last executing test programs: 24.99531843s ago: executing program 0 (id=3000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, &(0x7f0000000140)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 24.695730514s ago: executing program 0 (id=3006): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7fff]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x602000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x10) 24.411626446s ago: executing program 0 (id=3008): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000280)="dc52b390", 0x4}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f0000000940)="a6", 0x1}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000c80)='_', 0x1}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="c7b24e2693742536c7aab598f4b47537c68efbe1b76e99099f7f08bd548d1f96009f368e36ccbad392d0abd80adaffdc119bc283d83d8b395cb8ccf422944f4d237dc34d1ceec82c0b3831778b725506d09e0daed74dcb53992520fb58b19a5d288423139bbde21618133b107d73c3ab89b9b5cc736687b92897f3aa59421cbf7b5e8183cc4b64126082b30b9cf9661c4b", 0x91}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="f29b87f091eb447f526b37bbbc8df94ff1d7cc", 0x13}, {&(0x7f0000000a00)="6d54ae9c08b8a9d085004e8c3a60a77c1c40d087898d1e74194be4aeeec9a32f68b0aabba115741d8aedfc990b447de0e16080ad35433a242be30716794e1d61a03e0047007c3b1567c40ca3c163ac9bde9b08f20be47a455a981132e5bb6da21a5493dd4d7572f55370448983dac0a28b998d742f99574be32080ae9a56050956d2b9f0447fbb8bb635dc5720aafc6b6552750236dccf9c14d24b0f10cc3baee787", 0xa2}, {&(0x7f0000000ac0)="862de475e38b268349cdb80ebb131cbdaa9a61a0d48772cb0fc4b43600b125b53908a620dedf3aefe4c5de7f67fc980c17b710687d9c174745afec3e1d3fcaebf67701bc3a314215c68b83960e887737e542985d5b17b57b884a58701803bc0b97407986e9e35f86a959a63933e4087ade0aee87a8bd63b1920b65e18f3e183d1df9a87fd28e4c8402725d4f18", 0x8d}, {&(0x7f00000004c0)="e3a420bee95dda6dff3cc9cb410a6983c38a", 0x12}, {&(0x7f0000000bc0)="f8ebdd3de78fb7f5e5f54cb85a3d174a83dd465745a0a7ad66c17ffc484e4494922770c17a8bc0e53a125d879fb381", 0x2f}], 0x5}}], 0x4, 0x4048451) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 24.194721673s ago: executing program 0 (id=3012): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getnexthop={0x18, 0x6a, 0x939, 0x70bd25, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 24.118769381s ago: executing program 0 (id=3014): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0xe0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r3, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 23.815040784s ago: executing program 0 (id=3016): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x27}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) sendto$inet6(r3, &(0x7f0000000980)="c8", 0xff82, 0x1, &(0x7f0000000040)={0xa, 0x4e23, 0xf, @loopback, 0x8}, 0x1c) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3107240b00002000000038000000080001007063690011000200303030303a30303a31302e30000000000800730002000000"], 0x38}, 0x1, 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="ca7cd5603a2cc9f2e6aebca18d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 22.752490763s ago: executing program 1 (id=3033): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000080)="3f481adcf4475e092e7265d9a65968f653dde15f8ce2c4da676713d648a11b95c1ced17a95d0f7a8cfb631ffd1ae7ec1184afd63c8711f2339566d0e6effa7544b9a20163232049f06ae33331c95dcbce2a17042c6af8661f94f50da0127d65f", 0x60, 0x4, &(0x7f0000000000)={0x11, 0xf8, 0x0, 0x1, 0xa}, 0x14) 22.321514783s ago: executing program 1 (id=3036): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x7, 0x9, 0x8, @private2, @remote, 0x0, 0x8, 0x7, 0x4}}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000200)="200020c17539859f3049c0c11efe8a539becf7e4bc58", 0x16, 0x14000b01, &(0x7f0000000080)={0x11, 0x8100, r11}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x12c, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4040041}, 0x5) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f00000000c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 22.167513166s ago: executing program 4 (id=3037): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket(0x1, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r5 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r5, 0x61d9, &(0x7f0000000000)) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000340)=@ax25={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)="d7e33986b7b9f63d9266c2a9f513c18d6c4df33d535f5192021902e2eb05ea7e7a", 0x21}], 0x1}, 0x4092) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0xb1) sendmmsg$inet(r2, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9c5acdff2441da3a43d2ef3d5378a1f87430eee04e23f62d87534895ce98940a920b26d62831746e5978be5d6e3280724d86ca11c8bd56c336d48778355d9e7de303494282d97bd028c8888e2452618d95765ab29394fbd1aa490c0c49c6ff2bb2d4e68434c81267b82f0fe4c8839b6ecfc893a1e5a03a45978928170db638c6eee1c1e13950f2b7219a1f20fd3fa702682f62a4574d9209d9899a1958f9f1ead89d05c8", 0xa4}], 0x1, 0x0, 0x0, 0x80040000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}}}, &(0x7f0000000500)=0xe8) r8 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="00000000140000000000", @ANYBLOB], 0x58, 0x20000000}, 0x20040021) shutdown(r2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc02"], 0x58}, 0x1, 0x2}, 0x0) 21.801163254s ago: executing program 4 (id=3040): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x3a8, 0x0, 0x498, 0x1b0, 0x1b0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x21, 0x0, 0xc, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0xb10}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x73, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xd1}, 0x24000041) 21.538372321s ago: executing program 1 (id=3042): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a8", 0x3}], 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a00010439e4c9a01433900a0a44"], 0x14}}, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4eaa00000000000071103300000000009500000000000000d40fe329ff241edc7ce279419a3a896a5c64abc1539fd32687c588bfa818629750236361a5fdfc9b7f0000000000000002238c33df086204df0edf571f77c57bb83c36ccc91eaa14b94d3690eec2e7109c40404b92e72817b9367344a0415024e61e6c90e58498c8ca93191787327aa6b8e20a"], &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) 21.394954974s ago: executing program 4 (id=3044): r0 = socket(0x2b, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000380)) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0xffffffff, 0x1, {0x0, 0x0, 0x0, r2, {0x4, 0xffe0}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xfe}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x24000084) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket(0x2b, 0x2, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000380)) (async) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0xffffffff, 0x1, {0x0, 0x0, 0x0, r2, {0x4, 0xffe0}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xfe}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x24000084) (async) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) 21.347990159s ago: executing program 1 (id=3045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.254572232s ago: executing program 4 (id=3046): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x37, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@dellink={0x4c, 0x11, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x84, 0x80}, [@IFLA_PORT_SELF={0x2c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "acb61ff708ebba8cdb2587f2168c984b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "518b15aa9da136cb08f27da8ab9c3249"}]}]}, 0x4c}}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000380)={0x8b84, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r5, r0, 0x2, 0x2030, 0x0, @void, @void, @value=r6, @void, r2}, 0x20) 21.162630664s ago: executing program 1 (id=3048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}, {0xfff3, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "d669bcb85477f37c", "ee723be93c59a60647cdba6cf2d5de6d", "c27b60ef", "d6d601348f2ef4ec"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 21.048170302s ago: executing program 1 (id=3049): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'memory'}, {0x2d, 'rdma'}, {0x2d, 'devices'}]}, 0x17) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80800) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) poll(&(0x7f0000000180)=[{r3}, {r4, 0x8100}, {r5, 0xa2b1}, {0xffffffffffffffff, 0x2940}, {r2, 0x70}, {r0, 0x20}], 0x6, 0x6) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x55b}}, [0x1, 0x1, 0x2, 0x200, 0x4, 0xfff, 0x5, 0xfffffffffffffff9, 0xd6, 0x0, 0xb8000000000, 0x8, 0xf8, 0x7fffffffffffffff, 0x10]}, &(0x7f0000000340)=0x100) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) preadv(r8, &(0x7f0000000540)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1, 0xe, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r10, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x20008000) poll(&(0x7f00000006c0)=[{0xffffffffffffffff, 0xa000}, {r0, 0x4108}, {r3, 0xf98e8b93a9b860b3}, {r2, 0x3883}, {r0}, {r2, 0x3040}], 0x6, 0xdeaa) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000700)=[{{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x10) pipe(&(0x7f0000000740)={0xffffffffffffffff}) setsockopt$packet_buf(r11, 0x107, 0xd, &(0x7f0000000780)="d57aafabaf63c0d8b9a0b28a4628a4a1e9766c947b6caa1fa622f103e40c2cb1892aa3e4cacc99fbc33a4e9a83b036cc7255bf759b1b262883b450c6c66d80d0c1bf1fb086476d2bf644b7d94f1ecbf59bffb8315d71bf511a54ccccd240875e07cc8354de691035583d98bf13d1fd08c22a3fe727df14f336a6ee", 0x7b) getsockopt$CAN_RAW_FD_FRAMES(r11, 0x65, 0x5, &(0x7f0000000800), &(0x7f0000000840)=0x4) sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x4, 0xa, 0xe02, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x20000804) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f00000009c0), 0x4) socket$pptp(0x18, 0x1, 0x2) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl1\x00', r1, 0x7800, 0x700, 0x200, 0xb721, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x66, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x23, 0x37, [@loopback, @multicast1, @rand_addr=0x64010101, @private=0xa010102, @multicast2, @private=0xa010102, @private=0xa010100, @rand_addr=0x64010100]}]}}}}}) recvfrom(r12, &(0x7f0000000a00)=""/86, 0x56, 0x2, &(0x7f0000000b40)=@xdp={0x2c, 0x8, r13}, 0x80) 20.409261809s ago: executing program 4 (id=3053): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) sendmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000040)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)="c38c8a7b420765da5ec74fb13eb8a05935e7de05d8625dc74f734563bfaccc69c09908326a9c00fb90639b6b89d278506b1b610942ea8e0b05084fe8d57776d817f95760253dd0f0cbfb1500a4439b7067a603fa289925f83d51e95215ba3045b266511ee29e465498adaf69f2416861c665ee992ff33d5125a00e0b5aa0531742daaf59f4b0d1c6626ecb24c42344ac5d1f4485b70f78d1058512603634393d0cf6668630fb37c22154918548799a18c57bd0157fe85ca5a2af1b0c2559e7a510c8f90e1979ae0b", 0xc8}, {&(0x7f00000003c0)="c9fbfb969595a8048ac0ccb4eff362fd471b3c761aef1b5e8c19dff064cd2cc5f6134c21e6946a21311fe7d02565d9460cd4501796c67b30eb7b6f865bcf178a7ef14eebd1d228ee5dcfbe2d6b29e6d613d3568e93d00231bba34fba3b44b048f9ad5d484dca38c5f3266b41e5d67c8fb0aec6320b7980c058b2536a15a5a2a1b44cab3525db5e34bfa64ffb377be82580b894c0a36878466025174df8182e0ae76fb20a0ec33a6a19b45c4091c0949a2dc49500cde332ff8e53ce471e8934b693251c02d0513ed362e8fdf09c3c7e363ceb2d0cc6c3", 0xd6}, {&(0x7f00000004c0)="b48bf122ccee0c26064ef212f3f73e547d538fb5a55b9a651b6035e3f819b00c7f3a02120c8a2ac3e750eabc6c9e099a1075f4014ac7221d76ef42a3c544ed06355f27cf616296241c47a6f52991898e7c815797c9e952bb7213748cc2bb155baf5ee44d08c7f691010ff8f63bd26cc2270f757bc203db283c2249479cc632b4c837636ffae53a46373cd4bede4bc3c480f2b7a3d7a02e559f8879770d48cc8d8bf4af71b0abec67636941b941aaad5b921f88db2dbf3fd2c5f474f9b266da77c60b295affcb9a643959edf5", 0xcc}, {&(0x7f0000000bc0)="1fc383de9d6b5d92ca943c1bcba8cb6dd5b6b557d1f45c0023003de56ce9453c4279e2d94d26d91c8b0a9cf561cf3fd7348d19caa89ff8a0b9eebc97527e9a80879d736cc76aa466da842f74b54022e132a8276354c48da684c1fc49e6b2df00bc8c28b21aff7f0000682d961cf8fd4ae23c577015ebe640bb9b9f000000000000008a", 0x7d}, {&(0x7f00000005c0)="a416ae312d5573c3cd595684b2eb9018ba89b34479ec5a6e9b350d2c3a0893d194440b0486fc23d31ceae8b409bf34e0853cd61b1a0498ccd723d3b8def0a051f3807d2756d2f72d5582ad56c3da3dd7dca4715785d09d9641a2c06f0ee12f79ec745b19154af7b7c0b87bff0734719528cb197b58f2b73d3120b1c64721a0c4aa35f4775341d5de6ebac7ecbef8bc02216e7dbf224db3563f28dd89e6036ebf9440f79b2d4d840dafea33485eeca99def95e3f77fefc78d683740c1d178fe6745479bf06aa5bdd3376f", 0xca}], 0x5, &(0x7f0000000800)=[{0xc0, 0x110, 0xf, "d4eb4558dfe35dca7d345569bcfd828922a752a42e497506ae48db155c68aebba1650bba6b697fe0fb3b7e78d5a651d7134d815f0f3ed67f2f07d0fe1b619ac91c4c6977a92ae4950e1969ead486c08afb6af02453b99f50ce471d101126e7bb6cd5a421a7c8cef1fb30d765e126b643c665777d23dda78652a84d89b9691c4a9c28a2805564cb535efb09206e22590855174d31c9f68b284a58a821dc4188b9cfb0713bdaa034bd3740943d5bcee07a"}, {0x88, 0x88, 0x63, "397b1c16aa8f86cb09bb818314262196c27b09f5c7a254972ecffb4a88ef684cd93aec70182bec89099a052f0f1ebe243e2f99535dab39743752762e5171f5ef353f210c905d36b54d69d1eb139a503df9f04932ecefb6ed244db81380d5054ac5bd2182c607133be96b8beee8879501ee"}, {0xb0, 0x116, 0x7, "e9f715ca5381d15eb0c1ed2779e23d59b33744b35c837bffb0f1e2bbbf4bd85ab641cc3f9913670ebc67390b0698a00d5b6fd02ba7ab4af6d5023b3da0c619d33787477bcd0df6fe62053a87ed82bd3484d5a2fc7c3676a020db8e106d1e5507a374f57bddbd8e16815156c49a8bd0344fdfa545af5d73a183b9306fba267093535b99d628a6034d0c48e9035f46d50b09ef366966d09ec400"}, {0x70, 0x116, 0x140000, "bdacb637b036c7a7bb6fa6a105b34391faa4ec183220fb9ec2d1488a76b1dc7b61b90424f25b14fcfcab22c9c436c514addbd47c1b2e724f8b4069d2bd9df14f30710f75d5ba5be3e1f90b1b0353cfd36c0bb50f6600e5875a"}], 0x218}}, {{&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000a80)="ba8a539dd29d8af11289b6ada050099ef12b5095c3500c58664409d1c5198ac80caf20fecac122360f60619683800c46e8e870cc39da624db0028f6ea5bc80c15451af5ceecda420447fc214795e6cb2c50482f103964552c2099884b8f5032d6f708e497c3b67b9f906a6a50f64ea5a175160f1cc2c6aca4946a461f93eac21a16bb93cc08c6b6c69c58a6cc7abe5997e5892a99f85b06cc76680a8c5d434f720fe8b19148d6112c403", 0xaa}], 0x1}}], 0x2, 0x34) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) 20.264963825s ago: executing program 4 (id=3055): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r3 = socket$packet(0x11, 0x3, 0x300) socket(0x15, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) (async) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000a40)={0x0, "8d804cd5ca75c723da52eabc17eba6d4"}) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f00000008c0)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) sendto$netrom(r6, 0x0, 0x55, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r4, 0x25, 0x4, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x40], &(0x7f00000003c0)=[0xd46, 0x5, 0x2, 0x0], 0xffff, 0x1, 0x1, r5}}, 0x40) (async) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x5}}}}}}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="780da6ecaf07fff25da154ad744a7390c42672f5d8c66bb014af9f4f8ff0a3"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x7, 0xa}, {0xfff3}}}, 0x59}}, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) (async) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) 18.239191879s ago: executing program 2 (id=3079): r0 = socket$inet(0x2, 0x4, 0x4) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) (async) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x800) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x7b6532f1e193e867, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xdd0b0c7}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8e}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x400}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84c}, 0x24024004) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x1) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2}) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x541b9d10}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x400c080) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@rand_addr, 0x0}, &(0x7f0000000580)=0x14) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x4, 0x1, 0x2, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, 0x40, 0xc0, 0x8, 0x4}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf4, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x814}, 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xe4, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x670}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff4db}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4040831) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000a80)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x1b, 0x5, 0x370, 0x188, 0x0, 0xffffffff, 0x0, 0xd8, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, &(0x7f0000000ac0), {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x35}, 0xffffffff, 0x0, 'macsec0\x00', 'pimreg0\x00', {0xff}, {}, 0x1, 0x3, 0x12}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x8, 0x24, 0x0, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0xdb, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0xfffffffb, 0x7, 0x100, 0x5, 0x0, 0x3, 0x6]}}}, {{@ip={@multicast1, @remote, 0xff, 0xff000000, 'ipvlan1\x00', 'vlan0\x00', {}, {0xff}, 0x33, 0x0, 0x58}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private=0xa010101, @multicast2, @icmp_id=0x67, @icmp_id=0x66}}}}, {{@ip={@private=0xa010101, @loopback, 0xff000000, 0xffffffff, 'pim6reg0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x4, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, @port=0x4e23, @gre_key=0x7c}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) bind(r2, &(0x7f0000001040)=@can={0x1d, r5}, 0x80) (async) ioctl$sock_ifreq(r1, 0x8949, &(0x7f00000010c0)={'vcan0\x00', @ifru_map={0x8000000000000001, 0x1, 0x8, 0x6, 0x84, 0x2}}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001100), r2) bind$x25(r1, &(0x7f0000001140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000011c0)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x40, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r10, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=@getneigh={0x14, 0x1e, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 18.103592242s ago: executing program 2 (id=3081): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r2 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000240)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000580)=""/210, 0xd2}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000880)=""/210, 0xd2}, {&(0x7f0000000980)=""/120, 0x78}], 0xa}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802181100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000002702000014000000b703000000000000850000005d000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="0911008d0c00"}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="540000000206030000000000000000000000000010000300686173683a69702c6d6163000900020073797a31000000000c000780080013000000000005000400000000000500010007000000"], 0x54}}, 0x4040000) 17.950545173s ago: executing program 2 (id=3083): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002880)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x130, 0x1d8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0xa, 0x7, 0x0, 0x3], 0x1, 0x1}, {0x4, [0x4, 0x1, 0x3, 0x1, 0x5, 0xe], 0x2, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x32, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x2, 0x5, 0x6}, {0x6, 0x4, 0x4}, 0x8001}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffff00, 0xff, 'ipvlan1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x81f6fc83b80a76cf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x2, 0x1, 0x2, 0x3], 0x2, 0x2}, {0x1, [0x2, 0x0, 0x1, 0x6, 0x0, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410040200", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001300)={r4, 0x6e2}, &(0x7f0000001340)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1ff}}, 0xff, 0x7, 0x0, 0x2, 0x4a, 0x5, 0x7e}, &(0x7f0000000100)=0x9c) connect$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast2, 0x3}, 0x10) 17.850445504s ago: executing program 2 (id=3084): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000300)}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="1fd4787488b1f24058b8199d33a8178ba1174e104ae1b3abb3faffaeb1a08aaeb8993c5fefff92daa06a331e595157761f72d282866c198c75e5f4c1f114555440e2c923df89b8a29cf82b51cddfc9f6855b9358722868848277b2ffaa380219e2103ad94a5c527d277624d6e0957baa3bbba59334916fb41475e5e891320186c1ee0e2a48e51a93311a4d776025dafd266c7cff569c60e008e76b2c734411ad8c57", 0xa2}, {&(0x7f0000000140)="a2e1f75a5acb51fba68f72d473a1438b2fa6aee9bc10efc70b7f16e654f340c9fd9b40fcd7c2f55583cf7a2ca7be4c18b181cd1ccf007f5650ff7e01c64ccd85f8d4ed226e4ca0399034a0a45619339ff79f9c8ced0dfced5782fa0ce482417b8e9343ed19679dda57256a0078754e47388b9b107af79c32c54fc29793a2d05dd1f732e60edeb9", 0x87}, {&(0x7f0000000780)="395b7b9931074d3e26deed94dab0ab3d30a80a8806029d7a7f1e0367db29c9eac20789979cad7071d6bf4e4f222296281cfaf2c95f85adcf76cf8be4345a9bf66ad6baac6c502e0894d518279c8c310b355c34da938cdab36a66f17bfa8986708fb9fc296c5a48e8ed5f67758de22b2ae9c2f6bdb5fe832560470db8c522cfccf093eff1eb8f12ee44ac52a236b3cc2c068f94fd39e24151f6f3ee9cb32efb", 0x9f}, {&(0x7f0000000200)="41f502d925e97dc70f3ab3bda80ed1e0a03db9a7da9ab41dd9a2264d05f8cedae84404e8ef506d4f9c3f3790d9e545adfdeababbb366876352e5c621c7d3cff13657af6a5db93800524032e91ad8c5c6bf903f6bf2288704b0bfe9ccbefb3b8f20dd00c4f34ad5d5043557cbbda63545ba88e87e34f614b4c22e53aba8d49e101d988d25c73f4b75a1199756208cae047a13e3f1a1001ba44f511885976a13f7f384cab4dd9eb38ffaee599f1f64cb801d62be5558e117c7e5fd8efc4177c6ba06aea8273b540fffcf52cf950a2ba87c08c262e7cfd88d3d102d975cb0a5", 0xde}, {&(0x7f0000001040)="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", 