last executing test programs: 21.585963052s ago: executing program 4 (id=2051): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$isdn(0x22, 0x2, 0x3) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0x4}}, 0x26) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e23, 0x6, 0x4e20, 0x9, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x0, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@local, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0xffff, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0xa0}}, 0x0) socket$inet(0x2, 0x4, 0x6) 21.559134576s ago: executing program 4 (id=2057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000700)={r4}, &(0x7f0000000740)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003800)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) close(r0) 21.443065967s ago: executing program 4 (id=2059): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r1, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, 0x0, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) sendmmsg$sock(r2, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x85) 21.196836108s ago: executing program 4 (id=2062): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x2, 0xfffffffd, {0x2, 0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x20000000000000ff, &(0x7f0000000040)=ANY=[@ANYBLOB="7daa5200000000b218d1430000042500000000000000001aba8ab57824049b28451a7b2b52aa5012e507dc24982c8629f68ce79052b1bfb6d1ec08aba10fdde78985baf01e27fab4e5ddb49a8af7cfc0f3b2e6c518d741ce96efc2e66193bebcbcd33c651e3b9496dc4756994aecf5"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 21.110224649s ago: executing program 4 (id=2064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x840000000002, 0x3, 0x1) (async) socket(0x840000000002, 0x3, 0x1) syz_emit_ethernet(0x62, &(0x7f0000000900)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004c0000540000000000019078ac1e0001ac1414aa441cd3c300000900000000007f00000100000006ffffffff00000201030490991200183f2500000000680000005c00007f0000017f00000100c36371ae9b1c03"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r6, 0x2}, 0x20) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x4000) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0xc820}, {{&(0x7f0000000980)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/141, 0x8d}, {&(0x7f0000000ac0)=""/112, 0x70}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000c40)=""/46, 0x2e}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000000d80)=""/29, 0x1d}, {&(0x7f0000000dc0)=""/73, 0x49}], 0x8}, 0x9}, {{&(0x7f0000000ec0)=@isdn, 0x80, &(0x7f00000010c0)=[{&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/211, 0xd3}, {&(0x7f0000001040)=""/113, 0x71}], 0x3}, 0x6}, {{&(0x7f0000001100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/178, 0xb2}, {&(0x7f0000001300)=""/199, 0xc7}], 0x2, &(0x7f0000001400)=""/93, 0x5d}, 0xa}, {{0x0, 0x0, &(0x7f00000016c0)}, 0x9}], 0x5, 0x40000140, 0x0) (async) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0xc820}, {{&(0x7f0000000980)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/141, 0x8d}, {&(0x7f0000000ac0)=""/112, 0x70}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000c40)=""/46, 0x2e}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000000d80)=""/29, 0x1d}, {&(0x7f0000000dc0)=""/73, 0x49}], 0x8}, 0x9}, {{&(0x7f0000000ec0)=@isdn, 0x80, &(0x7f00000010c0)=[{&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/211, 0xd3}, {&(0x7f0000001040)=""/113, 0x71}], 0x3}, 0x6}, {{&(0x7f0000001100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/178, 0xb2}, {&(0x7f0000001300)=""/199, 0xc7}], 0x2, &(0x7f0000001400)=""/93, 0x5d}, 0xa}, {{0x0, 0x0, &(0x7f00000016c0)}, 0x9}], 0x5, 0x40000140, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newtclass={0x50, 0x28, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x1, 0x5}, {0x1, 0xfff2}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0xc}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a40)=@newtfilter={0x358, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x324, 0x2, [@TCA_MATCHALL_ACT={0x310, 0x2, [@m_mpls={0x74, 0x17, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}]}, {0x38, 0x6, "95b333aebd767a1dd2b0ddd7a815260c4dd6275229a2ce0736ddec1ae74a2076707f72e0ee6cda195143fc788216f6fb9a028bd1"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x19c, 0x1f, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, 'fq_codel\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'skbprio\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xf, 0x7, 0x6, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x20000000, 0x100}}, @TCA_DEF_DATA={0xc, 0x3, 'skbprio\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'skbprio\x00'}]}, {0xe6, 0x6, "66a02792a3c80854a8094aa03762360be1c72a66aae8a6a407bd486fca814d5b4380af34351894868d8fb885cfbccd061e9b1b90cd36208aeb47b082b05886570db7fa4109e35c982d9e8da6646f3c53ae931ca2444a9706a3978eb7fed5fa6897718070146c0f80040b75efee00ebc19cab6dc1bd6d1e6027b2299e37c3929e526cb7fa759043592b7e92e76cf7c934d2e19ea78da6f06b23e468e9f0ccd49116fbb768daacb267f4b98e96294df5a907a66c6c13f128c8d9ece3a985507501b203a7ccf3e23bc97b161736ffee354bb6b9231e7a4c79a39cc07cd57c181c306d52"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_csum={0xfc, 0x14, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0xd, 0xffffffffffffffff, 0x5, 0x413d}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x3, 0x0, 0x2, 0x1}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x10000000, 0xfffffe01, 0xb}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x8, 0x7, 0x29f45a51, 0x4}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xdb46, 0x3, 0x5, 0x931, 0xffffb34a}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x222, 0x8, 0x3, 0x80, 0x4143fdfc}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2000000, 0x0, 0x41543ad295dfe86a, 0x80, 0xfffff4a5}, 0x7c}}]}, {0xa, 0x6, "22cf0eca4218"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xfff1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, 0x0, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000140)={r8, 0x1f76, 0x6, 0x7}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001940)=ANY=[@ANYBLOB="440000001054a7696a09000104fcffff3a4b1087", @ANYRES32, @ANYBLOB="b9452e9a225256dd999123278fc270bb031500000000004b140012800b000100", @ANYRES32=r14, @ANYRES32=r3, @ANYBLOB="30243877015e52bc15bfcf976d1aa73fdb98e7446805ed0197ad9b14bcaca0d594aa6039df43a7c33aa0c17711c27be38902f7d6017c0d98582119f81e1c6f4a2f3ad5b5397b9bb5afbbce4e1b58f97749fd92aabd9a5fa59d793436b156faddeddb0d9d920c37f5b664335e86ee109bda902979bb0620fd51537165339aed19e5de35043f1202e5", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) sendmsg$nl_route(r13, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001940)=ANY=[@ANYBLOB="440000001054a7696a09000104fcffff3a4b1087", @ANYRES32, @ANYBLOB="b9452e9a225256dd999123278fc270bb031500000000004b140012800b000100", @ANYRES32=r14, @ANYRES32=r3, @ANYBLOB="30243877015e52bc15bfcf976d1aa73fdb98e7446805ed0197ad9b14bcaca0d594aa6039df43a7c33aa0c17711c27be38902f7d6017c0d98582119f81e1c6f4a2f3ad5b5397b9bb5afbbce4e1b58f97749fd92aabd9a5fa59d793436b156faddeddb0d9d920c37f5b664335e86ee109bda902979bb0620fd51537165339aed19e5de35043f1202e5", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x5}, 0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x567}, &(0x7f00000008c0)=0x8) recvmsg$can_bcm(r10, &(0x7f00000005c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f0000000640)=""/164, 0xa4}], 0x7, &(0x7f0000000780)=""/238, 0xee}, 0x2100) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 20.929992927s ago: executing program 4 (id=2066): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000010000000000000000000a802040000000080000000014000200fe800000000000fdffffff00000000bb14000100fe8000000000000000000000000000bb1217beab406ad12f60ac7a59c067886dbc666a2a82e5e7ff2f710c8261147d0d5480897f667d034ec31da9dd41496918200c6e5d9a3c877c6c6daedf9636c63f51e17eb3b8a2363b3b0a0f9983327bfbb28f306c31117cb9b7eef44b6f508a06d49ecafd7c3ba165221642c6d8d20fabf4"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x200005, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0xfa3b6b2883b6fee3) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r14], 0x1c}}, 0x0) write$nci(r11, &(0x7f00000002c0)=ANY=[@ANYBLOB="6f05080301048205060b01930ffd0807034669857a8b45f0f2caeb1a6e29ee07056c0f852ed91ce7bda982fe099fe0f14ce2861a466830d4101a388cce31c072ddb4b80e"], 0x14) 20.036417319s ago: executing program 2 (id=2086): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b000100629a2e72696467650000140002800800054dfb9de167bee63af61b963bc1b08a970001ba177628a11732b1000040"], 0x44}}, 0x0) 19.79776295s ago: executing program 2 (id=2091): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @private2, 0x1}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x6, @private0, 0x9}], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x9}, 0x1) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@ethernet={0x7, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="c69fcb8455725f161efa5569162dbb738db1131f8b9859f4ada7f7a2ef1563216c5dcd5e76daa51e41ccc0244675c14cfac8c169bdb134e5625495081a4e82c2209475671520e22c1c55987525ade16c514105fc91", 0x55}, {&(0x7f0000000240)}], 0x2}, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x87, 0x6, 0x2, 0x6d6, 0x30e1, 0x66, 0xfffffff8, 0x8}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44880}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r4 = socket$phonet(0x23, 0x2, 0x1) splice(r4, &(0x7f0000000580)=0x3, r3, &(0x7f00000005c0), 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000600)=0x2, 0x4) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000640)={@private=0xa010102, @empty, @remote}, 0xc) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @remote}, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x2}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xa}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000041) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000880)=0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4802}, 0x4060002) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r9) sendto$inet(r5, &(0x7f0000000a40)="e7a96634f40f703d8df5ea48aff516e6d797b281699a02dfae802062af7b5c3025cf69a521258072a55d5a3365b68a436a6051ae5b3f0faf416217ea663c400c79dfdccb9ad4dc7f3b78c0d6480d84f8c67a09bb763f52aad4ae4e128c6fb98766aeb7360e9678fc958c946fb6808c9a5bc24b8145c9911cf3", 0x79, 0x20004004, &(0x7f0000000ac0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x38, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r10, 0x0, 0x9, 0x97, &(0x7f0000000b80)="390062538f4ee1f27d", &(0x7f0000000bc0)=""/151, 0x492, 0x0, 0xd3, 0x70, &(0x7f0000000c80)="623d7a2868a194aceae2e317fddb86ad9264c720cf3fc2c01a8721e92de950c269ca06d669669ffff301e18ffbacc978bf6233e6807655ad503e93285e76c73a03495bd7ceb68e55eb2820c4302daca03c82af7d0355db81a98aec66c7856ded6a31375e34b86e712c3b8133cf05745d8e718a4f560e70da5059eb7f435378776b4e5ced7890540acf321ffbbf71286ee36b0c3933d55f160f5db24473f9690a3690df58b5fce1327bb07a40df51fadf48d285a9e80337e96ab540e82212e4e83b623ada6c070b9cb8a5e0ea34d03c3694549e", &(0x7f0000000d80)="14e7ecc262200a6eeae4ad8151bacf0dc9c93091c3fa1cba610fb677c6b7555b52bc39cf9a6ff9a9c8a2dcda672670458ad14defcf20ab0e537ea04ed87455d6ecf90b1b266644bf268f8e9e887504b44e52acf52ad52655d9d561618ee797d6342d681d8a1dda1a0b20f320d6a47a03", 0x3, 0x0, 0x2}, 0x50) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001740)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000000fc0)={0x704, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x570, 0x8, 0x0, 0x1, [{0x348, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x168, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x184, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7f}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f119553639d0d9f0eb3d366ff892acdc22d30ccaaa2a7b5c6800f19f872fe716"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1a44}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2751ce7b0d8d7c18d7437c80b1cf9598b38cece1d22aa9cb349cb8cd924835af"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xbb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "71f1daeed0c6acfa5f0f8f5a06e9c72b8e765319dff3d9b49fae1c377cbe6c4f"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8377dcc28b78dcf4f3f0b0e98cf925c57a6c6405901b7b6718ea7502b8685430"}, @WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b18e3e05b19eb6de9dbf9caa1926aa6ca1e94919e5c7822e23abe20bd63dc4d5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @remote, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e456ce426b077e4f05aea16aef516f4641ea1f4e89d114d01c6f9ee832382aad"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8b0b410bdcebe1809a3e0a4346c5ac2bcf3118c767c0f7c85199f8131563488d"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0ce2400f7a9cd71c1dffd8b80a4717b1102927ebd84e326340b6129cc9a566bc"}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa}]}, 0x704}, 0x1, 0x0, 0x0, 0x802}, 0x404c080) 19.675195653s ago: executing program 2 (id=2094): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xd}}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 19.574954103s ago: executing program 2 (id=2096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x200}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) sendto$inet6(r1, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000480)=0x997, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={0x0, 0xfffb}, 0x8) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000500)=r2) r3 = accept(r1, &(0x7f00000000c0)=@hci, &(0x7f0000000180)=0x80) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)=0x7415f768, 0x4) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x62, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x8, 0x5, 0x200, 0x10, 0x1, 0x9, '\x00', r6, r7, 0x0, 0x4, 0x2}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x198, r9, 0x1, 0x0, 0xfffffffb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26217a1f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e0c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cc7c0cc}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x218d5a4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc575}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7caf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11a23ff7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9327}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe32f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a2a4b1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x471a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ac99692}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3394a949}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f155cb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14e94ea3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39e6de67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22a074be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3364f1a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b743d8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x198541f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x315fb079}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40800}, 0xd000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000300)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x28) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 19.158727302s ago: executing program 2 (id=2104): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 19.071718016s ago: executing program 2 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r2, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 19.05080803s ago: executing program 3 (id=2109): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000400)="c3ebdf02ccf049bcc145ba28e73853bc2beca0e03d5bd6c012e42d1428b917e255bc9e75cc701a5deacd14f062187f82e85e20e19b9ebfb6aef45d2ad0a7bc634373c630c98214899de376e8a8c2008b754001691c7b09262a9486cdd1654e717ddf0adc63e0a44f09a257aeb4827cea5c5eb652a7c34ace0d86abb34410bebcdd914d56bf83fd55d154e89e48870351e008a7462652501c07f9eabf4051243ef58362b6870778dbd820f1f674c5314c3dc2c9e671d1acc8a39f526c02fa98be", 0xc0}], 0x1}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000022000000000000010000002420ff0f0000000000000000060001000200000008000300ac1414aa0800060001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}}, 0x0) 18.932866796s ago: executing program 3 (id=2110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a0104000000fff1cae7509e890e00000000000a0000040900010073797a310000000008000540000000020900029473797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a000006090002008d792ccf000000000900010073796f3100000000100300000000008008000340000000021400000011000100000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0) socket$inet6(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)="a502d54984f531d9ed2146f0c11430c139ed4d98d51e09c2", 0x18) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) recvmmsg(r8, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x5}], 0x1, 0x2140, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}}, 0x48004) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r11, 0x29, 0x40, 0x0, &(0x7f00000001c0)=0x54) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) ioctl$sock_inet_SIOCGIFPFLAGS(r11, 0x8935, &(0x7f0000000040)={'sit0\x00'}) 18.888868993s ago: executing program 3 (id=2111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20020400}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x19c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x178, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x52570463}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x158, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x104, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x13, 0x6, "1d4484ce78cd72ddd2ff745bc9345a"}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x330}, 0x1, 0x0, 0x0, 0x8811}, 0x8080) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="2f30c8307b0a", 0x6}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0xfffffffb, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x39, 0x8, 0x70bd2a, 0x25dfdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socketpair(0x23, 0x14, 0x81, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc9}]}]}, 0x20}}, 0x48804) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 18.791035652s ago: executing program 3 (id=2112): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000010000006600000000000000730135000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0b8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0759083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2df89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc65c1b1b328277ff85ed56b9261eb7bcee28ec2d3616689ab3f31f849eebce6f21e6302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e27401aa306a7ab7069790da79b7ab45184caffff00009bab066bf7a4ab148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b427ee8d181d2f18d772fb5c58a936620ba1f5fbb48703ab220f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8efe7f93c05adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a746291641b38333ce1c33edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb000000044a6458c31431d58973c93f5e9452258a7098bc3d014afe638a40948498faa261213bc20845526e054d6b3ba5ca8f357df67c41acc28edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef9691863c00085e2dc401325327e54cbfceb400c2663466cd4a79c94b62c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2ebe448cbe850efd24bf7b96ad33abbd3a8b5814b5e7f85d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952662782097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af986f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed5de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d03652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd95e4f897dfba4e44777e6d02a896b650a66d9139696b9c6c36a33eb3adc092bf4586bfab34002f802bbfe6a7679cec20cc25e01f129bbe92a65961fac7bffa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a71dc202c851d99851bc7a62ea705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36cc1223901e56f6ecbabbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f9a42e34eea51692c90320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28743f77b8724487a9b37ca66d20aef8a5236393fce29b0531cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4b774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe2bae2bd4c498a10d4e17dddb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a4307f0e4360651dc7f8924ee7a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed2a8c407fed1a8702e2486386f2ae6347231128be789186ff5651208c8b781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b978e0a5f69671f52401892dba8a63c8f7eb280880dbdcee5d8e8aae9de9d28cbe0de2f4642c4fe69db3b7432b2eb7ca282fbfe030ad6c33a73feef1cd517cedc2c0059e5636ae0fb3969ce7f64c6f4cffcc40ac1331f6b50d4f95c490edd75e8cdba278a602c8a200000000000000000000000091b39eb79b22cc68dde3760f3bd7377b35f4d41a46959070cddc4a9c340455f97ff0ea8c6adbff47a39269b2e90dffa1ec22d41f9da01ec44847a88334e106ff455f9ca2a0b2900591ceac1f0e823eaa7ed5b359eed1a39a6f75e7556ab52ac0c2c46b28f3791edf8f25cc2e6cab30841d3fac1e16443be84d4e9a903df3901f89e13cee8589df43652fbe05a789881dcae97ffdc52363bc61c334480afac09e04f9e5ce0bcd12c997545053b64bb2ba920a1071d2ca692c72965bdc0022f7f147943001a55ed8c7b3181fbfabd2069ac7bd4f9b459463edb8a05d1fde9a0000000000f4304ef01fb54b38377b030f2a0fb38bf286249b0cd112d9d8a3b3d97834e3a1a43008cb3abe4ecf4edb6b46ae11ce456dd5af00b5bfa294de78bd1b52856d6831286f32af84a659e67ae7cf2f4a669770944f50ae3d7a5718adb492cef3221fbd8af33c0d5dd034a5f066c15cf9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x1, 0xcb, 0x6, 0x7c15}]}, 0x10) read(r0, &(0x7f0000000080)=""/186, 0xba) 18.699114519s ago: executing program 3 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x2000003, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4002, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x4008845}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='pim6reg\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @private=0xa010101}, 