last executing test programs: 22.162615709s ago: executing program 0 (id=4965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x130, 0xffffffffffffffff, 0xca55a000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000001006000340000300000900010073797a30000000000900020073797a32000000001400000011000100000000000000fb000000000a"], 0xa0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400200000000c0001800800014080ffffff050000000500010006000000"], 0x68}}, 0x0) 22.059126008s ago: executing program 0 (id=4967): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) 22.006731163s ago: executing program 0 (id=4968): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) close(0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) 21.831763912s ago: executing program 0 (id=4972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x53}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x24000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x144, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0x0, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xb0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x90, 0x1, [@m_mirred={0x5c, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x1}}]}, {0xd, 0x6, "d527360c37d81b077c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004090}, 0x20000080) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x80, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x84, 0x8f}}, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, &(0x7f0000000280), 0x0}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 19.830971083s ago: executing program 0 (id=4983): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x4000}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x3, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000080)=@tcp, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x80002, 0x88) (async) r4 = socket(0x2c, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f00000001c0)=0x8001) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f0000009c600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b04000000f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcb9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f6b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670594acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f674eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d895a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5d1fe58a00c6855ada17dcbb20a2f03164292a1e4e53e4140224ba82b599de2604398b860906dccd87c1bf0e8d0cce2e34589ef2bd3672907b7604034d4697fa3f957622eaa59df5c02b307bceaf138b419ce49f4850328069ed4d5559babf388329d6605f74dc1c21c9f0f1aa9826ba2936f14affb0b06d0aeb1054b2d044cafe64979590000000000000000000000784de836bec51a9db6533248165f79bf47b13d6d2c83a7442632f60f9eb0cc4fa54e08e5e349cc3afdff6f3175a80c4015d380ee0880a8a822d0a630a864c823392420ec93fab6d4d98a53c8b75221a9576e8204169fa1046355a0342539527e882e7fcaf062f0733fc0fb97"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff}, 0x94) (async) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) 19.737473833s ago: executing program 3 (id=4985): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @empty, 0x9f9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0xe6aa0a9f27214269) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed", 0x91}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r7, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 19.715251255s ago: executing program 0 (id=4986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01010000000000000000000000002c000000180a01040000000000000000020000000c0005400f000000000000000900010073797a3000"], 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x9, @loopback}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5}, 0x48) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x2, 0x7}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x97f, 0x0, 0x6, 0x10041, 0xffffffffffffffff, 0xd0b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r4, 0x0, &(0x7f00000009c0)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000ec0)=[@in6={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7f}, @in={0x2, 0x4e22, @empty}], 0x2c) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000a004e230000000200000000000000000000ffffe0000002040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e20000000fd0000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000900000000000000000000ffffffffffff85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000007fe8000000000000000000000000000bb81000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100004aff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000200fc01000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000008fc02000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000100000000000000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/1040], 0x410) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) write$nci(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="610501060301060903d10b03459112cef22f0d080681040257229ebd1a0711000000000000fd4d29c59a8b47215bf4827593bbc05c4e86b9d55016578314535cc32f3e2230ce8d1729e0c541dfd942386ac471ede273b459821673492f4471cc434ae41c3906d9128ed7ed173df5ba9fdf981b7112fefa4063af7a34c8198e404ecb53820103dfd6d8c0b9d3853c11646b1893ca271478c01beee2b6626230872365634fdea2c00e80958ced5f3e6b18e9878fc85668719141f648d74a5c18f858bb"], 0x70) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x406}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040805}, 0x24048046) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c0001000000000118000008000100000000000000000000000000430b189619fadadb1f1ec7da58ddddc1846bba41c84d526afd3c96c3672290c026b40578fc88d1f47e8f159225e69e1526cae9f6aaf58c4f7036c48cecee4c335d81fae5a002544ceb3fd883609949215f30232066962a2ea27f1d7530c499cb806c18bc9348ac3d57e9f58bdba7a56b0c7ad80cf196f6fbf7adbf5662c286f663ea55a2e53339f60f2ec25698a256d8093c4ccd30"], 0x44}}, 0x0) 19.523166383s ago: executing program 3 (id=4987): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 19.478421293s ago: executing program 3 (id=4988): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @local}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xa, {0x2, 0x4e24, @rand_addr=0x64010101}, 'pim6reg\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x9, [0xd, 0x6, 0x400, 0x627, 0x8000, 0x1]}) getsockname$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{0xffff8001, 0x5c, &(0x7f0000000140)="0bd379eb278b59149427ad44ef4f51f169ff5bcc8717e82cd45a37d6458b1a93f64f77572e0d8ad7a61106b6bda55dcd44597085e4cbf86b3a09dd7a8a1aa758ba9b608b03bf3b44ed1c994ae9accaeea331b65666a733cd4f48b763"}, {0x0, 