0x3bd}], 0x5, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd8}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @end, @timestamp_addr={0x44, 0x24, 0xdf, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@local, 0x9}, {@local, 0xfffffff8}, {@remote, 0x7}]}]}}}], 0x50}}], 0x2, 0x0) (async, rerun: 32) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000400)=""/242, 0xf2}], 0x2) (async) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000300)=0x1, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_emit_ethernet(0x45, &(0x7f0000000080)={@multicast, @random="50a245d5cde0", @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0x1, 0xab, "6616", "461621", 0x6003, "47237e04c287a7bace5386e8d2a186ad9a94898de7c56740e2e15823a338e1b0b3753c26f05d22ef809c"}}}}}, 0x0) 17.717283745s ago: executing program 2 (id=3085): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.554410584s ago: executing program 2 (id=3086): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0x9d, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r1) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000040)) 15.542295642s ago: executing program 3 (id=3087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000980)={0x1c, 0x99, 0x1, 0x0, 0xfffffffe, {0x1d, 0xd601, 0x9}, [@typed={0x62, 0x56, 0x0, 0x0, @uid=r2}]}, 0x1c}}, 0x0) 15.419912048s ago: executing program 3 (id=3088): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x6f6) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_emit_ethernet(0xa1, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x3}}, {@llc={0x4, {@llc={0xe, 0x6, "e8ad", "56b5bb5ba78d9ae9bc6d28f9cd95bd68e9b1bf54ae50da3c1ccce79077243ea07e0066f6201e5e88425f6fc2e8254a7aef9354163080d5541d672abbde82e5f4ca4040ce2104a507cb4e45d86f191810235c71a6534e58e943c0c1ce38400f0384e00d3101649a28c2748a7bb140c8cbaae4adbf59799426ad1d1a688a2f175fd0bc1d8a440552"}}}}}, 0x0) 15.381688677s ago: executing program 3 (id=3089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x18, 0x100, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c00018008000100636d70003000028008000140000000080800024000000001003f25378bcad9246bba6b36917130ace0a30cde000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000000000000"], 0x94}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r7, 0x1, 0x70bd27, 0x8, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x3, 0x106) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x10, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4885}, 0x2000c854) 15.199774221s ago: executing program 3 (id=3090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xfffffffd, 0x10, 0x7ff}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000140)={0x7, 0x70, 0x101, 0x6, 0xf0, 0x6, 0x16, "326ce2238380209108b8d87e70eb056c88cfea21", "9164cfc44f7b3f856b221171d2358e3133336f2d"}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) 15.09891768s ago: executing program 3 (id=3091): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, 'V\aj', 0x8, 0x88, 0x1, @local, @local, {[@routing={0x32, 0x0, 0x2, 0x9, 0x8000020}]}}}}}, 0x0) 15.09813575s ago: executing program 3 (id=3092): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000000000095000002000000009500a50500000000c836d88b3615293057d4650c022c5b72f27c51bc9def38dbc6983a90cf6e21fef95faf099773435bd47e6f7cb5bfd3d7527e33a370e2099b99e824ce61c5cbc365ae1a13075b58076cfb4f743d0d117cbec4c829666024732c8b0166c743816f5be54156bc8086b4a97483e67556cb1a70299fe51f64376bd7dd5c8c7c2625bb98ced4932111368e6d21e9ecd5b09e672c8c69"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc02}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[], 0xffdd) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001d40)={'bridge0\x00', &(0x7f0000000d00)=@ethtool_dump={0x40, 0x1, 0x9}}) (rerun: 32) 5.067064022s ago: executing program 32 (id=3049): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'memory'}, {0x2d, 'rdma'}, {0x2d, 'devices'}]}, 0x17) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80800) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) poll(&(0x7f0000000180)=[{r3}, {r4, 0x8100}, {r5, 0xa2b1}, {0xffffffffffffffff, 0x2940}, {r2, 0x70}, {r0, 0x20}], 0x6, 0x6) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x55b}}, [0x1, 0x1, 0x2, 0x200, 0x4, 0xfff, 0x5, 0xfffffffffffffff9, 0xd6, 0x0, 0xb8000000000, 0x8, 0xf8, 0x7fffffffffffffff, 0x10]}, &(0x7f0000000340)=0x100) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) preadv(r8, &(0x7f0000000540)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1, 0xe, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r10, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x20008000) poll(&(0x7f00000006c0)=[{0xffffffffffffffff, 0xa000}, {r0, 0x4108}, {r3, 0xf98e8b93a9b860b3}, {r2, 0x3883}, {r0}, {r2, 0x3040}], 0x6, 0xdeaa) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000700)=[{{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x10) pipe(&(0x7f0000000740)={0xffffffffffffffff}) setsockopt$packet_buf(r11, 0x107, 0xd, &(0x7f0000000780)="d57aafabaf63c0d8b9a0b28a4628a4a1e9766c947b6caa1fa622f103e40c2cb1892aa3e4cacc99fbc33a4e9a83b036cc7255bf759b1b262883b450c6c66d80d0c1bf1fb086476d2bf644b7d94f1ecbf59bffb8315d71bf511a54ccccd240875e07cc8354de691035583d98bf13d1fd08c22a3fe727df14f336a6ee", 0x7b) getsockopt$CAN_RAW_FD_FRAMES(r11, 0x65, 0x5, &(0x7f0000000800), &(0x7f0000000840)=0x4) sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x4, 0xa, 0xe02, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x20000804) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f00000009c0), 0x4) socket$pptp(0x18, 0x1, 0x2) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl1\x00', r1, 0x7800, 0x700, 0x200, 0xb721, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x66, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x23, 0x37, [@loopback, @multicast1, @rand_addr=0x64010101, @private=0xa010102, @multicast2, @private=0xa010102, @private=0xa010100, @rand_addr=0x64010100]}]}}}}}) recvfrom(r12, &(0x7f0000000a00)=""/86, 0x56, 0x2, &(0x7f0000000b40)=@xdp={0x2c, 0x8, r13}, 0x80) 5.04254009s ago: executing program 33 (id=3055): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r3 = socket$packet(0x11, 0x3, 0x300) socket(0x15, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) (async) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000a40)={0x0, "8d804cd5ca75c723da52eabc17eba6d4"}) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f00000008c0)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) sendto$netrom(r6, 0x0, 0x55, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r4, 0x25, 0x4, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x40], &(0x7f00000003c0)=[0xd46, 0x5, 0x2, 0x0], 0xffff, 0x1, 0x1, r5}}, 0x40) (async) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x5}}}}}}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="780da6ecaf07fff25da154ad744a7390c42672f5d8c66bb014af9f4f8ff0a3"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x7, 0xa}, {0xfff3}}}, 0x59}}, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) (async) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) 2.021021709s ago: executing program 34 (id=3086): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0x9d, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r1) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000040)) 0s ago: executing program 35 (id=3092): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000000000095000002000000009500a50500000000c836d88b3615293057d4650c022c5b72f27c51bc9def38dbc6983a90cf6e21fef95faf099773435bd47e6f7cb5bfd3d7527e33a370e2099b99e824ce61c5cbc365ae1a13075b58076cfb4f743d0d117cbec4c829666024732c8b0166c743816f5be54156bc8086b4a97483e67556cb1a70299fe51f64376bd7dd5c8c7c2625bb98ced4932111368e6d21e9ecd5b09e672c8c69"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc02}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[], 0xffdd) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001d40)={'bridge0\x00', &(0x7f0000000d00)=@ethtool_dump={0x40, 0x1, 0x9}}) (rerun: 32) kernel console output (not intermixed with test programs): [ 178.441662][T12076] ? xsk_setsockopt+0x4dc/0x8d0 [ 178.441680][T12076] ? do_sock_setsockopt+0x17c/0x1b0 [ 178.441704][T12076] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 178.441727][T12076] ? do_syscall_64+0xfa/0xfa0 [ 178.441747][T12076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.441777][T12076] __vmalloc_node_range_noprof+0x125/0x12d0 [ 178.441833][T12076] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.441862][T12076] ? __kasan_kmalloc+0x93/0xb0 [ 178.441891][T12076] vmalloc_user_noprof+0xad/0xf0 [ 178.441916][T12076] ? xskq_create+0xbf/0x170 [ 178.441936][T12076] xskq_create+0xbf/0x170 [ 178.441959][T12076] xsk_init_queue+0xb0/0x110 [ 178.441982][T12076] xsk_setsockopt+0x4dc/0x8d0 [ 178.442005][T12076] ? __pfx_xsk_setsockopt+0x10/0x10 [ 178.442027][T12076] ? __pfx_aa_sk_perm+0x10/0x10 [ 178.442061][T12076] ? aa_sock_opt_perm+0xff/0x1b0 [ 178.442090][T12076] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 178.442106][T12076] ? __pfx_xsk_setsockopt+0x10/0x10 [ 178.442126][T12076] do_sock_setsockopt+0x17c/0x1b0 [ 178.442156][T12076] __x64_sys_setsockopt+0x13f/0x1b0 [ 178.442187][T12076] do_syscall_64+0xfa/0xfa0 [ 178.442207][T12076] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.442228][T12076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.442246][T12076] ? clear_bhb_loop+0x60/0xb0 [ 178.442268][T12076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.442286][T12076] RIP: 0033:0x7f78a878efc9 [ 178.442312][T12076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.442328][T12076] RSP: 002b:00007f78a962a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.442348][T12076] RAX: ffffffffffffffda RBX: 00007f78a89e5fa0 RCX: 00007f78a878efc9 [ 178.442361][T12076] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 178.442372][T12076] RBP: 00007f78a8811f91 R08: 0000000000000004 R09: 0000000000000000 [ 178.442383][T12076] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.442394][T12076] R13: 00007f78a89e6038 R14: 00007f78a89e5fa0 R15: 00007ffce6c74dc8 [ 178.442424][T12076] [ 178.442597][T12076] Mem-Info: [ 178.492390][T12079] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1729'. [ 178.570930][T12076] active_anon:4894 inactive_anon:0 isolated_anon:0 [ 178.570930][T12076] active_file:3141 inactive_file:39916 isolated_file:0 [ 178.570930][T12076] unevictable:768 dirty:73 writeback:0 [ 178.570930][T12076] slab_reclaimable:11469 slab_unreclaimable:102079 [ 178.570930][T12076] mapped:29134 shmem:1493 pagetables:1093 [ 178.570930][T12076] sec_pagetables:0 bounce:0 [ 178.570930][T12076] kernel_misc_reclaimable:0 [ 178.570930][T12076] free:1321616 free_pcp:16988 free_cma:0 [ 178.613657][T12079] 8021q: VLANs not supported on ip6_vti0 [ 178.698093][T12076] Node 0 active_anon:19176kB inactive_anon:0kB active_file:12564kB inactive_file:159464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116536kB dirty:288kB writeback:0kB shmem:4436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13656kB pagetables:4312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.750205][T12095] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1730'. [ 178.850994][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 178.860704][T12096] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1730'. [ 178.865672][T12076] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.889855][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1730'. [ 178.902323][T12076] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.942426][T12076] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 178.993132][T12076] Node 0 DMA32 free:1386988kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18732kB inactive_anon:0kB active_file:12564kB inactive_file:159464kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2565208kB mlocked:0kB bounce:0kB free_pcp:43384kB local_pcp:25640kB free_cma:0kB [ 179.060876][T12076] lowmem_reserve[]: 0 0 0 0 0 [ 179.085523][T12076] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 179.119668][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1733'. [ 179.136596][T12076] lowmem_reserve[]: 0 0 0 0 0 [ 179.149665][T12076] Node 1 Normal free:3888488kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21216kB local_pcp:10848kB free_cma:0kB [ 179.195709][T12076] lowmem_reserve[]: 0 0 0 0 0 [ 179.231737][T12076] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 179.258010][T12076] Node 0 DMA32: 427*4kB (UME) 928*8kB (UME) 426*16kB (UME) 197*32kB (UM) 83*64kB (UM) 41*128kB (UME) 14*256kB (UM) 7*512kB (M) 7*1024kB (UM) 3*2048kB (UE) 326*4096kB (UM) = 1388588kB [ 179.308862][T12076] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 179.339471][T12076] Node 1 Normal: 208*4kB (UME) 55*8kB (UME) 45*16kB (UME) 105*32kB (UME) 38*64kB (UME) 4*128kB (UME) 3*256kB (UM) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (UM) = 3888488kB [ 179.386428][T12076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.442808][T12076] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.476823][T12076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.497990][T12076] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.523712][T12076] 46809 total pagecache pages [ 179.536792][T12076] 0 pages in swap cache [ 179.541472][T12076] Free swap = 124996kB [ 179.545721][T12076] Total swap = 124996kB [ 179.572779][T12076] 2097051 pages RAM [ 179.576763][T12076] 0 pages HighMem/MovableOnly [ 179.585136][T12076] 424107 pages reserved [ 179.589737][T12076] 0 pages cma reserved [ 179.645721][T12132] tipc: Enabled bearer , priority 0 [ 179.655653][T12132] syzkaller0: entered promiscuous mode [ 179.661320][T12132] syzkaller0: entered allmulticast mode [ 179.687360][T12132] tipc: Resetting bearer [ 179.690167][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1742'. [ 179.721344][T12136] tipc: Resetting bearer [ 179.772615][T12136] tipc: Disabling bearer [ 180.357496][T12167] validate_nla: 15 callbacks suppressed [ 180.357515][T12167] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 180.890194][T12217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.973157][T12228] sctp: [Deprecated]: syz.2.1769 (pid 12228) Use of int in max_burst socket option. [ 180.973157][T12228] Use struct sctp_assoc_value instead [ 181.126388][T12238] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 181.144473][T12238] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 181.194567][T12238] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 181.226228][T12238] netlink: 'syz.3.1771': attribute type 2 has an invalid length. [ 181.238272][T12248] netlink: ct family unspecified [ 181.255461][T12248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.279469][T12250] vlan0: entered promiscuous mode [ 181.290612][T12250] vlan0: entered allmulticast mode [ 181.299910][T12250] veth0_vlan: entered allmulticast mode [ 181.872016][T12308] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 181.965085][T12313] netlink: 'syz.1.1791': attribute type 4 has an invalid length. [ 182.015183][T12313] `: renamed from bond0 [ 182.049239][T12317] netlink: 'syz.4.1793': attribute type 9 has an invalid length. [ 182.108059][T12324] netlink: 'syz.2.1795': attribute type 13 has an invalid length. [ 182.191987][T12324] netlink: 'syz.2.1795': attribute type 58 has an invalid length. [ 182.503491][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.510865][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.751282][T12328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 182.777639][ T980] lo speed is unknown, defaulting to 1000 [ 182.778620][T12333] gretap0: entered promiscuous mode [ 182.786001][ T980] syz2: Port: 1 Link DOWN [ 182.810284][T12352] tipc: Enabled bearer , priority 0 [ 182.866707][T12350] tipc: Resetting bearer [ 182.898212][T12354] syzkaller0: entered promiscuous mode [ 182.903908][T12354] syzkaller0: entered allmulticast mode [ 182.929347][T12349] tipc: Resetting bearer [ 182.959488][T12349] tipc: Disabling bearer [ 182.996753][T12358] __nla_validate_parse: 15 callbacks suppressed [ 182.996769][T12358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1804'. [ 183.289876][T12370] tipc: Enabled bearer , priority 0 [ 183.297584][T12370] syzkaller0: entered promiscuous mode [ 183.309615][T12370] syzkaller0: entered allmulticast mode [ 183.344830][T12370] tipc: Resetting bearer [ 183.360241][T12374] netlink: 'syz.0.1809': attribute type 4 has an invalid length. [ 183.371251][T12368] tipc: Resetting bearer [ 183.429427][T12368] tipc: Disabling bearer [ 183.457815][ T10] lo speed is unknown, defaulting to 1000 [ 183.464552][ T10] syz2: Port: 1 Link ACTIVE [ 183.576305][T12389] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.1814'. [ 183.659291][T12389] hsr_slave_1 (unregistering): left promiscuous mode [ 183.682673][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 183.749601][ T5995] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.769593][ T5995] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.791452][ T5995] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.801812][ T5995] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.843607][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 183.894144][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 183.903996][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 184.031165][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'. [ 184.043485][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1824'. [ 184.143290][T12422] tipc: Enabled bearer , priority 0 [ 184.161461][T12422] syzkaller0: entered promiscuous mode [ 184.170134][T12422] syzkaller0: entered allmulticast mode [ 184.183811][T12422] tipc: Resetting bearer [ 184.193375][T12420] tipc: Resetting bearer [ 184.217188][T12420] tipc: Disabling bearer [ 184.225707][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'. [ 184.442753][T12444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1831'. [ 184.454855][T12445] veth1_vlan: mtu less than device minimum [ 184.500922][T12446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.582826][T12446] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 184.761461][T12462] bond3: (slave geneve3): making interface the new active one [ 184.770298][T12462] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 184.780809][ T5995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 184.799985][ T5995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 184.818470][ T5995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 184.829380][ T5995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 184.842863][T12461] syzkaller0: entered promiscuous mode [ 184.852569][T12461] syzkaller0: entered allmulticast mode [ 185.024486][T12476] syzkaller1: entered promiscuous mode [ 185.030549][T12476] syzkaller1: entered allmulticast mode [ 185.292215][T12500] tipc: Enabled bearer , priority 0 [ 185.319484][T12500] syzkaller0: entered promiscuous mode [ 185.348704][T12500] syzkaller0: entered allmulticast mode [ 185.448006][T12516] validate_nla: 3 callbacks suppressed [ 185.448024][T12516] netlink: 'syz.0.1849': attribute type 21 has an invalid length. [ 185.609955][T12516] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.617204][T12516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.627995][T12516] 8021q: adding VLAN 0 to HW filter on device ` [ 185.639848][T12516] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.653264][T12516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.696485][T12516] syz.0.1849 (12516) used greatest stack depth: 18216 bytes left [ 185.708472][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.712628][T12512] tipc: Resetting bearer [ 185.823655][T12533] SET target dimension over the limit! [ 185.838895][T12536] SET target dimension over the limit! [ 185.861926][T12535] netlink: 'syz.3.1857': attribute type 7 has an invalid length. [ 185.874914][T12539] tipc: Enabling of bearer rejected, already enabled [ 185.903103][T12539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.965466][T12549] A link change request failed with some changes committed already. Interface ªªªªªªZ7nz>RAÌ may have been left with an inconsistent configuration, please check. [ 186.030152][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.044475][T12554] xt_l2tp: invalid flags combination: 8 [ 186.113107][T12499] tipc: Resetting bearer [ 186.132063][T12499] tipc: Disabling bearer [ 186.213968][T12567] raw_sendmsg: syz.4.1862 forgot to set AF_INET. Fix it! [ 186.305362][T12573] netlink: 'syz.3.1865': attribute type 10 has an invalid length. [ 186.318507][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.347892][T12579] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 186.361960][T12573] dummy0: entered promiscuous mode [ 186.367299][T12573] dummy0: entered allmulticast mode [ 186.385261][T12573] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.395807][T12576] netlink: 'syz.2.1866': attribute type 3 has an invalid length. [ 186.480428][T12585] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 186.919258][T12627] veth1_to_bond: entered allmulticast mode [ 186.935266][T12625] veth1_to_bond: left allmulticast mode [ 187.088958][T12644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.103713][T12644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.122810][T12657] netlink: 'syz.4.1886': attribute type 1 has an invalid length. [ 187.149030][T12654] tipc: Enabled bearer , priority 0 [ 187.156374][T12659] syzkaller0: entered promiscuous mode [ 187.164138][T12659] syzkaller0: entered allmulticast mode [ 187.169948][T12649] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 187.203897][T12657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.240180][T12660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.262629][T12660] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 187.273992][T12660] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 