0x100, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='batadv_slave_1\x00', 0x5, 0xfffffffffffffffa, 0x100}) 18.698504595s ago: executing program 3 (id=2114): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f00000008c0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) (async) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) (async) sendto$netrom(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 18.167660467s ago: executing program 1 (id=2120): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0xd) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x3, 0x9, 0x54, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x8, 0x1, 0x7, 0x8}}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x7, r2}, 0xc) 18.135792626s ago: executing program 1 (id=2121): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x30, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 17.950012606s ago: executing program 1 (id=2122): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r1, r1, 0x0, 0xa) 17.875065429s ago: executing program 1 (id=2123): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) (async) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000040)) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) (async) 17.874088589s ago: executing program 1 (id=2124): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0xba9, 0x1, 0x1}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200183afffe8000000000000000000000000000bbfff7ffffffffffffff0000000000000188009078d7000000fe8000000000000000000000000000bb"], 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200448d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x1) connect$rose(r4, &(0x7f0000000e80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @default}, 0x1c) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00f7ff", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf25040000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r5 = socket$kcm(0x29, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000002c0)=0x3, 0x4) 17.846779474s ago: executing program 1 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000011000001600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f47e1a"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000000)={'batadv0\x00', 0xb290}) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r9, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0xe, 0x2, 0x0, r3}, @generic={0x0, 0x6, 0x8, 0x7fff, 0x9}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0xe5, &(0x7f0000000740)=""/229, 0x41000, 0xa, '\x00', r11, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x4, 0x5, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r0], 0x0, 0x10, 0xe}, 0x94) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000940)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='\'\x00\x00\x00(\x00\x00\x00', @ANYRES32, @ANYBLOB="875ab99129f92b85e2126ebcf414c7f7ae870dd20fd0ba639b2f9a03f559e815b64f1a72", @ANYRES32=r10, @ANYRES64=0x0], 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r13, 0x84, 0x1d, &(0x7f0000000380), 0x8) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r14, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4085, 0xff5}, {&(0x7f0000004680)=""/4094, 0xffe}], 0x3}, 0x0) recvmmsg(r14, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0x810}, {{0x0, 0x0, 0x0}, 0xda02}], 0x4, 0x2002, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r13, 0x8983, &(0x7f0000000040)={0x1, 'bond0\x00', {}, 0x7}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r13, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'nr0\x00', 0x1}, 0x18) ioctl$SIOCSIFHWADDR(r6, 0x8970, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 15.231104878s ago: executing program 0 (id=2130): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x84) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000840)=""/205, 0xcd}], 0x2}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x74, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x6, 0x3, 0x3}}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x4, 0xf8, 0x13, 0x8001}}}}, @NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) 15.23026543s ago: executing program 0 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x8979d398cbba0db7, 0x6, 0xb6, &(0x7f0000000000)) r1 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x840000000002, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@IFLA_MTU={0x8, 0x4, 0x42}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 15.216136956s ago: executing program 0 (id=2132): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x31) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 15.171344901s ago: executing program 0 (id=2133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000200)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r3, 0x518, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x74}}, 0x0) 15.102372517s ago: executing program 0 (id=2134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x15, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0xfffffffd, 0x0, 0x1, 0xc, 0x8, 0x1}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x15, 0x5, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0xfffffffd, 0x0, 0x1, 0xc, 0x8, 0x1}, 0x20) (async) 15.09834279s ago: executing program 0 (id=2135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x27dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x1a9, 0x9b, 0x8, 0xab0, 0xfbf, 0x1, 0x1000001, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240048e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xc0}}, 0x4004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r6, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200041, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000001c0)={'veth1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f00000006c0)="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") r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) write$tun(r10, &(0x7f0000000240)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @random="3e29ea052c49", @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, @multicast, @mcast1}}, 0x34) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) 5.07545263s ago: executing program 32 (id=2066): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000010000000000000000000a802040000000080000000014000200fe800000000000fdffffff00000000bb14000100fe8000000000000000000000000000bb1217beab406ad12f60ac7a59c067886dbc666a2a82e5e7ff2f710c8261147d0d5480897f667d034ec31da9dd41496918200c6e5d9a3c877c6c6daedf9636c63f51e17eb3b8a2363b3b0a0f9983327bfbb28f306c31117cb9b7eef44b6f508a06d49ecafd7c3ba165221642c6d8d20fabf4"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x200005, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0xfa3b6b2883b6fee3) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r14], 0x1c}}, 0x0) write$nci(r11, &(0x7f00000002c0)=ANY=[@ANYBLOB="6f05080301048205060b01930ffd0807034669857a8b45f0f2caeb1a6e29ee07056c0f852ed91ce7bda982fe099fe0f14ce2861a466830d4101a388cce31c072ddb4b80e"], 0x14) 4.05449913s ago: executing program 33 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r2, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 3.034236656s ago: executing program 34 (id=2114): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f00000008c0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) (async) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) (async) sendto$netrom(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.016353194s ago: executing program 35 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000011000001600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f47e1a"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000000)={'batadv0\x00', 0xb290}) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r9, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0xe, 0x2, 0x0, r3}, @generic={0x0, 0x6, 0x8, 0x7fff, 0x9}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0xe5, &(0x7f0000000740)=""/229, 0x41000, 0xa, '\x00', r11, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x4, 0x5, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r0], 0x0, 0x10, 0xe}, 0x94) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000940)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='\'\x00\x00\x00(\x00\x00\x00', @ANYRES32, @ANYBLOB="875ab99129f92b85e2126ebcf414c7f7ae870dd20fd0ba639b2f9a03f559e815b64f1a72", @ANYRES32=r10, @ANYRES64=0x0], 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r13, 0x84, 0x1d, &(0x7f0000000380), 0x8) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r14, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4085, 0xff5}, {&(0x7f0000004680)=""/4094, 0xffe}], 0x3}, 0x0) recvmmsg(r14, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0x810}, {{0x0, 0x0, 0x0}, 0xda02}], 0x4, 0x2002, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r13, 0x8983, &(0x7f0000000040)={0x1, 'bond0\x00', {}, 0x7}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r13, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'nr0\x00', 0x1}, 0x18) ioctl$SIOCSIFHWADDR(r6, 0x8970, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 0s ago: executing program 36 (id=2135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x27dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x1a9, 0x9b, 0x8, 0xab0, 0xfbf, 0x1, 0x1000001, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240048e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xc0}}, 0x4004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r6, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200041, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000001c0)={'veth1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f00000006c0)="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") r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) write$tun(r10, &(0x7f0000000240)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @random="3e29ea052c49", @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, @multicast, @mcast1}}, 0x34) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) kernel console output (not intermixed with test programs): ve_0 [ 72.687022][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.713314][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.724834][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.732273][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.758858][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.787029][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.793999][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.820037][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.847426][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.854381][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.880335][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.897926][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.904895][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.931739][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.979204][ T5837] hsr_slave_0: entered promiscuous mode [ 72.985562][ T5837] hsr_slave_1: entered promiscuous mode [ 73.033090][ T5835] hsr_slave_0: entered promiscuous mode [ 73.039633][ T5835] hsr_slave_1: entered promiscuous mode [ 73.045667][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 73.052098][ T5835] Cannot create hsr debugfs directory [ 73.095108][ T5834] hsr_slave_0: entered promiscuous mode [ 73.101421][ T5834] hsr_slave_1: entered promiscuous mode [ 73.107882][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 73.113613][ T5834] Cannot create hsr debugfs directory [ 73.125916][ T5850] hsr_slave_0: entered promiscuous mode [ 73.132847][ T5850] hsr_slave_1: entered promiscuous mode [ 73.139248][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 73.145076][ T5850] Cannot create hsr debugfs directory [ 73.190742][ T5836] hsr_slave_0: entered promiscuous mode [ 73.197322][ T5836] hsr_slave_1: entered promiscuous mode [ 73.203293][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 73.209550][ T5836] Cannot create hsr debugfs directory [ 73.692715][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.710582][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.720699][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.740102][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.802715][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.819455][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.840678][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.853735][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.921223][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.934530][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.961262][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.982886][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.041993][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.063992][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.078983][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.088778][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.113945][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.202499][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.213808][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.229456][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.239597][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.255377][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.292032][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.299252][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.345656][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.352886][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.430925][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.455198][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.498944][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.531371][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.548201][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.555285][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.570233][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.576610][ T5855] Bluetooth: hci2: command tx timeout [ 74.577397][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.582661][ T5855] Bluetooth: hci1: command tx timeout [ 74.601257][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.642832][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.650040][ T3935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.658818][ T5855] Bluetooth: hci0: command tx timeout [ 74.658851][ T5851] Bluetooth: hci4: command tx timeout [ 74.664548][ T52] Bluetooth: hci3: command tx timeout [ 74.688937][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.700364][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.707531][ T3935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.769673][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.776871][ T3935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.797002][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.831123][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.838244][ T3935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.860507][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.883495][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.890634][ T3935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.928944][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.936046][ T3935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.955736][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.051912][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.198794][ T5837] veth0_vlan: entered promiscuous mode [ 75.231836][ T5837] veth1_vlan: entered promiscuous mode [ 75.327966][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.433107][ T5837] veth0_macvtap: entered promiscuous mode [ 75.470054][ T5837] veth1_macvtap: entered promiscuous mode [ 75.491474][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.532317][ T5850] veth0_vlan: entered promiscuous mode [ 75.554544][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.564419][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.578269][ T5850] veth1_vlan: entered promiscuous mode [ 75.591563][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.615137][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.628806][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.649084][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.658974][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.688861][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.738322][ T5850] veth0_macvtap: entered promiscuous mode [ 75.775947][ T5850] veth1_macvtap: entered promiscuous mode [ 75.814475][ T5834] veth0_vlan: entered promiscuous mode [ 75.868227][ T5834] veth1_vlan: entered promiscuous mode [ 75.883032][ T5835] veth0_vlan: entered promiscuous mode [ 75.923413][ T3834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.941231][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.950025][ T3834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.959695][ T5835] veth1_vlan: entered promiscuous mode [ 76.011508][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.039432][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.050489][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.052946][ T5834] veth0_macvtap: entered promiscuous mode [ 76.079627][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.089576][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.113088][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.122817][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.142246][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.163090][ T5834] veth1_macvtap: entered promiscuous mode [ 76.262117][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.285228][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.307454][ T5835] veth0_macvtap: entered promiscuous mode [ 76.350157][ T3935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.358175][ T5836] veth0_vlan: entered promiscuous mode [ 76.360099][ T3834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.368724][ T3935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.375911][ T3834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.393311][ T5835] veth1_macvtap: entered promiscuous mode [ 76.403302][ T3834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.423327][ T3834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.447881][ T5836] veth1_vlan: entered promiscuous mode [ 76.474177][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.482309][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.491107][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.544807][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.612863][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.656416][ T5855] Bluetooth: hci2: command tx timeout [ 76.658151][ T52] Bluetooth: hci1: command tx timeout [ 76.661948][ T4959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.690694][ T4959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.711253][ T4959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.728499][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.736739][ T52] Bluetooth: hci4: command tx timeout [ 76.736771][ T52] Bluetooth: hci0: command tx timeout [ 76.736791][ T52] Bluetooth: hci3: command tx timeout [ 76.778071][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.803992][ T5836] veth0_macvtap: entered promiscuous mode [ 76.887462][ T5836] veth1_macvtap: entered promiscuous mode [ 76.926033][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.943783][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.966062][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.979363][ T5957] Unsupported xt match [ 76.979380][ T5957] unable to load match [ 76.993274][ T5957] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.059837][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.109902][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.138871][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.170943][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.293911][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.302962][ T4959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.314065][ T4959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.329551][ T5972] sctp: [Deprecated]: syz.2.10 (pid 5972) Use of int in maxseg socket option. [ 77.329551][ T5972] Use struct sctp_assoc_value instead [ 77.350039][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.375449][ T5967] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.413371][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.459363][ T5974] x_tables: duplicate underflow at hook 3 [ 77.481311][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.544953][ T5977] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 77.563863][ T5977] netlink: 'syz.0.11': attribute type 7 has an invalid length. [ 77.613075][ T5977] netlink: 'syz.0.11': attribute type 8 has an invalid length. [ 77.664012][ T5977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11'. [ 77.717336][ T5984] Bluetooth: MGMT ver 1.23 [ 77.799160][ T4959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.844713][ T4959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.905652][ T5989] x_tables: duplicate underflow at hook 3 [ 77.939471][ T5989] x_tables: duplicate underflow at hook 1 [ 77.943311][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.981349][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.240681][ T6002] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 78.258294][ T6007] wg1: entered promiscuous mode [ 78.263193][ T6007] wg1: entered allmulticast mode [ 78.290832][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.403569][ T6013] warning: `syz.1.