0xb, &(0x7f00000001c0)="39afc4bd8bd68e5bedd214", 0x1}, {0x401, 0xd5, &(0x7f0000000200)="c3aae777a2f558a5f5ebee15df3a447ebc70ae2e19a951b4d4b08f1dd7886ff7cf329976e5f57ee69172b643d65b309c4371bf8fb416585049507c6e3d1528d732fd0bb980ab71fdaeffeabbd092d36746aad028b27ed2a4cb751b0e30a46aaef3e6ba8c6742e3efb84b7431ec25c5f1aa88993c038c29cf4b4c1dad6614a3abaa22f8761ca9d41888d847648b84ae7456c8b1c1d1dd22d22587e39026173b1d4056624faaf0d06bf36ab04c715d6ef0eb44f1221aecb3f0b03f8691b25ccd6a26f795f0051286e8ed825e9d4b853797c014582d5c", 0x1, 0x1}]}) r1 = socket$inet(0x2, 0x1, 0x10001) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000003c0)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@newtclass={0x5c, 0x28, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0xc, 0xa}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x8}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x80, 0x11}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000540)) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000580)={@rand_addr, @rand_addr, @local}, &(0x7f00000005c0)=0xc) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000600)="43307c0bdea04880ea0840db0fc178430e58fd98d42e84fe58e2f3c0fb4ac5d7de4b2ce8c19c1cab687b6d678e41605152cfcc132a9dae1198a89709c6bf0bd3ae852c570444008128ff34625cefe16a834114adcda20802ae41f785ce5fd2cb3b602cabd3119902ece85a85f390313a63545a25a82bb20008b6c8e08f6fa8068d23320334926301c7bf55538c79489edcae798bd7a2c9c9de", 0x99) syz_emit_ethernet(0x66, &(0x7f00000006c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x6, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x2, 0x33, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end]}}, "14097d37d252e4fc8092a4ec1f5c9345c5caa7980370ea9e2a16ddb28ed7898aedb91547e22c715036545d8876d51beeb87af60ff1d75916e0bb3b24"}}}}, &(0x7f0000000740)={0x0, 0x1, [0x641, 0x39b, 0x180, 0xc6c]}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000780)="9ed2b48eea9bc456221ae40962fc7585d92f282306531bce5e2dfbd4321d47218d2ea9c7a1c20430bd5592568cd421c147105d96f1d0abc04f2c041e78809ea109bfaab205c8d12d5581be7a0230b4a0b061c402ae6080217fe7ae06b73101a049b8472b095e467ee91e4cbb0b85a159e7089d28e89d9d4bb3d0ba41c001afee76091b982fd383d7d03d85219499b750969c18fc68f2f02aa261eac8089b7bcaa20d2cd2fcd4bf9d32", 0xa9}, {&(0x7f0000000840)="61de1a79a682", 0x6}, {&(0x7f0000000880)="262da914e3238a374357131b26c868b4d59bd1b1c61fc66e67fbacfa091fdbe5891f001cf05b9dd2f94533b1bbea2e5c076cf108204b2b80", 0x38}], 0x3) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000900)={0x3, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = socket$rds(0x15, 0x5, 0x0) connect$rds(r6, &(0x7f0000000b00)={0x2, 0x4e22, @local}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xc4, r7, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8d70e61915909097b1dc767d0503a0e7"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cd54212a60c3bf42d0a35b4d6456ed8beb34f152110f3cc5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "feb07ce7ee2c1981"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a1c5b25d695bede1c92f94454cbabecf828022020c43edda"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d4e22716fcde6a339936cd3ef8a0adf4b85370bb7031aff6"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ad85542fa132e4d8"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ffd0e748e0fc3592fe4056c919e6178e"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000800}, 0x200000d4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000d40)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xe5}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20000}, @in={0x2, 0x4e22, @empty}], 0xb8) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, &(0x7f0000000e00)=0x4, 0x4) socket$rds(0x15, 0x5, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f0000000e40)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000e80), 0x4) 19.374529514s ago: executing program 3 (id=4989): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r3 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000019640)={&(0x7f0000019580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000019680)={&(0x7f00000195c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf25010000001e001200060000000006001d00e88c0000"], 0x2c}}, 0x800) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r4, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f", 0x5d}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) close(r3) 18.422652776s ago: executing program 3 (id=5007): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609110914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003700), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000003880)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c5}, 0x80c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 18.157642229s ago: executing program 3 (id=5012): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf9a3fcc7cd03af3319ef360bfc9238f250200000008000100dc5923eaff9fe157b712876c29573e5da9f55fa3dd34d03bdf70b46eb16e478f3636663add92359bcd2ba4a1baba323cab2f05f1f3debde093829ff6537f8ed11d7078", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xbc, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c67c692}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb239b35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x874b12d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1103d1d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eb4ce4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32218719}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x40041) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1, @v={0x6, 0x3, 0x1, 0x6, 0x9, 0x3, 0xd1, {0xb, 0x3}, 0x6, 0x81, 0x4, 0xa, 0x46, "229ebd1a32b2799feba5bb69fd4d29c59a8b47215bf48275c40c00e273b459821673262f4471cc434ae41c3906d9128ed7ed173df5ba9f00"/70}}, 0x5f) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0xfffc, @any, 0x4, 0x1}, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 17.723035125s ago: executing program 1 (id=5021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0xc4, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000d8114a3c0000", @ANYRES32=r0, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 17.722663629s ago: executing program 1 (id=5022): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r1, @ANYRES32=r0], 0x44}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r1, @ANYRES32=r0], 0x44}}, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) 17.69436209s ago: executing program 1 (id=5023): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x5, @private1, 