187.312045][T12657] veth3: entered promiscuous mode [ 187.320179][T12657] bond4: (slave veth3): Enslaving as an active interface with a down link [ 187.334934][T12667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.353661][T12654] tipc: Resetting bearer [ 187.363940][T12651] tipc: Resetting bearer [ 187.417960][T12651] tipc: Disabling bearer [ 188.049236][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.425884][T12761] bond0: entered promiscuous mode [ 188.461138][T12761] bond_slave_0: entered promiscuous mode [ 188.468590][T12761] bond_slave_1: entered promiscuous mode [ 188.496759][T12761] batadv0: entered promiscuous mode [ 188.519050][T12761] debugfs: 'hsr1' already exists in 'hsr' [ 188.525093][T12761] Cannot create hsr debugfs directory [ 188.537167][T12761] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 188.570574][T12761] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 188.603764][T12761] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 188.671264][T12776] dvmrp0: entered allmulticast mode [ 188.751825][T12765] dvmrp0: left allmulticast mode [ 189.045341][T12800] __nla_validate_parse: 14 callbacks suppressed [ 189.045359][T12800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1925'. [ 189.076692][T12800] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1925'. [ 189.136333][T12804] tipc: Enabled bearer , priority 0 [ 189.148003][T12804] syzkaller0: entered promiscuous mode [ 189.156616][T12804] syzkaller0: entered allmulticast mode [ 189.188406][T12810] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 189.227951][T12820] `: (slave team0): Releasing backup interface [ 189.272195][T12820] dummy0: left allmulticast mode [ 189.283735][T12820] bridge0: port 3(dummy0) entered disabled state [ 189.298336][T12823] netlink: 'syz.4.1930': attribute type 16 has an invalid length. [ 189.308594][T12823] netlink: 'syz.4.1930': attribute type 17 has an invalid length. [ 189.310730][T12820] bridge_slave_0: left allmulticast mode [ 189.328917][T12820] bridge_slave_0: left promiscuous mode [ 189.337027][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.355706][T12820] bridge_slave_1: left allmulticast mode [ 189.362687][T12820] bridge_slave_1: left promiscuous mode [ 189.371571][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.394419][T12820] `: (slave bond_slave_0): Releasing backup interface [ 189.396407][T12839] netlink: 'syz.3.1933': attribute type 1 has an invalid length. [ 189.412665][T12820] `: (slave bond_slave_1): Releasing backup interface [ 189.424133][T12820] team0: Port device team_slave_0 removed [ 189.432318][T12820] team0: Port device team_slave_1 removed [ 189.439619][T12820] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 189.473136][T12825] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1924'. [ 189.557252][T12840] veth7: entered promiscuous mode [ 189.581804][T12823] gretap0: left promiscuous mode [ 189.601101][T12823] bridge0: left promiscuous mode [ 189.609406][T12823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.620174][T12823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.638011][T12838] tipc: Resetting bearer [ 189.677040][T12839] 8021q: adding VLAN 0 to HW filter on device bond8 [ 189.704885][T12802] tipc: Resetting bearer [ 189.795520][T12802] tipc: Disabling bearer [ 189.910117][T12858] vlan4: entered allmulticast mode [ 190.078979][T12870] netlink: 'syz.0.1942': attribute type 1 has an invalid length. [ 190.096997][T12870] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1942'. [ 190.276475][T12892] sctp: Trying to GSO but underlying device doesn't support it. [ 190.458096][T12902] IPVS: length: 4096 != 24 [ 190.661567][T12920] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1958'. [ 190.734579][T12920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1958'. [ 190.737332][ T980] lo speed is unknown, defaulting to 1000 [ 190.774406][ T980] syz2: Port: 1 Link DOWN [ 190.853262][T12934] bridge8: entered allmulticast mode [ 190.958445][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1961'. [ 190.982736][T12944] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1962'. [ 191.008382][ C0] net_ratelimit: 2 callbacks suppressed [ 191.008402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.042723][T12944] netlink: 'syz.2.1962': attribute type 39 has an invalid length. [ 191.113613][T12940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.391991][T12973] syz_tun: entered allmulticast mode [ 191.404797][T12972] syz_tun: left allmulticast mode [ 191.623958][T12989] ip6gre0: entered allmulticast mode [ 191.675854][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 191.886829][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1980'. [ 192.254788][T13033] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 192.263445][T13033] netlink: 'syz.0.1985': attribute type 2 has an invalid length. [ 192.285219][T13033] x_tables: duplicate underflow at hook 3 [ 192.439660][T13044] tipc: Enabling of bearer rejected, media not registered [ 192.821826][T13067] can: request_module (can-proto-0) failed. [ 192.849634][T13069] can: request_module (can-proto-0) failed. [ 192.934989][T13078] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 193.067006][T13078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.190882][T13079] veth7: entered promiscuous mode [ 193.209955][T13079] bond3: (slave veth7): Enslaving as an active interface with an up link [ 193.355059][T13103] netlink: 'syz.4.2004': attribute type 1 has an invalid length. [ 193.510657][T13115] netlink: 'syz.1.2007': attribute type 1 has an invalid length. [ 193.905217][T13146] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 194.004231][T13158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.283311][T13182] netlink: 'syz.4.2026': attribute type 3 has an invalid length. [ 194.304216][T13182] __nla_validate_parse: 17 callbacks suppressed [ 194.304236][T13182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2026'. [ 194.334957][T13184] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 194.368231][T13184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 194.402010][T13184] bond9: (slave veth9): Enslaving as an active interface with a down link [ 194.417496][T13184] bond5: (slave veth0_to_bond): Releasing active interface [ 194.431304][T13184] bond9: (slave veth0_to_bond): making interface the new active one [ 194.442141][T13184] veth0_to_bond: entered promiscuous mode [ 194.448987][T13184] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 194.506577][T13193] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2029'. [ 194.582576][T13196] syzkaller0: entered promiscuous mode [ 194.590932][T13196] syzkaller0: entered allmulticast mode [ 194.598855][T13195] tipc: Enabled bearer , priority 0 [ 194.729347][T13200] tipc: Resetting bearer [ 194.759499][T13200] tipc: Disabling bearer [ 195.317887][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 195.567203][T13261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2045'. [ 195.591096][T13261] netlink: 'syz.2.2045': attribute type 10 has an invalid length. [ 195.600021][T13261] batman_adv: batadv0: Adding interface: netdevsim0 [ 195.610468][T13261] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 195.805669][T13273] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 195.844128][T13273] bond0: entered promiscuous mode [ 195.853739][T13273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.886726][T13273] bond0: (slave bridge9): making interface the new active one [ 195.895623][T13273] bridge9: entered promiscuous mode [ 195.904016][T13273] bond0: (slave bridge9): Enslaving as an active interface with an up link [ 196.198750][T13292] netlink: 'syz.3.2056': attribute type 29 has an invalid length. [ 196.223203][T13292] netlink: 'syz.3.2056': attribute type 29 has an invalid length. [ 196.477766][T13307] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2061'. [ 196.499631][T13311] netlink: 'syz.0.2062': attribute type 21 has an invalid length. [ 196.606933][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 196.622508][T13317] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2065'. [ 196.762724][T13323] ip6gre1: entered allmulticast mode [ 196.807433][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 196.944008][T13338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2071'. [ 197.285433][T13347] tipc: Enabled bearer , priority 0 [ 197.301946][T13347] syzkaller0: entered promiscuous mode [ 197.314624][T13347] syzkaller0: entered allmulticast mode [ 197.510506][T13353] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2076'. [ 198.408238][ T10] tipc: Node number set to 1179244657 [ 198.769074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.750179][T13346] tipc: Resetting bearer [ 199.792919][T13346] tipc: Disabling bearer [ 199.824357][T13353] netlink: 'syz.0.2076': attribute type 13 has an invalid length. [ 199.994878][T13374] netlink: 'syz.1.2085': attribute type 24 has an invalid length. [ 200.010402][T13373] __nla_validate_parse: 3 callbacks suppressed [ 200.010420][T13373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2084'. [ 200.050355][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2082'. [ 200.080525][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2082'. [ 200.151618][T13386] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2084'. [ 200.194765][T13386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2084'. [ 200.211099][T13382] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2086'. [ 200.302913][T13386] bond4 (unregistering): Released all slaves [ 200.412664][T13404] netlink: 'syz.2.2093': attribute type 29 has an invalid length. [ 200.430124][T13404] netlink: 'syz.2.2093': attribute type 29 has an invalid length. [ 200.573185][T13416] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 200.573985][T13417] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 201.277098][T13425] Cannot find set identified by id 3 to match [ 201.835491][T13409] netlink: 'syz.2.2093': attribute type 29 has an invalid length. [ 201.844257][T13409] netlink: 'syz.2.2093': attribute type 29 has an invalid length. [ 202.187790][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 202.203115][T13453] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004 [ 202.319549][T13460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2109'. [ 202.396358][T13466] tipc: Enabled bearer , priority 0 [ 202.410426][T13466] tipc: Resetting bearer [ 202.426575][T13465] tipc: Disabling bearer [ 202.442928][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 202.621485][T13473] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 202.644179][T13473] bond5 (unregistering): Released all slaves [ 202.757827][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2115'. [ 203.069985][T13496] tipc: Enabled bearer , priority 0 [ 203.137848][T13495] tipc: Disabling bearer [ 203.572586][T13541] netlink: 'syz.1.2129': attribute type 21 has an invalid length. [ 203.580965][T13541] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.589345][T13541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.596942][T13541] IPv6: NLM_F_CREATE should be set when creating new route [ 203.604316][T13541] IPv6: NLM_F_CREATE should be set when creating new route [ 203.611589][T13541] IPv6: NLM_F_CREATE should be set when creating new route [ 203.726857][T13552] syzkaller1: entered promiscuous mode [ 203.744506][T13552] syzkaller1: entered allmulticast mode [ 203.854156][T13562] veth1_to_bond: entered allmulticast mode [ 203.895145][T13566] netlink: 'syz.4.2134': attribute type 2 has an invalid length. [ 204.001195][T13562] bond0: (slave bond_slave_1): Releasing backup interface [ 204.004531][T13571] sctp: [Deprecated]: syz.1.2135 (pid 13571) Use of int in maxseg socket option. [ 204.004531][T13571] Use struct sctp_assoc_value instead [ 204.024127][T13562] bond_slave_1 (unregistering): left allmulticast mode [ 204.280144][T13583] syzkaller0: entered promiscuous mode [ 204.285660][T13583] syzkaller0: entered allmulticast mode [ 204.400076][T13596] syz.1.2144: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.419901][T13596] CPU: 1 UID: 0 PID: 13596 Comm: syz.1.2144 Not tainted syzkaller #0 PREEMPT(full) [ 204.419930][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.419942][T13596] Call Trace: [ 204.419950][T13596] [ 204.419959][T13596] dump_stack_lvl+0x189/0x250 [ 204.419990][T13596] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 204.420019][T13596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.420043][T13596] ? __pfx__printk+0x10/0x10 [ 204.420062][T13596] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.420088][T13596] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.420121][T13596] warn_alloc+0x214/0x310 [ 204.420147][T13596] ? stack_depot_save_flags+0x40/0x860 [ 204.420178][T13596] ? __pfx_warn_alloc+0x10/0x10 [ 204.420205][T13596] ? kasan_save_track+0x3e/0x80 [ 204.420230][T13596] ? __kasan_kmalloc+0x93/0xb0 [ 204.420256][T13596] ? xsk_setsockopt+0x4dc/0x8d0 [ 204.420274][T13596] ? do_sock_setsockopt+0x17c/0x1b0 [ 204.420299][T13596] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 204.420329][T13596] ? do_syscall_64+0xfa/0xfa0 [ 204.420350][T13596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.420380][T13596] __vmalloc_node_range_noprof+0x125/0x12d0 [ 204.420441][T13596] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.420471][T13596] ? __kasan_kmalloc+0x93/0xb0 [ 204.420503][T13596] vmalloc_user_noprof+0xad/0xf0 [ 204.420528][T13596] ? xskq_create+0xbf/0x170 [ 204.420550][T13596] xskq_create+0xbf/0x170 [ 204.420574][T13596] xsk_init_queue+0xb0/0x110 [ 204.420598][T13596] xsk_setsockopt+0x4dc/0x8d0 [ 204.420621][T13596] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.420644][T13596] ? __pfx_aa_sk_perm+0x10/0x10 [ 204.420671][T13596] ? aa_sock_opt_perm+0xff/0x1b0 [ 204.420699][T13596] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 204.420717][T13596] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.420739][T13596] do_sock_setsockopt+0x17c/0x1b0 [ 204.420772][T13596] __x64_sys_setsockopt+0x13f/0x1b0 [ 204.420805][T13596] do_syscall_64+0xfa/0xfa0 [ 204.420825][T13596] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.420848][T13596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.420867][T13596] ? clear_bhb_loop+0x60/0xb0 [ 204.420890][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.420906][T13596] RIP: 0033:0x7f09cd38efc9 [ 204.420932][T13596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.420949][T13596] RSP: 002b:00007f09ce21e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.420969][T13596] RAX: ffffffffffffffda RBX: 00007f09cd5e5fa0 RCX: 00007f09cd38efc9 [ 204.420984][T13596] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 204.420996][T13596] RBP: 00007f09cd411f91 R08: 0000000000000004 R09: 0000000000000000 [ 204.421008][T13596] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.421020][T13596] R13: 00007f09cd5e6038 R14: 00007f09cd5e5fa0 R15: 00007ffd6dd31728 [ 204.421055][T13596] [ 204.421063][T13596] Mem-Info: [ 204.717764][T13596] active_anon:4700 inactive_anon:0 isolated_anon:0 [ 204.717764][T13596] active_file:3141 inactive_file:39929 isolated_file:0 [ 204.717764][T13596] unevictable:768 dirty:71 writeback:0 [ 204.717764][T13596] slab_reclaimable:11363 slab_unreclaimable:104543 [ 204.717764][T13596] mapped:29233 shmem:1356 pagetables:1129 [ 204.717764][T13596] sec_pagetables:0 bounce:0 [ 204.717764][T13596] kernel_misc_reclaimable:0 [ 204.717764][T13596] free:1317393 free_pcp:18305 free_cma:0 [ 204.814738][T13606] tipc: Enabling of bearer rejected, media not registered [ 204.828494][T13596] Node 0 active_anon:18800kB inactive_anon:0kB active_file:12564kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116732kB dirty:280kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14284kB pagetables:4156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.925350][T13596] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.992476][T13596] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.053330][T13596] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 205.063468][T13596] Node 0 DMA32 free:1366692kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18976kB inactive_anon:0kB active_file:12564kB inactive_file:159516kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2565208kB mlocked:0kB bounce:0kB free_pcp:51468kB local_pcp:18896kB free_cma:0kB [ 205.133696][T13596] lowmem_reserve[]: 0 0 0 0 0 [ 205.152142][T13596] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.155507][T13625] syzkaller0: entered promiscuous mode [ 205.248402][T13596] lowmem_reserve[]: 0 0 0 0 0 [ 205.251282][T13625] syzkaller0: entered allmulticast mode [ 205.260815][T13596] Node 1 Normal free:3889000kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20736kB local_pcp:10592kB free_cma:0kB [ 205.328251][T13596] lowmem_reserve[]: 0 0 0 0 0 [ 205.339802][T13596] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.361001][T13633] netlink: 'syz.4.2153': attribute type 9 has an invalid length. [ 205.382799][T13596] Node 0 DMA32: 1233*4kB (UME) 238*8kB (UME) 285*16kB (UME) 125*32kB (ME) 58*64kB (UM) 33*128kB (UME) 14*256kB (UME) 9*512kB (UME) 6*1024kB (UME) 1*2048kB (M) 324*4096kB (UM) = 1366820kB [ 205.388453][T13633] netlink: 'syz.4.2153': attribute type 7 has an invalid length. [ 205.411785][T13633] netlink: 'syz.4.2153': attribute type 8 has an invalid length. [ 205.421112][T13596] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 205.434796][T13596] Node 1 Normal: 208*4kB (UME) 55*8kB (UME) 45*16kB (UME) 115*32kB (UME) 41*64kB (UME) 4*128kB (UME) 3*256kB (UM) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (UM) = 3889000kB [ 205.444877][T13633] vlan0: entered allmulticast mode [ 205.458624][T13596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.471364][T13596] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.481112][T13596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.491000][T13596] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.500613][T13596] 44422 total pagecache pages [ 205.505306][T13596] 0 pages in swap cache [ 205.509857][T13596] Free swap = 124996kB [ 205.514027][T13596] Total swap = 124996kB [ 205.518643][T13596] 2097051 pages RAM [ 205.522466][T13596] 0 pages HighMem/MovableOnly [ 205.527152][T13596] 424107 pages reserved [ 205.531846][T12640] veth0_to_bond: left promiscuous mode [ 205.540736][T13596] 0 pages cma reserved [ 205.641663][T13644] __nla_validate_parse: 3 callbacks suppressed [ 205.641682][T13644] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2158'. [ 205.801703][T13655] netlink: 'syz.4.2162': attribute type 11 has an invalid length. [ 205.816904][T13655] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 205.843485][T13658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2163'. [ 205.969479][T13661] netlink: 'syz.1.2164': attribute type 12 has an invalid length. [ 205.977432][T13661] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2164'. [ 206.021086][T13663] bond5: invalid ARP target 0.0.0.0 specified for addition [ 206.032774][T13663] bond5: option arp_ip_target: invalid value (0) [ 206.041534][T13663] bond5 (unregistering): Released all slaves [ 206.049357][T13668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2165'. [ 206.098370][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 206.130411][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 206.183144][T13676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.265870][T13679] ªªªªªª: renamed from vlan0 [ 206.344875][T13685] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 206.425917][T13688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2173'. [ 206.498303][T13692] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2175'. [ 206.622115][T13692] SET target dimension over the limit! [ 207.157081][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2189'. [ 207.224570][T13741] sctp: [Deprecated]: syz.1.2191 (pid 13741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.224570][T13741] Use struct sctp_sack_info instead [ 207.431674][T13750] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2194'. [ 207.551858][T13757] validate_nla: 1 callbacks suppressed [ 207.551876][T13757] netlink: 'syz.2.2197': attribute type 32 has an invalid length. [ 207.627622][T13758] tipc: Enabled bearer , priority 0 [ 207.706379][T13758] syzkaller0: entered promiscuous mode [ 207.717559][T13758] syzkaller0: entered allmulticast mode [ 207.727584][T13758] tipc: Resetting bearer [ 207.734510][T13764] netlink: 'syz.1.2201': attribute type 4 has an invalid length. [ 207.752321][T13770] geneve4: entered promiscuous mode [ 207.766154][T13770] geneve4: entered allmulticast mode [ 207.781676][T12635] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 207.797591][T13770] delete_channel: no stack [ 207.803415][T13756] tipc: Resetting bearer [ 209.192299][T13756] tipc: Disabling bearer [ 209.201022][T12635] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 209.242519][T13790] pim6reg1: entered promiscuous mode [ 209.254305][T13790] pim6reg1: entered allmulticast mode [ 209.263049][T12635] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 209.272176][T12635] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 209.504642][T13806] netlink: 'syz.1.2211': attribute type 1 has an invalid length. [ 209.880070][T13824] netlink: 'syz.1.2216': attribute type 4 has an invalid length. [ 209.915502][T13827] syzkaller0: entered promiscuous mode [ 209.921293][T13827] syzkaller0: entered allmulticast mode [ 210.178212][T13834] bond10: entered allmulticast mode [ 210.491764][T13853] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 210.672977][T13865] syzkaller1: entered promiscuous mode [ 210.718185][T13865] syzkaller1: entered allmulticast mode [ 210.968299][T13888] __nla_validate_parse: 