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.608890][ T6024] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 78.737384][ T5855] Bluetooth: hci1: command tx timeout [ 78.740000][ T52] Bluetooth: hci2: command tx timeout [ 78.816703][ T52] Bluetooth: hci3: command tx timeout [ 78.816726][ T5851] Bluetooth: hci4: command tx timeout [ 78.828067][ T5855] Bluetooth: hci0: command tx timeout [ 79.057619][ T6056] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 79.131788][ T6065] netlink: 204 bytes leftover after parsing attributes in process `syz.2.33'. [ 79.212504][ T6062] team_slave_0: entered promiscuous mode [ 79.218392][ T6062] team_slave_1: entered promiscuous mode [ 79.230074][ T6062] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 79.370730][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'. [ 79.372580][ T6076] Zero length message leads to an empty skb [ 79.428755][ T6078] netlink: 'syz.0.42': attribute type 42 has an invalid length. [ 79.449786][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.42'. [ 79.544423][ T6083] netlink: 'syz.3.44': attribute type 12 has an invalid length. [ 79.559408][ T6086] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.657825][ T6087] vlan2: entered promiscuous mode [ 79.662991][ T6087] geneve1: entered promiscuous mode [ 79.676498][ T6087] vlan2: entered allmulticast mode [ 79.696908][ T6087] geneve1: entered allmulticast mode [ 79.771314][ T6093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.796628][ T6093] netlink: 'syz.4.48': attribute type 3 has an invalid length. [ 79.859024][ T6093] netlink: 666 bytes leftover after parsing attributes in process `syz.4.48'. [ 79.881745][ T6099] syzkaller1: entered promiscuous mode [ 79.891191][ T6099] syzkaller1: entered allmulticast mode [ 79.902762][ T6095] syzkaller0: entered promiscuous mode [ 79.921060][ T6095] syzkaller0: entered allmulticast mode [ 79.927142][ T6099] Illegal XDP return value 3323584600 on prog (id 11) dev N/A, expect packet loss! [ 79.974136][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 79.992483][ T6107] ieee802154 phy0 wpan0: encryption failed: -90 [ 80.057034][ T6109] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 80.069342][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 80.079874][ T6109] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 82.981417][ T6115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.007105][ T6112] netlink: 64 bytes leftover after parsing attributes in process `syz.2.54'. [ 83.283876][ T6139] openvswitch: netlink: Message has 16 unknown bytes. [ 83.657551][ T6164] netlink: zone id is out of range [ 83.664067][ T6164] netlink: zone id is out of range [ 83.675098][ T6164] netlink: zone id is out of range [ 83.680409][ T6164] netlink: zone id is out of range [ 83.685721][ T6164] netlink: zone id is out of range [ 83.692320][ T6164] netlink: zone id is out of range [ 83.705811][ T6164] netlink: zone id is out of range [ 83.939233][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 83.971258][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 84.020845][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.030753][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 84.043892][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.053638][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 84.063428][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.110101][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.174610][ T6187] syzkaller1: entered promiscuous mode [ 84.186372][ T6187] syzkaller1: entered allmulticast mode [ 84.265299][ T6191] team0: Device gtp0 is up. Set it down before adding it as a team port [ 84.477572][ T6202] tipc: Failed to obtain node identity [ 84.508785][ T6202] tipc: Enabling of bearer rejected, failed to enable media [ 84.706445][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 84.859923][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 84.883901][ T6227] bridge_slave_0: left allmulticast mode [ 84.944517][ T6227] bridge_slave_0: left promiscuous mode [ 84.987991][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.040186][ T6227] bridge_slave_1: left allmulticast mode [ 85.046114][ T6227] bridge_slave_1: left promiscuous mode [ 85.052634][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.071185][ T6227] bond0: (slave bond_slave_0): Releasing backup interface [ 85.095482][ T6227] bond0: (slave bond_slave_1): Releasing backup interface [ 85.119483][ T6227] team0: Port device team_slave_0 removed [ 85.134951][ T6227] team0: Port device team_slave_1 removed [ 85.145975][ T6249] netlink: 212 bytes leftover after parsing attributes in process `syz.1.97'. [ 85.155927][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.156572][ T6249] netlink: 96 bytes leftover after parsing attributes in process `syz.1.97'. [ 85.173419][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.176379][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'. [ 85.193160][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.211570][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.225423][ T6227] net_ratelimit: 47 callbacks suppressed [ 85.225439][ T6227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.425982][ T6262] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 85.692376][ T6278] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 85.711812][ T6278] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 86.107073][ T5894] IPVS: starting estimator thread 0... [ 86.134648][ T6312] tipc: Started in network mode [ 86.147542][ T6312] tipc: Node identity 16548a26092e, cluster identity 4711 [ 86.157989][ T6312] tipc: Enabled bearer , priority 0 [ 86.207093][ T6311] IPVS: using max 33 ests per chain, 79200 per kthread [ 86.243060][ T6312] syzkaller0: entered promiscuous mode [ 86.248999][ T6312] syzkaller0: entered allmulticast mode [ 86.265727][ T6312] tipc: Resetting bearer [ 86.370104][ T3572] tipc: Resetting bearer [ 86.525707][ T6309] tipc: Resetting bearer [ 86.761214][ T48] cfg80211: failed to load regulatory.db [ 87.372736][ T6309] tipc: Disabling bearer [ 87.418394][ T5894] tipc: Node number set to 528124454 [ 87.721466][ T6374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.981725][ T6401] x_tables: duplicate underflow at hook 2 [ 88.102129][ T6408] __nla_validate_parse: 15 callbacks suppressed [ 88.102147][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.145'. [ 88.199926][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.296066][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.303820][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.465738][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.483189][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.667742][ T3735] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.714153][ T3735] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.728728][ T3735] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.744649][ T3735] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.746820][ T6426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.149'. [ 88.773197][ T6426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.149'. [ 88.827839][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 89.054312][ T6450] netlink: 'syz.3.158': attribute type 11 has an invalid length. [ 89.090174][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 89.151255][ T6458] netlink: 68 bytes leftover after parsing attributes in process `syz.2.160'. [ 89.195885][ T6461] netlink: 52 bytes leftover after parsing attributes in process `syz.3.161'. [ 89.596571][ T6494] netlink: 348 bytes leftover after parsing attributes in process `syz.2.169'. [ 89.629318][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 89.639749][ T6495] netlink: 816 bytes leftover after parsing attributes in process `syz.3.167'. [ 90.161921][ T6528] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 90.443803][ T6546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.547422][ T6558] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 90.572925][ T6550] bond1: invalid ARP target 0.0.0.0 specified for addition [ 90.586277][ T6550] bond1: option arp_ip_target: invalid value (0) [ 90.611507][ T6550] bond1 (unregistering): Released all slaves [ 90.784942][ T6570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.991763][ T6588] tls_set_device_offload: netdev not found [ 91.189457][ T6607] openvswitch: netlink: IP tunnel dst address not specified [ 91.315272][ T6613] : renamed from veth1_vlan (while UP) [ 91.379708][ T6620] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554436, id = 0 [ 91.380348][ T6618] IPVS: stopping master sync thread 6620 ... [ 91.517212][ T6627] nbd: must specify at least one socket [ 91.604310][ T6633] bond1 (unregistering): Released all slaves [ 91.872783][ T6655] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 91.911205][ T6655] bond1 (unregistering): Released all slaves [ 92.227836][ T6681] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 92.267799][ T6681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.310917][ T6681] veth3: entered promiscuous mode [ 92.328902][ T6681] bond1: (slave veth3): Enslaving as an active interface with an up link [ 92.505445][ T6696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.878982][ T6726] netlink: 'syz.4.238': attribute type 1 has an invalid length. [ 92.948220][ T6726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.996071][ T6715] bond2: (slave veth5): Enslaving as an active interface with a down link [ 93.008884][ T6726] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 93.056982][ T5945] IPVS: starting estimator thread 0... [ 93.117147][ T6735] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 93.120846][ T6715] bond2: (slave veth7): Enslaving as an active interface with a down link [ 93.162167][ T6735] vlan3: entered allmulticast mode [ 93.176762][ T6734] IPVS: using max 28 ests per chain, 67200 per kthread [ 93.198190][ T6739] __nla_validate_parse: 20 callbacks suppressed [ 93.198206][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 93.214237][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 93.350961][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 93.351113][ T6748] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.247'. [ 93.443129][ T6751] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.451463][ T6751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.458922][ T6751] IPv6: NLM_F_CREATE should be set when creating new route [ 93.477098][ T6732] infiniband !yz!: set active [ 93.482114][ T6732] infiniband !yz!: added team_slave_0 [ 93.493653][ T6751] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 93.561612][ T6751] bond1 (unregistering): Released all slaves [ 93.595698][ T6732] RDS/IB: !yz!: added [ 93.602345][ T6761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.248'. [ 93.606510][ T6732] smc: adding ib device !yz! with port count 1 [ 93.620902][ T6732] smc: ib device !yz! port 1 has no pnetid [ 93.680309][ T6752] bond1 (unregistering): Released all slaves [ 94.056946][ T6782] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 94.073480][ T6779] raw_sendmsg: syz.3.255 forgot to set AF_INET. Fix it! [ 94.106917][ T6786] netlink: 'syz.4.258': attribute type 21 has an invalid length. [ 94.136323][ T6786] netlink: 'syz.4.258': attribute type 22 has an invalid length. [ 94.168436][ T6786] netlink: 'syz.4.258': attribute type 23 has an invalid length. [ 94.199327][ T6786] netlink: 'syz.4.258': attribute type 25 has an invalid length. [ 94.207144][ T6786] netlink: 96 bytes leftover after parsing attributes in process `syz.4.258'. [ 94.243522][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 94.252761][ T6786] netlink: 44 bytes leftover after parsing attributes in process `syz.4.258'. [ 94.286275][ T6795] netlink: 176 bytes leftover after parsing attributes in process `syz.0.260'. [ 94.310407][ T6795] netlink: 'syz.0.260': attribute type 5 has an invalid length. [ 94.441198][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 94.741638][ T6820] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 95.020234][ T6832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.030167][ T6831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.157209][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053cb6000: rx timeout, send abort [ 95.167009][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888053cb6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.629815][ T6859] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 95.669365][ T6863] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 95.803614][ T6864] bond1 (unregistering): Released all slaves [ 95.828371][ T6863] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 96.387215][ T6922] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 97.008571][ T6955] block nbd0: not configured, cannot reconfigure [ 97.365882][ T6943] infiniband syz2: set down [ 97.372267][ T6943] infiniband syz2: added ipvlan0 [ 97.450268][ T6943] RDS/IB: syz2: added [ 97.457199][ T6980] validate_nla: 3 callbacks suppressed [ 97.457211][ T6980] netlink: 'syz.0.314': attribute type 12 has an invalid length. [ 97.480165][ T6943] smc: adding ib device syz2 with port count 1 [ 97.484023][ T6980] netlink: 'syz.0.314': attribute type 29 has an invalid length. [ 97.494690][ T6980] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 97.495867][ T6984] xt_TCPMSS: Only works on TCP SYN packets [ 97.514659][ T6943] smc: ib device syz2 port 1 has no pnetid [ 97.557081][ T6989] Cannot find add_set index 0 as target [ 97.599477][ T6988] pim6reg1: entered promiscuous mode [ 97.604816][ T6988] pim6reg1: entered allmulticast mode [ 97.764936][ T6998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.766710][ T6999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.884083][ T6999] syz.2.322 (6999) used greatest stack depth: 17656 bytes left [ 97.957053][ T7008] xt_hashlimit: size too large, truncated to 1048576 [ 98.164853][ T7017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.188855][ T7018] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 98.492424][ T7032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.584749][ T7032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.828548][ T7053] openvswitch: netlink: Flow key attr not present in new flow. [ 98.907808][ T7055] tap0: tun_chr_ioctl cmd 1074025678 [ 98.913220][ T7055] tap0: group set to 0 [ 99.056586][ T7063] netlink: 'syz.0.344': attribute type 2 has an invalid length. [ 99.064604][ T7063] __nla_validate_parse: 24 callbacks suppressed [ 99.064621][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 99.317372][ T7081] netlink: 'syz.0.350': attribute type 1 has an invalid length. [ 99.344807][ T7080] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 99.382662][ T7080] bond1: (slave lo): Enslaving as a backup interface with an up link [ 99.387019][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'. [ 99.407726][ T7080] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 99.465718][ T7081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.504101][ T7085] gretap1: entered promiscuous mode [ 99.514172][ T7085] bond1: (slave gretap1): making interface the new active one [ 99.555041][ T7085] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 99.572420][ T7082] macvlan2: entered promiscuous mode [ 99.590875][ T7082] macvlan2: entered allmulticast mode [ 99.617392][ T7082] bond1: entered promiscuous mode [ 99.623799][ T7082] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.628863][ T7092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.352'. [ 99.633885][ T7082] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 99.697246][ T7082] bond1: left promiscuous mode [ 99.703157][ T7096] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 99.711236][ T7096] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 99.719096][ T7096] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.354'. [ 99.904909][ T7095] syzkaller0: entered promiscuous mode [ 99.959971][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 99.980120][ T7095] syzkaller0: entered allmulticast mode [ 101.053895][ T7136] syzkaller1: entered promiscuous mode [ 101.080267][ T7136] syzkaller1: entered allmulticast mode [ 101.185125][ T7143] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 101.196880][ T7143] bond1 (unregistering): Released all slaves [ 101.231335][ T7144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.245184][ T7146] syzkaller0: entered promiscuous mode [ 101.252393][ T7146] syzkaller0: entered allmulticast mode [ 101.332538][ T7146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.367'. [ 101.350143][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'. [ 101.610633][ T7177] netlink: 48 bytes leftover after parsing attributes in process `syz.3.372'. [ 101.672044][ T7158] netlink: 72 bytes leftover after parsing attributes in process `syz.3.372'. [ 103.354072][ T7245] netlink: 300 bytes leftover after parsing attributes in process `syz.3.395'. [ 104.594863][ T7267] __nla_validate_parse: 1 callbacks suppressed [ 104.594880][ T7267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.403'. [ 104.642085][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 104.788899][ T7276] veth1_macvtap: left promiscuous mode [ 104.882113][ T7284] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 104.885023][ T7281] gre0: entered promiscuous mode [ 104.910069][ T7281] gre0: entered allmulticast mode [ 104.965403][ T7284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.987907][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 105.055012][ T7290] bond2: (slave veth3): Enslaving as an active interface with a down link [ 105.177297][ T7284] bond2: (slave veth0_to_bond): making interface the new active one [ 105.213738][ T7284] veth0_to_bond: entered promiscuous mode [ 105.248066][ T7284] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 105.317040][ T7290] bond2: entered promiscuous mode [ 105.327646][ T7290] bond2: entered allmulticast mode [ 105.342353][ T7290] veth0_to_bond: entered allmulticast mode [ 105.359103][ T7315] netlink: 108 bytes leftover after parsing attributes in process `syz.2.413'. [ 105.386612][ T7315] netlink: 108 bytes leftover after parsing attributes in process `syz.2.413'. [ 105.425254][ T7315] netlink: 108 bytes leftover after parsing attributes in process `syz.2.413'. [ 105.627476][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.416'. [ 105.662710][ T7324] netlink: 'syz.4.416': attribute type 63 has an invalid length. [ 105.728521][ T7324] netlink: 'syz.4.416': attribute type 63 has an invalid length. [ 106.053773][ T7352] netlink: 96 bytes leftover after parsing attributes in process `syz.4.424'. [ 106.202408][ T7369] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 106.285046][ T7369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.331111][ T7374] bond3: (slave geneve2): making interface the new active one [ 106.343095][ T7374] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 106.352778][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.388546][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.402655][ T7369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.424485][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.474832][ T7385] sit0: entered promiscuous mode [ 106.485278][ T7385] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 106.494813][ T7385] netlink: 1 bytes leftover after parsing attributes in process `syz.0.431'. [ 106.506816][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.539737][ T7388] netlink: 260 bytes leftover after parsing attributes in process `syz.4.432'. [ 107.026687][ T7427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.398728][ T7450] x_tables: duplicate underflow at hook 1 [ 107.615171][ T7462] Cannot find add_set index 0 as target [ 107.804971][ T3462] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.822484][ T3462] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.873248][ T3462] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.899266][ T3462] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.044546][ T7490] netlink: 'syz.2.455': attribute type 2 has an invalid length. [ 108.074684][ T7490] netlink: 'syz.2.455': attribute type 8 has an invalid length. [ 108.120414][ T7480] veth3: entered promiscuous mode [ 108.149579][ T7480] veth3: entered allmulticast mode [ 108.342795][ T7502] syzkaller0: entered promiscuous mode [ 108.367350][ T7502] syzkaller0: entered allmulticast mode [ 108.716909][ T7516] veth5: entered allmulticast mode [ 108.807283][ T7523] netlink: 'syz.4.461': attribute type 10 has an invalid length. [ 109.193988][ T7546] team0: No ports can be present during mode change [ 109.620511][ T7566] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 109.635684][ T7566] bond1 (unregistering): Released all slaves [ 109.670006][ T7577] tipc: Started in network mode [ 109.674916][ T7577] tipc: Node identity ac14140f, cluster identity 4711 [ 109.686839][ T7577] tipc: New replicast peer: 255.255.255.255 [ 109.717949][ T7577] tipc: Enabled bearer , priority 10 [ 110.001401][ T7598] veth0: entered promiscuous mode [ 110.023666][ T7598] veth0: left promiscuous mode [ 110.093786][ T7607] netlink: 'syz.1.481': attribute type 4 has an invalid length. [ 110.283512][ T7615] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 110.313249][ T7616] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 110.447826][ T7625] netlink: 'syz.4.487': attribute type 12 has an invalid length. [ 110.526220][ T7633] __nla_validate_parse: 9 callbacks suppressed [ 110.526236][ T7633] netlink: 204 bytes leftover after parsing attributes in process `syz.4.489'. [ 110.730623][ T7645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.747414][ T5894] tipc: Node number set to 2886997007 [ 110.956340][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 110.965158][ T7664] netlink: 224 bytes leftover after parsing attributes in process `syz.4.497'. [ 111.002150][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 