][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 371.501140][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.506113][ T31] do_dentry_open+0x950/0x13f0 [ 371.511065][ T31] vfs_open+0x3b/0x340 [ 371.515220][ T31] ? path_openat+0x2ecd/0x3830 [ 371.520079][ T31] path_openat+0x2ee5/0x3830 [ 371.525068][ T31] ? arch_stack_walk+0xfc/0x150 [ 371.531217][ T31] ? stack_depot_save_flags+0x40/0x860 [ 371.536814][ T31] ? __pfx_path_openat+0x10/0x10 [ 371.541827][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.547951][ T31] do_filp_open+0x1fa/0x410 [ 371.552598][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.557487][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 371.562885][ T31] ? _raw_spin_unlock+0x28/0x50 [ 371.567878][ T31] ? alloc_fd+0x64c/0x6c0 [ 371.572848][ T31] do_sys_openat2+0x121/0x1c0 [ 371.577578][ T31] ? __se_sys_futex+0x36f/0x400 [ 371.582600][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.587835][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.592974][ T31] __x64_sys_openat+0x138/0x170 [ 371.597875][ T31] do_syscall_64+0xfa/0x3b0 [ 371.602455][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.607778][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.614071][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.618770][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.625274][ T31] RIP: 0033:0x7f617d58ebe9 [ 371.630292][ T31] RSP: 002b:00007f617e43b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.638843][ T31] RAX: ffffffffffffffda RBX: 00007f617d7b6180 RCX: 00007f617d58ebe9 [ 371.647350][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 371.655820][ T31] RBP: 00007f617d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 371.663897][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.672067][ T31] R13: 00007f617d7b6218 R14: 00007f617d7b6180 R15: 00007fff6791f3a8 [ 371.680773][ T31] [ 371.684292][ T31] INFO: task syz.1.1481:11007 blocked for more than 145 seconds. [ 371.692719][ T31] Not tainted syzkaller #0 [ 371.697684][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.706417][ T31] task:syz.1.1481 state:D stack:25480 pid:11007 tgid:11000 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 371.718837][ T31] Call Trace: [ 371.722174][ T31] [ 371.725133][ T31] __schedule+0x1798/0x4cc0 [ 371.729825][ T31] ? kasan_save_free_info+0x46/0x50 [ 371.735082][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.740368][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.745263][ T31] ? __pfx___schedule+0x10/0x10 [ 371.750282][ T31] ? schedule+0x91/0x360 [ 371.754558][ T31] schedule+0x165/0x360 [ 371.758734][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.764705][ T31] __mutex_lock+0x7e6/0x1360 [ 371.769428][ T31] ? __mutex_lock+0x5b6/0x1360 [ 371.774889][ T31] ? misc_open+0x51/0x330 [ 371.779294][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.784427][ T31] misc_open+0x51/0x330 [ 371.788693][ T31] chrdev_open+0x4c9/0x5e0 [ 371.793582][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.798613][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 371.805593][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 371.810716][ T31] do_dentry_open+0x950/0x13f0 [ 371.815604][ T31] vfs_open+0x3b/0x340 [ 371.820005][ T31] ? path_openat+0x2ecd/0x3830 [ 371.825795][ T31] path_openat+0x2ee5/0x3830 [ 371.831066][ T31] ? arch_stack_walk+0xfc/0x150 [ 371.836681][ T31] ? stack_depot_save_flags+0x40/0x860 [ 371.842277][ T31] ? __pfx_path_openat+0x10/0x10 [ 371.847240][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.853698][ T31] do_filp_open+0x1fa/0x410 [ 371.858360][ T31] ? __lock_acquire+0xab9/0xd20 [ 371.863979][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 371.869163][ T31] ? _raw_spin_unlock+0x28/0x50 [ 371.874208][ T31] ? alloc_fd+0x64c/0x6c0 [ 371.878587][ T31] do_sys_openat2+0x121/0x1c0 [ 371.883312][ T31] ? __se_sys_futex+0x36f/0x400 [ 371.888228][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.894128][ T31] ? rcu_is_watching+0x15/0xb0 [ 371.898960][ T31] __x64_sys_openat+0x138/0x170 [ 371.904276][ T31] do_syscall_64+0xfa/0x3b0 [ 371.909018][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.914382][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.920859][ T31] ? clear_bhb_loop+0x60/0xb0 [ 