12 callbacks suppressed [ 210.968317][T13888] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2234'. [ 211.082935][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 211.093039][T13894] netlink: 'syz.3.2236': attribute type 5 has an invalid length. [ 211.101494][T13894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2236'. [ 211.176996][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 211.196965][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2236'. [ 211.619838][T13923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2242'. [ 211.711902][T13925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2243'. [ 211.731828][T13925] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2243'. [ 211.882578][T13936] smc: net device gre0 applied user defined pnetid SYZ1 [ 211.899682][T13936] smc: net device gre0 erased user defined pnetid SYZ1 [ 211.967692][T13937] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 212.006917][T13937] tipc: Enabled bearer , priority 0 [ 212.016195][T13937] syzkaller0: entered promiscuous mode [ 212.022418][T13937] syzkaller0: entered allmulticast mode [ 212.112031][T13946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2250'. [ 212.161861][T13935] tipc: Resetting bearer [ 212.225389][T13935] tipc: Disabling bearer [ 212.433695][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 212.738782][T13984] tipc: Enabled bearer , priority 0 [ 212.747520][T13984] syzkaller0: entered promiscuous mode [ 212.753665][T13984] syzkaller0: entered allmulticast mode [ 212.809696][T13981] tipc: Resetting bearer [ 212.846994][T13981] tipc: Disabling bearer [ 212.891835][T13991] bond19: entered promiscuous mode [ 213.058928][T14010] netlink: 'syz.3.2267': attribute type 1 has an invalid length. [ 213.219131][T14025] netlink: 'syz.3.2274': attribute type 29 has an invalid length. [ 213.246874][T14025] netlink: 'syz.3.2274': attribute type 29 has an invalid length. [ 213.475845][T14047] netlink: 'syz.2.2281': attribute type 1 has an invalid length. [ 214.128353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.681968][T14120] netlink: 'syz.3.2304': attribute type 24 has an invalid length. [ 214.724906][T14125] sctp: [Deprecated]: syz.2.2302 (pid 14125) Use of int in max_burst socket option deprecated. [ 214.724906][T14125] Use struct sctp_assoc_value instead [ 214.784842][T14129] sctp: [Deprecated]: syz.0.2301 (pid 14129) Use of int in maxseg socket option. [ 214.784842][T14129] Use struct sctp_assoc_value instead [ 216.128699][T14202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.301021][T14220] __nla_validate_parse: 16 callbacks suppressed [ 216.301038][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 216.308091][T14216] A link change request failed with some changes committed already. Interface ªªªªªªZ7nz>RAÌ may have been left with an inconsistent configuration, please check. [ 216.385873][T14222] netlink: 'syz.0.2326': attribute type 13 has an invalid length. [ 216.414910][T14222] netlink: 'syz.0.2326': attribute type 58 has an invalid length. [ 216.426398][T14222] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2326'. [ 216.736740][T14248] ip6gre0: Master is either lo or non-ether device [ 217.081774][T14272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.091153][T14272] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 217.103627][T14272] bond0: (slave gre0): Error -95 calling set_mac_address [ 217.343224][T14290] sctp: [Deprecated]: syz.3.2341 (pid 14290) Use of int in maxseg socket option. [ 217.343224][T14290] Use struct sctp_assoc_value instead [ 217.404035][T14293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.437171][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2342'. [ 217.469799][T14296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2343'. [ 217.566739][T14297] bond5: ARP target 1.0.0.0 is already present [ 217.574726][T14297] bond5: option arp_ip_target: invalid value (1) [ 217.587361][T14297] bond5 (unregistering): Released all slaves [ 217.749937][T14297] bond5: ARP target 1.0.0.0 is already present [ 217.756232][T14297] bond5: option arp_ip_target: invalid value (1) [ 217.770338][T14297] bond5 (unregistering): Released all slaves [ 218.055418][T14297] bond5: ARP target 1.0.0.0 is already present [ 218.062320][T14297] bond5: option arp_ip_target: invalid value (1) [ 218.072854][T14297] bond5 (unregistering): Released all slaves [ 218.073256][T14332] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2349'. [ 218.167961][T14297] bond5: ARP target 1.0.0.0 is already present [ 218.174397][T14297] bond5: option arp_ip_target: invalid value (1) [ 218.200148][T14297] bond5 (unregistering): Released all slaves [ 218.277357][T14348] netlink: 'syz.0.2352': attribute type 10 has an invalid length. [ 218.320405][T14353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2352'. [ 218.340304][T14353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2352'. [ 218.597306][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 218.624298][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 218.648464][T14378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 218.657379][T14378] netlink: 'syz.1.2357': attribute type 15 has an invalid length. [ 218.691420][T14377] netlink: 'syz.1.2357': attribute type 15 has an invalid length. [ 218.701163][T14374] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 218.967772][T14399] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 219.118825][T14409] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 219.129789][T14406] netlink: 'syz.4.2366': attribute type 39 has an invalid length. [ 219.411435][T14435] sctp: [Deprecated]: syz.1.2371 (pid 14435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.411435][T14435] Use struct sctp_sack_info instead [ 219.441781][T14426] xfrm1: entered promiscuous mode [ 219.459008][T14426] xfrm1: entered allmulticast mode [ 219.608012][T14439] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 219.634547][T14439] bond9 (unregistering): Released all slaves [ 219.706103][T14453] tipc: Enabled bearer , priority 0 [ 219.726016][T14453] syzkaller0: entered promiscuous mode [ 219.735251][T14453] syzkaller0: entered allmulticast mode [ 219.775911][T14452] tipc: Resetting bearer [ 219.872266][T14452] tipc: Disabling bearer [ 219.995952][T14459] bond11: option all_slaves_active: invalid value (222) [ 220.033355][T14459] bond11 (unregistering): Released all slaves [ 220.498615][T14514] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 220.648599][T14526] Cannot find del_set index 4 as target [ 220.846579][T14541] bond9: option xmit_hash_policy: invalid value (64) [ 220.877444][T14541] bond9 (unregistering): Released all slaves [ 220.922853][T14546] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 220.945624][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.088800][T14556] netlink: 'syz.2.2398': attribute type 5 has an invalid length. [ 221.101467][T14556] tunl0: Caught tx_queue_len zero misconfig [ 221.222317][T14570] tipc: Enabled bearer , priority 0 [ 221.238417][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.255866][T14570] tipc: Resetting bearer [ 221.379699][T14569] tipc: Disabling bearer [ 221.404351][T14575] gtp0: entered promiscuous mode [ 221.410157][T14575] gtp0: entered allmulticast mode [ 221.416906][T14574] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 221.426051][T14574] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 221.575235][T14580] __nla_validate_parse: 15 callbacks suppressed [ 221.575254][T14580] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2406'. [ 221.735442][T14597] netlink: 'syz.4.2410': attribute type 2 has an invalid length. [ 221.743406][T14597] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2410'. [ 222.081441][T14614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2416'. [ 222.644424][T14638] netlink: 'syz.2.2423': attribute type 21 has an invalid length. [ 222.657786][T14638] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2423'. [ 222.862476][T14654] tipc: Enabled bearer , priority 0 [ 222.887286][T14658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2429'. [ 222.908366][T14654] syzkaller0: entered promiscuous mode [ 222.913888][T14654] syzkaller0: entered allmulticast mode [ 222.986831][T14654] tipc: Resetting bearer [ 222.994575][T14654] netlink: 'syz.2.2427': attribute type 15 has an invalid length. [ 223.003217][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2427'. [ 223.072816][T14653] tipc: Resetting bearer [ 223.112210][T14653] tipc: Disabling bearer [ 223.224149][T14671] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2432'. [ 223.235557][T14671] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2432'. [ 223.662870][T14701] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 223.680587][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2426'. [ 223.721120][T14704] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2442'. [ 223.825405][T14652] lo speed is unknown, defaulting to 1000 [ 223.892316][T14716] validate_nla: 4 callbacks suppressed [ 223.892333][T14716] netlink: 'syz.0.2448': attribute type 32 has an invalid length. [ 223.906994][T14717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.623441][T14756] tipc: Enabled bearer , priority 0 [ 224.802788][T14756] syzkaller0: entered promiscuous mode [ 224.819002][T14756] syzkaller0: entered allmulticast mode [ 224.835591][T14756] tipc: Resetting bearer [ 224.854052][T14775] netlink: 'syz.0.2467': attribute type 10 has an invalid length. [ 224.909462][T14780] netlink: 'syz.0.2467': attribute type 10 has an invalid length. [ 225.060836][T12633] tipc: Resetting bearer [ 225.087799][T14775] batman_adv: batadv0: Adding interface: netdevsim0 [ 225.118219][T14775] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.174103][T14775] batman_adv: batadv0: Interface activated: netdevsim0 [ 225.200558][T14756] tipc: Resetting bearer [ 226.713098][T14756] tipc: Disabling bearer [ 226.730001][T14798] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 226.750560][T14798] bond0: (slave gre0): Error -95 calling set_mac_address [ 226.985573][T14819] __nla_validate_parse: 4 callbacks suppressed [ 226.985599][T14819] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2477'. [ 227.007638][T14809] syzkaller1: entered promiscuous mode [ 227.029197][T14809] syzkaller1: entered allmulticast mode [ 227.137576][T14815] syzkaller1: entered promiscuous mode [ 227.144030][T14815] syzkaller1: entered allmulticast mode [ 227.155775][T14824] tipc: Enabling of bearer rejected, failed to enable media [ 227.201010][T14823] tipc: Enabled bearer , priority 0 [ 227.219922][T14828] syzkaller0: entered promiscuous mode [ 227.225704][T14828] syzkaller0: entered allmulticast mode [ 227.278715][T14829] syzkaller0: entered promiscuous mode [ 227.291552][T14829] syzkaller0: entered allmulticast mode [ 227.335348][T14826] tipc: Enabled bearer , priority 0 [ 227.400257][T14823] tipc: Resetting bearer [ 227.460214][T14826] tipc: Resetting bearer [ 227.502849][T14826] tipc: Disabling bearer [ 227.513812][T14822] tipc: Resetting bearer [ 227.529085][T14822] tipc: Disabling bearer [ 227.658751][T14857] netlink: 'syz.3.2488': attribute type 3 has an invalid length. [ 227.680434][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2488'. [ 227.760167][T14867] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2489'. [ 227.781889][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'. [ 227.870545][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2491'. [ 227.912844][T14874] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 227.929811][T14874] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 227.939307][T14874] netlink: 'syz.3.2491': attribute type 2 has an invalid length. [ 227.947167][T14874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2491'. [ 227.999193][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 228.020516][T14881] team0: Caught tx_queue_len zero misconfig [ 228.028083][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2493'. [ 228.111351][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2495'. [ 228.115420][T14888] tipc: Enabling of bearer rejected, failed to enable media [ 228.162335][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2495'. [ 228.556776][T14915] bridge: RTM_NEWNEIGH with invalid ether address [ 228.594000][T14915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.807791][T14876] lo speed is unknown, defaulting to 1000 [ 228.838602][T14885] netlink: 'syz.4.2492': attribute type 4 has an invalid length. [ 229.130601][T14899] lo speed is unknown, defaulting to 1000 [ 229.487215][T14889] lo speed is unknown, defaulting to 1000 [ 229.954834][T14960] vcan0: tx address claim with dlc 1 [ 230.637574][T14987] ip6gre2: entered allmulticast mode [ 230.701209][T14989] tipc: Enabling of bearer rejected, failed to enable media [ 230.816713][T14994] ipvlan3: entered promiscuous mode [ 231.003261][T15007] tipc: Enabled bearer , priority 0 [ 231.081976][T15007] syzkaller0: entered promiscuous mode [ 231.087620][T15007] syzkaller0: entered allmulticast mode [ 231.158467][T15006] tipc: Resetting bearer [ 231.198700][T15022] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 231.339508][T15033] netlink: 'syz.2.2531': attribute type 10 has an invalid length. [ 232.961131][T15006] tipc: Disabling bearer [ 232.977058][T15022] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 233.000006][T15031] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 233.161488][T15043] syzkaller0: entered promiscuous mode [ 233.187286][T15043] syzkaller0: entered allmulticast mode [ 233.482842][T15070] netlink: 'syz.1.2542': attribute type 2 has an invalid length. [ 233.511675][T15070] 9: entered promiscuous mode [ 233.544073][T15062] __nla_validate_parse: 13 callbacks suppressed [ 233.544093][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 233.615012][T15074] tipc: Enabling of bearer rejected, failed to enable media [ 234.408035][T15109] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 234.516932][T15114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2553'. [ 234.527862][T15109] 8021q: adding VLAN 0 to HW filter on device bond9 [ 234.577994][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 234.644075][T15117] bond9: (slave veth7): Enslaving as an active interface with a down link [ 234.681977][T15128] tipc: Enabling of bearer rejected, failed to enable media [ 234.813324][T15140] xt_bpf: check failed: parse error [ 235.013537][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'. [ 235.428055][T15181] x_tables: duplicate underflow at hook 2 [ 235.461355][T15181] IPVS: length: 139 != 8 [ 235.585048][T15193] batadv_slave_1: entered promiscuous mode [ 235.619429][T15193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2574'. [ 235.632065][T15195] x_tables: duplicate underflow at hook 1 [ 235.653793][T15192] batadv_slave_1: left promiscuous mode [ 235.929915][T15216] tipc: Enabling of bearer rejected, failed to enable media [ 236.234106][T15238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2584'. [ 236.263977][T15238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2584'. [ 236.317398][T15241] tipc: Enabled bearer , priority 0 [ 236.336301][T15241] syzkaller0: entered promiscuous mode [ 236.352433][T15241] syzkaller0: entered allmulticast mode [ 236.373258][T15241] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 236.397188][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2587'. [ 236.407953][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 236.512360][T15253] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 236.526538][T15254] tipc: Resetting bearer [ 236.533465][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 236.664712][T15239] tipc: Resetting bearer [ 236.728041][T15239] tipc: Disabling bearer [ 236.881619][T15276] netlink: 'syz.2.2595': attribute type 83 has an invalid length. [ 236.943975][T15281] tipc: Enabling of bearer rejected, failed to enable media [ 237.310377][T15290] syz.0.2599 (15290) used greatest stack depth: 17832 bytes left [ 237.721691][T15333] openvswitch: netlink: Key 6 has unexpected len 45 expected 2 [ 237.915515][T15342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.092666][T15338] bond0: (slave dummy0): Releasing backup interface [ 238.120201][T15338] dummy0 (unregistering): left allmulticast mode [ 238.237085][T15366] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 238.264369][T15364] netem: change failed [ 238.279290][T15366] netlink: 'syz.0.2623': attribute type 7 has an invalid length. [ 238.298343][T15366] netlink: 'syz.0.2623': attribute type 8 has an invalid length. [ 238.470863][T15379] netlink: 'syz.1.2625': attribute type 12 has an invalid length. [ 238.538471][T15379] netlink: 'syz.1.2625': attribute type 11 has an invalid length. [ 238.746973][T15398] netlink: 'syz.0.2632': attribute type 24 has an invalid length. [ 238.957573][T15408] tipc: Enabling of bearer rejected, failed to enable media [ 239.374640][T15430] tipc: New replicast peer: 255.255.255.255 [ 239.382254][T15430] tipc: Enabled bearer , priority 10 [ 239.647378][T15455] netlink: 'syz.1.2650': attribute type 5 has an invalid length. [ 239.714798][T15458] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 239.784750][T15459] __nla_validate_parse: 11 callbacks suppressed [ 239.784771][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2651'. [ 239.859824][T15459] bond5: entered promiscuous mode [ 239.860626][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2655'. [ 239.874087][T15459] bond5: entered allmulticast mode [ 239.874865][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2655'. [ 239.892594][T15459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.907758][T15469] bridge0: port 3(vlan0) entered blocking state [ 239.915923][T15469] bridge0: port 3(vlan0) entered disabled state [ 239.923225][T15469] vlan0: entered allmulticast mode [ 239.929063][T15469] bridge0: entered allmulticast mode [ 239.962043][T15474] netlink: 'syz.4.2656': attribute type 10 has an invalid length. [ 240.118931][T15469] vlan0: left allmulticast mode [ 240.124192][T15469] bridge0: left allmulticast mode [ 240.153404][T15458] gretap2: entered promiscuous mode [ 240.170978][T15458] bond5: (slave gretap2): making interface the new active one [ 240.179249][T15458] gretap2: entered allmulticast mode [ 240.186485][T15458] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 240.237502][T15474] bond0: (slave dummy0): Releasing backup interface [ 240.259498][T15474] dummy0: left promiscuous mode [ 240.288662][T15474] dummy0: left allmulticast mode [ 240.489911][T15495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2662'. [ 240.508295][T15495] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2662'. [ 240.539362][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2664'. [ 240.552824][T15499] syzkaller1: entered promiscuous mode [ 240.560561][T15499] syzkaller1: entered allmulticast mode [ 240.564636][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2662'. [ 240.822079][T15515] tipc: Enabled bearer , priority 0 [ 240.834022][T15512] syzkaller0: entered promiscuous mode [ 240.848835][T15512] syzkaller0: entered allmulticast mode [ 240.921924][T15512] tipc: Resetting bearer [ 240.948845][T15511] tipc: Resetting bearer [ 241.024141][T15511] tipc: Disabling bearer [ 241.273463][T15549] tipc: Enabled bearer , priority 0 [ 241.297878][T15549] syzkaller0: entered promiscuous mode [ 241.316864][T15549] syzkaller0: entered allmulticast mode [ 241.353726][T15554] netlink: zone id is out of range [ 241.402048][T15541] tipc: Resetting bearer [ 241.438822][T15541] tipc: Disabling bearer [ 241.481376][T15560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2683'. [ 241.512227][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'. [ 241.766143][T15580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2690'. [ 241.843772][T15584] tipc: Enabled bearer , priority 0 [ 241.867351][T15586] tipc: Enabled bearer , priority 0 [ 241.875308][T15586] syzkaller0: entered promiscuous mode [ 241.882220][T15586] syzkaller0: entered allmulticast mode [ 241.892618][T15586] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 241.916132][T15586] tipc: Resetting bearer [ 241.951624][T15584] tipc: Resetting bearer [ 241.961876][T15585] tipc: Resetting bearer [ 241.993700][T15585] tipc: Disabling bearer [ 242.016895][T15583] tipc: Disabling bearer [ 242.373297][T15625] netlink: 'syz.1.2702': attribute type 2 has an invalid length. [ 242.685006][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.826243][T15621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.849948][T15621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.960504][T15621] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 243.140241][T15625] 8021q: adding VLAN 0 to HW filter on device bond20 [ 243.176456][T15631] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 243.213937][T15631] bond20: (slave macvlan4): Enslaving as a backup interface with an up link [ 243.238315][T12639] bond20: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 243.379869][T12640] bond20: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 245.682567][T12637] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.696651][T12637] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.698542][T12639] bond20: (slave macvlan4): link status up again after 0 ms [ 245.720282][T12637] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.748231][T12637] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.748717][T12639] bond20: (slave macvlan4): link status up again after 0 ms [ 245.788262][T12637] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.818404][T12639] bond20: (slave macvlan4): link status up again after 0 ms [ 245.824910][T12637] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.876184][T12637] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.887920][T12643] bond20: (slave macvlan4): link status up again after 0 ms [ 245.899909][T12643] bond20: (slave macvlan4): link status up again after 0 ms [ 245.918387][T12636] bond20: (slave macvlan4): link status up again after 0 ms [ 245.950810][T15669] __nla_validate_parse: 36 callbacks suppressed [ 245.950828][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'. [ 245.957642][T12637] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.988405][T12636] bond20: (slave macvlan4): link status up again after 0 ms [ 246.018735][T12636] bond20: (slave macvlan4): link status up again after 0 ms [ 246.024092][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 246.126287][T15676] bond0: Caught tx_queue_len zero misconfig [ 246.144998][T15676] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001 [ 246.412335][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 246.452256][T15698] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 246.474516][T15698] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 246.486958][T15698] gretap0: entered promiscuous mode [ 246.507230][T15698] gretap0: entered allmulticast mode [ 246.549237][T12637] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.561412][T15711] block nbd3: not configured, cannot reconfigure [ 246.571949][T12637] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.586715][T12637] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.603849][T12637] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.774397][ T30] audit: type=1800 audit(1761179433.822:4): pid=15725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2726" name="memory.events" dev="tmpfs" ino=2819 res=0 errno=0 [ 246.813366][T15725] netlink: 'syz.0.2726': attribute type 2 has an invalid length. [ 246.825382][T15725] netlink: 'syz.0.2726': attribute type 2 has an invalid length. [ 246.911089][T15732] veth1_to_bond: entered allmulticast mode [ 246.924437][T15735] netlink: 'syz.3.2728': attribute type 1 has an invalid length. [ 246.927754][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2729'. [ 246.951211][T15736] netlink: 'syz.2.2730': attribute type 1 has an invalid length. [ 246.974070][T15735] 8021q: adding VLAN 0 to HW filter on device bond11 [ 247.020872][T15737] `: (slave bond_slave_1): Releasing backup interface [ 247.062594][T15737] veth1_to_bond (unregistering): left allmulticast mode [ 247.168061][T15735] veth13: entered promiscuous mode [ 247.204230][T15735] bond11: (slave veth13): Enslaving as an active interface with a down link [ 247.420863][T15756] netlink: 'syz.2.2733': attribute type 4 has an invalid length. [ 247.441634][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2734'. [ 247.469186][T15762] netlink: 'syz.2.2733': attribute type 4 has an invalid length. [ 247.486642][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2734'. [ 247.510792][T15764] tipc: Enabling of bearer rejected, failed to enable media [ 247.532699][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2736'. [ 247.603578][T15769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2737'. [ 247.664787][T15764] hsr_slave_1 (unregistering): left promiscuous mode [ 247.956798][T15793] tipc: Enabled bearer , priority 0 [ 248.094663][T15793] syzkaller0: entered promiscuous mode [ 248.102760][T15793] syzkaller0: entered allmulticast mode [ 248.114263][T15793] tipc: Resetting bearer [ 248.213988][T15789] tipc: Resetting bearer [ 248.241431][T15809] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 248.257650][T15814] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 249.034944][T15846] xt_hashlimit: max too large, truncated to 1048576 [ 250.714819][T15789] tipc: Disabling bearer [ 250.737374][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 250.746791][T12640] net_ratelimit: 17 callbacks suppressed [ 250.746815][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 250.796144][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 250.819931][T15857] netlink: 'syz.1.2759': attribute type 2 has an invalid length. [ 250.908789][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 251.018342][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 251.149585][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 251.252064][T15890] __nla_validate_parse: 2 callbacks suppressed [ 251.252082][T15890] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2768'. [ 251.281257][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 251.409891][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 251.450437][T15904] sctp: [Deprecated]: syz.4.2772 (pid 15904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.450437][T15904] Use struct sctp_sack_info instead [ 251.533733][T15915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'. [ 251.548340][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 251.658484][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 251.762279][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2778'. [ 251.773206][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 251.823062][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 251.842380][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 251.907814][T15943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2783'. [ 251.920929][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 252.058662][T15946] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2785'. [ 252.253308][T15964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2791'. [ 252.290054][T15970] netlink: 'syz.4.2790': attribute type 2 has an invalid length. [ 252.350645][T15971] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2793'. [ 252.372660][T15971] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2793'. [ 254.801819][T16003] tipc: Enabling of bearer rejected, failed to enable media [ 255.095336][T16036] bond21: option packets_per_slave: invalid value (18446744073709551615) [ 255.108462][T16036] bond21: option packets_per_slave: allowed values 0 - 65535 [ 255.124341][T16036] bond21 (unregistering): Released all slaves [ 255.255708][T16052] xt_hashlimit: size too large, truncated to 1048576 [ 255.509394][T16068] bond5: option lp_interval: invalid value (0) [ 255.564603][T16068] bond5: option lp_interval: allowed values 1 - 2147483647 [ 255.794225][T16068] bond5 (unregistering): Released all slaves [ 255.946699][T16076] bond21: entered allmulticast mode [ 255.957958][T16076] 8021q: adding VLAN 0 to HW filter on device bond21 [ 256.058417][T12637] net_ratelimit: 6 callbacks suppressed [ 256.058439][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 256.200985][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 256.292406][T16103] __nla_validate_parse: 2 callbacks suppressed [ 256.292423][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2823'. [ 256.318693][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 256.438318][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 256.537656][T16111] tipc: Enabled bearer , priority 0 [ 256.556737][T16111] syzkaller0: entered promiscuous mode [ 256.587300][T16111] syzkaller0: entered allmulticast mode [ 256.632792][T16110] tipc: Resetting bearer [ 256.713245][T16110] tipc: Disabling bearer [ 256.748419][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 256.758567][T16124] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 256.806215][T16133] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 256.859522][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 256.978509][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 257.071800][T16150] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2836'. [ 257.091565][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 257.208272][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 257.318723][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 257.351187][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'. [ 257.362813][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 257.670819][T16196] bond5: Unable to set down delay as MII monitoring is disabled [ 257.694796][T16205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2848'. [ 257.707546][T16196] bond5 (unregistering): Released all slaves [ 257.980621][T16228] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2855'. [ 258.002541][T16221] netlink: 'syz.3.2854': attribute type 10 has an invalid length. [ 258.011553][T16228] 0ªî{X¹¦: renamed from gretap0 [ 258.027599][T16228] 0ªî{X¹¦: entered allmulticast mode [ 258.195842][T16241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2857'. [ 258.336651][T16250] netlink: 'syz.2.2862': attribute type 1 has an invalid length. [ 258.345352][T16250] netlink: 'syz.2.2862': attribute type 2 has an invalid length. [ 258.358335][T16250] sctp: [Deprecated]: syz.2.2862 (pid 16250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.358335][T16250] Use struct sctp_sack_info instead [ 258.384065][T16255] sctp: [Deprecated]: syz.3.2864 (pid 16255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.384065][T16255] Use struct sctp_sack_info instead [ 258.511556][T16260] netlink: 'syz.4.2866': attribute type 1 has an invalid length. [ 258.570397][T16260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.580021][T16266] bond5: (slave wlan0): Opening slave failed [ 258.609782][T16260] vlan0: entered allmulticast mode [ 258.615296][T16260] veth1: entered allmulticast mode [ 258.627094][T16260] bond5: (slave vlan0): Opening slave failed [ 258.762682][T16277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2871'. [ 258.768393][ T5828] Bluetooth: hci0: command tx timeout [ 258.782135][T16278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2871'. [ 258.813955][T16278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2871'. [ 258.814586][T16273] syzkaller1: entered promiscuous mode [ 258.845348][T16273] syzkaller1: entered allmulticast mode [ 258.933899][T16279] netlink: 'syz.3.2871': attribute type 1 has an invalid length. [ 258.990285][T16279] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 259.165655][T16302] netlink: 'syz.3.2878': attribute type 58 has an invalid length. [ 259.571628][T16335] batadv_slave_1: entered promiscuous mode [ 259.582504][T16335] net veth1_virt_wifi .: renamed from virt_wifi0 [ 259.610208][T16333] batadv_slave_1: left promiscuous mode [ 259.635560][T16340] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 259.805470][T16341] bond22: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 260.220425][T16385] tipc: Enabled bearer , priority 0 [ 260.236514][T16385] syzkaller0: entered promiscuous mode [ 260.245277][T16385] syzkaller0: entered allmulticast mode [ 260.263880][T16385] tipc: Resetting bearer [ 260.282050][T16383] tipc: Resetting bearer [ 260.328930][T16383] tipc: Disabling bearer [ 260.377927][T16396] syzkaller1: entered allmulticast mode [ 260.500133][T16403] sctp: [Deprecated]: syz.2.2911 (pid 16403) Use of int in maxseg socket option. [ 260.500133][T16403] Use struct sctp_assoc_value instead [ 260.513399][T16405] syzkaller0: entered promiscuous mode [ 260.522017][T16405] syzkaller0: entered allmulticast mode [ 260.619453][T16403] sctp: [Deprecated]: syz.2.2911 (pid 16403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.619453][T16403] Use struct sctp_sack_info instead [ 260.661056][T16403] sctp: [Deprecated]: syz.2.2911 (pid 16403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.661056][T16403] Use struct sctp_sack_info instead [ 261.109364][T12637] net_ratelimit: 31 callbacks suppressed [ 261.109385][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 261.238410][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 261.348249][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 261.454829][T16444] tipc: Enabled bearer , priority 0 [ 261.475413][T16444] syzkaller0: entered promiscuous mode [ 261.488734][T16444] syzkaller0: entered allmulticast mode [ 261.519493][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 261.668292][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 261.769853][T16444] tipc: Resetting bearer [ 261.817135][T16455] __nla_validate_parse: 40 callbacks suppressed [ 261.817152][T16455] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2930'. [ 261.837799][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2930'. [ 261.860161][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.871555][T16444] tipc: Disabling bearer [ 261.880702][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.891948][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.903492][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.913223][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.932053][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.942581][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.962271][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.976315][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.991073][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.059102][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 262.082702][T16461] syzkaller0: entered promiscuous mode [ 262.108842][T16461] syzkaller0: entered allmulticast mode [ 262.208972][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 262.348310][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 262.403493][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2936'. [ 262.431025][T16476] tipc: Invalid UDP bearer configuration [ 262.431085][T16476] tipc: Enabling of bearer rejected, failed to enable media [ 262.507170][T16482] can: request_module (can-proto-0) failed. [ 262.509402][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 262.709133][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 262.751122][T16456] lo speed is unknown, defaulting to 1000 [ 262.947130][T16508] netlink: 'syz.0.2944': attribute type 1 has an invalid length. [ 263.045162][T16508] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 263.127374][T16456] chnl_net:caif_netlink_parms(): no params data found [ 263.232454][T16525] syzkaller0: entered promiscuous mode [ 263.238086][T16525] syzkaller0: entered allmulticast mode [ 263.328450][T16537] netlink: 'syz.1.2952': attribute type 21 has an invalid length. [ 263.655195][T16553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2956'. [ 263.670257][T16553] netlink: 'syz.3.2956': attribute type 7 has an invalid length. [ 263.681630][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.690203][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.700091][T16553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2956'. [ 263.714689][T16456] bridge_slave_0: entered allmulticast mode [ 263.720266][T16551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2955'. [ 263.726132][T16456] bridge_slave_0: entered promiscuous mode [ 263.747185][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.757858][T16456] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.767015][T16456] bridge_slave_1: entered allmulticast mode [ 263.784877][T16557] sctp: [Deprecated]: syz.4.2955 (pid 16557) Use of int in maxseg socket option. [ 263.784877][T16557] Use struct sctp_assoc_value instead [ 263.812499][T16456] bridge_slave_1: entered promiscuous mode [ 263.842653][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'. [ 263.974200][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.012197][T16571] netlink: 'syz.1.2960': attribute type 83 has an invalid length. [ 264.033465][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.052470][ T5833] Bluetooth: hci2: command tx timeout [ 264.149960][T16456] team0: Port device team_slave_0 added [ 264.159984][T16456] team0: Port device team_slave_1 added [ 264.229070][T16576] vlan0: entered allmulticast mode [ 264.234999][T16576] hsr_slave_1: entered allmulticast mode [ 264.249573][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.257492][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.296245][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.319148][T16574] syzkaller1: entered promiscuous mode [ 264.325193][T16574] syzkaller1: entered allmulticast mode [ 264.340746][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.349978][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.382010][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.396473][T16581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2964'. [ 264.586760][T16456] hsr_slave_0: entered promiscuous mode [ 264.605351][T16456] hsr_slave_1: entered promiscuous mode [ 264.613045][T16456] debugfs: 'hsr0' already exists in 'hsr' [ 264.619883][T16456] Cannot create hsr debugfs directory [ 264.930379][T16609] pimreg: entered allmulticast mode [ 265.115866][T16456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.118715][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2975'. [ 265.152705][T16456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 265.170456][T16622] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 265.197126][T16633] netlink: 'syz.1.2978': attribute type 1 has an invalid length. [ 265.355122][T16456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.379289][T16456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 265.442369][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2982'. [ 265.493989][T16456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.515694][T16456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 265.661998][T16660] lo: Caught tx_queue_len zero misconfig [ 265.704923][T16650] sctp: [Deprecated]: syz.0.2984 (pid 16650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.704923][T16650] Use struct sctp_sack_info instead [ 265.726245][T16456] batman_adv: batadv0: Removing interface: netdevsim0 [ 265.750853][T16456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.762618][T16456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 265.853743][T16650] bridge3: entered promiscuous mode [ 265.861783][T16650] bridge3: entered allmulticast mode [ 265.910773][T16667] syzkaller0: entered promiscuous mode [ 265.916485][T16667] syzkaller0: entered allmulticast mode [ 266.137353][ T5833] Bluetooth: hci2: command tx timeout [ 266.399734][T12639] net_ratelimit: 10 callbacks suppressed [ 266.399755][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 266.467146][T16456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.502794][T16456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.531412][T16704] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 266.542130][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 266.552121][T16456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.592862][T16456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.628309][T16705] nbd1: detected capacity change from 0 to 127 [ 266.639843][ T5833] block nbd1: Receive control failed (result -32) [ 266.652615][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 266.760739][T16715] netlink: 'syz.0.2996': attribute type 10 has an invalid length. [ 266.780356][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 266.791690][T16715] batman_adv: batadv0: Removing interface: netdevsim0 [ 266.810906][T16715] `: (slave netdevsim0): Enslaving as an active interface with an up link [ 266.838930][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.875760][T16456] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.893323][T12640] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.906203][T12640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.962166][T12636] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.970357][T12636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.089671][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 267.105350][T16721] __nla_validate_parse: 2 callbacks suppressed [ 267.105369][T16721] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2999'. [ 267.172854][T16724] syzkaller0: entered promiscuous mode [ 267.178930][T16724] syzkaller0: entered allmulticast mode [ 267.308538][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 267.458566][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 267.548694][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3006'. [ 267.639927][T12637] bond20: (slave macvlan4): failed to get link speed/duplex [ 267.725265][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.772181][T16754] netlink: 'syz.4.3009': attribute type 39 has an invalid length. [ 267.916430][T16758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3009'. [ 267.934621][T16456] veth0_vlan: entered promiscuous mode [ 267.944289][T16762] SET target dimension over the limit! [ 268.023860][T16456] veth1_vlan: entered promiscuous mode [ 268.129786][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 268.192175][T16456] veth0_macvtap: entered promiscuous mode [ 268.211945][ T5833] Bluetooth: hci2: command tx timeout [ 268.247877][T16456] veth1_macvtap: entered promiscuous mode [ 268.365071][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.457223][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.506189][T12635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.529091][T12635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.563614][T12635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.608464][T12635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.653211][T16796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3021'. [ 268.670047][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 268.717389][T16796] erspan0: entered promiscuous mode [ 268.852875][T12636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.875687][T12636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.961119][T12636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.972449][T12636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.161406][T16819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3027'. [ 269.185842][T16821] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3028'. [ 269.200890][T16819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3027'. [ 