111.368394][ T7717] netlink: 'syz.0.506': attribute type 9 has an invalid length. [ 111.381496][ T7717] netlink: 'syz.0.506': attribute type 11 has an invalid length. [ 111.406484][ T7717] netlink: 'syz.0.506': attribute type 12 has an invalid length. [ 111.419219][ T7717] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.506'. [ 111.463534][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 111.649162][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 111.688741][ T7738] xt_cgroup: xt_cgroup: no path or classid specified [ 111.815384][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.515'. [ 111.868023][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 111.964038][ T7753] netlink: 'syz.0.520': attribute type 4 has an invalid length. [ 111.997022][ T7753] netlink: 'syz.0.520': attribute type 4 has an invalid length. [ 112.111822][ T7770] syzkaller0: entered promiscuous mode [ 112.119320][ T7770] syzkaller0: entered allmulticast mode [ 112.160450][ T7772] xt_CONNSECMARK: invalid mode: 0 [ 112.161804][ T7770] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.180744][ T7770] tipc: Started in network mode [ 112.184901][ T7774] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.185761][ T7770] tipc: Node identity , cluster identity 4711 [ 112.200284][ T7770] tipc: Failed to obtain node identity [ 112.205935][ T7770] tipc: Enabling of bearer rejected, failed to enable media [ 112.282024][ T7778] IPVS: Unknown mcast interface: rose0 [ 112.338742][ T7781] netlink: 248 bytes leftover after parsing attributes in process `syz.4.530'. [ 112.431290][ T7791] x_tables: duplicate underflow at hook 1 [ 112.438907][ T7790] netlink: 'syz.3.532': attribute type 12 has an invalid length. [ 112.549984][ T7798] sctp: [Deprecated]: syz.3.535 (pid 7798) Use of int in max_burst socket option deprecated. [ 112.549984][ T7798] Use struct sctp_assoc_value instead [ 112.636839][ T7802] IPVS: length: 25 != 24 [ 112.912690][ T7819] Cannot find add_set index 2 as target [ 113.770333][ T7879] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 113.791168][ T7879] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 114.014424][ T7893] Cannot find add_set index 2 as target [ 114.021192][ T7893] syz_tun: entered allmulticast mode [ 114.029567][ T7892] syz_tun: left allmulticast mode [ 114.222090][ T7908] IPVS: length: 239 != 24 [ 114.253513][ T7908] vlan0: entered promiscuous mode [ 114.269978][ T7908] vlan0: entered allmulticast mode [ 114.284406][ T7908] veth0_vlan: entered allmulticast mode [ 114.317806][ T7910] syzkaller1: entered promiscuous mode [ 114.327621][ T7910] syzkaller1: entered allmulticast mode [ 114.427976][ T7916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.460170][ T7917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.561338][ T7903] lec:lec_atm_close: lec0: Shut down! [ 114.679362][ T4959] tipc: Subscription rejected, illegal request [ 114.709847][ T7930] netlink: 'syz.4.574': attribute type 5 has an invalid length. [ 114.736366][ T7930] netlink: 'syz.4.574': attribute type 6 has an invalid length. [ 114.879399][ T7945] 8021q: VLANs not supported on gre0 [ 115.057142][ T7954] tipc: MTU too low for tipc bearer [ 115.315542][ T7970] smc: net device team0 applied user defined pnetid SYZ2 [ 115.496256][ T7980] v: renamed from vlan0 [ 115.611866][ T7989] __nla_validate_parse: 27 callbacks suppressed [ 115.611885][ T7989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.591'. [ 115.642777][ T7995] netlink: 'syz.1.594': attribute type 12 has an invalid length. [ 115.651422][ T7995] netlink: 'syz.1.594': attribute type 29 has an invalid length. [ 115.675950][ T7995] netlink: 148 bytes leftover after parsing attributes in process `syz.1.594'. [ 115.689364][ T7995] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 115.697527][ T7995] netlink: 'syz.1.594': attribute type 2 has an invalid length. [ 115.709625][ T7995] netlink: 31 bytes leftover after parsing attributes in process `syz.1.594'. [ 115.730732][ T7994] netlink: 'syz.1.594': attribute type 12 has an invalid length. [ 115.746300][ T7994] netlink: 'syz.1.594': attribute type 29 has an invalid length. [ 115.763412][ T7994] netlink: 148 bytes leftover after parsing attributes in process `syz.1.594'. [ 115.784815][ T7994] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 115.796409][ T7994] netlink: 'syz.1.594': attribute type 2 has an invalid length. [ 115.804297][ T7994] netlink: 31 bytes leftover after parsing attributes in process `syz.1.594'. [ 115.957748][ T8011] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 115.978765][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 116.102565][ T8026] syzkaller0: entered promiscuous mode [ 116.119303][ T8026] syzkaller0: entered allmulticast mode [ 116.141855][ T8024] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 116.155609][ T8029] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 116.304786][ T8037] syzkaller0: entered promiscuous mode [ 116.311876][ T8037] syzkaller0: entered allmulticast mode [ 116.325655][ T8045] lo: entered allmulticast mode [ 116.438028][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 116.450206][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 116.451828][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 116.488198][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 116.500512][ T8045] lo: left allmulticast mode [ 116.683113][ T8070] nbd: socks must be embedded in a SOCK_ITEM attr [ 117.414161][ T8116] bond4: (slave gretap0): Device is not bonding slave [ 117.421182][ T8116] bond4: option active_slave: invalid value (gretap0) [ 117.441106][ T8116] bond4 (unregistering): Released all slaves [ 117.666954][ T8144] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 117.688160][ T8143] 8021q: VLANs not supported on ip6tnl0 [ 117.762675][ T8144] bond4: entered promiscuous mode [ 117.770857][ T8144] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.910993][ T8156] bond0: entered promiscuous mode [ 117.924876][ T8156] bond_slave_0: entered promiscuous mode [ 117.939516][ T8156] bond_slave_1: entered promiscuous mode [ 117.952421][ T8156] ip6gretap0: entered promiscuous mode [ 117.967848][ T8156] gretap0: entered promiscuous mode [ 117.987032][ T8156] hsr1: entered promiscuous mode [ 118.074443][ T8170] openvswitch: netlink: Flow actions attr not present in new flow. [ 118.254777][ T8182] vlan2: entered allmulticast mode [ 118.464087][ T8198] xt_hashlimit: size too large, truncated to 1048576 [ 119.426129][ T8265] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 119.534315][ T8271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.624616][ T8273] bond_slave_0: entered promiscuous mode [ 119.630545][ T8273] bond_slave_1: entered promiscuous mode [ 119.665309][ T8273] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 119.675426][ T8273] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 119.710941][ T8283] syzkaller0: entered promiscuous mode [ 119.719277][ T8283] syzkaller0: entered allmulticast mode [ 119.907486][ T8298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.039377][ T8305] veth11: entered promiscuous mode [ 120.044653][ T8305] veth11: entered allmulticast mode [ 120.077281][ T8304] bond0: (slave macvlan2): Opening slave failed [ 120.557030][ T8341] : renamed from hsr0 (while UP) [ 120.725912][ T8355] validate_nla: 7 callbacks suppressed [ 120.725929][ T8355] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 120.853787][ T8355] __nla_validate_parse: 19 callbacks suppressed [ 120.853806][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 120.885863][ T8355] bond3 (unregistering): Released all slaves [ 120.895360][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 120.985278][ T8380] netlink: 'syz.3.713': attribute type 3 has an invalid length. [ 121.117900][ T8385] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 121.161539][ T8392] trusted_key: syz.0.717 sent an empty control message without MSG_MORE. [ 121.330758][ T8409] syz.4.722: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 121.356518][ T8409] CPU: 1 UID: 0 PID: 8409 Comm: syz.4.722 Not tainted syzkaller #0 PREEMPT(full) [ 121.356543][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.356560][ T8409] Call Trace: [ 121.356570][ T8409] [ 121.356577][ T8409] dump_stack_lvl+0x189/0x250 [ 121.356608][ T8409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.356626][ T8409] ? __pfx__printk+0x10/0x10 [ 121.356647][ T8409] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 121.356672][ T8409] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 121.356696][ T8409] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 121.356720][ T8409] warn_alloc+0x214/0x310 [ 121.356744][ T8409] ? __pfx_warn_alloc+0x10/0x10 [ 121.356773][ T8409] ? __get_vm_area_node+0x28f/0x300 [ 121.356793][ T8409] ? htable_create+0x101/0x7a0 [ 121.356817][ T8409] __vmalloc_node_range_noprof+0x690/0x12d0 [ 121.356866][ T8409] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.356886][ T8409] ? htable_create+0x101/0x7a0 [ 121.356909][ T8409] ? rcu_is_watching+0x15/0xb0 [ 121.356928][ T8409] ? htable_create+0x101/0x7a0 [ 121.356949][ T8409] __kvmalloc_node_noprof+0x670/0x910 [ 121.356971][ T8409] ? htable_create+0x101/0x7a0 [ 121.356997][ T8409] ? hashlimit_pernet+0x23/0x240 [ 121.357018][ T8409] ? hashlimit_pernet+0x23/0x240 [ 121.357037][ T8409] ? hashlimit_pernet+0x23/0x240 [ 121.357064][ T8409] htable_create+0x101/0x7a0 [ 121.357092][ T8409] hashlimit_mt_check_common+0x719/0xa10 [ 121.357124][ T8409] hashlimit_mt_check_v1+0x221/0x360 [ 121.357149][ T8409] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 121.357177][ T8409] ? xt_find_match+0x1f7/0x250 [ 121.357204][ T8409] xt_check_match+0x3d1/0xab0 [ 121.357231][ T8409] ? __pfx_xt_check_match+0x10/0x10 [ 121.357254][ T8409] ? pcpu_alloc_noprof+0xf95/0x1750 [ 121.357285][ T8409] ? xt_find_match+0x1f7/0x250 [ 121.357312][ T8409] translate_table+0x150b/0x2000 [ 121.357355][ T8409] ? __pfx_translate_table+0x10/0x10 [ 121.357378][ T8409] ? __might_fault+0xb0/0x130 [ 121.357417][ T8409] ? _copy_from_user+0x94/0xb0 [ 121.357444][ T8409] do_ipt_set_ctl+0x967/0xcd0 [ 121.357468][ T8409] ? rcu_is_watching+0x15/0xb0 [ 121.357487][ T8409] ? trace_contention_end+0x39/0x100 [ 121.357506][ T8409] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 121.357549][ T8409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.357581][ T8409] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.357610][ T8409] nf_setsockopt+0x26f/0x290 [ 121.357632][ T8409] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.357654][ T8409] do_sock_setsockopt+0x17c/0x1b0 [ 121.357682][ T8409] __x64_sys_setsockopt+0x13f/0x1b0 [ 121.357709][ T8409] do_syscall_64+0xfa/0xf80 [ 121.357730][ T8409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.357746][ T8409] ? clear_bhb_loop+0x60/0xb0 [ 121.357766][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.357781][ T8409] RIP: 0033:0x7f1f3558f749 [ 121.357797][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.357811][ T8409] RSP: 002b:00007f1f363de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.357828][ T8409] RAX: ffffffffffffffda RBX: 00007f1f357e6090 RCX: 00007f1f3558f749 [ 121.357840][ T8409] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000008 [ 121.357850][ T8409] RBP: 00007f1f35613f91 R08: 0000000000000448 R09: 0000000000000000 [ 121.357860][ T8409] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 121.357870][ T8409] R13: 00007f1f357e6128 R14: 00007f1f357e6090 R15: 00007ffc1e95a528 [ 121.357901][ T8409] [ 121.357916][ T8409] Mem-Info: [ 121.500531][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.724'. [ 121.508190][ T8409] active_anon:4620 inactive_anon:0 isolated_anon:0 [ 121.508190][ T8409] active_file:2565 inactive_file:39895 isolated_file:0 [ 121.508190][ T8409] unevictable:768 dirty:105 writeback:0 [ 121.508190][ T8409] slab_reclaimable:11891 slab_unreclaimable:102104 [ 121.508190][ T8409] mapped:28875 shmem:1357 pagetables:1081 [ 121.508190][ T8409] sec_pagetables:0 bounce:0 [ 121.508190][ T8409] kernel_misc_reclaimable:0 [ 121.508190][ T8409] free:1324547 free_pcp:15537 free_cma:0 [ 121.611868][ T8422] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.727'. [ 121.613111][ T8409] Node 0 active_anon:18680kB inactive_anon:0kB active_file:10260kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115500kB dirty:420kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13088kB pagetables:4180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.811101][ T8409] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.853415][ T8431] netlink: 'syz.3.726': attribute type 33 has an invalid length. [ 121.871183][ T8409] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.901473][ T8409] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 121.907419][ T8409] Node 0 DMA32 free:1397088kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18800kB inactive_anon:0kB active_file:10260kB inactive_file:159376kB unevictable:1536kB writepending:420kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:40008kB local_pcp:18796kB free_cma:0kB [ 121.942148][ T8409] lowmem_reserve[]: 0 0 0 0 0 [ 121.947364][ T8409] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.984056][ T8417] geneve2: entered promiscuous mode [ 121.985301][ T8409] lowmem_reserve[]: 0 0 0 0 0 [ 121.995361][ T8409] Node 1 Normal free:3885804kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20640kB local_pcp:10560kB free_cma:0kB [ 122.028204][ T8409] lowmem_reserve[]: 0 0 0 0 0 [ 122.032945][ T8409] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.045838][ T8409] Node 0 DMA32: 1158*4kB (UME) 629*8kB (UME) 174*16kB (UME) 429*32kB (UM) 139*64kB (UME) 106*128kB (UM) 83*256kB (UM) 41*512kB (UM) 22*1024kB (UME) 7*2048kB (UM) 310*4096kB (UM) = 1397504kB [ 122.065354][ T8409] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 122.076934][ T8409] Node 1 Normal: 185*4kB (UME) 43*8kB (UME) 35*16kB (UME) 82*32kB (UME) 31*64kB (UME) 5*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3885804kB [ 122.095379][ T8409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.105745][ T8409] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.115126][ T8409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.125197][ T8409] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.134576][ T8409] 43812 total pagecache pages [ 122.141426][ T8409] 0 pages in swap cache [ 122.150669][ T8409] Free swap = 124996kB [ 122.154395][ T8431] team_slave_0: left promiscuous mode [ 122.154951][ T8409] Total swap = 124996kB [ 122.164779][ T8409] 2097051 pages RAM [ 122.169013][ T8409] 0 pages HighMem/MovableOnly [ 122.169182][ T8431] team_slave_1: left promiscuous mode [ 122.173863][ T8409] 424280 pages reserved [ 122.247722][ T8409] 0 pages cma reserved [ 122.319140][ T8434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.729'. [ 122.537054][ T8455] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 122.586843][ T8455] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 122.617843][ T8455] netlink: 56 bytes leftover after parsing attributes in process `syz.2.735'. [ 122.738786][ T8469] netem: change failed [ 122.749351][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 122.749670][ T8469] netlink: 252 bytes leftover after parsing attributes in process `syz.0.737'. [ 122.765631][ T8471] netlink: 64 bytes leftover after parsing attributes in process `syz.2.740'. [ 122.830997][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 122.886497][ T8469] team1: entered promiscuous mode [ 122.897596][ T8469] team1: entered allmulticast mode [ 123.003151][ T8482] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 123.070318][ T8488] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.105693][ T8482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.117551][ T8482] bond2: (slave bond3): making interface the new active one [ 123.125602][ T8482] bond2: (slave bond3): Enslaving as an active interface with an up link [ 123.194933][ T8495] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 123.212199][ T8482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.608635][ T8529] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 123.655707][ T8532] netlink: 'syz.1.759': attribute type 7 has an invalid length. [ 124.061597][ T8554] netlink: 'syz.3.766': attribute type 10 has an invalid length. [ 124.093624][ T8554] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 124.104933][ T8554] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.180631][ T8558] tipc: Started in network mode [ 124.185544][ T8558] tipc: Node identity 5eced7883303, cluster identity 4711 [ 124.199635][ T8558] tipc: Enabled bearer , priority 0 [ 124.233367][ T8562] syzkaller0: entered promiscuous mode [ 124.239358][ T8562] syzkaller0: entered allmulticast mode [ 124.254916][ T8558] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 124.308132][ T8558] tipc: Resetting bearer [ 124.328572][ T8557] tipc: Resetting bearer [ 124.344515][ T8557] tipc: Disabling bearer [ 124.565995][ T8584] geneve2: entered promiscuous mode [ 124.575702][ T8584] geneve2: entered allmulticast mode [ 124.712003][ T8595] syzkaller1: entered promiscuous mode [ 124.728814][ T8595] syzkaller1: entered allmulticast mode [ 124.872383][ T8612] gtp1: entered promiscuous mode [ 124.887193][ T8612] gtp1: entered allmulticast mode [ 124.911267][ T8615] gtp2: entered promiscuous mode [ 124.921938][ T8615] gtp2: entered allmulticast mode [ 125.369003][ T8652] netlink: 'syz.1.795': attribute type 16 has an invalid length. [ 125.409202][ T8659] openvswitch: netlink: IP tunnel dst address not specified [ 125.468242][ T8663] bond2: (slave veth0_to_bond): Releasing active interface [ 125.643215][ T8681] --map-set only usable from mangle table [ 125.652563][ T8675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.811077][ T8691] netlink: 'syz.2.807': attribute type 6 has an invalid length. [ 125.877789][ T8695] __nla_validate_parse: 20 callbacks suppressed [ 125.877807][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 125.910914][ T8695] bond0: entered promiscuous mode [ 125.930748][ T8695] bond0: left promiscuous mode [ 125.982069][ T8707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 126.222517][ T8732] netlink: 'syz.2.814': attribute type 13 has an invalid length. [ 126.568618][ T8745] netlink: 'syz.1.819': attribute type 3 has an invalid length. [ 126.822929][ T8776] xfrm0: entered promiscuous mode [ 126.844993][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 126.854041][ T8778] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 126.882075][ T8777] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 126.896481][ T8777] netlink: 'syz.4.827': attribute type 7 has an invalid length. [ 126.898421][ T8778] netlink: 'syz.4.827': attribute type 7 has an invalid length. [ 126.908692][ T8777] netlink: 'syz.4.827': attribute type 8 has an invalid length. [ 126.932922][ T8781] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 126.934023][ T8776] syzkaller0: entered promiscuous mode [ 126.940686][ T8781] netlink: 224 bytes leftover after parsing attributes in process `syz.0.829'. [ 126.946324][ T8776] syzkaller0: entered allmulticast mode [ 126.964139][ T8778] netlink: 'syz.4.827': attribute type 8 has an invalid length. [ 126.972362][ T8777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.827'. [ 126.984257][ T8778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.827'. [ 128.373515][ T8814] netlink: 152 bytes leftover after parsing attributes in process `syz.0.836'. [ 128.415074][ T8815] bond_slave_0: left promiscuous mode [ 128.432937][ T8815] bond_slave_1: left promiscuous mode [ 128.443541][ T8815] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 128.468642][ T8815] bond0: entered promiscuous mode [ 128.473714][ T8815] bond_slave_0: entered promiscuous mode [ 128.509275][ T8815] bond_slave_1: entered promiscuous mode [ 128.532601][ T8815] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 128.549418][ T8830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.844'. [ 128.568648][ T8830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.844'. [ 128.597506][ T8828] xt_hashlimit: size too large, truncated to 1048576 [ 128.758001][ T8842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.765287][ T8842] IPv6: NLM_F_CREATE should be set when creating new route [ 128.772554][ T8842] IPv6: NLM_F_CREATE should be set when creating new route [ 129.025359][ T8876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.849'. [ 129.146596][ T8876] openvswitch: netlink: Flow key attr not present in new flow. [ 129.295348][ T8887] netlink: 596 bytes leftover after parsing attributes in process `syz.2.851'. [ 129.348628][ T8842] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 129.371595][ T8842] bond5 (unregistering): Released all slaves [ 129.727172][ T8904] syzkaller0: entered promiscuous mode [ 129.746542][ T8904] syzkaller0: entered allmulticast mode [ 130.656011][ T8967] openvswitch: netlink: EtherType 50a is less than min 600 [ 130.794706][ T8973] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.970686][ T8983] Cannot find del_set index 3 as target [ 131.002886][ T8982] __nla_validate_parse: 5 callbacks suppressed [ 131.002961][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 131.115730][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 131.121191][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 131.186817][ T8990] validate_nla: 6 callbacks suppressed [ 131.186835][ T8990] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 131.221394][ T8990] netlink: 280 bytes leftover after parsing attributes in process `syz.4.884'. [ 131.243348][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 131.257074][ T8989] : entered promiscuous mode [ 131.312311][ T8996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.887'. [ 131.376103][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.4.890'. [ 131.409772][ T9003] syzkaller1: entered