371.925592][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.932245][ T31] RIP: 0033:0x7f617d58ebe9 [ 371.936861][ T31] RSP: 002b:00007f617e41a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.945622][ T31] RAX: ffffffffffffffda RBX: 00007f617d7b6270 RCX: 00007f617d58ebe9 [ 371.954117][ T31] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 371.962361][ T31] RBP: 00007f617d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 371.971131][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.979280][ T31] R13: 00007f617d7b6308 R14: 00007f617d7b6270 R15: 00007fff6791f3a8 [ 371.987808][ T31] [ 371.991238][ T31] INFO: task syz-executor:11013 blocked for more than 146 seconds. [ 371.999188][ T31] Not tainted syzkaller #0 [ 372.004464][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.013697][ T31] task:syz-executor state:D stack:27736 pid:11013 tgid:11013 ppid:1 task_flags:0x400040 flags:0x00004000 [ 372.025770][ T31] Call Trace: [ 372.029090][ T31] [ 372.032156][ T31] __schedule+0x1798/0x4cc0 [ 372.036764][ T31] ? kasan_save_free_info+0x46/0x50 [ 372.042657][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.047659][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.052742][ T31] ? __pfx___schedule+0x10/0x10 [ 372.057641][ T31] ? schedule+0x91/0x360 [ 372.061944][ T31] schedule+0x165/0x360 [ 372.066120][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.072137][ T31] __mutex_lock+0x7e6/0x1360 [ 372.076881][ T31] ? __mutex_lock+0x5b6/0x1360 [ 372.081870][ T31] ? misc_open+0x51/0x330 [ 372.086334][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.091553][ T31] misc_open+0x51/0x330 [ 372.095912][ T31] chrdev_open+0x4c9/0x5e0 [ 372.100888][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.106375][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 372.113049][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.118181][ T31] do_dentry_open+0x950/0x13f0 [ 372.123240][ T31] vfs_open+0x3b/0x340 [ 372.127337][ T31] ? path_openat+0x2ecd/0x3830 [ 372.132704][ T31] path_openat+0x2ee5/0x3830 [ 372.137370][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 372.142914][ T31] ? count_memcg_event_mm+0x21/0x260 [ 372.148412][ T31] ? __pfx_path_openat+0x10/0x10 [ 372.153669][ T31] ? __pfx___up_read+0x10/0x10 [ 372.158588][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 372.164309][ T31] do_filp_open+0x1fa/0x410 [ 372.168949][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.174715][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 372.179871][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.184777][ T31] ? alloc_fd+0x64c/0x6c0 [ 372.189243][ T31] do_sys_openat2+0x121/0x1c0 [ 372.194347][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.199648][ T31] ? fd_install+0x97/0x540 [ 372.204214][ T31] ? fd_install+0x30d/0x540 [ 372.209126][ T31] __x64_sys_openat+0x138/0x170 [ 372.214327][ T31] do_syscall_64+0xfa/0x3b0 [ 372.218894][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.224510][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.230958][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.235689][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.241835][ T31] RIP: 0033:0x7fbd18d8d4d1 [ 372.246272][ T31] RSP: 002b:00007fff9850a710 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 372.255283][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fbd18d8d4d1 [ 372.263535][ T31] RDX: 0000000000000002 RSI: 00007fbd18e12822 RDI: 00000000ffffff9c [ 372.271789][ T31] RBP: 00007fbd18e12822 R08: 0000000000000000 R09: 00007fbd19aed6c0 [ 372.280240][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 372.288464][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 372.296861][ T31] [ 372.299976][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 372.309233][ T31] INFO: task syz-executor:11016 blocked for more than 146 seconds. [ 372.317701][ T31] Not tainted syzkaller #0 [ 372.322821][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.331810][ T31] task:syz-executor state:D stack:28040 pid:11016 tgid:11016 ppid:1 task_flags:0x400040 flags:0x00004000 [ 372.344906][ T31] Call Trace: [ 372.348336][ T31] [ 372.351452][ T31] __schedule+0x1798/0x4cc0 [ 372.356122][ T31] ? kasan_save_free_info+0x46/0x50 [ 372.361617][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.366527][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.371865][ T31] ? __pfx___schedule+0x10/0x10 [ 372.376788][ T31] ? schedule+0x91/0x360 [ 372.381241][ T31] schedule+0x165/0x360 [ 372.385558][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.391232][ T31] __mutex_lock+0x7e6/0x1360 [ 372.395880][ T31] ? __mutex_lock+0x5b6/0x1360 [ 372.401100][ T31] ? misc_open+0x51/0x330 [ 372.405458][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.411042][ T31] misc_open+0x51/0x330 [ 372.415387][ T31] chrdev_open+0x4c9/0x5e0 [ 372.420074][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.425129][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 372.431866][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.436846][ T31] do_dentry_open+0x950/0x13f0 [ 372.441698][ T31] vfs_open+0x3b/0x340 [ 372.445784][ T31] ? path_openat+0x2ecd/0x3830 [ 372.450904][ T31] path_openat+0x2ee5/0x3830 [ 372.455738][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 372.461824][ T31] ? count_memcg_event_mm+0x21/0x260 [ 372.467201][ T31] ? __pfx_path_openat+0x10/0x10 [ 372.472541][ T31] ? __pfx___up_read+0x10/0x10 [ 372.477469][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 372.482906][ T31] do_filp_open+0x1fa/0x410 [ 372.487465][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.492909][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 372.497999][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.502952][ T31] ? alloc_fd+0x64c/0x6c0 [ 372.507339][ T31] do_sys_openat2+0x121/0x1c0 [ 372.512234][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.517499][ T31] ? fd_install+0x97/0x540 [ 372.522323][ T31] ? fd_install+0x30d/0x540 [ 372.526897][ T31] __x64_sys_openat+0x138/0x170 [ 372.531986][ T31] do_syscall_64+0xfa/0x3b0 [ 372.536618][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.541946][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.548080][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.553356][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.559374][ T31] RIP: 0033:0x7f1d6c58d4d1 [ 372.564061][ T31] RSP: 002b:00007ffe422e8c80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 372.572815][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1d6c58d4d1 [ 372.581448][ T31] RDX: 0000000000000002 RSI: 00007f1d6c612822 RDI: 00000000ffffff9c [ 372.589853][ T31] RBP: 00007f1d6c612822 R08: 0000000000000000 R09: 00007f1d6d2ed6c0 [ 372.597890][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 372.606062][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 372.614639][ T31] [ 372.617739][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 372.627145][ T31] INFO: task syz-executor:11017 blocked for more than 146 seconds. [ 372.635473][ T31] Not tainted syzkaller #0 [ 372.641056][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.650160][ T31] task:syz-executor state:D stack:26856 pid:11017 tgid:11017 ppid:1 task_flags:0x400040 flags:0x00004000 [ 372.662779][ T31] Call Trace: [ 372.666305][ T31] [ 372.669271][ T31] __schedule+0x1798/0x4cc0 [ 372.674440][ T31] ? kasan_save_free_info+0x46/0x50 [ 372.679799][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.684935][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.690106][ T31] ? __pfx___schedule+0x10/0x10 [ 372.695010][ T31] ? schedule+0x91/0x360 [ 372.699283][ T31] schedule+0x165/0x360 [ 372.703774][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.709294][ T31] __mutex_lock+0x7e6/0x1360 [ 372.714128][ T31] ? __mutex_lock+0x5b6/0x1360 [ 372.719028][ T31] ? misc_open+0x51/0x330 [ 372.723493][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.728611][ T31] misc_open+0x51/0x330 [ 372.733479][ T31] chrdev_open+0x4c9/0x5e0 [ 372.738186][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.743340][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 372.749910][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 372.755186][ T31] do_dentry_open+0x950/0x13f0 [ 372.760584][ T31] vfs_open+0x3b/0x340 [ 372.764793][ T31] ? path_openat+0x2ecd/0x3830 [ 372.769896][ T31] path_openat+0x2ee5/0x3830 [ 372.774634][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 372.780578][ T31] ? count_memcg_event_mm+0x21/0x260 [ 372.785919][ T31] ? __pfx_path_openat+0x10/0x10 [ 372.791434][ T31] ? __pfx___up_read+0x10/0x10 [ 