269.225129][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2922'. [ 269.738830][T16846] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 269.916038][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3035'. [ 270.288342][ T5833] Bluetooth: hci2: command tx timeout [ 270.484789][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.505302][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.517848][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.530724][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.541528][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.589526][T16876] Cannot find del_set index 4 as target [ 271.127151][T16875] lo speed is unknown, defaulting to 1000 [ 271.286805][T16909] netlink: 'syz.2.3050': attribute type 30 has an invalid length. [ 271.576561][T12640] net_ratelimit: 25 callbacks suppressed [ 271.576589][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 271.696928][T16875] chnl_net:caif_netlink_parms(): no params data found [ 271.765009][T16925] netlink: 'syz.4.3053': attribute type 13 has an invalid length. [ 271.888483][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 271.935541][T16875] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.956763][T16875] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.988538][T16875] bridge_slave_0: entered allmulticast mode [ 271.998570][T16875] bridge_slave_0: entered promiscuous mode [ 272.008629][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 272.047497][T16932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.065003][T16932] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 272.089553][T16875] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.099713][T16875] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.107700][T16942] Unsupported ieee802154 address type: 0 [ 272.108769][T16875] bridge_slave_1: entered allmulticast mode [ 272.119291][T16943] Unsupported ieee802154 address type: 0 [ 272.126885][T16875] bridge_slave_1: entered promiscuous mode [ 272.181792][T16932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.201974][T16932] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 272.242400][T16875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.257877][T16875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.335118][T16875] team0: Port device team_slave_0 added [ 272.355565][T16875] team0: Port device team_slave_1 added [ 272.361675][T16953] __nla_validate_parse: 2 callbacks suppressed [ 272.361694][T16953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3061'. [ 272.384205][T16953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3061'. [ 272.418638][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3060'. [ 272.464135][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 272.482404][T16875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.499253][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.546235][T16875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.578630][T16875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.589238][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.623711][T16875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.699237][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 272.742198][T16963] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3064'. [ 272.752353][T16963] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 272.756476][T16875] hsr_slave_0: entered promiscuous mode [ 272.765954][T16875] hsr_slave_1: entered promiscuous mode [ 272.774669][T16875] debugfs: 'hsr0' already exists in 'hsr' [ 272.781038][T16875] Cannot create hsr debugfs directory [ 272.811626][T16964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3064'. [ 272.868301][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 272.999368][T16974] x_tables: duplicate underflow at hook 3 [ 273.069588][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 273.153009][T16980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3070'. [ 273.176984][T16978] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3069'. [ 273.218580][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 273.294794][T16875] `: (slave netdevsim0): Releasing backup interface [ 273.341536][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 273.416591][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3073'. [ 273.507479][T16992] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3073'. [ 273.522487][T16994] IPVS: length: 239 != 24 [ 273.536001][T16995] IPVS: length: 239 != 24 [ 273.547507][T16992] 8021q: VLANs not supported on ip6tnl0 [ 273.570522][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 273.583302][T16875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.600056][T16875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.662674][T16875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.682232][T16875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.881718][T16875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.937491][T16875] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.984014][T12637] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.992741][T12637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.025568][T12637] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.033422][T12637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.068085][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 274.155037][T17023] syz_tun: entered allmulticast mode [ 276.500982][T16875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.525301][T17022] syz_tun: left allmulticast mode [ 276.578056][T16875] veth0_vlan: entered promiscuous mode [ 276.599171][T16875] veth1_vlan: entered promiscuous mode [ 276.643847][T16875] veth0_macvtap: entered promiscuous mode [ 276.661232][T16875] veth1_macvtap: entered promiscuous mode [ 276.686339][T16875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.715510][T16875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.728674][T12640] net_ratelimit: 5 callbacks suppressed [ 276.728690][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 276.753733][T12640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.766956][T12640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.783625][T12640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.796792][T12640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.813416][T17053] tipc: Enabling of bearer rejected, failed to enable media [ 276.899519][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 276.931236][T17055] netlink: 'syz.3.3090': attribute type 1 has an invalid length. [ 277.020892][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 277.148754][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 277.268393][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 277.378503][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 277.508616][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 277.628457][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 277.738482][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 277.858482][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 281.738415][T12635] net_ratelimit: 34 callbacks suppressed [ 281.738436][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 281.858352][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 281.971420][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 282.088661][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 282.198446][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 282.308519][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 282.418463][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 282.529125][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 282.638564][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 282.748686][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 286.839116][T12636] net_ratelimit: 36 callbacks suppressed [ 286.839138][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 286.968369][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 287.081357][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 287.218421][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 287.328655][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 287.438632][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 287.548426][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 287.658404][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 287.768411][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 287.878516][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 291.848478][T12636] net_ratelimit: 35 callbacks suppressed [ 291.848499][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 291.968890][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 292.078367][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 292.188457][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 292.308504][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 292.418405][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 292.528523][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 292.638434][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 292.748461][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 292.858385][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 296.878788][T12636] net_ratelimit: 35 callbacks suppressed [ 296.878812][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 296.998433][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 297.108544][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 297.218435][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 297.330553][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 297.448360][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 297.558393][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 297.668466][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 297.778458][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 297.888537][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 301.969029][T12643] net_ratelimit: 36 callbacks suppressed [ 301.969050][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 302.098373][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 302.209439][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 302.328572][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 302.438498][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 302.548391][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 302.658362][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 302.769193][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 302.878343][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 302.988525][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 307.068415][T12636] net_ratelimit: 36 callbacks suppressed [ 307.068437][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 307.188414][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 307.298440][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 307.408950][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 307.518462][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 307.628409][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 307.738378][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 307.848419][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 307.958339][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 308.078379][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 312.088786][T12635] net_ratelimit: 35 callbacks suppressed [ 312.088808][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 312.208881][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 312.328551][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 312.438378][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 312.548367][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 312.658480][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 312.768629][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 312.878406][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 312.988453][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 313.098368][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 317.198446][T12643] net_ratelimit: 36 callbacks suppressed [ 317.198466][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 317.318429][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 317.438386][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 317.548389][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 317.668498][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 317.778512][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 317.889007][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 317.998491][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 318.118358][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 318.229216][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 322.208644][T12640] net_ratelimit: 35 callbacks suppressed [ 322.208666][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 322.328606][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 322.438432][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 322.558594][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 322.668716][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 322.778501][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 322.888744][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 322.998607][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 323.108579][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 323.218407][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 327.238529][T12640] net_ratelimit: 35 callbacks suppressed [ 327.238550][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 327.358373][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 327.468334][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 327.578294][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 327.688485][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 327.798390][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 327.908423][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 328.028828][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 328.138622][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 328.248551][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 332.328617][T12633] net_ratelimit: 36 callbacks suppressed [ 332.328645][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 332.448590][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 332.558569][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 332.678493][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 332.788504][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 332.898529][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 333.009766][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 333.118420][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 333.228707][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 333.338424][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 337.418533][T12639] net_ratelimit: 36 callbacks suppressed [ 337.418554][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 337.538361][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 337.651071][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 337.768378][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 337.878342][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 337.988547][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 338.098412][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 338.208601][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 338.318380][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 338.428361][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 342.528375][T12640] net_ratelimit: 36 callbacks suppressed [ 342.528396][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 342.648519][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 342.758396][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 342.878347][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 342.988416][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 343.098481][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 343.208576][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 343.328436][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 343.438411][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 343.548445][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 347.538433][T12640] net_ratelimit: 35 callbacks suppressed [ 347.538455][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 347.658283][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 347.778342][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 347.892727][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 348.018647][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 348.138777][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 348.248432][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 348.368525][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 348.478416][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 348.598421][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 352.610405][T12640] net_ratelimit: 35 callbacks suppressed [ 352.610429][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 352.729369][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 352.839055][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 352.948599][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 353.058448][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 353.169684][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 353.278470][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 353.388590][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 353.508913][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 353.618450][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 357.698332][T12633] net_ratelimit: 36 callbacks suppressed [ 357.698348][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 357.818437][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 357.928621][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 358.038355][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 358.148487][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 358.258446][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 358.368739][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 358.478383][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 358.588397][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 358.698352][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 362.788415][T12633] net_ratelimit: 36 callbacks suppressed [ 362.788434][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 362.908800][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 363.018456][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 363.128420][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 363.249404][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 363.358442][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 363.468418][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 363.578335][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 363.688408][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 363.798381][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 367.868542][T12633] net_ratelimit: 36 callbacks suppressed [ 367.868568][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 367.988308][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 368.098358][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 368.218446][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 368.328418][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 368.438508][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 368.558482][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 368.668453][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 368.778518][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 368.888460][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 372.888415][T12633] net_ratelimit: 35 callbacks suppressed [ 372.888435][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 373.008633][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 373.118524][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 373.228681][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 373.338513][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 373.448632][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 373.558564][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 373.668617][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 373.778493][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 373.890134][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 377.988636][T12633] net_ratelimit: 36 callbacks suppressed [ 377.988658][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 378.108388][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 378.218344][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 378.328373][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 378.448928][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 378.558444][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 378.668568][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 378.788633][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 378.898366][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 379.018539][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 383.098358][T12643] net_ratelimit: 36 callbacks suppressed [ 383.098381][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 383.228372][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 383.338465][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 383.448407][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 383.558505][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 