0x2}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000100)="630e71", 0x3}], 0x1}}], 0x1, 0x24044005) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x6, 0x287, 0x0, 0x6, 0x800}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xb4, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xb4}}, 0x0) 17.548934302s ago: executing program 4 (id=5024): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xb4}}, 0x20050800) 17.474969168s ago: executing program 4 (id=5025): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="18000000520001c700001000000000101c"], 0x18}}, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1ab00000000000000003200000008001701"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000001880)={0xac8, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffe85, 0x3a}}}}, [@NL80211_ATTR_PROBE_RESP={0x463, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x1e2, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @broadcast, @initial, {0x3, 0x3}, @value=@ver_80211n={0x0, 0xb, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x1ffc00, @default, 0x1008, @void, @void, @void, @val={0x4, 0x6, {0xae, 0x6, 0xfffe, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x0, 0xae, 0x9}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x6, 0xa0, 0x25, 0x81}}, [{0xdd, 0xd1, "9dc8f67ccd74de595446db7ba05e7f5fc11531898e96f31f07a918c9904899d061486816f6fee5f03370b0857001c45ec83ad701e55aad520fbe44d0c3c0c1529c6852c94f03faed0483e9293996475006909bfcb200d9d2e4477d4308a5d6a990682b2269ad2d90b8257d4cc10b56fcb041390f90f273f81ba062e31eed6839fe94833ab9852c2e4dbc5c84948c1b1334e4a84e7109778d3db542d2a4e6a8bc23bbb5f35f6c3df2e6407f8db8f2cffa5679aac81575380570e5d55e3cbe4ee58284a0455898536a8335fc4e55d8f990e3"}, {0xdd, 0xc0, "e9e66c35ab005be620fc0953b59a7e81cc2667e7c17703b18e53c05995e9b9b289d56a22fe3b230edab08ac35eb80f7563f5b07eefb82a84d545f76ce65ff221bff8c827e4d19c6f321eeb8aab43aba3eef30c4eed759d41ee06e2f270c29d7032b7d19834aa7e5335a34135805a5c1327e87c49adf23e347b9166c018d2a6d5a49e04ce7b03f0cd67f37435797a00ccf1567f60af5a27a0b911c440c88e14f5714b701a97c661ab41ec961b5ee7442bca72823809c21c825e24fa72f639fb59"}]}}, @NL80211_ATTR_BEACON_HEAD={0x45d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80}, @device_a, @broadcast, @initial, {0xf, 0x6}}, 0x0, @default, 0x44, @void, @void, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x2, 0xfa, 0x6, 0x1}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0xcf, {0x3, 0x30, 0x5, "f75f81436e799aaae13edcf8af468d574047bdfd47ab4fe20980e6d597820244d7fb41c58615dcfe87f22b11e16304f95e5ad1e2417ff6f3778d88bbac3f030df1fb1f645e00e11de87803890e4e734982f75914577e902ce752354baa048e63e4758609c823b8e952e2258931a40af4573ca48a484cd1ad064a5f5635e92a8578c592f74e93e0421f7796db48034a5cd2e73ea9d69ebd7542b6c7376abd3ee80eeb9ab254968254ecba9b096ef1742b7f534d6a9a3f210d03fae69f8692173fb58c9b89d9aebbf4aa60a3fc"}}, @val={0x25, 0x3, {0x1, 0x88, 0xe2}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x67, "771fb09d244da7fb4981caae307b5b5361e2b740bccf72a372221ea2062f73c375f2bd592dcb4bec5c368053194f29abbfbcb8c938a42fbee18814ca93ecda6380580c064f59a67d3beb41ca22a3f9bd6fead78ee2d62714555f637b2f0e6c12aadb2ab1c7b1ae"}, {0xdd, 0x74, "79f74ef2826f3263fca70a12becb4552e826a1d7c2c5ef704f099b8175ee3ccbbab348101201c1728436820e71a9df8f68811ea7e861a0634299a306b0e9782f423736ae94686e9af4daf44f93192c82291e6463c09c99eb14cb46810da41e58cee4b15d8ac2ee955da65b0ce0ee1d56ddf7cd77"}, {0xdd, 0x3c, "5d92c3e2200de4845d8f12de63275eee7d24fd873edcca9e4c5563ab159f894894f03438c0d1cd1dc2c8faeb0ba862e7eeea4da467744c643ae67977"}, {0xdd, 0x6a, "d60883cad77e4b0c45bf01bb41124907920b48e5338319ad89d507fcdadfd441407642d46f281f1eb8d5891337585f892e481f1df0fcbda4c348d5648d229a583fb35951288db766f04d0fa908864eb3cfa823d500aaba2ffe4796fcfa92ca7db0f7ea1283089ab1f656"}, {0xdd, 0xdb, "9a351c96d2b1ceff8ef90277f877f9b655020e2025d185189ff7eaad699eb7f4682adfbbb5bac029cfed031fc3da46c69a920aef78621892dda2763fb5b4ce2958bafc402433609cf3875803758eb70e36d54f54e6e4f0869d2b5884f89fe0412a4a49c7953331815762c3acbbc84c51c77112f9a0d2bb7fdb2b9766a8bb46d8d795f3d7b22f305546c3ccb4bc495a112bc134fd70c798099811d4f060ae86e1c6912e4a160ba971fb5bdadbccb62fcaea95efd815e470b1f3802233e103cbd8cee34c3f15ac55a806e794632c7353271956d6a9dfe5436b98f806"}, {0xdd, 0xa, "05dfe976fc3bf7f31521"}, {0xdd, 0x15, "880ff015d97c4ac4a58d0151a14c9616657e9aaf4b"}, {0xdd, 0x9f, "3a69c122b6b2c67b3a0a21c83906feb575a3d90028a60c35edb8c29a9caf1372f8f8b4b45c3fb34c4a10e4cdc5607ad5bbe5678171d8e75f0298bb29394809c56deb1f6c2a51a9e7c928dc55a5eb1eaa6c902dcee212e2c423bd28d7c8213897c2d91c66fff8470be8ec7abd882a8cebac092fd7373140daf3eef3fefae52fe0acee7ac60b13f5581a90c620aa98732fdeeb7d75b163eae22582a0fbb79bed"}, {0xdd, 0x19, "1623a4ea872f2bce577cfd43507d8cddd9edc97fe0e0386ade"}]}}]}, 0xac8}, 0x1, 0x0, 0x0, 0x10}, 0x40009) 17.474098645s ago: executing program 4 (id=5026): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x7c) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002dbd7000fbdbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="0c0006000000000040d30000"], 0x28}, 0x1, 0x0, 0x0, 0x2020840}, 0x20020830) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000210005000200000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x5, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) (async) listen(r2, 0x5) 17.438997512s ago: executing program 4 (id=5027): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16, @ANYBLOB="000128bd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002"], 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x48041) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000640)=[{&(0x7f0000000240)='u', 0x1}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r4, &(0x7f0000000680)="4eded3380304", 0x6) splice(r4, &(0x7f0000000040), r3, 0x0, 0x800000000ff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e008100000008"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048811}, 0x4000) 17.35527862s ago: executing program 4 (id=5028): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8000, 0xffffffffffffff91, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r3) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f00000006c0)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xfc, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x804) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0104000200000000000019000000200004801c0001800a0001006c696d69740000000c00ea7f08000440c2d18c9d09a20802d9cf19404e0000000900020073797a3200000000140000001100010000000000000000000000000ae5373f293204637362f3d9131580"], 