allmulticast mode [ 131.536623][ T9010] can: request_module (can-proto-0) failed. [ 131.572993][ T9019] netlink: 396 bytes leftover after parsing attributes in process `syz.1.895'. [ 131.655558][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 131.674584][ T9021] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 131.693851][ T9021] bond5 (unregistering): Released all slaves [ 132.094788][ T9052] : renamed from hsr0 (while UP) [ 132.374249][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 132.450071][ T9069] netlink: 'syz.0.907': attribute type 21 has an invalid length. [ 132.485913][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.537333][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.545529][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.558393][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.597956][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.606103][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.670685][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.696826][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.718472][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.738067][ T9073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.751532][ T5855] Bluetooth: hci4: link tx timeout [ 132.757622][ T5855] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.822527][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.004700][ T9098] syzkaller0: entered promiscuous mode [ 133.016969][ T9098] syzkaller0: entered allmulticast mode [ 133.343673][ T9125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.368342][ T9160] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 134.647375][ T9176] nbd: must specify a device to reconfigure [ 134.757995][ T9183] syzkaller0: entered promiscuous mode [ 134.763716][ T9183] syzkaller0: entered allmulticast mode [ 134.770684][ T9183] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 134.820663][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 134.835874][ T9153] infiniband sy: set active [ 134.860556][ T9189] x_tables: duplicate underflow at hook 2 [ 134.866317][ T9153] infiniband sy: added bond_slave_0 [ 134.969210][ T9153] RDS/IB: sy: added [ 134.973196][ T9153] smc: adding ib device sy with port count 1 [ 134.989270][ T9153] smc: ib device sy port 1 has no pnetid [ 135.126862][ T9209] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.259389][ T9217] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 135.279635][ T9219] gre0: left allmulticast mode [ 135.720767][ T9248] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 135.974298][ T9261] wg1: entered promiscuous mode [ 135.979381][ T9261] wg1: entered allmulticast mode [ 135.993522][ T9263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.160092][ T9271] sctp: [Deprecated]: syz.4.968 (pid 9271) Use of int in maxseg socket option. [ 136.160092][ T9271] Use struct sctp_assoc_value instead [ 136.177308][ T9270] __nla_validate_parse: 18 callbacks suppressed [ 136.177325][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 136.177759][ T9269] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 136.393680][ T9279] bond1: ARP target 1.0.0.0 is already present [ 136.400765][ T9279] bond1: option arp_ip_target: invalid value (1) [ 136.409357][ T9279] bond1 (unregistering): Released all slaves [ 136.528094][ T9292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.975'. [ 136.543517][ T9287] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 136.552811][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'. [ 136.611323][ T9287] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.625101][ T24] IPVS: starting estimator thread 0... [ 136.680547][ T9286] bond5: (slave geneve3): making interface the new active one [ 136.691263][ T9286] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 136.716412][ T9299] IPVS: using max 53 ests per chain, 127200 per kthread [ 136.791016][ T9304] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.799306][ T9304] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.875525][ T9306] syzkaller1: entered promiscuous mode [ 136.886785][ T9306] syzkaller1: entered allmulticast mode [ 137.142344][ T9322] gretap0: entered promiscuous mode [ 137.207529][ T9322] vlan2: entered promiscuous mode [ 137.431627][ T9343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.989'. [ 137.523788][ T9348] netlink: 128 bytes leftover after parsing attributes in process `syz.4.991'. [ 138.079283][ T9391] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1002'. [ 138.094998][ T9395] xt_hashlimit: overflow, try lower: 3/0 [ 138.134907][ T9397] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 138.330796][ T9408] syzkaller0: entered promiscuous mode [ 138.337303][ T9408] syzkaller0: entered allmulticast mode [ 138.456531][ T9418] nbd: socks must be embedded in a SOCK_ITEM attr [ 138.490258][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 138.499702][ T9420] gretap0: entered promiscuous mode [ 139.167656][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1019'. [ 139.329171][ T9469] syzkaller0: entered promiscuous mode [ 139.334732][ T9469] syzkaller0: entered allmulticast mode [ 139.616271][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 139.861124][ T9495] openvswitch: netlink: Key type 247 is out of range max 32 [ 140.071190][ T9464] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 140.182153][ T9515] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 140.198218][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'. [ 140.234311][ T9515] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 140.350924][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 140.696455][ T9542] bond6 (unregistering): Released all slaves [ 140.957245][ T9560] netlink: 'syz.4.1053': attribute type 39 has an invalid length. [ 141.048974][ T9559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.065220][ T9559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.197776][ T9559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.226814][ T9559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.296806][ T5851] Bluetooth: hci1: command 0x0401 tx timeout [ 141.381833][ T9559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.392384][ T9559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.459665][ T9559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.470237][ T9559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.527989][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.538143][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.553965][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.562352][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.578404][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.586796][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.602976][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.611760][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.338484][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 196.338798][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 196.344614][ T5839] Bluetooth: hci1: command 0x0401 tx timeout [ 196.356225][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 207.083524][ T9610] tipc: Enabling of bearer rejected, media not registered [ 207.117065][ T9615] SET target dimension over the limit! [ 207.132846][ T9614] SET target dimension over the limit! [ 207.157310][ T9617] : renamed from lo (while UP) [ 207.238440][ T9627] netlink: 'syz.2.1074': attribute type 10 has an invalid length. [ 207.241104][ T9621] __nla_validate_parse: 3 callbacks suppressed [ 207.241120][ T9621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 207.264405][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1074'. [ 207.276538][ T9622] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 207.289710][ T9621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 207.303700][ T9621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 207.314260][ T9621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 207.328898][ T9627] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 207.344924][ T9621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 207.355867][ T9621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 207.375853][ T9621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 207.443852][ T9636] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 207.448401][ T9621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1071'. [ 207.473715][ T9636] netlink: 'syz.0.1075': attribute type 3 has an invalid length. [ 207.495911][ T9636] netlink: 'syz.0.1075': attribute type 7 has an invalid length. [ 207.515396][ T9638] netlink: 'syz.2.1077': attribute type 16 has an invalid length. [ 207.519550][ T9636] netlink: 'syz.0.1075': attribute type 8 has an invalid length. [ 207.554015][ T9638] netlink: 'syz.2.1077': attribute type 17 has an invalid length. [ 207.562559][ T9636] NCSI netlink: No device for ifindex 131092 [ 207.632533][ T9638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.666867][ T9648] openvswitch: netlink: Message has 536 unknown bytes. [ 207.673942][ T9648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.966633][ T9677] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 208.016813][ T9684] netlink: 'syz.4.1088': attribute type 75 has an invalid length. [ 208.054860][ T9690] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 208.343155][ T9696] xt_ecn: cannot match TCP bits for non-tcp packets [ 208.358333][ T9704] xt_ecn: cannot match TCP bits for non-tcp packets [ 208.472465][ T9710] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 209.048529][ T9748] openvswitch: netlink: Missing valid actions attribute. [ 209.057892][ T9750] x_tables: duplicate underflow at hook 3 [ 209.076003][ T9748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.170506][ T9758] netlink: 'syz.2.1113': attribute type 11 has an invalid length. [ 209.701536][ T9794] sctp: [Deprecated]: syz.3.1122 (pid 9794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.701536][ T9794] Use struct sctp_sack_info instead [ 209.851040][ T9811] pim6reg1: entered promiscuous mode [ 209.857301][ T9811] pim6reg1: entered allmulticast mode [ 209.991748][ T9825] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 210.058829][ T9829] sctp: [Deprecated]: syz.1.1134 (pid 9829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.058829][ T9829] Use struct sctp_sack_info instead [ 210.215609][ T9844] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 211.030288][ T9902] caif0: mtu less than device minimum [ 211.143871][ T9912] sctp: [Deprecated]: syz.3.1158 (pid 9912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.143871][ T9912] Use struct sctp_sack_info instead [ 211.885535][ T9966] macsec1: entered promiscuous mode [ 211.890932][ T9966] macsec1: entered allmulticast mode [ 211.902058][ T9966] bond6: (slave macsec1): Error -34 calling dev_set_mtu [ 211.948966][ T9970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.012541][ T9970] bridge2: entered promiscuous mode [ 212.018220][ T9970] bridge2: entered allmulticast mode [ 212.238741][ T9987] bridge0: port 1(ipvlan2) entered blocking state [ 212.245423][ T9987] bridge0: port 1(ipvlan2) entered disabled state [ 212.269243][ T9987] ipvlan2: entered allmulticast mode [ 212.274576][ T9987] bridge0: entered allmulticast mode [ 212.297812][ T9992] netlink: zone id is out of range [ 212.310716][ T9987] ipvlan2: left allmulticast mode [ 212.315984][ T9987] bridge0: left allmulticast mode [ 212.349816][ T9996] __nla_validate_parse: 65 callbacks suppressed [ 212.349833][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 212.609992][T10008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1189'. [ 212.956856][T10034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'. [ 212.978990][T10034] syzkaller0: entered promiscuous mode [ 212.984926][T10034] syzkaller0: entered allmulticast mode [ 213.069808][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 213.208977][T10053] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1207'. [ 213.429026][T10064] Bluetooth: MGMT ver 1.23 [ 213.473636][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1211'. [ 213.643832][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1213'. [ 213.726706][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1213'. [ 213.807768][T10087] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1215'. [ 213.896536][T10097] net_ratelimit: 1 callbacks suppressed [ 213.896554][T10097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.259649][T10120] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 214.406896][T10135] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 214.434627][T10135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 214.457211][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1231'. [ 214.482419][T10144] veth0: mtu less than device minimum [ 215.064963][T10194] delete_channel: no stack [ 215.110745][T10200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.240916][T10183] delete_channel: no stack [ 215.464432][T10233] xt_connbytes: Forcing CT accounting to be enabled [ 215.582314][T10239] tipc: Started in network mode [ 215.588807][T10239] tipc: Node identity ac14140f, cluster identity 4711 [ 215.595931][T10239] tipc: New replicast peer: 255.255.255.255 [ 215.602955][T10239] tipc: Enabled bearer , priority 10 [ 215.767619][T10254] set match dimension is over the limit! [ 215.773926][T10254] validate_nla: 5 callbacks suppressed [ 215.773943][T10254] netlink: 'syz.1.1261': attribute type 24 has an invalid length. [ 216.794012][ T5852] tipc: Node number set to 2886997007 [ 217.020358][T10267] netlink: 'syz.3.1266': attribute type 21 has an invalid length. [ 217.788339][T10318] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 217.920837][T10320] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 217.936009][T10320] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 217.955032][T10325] __nla_validate_parse: 5 callbacks suppressed [ 217.955048][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 218.036935][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 218.059769][T10332] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 218.167499][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 218.171027][T10341] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1283'. [ 218.182136][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1282'. [ 218.216999][T10338] netlink: 'syz.1.1282': attribute type 11 has an invalid length. [ 218.273763][ T1154] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.289328][ T1154] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.308729][ T1154] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.338717][ T1154] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.420497][T10352] syzkaller0: entered promiscuous mode [ 218.428606][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 218.436475][T10352] syzkaller0: entered allmulticast mode [ 218.584098][T10361] geneve2: entered promiscuous mode [ 218.606826][T10361] geneve2: entered allmulticast mode [ 218.619536][ T65] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.620472][T10368] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.637241][ T65] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.655798][ T65] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.677617][ T65] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.763481][T10378] netlink: 'syz.2.1295': attribute type 8 has an invalid length. [ 218.830023][T10382] sctp: [Deprecated]: syz.1.1297 (pid 10382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.830023][T10382] Use struct sctp_sack_info instead [ 218.886865][T10386] netlink: 'syz.2.1299': attribute type 58 has an invalid length. [ 218.905384][T10389] netlink: 'syz.2.1299': attribute type 58 has an invalid length. [ 218.914575][T10386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1299'. [ 218.954552][T10389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1299'. [ 219.064975][T10403] netlink: 4892 bytes leftover after parsing attributes in process `syz.1.1304'. [ 219.155395][ T30] audit: type=1107 audit(1765776891.455:2): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 219.155395][ T30] oG NN' [ 219.381896][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 219.585887][T10445] netlink: 'syz.0.1318': attribute type 39 has an invalid length. [ 220.632837][T10496] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.946653][T10514] netlink: 'syz.4.1340': attribute type 10 has an invalid length. [ 220.970725][T10513] tipc: Enabled bearer , priority 0 [ 220.994750][T10514] bridge_slave_1: left allmulticast mode [ 221.000690][T10514] bridge_slave_1: left promiscuous mode [ 221.013644][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.042811][T10514] bridge_slave_1: entered promiscuous mode [ 221.061908][T10514] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 221.118409][T10513] syzkaller0: entered promiscuous mode [ 221.124104][T10513] syzkaller0: entered allmulticast mode [ 221.311460][T10511] tipc: Resetting bearer [ 221.345199][T10511] tipc: Disabling bearer [ 221.611590][T10543] netlink: 'syz.2.1348': attribute type 23 has an invalid length. [ 221.640741][T10541] vlan3: entered promiscuous mode [ 221.658779][T10541] bridge0: entered promiscuous mode [ 221.986535][T10567] sctp: [Deprecated]: syz.1.1355 (pid 10567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.986535][T10567] Use struct sctp_sack_info instead [ 222.686850][T10602] netlink: 'syz.1.1362': attribute type 29 has an invalid length. [ 223.231258][T10632] geneve2: left promiscuous mode [ 223.238827][T10632] gtp1: left promiscuous mode [ 223.244914][T10632] gtp2: left promiscuous mode [ 223.316277][ T7691] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.324665][ T7691] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.364870][ T7691] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.374428][T10642] __nla_validate_parse: 9 callbacks suppressed [ 223.374446][T10642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 223.393691][ T7691] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.404174][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 223.437727][T10651] bond4: Removing last arp target with arp_interval on [ 223.451802][T10652] pim6reg: entered allmulticast mode [ 223.461072][ T7691] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.469731][ T7691] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.485132][T10654] pim6reg: left allmulticast mode [ 223.503730][ T7691] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.513418][ T7691] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.695621][T10669] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 223.709777][T10669] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 223.788261][T10670] veth0: entered promiscuous mode [ 223.865467][T10678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.063695][T10696] tipc: Started in network mode [ 225.075912][T10696] tipc: Node identity ac1414aa, cluster identity 4711 [ 225.087261][T10696] tipc: Enabled bearer , priority 10 [ 225.155784][T10666] veth0: left promiscuous mode [ 225.219688][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'. [ 225.291935][T10705] netlink: 'syz.2.1392': attribute type 2 has an invalid length. [ 225.321082][T10705] netlink: 'syz.2.1392': attribute type 11 has an invalid length. [ 225.330245][T10703] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 225.347765][T10703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1391'. [ 225.366324][T10705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1392'. [ 225.523163][T10703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1391'. [ 226.077815][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'. [ 226.114709][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'. [ 226.131071][T10755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1405'. [ 226.167408][T10757] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1406'. [ 226.197622][ T5956] tipc: Node number set to 2886997162 [ 226.225011][T10763] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 226.629627][T10793] Bluetooth: MGMT ver 1.23 [ 226.842628][T10809] bridge_slave_0: left allmulticast mode [ 226.849552][T10809] bridge_slave_0: left promiscuous mode [ 226.857187][T10809] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.872017][T10809] bridge_slave_1: left allmulticast mode [ 226.878474][T10809] bridge_slave_1: left promiscuous mode [ 226.885939][T10809] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.931436][T10809] bond0: (slave bond_slave_0): Releasing backup interface [ 226.939370][T10809] bond_slave_0: left promiscuous mode [ 226.951242][T10809] bond0: (slave bond_slave_1): Releasing backup interface [ 226.959762][T10809] bond_slave_1: left promiscuous mode [ 226.982511][T10809] team0: Port device team_slave_0 removed [ 226.995744][T10809] team0: Port device team_slave_1 removed [ 227.006066][T10809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.013761][T10809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.022665][T10809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.030726][T10809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.039744][T10809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.281031][T10837] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 227.410072][T10840] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 227.449183][T10840] bond2 (unregistering): Released all slaves [ 227.497317][T10845] ip6tnl2: entered promiscuous mode [ 227.502565][T10845] ip6tnl2: entered allmulticast mode [ 227.762893][T10871] x_tables: duplicate underflow at hook 1 [ 227.934154][T10883] sctp: [Deprecated]: syz.1.1441 (pid 10883) Use of int in max_burst socket option. [ 227.934154][T10883] Use struct sctp_assoc_value instead [ 228.022231][T10888] batadv1: entered allmulticast mode [ 228.047296][T10891] netlink: 'syz.3.1445': attribute