383.668414][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 383.778544][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 383.889013][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 384.008476][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 384.118311][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 388.118591][T12636] net_ratelimit: 35 callbacks suppressed [ 388.118612][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 388.238981][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 388.358657][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 388.468864][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 388.588542][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 388.698461][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 388.808451][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 388.918478][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 389.039620][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 389.148561][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 393.129351][T12639] net_ratelimit: 35 callbacks suppressed [ 393.129373][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 393.258499][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 393.368466][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 393.478424][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 393.589499][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 393.698489][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 393.808441][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 393.918387][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 394.028614][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 394.138533][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 398.228401][T12639] net_ratelimit: 36 callbacks suppressed [ 398.228432][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 398.348328][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 398.458337][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 398.568484][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 398.678325][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 398.788390][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 398.898345][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 399.008416][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 399.118380][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 399.228390][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 403.328544][T12643] net_ratelimit: 36 callbacks suppressed [ 403.328566][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 403.448367][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 403.558568][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 403.678407][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 403.788420][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 403.898588][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 404.018368][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 404.128725][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 404.238375][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 404.348504][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 408.338378][T12633] net_ratelimit: 35 callbacks suppressed [ 408.338399][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 408.458462][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 408.568399][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 408.678386][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 408.788379][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 408.898392][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 409.008410][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 409.118379][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 409.228359][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 409.338363][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 413.428436][T12639] net_ratelimit: 36 callbacks suppressed [ 413.428463][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 413.548483][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 413.658399][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 413.788481][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 413.898400][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 414.008525][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 414.118421][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 414.228424][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 414.338451][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 414.452616][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 418.468958][T12635] net_ratelimit: 35 callbacks suppressed [ 418.468986][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 418.588559][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 418.698430][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 418.808633][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 418.918357][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 419.028499][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 419.138452][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 419.248639][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 419.358347][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 419.468538][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 423.538360][T12643] net_ratelimit: 36 callbacks suppressed [ 423.538380][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 423.658949][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 423.768457][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 423.878537][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 423.988702][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 424.098560][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 424.208823][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 424.318522][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 424.428561][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 424.538503][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 428.648440][T12639] net_ratelimit: 36 callbacks suppressed [ 428.648461][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 428.768781][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 428.878427][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 428.988477][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 429.098444][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 429.208531][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 429.318360][T12639] bond20: (slave macvlan4): failed to get link speed/duplex [ 429.428732][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 429.538403][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 429.648538][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 433.728978][T12643] net_ratelimit: 36 callbacks suppressed [ 433.728998][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 433.848331][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 433.958390][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 434.068441][T12643] bond20: (slave macvlan4): failed to get link speed/duplex [ 434.178336][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 434.288758][ T31] INFO: task kworker/0:3:5839 blocked for more than 143 seconds. [ 434.289323][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 434.296718][ T31] Not tainted syzkaller #0 [ 434.309471][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.318485][ T31] task:kworker/0:3 state:D stack:23208 pid:5839 tgid:5839 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 434.330751][ T31] Workqueue: events rfkill_uevent_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.336253][ T31] Call Trace: [ 434.339581][ T31] [ 434.342653][ T31] __schedule+0x1798/0x4cc0 [ 434.347191][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.353856][ T31] ? __pfx___schedule+0x10/0x10 [ 434.360639][ T31] ? schedule+0x91/0x360 [ 434.364914][ T31] schedule+0x165/0x360 [ 434.404009][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.409922][ T31] __mutex_lock+0x7e6/0x1350 [ 434.414641][ T31] ? __mutex_lock+0x5bb/0x1350 [ 434.419574][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 434.435194][ T31] ? rfkill_uevent_work+0x1d/0xa0 [ 434.442316][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 434.448346][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 434.454516][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.460165][ T31] rfkill_uevent_work+0x1d/0xa0 [ 434.465120][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 434.471506][ T31] process_scheduled_works+0xae1/0x17b0 [ 434.477196][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 434.483343][ T31] worker_thread+0x8a0/0xda0 [ 434.488250][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 434.495165][ T31] ? __kthread_parkme+0x7b/0x200 [ 434.500252][ T31] kthread+0x711/0x8a0 [ 434.504558][ T31] ? __pfx_worker_thread+0x10/0x10 [ 434.509955][ T31] ? __pfx_kthread+0x10/0x10 [ 434.514649][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.520055][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.525741][ T31] ? __pfx_kthread+0x10/0x10 [ 434.530939][ T31] ret_from_fork+0x4bc/0x870 [ 434.531058][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 434.536026][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 434.551171][ T31] ? __switch_to_asm+0x39/0x70 [ 434.556482][ T31] ? __switch_to_asm+0x33/0x70 [ 434.561390][ T31] ? __pfx_kthread+0x10/0x10 [ 434.566215][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.571835][ T31] [ 434.575124][ T31] INFO: task kworker/0:14:15639 blocked for more than 143 seconds. [ 434.583970][ T31] Not tainted syzkaller #0 [ 434.589100][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.597922][ T31] task:kworker/0:14 state:D stack:25960 pid:15639 tgid:15639 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 434.610821][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 434.617529][ T31] Call Trace: [ 434.620955][ T31] [ 434.624018][ T31] __schedule+0x1798/0x4cc0 [ 434.628684][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.634213][ T31] ? __pfx___schedule+0x10/0x10 [ 434.639376][ T31] ? schedule+0x91/0x360 [ 434.643925][ T31] schedule+0x165/0x360 [ 434.648451][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.649425][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 434.654203][ T31] __mutex_lock+0x7e6/0x1350 [ 434.666838][ T31] ? __mutex_lock+0x5bb/0x1350 [ 434.671895][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 434.678283][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 434.683783][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 434.690319][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 434.696113][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 434.702721][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 434.708989][ T31] process_scheduled_works+0xae1/0x17b0 [ 434.714596][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 434.720824][ T31] worker_thread+0x8a0/0xda0 [ 434.725448][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 434.731977][ T31] ? __kthread_parkme+0x7b/0x200 [ 434.736960][ T31] kthread+0x711/0x8a0 [ 434.741659][ T31] ? __pfx_worker_thread+0x10/0x10 [ 434.746900][ T31] ? __pfx_kthread+0x10/0x10 [ 434.751916][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.757386][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.762818][ T31] ? __pfx_kthread+0x10/0x10 [ 434.767539][ T31] ret_from_fork+0x4bc/0x870 [ 434.773382][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 434.779212][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 434.779451][ T31] ? __switch_to_asm+0x39/0x70 [ 434.791797][ T31] ? __switch_to_asm+0x33/0x70 [ 434.796625][ T31] ? __pfx_kthread+0x10/0x10 [ 434.801565][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.806374][ T31] [ 434.809567][ T31] INFO: task syz-executor:16875 blocked for more than 143 seconds. [ 434.817461][ T31] Not tainted syzkaller #0 [ 434.822496][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.831361][ T31] task:syz-executor state:D stack:21128 pid:16875 tgid:16875 ppid:1 task_flags:0x400140 flags:0x00080002 [ 434.843499][ T31] Call Trace: [ 434.846828][ T31] [ 434.850455][ T31] __schedule+0x1798/0x4cc0 [ 434.855165][ T31] ? security_file_open+0xb1/0x270 [ 434.860407][ T31] ? __lock_acquire+0xab9/0xd20 [ 434.865452][ T31] ? __lock_acquire+0xab9/0xd20 [ 434.870435][ T31] ? __pfx___schedule+0x10/0x10 [ 434.875339][ T31] ? schedule+0x91/0x360 [ 434.880288][ T31] schedule+0x165/0x360 [ 434.884473][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.889998][ T31] __mutex_lock+0x7e6/0x1350 [ 434.894685][ T31] ? __mutex_lock+0x5bb/0x1350 [ 434.899603][ T31] ? misc_open+0x51/0x350 [ 434.904124][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 434.909442][ T31] misc_open+0x51/0x350 [ 434.913642][ T31] chrdev_open+0x4cc/0x5e0 [ 434.918431][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 434.923607][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 434.930206][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 434.935262][ T31] do_dentry_open+0x953/0x13f0 [ 434.940442][ T31] vfs_open+0x3b/0x340 [ 434.944648][ T31] ? path_openat+0x2ecd/0x3830 [ 434.950012][ T31] path_openat+0x2ee5/0x3830 [ 434.954797][ T31] ? fput_close_sync+0x119/0x200 [ 434.960064][ T31] ? __pfx_path_openat+0x10/0x10 [ 434.965152][ T31] do_filp_open+0x1fa/0x410 [ 434.969856][ T31] ? __lock_acquire+0xab9/0xd20 [ 434.974749][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 434.980276][ T31] ? _raw_spin_unlock+0x28/0x50 [ 434.985262][ T31] ? alloc_fd+0x64c/0x6c0 [ 434.989895][ T31] do_sys_openat2+0x121/0x1c0 [ 434.994600][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 435.000000][ T31] ? fput_close_sync+0x119/0x200 [ 435.005054][ T31] ? dnotify_flush+0x1db/0x5e0 [ 435.009914][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 435.015228][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 435.020587][ T31] __x64_sys_openat+0x138/0x170 [ 435.025458][ T31] do_syscall_64+0xfa/0xfa0 [ 435.030177][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.035508][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.041703][ T31] ? clear_bhb_loop+0x60/0xb0 [ 435.046393][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.052375][ T31] RIP: 0033:0x7fd91818d810 [ 435.056838][ T31] RSP: 002b:00007ffd90cef780 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 435.065431][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd91818d810 [ 435.073714][ T31] RDX: 0000000000000002 RSI: 00007fd918212a62 RDI: 00000000ffffff9c [ 435.082781][ T31] RBP: 00007fd918212a62 R08: 0000000000000000 R09: 0000000000000000 [ 435.091792][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 435.100092][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 435.108225][ T31] [ 435.111326][ T31] INFO: task syz.1.3049:16904 blocked for more than 144 seconds. [ 435.123856][ T31] Not tainted syzkaller #0 [ 435.130427][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.139535][ T31] task:syz.1.3049 state:D stack:25832 pid:16904 tgid:16903 ppid:5825 task_flags:0x400140 flags:0x00080003 [ 435.151900][ T31] Call Trace: [ 435.155310][ T31] [ 435.158320][ T31] __schedule+0x1798/0x4cc0 [ 435.162892][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.167778][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.172977][ T31] ? __pfx___schedule+0x10/0x10 [ 435.177965][ T31] ? schedule+0x91/0x360 [ 435.182870][ T31] schedule+0x165/0x360 [ 435.187246][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.193136][ T31] __mutex_lock+0x7e6/0x1350 [ 435.197761][ T31] ? __mutex_lock+0x5bb/0x1350 [ 435.203256][ T31] ? rfkill_unregister+0xc8/0x220 [ 435.208654][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.213812][ T31] ? __pfx_device_del+0x10/0x10 [ 435.218853][ T31] rfkill_unregister+0xc8/0x220 [ 435.223745][ T31] nfc_unregister_device+0x96/0x2a0 [ 435.229135][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 435.234883][ T31] virtual_ncidev_close+0x56/0x90 [ 435.240154][ T31] __fput+0x44c/0xa70 [ 435.244165][ T31] task_work_run+0x1d4/0x260 [ 435.249866][ T31] ? __pfx_task_work_run+0x10/0x10 [ 435.255138][ T31] get_signal+0x11ec/0x1340 [ 435.260576][ T31] ? task_work_add+0x377/0x420 [ 435.265522][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 435.271495][ T31] ? __pfx___fput_deferred+0x10/0x10 [ 435.276924][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 435.283256][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 435.289211][ T31] exit_to_user_mode_loop+0x72/0x130 [ 435.295687][ T31] do_syscall_64+0x2bd/0xfa0 [ 435.300521][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.305906][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.312148][ T31] ? clear_bhb_loop+0x60/0xb0 [ 435.316846][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.323183][ T31] RIP: 0033:0x7f09cd38efc9 [ 435.327637][ T31] RSP: 002b:00007f09ce21e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 435.336921][ T31] RAX: fffffffffffffff2 RBX: 00007f09cd5e5fa0 RCX: 00007f09cd38efc9 [ 435.345687][ T31] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000008 [ 435.353771][ T31] RBP: 00007f09cd411f91 R08: 0000000000000003 R09: 0000000000000000 [ 435.361962][ T31] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 435.370286][ T31] R13: 00007f09cd5e6038 R14: 00007f09cd5e5fa0 R15: 00007ffd6dd31728 [ 435.378423][ T31] [ 435.381478][ T31] INFO: task syz.4.3055:16932 blocked for more than 144 seconds. [ 435.389396][ T31] Not tainted syzkaller #0 [ 435.394431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.403465][ T31] task:syz.4.3055 state:D stack:24712 pid:16932 tgid:16931 ppid:5832 task_flags:0x400140 flags:0x00080003 [ 435.415641][ T31] Call Trace: [ 435.419074][ T31] [ 435.422107][ T31] __schedule+0x1798/0x4cc0 [ 435.426620][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.431695][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.436569][ T31] ? __pfx___schedule+0x10/0x10 [ 435.441524][ T31] ? schedule+0x91/0x360 [ 435.445789][ T31] schedule+0x165/0x360 [ 435.450245][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.455735][ T31] __mutex_lock+0x7e6/0x1350 [ 435.460433][ T31] ? __mutex_lock+0x5bb/0x1350 [ 435.465303][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 435.470978][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.476056][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.481406][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 435.487375][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 435.493919][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 435.499797][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 435.504911][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 435.510693][ T31] rfkill_set_block+0x1d2/0x440 [ 435.515578][ T31] rfkill_fop_write+0x44b/0x570 [ 435.520577][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 435.526002][ T31] ? security_kernfs_init_security+0x250/0x290 [ 435.532881][ T31] ? rw_verify_area+0x255/0x4d0 [ 435.537896][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.543035][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 435.548489][ T31] vfs_write+0x27e/0xb30 [ 435.552807][ T31] ? __pfx_vfs_write+0x10/0x10 [ 435.557800][ T31] ? __fget_files+0x2a/0x420 [ 435.562879][ T31] ? __fget_files+0x2a/0x420 [ 435.567514][ T31] ? __fget_files+0x3a0/0x420 [ 435.572428][ T31] ? __fget_files+0x2a/0x420 [ 435.577138][ T31] ksys_write+0x145/0x250 [ 435.581542][ T31] ? __pfx_ksys_write+0x10/0x10 [ 435.586503][ T31] ? do_syscall_64+0xbe/0xfa0 [ 435.591323][ T31] do_syscall_64+0xfa/0xfa0 [ 435.595854][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.601235][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.607515][ T31] ? clear_bhb_loop+0x60/0xb0 [ 435.612342][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.618413][ T31] RIP: 0033:0x7fa7d7d8efc9 [ 435.623127][ T31] RSP: 002b:00007fa7d8cec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.632002][ T31] RAX: ffffffffffffffda RBX: 00007fa7d7fe5fa0 RCX: 00007fa7d7d8efc9 [ 435.640251][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 435.648896][ T31] RBP: 00007fa7d7e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.657267][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.666491][ T31] R13: 00007fa7d7fe6038 R14: 00007fa7d7fe5fa0 R15: 00007ffcaf371038 [ 435.675430][ T31] [ 435.678537][ T31] INFO: task syz.2.3086:17041 blocked for more than 144 seconds. [ 435.686636][ T31] Not tainted syzkaller #0 [ 435.691688][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.700713][ T31] task:syz.2.3086 state:D stack:25160 pid:17041 tgid:17040 ppid:16456 task_flags:0x400140 flags:0x00080002 [ 435.712923][ T31] Call Trace: [ 435.716320][ T31] [ 435.719411][ T31] __schedule+0x1798/0x4cc0 [ 435.723988][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 435.730372][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.735426][ T31] ? __pfx___schedule+0x10/0x10 [ 435.740456][ T31] ? schedule+0x91/0x360 [ 435.744725][ T31] schedule+0x165/0x360 [ 435.748920][ T31] schedule_preempt_disabled+0x13/0x30 [ 435.754382][ T31] __mutex_lock+0x7e6/0x1350 [ 435.759305][ T31] ? __mutex_lock+0x5bb/0x1350 [ 435.764184][ T31] ? rfkill_register+0x37/0x8e0 [ 435.769262][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 435.774385][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 435.780023][ T31] ? device_initialize+0x24b/0x440 [ 435.785359][ T31] rfkill_register+0x37/0x8e0 [ 435.790135][ T31] nfc_register_device+0x14a/0x320 [ 435.795363][ T31] nci_register_device+0x87f/0x9d0 [ 435.800560][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 435.806286][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 435.812026][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 435.817440][ T31] virtual_ncidev_open+0x129/0x1a0 [ 435.822685][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 