0x74}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=r7, @ANYBLOB="24000400858d0000380012800e00010069703665727370616e0000002400028004001200080015000001f0ffff000001"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20004846) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r2, 0x25, 0x0, @val=@tcx}, 0x1c) (async) r9 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000177a956ae07f6f57000000000085000000610000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r10, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1}, 0x4) (async) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) (async) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) 17.267130455s ago: executing program 4 (id=5029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x87142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 16.791116151s ago: executing program 1 (id=5032): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0xf1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3fdfffc}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000280)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000840)="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", &(0x7f00000000c0)=""/18}, 0x20) 16.790686609s ago: executing program 1 (id=5033): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="68000000000b030000000000000000000500000a0500010000000000080003400000000008000340000000010a000100020202020202000008000340000000000800024000000004100001007b7b113a3a2823fa212d28000800024000000005080003400000000055053f85d24ef401a78c161318b0cc17fb9e9e1a5fbac450bcfac473370f6b0ff93d425f6dbbb3c6ff1611499c0152f00a6e72a7e8de2971ea2e2e4f99bd36762c75e4b29fbfb9849d537a5f4e79f10fb88513a44253"], 0x68}}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000030045ac88860891636f8e59e3d24ea1c8e32dc72e0016faaee7724bf66b366af6046a6879c15bedabd37c6ea6b1a62654127e06e4397f7a3301fba21844da2fda03a0f4710607e98de433fa0afbfe1ef44317ef938aed94971c982914", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x4) (async) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251400000008001d00", @ANYRES32=r3, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB], 0x8}, 0x1, 0x0, 0x0, 0x20000840}, 0x24040010) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002dbd7000fddbdf25350000000a000600505050505050000005002001400000000a00340002020202020200000a00340002020202020200000600fd00fcff00000a0034000101010101010000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002dbd7000fddbdf25350000000a000600505050505050000005002001400000000a00340002020202020200000a00340002020202020200000600fd00fcff00000a0034000101010101010000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) 16.76584104s ago: executing program 1 (id=5034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x1, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 16.029050106s ago: executing program 2 (id=5039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1b16}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x25}, 0x20004000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x5c, 0x2d, 0x400, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9cdbd9d15d2dcd393701e"]}]}, 0x5c}], 0x1}, 0x0) 15.950924092s ago: executing program 2 (id=5040): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="08b3d22709", 0x5}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000400)="26b56bf0e941a878faafadb2364d1a494a925c8a38e6d323e4b24c53afa384851e8be351242acc0fcc7f56098f5612b0178cef571878827362eb163a3ae37313687630a5cf0ae57ed69a944d294b195b548dd7820beb1cdb80d051be42b33c912a34744067f00c370065d0221d819a3904dc8e6308dc271e13cca4f9b4c2e19dadd1902ed771f3ed47d3ebbeca7d8271985c32534b2a0794aa7ea5bb353322cabc51e40b05dfe8dbfd951125b2a4ee6c3218", 0xb2}], 0x3, &(0x7f00000007c0)=[{0x108, 0x84, 0xfffffffb, "aec4dc7f5d213374be3b657be8bac6c86f8fe7af0a8541d002fe06bcd649dad623745532d730d25ad391641cdb1e155b7dc1bd7784066ed3fa100499d68d3f4db15b7b05cdd38ef0c32a1e65ed271ae4ddcf00f74a6a3f319de65a563fb99f237e6547fe9cee3ed5f1b7987ef844b55871963390f40ddea3c73079b8692c48658483b899e27111be744ddbb3c5513621adb3e0c3acf9e1884f765b86e89339c121214832d32d22dbd8fc097696d6083eab8bb7a53e60b1a850aa72ae587ed0ef6be88f4e9d60739172a30de6cf15e3ea13a08b36b874e7628625bcfa1153ac135e7382db53bbf7580550bc9d77927fa09b6ad757"}, {0xf0, 0x103, 0x10, "8e48b5fb790da0bf8e627950b2c15a456e6e270237250136b885ccf3217a0b9ca8685b3efa6367c22ef873e1bb9e1330d4d18461c60e996ac5e34c8adf2fc5360de7b48374144ed1a0ee4f8481bd9ad53e96478b4ad4567c16f4b43ffd93797d25a198b176da19494f24f7d71e7ecdc2b72b460d398ec95b1104470c59f2244fb92f8071b9703b4c7c1c412679ee49bb85ebb4ad4d8963eef558085b6be6045cd618a4c9045571db38fd2892d403dc83547dab8118a650068e2550b81a1a5c26ca8fdddccf0b6f7d27a6b401056a2fe77b5b40a7c61fd3d57c88"}], 0x1f8}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000fc0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "b171164680a4bf03"}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0xf4, 0x6, 0x20, @local, @loopback, 0x20, 0x10, 0x61, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x2, 0x8e1d, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x700, 0x20, 0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB="08000400b9080000"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@RTM_NEWMDB={0xd8, 0x54, 0x10, 0x70bd27, 0x25dfdbff, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x3, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x4, {@in6_addr=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x2, 0x1, {@in6_addr=@private0, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x33}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x4, {@ip4=@multicast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x0, {@ip4=@multicast1, 0x4b6e}}}]}, 0xd8}}, 0x0) 15.908578591s ago: executing program 2 (id=5041): r0 = socket(0x1f, 0x5, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) 15.868107012s ago: executing program 2 (id=5042): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e20, 0xd, 0x4e20, 0x2, 0x2, 0x20, 0x0, 0x21}, {0x6, 0x794, 0x6, 0x80000000, 0xfffffffffffffffc, 0x1c000000, 0xfdca, 0x5}, {0x16, 0x1ff, 0x0, 0x278}, 0x65, 0x6e6bc0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x2, 0x3, 0x40, 0x2, 0x9, 0x4}}, 0xe8) syz_emit_ethernet(0x42, &(0x7f0000001480)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a600", 0xc, 0x11, 0xff, @local, @mcast2, {[], {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xa, 0x0, @void}}}}}}}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a"], 0x18}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000000)) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) 15.795077375s ago: executing program 2 (id=5043): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7f, 0x6]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a31000000002c0007801800018014000240fe8000000000000000000000000000aa0800064000000000080008400000000005000500020000200500010006000000"], 0x78}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000010000185900000c0000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000004df583d38a142f0bf54df7ab9b2484850000000600000005"], &(0x7f0000000880)='GPL\x00', 0x651, 0xb3, &(0x7f0000000d80)=""/179, 0x41000, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x3, 0xf, 0x9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000ec0)=[0x1, 0x1], &(0x7f0000000f00)=[{0x5, 0x2, 0xf, 0xc}, {0x0, 0x2, 0xe, 0x2}, {0x0, 0x3, 0x2, 0x2}, {0x2, 0x3, 0xe, 0x1}, {0x1, 0x4, 0x9, 0xa}], 0x10, 0x8}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000001c0)={r5, 0x2, 0x7}, 0x8) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @mss={0x2, 0x6}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000600)="d9efb572947c86aaf2e6ce1fe0f46a2e39ab0a01c39f3fe48defac61d97ad8efe502db421451fc318a55098d7373ed3a49f9a000dd81aea675f61a06e072bd4183f4efc84babc779f2877660fcd8e60fbfbd6d554953d034242fe8582a79a6436a0003e882a6b9179bfcaa5456acabed6b9f7986cbdaa3d517dae46eeee7976c03c808fbb7980c7d4919a390cee7e4de0da9846c4d4d", 0x96}, {&(0x7f00000006c0)="7f896422198a4bf4196536114bea0385e59f09edda46f6d2520e30842d20a8cb0449427b94884728694acf8333cc0f16cef258e41f3b8ca1949ca58a5cd7d486b6803fc3ce2210b358bded4d08c741ef4484d3c0c81c4cd972076b83547b86e0725bd893735b93eda4463e89738e809f0252a46c8579051eb855645e3fcdce9d067c0ece47801bba56415ffcdfab8edbd5d12bdb56652729476b08aec40c5a4ef617be58c6d4466d0a98298288050a1592b2591e5f7ccc9bafc6504eff33dbe25a8e34a33e7aa133b08d5dd8960b", 0xce}, {&(0x7f0000000180)="7cfadd46dfd3f08e43182cc2b6cba0b0b9d4235115e34647661e8c5f2aa0def7491e90eb", 0x24}, {&(0x7f00000007c0)="cdc7e74f8f11b00b0ecbf9c3f2301f3d5a2309b2edad7c97ff7d9fee2f0e2ccb3b4a85249e456ef1001a5b2990d137c3120690b3cc4fe9eb50e670f969bd856778f05e87fc2b936a025f30c0649979", 0x4f}], 0x4) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3ea}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24048810}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x40047452, 0x0) 15.793228587s ago: executing program 2 (id=5044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r11, 0x11, 0x70bd2d, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r11, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004880}, 0x40) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x4, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r11, 0x11, 0x70bd2d, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r11, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004880}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x4, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) (async) 4.555994405s ago: executing program 32 (id=4986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01010000000000000000000000002c000000180a01040000000000000000020000000c0005400f000000000000000900010073797a3000"], 0x68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x9, @loopback}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5}, 0x48) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x2, 0x7}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x97f, 0x0, 0x6, 0x10041, 0xffffffffffffffff, 0xd0b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r4, 0x0, &(0x7f00000009c0)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000ec0)=[@in6={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7f}, @in={0x2, 0x4e22, @empty}], 0x2c) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000a004e230000000200000000000000000000ffffe0000002040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e20000000fd0000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000900000000000000000000ffffffffffff85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000007fe8000000000000000000000000000bb81000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100004aff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000200fc01000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000008fc02000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000100000000000000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/1040], 0x410) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) write$nci(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="610501060301060903d10b03459112cef22f0d080681040257229ebd1a0711000000000000fd4d29c59a8b47215bf4827593bbc05c4e86b9d55016578314535cc32f3e2230ce8d1729e0c541dfd942386ac471ede273b459821673492f4471cc434ae41c3906d9128ed7ed173df5ba9fdf981b7112fefa4063af7a34c8198e404ecb53820103dfd6d8c0b9d3853c11646b1893ca271478c01beee2b6626230872365634fdea2c00e80958ced5f3e6b18e9878fc85668719141f648d74a5c18f858bb"], 0x70) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x406}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040805}, 0x24048046) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c0001000000000118000008000100000000000000000000000000430b189619fadadb1f1ec7da58ddddc1846bba41c84d526afd3c96c3672290c026b40578fc88d1f47e8f159225e69e1526cae9f6aaf58c4f7036c48cecee4c335d81fae5a002544ceb3fd883609949215f30232066962a2ea27f1d7530c499cb806c18bc9348ac3d57e9f58bdba7a56b0c7ad80cf196f6fbf7adbf5662c286f663ea55a2e53339f60f2ec25698a256d8093c4ccd30"], 0x44}}, 0x0) 3.057385512s ago: executing program 33 (id=5012): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf9a3fcc7cd03af3319ef360bfc9238f250200000008000100dc5923eaff9fe157b712876c29573e5da9f55fa3dd34d03bdf70b46eb16e478f3636663add92359bcd2ba4a1baba323cab2f05f1f3debde093829ff6537f8ed11d7078", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xbc, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c67c692}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb239b35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x874b12d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1103d1d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eb4ce4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32218719}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x40041) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1, @v={0x6, 0x3, 0x1, 0x6, 0x9, 0x3, 0xd1, {0xb, 0x3}, 0x6, 0x81, 0x4, 0xa, 0x46, "229ebd1a32b2799feba5bb69fd4d29c59a8b47215bf48275c40c00e273b459821673262f4471cc434ae41c3906d9128ed7ed173df5ba9f00"/70}}, 0x5f) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0xfffc, @any, 0x4, 0x1}, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 2.039670397s ago: executing program 34 (id=5029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x87142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 1.018375325s ago: executing program 35 (id=5034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x1, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 0s ago: executing program 36 (id=5044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r11, 0x11, 0x70bd2d, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r11, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004880}, 0x40) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x4, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r11, 0x11, 0x70bd2d, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r11, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004880}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x4, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) (async) kernel console output (not intermixed with test programs): .034311][T16012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.052810][T16012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.101097][T16012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.172401][T16012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.187875][T16012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.214460][T16012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.248052][T16062] infiniband syz0: set active [ 368.253941][T16062] infiniband syz0: added lo [ 368.259716][ T5958] lo speed is unknown, defaulting to 1000 [ 368.333740][T16062] RDS/IB: syz0: added [ 368.370661][T16012] hsr_slave_0: entered promiscuous mode [ 368.381913][T16088] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2994'. [ 368.394363][T16012] hsr_slave_1: entered promiscuous mode [ 368.407514][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2994'. [ 368.420189][T16012] debugfs: 'hsr0' already exists in 'hsr' [ 368.425962][T16012] Cannot create hsr debugfs directory [ 368.433635][T16062] lo speed is unknown, defaulting to 1000 [ 368.441399][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 368.632987][T16096] netlink: 'syz.2.2997': attribute type 1 has an invalid length. [ 368.660503][T16101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2999'. [ 368.684525][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'. [ 368.798978][ T5854] Bluetooth: hci3: command tx timeout [ 369.069197][T16012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.080562][T16012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.091995][T16012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 369.114834][T16062] lo speed is unknown, defaulting to 1000 [ 369.128282][ T5854] Bluetooth: hci1: command tx timeout [ 369.239315][T16012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.270493][T16012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.303593][T16012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 369.356591][T16124] syzkaller1: entered promiscuous mode [ 369.384468][T16124] syzkaller1: entered allmulticast mode [ 369.475701][T16012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.490321][T16012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.501757][T16012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 369.532192][T16062] lo speed is unknown, defaulting to 1000 [ 369.614620][T16012] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.628145][T16012] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.640275][T16012] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 369.711164][T16144] erspan0: entered promiscuous mode [ 369.740110][T16144] debugfs: 'hsr1' already exists in 'hsr' [ 369.753903][T16144] Cannot create hsr debugfs directory [ 369.766648][T16144] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 369.790813][T16144] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 369.978557][T16062] lo speed is unknown, defaulting to 1000 [ 370.060171][T16012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 370.068062][T16149] netlink: 'syz.0.3011': attribute type 1 has an invalid length. [ 370.082454][T16012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 370.147498][T16012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 370.194782][T16151] veth11: entered promiscuous mode [ 370.214476][T16012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 370.343218][T16062] lo speed is unknown, defaulting to 1000 [ 370.496146][T16012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.568419][T16012] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.613810][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.621047][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.677128][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.681498][T16175] netlink: 'syz.2.3015': attribute type 4 has an invalid length. [ 370.685293][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.731766][T16166] netlink: 'syz.2.3015': attribute type 4 has an invalid length. [ 370.874817][T16174] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.883729][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.889415][ T5854] Bluetooth: hci3: command tx timeout [ 371.089730][T16174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.149840][T16174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.451513][T16174] gretap1: left promiscuous mode [ 371.456495][T16174] gretap1: left allmulticast mode [ 371.516804][T16062] lo speed is unknown, defaulting to 1000 [ 371.529609][T15412] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.554099][T15412] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.571352][T15412] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.602876][T15412] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.871376][T16210] netlink: 'syz.2.3020': attribute type 1 has an invalid length. [ 372.101645][T16062] lo speed is unknown, defaulting to 1000 [ 372.146802][T16012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.263024][T16012] veth0_vlan: entered promiscuous mode [ 372.299639][T16012] veth1_vlan: entered promiscuous mode [ 372.381748][T16012] veth0_macvtap: entered promiscuous mode [ 372.436522][T16012] veth1_macvtap: entered promiscuous mode [ 372.500080][T16012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.512493][T16012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.539793][ T3548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.549236][ T3548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.572916][ T3548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.612484][ T3548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.777517][T16062] lo speed is unknown, defaulting to 1000 [ 