372.796323][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 372.801841][ T31] do_filp_open+0x1fa/0x410 [ 372.806368][ T31] ? __lock_acquire+0xab9/0xd20 [ 372.811562][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 372.816635][ T31] ? _raw_spin_unlock+0x28/0x50 [ 372.822017][ T31] ? alloc_fd+0x64c/0x6c0 [ 372.826858][ T31] do_sys_openat2+0x121/0x1c0 [ 372.831762][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.837100][ T31] ? fd_install+0x97/0x540 [ 372.841682][ T31] ? fd_install+0x30d/0x540 [ 372.846237][ T31] __x64_sys_openat+0x138/0x170 [ 372.851662][ T31] do_syscall_64+0xfa/0x3b0 [ 372.856300][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.861613][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.867829][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.872839][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.878867][ T31] RIP: 0033:0x7fccd138d4d1 [ 372.883798][ T31] RSP: 002b:00007fff22c8cd70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 372.893101][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fccd138d4d1 [ 372.901644][ T31] RDX: 0000000000000002 RSI: 00007fccd1412822 RDI: 00000000ffffff9c [ 372.910314][ T31] RBP: 00007fccd1412822 R08: 0000000000000000 R09: 00007fccd20ed6c0 [ 372.918440][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 372.926765][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 372.935014][ T31] [ 372.938054][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 372.947625][ T31] INFO: task syz-executor:11020 blocked for more than 147 seconds. [ 372.955802][ T31] Not tainted syzkaller #0 [ 372.960939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.970961][ T31] task:syz-executor state:D stack:27808 pid:11020 tgid:11020 ppid:1 task_flags:0x400040 flags:0x00004000 [ 372.983218][ T31] Call Trace: [ 372.986513][ T31] [ 372.989455][ T31] __schedule+0x1798/0x4cc0 [ 372.994157][ T31] ? kasan_save_free_info+0x46/0x50 [ 372.999495][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.004822][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.010039][ T31] ? __pfx___schedule+0x10/0x10 [ 373.014960][ T31] ? schedule+0x91/0x360 [ 373.019362][ T31] schedule+0x165/0x360 [ 373.023743][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.029435][ T31] __mutex_lock+0x7e6/0x1360 [ 373.034638][ T31] ? __mutex_lock+0x5b6/0x1360 [ 373.039670][ T31] ? misc_open+0x51/0x330 [ 373.044175][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.049304][ T31] misc_open+0x51/0x330 [ 373.053920][ T31] chrdev_open+0x4c9/0x5e0 [ 373.058511][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 373.063811][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 373.070622][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 373.075658][ T31] do_dentry_open+0x950/0x13f0 [ 373.080549][ T31] vfs_open+0x3b/0x340 [ 373.084760][ T31] ? path_openat+0x2ecd/0x3830 [ 373.090139][ T31] path_openat+0x2ee5/0x3830 [ 373.094797][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 373.100391][ T31] ? count_memcg_event_mm+0x21/0x260 [ 373.105832][ T31] ? __pfx_path_openat+0x10/0x10 [ 373.111905][ T31] ? __pfx___up_read+0x10/0x10 [ 373.116816][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 373.122442][ T31] do_filp_open+0x1fa/0x410 [ 373.126974][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.132161][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 373.137260][ T31] ? _raw_spin_unlock+0x28/0x50 [ 373.142640][ T31] ? alloc_fd+0x64c/0x6c0 [ 373.147285][ T31] do_sys_openat2+0x121/0x1c0 [ 373.152869][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 373.158584][ T31] ? fd_install+0x97/0x540 [ 373.163457][ T31] ? fd_install+0x30d/0x540 [ 373.168477][ T31] __x64_sys_openat+0x138/0x170 [ 373.173763][ T31] do_syscall_64+0xfa/0x3b0 [ 373.178501][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.184050][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.190333][ T31] ? clear_bhb_loop+0x60/0xb0 [ 373.195087][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.201109][ T31] RIP: 0033:0x7f78ecd8d4d1 [ 373.205618][ T31] RSP: 002b:00007ffdc9c6f910 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 373.214835][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f78ecd8d4d1 [ 373.223334][ T31] RDX: 0000000000000002 RSI: 00007f78ece12822 RDI: 00000000ffffff9c [ 