435.828484][ T31] misc_open+0x2d5/0x350 [ 435.832767][ T31] chrdev_open+0x4cc/0x5e0 [ 435.837265][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 435.842288][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 435.848666][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 435.853606][ T31] do_dentry_open+0x953/0x13f0 [ 435.858599][ T31] vfs_open+0x3b/0x340 [ 435.862740][ T31] ? path_openat+0x2ecd/0x3830 [ 435.867497][ T31] path_openat+0x2ee5/0x3830 [ 435.872176][ T31] ? __pfx_path_openat+0x10/0x10 [ 435.877265][ T31] do_filp_open+0x1fa/0x410 [ 435.881877][ T31] ? __lock_acquire+0xab9/0xd20 [ 435.886821][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 435.892282][ T31] ? _raw_spin_unlock+0x28/0x50 [ 435.897243][ T31] ? alloc_fd+0x64c/0x6c0 [ 435.901663][ T31] do_sys_openat2+0x121/0x1c0 [ 435.906376][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 435.911757][ T31] ? rcu_is_watching+0x15/0xb0 [ 435.916562][ T31] __x64_sys_openat+0x138/0x170 [ 435.921665][ T31] do_syscall_64+0xfa/0xfa0 [ 435.926189][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.931463][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.937575][ T31] ? clear_bhb_loop+0x60/0xb0 [ 435.942402][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.948816][ T31] RIP: 0033:0x7fc7ee38efc9 [ 435.953364][ T31] RSP: 002b:00007fc7ec5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 435.961904][ T31] RAX: ffffffffffffffda RBX: 00007fc7ee5e5fa0 RCX: 00007fc7ee38efc9 [ 435.970478][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 435.979017][ T31] RBP: 00007fc7ee411f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.987110][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.995153][ T31] R13: 00007fc7ee5e6038 R14: 00007fc7ee5e5fa0 R15: 00007ffd93847898 [ 436.003513][ T31] [ 436.006579][ T31] INFO: task syz.2.3086:17046 blocked for more than 145 seconds. [ 436.014622][ T31] Not tainted syzkaller #0 [ 436.019610][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.028693][ T31] task:syz.2.3086 state:D stack:27704 pid:17046 tgid:17040 ppid:16456 task_flags:0x400040 flags:0x00080002 [ 436.041214][ T31] Call Trace: [ 436.044516][ T31] [ 436.047453][ T31] __schedule+0x1798/0x4cc0 [ 436.052139][ T31] ? security_file_open+0xb1/0x270 [ 436.057295][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.062375][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.067260][ T31] ? __pfx___schedule+0x10/0x10 [ 436.072221][ T31] ? schedule+0x91/0x360 [ 436.076651][ T31] schedule+0x165/0x360 [ 436.081087][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.086564][ T31] __mutex_lock+0x7e6/0x1350 [ 436.091304][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.096080][ T31] ? misc_open+0x51/0x350 [ 436.100469][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.105646][ T31] misc_open+0x51/0x350 [ 436.109960][ T31] chrdev_open+0x4cc/0x5e0 [ 436.114392][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.119412][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 436.125866][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.130979][ T31] do_dentry_open+0x953/0x13f0 [ 436.135945][ T31] vfs_open+0x3b/0x340 [ 436.140158][ T31] ? path_openat+0x2ecd/0x3830 [ 436.144951][ T31] path_openat+0x2ee5/0x3830 [ 436.149669][ T31] ? __pfx_path_openat+0x10/0x10 [ 436.154738][ T31] do_filp_open+0x1fa/0x410 [ 436.159380][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.164254][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 436.169451][ T31] ? _raw_spin_unlock+0x28/0x50 [ 436.174312][ T31] ? alloc_fd+0x64c/0x6c0 [ 436.179392][ T31] do_sys_openat2+0x121/0x1c0 [ 436.184734][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.190465][ T31] ? rcu_is_watching+0x15/0xb0 [ 436.195699][ T31] __x64_sys_openat+0x138/0x170 [ 436.201280][ T31] do_syscall_64+0xfa/0xfa0 [ 436.205912][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.213420][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.219964][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.224664][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.231175][ T31] RIP: 0033:0x7fc7ee38efc9 [ 436.235795][ T31] RSP: 002b:00007fc7ec5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.244378][ T31] RAX: ffffffffffffffda RBX: 00007fc7ee5e6180 RCX: 00007fc7ee38efc9 [ 436.252683][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 436.261140][ T31] RBP: 00007fc7ee411f91 R08: 0000000000000000 R09: 0000000000000000 [ 436.269257][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.277266][ T31] R13: 00007fc7ee5e6218 R14: 00007fc7ee5e6180 R15: 00007ffd93847898 [ 436.285411][ T31] [ 436.289612][ T31] INFO: task syz.3.3092:17060 blocked for more than 145 seconds. [ 436.297352][ T31] Not tainted syzkaller #0 [ 436.302410][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.311123][ T31] task:syz.3.3092 state:D stack:28264 pid:17060 tgid:17058 ppid:5845 task_flags:0x400140 flags:0x00080002 [ 436.323144][ T31] Call Trace: [ 436.326817][ T31] [ 436.329847][ T31] __schedule+0x1798/0x4cc0 [ 436.334438][ T31] ? security_file_open+0xb1/0x270 [ 436.339817][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.344795][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.349733][ T31] ? __pfx___schedule+0x10/0x10 [ 436.355156][ T31] ? schedule+0x91/0x360 [ 436.359734][ T31] schedule+0x165/0x360 [ 436.364029][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.370089][ T31] __mutex_lock+0x7e6/0x1350 [ 436.374737][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.379618][ T31] ? misc_open+0x51/0x350 [ 436.384139][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.389355][ T31] misc_open+0x51/0x350 [ 436.393530][ T31] chrdev_open+0x4cc/0x5e0 [ 436.397961][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.403152][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 436.409535][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.414864][ T31] do_dentry_open+0x953/0x13f0 [ 436.419761][ T31] vfs_open+0x3b/0x340 [ 436.423847][ T31] ? path_openat+0x2ecd/0x3830 [ 436.428782][ T31] path_openat+0x2ee5/0x3830 [ 436.433407][ T31] ? __pfx_path_openat+0x10/0x10 [ 436.438415][ T31] do_filp_open+0x1fa/0x410 [ 436.442933][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.447963][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 436.453200][ T31] ? _raw_spin_unlock+0x28/0x50 [ 436.458163][ T31] ? alloc_fd+0x64c/0x6c0 [ 436.463218][ T31] do_sys_openat2+0x121/0x1c0 [ 436.468237][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.473542][ T31] ? rcu_is_watching+0x15/0xb0 [ 436.478378][ T31] __x64_sys_openat+0x138/0x170 [ 436.483357][ T31] do_syscall_64+0xfa/0xfa0 [ 436.487949][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.493475][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.500035][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.504734][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.510900][ T31] RIP: 0033:0x7f38f998efc9 [ 436.515430][ T31] RSP: 002b:00007f38f7bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.523911][ T31] RAX: ffffffffffffffda RBX: 00007f38f9be6090 RCX: 00007f38f998efc9 [ 436.532045][ T31] RDX: 00000000000c1842 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 436.540325][ T31] RBP: 00007f38f9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 436.548371][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.556472][ T31] R13: 00007f38f9be6128 R14: 00007f38f9be6090 R15: 00007ffdffb63478 [ 436.564695][ T31] [ 436.567759][ T31] INFO: task syz.3.3092:17061 blocked for more than 145 seconds. [ 436.575838][ T31] Not tainted syzkaller #0 [ 436.581382][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.590367][ T31] task:syz.3.3092 state:D stack:28296 pid:17061 tgid:17058 ppid:5845 task_flags:0x400040 flags:0x00080002 [ 436.602525][ T31] Call Trace: [ 436.605818][ T31] [ 436.608885][ T31] __schedule+0x1798/0x4cc0 [ 436.613407][ T31] ? security_file_open+0xb1/0x270 [ 436.618625][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.623486][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.628506][ T31] ? __pfx___schedule+0x10/0x10 [ 436.633633][ T31] ? schedule+0x91/0x360 [ 436.638082][ T31] schedule+0x165/0x360 [ 436.642826][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.648825][ T31] __mutex_lock+0x7e6/0x1350 [ 436.654319][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.659575][ T31] ? misc_open+0x51/0x350 [ 436.663961][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.669090][ T31] misc_open+0x51/0x350 [ 436.673388][ T31] chrdev_open+0x4cc/0x5e0 [ 436.677884][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.682933][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 436.689436][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.694582][ T31] do_dentry_open+0x953/0x13f0 [ 436.699522][ T31] vfs_open+0x3b/0x340 [ 436.703871][ T31] ? path_openat+0x2ecd/0x3830 [ 436.708721][ T31] path_openat+0x2ee5/0x3830 [ 436.713598][ T31] ? __pfx_path_openat+0x10/0x10 [ 436.718642][ T31] do_filp_open+0x1fa/0x410 [ 436.723242][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.728689][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 436.733755][ T31] ? _raw_spin_unlock+0x28/0x50 [ 436.738747][ T31] ? alloc_fd+0x64c/0x6c0 [ 436.743228][ T31] do_sys_openat2+0x121/0x1c0 [ 436.747897][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.753485][ T31] ? exc_page_fault+0x82/0x100 [ 436.758616][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 436.764727][ T31] __x64_sys_openat+0x138/0x170 [ 436.769891][ T31] do_syscall_64+0xfa/0xfa0 [ 436.774474][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.779977][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.786262][ T31] ? clear_bhb_loop+0x60/0xb0 [ 436.791488][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.797506][ T31] RIP: 0033:0x7f38f998efc9 [ 436.802066][ T31] RSP: 002b:00007f38f7bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.810525][ T31] RAX: ffffffffffffffda RBX: 00007f38f9be6180 RCX: 00007f38f998efc9 [ 436.818594][ T31] RDX: 00000000000c1842 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 436.826620][ T31] RBP: 00007f38f9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 436.834646][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.842677][ T31] R13: 00007f38f9be6218 R14: 00007f38f9be6180 R15: 00007ffdffb63478 [ 436.850926][ T31] [ 436.854069][ T31] INFO: task syz-executor:17065 blocked for more than 145 seconds. [ 436.862376][ T31] Not tainted syzkaller #0 [ 436.867333][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.876310][ T31] task:syz-executor state:D stack:28008 pid:17065 tgid:17065 ppid:1 task_flags:0x400040 flags:0x00080000 [ 436.889146][ T31] Call Trace: [ 436.892570][ T31] [ 436.895525][ T31] __schedule+0x1798/0x4cc0 [ 436.900100][ T31] ? security_file_open+0xb1/0x270 [ 436.905236][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.910430][ T31] ? __lock_acquire+0xab9/0xd20 [ 436.915325][ T31] ? __pfx___schedule+0x10/0x10 [ 436.920336][ T31] ? schedule+0x91/0x360 [ 436.924599][ T31] schedule+0x165/0x360 [ 436.929543][ T31] schedule_preempt_disabled+0x13/0x30 [ 436.935128][ T31] __mutex_lock+0x7e6/0x1350 [ 436.939960][ T31] ? __mutex_lock+0x5bb/0x1350 [ 436.944761][ T31] ? misc_open+0x51/0x350 [ 436.949344][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 436.954405][ T31] misc_open+0x51/0x350 [ 436.959165][ T31] chrdev_open+0x4cc/0x5e0 [ 436.963597][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.968698][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 436.975043][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 436.980209][ T31] do_dentry_open+0x953/0x13f0 [ 436.985043][ T31] vfs_open+0x3b/0x340 [ 436.989295][ T31] ? path_openat+0x2ecd/0x3830 [ 436.994171][ T31] path_openat+0x2ee5/0x3830 [ 436.999341][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 437.004943][ T31] ? count_memcg_event_mm+0x21/0x260 [ 437.010492][ T31] ? __pfx_path_openat+0x10/0x10 [ 437.015473][ T31] ? __pfx___up_read+0x10/0x10 [ 437.020328][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 437.025640][ T31] do_filp_open+0x1fa/0x410 [ 437.030292][ T31] ? __lock_acquire+0xab9/0xd20 [ 437.035154][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 437.040747][ T31] ? _raw_spin_unlock+0x28/0x50 [ 437.045693][ T31] ? alloc_fd+0x64c/0x6c0 [ 437.050225][ T31] do_sys_openat2+0x121/0x1c0 [ 437.054983][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 437.060352][ T31] ? fd_install+0x97/0x540 [ 437.064789][ T31] ? fd_install+0x30d/0x540 [ 437.069468][ T31] __x64_sys_openat+0x138/0x170 [ 437.074344][ T31] do_syscall_64+0xfa/0xfa0 [ 437.078909][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.084116][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.090551][ T31] ? clear_bhb_loop+0x60/0xb0 [ 437.095602][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.101586][ T31] RIP: 0033:0x7f38a858d791 [ 437.106429][ T31] RSP: 002b:00007ffd163876a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 437.115247][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f38a858d791 [ 437.123317][ T31] RDX: 0000000000000002 RSI: 00007f38a86129b7 RDI: 00000000ffffff9c [ 437.131740][ T31] RBP: 00007f38a86129b7 R08: 0000000000000000 R09: 00007f38a931d6c0 [ 437.139829][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 437.147881][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 437.156054][ T31] [ 437.159133][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 437.168758][ T31] [ 437.168758][ T31] Showing all locks held in the system: [ 437.176511][ T31] 1 lock held by khungtaskd/31: [ 437.181632][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 437.191805][ T31] 2 locks held by getty/5587: [ 437.196595][ T31] #0: ffff88814ddab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 437.206836][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 437.217266][ T31] 3 locks held by kworker/0:3/5839: [ 437.222800][ T31] #0: ffff88801a059948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.233878][ T31] #1: ffffc900040efba0 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.246541][ T31] #2: ffffffff8f5abe28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x1d/0xa0 [ 437.257000][ T31] 1 lock held by kworker/u8:30/12643: [ 437.262522][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 437.272589][ T31] 3 locks held by kworker/0:14/15639: [ 437.277952][ T31] #0: ffff88801a059948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.288987][ T31] #1: ffffc90005347ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.302722][ T31] #2: ffffffff8f5abe28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 437.314522][ T31] 1 lock held by syz-executor/16875: [ 437.319865][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.329595][ T31] 2 locks held by syz.1.3049/16904: [ 437.335067][ T31] #0: ffff888030ca5100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 437.346115][ T31] #1: ffffffff8f5abe28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 437.356695][ T31] 2 locks held by syz.4.3055/16932: [ 437.362251][ T31] #0: ffffffff8f5abe28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 437.372695][ T31] #1: ffff888030ca5100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 437.382676][ T31] 3 locks held by syz.2.3086/17041: [ 437.388036][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.396755][ T31] #1: ffff88805526d100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 437.406836][ T31] #2: ffffffff8f5abe28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 437.418651][ T31] 1 lock held by syz.2.3086/17046: [ 437.423855][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.432594][ T31] 1 lock held by syz.3.3092/17060: [ 437.437726][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.446443][ T31] 1 lock held by syz.3.3092/17061: [ 437.452235][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.461241][ T31] 1 lock held by syz-executor/17065: [ 437.466730][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.475695][ T31] 1 lock held by syz-executor/17066: [ 437.481280][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.491161][ T31] 1 lock held by syz-executor/17068: [ 437.496461][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.504997][ T31] 1 lock held by syz-executor/17070: [ 437.510397][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.518985][ T31] 1 lock held by syz-executor/17075: [ 437.524268][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.532795][ T31] 1 lock held by syz-executor/17078: [ 437.538250][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.546895][ T31] 1 lock held by syz-executor/17079: [ 437.552813][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.562067][ T31] 1 lock held by syz-executor/17081: [ 437.567600][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.576747][ T31] 1 lock held by syz-executor/17083: [ 437.582184][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.590787][ T31] 1 lock held by syz-executor/17088: [ 437.596247][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.604848][ T31] 1 lock held by syz-executor/17091: [ 437.610211][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.619257][ T31] 1 lock held by syz-executor/17092: [ 437.624798][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.633856][ T31] 1 lock held by syz-executor/17094: [ 437.639621][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.648551][ T31] 1 lock held by syz-executor/17096: [ 437.653865][ T31] #0: ffffffff8e776ae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 437.662733][ T31] [ 437.665071][ T31] ============================================= [ 437.665071][ T31] [ 437.674321][ T31] NMI backtrace for cpu 1 [ 437.674345][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 437.674364][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.674374][ T31] Call Trace: [ 437.674381][ T31] [ 437.674389][ T31] dump_stack_lvl+0x189/0x250 [ 437.674423][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.674446][ T31] ? __pfx__printk+0x10/0x10 [ 437.674477][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 437.674506][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 437.674534][ T31] ? __pfx__printk+0x10/0x10 [ 437.674556][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.674587][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 437.674617][ T31] watchdog+0xf60/0xfa0 [ 437.674642][ T31] ? watchdog+0x1e2/0xfa0 [ 437.674665][ T31] kthread+0x711/0x8a0 [ 437.674691][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.674708][ T31] ? __pfx_kthread+0x10/0x10 [ 437.674732][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.674752][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.674771][ T31] ? __pfx_kthread+0x10/0x10 [ 437.674794][ T31] ret_from_fork+0x4bc/0x870 [ 437.674824][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 437.674849][ T31] ? __switch_to_asm+0x39/0x70 [ 437.674864][ T31] ? __switch_to_asm+0x33/0x70 [ 437.674878][ T31] ? __pfx_kthread+0x10/0x10 [ 437.674901][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.674933][ T31] [ 437.674940][ T31] Sending NMI from CPU 1 to CPUs 0: [ 437.823965][ C0] NMI backtrace for cpu 0 [ 437.823984][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 437.824002][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.824012][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 437.824037][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 a1 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 437.824051][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 437.824067][ C0] RAX: 24f5260122ce0e00 RBX: ffffffff81967c07 RCX: 24f5260122ce0e00 [ 437.824079][ C0] RDX: 0000000000000001 RSI: ffffffff8d70bfbf RDI: ffffffff8bbf0860 [ 437.824091][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 437.824103][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ceb70 [ 437.824115][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 437.824126][ C0] FS: 0000000000000000(0000) GS:ffff88812613f000(0000) knlGS:0000000000000000 [ 437.824139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.824150][ C0] CR2: 0000563235eb4660 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 437.824165][ C0] Call Trace: [ 437.824172][ C0] [ 437.824179][ C0] default_idle+0x13/0x20 [ 437.824199][ C0] default_idle_call+0x73/0xb0 [ 437.824220][ C0] do_idle+0x1e7/0x510 [ 437.824237][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.824257][ C0] ? __pfx_do_idle+0x10/0x10 [ 437.824277][ C0] ? do_idle+0x4e7/0x510 [ 437.824295][ C0] cpu_startup_entry+0x44/0x60 [ 437.824311][ C0] rest_init+0x2de/0x300 [ 437.824334][ C0] start_kernel+0x3ae/0x410 [ 437.824357][ C0] x86_64_start_reservations+0x24/0x30 [ 437.824374][ C0] x86_64_start_kernel+0x143/0x1c0 [ 437.824390][ C0] common_startup_64+0x13e/0x147 [ 437.824419][ C0] [ 438.789661][T12635] net_ratelimit: 34 callbacks suppressed [ 438.789682][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 438.908402][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 439.018344][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 439.129426][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 439.238436][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 439.348627][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 439.458546][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 439.568516][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 439.678386][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 439.789490][T12636] bond20: (slave macvlan4): failed to get link speed/duplex [ 443.868521][T12640] net_ratelimit: 36 callbacks suppressed [ 443.868542][T12640] bond20: (slave macvlan4): failed to get link speed/duplex [ 443.989059][T12633] bond20: (slave macvlan4): failed to get link speed/duplex [ 444.098444][T12635] bond20: (slave macvlan4): failed to get link speed/duplex [ 444.208647][T12635] bond20: (slave macvlan4): failed to get link speed/duplex