372.781490][T15412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.797269][T15412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.961322][ T5854] Bluetooth: hci3: command tx timeout [ 372.981175][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.007762][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.161122][T16260] __nla_validate_parse: 13 callbacks suppressed [ 373.161143][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 373.501146][T16271] net_ratelimit: 2 callbacks suppressed [ 373.501164][T16271] bond_slave_0: mtu less than device minimum [ 373.728802][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3040'. [ 373.849773][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3040'. [ 374.195111][T16319] openvswitch: netlink: Flow key attr not present in new flow. [ 374.581393][T16331] netlink: 'syz.1.3050': attribute type 58 has an invalid length. [ 374.607734][T16331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3050'. [ 374.795814][T16338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.894623][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 375.044728][ T5854] Bluetooth: hci3: command tx timeout [ 375.059137][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.080292][T16355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3056'. [ 375.082590][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.100810][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.108622][ T2923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.122010][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.131217][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.203707][T16361] netlink: 'syz.4.3059': attribute type 21 has an invalid length. [ 375.212275][T16361] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3059'. [ 375.301607][ T2923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.359138][T16349] wg1 speed is unknown, defaulting to 1000 [ 375.366820][T16349] wlan0 speed is unknown, defaulting to 1000 [ 375.406767][ T2923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.444784][T16349] lo speed is unknown, defaulting to 1000 [ 375.469203][T16369] netlink: 'syz.4.3063': attribute type 1 has an invalid length. [ 375.969351][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'. [ 375.995217][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3071'. [ 376.053181][ T2923] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 376.064202][ T2923] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 32:9b:c9:fa:3e:3d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 376.076259][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3075'. [ 376.243586][ T2923] bond8 (unregistering): (slave gretap2): Releasing active interface [ 376.547094][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.557377][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.573570][ T2923] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 376.584249][ T2923] bond0 (unregistering): Released all slaves [ 376.674796][ T2923] bond1 (unregistering): Released all slaves [ 376.769458][ T2923] bond2 (unregistering): Released all slaves [ 376.860522][ T2923] bond3 (unregistering): (slave bond4): Releasing backup interface [ 376.870132][ T2923] bond3 (unregistering): Released all slaves [ 376.963675][ T2923] bond4 (unregistering): Released all slaves [ 377.055048][ T2923] bond5 (unregistering): Released all slaves [ 377.144820][ T2923] bond6 (unregistering): Released all slaves [ 377.201153][ T5854] Bluetooth: hci0: command tx timeout [ 377.245367][ T2923] bond7 (unregistering): (slave veth1): Removing an active aggregator [ 377.255141][ T2923] bond7 (unregistering): (slave veth1): Releasing backup interface [ 377.265238][ T2923] bond7 (unregistering): Released all slaves [ 377.357883][ T2923] bond8 (unregistering): Released all slaves [ 377.449631][ T2923] bond9 (unregistering): Released all slaves [ 377.462772][ T2923] bond10 (unregistering): Released all slaves [ 377.475290][ T2923] bond11 (unregistering): Released all slaves [ 377.549556][T16399] vlan2: entered allmulticast mode [ 377.554696][T16399] bridge0: entered allmulticast mode [ 377.566095][T16399] bridge2: port 1(vlan2) entered blocking state [ 377.573383][T16399] bridge2: port 1(vlan2) entered disabled state [ 377.582744][T16399] vlan2: entered promiscuous mode [ 377.588520][T16399] bridge0: entered promiscuous mode [ 377.605658][T16401] hsr_slave_0: left promiscuous mode [ 377.623040][T16401] hsr_slave_1: left promiscuous mode [ 377.673525][T16404] IPv6: sit1: Disabled Multicast RS [ 377.685372][T16404] sit1: entered allmulticast mode [ 377.742703][ T2923] : left promiscuous mode [ 377.776009][T16398] wg1 speed is unknown, defaulting to 1000 [ 377.803952][T16398] wlan0 speed is unknown, defaulting to 1000 [ 377.828014][T16398] lo speed is unknown, defaulting to 1000 [ 377.861998][ T2923] tipc: Disabling bearer [ 377.879731][ T2923] tipc: Disabling bearer [ 377.892692][ T2923] tipc: Left network mode [ 377.984640][ T2923] IPVS: stopping backup sync thread 9362 ... [ 378.293130][T16349] chnl_net:caif_netlink_parms(): no params data found [ 378.392830][T16434] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 378.431575][T16440] netlink: 'syz.3.3085': attribute type 10 has an invalid length. [ 378.431688][T16442] netlink: 'syz.3.3085': attribute type 10 has an invalid length. [ 378.476214][T16442] team0: Port device dummy0 added [ 378.592401][T16447] __nla_validate_parse: 1 callbacks suppressed [ 378.592419][T16447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3086'. [ 378.642839][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.656773][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'. [ 378.978086][T16349] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.016794][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.026853][T16349] bridge_slave_0: entered allmulticast mode [ 379.034905][T16349] bridge_slave_0: entered promiscuous mode [ 379.044124][T16349] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.051366][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.058815][T16349] bridge_slave_1: entered allmulticast mode [ 379.066608][T16349] bridge_slave_1: entered promiscuous mode [ 379.087825][ T2923] hsr_slave_0: left promiscuous mode [ 379.098047][ T2923] hsr_slave_1: left promiscuous mode [ 379.104264][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.118775][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.280607][ T5854] Bluetooth: hci0: command tx timeout [ 379.346011][T16483] netlink: 'syz.3.3094': attribute type 10 has an invalid length. [ 