type 8 has an invalid length. [ 228.229448][T10899] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 228.409668][T10916] syzkaller0: entered promiscuous mode [ 228.418458][T10916] syzkaller0: entered allmulticast mode [ 228.664164][T10943] __nla_validate_parse: 8 callbacks suppressed [ 228.664181][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1460'. [ 228.669672][T10944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1461'. [ 228.706910][T10919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.722409][T10919] bond0: (slave rose0): Enslaving as an active interface with an up link [ 229.713959][T11016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1476'. [ 229.753967][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1476'. [ 229.951006][T11029] netlink: 'syz.4.1478': attribute type 8 has an invalid length. [ 230.017660][T11030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 230.072377][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 230.480019][T11068] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 230.514027][T11059] bond2: entered promiscuous mode [ 230.526194][T11059] bond2: entered allmulticast mode [ 230.532437][T11059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.734016][T11091] netlink: 'syz.3.1495': attribute type 7 has an invalid length. [ 230.748469][T11086] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1492'. [ 230.762049][T11086] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1492'. [ 230.789240][T11087] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1492'. [ 230.800732][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'. [ 231.005586][T11117] netlink: 'syz.0.1502': attribute type 8 has an invalid length. [ 231.025053][T11117] bond0: entered promiscuous mode [ 231.030551][T11117] bond_slave_0: entered promiscuous mode [ 231.037206][T11117] bond_slave_1: entered promiscuous mode [ 231.045065][T11117] ip6gretap0: entered promiscuous mode [ 231.051902][T11117] ip6gretap0: left promiscuous mode [ 231.096936][T11117] bond0: left promiscuous mode [ 231.109243][T11117] bond_slave_0: left promiscuous mode [ 231.115081][T11117] bond_slave_1: left promiscuous mode [ 231.294387][T11135] netlink: 'syz.0.1508': attribute type 1 has an invalid length. [ 231.400615][T11140] bond7: (slave bridge3): making interface the new active one [ 231.429368][T11140] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 231.462754][T11146] tipc: Enabled bearer , priority 0 [ 231.473210][T11145] tipc: Resetting bearer [ 231.499184][T11144] tipc: Disabling bearer [ 231.705344][T11165] netlink: 'syz.4.1517': attribute type 12 has an invalid length. [ 231.852015][T11174] tipc: Enabled bearer , priority 0 [ 231.873313][T11174] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 232.178974][T11207] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 232.226867][T11212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.353369][T11223] team0: Device gtp1 is up. Set it down before adding it as a team port [ 232.569594][T11236] ip6t_srh: unknown srh match flags 4000 [ 232.937896][T11273] sy: rxe_newlink: already configured on bond_slave_0 [ 233.220344][T11299] sctp: [Deprecated]: syz.0.1558 (pid 11299) Use of int in maxseg socket option. [ 233.220344][T11299] Use struct sctp_assoc_value instead [ 233.422248][T11316] sctp: [Deprecated]: syz.4.1560 (pid 11316) Use of int in max_burst socket option. [ 233.422248][T11316] Use struct sctp_assoc_value instead [ 233.490703][T11299] bond8 (unregistering): Released all slaves [ 233.603069][T11320] netlink: 'syz.1.1563': attribute type 7 has an invalid length. [ 233.796063][T11336] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 233.859444][T11336] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 233.924659][T11351] __nla_validate_parse: 17 callbacks suppressed [ 233.924679][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 233.986739][T11354] xt_hashlimit: max too large, truncated to 1048576 [ 234.052069][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1575'. [ 234.123500][T11368] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1578'. [ 234.138185][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'. [ 234.255327][T11376] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 234.289184][T11376] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.297433][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.321584][T11377] bond8: entered promiscuous mode [ 234.328210][T11377] bond8: entered allmulticast mode [ 234.347391][T11376] bond2: (slave veth0_to_bond): Releasing active interface [ 234.354881][T11376] veth0_to_bond: left allmulticast mode [ 234.366161][T11376] veth0_to_bond: left promiscuous mode [ 234.377845][T11376] bond8: (slave veth0_to_bond): making interface the new active one [ 234.385849][T11376] veth0_to_bond: entered promiscuous mode [ 234.391891][T11376] veth0_to_bond: entered allmulticast mode [ 234.398908][T11376] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 234.409869][T11386] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 234.421137][T11386] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 234.457118][T11392] netlink: 'syz.2.1583': attribute type 11 has an invalid length. [ 234.474958][T11392] netlink: 'syz.2.1583': attribute type 11 has an invalid length. [ 234.483164][T11392] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1583'. [ 234.642884][T11406] netlink: 'syz.2.1585': attribute type 1 has an invalid length. [ 234.654972][T11406] netlink: 'syz.2.1585': attribute type 2 has an invalid length. [ 234.709553][T11408] tipc: Enabled bearer , priority 0 [ 234.720160][T11408] syzkaller0: entered promiscuous mode [ 234.725666][T11408] syzkaller0: entered allmulticast mode [ 234.742337][T11408] tipc: Resetting bearer [ 234.749485][T11407] tipc: Resetting bearer [ 234.761770][T11407] tipc: Disabling bearer [ 235.137304][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 235.169583][ T7701] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.181880][ T7701] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.203110][ T7701] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.213625][ T7701] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.255777][T11427] netlink: 'syz.0.1593': attribute type 13 has an invalid length. [ 235.284782][T11435] bond0: entered promiscuous mode [ 235.294421][T11435] bond_slave_0: entered promiscuous mode [ 235.301446][T11435] bond_slave_1: entered promiscuous mode [ 235.567352][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1599'. [ 235.586458][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1599'. [ 235.615573][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1599'. [ 235.630701][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1599'. [ 236.161618][T11498] netlink: 'syz.4.1614': attribute type 13 has an invalid length. [ 236.547863][T11512] netlink: 'syz.2.1618': attribute type 1 has an invalid length. [ 236.805163][T11529] bond5: option resend_igmp: invalid value (32767) [ 236.818411][T11529] bond5: option resend_igmp: allowed values 0 - 255 [ 236.827076][T11529] bond5 (unregistering): Released all slaves [ 236.849801][T11534] openvswitch: netlink: Missing key (keys=40, expected=100) [ 236.867643][T11532] syzkaller1: entered promiscuous mode [ 236.873359][T11532] syzkaller1: entered allmulticast mode [ 237.230349][T11555] netlink: 'syz.0.1633': attribute type 11 has an invalid length. [ 237.280069][T11561] veth0: entered promiscuous mode [ 237.285307][T11555] GUP no longer grows the stack in syz.0.1633 (11555): 200000003000-20000000a000 (200000001000) [ 237.287334][T11560] veth0: left promiscuous mode [ 237.296499][T11563] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 237.311842][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.0.1633 Not tainted syzkaller #0 PREEMPT(full) [ 237.311867][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.311879][T11555] Call Trace: [ 237.311886][T11555] [ 237.311895][T11555] dump_stack_lvl+0x189/0x250 [ 237.311924][T11555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.311944][T11555] ? __pfx__printk+0x10/0x10 [ 237.311963][T11555] ? find_vma+0xe7/0x160 [ 237.312014][T11555] __get_user_pages+0x2470/0x2a00 [ 237.312040][T11555] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 237.312081][T11555] ? rcu_is_watching+0x15/0xb0 [ 237.312107][T11555] __gup_longterm_locked+0xde4/0x1660 [ 237.312133][T11555] ? try_grab_folio_fast+0x1bf/0x6a0 [ 237.312163][T11555] ? gup_fast_fallback+0x1b86/0x22d0 [ 237.312186][T11555] gup_fast_fallback+0x1d65/0x22d0 [ 237.312241][T11555] ? __pfx_gup_fast_fallback+0x10/0x10 [ 237.312258][T11555] ? __mutex_lock+0x335/0x1350 [ 237.312290][T11555] ? is_valid_gup_args+0x11f/0x200 [ 237.312311][T11555] ? get_user_pages_fast+0x4d/0xb0 [ 237.312334][T11555] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 237.312365][T11555] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 237.312383][T11555] ? wait_for_space+0x248/0x2d0 [ 237.312402][T11555] iov_iter_get_pages2+0x5e/0xa0 [ 237.312429][T11555] __se_sys_vmsplice+0x548/0x10d0 [ 237.312472][T11555] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 237.312493][T11555] ? __pfx_futex_wake+0x10/0x10 [ 237.312576][T11555] ? do_syscall_64+0xbe/0xf80 [ 237.312600][T11555] do_syscall_64+0xfa/0xf80 [ 237.312623][T11555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.312638][T11555] ? clear_bhb_loop+0x60/0xb0 [ 237.312659][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.312675][T11555] RIP: 0033:0x7f04fc38f749 [ 237.312689][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.312703][T11555] RSP: 002b:00007f04fd22d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 237.312729][T11555] RAX: ffffffffffffffda RBX: 00007f04fc5e5fa0 RCX: 00007f04fc38f749 [ 237.312741][T11555] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 237.312752][T11555] RBP: 00007f04fc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.312763][T11555] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 237.312773][T11555] R13: 00007f04fc5e6038 R14: 00007f04fc5e5fa0 R15: 00007ffde4bf4ef8 [ 237.312804][T11555] [ 237.745233][ T36] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 237.754707][ T36] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 237.785989][ T36] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 237.819949][T11575] 9: entered promiscuous mode [ 237.833043][ T36] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 237.978525][T11584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.046207][T11595] bond3: (slave veth9): Enslaving as an active interface with a down link [ 238.149168][T11584] bond3: (slave veth11): Enslaving as an active interface with a down link [ 238.959397][T11649] __nla_validate_parse: 23 callbacks suppressed [ 238.959417][T11649] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1662'. [ 238.986776][T11649] block nbd0: not configured, cannot reconfigure [ 239.200847][T11669] sctp: [Deprecated]: syz.0.1669 (pid 11669) Use of int in max_burst socket option deprecated. [ 239.200847][T11669] Use struct sctp_assoc_value instead [ 239.345442][T11681] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1674'. [ 239.359419][T11681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1674'. [ 239.376650][T11681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1674'. [ 239.641476][T11704] validate_nla: 5 callbacks suppressed [ 239.641493][T11704] netlink: 'syz.3.1681': attribute type 33 has an invalid length. [ 239.677600][T11704] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1681'. [ 239.720024][T11704] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 239.748151][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 239.915017][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 239.928166][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 240.081955][T11735] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1691'. [ 240.140923][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1691'. [ 241.432241][T11835] IPv6: sit1: Disabled Multicast RS [ 241.542198][T11843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.549496][T11843] IPv6: NLM_F_CREATE should be set when creating new route [ 241.556783][T11843] IPv6: NLM_F_CREATE should be set when creating new route [ 241.574330][T11843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.799395][T11862] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 241.812818][T11862] dummy0: entered promiscuous mode [ 241.820260][T11862] bridge0: port 1(dummy0) entered blocking state [ 241.835878][T11862] bridge0: port 1(dummy0) entered disabled state [ 241.848137][T11862] dummy0: entered allmulticast mode [ 242.065430][ T7689] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.074324][ T7689] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.089785][ T7689] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.106590][ T7708] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.123439][T11891] syzkaller0: entered promiscuous mode [ 242.129250][T11891] syzkaller0: entered allmulticast mode [ 242.182754][T11893] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 242.304688][T11903] ip6gre1: entered promiscuous mode [ 242.327165][T11903] ip6gre1: entered allmulticast mode [ 242.334500][ T7689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.354455][ T7689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.364442][ T981] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.408701][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.500496][T11919] netlink: 'syz.2.1748': attribute type 11 has an invalid length. [ 242.524019][T11919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.558818][T11926] batadv_slave_1: entered promiscuous mode [ 242.566908][T11926] batadv_slave_1: left promiscuous mode [ 242.802692][T11941] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.859367][T11941] bond7: (slave lo): Enslaving as a backup interface with an up link [ 242.877331][ T981] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.889364][T11941] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 243.087114][T11964] netlink: 'syz.0.1761': attribute type 1 has an invalid length. [ 243.137786][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.198761][T11965] bond9: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 243.219126][T11965] bond9: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 243.232992][T11965] bond9: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 243.294502][T11969] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 243.489160][ T24] hid-generic 0005:0002:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 243.555644][T12006] nbd: must specify at least one socket [ 243.612360][T12011] tipc: Enabled bearer , priority 0 [ 243.620260][T12011] syzkaller0: entered promiscuous mode [ 243.625949][T12011] syzkaller0: entered allmulticast mode [ 243.636243][T12011] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.655078][T12011] tipc: Resetting bearer [ 243.692660][T12014] tipc: Resetting bearer [ 243.707249][T12014] tipc: Disabling bearer [ 243.898459][T12030] syzkaller0: entered promiscuous mode [ 243.903954][T12030] syzkaller0: entered allmulticast mode [ 244.517636][T12055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.331160][T12038] netlink: 'syz.2.1780': attribute type 3 has an invalid length. [ 245.440004][T12066] __nla_validate_parse: 23 callbacks suppressed [ 245.440022][T12066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 245.521215][T12072] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 245.560995][T12072] bond10: entered promiscuous mode [ 245.568041][T12072] 8021q: adding VLAN 0 to HW filter on device bond10 [ 245.594214][T12077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1791'. [ 245.604762][T12075] C: renamed from lo [ 245.631398][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 245.657305][T12084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1794'. [ 245.661151][T12077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1791'. [ 245.737777][T12088] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 245.854757][T12095] bond4: (slave ip6gretap1): making interface the new active one [ 245.863941][T12095] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 245.891196][T12097] batadv0: entered promiscuous mode [ 245.923216][T12097] debugfs: 'hsr1' already exists in 'hsr' [ 245.938378][T12097] Cannot create hsr debugfs directory [ 245.967665][T12097] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 246.002264][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'. [ 246.158269][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 246.214003][T12106] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.215831][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1805'. [ 246.231356][T12131] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 246.237493][T12115] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 246.272831][T12120] bond5 (unregistering): Released all slaves [ 246.292246][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 246.301812][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 246.365663][T12131] bond9: entered promiscuous mode [ 246.371607][T12131] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.457901][T12124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.473216][T12124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.496314][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.534895][T12138] bond9: (slave bridge4): making interface the new active one [ 246.548109][T12138] bridge4: entered promiscuous mode [ 246.560994][T12138] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 246.664987][T12155] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 246.704006][T12124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.733275][T12124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.794844][T12155] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.803895][ T7708] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:2602:48ff:feff:0500 error=-28 [ 246.803905][T12155] team0: entered promiscuous mode [ 246.820198][T12155] team_slave_0: entered promiscuous mode [ 246.820433][T12155] team_slave_1: entered promiscuous mode [ 246.835866][T12155] bond0: (slave team0): Enslaving as an active interface with an up link [ 246.903986][T12124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.919871][T12124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.006845][T12124] bond0: (slave netdevsim0): Releasing backup interface [ 247.041002][T12124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.065518][T12124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.242684][ T65] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.253900][ T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.308340][ T7689] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.321120][ T7689] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.381626][ T7694] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.393577][ T7694] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.459347][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.476268][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.641278][T12217] nbd: illegal input index 2958377 [ 247.802067][T12234] netlink: 'syz.1.1832': attribute type 8 has an invalid length. [ 247.874358][T12233] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 248.303242][T12272] block nbd0: Unsupported socket: should be TCP or UNIX. [ 248.336435][T12274] netlink: 'syz.0.1844': attribute type 10 has an invalid length. [ 248.344442][T12274] dummy0: entered promiscuous mode [ 248.373584][T12274] bridge0: port 3(dummy0) entered blocking state [ 248.380537][T12274] bridge0: port 3(dummy0) entered disabled state [ 248.387715][T12274] dummy0: entered allmulticast mode [ 248.397467][T12274] bridge0: port 3(dummy0) entered blocking state [ 248.404014][T12274] bridge0: port 3(dummy0) entered forwarding state [ 248.694254][ T5852] IPVS: starting estimator thread 0... [ 248.786633][T12310] IPVS: using max 40 ests per chain, 96000 per kthread [ 248.989540][T12337] tipc: Enabled bearer , priority 0 [ 249.051898][T12337] syzkaller0: entered promiscuous mode [ 249.058852][T12337] syzkaller0: entered allmulticast mode [ 249.069762][T12337] tipc: Resetting bearer [ 249.077234][T12339] netlink: 'syz.2.1865': attribute type 1 has an invalid length. [ 249.094585][T12336] tipc: Resetting bearer [ 250.494406][T12336] tipc: Disabling bearer [ 250.552582][T12363] bond6 (unregistering): Released all slaves [ 254.416483][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.776442][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.216309][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 324.528041][T12401] geneve4: entered promiscuous mode [ 324.533403][T12401] geneve4: entered allmulticast mode [ 324.588729][T12408] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 1, id = 0 [ 324.970998][T12438] __nla_validate_parse: 13 callbacks suppressed [ 324.971016][T12438] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1897'. [ 325.030567][T12448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1897'. [ 325.088485][T12449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1899'. [ 325.109160][T12449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1899'. [ 325.313210][T12470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1906'. [ 325.336794][T12468] pim6reg: entered allmulticast mode [ 325.344979][T12470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1906'. [ 325.594400][T12486] SET target dimension over the limit! [ 325.622876][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 325.647915][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 325.822809][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 325.874017][T12511] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1917'. [ 326.061247][T12523] netlink: 'syz.3.1924': attribute type 11 has an invalid length. [ 