373.231510][ T31] RBP: 00007f78ece12822 R08: 0000000000000000 R09: 00007f78edaed6c0 [ 373.240081][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 373.248148][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 373.256631][ T31] [ 373.259740][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 373.268901][ T31] INFO: task syz-executor:11021 blocked for more than 147 seconds. [ 373.277252][ T31] Not tainted syzkaller #0 [ 373.282378][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.291328][ T31] task:syz-executor state:D stack:28040 pid:11021 tgid:11021 ppid:1 task_flags:0x400040 flags:0x00004000 [ 373.303605][ T31] Call Trace: [ 373.307162][ T31] [ 373.310395][ T31] __schedule+0x1798/0x4cc0 [ 373.315035][ T31] ? kasan_save_free_info+0x46/0x50 [ 373.320310][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.325242][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.330922][ T31] ? __pfx___schedule+0x10/0x10 [ 373.335848][ T31] ? schedule+0x91/0x360 [ 373.340229][ T31] schedule+0x165/0x360 [ 373.344493][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.350388][ T31] __mutex_lock+0x7e6/0x1360 [ 373.355057][ T31] ? __mutex_lock+0x5b6/0x1360 [ 373.360316][ T31] ? misc_open+0x51/0x330 [ 373.364881][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.370243][ T31] misc_open+0x51/0x330 [ 373.374610][ T31] chrdev_open+0x4c9/0x5e0 [ 373.379050][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 373.384285][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 373.391426][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 373.396513][ T31] do_dentry_open+0x950/0x13f0 [ 373.401496][ T31] vfs_open+0x3b/0x340 [ 373.405665][ T31] ? path_openat+0x2ecd/0x3830 [ 373.410656][ T31] path_openat+0x2ee5/0x3830 [ 373.415315][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 373.421089][ T31] ? count_memcg_event_mm+0x21/0x260 [ 373.426419][ T31] ? __pfx_path_openat+0x10/0x10 [ 373.431643][ T31] ? __pfx___up_read+0x10/0x10 [ 373.436518][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 373.442124][ T31] do_filp_open+0x1fa/0x410 [ 373.446684][ T31] ? __lock_acquire+0xab9/0xd20 [ 373.452486][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 373.457932][ T31] ? _raw_spin_unlock+0x28/0x50 [ 373.463075][ T31] ? alloc_fd+0x64c/0x6c0 [ 373.467463][ T31] do_sys_openat2+0x121/0x1c0 [ 373.472377][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 373.477658][ T31] ? fd_install+0x97/0x540 [ 373.482766][ T31] ? fd_install+0x30d/0x540 [ 373.487459][ T31] __x64_sys_openat+0x138/0x170 [ 373.492737][ T31] do_syscall_64+0xfa/0x3b0 [ 373.497330][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.502780][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.508898][ T31] ? clear_bhb_loop+0x60/0xb0 [ 373.514018][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.520080][ T31] RIP: 0033:0x7f5e6798d4d1 [ 373.524550][ T31] RSP: 002b:00007ffe9fd2f740 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 373.533497][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5e6798d4d1 [ 373.542082][ T31] RDX: 0000000000000002 RSI: 00007f5e67a12822 RDI: 00000000ffffff9c [ 373.550387][ T31] RBP: 00007f5e67a12822 R08: 0000000000000000 R09: 00007f5e686ed6c0 [ 373.558397][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 373.566434][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 373.574778][ T31] [ 373.577853][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 373.587320][ T31] [ 373.587320][ T31] Showing all locks held in the system: [ 373.595238][ T31] 1 lock held by khungtaskd/31: [ 373.600481][ T31] #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.610646][ T31] 2 locks held by getty/5623: [ 373.615366][ T31] #0: ffff888033c3b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.625290][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 373.636170][ T31] 4 locks held by kworker/1:3/5864: [ 373.641455][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.652828][ T31] #1: ffffc9000403fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.665991][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 373.676341][ T31] #3: ffff8880268db100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 373.686331][ T31] 3 locks held by kworker/1:5/5928: [ 373.692658][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.703904][ T31] #1: ffffc9000486fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.717635][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 373.729368][ T31] 1 lock held by syz.4.1444/10877: [ 373.734560][ T31] #0: ffff8880268db100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 373.744427][ T31] 3 locks held by syz.0.1475/10983: [ 373.750035][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.759005][ T31] #1: ffff888028cbb100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 373.768681][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 373.781939][ T31] 1 lock held by syz.3.1478/10991: [ 373.787226][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.796023][ T31] 1 lock held by syz.2.1480/10999: [ 373.801207][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.809834][ T31] 1 lock held by syz.1.1481/11005: [ 373.815106][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.824534][ T31] 1 lock held by syz.1.1481/11006: [ 373.830415][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.838917][ T31] 1 lock held by syz.1.1481/11007: [ 373.844132][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.853399][ T31] 1 lock held by syz-executor/11013: [ 373.858789][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.867366][ T31] 1 lock held by syz-executor/11016: [ 373.872931][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.881844][ T31] 1 lock held by syz-executor/11017: [ 373.887424][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.896609][ T31] 1 lock held by syz-executor/11020: [ 373.902643][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.911690][ T31] 1 lock held by syz-executor/11021: [ 373.917132][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.925865][ T31] 1 lock held by syz-executor/11027: [ 373.932858][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.941725][ T31] 1 lock held by syz-executor/11030: [ 373.947064][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.955965][ T31] 1 lock held by syz-executor/11031: [ 373.962052][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.970966][ T31] 1 lock held by syz-executor/11034: [ 373.976665][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 373.985539][ T31] 1 lock held by syz-executor/11035: [ 373.991956][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 374.000894][ T31] 1 lock held by syz-executor/11041: [ 374.006581][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 374.015427][ T31] 1 lock held by syz-executor/11044: [ 374.021153][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 374.030201][ T31] 1 lock held by syz-executor/11045: [ 374.035630][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 374.044905][ T31] 1 lock held by syz-executor/11048: [ 374.050802][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 374.059610][ T31] 1 lock held by syz-executor/11049: [ 374.065283][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 374.073959][ T31] [ 374.076316][ T31] ============================================= [ 374.076316][ T31] [ 374.085582][ T31] NMI backtrace for cpu 1 [ 374.085608][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 374.085626][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.085636][ T31] Call Trace: [ 374.085642][ T31] [ 374.085651][ T31] dump_stack_lvl+0x189/0x250 [ 374.085679][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.085698][ T31] ? __pfx__printk+0x10/0x10 [ 374.085729][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 374.085750][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 374.085770][ T31] ? __pfx__printk+0x10/0x10 [ 374.085794][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 374.085821][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 374.085842][ T31] watchdog+0xf93/0xfe0 [ 374.085867][ T31] ? watchdog+0x1de/0xfe0 [ 374.085892][ T31] kthread+0x711/0x8a0 [ 374.085915][ T31] ? __pfx_watchdog+0x10/0x10 [ 374.085935][ T31] ? __pfx_kthread+0x10/0x10 [ 374.085955][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.085976][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.085996][ T31] ? __pfx_kthread+0x10/0x10 [ 374.086016][ T31] ret_from_fork+0x3f9/0x770 [ 374.086035][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 374.086055][ T31] ? __switch_to_asm+0x39/0x70 [ 374.086074][ T31] ? __switch_to_asm+0x33/0x70 [ 374.086093][ T31] ? __pfx_kthread+0x10/0x10 [ 374.086113][ T31] ret_from_fork_asm+0x1a/0x30 [ 374.086144][ T31] [ 374.086150][ T31] Sending NMI from CPU 1 to CPUs 0: [ 374.240786][ C0] NMI backtrace for cpu 0 [ 374.240811][ C0] CPU: 0 UID: 0 PID: 6483 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 374.240833][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.240846][ C0] Workqueue: bat_events batadv_nc_worker [ 374.240877][ C0] RIP: 0010:mark_lock+0x1/0x190 [ 374.240897][ C0] Code: df 48 8b 2c 24 e9 b0 fd ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 [ 374.240914][ C0] RSP: 0018:ffffc900035278e0 EFLAGS: 00000046 [ 374.240930][ C0] RAX: 00000000ffffff05 RBX: 0000000000000002 RCX: 0000000000000002 [ 374.240941][ C0] RDX: 0000000000000008 RSI: ffff88807aebe540 RDI: ffff88807aebda00 [ 374.240954][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b46f032 [ 374.240965][ C0] R10: dffffc0000000000 R11: ffffffff8b46ef60 R12: 00000000ffffff05 [ 374.240978][ C0] R13: 0000000000000001 R14: ffff88807aebe540 R15: ffff88807aebe560 [ 374.240991][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 374.241005][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.241016][ C0] CR2: 000055d3808e8000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 374.241032][ C0] Call Trace: [ 374.241041][ C0] [ 374.241049][ C0] __lock_acquire+0x6a8/0xd20 [ 374.241080][ C0] ? batadv_nc_worker+0xd2/0x610 [ 374.241100][ C0] lock_acquire+0x120/0x360 [ 374.241126][ C0] ? batadv_nc_worker+0xd2/0x610 [ 374.241150][ C0] ? batadv_nc_worker+0xd2/0x610 [ 374.241171][ C0] ? batadv_nc_worker+0xd2/0x610 [ 374.241192][ C0] batadv_nc_worker+0xef/0x610 [ 374.241212][ C0] ? batadv_nc_worker+0xd2/0x610 [ 374.241233][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 374.241253][ C0] process_scheduled_works+0xae1/0x17b0 [ 374.241284][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.241309][ C0] worker_thread+0x8a0/0xda0 [ 374.241355][ C0] ? __kthread_parkme+0x7b/0x200 [ 374.241378][ C0] kthread+0x711/0x8a0 [ 374.241402][ C0] ? __pfx_worker_thread+0x10/0x10 [ 374.241419][ C0] ? __pfx_kthread+0x10/0x10 [ 374.241442][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.241466][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.241490][ C0] ? __pfx_kthread+0x10/0x10 [ 374.241512][ C0] ret_from_fork+0x3f9/0x770 [ 374.241532][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 374.241553][ C0] ? __switch_to_asm+0x39/0x70 [ 374.241577][ C0] ? __switch_to_asm+0x33/0x70 [ 374.241601][ C0] ? __pfx_kthread+0x10/0x10 [ 374.241622][ C0] ret_from_fork_asm+0x1a/0x30 [ 374.241654][ C0] [ 374.241947][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 374.509254][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 374.518475][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.528556][ T31] Call Trace: [ 374.531857][ T31] [ 374.534826][ T31] dump_stack_lvl+0x99/0x250 [ 374.539530][ T31] ? __asan_memcpy+0x40/0x70 [ 374.544586][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.549825][ T31] ? __pfx__printk+0x10/0x10 [ 374.554520][ T31] vpanic+0x281/0x750 [ 374.558720][ T31] ? __pfx_vpanic+0x10/0x10 [ 374.563326][ T31] ? preempt_schedule+0xae/0xc0 [ 374.568285][ T31] ? preempt_schedule_common+0x83/0xd0 [ 374.574176][ T31] panic+0xb9/0xc0 [ 374.578036][ T31] ? __pfx_panic+0x10/0x10 [ 374.582565][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 374.588262][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 374.594440][ T31] watchdog+0xfd2/0xfe0 [ 374.598634][ T31] ? watchdog+0x1de/0xfe0 [ 374.602993][ T31] kthread+0x711/0x8a0 [ 374.607095][ T31] ? __pfx_watchdog+0x10/0x10 [ 374.611793][ T31] ? __pfx_kthread+0x10/0x10 [ 374.616535][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.621752][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.626968][ T31] ? __pfx_kthread+0x10/0x10 [ 374.631669][ T31] ret_from_fork+0x3f9/0x770 [ 374.636290][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 374.641419][ T31] ? __switch_to_asm+0x39/0x70 [ 374.646288][ T31] ? __switch_to_asm+0x33/0x70 [ 374.651173][ T31] ? __pfx_kthread+0x10/0x10 [ 374.655844][ T31] ret_from_fork_asm+0x1a/0x30 [ 374.660648][ T31] [ 374.664038][ T31] Kernel Offset: disabled [ 374.668568][ T31] Rebooting in 86400 seconds..