326.250621][T12542] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 326.274603][T12542] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 326.795091][T12576] bond6: option miimon: invalid value (18446744073709551585) [ 326.825159][T12576] bond6: option miimon: allowed values 0 - 2147483647 [ 326.834309][T12576] bond6 (unregistering): Released all slaves [ 326.866353][T12581] x_tables: duplicate underflow at hook 2 [ 327.174428][T12603] openvswitch: netlink: EtherType 50a is less than min 600 [ 327.257705][T12607] netlink: 'syz.3.1950': attribute type 22 has an invalid length. [ 327.489661][T12620] pim6reg: entered allmulticast mode [ 327.502023][T12624] erspan0: entered promiscuous mode [ 327.535697][T12623] netlink: 'syz.4.1955': attribute type 12 has an invalid length. [ 327.556367][T12623] netlink: 'syz.4.1955': attribute type 29 has an invalid length. [ 327.564236][T12623] netlink: 'syz.4.1955': attribute type 2 has an invalid length. [ 327.585080][T12623] netlink: 'syz.4.1955': attribute type 2 has an invalid length. [ 327.686335][T12636] netlink: 'syz.1.1959': attribute type 17 has an invalid length. [ 327.781425][T12642] openvswitch: netlink: Key type 31 is not supported [ 328.050803][T12649] bond0: left promiscuous mode [ 328.200380][T12649] xfrm0: left promiscuous mode [ 328.331083][T12649] veth5: left allmulticast mode [ 328.369139][T12649] ip6tnl2: left promiscuous mode [ 328.374134][T12649] ip6tnl2: left allmulticast mode [ 328.408701][ T3542] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.436444][ T3542] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.470419][ T3542] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.479359][ T3542] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.489919][ T3542] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.499370][ T3542] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.523201][ T3542] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.531753][ T3542] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.634585][T12664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.352539][T12726] tipc: Enabling of bearer rejected, media not registered [ 329.503096][T12740] netlink: 'syz.3.1986': attribute type 33 has an invalid length. [ 329.563220][T12740] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 329.580253][T12740] bond6 (unregistering): Released all slaves [ 330.005183][T12778] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 330.265547][T12799] __nla_validate_parse: 22 callbacks suppressed [ 330.265566][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1999'. [ 330.324450][T12799] xfrm1: entered promiscuous mode [ 330.332106][T12804] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 330.340681][T12799] xfrm1: entered allmulticast mode [ 330.357592][T12792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1999'. [ 330.470859][T12811] bridge0: port 2(ipvlan2) entered blocking state [ 330.488940][T12811] bridge0: port 2(ipvlan2) entered disabled state [ 330.495731][T12811] ipvlan2: entered allmulticast mode [ 330.502169][T12811] bridge0: entered allmulticast mode [ 330.514615][T12811] ipvlan2: left allmulticast mode [ 330.519988][T12811] bridge0: left allmulticast mode [ 330.531658][T12814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2004'. [ 330.555213][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 330.622480][T12818] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2007'. [ 330.668137][T12824] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2008'. [ 331.084805][T12862] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 331.171651][T12866] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 331.215552][T12866] bond4 (unregistering): Released all slaves [ 331.380940][T12877] ip_vti0: entered promiscuous mode [ 331.555354][T12887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2028'. [ 331.600363][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 331.838586][T12916] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2037'. [ 331.991571][T12924] sit0: left promiscuous mode [ 332.085651][T12924] bridge0: port 3(dummy0) entered disabled state [ 332.092176][T12924] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.099614][T12924] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.213359][T12924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.228011][T12924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.315036][T12924] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 332.331966][T12924] gretap1: left promiscuous mode [ 332.338606][T12924] bond2: left promiscuous mode [ 332.345181][T12924] team1: left promiscuous mode [ 332.352204][T12924] bridge2: left promiscuous mode [ 332.358421][T12924] geneve2: left promiscuous mode [ 332.364865][T12924] vlan3: left promiscuous mode [ 332.370167][T12924] bridge0: left promiscuous mode [ 332.381293][T12924] bond8: left promiscuous mode [ 332.386340][T12924] veth0_to_bond: left promiscuous mode [ 332.394301][T12924] bond10: left promiscuous mode [ 332.402322][T12924] xfrm1: left promiscuous mode [ 332.447117][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.466725][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.490776][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 332.621032][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 332.630747][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.654702][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.679668][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 332.699603][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.718381][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.746830][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 332.792597][T12961] sctp: [Deprecated]: syz.1.2047 (pid 12961) Use of int in max_burst socket option. [ 332.792597][T12961] Use struct sctp_assoc_value instead [ 332.838913][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.860900][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.878055][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 332.942863][T12970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.777597][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 334.318199][T13062] pimreg3: entered allmulticast mode [ 334.344903][T13067] nbd: must specify an index to disconnect [ 334.378802][T13064] nbd: must specify an index to disconnect [ 334.634394][T13088] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 334.829542][T13104] block nbd1: not configured, cannot reconfigure [ 335.012372][T13119] validate_nla: 3 callbacks suppressed [ 335.012389][T13119] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 335.384444][T13146] __nla_validate_parse: 13 callbacks suppressed [ 335.384463][T13146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2096'. [ 335.502854][T13163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2101'. [ 335.513086][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'. [ 335.514508][T13160] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2099'. [ 335.603539][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'. [ 335.616329][T13160] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2099'. [ 335.674713][T13171] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2104'. [ 335.819836][T13189] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2109'. [ 335.882621][T13194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2110'. [ 336.585562][T13224] netlink: 'syz.1.2118': attribute type 1 has an invalid length. [ 336.954575][T13245] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 337.099366][T13250] netlink: 'syz.1.2125': attribute type 29 has an invalid length. [ 337.107896][T13250] netlink: 'syz.1.2125': attribute type 29 has an invalid length. [ 337.116750][T13250] netlink: 'syz.1.2125': attribute type 29 has an invalid length. [ 337.125090][T13250] netlink: 'syz.1.2125': attribute type 29 has an invalid length. [ 337.133367][T13250] netlink: 'syz.1.2125': attribute type 29 has an invalid length. [ 337.141589][T13250] netlink: 'syz.1.2125': attribute type 29 has an invalid length. [ 337.150713][T13250] IPVS: Unknown mcast interface: nr0 [ 339.387016][T13254] netlink: 'syz.0.2127': attribute type 1 has an invalid length. [ 339.422610][T13254] 8021q: adding VLAN 0 to HW filter on device bond12 [ 339.431794][T13254] bond11: (slave bond12): making interface the new active one [ 339.439759][T13254] bond11: (slave bond12): Enslaving as an active interface with an up link [ 339.525663][T13260] xt_ipcomp: unknown flags 1D [ 339.531138][T13260] set match dimension is over the limit! [ 339.872586][T13277] tipc: Enabling of bearer rejected, failed to enable media [ 339.886827][T13277] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2135'. [ 358.096260][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.416871][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 470.736229][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 495.056220][ T31] INFO: task kworker/0:2:981 blocked for more than 143 seconds. [ 495.063889][ T31] Not tainted syzkaller #0 [ 495.068943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.077875][ T31] task:kworker/0:2 state:D stack:23224 pid:981 tgid:981 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 495.090048][ T31] Workqueue: events rfkill_sync_work [ 495.095340][ T31] Call Trace: [ 495.098632][ T31] [ 495.101559][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 495.106470][ T31] ? __pfx___schedule+0x10/0x10 [ 495.111459][ T31] ? schedule+0x91/0x360 [ 495.115714][ T31] schedule+0x165/0x360 [ 495.120270][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.125748][ T31] __mutex_lock+0x7e6/0x1350 [ 495.146131][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.150986][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 495.172895][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.187209][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 495.192465][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 495.200036][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 495.206480][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 495.212191][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 495.217451][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 495.223161][ T31] rfkill_set_block+0x1d2/0x440 [ 495.228321][ T31] rfkill_sync_work+0x114/0x200 [ 495.233166][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 495.238916][ T31] process_scheduled_works+0xad1/0x1770 [ 495.244482][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.250562][ T31] worker_thread+0x8a0/0xda0 [ 495.255151][ T31] kthread+0x711/0x8a0 [ 495.259465][ T31] ? __pfx_worker_thread+0x10/0x10 [ 495.264560][ T31] ? __pfx_kthread+0x10/0x10 [ 495.269238][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.274440][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 495.279690][ T31] ? __pfx_kthread+0x10/0x10 [ 495.284309][ T31] ret_from_fork+0x599/0xb30 [ 495.289315][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.294428][ T31] ? __switch_to_asm+0x39/0x70 [ 495.299213][ T31] ? __switch_to_asm+0x33/0x70 [ 495.303958][ T31] ? __pfx_kthread+0x10/0x10 [ 495.308813][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.313593][ T31] [ 495.316949][ T31] INFO: task kworker/0:5:5956 blocked for more than 143 seconds. [ 495.324649][ T31] Not tainted syzkaller #0 [ 495.329671][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.338340][ T31] task:kworker/0:5 state:D stack:22904 pid:5956 tgid:5956 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 495.350633][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 495.357327][ T31] Call Trace: [ 495.360590][ T31] [ 495.363502][ T31] __schedule+0x14bc/0x5000 [ 495.368100][ T31] ? __pfx___schedule+0x10/0x10 [ 495.372944][ T31] ? schedule+0x91/0x360 [ 495.377674][ T31] schedule+0x165/0x360 [ 495.381822][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.387363][ T31] __mutex_lock+0x7e6/0x1350 [ 495.391946][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.396736][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 495.402983][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.408396][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 495.414112][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 495.419975][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 495.426130][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 495.431871][ T31] process_scheduled_works+0xad1/0x1770 [ 495.437681][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.443656][ T31] worker_thread+0x8a0/0xda0 [ 495.448330][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 495.454644][ T31] ? __kthread_parkme+0x7b/0x200 [ 495.460125][ T31] kthread+0x711/0x8a0 [ 495.464195][ T31] ? __pfx_worker_thread+0x10/0x10 [ 495.469612][ T31] ? __pfx_kthread+0x10/0x10 [ 495.474191][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.479402][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 495.484581][ T31] ? __pfx_kthread+0x10/0x10 [ 495.489239][ T31] ret_from_fork+0x599/0xb30 [ 495.493823][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.499181][ T31] ? __switch_to_asm+0x39/0x70 [ 495.503926][ T31] ? __switch_to_asm+0x33/0x70 [ 495.508760][ T31] ? __pfx_kthread+0x10/0x10 [ 495.513335][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.518128][ T31] [ 495.521169][ T31] INFO: task syz.4.2066:13036 blocked for more than 143 seconds. [ 495.529697][ T31] Not tainted syzkaller #0 [ 495.534645][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.543432][ T31] task:syz.4.2066 state:D stack:26504 pid:13036 tgid:13036 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 495.555462][ T31] Call Trace: [ 495.559004][ T31] [ 495.561967][ T31] __schedule+0x14bc/0x5000 [ 495.566565][ T31] ? stack_trace_save+0x9c/0xe0 [ 495.571405][ T31] ? __pfx___schedule+0x10/0x10 [ 495.576291][ T31] ? schedule+0x91/0x360 [ 495.580551][ T31] schedule+0x165/0x360 [ 495.584709][ T31] schedule_timeout+0x9a/0x270 [ 495.589859][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 495.595229][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.600446][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 495.605629][ T31] ? wait_for_completion+0x267/0x5d0 [ 495.610990][ T31] wait_for_completion+0x2bf/0x5d0 [ 495.616661][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 495.622295][ T31] ? __flush_work+0xd2/0xbc0 [ 495.627024][ T31] ? __flush_work+0xd2/0xbc0 [ 495.631619][ T31] __flush_work+0x9b9/0xbc0 [ 495.636263][ T31] ? __flush_work+0xd2/0xbc0 [ 495.640844][ T31] ? __pfx___flush_work+0x10/0x10 [ 495.645843][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 495.651467][ T31] ? __pfx___cancel_work+0x10/0x10 [ 495.656622][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 495.662244][ T31] ? __cancel_work_sync+0x5c/0x110 [ 495.667432][ T31] __cancel_work_sync+0xbe/0x110 [ 495.672353][ T31] rfkill_unregister+0x92/0x220 [ 495.677453][ T31] nfc_unregister_device+0x96/0x2a0 [ 495.682639][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 495.688437][ T31] virtual_ncidev_close+0x56/0x90 [ 495.693446][ T31] __fput+0x44c/0xa70 [ 495.697476][ T31] task_work_run+0x1d4/0x260 [ 495.702067][ T31] ? __pfx_task_work_run+0x10/0x10 [ 495.707495][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 495.712859][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 495.718362][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 495.723634][ T31] ? rcu_is_watching+0x15/0xb0 [ 495.728470][ T31] do_syscall_64+0x2e3/0xf80 [ 495.733048][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.739449][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.744114][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.750284][ T31] RIP: 0033:0x7f1f3558f749 [ 495.754708][ T31] RSP: 002b:00007ffc1e95a688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 495.763145][ T31] RAX: 0000000000000000 RBX: 000000000005184e RCX: 00007f1f3558f749 [ 495.771427][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 495.779450][ T31] RBP: 00007f1f357e7da0 R08: 0000000000000001 R09: 0000001e1e95a97f [ 495.787509][ T31] R10: 0000001b30920000 R11: 0000000000000246 R12: 00007f1f357e5fac [ 495.795464][ T31] R13: 00007f1f357e5fa0 R14: ffffffffffffffff R15: 00007ffc1e95a7a0 [ 495.803693][ T31] [ 495.806809][ T31] INFO: task syz.2.2108:13186 blocked for more than 144 seconds. [ 495.814517][ T31] Not tainted syzkaller #0 [ 495.822937][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.831918][ T31] task:syz.2.2108 state:D stack:28152 pid:13186 tgid:13185 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 495.843839][ T31] Call Trace: [ 495.847189][ T31] [ 495.850107][ T31] __schedule+0x14bc/0x5000 [ 495.854609][ T31] ? __pfx___schedule+0x10/0x10 [ 495.859843][ T31] ? schedule+0x91/0x360 [ 495.864076][ T31] schedule+0x165/0x360 [ 495.868354][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.873821][ T31] __mutex_lock+0x7e6/0x1350 [ 495.878483][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.883259][ T31] ? rfkill_fop_open+0x12d/0x820 [ 495.888534][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.893550][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 495.898842][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 495.904201][ T31] rfkill_fop_open+0x12d/0x820 [ 495.909047][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 495.914315][ T31] misc_open+0x2d5/0x350 [ 495.918804][ T31] chrdev_open+0x4cc/0x5e0 [ 495.923216][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.928224][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 495.935319][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.940309][ T31] do_dentry_open+0x7ce/0x1420 [ 495.945499][ T31] vfs_open+0x3b/0x340 [ 495.949868][ T31] ? path_openat+0x33f3/0x3dd0 [ 495.954628][ T31] path_openat+0x340e/0x3dd0 [ 495.959241][ T31] ? do_syscall_64+0xfa/0xf80 [ 495.963914][ T31] ? do_sys_openat2+0xbc/0x200 [ 495.968814][ T31] ? __x64_sys_openat+0x138/0x170 [ 495.973823][ T31] ? __pfx_path_openat+0x10/0x10 [ 495.978999][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 495.983928][ T31] do_filp_open+0x1fa/0x410 [ 495.988503][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 495.993526][ T31] ? _raw_spin_unlock+0x28/0x50 [ 495.998429][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.002770][ T31] do_sys_openat2+0x121/0x200 [ 496.007740][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.012926][ T31] ? rcu_is_watching+0x15/0xb0 [ 496.018014][ T31] __x64_sys_openat+0x138/0x170 [ 496.022859][ T31] do_syscall_64+0xfa/0xf80 [ 496.027444][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.033493][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.038416][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.044289][ T31] RIP: 0033:0x7f6cdd58f749 [ 496.048779][ T31] RSP: 002b:00007f6cde3cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.057203][ T31] RAX: ffffffffffffffda RBX: 00007f6cdd7e5fa0 RCX: 00007f6cdd58f749 [ 496.065156][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 496.073436][ T31] RBP: 00007f6cdd613f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.081575][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.089612][ T31] R13: 00007f6cdd7e6038 R14: 00007f6cdd7e5fa0 R15: 00007fff159aba48 [ 496.097872][ T31] [ 496.100892][ T31] INFO: task syz.3.2114:13207 blocked for more than 144 seconds. [ 496.108744][ T31] Not tainted syzkaller #0 [ 496.113661][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.122341][ T31] task:syz.3.2114 state:D stack:28152 pid:13207 tgid:13204 ppid:5850 task_flags:0x400040 flags:0x00080002 [ 496.134556][ T31] Call Trace: [ 496.137880][ T31] [ 496.140813][ T31] __schedule+0x14bc/0x5000 [ 496.145323][ T31] ? __pfx___schedule+0x10/0x10 [ 496.150258][ T31] ? schedule+0x91/0x360 [ 496.154498][ T31] schedule+0x165/0x360 [ 496.159035][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.164489][ T31] __mutex_lock+0x7e6/0x1350 [ 496.169178][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 496.174182][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.179069][ T31] ? misc_open+0x51/0x350 [ 496.183390][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.188805][ T31] misc_open+0x51/0x350 [ 496.192956][ T31] chrdev_open+0x4cc/0x5e0 [ 496.197384][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.202306][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 496.208704][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.213628][ T31] do_dentry_open+0x7ce/0x1420 [ 496.218649][ T31] vfs_open+0x3b/0x340 [ 496.222700][ T31] ? path_openat+0x33f3/0x3dd0 [ 496.227544][ T31] path_openat+0x340e/0x3dd0 [ 496.232138][ T31] ? do_sys_openat2+0xbc/0x200 [ 496.236909][ T31] ? __x64_sys_openat+0x138/0x170 [ 496.241913][ T31] ? __pfx_path_openat+0x10/0x10 [ 496.247144][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 496.252072][ T31] do_filp_open+0x1fa/0x410 [ 496.256781][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 496.261825][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.266786][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.271126][ T31] do_sys_openat2+0x121/0x200 [ 496.275783][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.281348][ T31] ? exc_page_fault+0x82/0x100 [ 496.286254][ T31] __x64_sys_openat+0x138/0x170 [ 496.291124][ T31] do_syscall_64+0xfa/0xf80 [ 496.295637][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.301834][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.306808][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.312685][ T31] RIP: 0033:0x7fdbfa38f749 [ 496.317106][ T31] RSP: 002b:00007fdbfb200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.325498][ T31] RAX: ffffffffffffffda RBX: 00007fdbfa5e6180 RCX: 00007fdbfa38f749 [ 496.333555][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 496.341994][ T31] RBP: 00007fdbfa413f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.350111][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.358169][ T31] R13: 00007fdbfa5e6218 R14: 00007fdbfa5e6180 R15: 00007ffd743fc6b8 [ 496.366634][ T31] [ 496.369676][ T31] INFO: task syz.1.2125:13247 blocked for more than 144 seconds. [ 496.377470][ T31] Not tainted syzkaller #0 [ 496.382386][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.391147][ T31] task:syz.1.2125 state:D stack:25984 pid:13247 tgid:13246 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 496.403305][ T31] Call Trace: [ 496.406819][ T31] [ 496.409742][ T31] __schedule+0x14bc/0x5000 [ 496.414244][ T31] ? __pfx___schedule+0x10/0x10 [ 496.419490][ T31] ? schedule+0x91/0x360 [ 496.423732][ T31] schedule+0x165/0x360 [ 496.428192][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.433641][ T31] __mutex_lock+0x7e6/0x1350 [ 496.438253][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 496.443181][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.448015][ T31] ? misc_open+0x51/0x350 [ 496.452331][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.457610][ T31] misc_open+0x51/0x350 [ 496.461755][ T31] chrdev_open+0x4cc/0x5e0 [ 496.466270][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.471197][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 496.477533][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.482453][ T31] do_dentry_open+0x7ce/0x1420 [ 496.487509][ T31] vfs_open+0x3b/0x340 [ 496.491573][ T31] ? path_openat+0x33f3/0x3dd0 [ 496.496705][ T31] path_openat+0x340e/0x3dd0 [ 496.501303][ T31] ? do_sys_openat2+0xbc/0x200 [ 496.506177][ T31] ? __x64_sys_openat+0x138/0x170 [ 496.511204][ T31] ? __pfx_path_openat+0x10/0x10 [ 496.516495][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 496.521429][ T31] do_filp_open+0x1fa/0x410 [ 496.525916][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 496.531031][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.535868][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.540268][ T31] do_sys_openat2+0x121/0x200 [ 496.544954][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.550637][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 496.555832][ T31] __x64_sys_openat+0x138/0x170 [ 496.560723][ T31] do_syscall_64+0xfa/0xf80 [ 496.565215][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.571358][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.576512][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.582414][ T31] RIP: 0033:0x7f6f9f18f749 [ 496.586924][ T31] RSP: 002b:00007f6fa0051038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.595319][ T31] RAX: ffffffffffffffda RBX: 00007f6f9f3e5fa0 RCX: 00007f6f9f18f749 [ 496.603316][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 496.611599][ T31] RBP: 00007f6f9f213f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.619598][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.627704][ T31] R13: 00007f6f9f3e6038 R14: 00007f6f9f3e5fa0 R15: 00007ffd0f468418 [ 496.635671][ T31] [ 496.638940][ T31] INFO: task syz.0.2135:13275 blocked for more than 144 seconds. [ 496.646869][ T31] Not tainted syzkaller #0 [ 496.651804][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.660500][ T31] task:syz.0.2135 state:D stack:27976 pid:13275 tgid:13274 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 496.672807][ T31] Call Trace: [ 496.676115][ T31] [ 496.679059][ T31] __schedule+0x14bc/0x5000 [ 496.683598][ T31] ? __pfx___schedule+0x10/0x10 [ 496.688553][ T31] ? schedule+0x91/0x360 [ 496.692784][ T31] schedule+0x165/0x360 [ 496.697179][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.702623][ T31] __mutex_lock+0x7e6/0x1350 [ 496.707277][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 496.712202][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.716974][ T31] ? misc_open+0x51/0x350 [ 496.721289][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.726819][ T31] misc_open+0x51/0x350 [ 496.730967][ T31] chrdev_open+0x4cc/0x5e0 [ 496.735373][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.740432][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 496.746815][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.751737][ T31] do_dentry_open+0x7ce/0x1420 [ 496.756747][ T31] vfs_open+0x3b/0x340 [ 496.760798][ T31] ? path_openat+0x33f3/0x3dd0 [ 496.766139][ T31] path_openat+0x340e/0x3dd0 [ 496.770751][ T31] ? do_sys_openat2+0xbc/0x200 [ 496.775501][ T31] ? __x64_sys_openat+0x138/0x170 [ 496.780555][ T31] ? __pfx_path_openat+0x10/0x10 [ 496.785476][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 496.790728][ T31] do_filp_open+0x1fa/0x410 [ 496.795225][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 496.800319][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.805176][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.809643][ T31] do_sys_openat2+0x121/0x200 [ 496.814326][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.819837][ T31] ? exc_page_fault+0x82/0x100 [ 496.824602][ T31] __x64_sys_openat+0x138/0x170 [ 496.829541][ T31] do_syscall_64+0xfa/0xf80 [ 496.834038][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.840122][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.844783][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.851048][ T31] RIP: 0033:0x7f04fc38f749 [ 496.855450][ T31] RSP: 002b:00007f04fd22d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.863888][ T31] RAX: ffffffffffffffda RBX: 00007f04fc5e5fa0 RCX: 00007f04fc38f749 [ 496.871931][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 496.880148][ T31] RBP: 00007f04fc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.888199][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.896189][ T31] R13: 00007f04fc5e6038 R14: 00007f04fc5e5fa0 R15: 00007ffde4bf4ef8 [ 496.904155][ T31] [ 496.907488][ T31] INFO: task syz.0.2135:13276 blocked for more than 145 seconds. [ 496.915207][ T31] Not tainted syzkaller #0 [ 496.920207][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.928982][ T31] task:syz.0.2135 state:D stack:28152 pid:13276 tgid:13274 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 496.941164][ T31] Call Trace: [ 496.944428][ T31] [ 496.947443][ T31] __schedule+0x14bc/0x5000 [ 496.951952][ T31] ? __pfx___schedule+0x10/0x10 [ 496.956930][ T31] ? schedule+0x91/0x360 [ 496.961161][ T31] schedule+0x165/0x360 [ 496.965300][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.971061][ T31] __mutex_lock+0x7e6/0x1350 [ 496.975642][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 496.980664][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.985422][ T31] ? misc_open+0x51/0x350 [ 496.989876][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.994920][ T31] misc_open+0x51/0x350 [ 496.999347][ T31] chrdev_open+0x4cc/0x5e0 [ 497.003759][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.008769][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 497.015090][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.020049][ T31] do_dentry_open+0x7ce/0x1420 [ 497.024801][ T31] vfs_open+0x3b/0x340 [ 497.029177][ T31] ? path_openat+0x33f3/0x3dd0 [ 497.033933][ T31] path_openat+0x340e/0x3dd0 [ 497.038552][ T31] ? do_sys_openat2+0xbc/0x200 [ 497.043300][ T31] ? __x64_sys_openat+0x138/0x170 [ 497.048394][ T31] ? __pfx_path_openat+0x10/0x10 [ 497.053326][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 497.058523][ T31] do_filp_open+0x1fa/0x410 [ 497.063024][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 497.068214][ T31] ? _raw_spin_unlock+0x28/0x50 [ 497.073053][ T31] ? alloc_fd+0x64c/0x6c0 [ 497.077406][ T31] do_sys_openat2+0x121/0x200 [ 497.082071][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.087577][ T31] ? __fget_files+0x3a0/0x420 [ 497.092236][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 497.097535][ T31] __x64_sys_openat+0x138/0x170 [ 497.102371][ T31] do_syscall_64+0xfa/0xf80 [ 497.106985][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.113061][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.118238][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.124140][ T31] RIP: 0033:0x7f04fc38f749 [ 497.128648][ T31] RSP: 002b:00007f04fd20c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.137076][ T31] RAX: ffffffffffffffda RBX: 00007f04fc5e6090 RCX: 00007f04fc38f749 [ 497.145025][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 497.153290][ T31] RBP: 00007f04fc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.161278][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.169339][ T31] R13: 00007f04fc5e6128 R14: 00007f04fc5e6090 R15: 00007ffde4bf4ef8 [ 497.177703][ T31] [ 497.180730][ T31] INFO: task syz-executor:13281 blocked for more than 145 seconds. [ 497.188737][ T31] Not tainted syzkaller #0 [ 497.193652][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.202325][ T31] task:syz-executor state:D stack:27688 pid:13281 tgid:13281 ppid:1 task_flags:0x400040 flags:0x00080000 [ 497.214538][ T31] Call Trace: [ 497.217886][ T31] [ 497.220806][ T31] __schedule+0x14bc/0x5000 [ 497.225305][ T31] ? __pfx___schedule+0x10/0x10 [ 497.230239][ T31] ? schedule+0x91/0x360 [ 497.234470][ T31] schedule+0x165/0x360 [ 497.238938][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.244389][ T31] __mutex_lock+0x7e6/0x1350 [ 497.249070][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 497.253993][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.258768][ T31] ? misc_open+0x51/0x350 [ 497.263083][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.268407][ T31] misc_open+0x51/0x350 [ 497.272556][ T31] chrdev_open+0x4cc/0x5e0 [ 497.276987][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.281910][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 497.288392][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.293316][ T31] do_dentry_open+0x7ce/0x1420 [ 497.298434][ T31] vfs_open+0x3b/0x340 [ 497.302490][ T31] ? path_openat+0x33f3/0x3dd0 [ 497.307363][ T31] path_openat+0x340e/0x3dd0 [ 497.311960][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 497.317456][ T31] ? __pfx_path_openat+0x10/0x10 [ 497.322380][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 497.327617][ T31] do_filp_open+0x1fa/0x410 [ 497.332110][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 497.337154][ T31] ? _raw_spin_unlock+0x28/0x50 [ 497.341984][ T31] ? alloc_fd+0x64c/0x6c0 [ 497.346435][ T31] do_sys_openat2+0x121/0x200 [ 497.351124][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.356580][ T31] ? fd_install+0x95/0x3d0 [ 497.360982][ T31] ? fd_install+0x307/0x3d0 [ 497.365471][ T31] __x64_sys_openat+0x138/0x170 [ 497.370410][ T31] do_syscall_64+0xfa/0xf80 [ 497.374905][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.381000][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.385663][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.391856][ T31] RIP: 0033:0x7f243ef8df11 [ 497.396395][ T31] RSP: 002b:00007ffeb4e2f8d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 497.404793][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f243ef8df11 [ 497.412826][ T31] RDX: 0000000000000002 RSI: 00007f243f0149b7 RDI: 00000000ffffff9c [ 497.421044][ T31] RBP: 00007f243f0149b7 R08: 0000000000000000 R09: 00007f243fd1d6c0 [ 497.429138][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 497.437128][ T31] R13: 0000000000000003 R14: 00007ffeb4e2fca8 R15: 0000000000000000 [ 497.445095][ T31] [ 497.448447][ T31] INFO: task syz-executor:13283 blocked for more than 145 seconds. [ 497.456723][ T31] Not tainted syzkaller #0 [ 497.461659][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.470414][ T31] task:syz-executor state:D stack:27800 pid:13283 tgid:13283 ppid:1 task_flags:0x400040 flags:0x00080000 [ 497.482594][ T31] Call Trace: [ 497.485862][ T31] [ 497.488869][ T31] __schedule+0x14bc/0x5000 [ 497.493376][ T31] ? __pfx___schedule+0x10/0x10 [ 497.498246][ T31] ? schedule+0x91/0x360 [ 497.502475][ T31] schedule+0x165/0x360 [ 497.507000][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.512449][ T31] __mutex_lock+0x7e6/0x1350 [ 497.517050][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 497.521969][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.526821][ T31] ? misc_open+0x51/0x350 [ 497.531143][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.536827][ T31] misc_open+0x51/0x350 [ 497.540981][ T31] chrdev_open+0x4cc/0x5e0 [ 497.545382][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.550414][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 497.556753][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.561714][ T31] do_dentry_open+0x7ce/0x1420 [ 497.566784][ T31] vfs_open+0x3b/0x340 [ 497.570835][ T31] ? path_openat+0x33f3/0x3dd0 [ 497.575580][ T31] path_openat+0x340e/0x3dd0 [ 497.580233][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 497.585726][ T31] ? __pfx_path_openat+0x10/0x10 [ 497.590792][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 497.595725][ T31] do_filp_open+0x1fa/0x410 [ 497.600477][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 497.605500][ T31] ? _raw_spin_unlock+0x28/0x50 [ 497.610442][ T31] ? alloc_fd+0x64c/0x6c0 [ 497.614767][ T31] do_sys_openat2+0x121/0x200 [ 497.619668][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.624873][ T31] ? fd_install+0x95/0x3d0 [ 497.629616][ T31] ? fd_install+0x307/0x3d0 [ 497.634115][ T31] __x64_sys_openat+0x138/0x170 [ 497.638987][ T31] do_syscall_64+0xfa/0xf80 [ 497.643480][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.649624][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.654293][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.660431][ T31] RIP: 0033:0x7f474cd8df11 [ 497.664830][ T31] RSP: 002b:00007ffc6097e8e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 497.673315][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f474cd8df11 [ 497.681319][ T31] RDX: 0000000000000002 RSI: 00007f474ce149b7 RDI: 00000000ffffff9c [ 497.689604][ T31] RBP: 00007f474ce149b7 R08: 0000000000000000 R09: 00007f474db1d6c0 [ 497.697746][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 497.705702][ T31] R13: 0000000000000003 R14: 00007ffc6097ecb8 R15: 0000000000000000 [ 497.713814][ T31] [ 497.717175][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 497.726365][ T31] [ 497.726365][ T31] Showing all locks held in the system: [ 497.734081][ T31] 1 lock held by khungtaskd/31: [ 497.739017][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 497.749180][ T31] 4 locks held by kworker/0:2/981: [ 497.754272][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 497.765257][ T31] #1: ffffc90003aafb80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 497.777921][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 497.787986][ T31] #3: ffff888051327100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 497.797767][ T31] 2 locks held by getty/5598: [ 497.802422][ T31] #0: ffff88814e4900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 497.812416][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 497.822593][ T31] 3 locks held by kworker/0:5/5956: [ 497.827798][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 497.839226][ T31] #1: ffffc9000537fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 497.852745][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 497.864148][ T31] 2 locks held by kworker/u8:32/7707: [ 497.869776][ T31] #0: ffff88801a069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 497.881504][ T31] #1: ffffc90005697b80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 497.894216][ T31] 1 lock held by syz.4.2066/13036: [ 497.900047][ T31] #0: ffff888051327100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 497.909850][ T31] 3 locks held by kworker/u8:37/13156: [ 497.915303][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 497.925300][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 497.934419][ T31] #2: ffff8880b8825f98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 497.943463][ T31] 2 locks held by syz.2.2108/13186: [ 497.948780][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 497.957528][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 497.967563][ T31] 1 lock held by syz.3.2114/13207: [ 497.972652][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 497.981164][ T31] 1 lock held by syz.1.2125/13247: [ 497.986526][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 497.994950][ T31] 1 lock held by syz.0.2135/13275: [ 498.000133][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.008575][ T31] 1 lock held by syz.0.2135/13276: [ 498.013657][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.022430][ T31] 1 lock held by syz-executor/13281: [ 498.027746][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.036332][ T31] 1 lock held by syz-executor/13283: [ 498.041624][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.050358][ T31] 1 lock held by syz-executor/13285: [ 498.055626][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.064220][ T31] 1 lock held by syz-executor/13287: [ 498.069525][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.078268][ T31] 1 lock held by syz-executor/13289: [ 498.083530][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.091992][ T31] 1 lock held by syz-executor/13291: [ 498.097535][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.106346][ T31] 1 lock held by syz-executor/13293: [ 498.111616][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.120146][ T31] 1 lock held by syz-executor/13295: [ 498.125404][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.133853][ T31] 1 lock held by syz-executor/13297: [ 498.139429][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.147887][ T31] 1 lock held by syz-executor/13299: [ 498.153152][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.161767][ T31] 1 lock held by syz-executor/13301: [ 498.167430][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.175867][ T31] 1 lock held by syz-executor/13303: [ 498.181224][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.189681][ T31] 1 lock held by syz-executor/13305: [ 498.194943][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.203693][ T31] 1 lock held by syz-executor/13307: [ 498.208990][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.217499][ T31] 1 lock held by syz-executor/13309: [ 498.222763][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.231600][ T31] [ 498.233940][ T31] ============================================= [ 498.233940][ T31] [ 498.242464][ T31] NMI backtrace for cpu 1 [ 498.242479][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 498.242490][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.242496][ T31] Call Trace: [ 498.242500][ T31] [ 498.242505][ T31] dump_stack_lvl+0x189/0x250 [ 498.242521][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.242531][ T31] ? __pfx__printk+0x10/0x10 [ 498.242550][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 498.242561][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 498.242572][ T31] ? __pfx__printk+0x10/0x10 [ 498.242586][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.242602][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 498.242613][ T31] watchdog+0xf3c/0xf80 [ 498.242627][ T31] ? watchdog+0x1e2/0xf80 [ 498.242641][ T31] kthread+0x711/0x8a0 [ 498.242655][ T31] ? __pfx_watchdog+0x10/0x10 [ 498.242666][ T31] ? __pfx_kthread+0x10/0x10 [ 498.242678][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.242689][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 498.242700][ T31] ? __pfx_kthread+0x10/0x10 [ 498.242712][ T31] ret_from_fork+0x599/0xb30 [ 498.242727][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 498.242745][ T31] ? __switch_to_asm+0x39/0x70 [ 498.242755][ T31] ? __switch_to_asm+0x33/0x70 [ 498.242765][ T31] ? __pfx_kthread+0x10/0x10 [ 498.242777][ T31] ret_from_fork_asm+0x1a/0x30 [ 498.242795][ T31] [ 498.242799][ T31] Sending NMI from CPU 1 to CPUs 0: [ 498.388947][ C0] NMI backtrace for cpu 0 [ 498.388965][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 498.388983][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.388994][ C0] RIP: 0010:do_raw_spin_unlock+0x3a/0x240 [ 498.389020][ C0] Code: fb 49 bc 00 00 00 00 00 fc ff df 4c 8d 77 04 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 84 01 00 00 41 81 3e ad 4e ad de <0f> 85 f3 00 00 00 48 89 df be 04 00 00 00 e8 d3 5e 88 00 48 89 d8 [ 498.389035][ C0] RSP: 0018:ffffffff8dc07a88 EFLAGS: 00000046 [ 498.389050][ C0] RAX: 0000000000000000 RBX: ffff8880b8828100 RCX: 2aa1bd8fa7c42f00 [ 498.389062][ C0] RDX: 0000000000000000 RSI: ffffffff8d9520e6 RDI: ffff8880b8828100 [ 498.389073][ C0] RBP: ffffffff8dc07b40 R08: 0000000000000003 R09: 0000000000000004 [ 498.389083][ C0] R10: dffffc0000000000 R11: fffffbfff1b80f48 R12: dffffc0000000000 [ 498.389101][ C0] R13: dffffc0000000000 R14: ffff8880b8828104 R15: 1ffffffff1b80f58 [ 498.389113][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 498.389126][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.389138][ C0] CR2: 00007ffdfe430ff0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 498.389152][ C0] Call Trace: [ 498.389159][ C0] [ 498.389170][ C0] _raw_spin_unlock_irqrestore+0x78/0x110 [ 498.389191][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 498.389214][ C0] hrtimer_get_next_event+0x1a4/0x230 [ 498.389235][ C0] __get_next_timer_interrupt+0x7b1/0xa20 [ 498.389258][ C0] tick_nohz_next_event+0x1ba/0x3e0 [ 498.389282][ C0] tick_nohz_idle_stop_tick+0x150/0xc60 [ 498.389304][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 498.389321][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 498.389343][ C0] ? __pfx_tick_nohz_idle_stop_tick+0x10/0x10 [ 498.389367][ C0] ? check_tsc_unstable+0x9/0x20 [ 498.389385][ C0] ? tsc_verify_tsc_adjust+0x234/0x300 [ 498.389406][ C0] ? arch_cpu_idle_enter+0x9/0x20 [ 498.389422][ C0] do_idle+0x1e5/0x520 [ 498.389438][ C0] ? irqentry_exit+0x5ba/0x660 [ 498.389459][ C0] ? __pfx_do_idle+0x10/0x10 [ 498.389482][ C0] cpu_startup_entry+0x44/0x60 [ 498.389498][ C0] rest_init+0x2de/0x300 [ 498.389513][ C0] start_kernel+0x3ae/0x410 [ 498.389531][ C0] x86_64_start_reservations+0x24/0x30 [ 498.389551][ C0] x86_64_start_kernel+0x143/0x1c0 [ 498.389571][ C0] common_startup_64+0x13e/0x147 [ 498.389597][ C0]