379.749247][ T2923] team0 (unregistering): Port device team_slave_1 removed [ 379.785329][ T2923] team0 (unregistering): Port device team_slave_0 removed [ 380.154401][T16481] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 380.155327][T16480] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 380.171368][T16483] veth0_virt_wifi: entered allmulticast mode [ 380.196296][T16483] team0: Port device veth0_virt_wifi added [ 380.196645][T16491] Bluetooth: MGMT ver 1.23 [ 380.272581][T16349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.300809][T16349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.457117][T16349] team0: Port device team_slave_0 added [ 380.493793][T16349] team0: Port device team_slave_1 added [ 380.668484][T16349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.679650][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.707258][T16349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.726672][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3101'. [ 380.759433][T16349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.766680][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.806802][T16516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3103'. [ 380.813027][T16349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.870741][T16518] tipc: Enabled bearer , priority 0 [ 380.904340][T16514] syzkaller0: entered promiscuous mode [ 380.913579][T16514] syzkaller0: entered allmulticast mode [ 380.934275][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'. [ 380.974719][T16514] tipc: Resetting bearer [ 381.038105][T16512] tipc: Resetting bearer [ 381.071933][T16512] tipc: Disabling bearer [ 381.121668][T16531] bridge1: entered promiscuous mode [ 381.126947][T16531] bridge1: entered allmulticast mode [ 381.167190][T16349] hsr_slave_0: entered promiscuous mode [ 381.178380][T16349] hsr_slave_1: entered promiscuous mode [ 381.184997][T16349] debugfs: 'hsr0' already exists in 'hsr' [ 381.194415][T16349] Cannot create hsr debugfs directory [ 381.254407][T16528] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 381.291637][T16536] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3109'. [ 381.359872][ T5854] Bluetooth: hci0: command tx timeout [ 381.423580][T16535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3111'. [ 381.691785][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 381.700832][T16562] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3116'. [ 381.724009][T16560] netlink: 'syz.2.3115': attribute type 1 has an invalid length. [ 381.734858][T16560] netlink: 'syz.2.3115': attribute type 3 has an invalid length. [ 381.778025][T16560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3115'. [ 381.968194][T16575] geneve3: entered promiscuous mode [ 381.977688][T16575] geneve3: entered allmulticast mode [ 382.306568][T16349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.344247][T16349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.365679][T16349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.388828][T16349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.413991][T16600] netlink: 'syz.2.3129': attribute type 2 has an invalid length. [ 382.576796][T16349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.605424][T16349] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.622956][T15410] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.630188][T15410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.661676][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.668885][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.870242][T16627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.882325][T16627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.893790][T16627] bond0 (unregistering): (slave team0): Releasing backup interface [ 382.904367][T16627] bond0 (unregistering): Released all slaves [ 383.002162][T16349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.047521][T16349] veth0_vlan: entered promiscuous mode [ 383.060677][T16349] veth1_vlan: entered promiscuous mode [ 383.092241][T16349] veth0_macvtap: entered promiscuous mode [ 383.102281][T16349] veth1_macvtap: entered promiscuous mode [ 383.122811][T16349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.141300][T16349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.158128][T15410] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.187521][T15410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.200618][T15410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.209826][T15410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.440693][ T5854] Bluetooth: hci0: command tx timeout [ 383.490295][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.508643][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.547315][T16640] syzkaller0: entered promiscuous mode [ 383.553976][T16640] syzkaller0: entered allmulticast mode [ 383.563854][T15410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.579603][T15410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.646698][T16648] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 383.728768][T16654] netlink: 'syz.0.3044': attribute type 2 has an invalid length. [ 383.740800][T16648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.758977][T16651] bond2: (slave ip6erspan0): making interface the new active one [ 383.771787][T16651] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 383.782030][T16654] __nla_validate_parse: 4 callbacks suppressed [ 383.782048][T16654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3044'. [ 383.901624][T16660] netlink: 'syz.1.3142': attribute type 1 has an invalid length. [ 384.036127][T16666] FAULT_INJECTION: forcing a failure. [ 384.036127][T16666] name failslab, interval 1, probability 0, space 0, times 0 [ 384.054945][T16666] CPU: 1 UID: 0 PID: 16666 Comm: syz.1.3146 Not tainted syzkaller #0 PREEMPT(full) [ 384.054972][T16666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.054988][T16666] Call Trace: [ 384.054996][T16666] [ 384.055004][T16666] dump_stack_lvl+0x189/0x250 [ 384.055032][T16666] ? __pfx____ratelimit+0x10/0x10 [ 384.055061][T16666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.055084][T16666] ? __pfx__printk+0x10/0x10 [ 384.055121][T16666] ? __lock_acquire+0xab9/0xd20 [ 384.055149][T16666] should_fail_ex+0x414/0x560 [ 384.055181][T16666] should_failslab+0xa8/0x100 [ 384.055209][T16666] kmem_cache_alloc_noprof+0x73/0x3c0 [ 384.055231][T16666] ? skb_clone+0x212/0x3a0 [ 384.055258][T16666] skb_clone+0x212/0x3a0 [ 384.055285][T16666] __netlink_deliver_tap+0x404/0x850 [ 384.055319][T16666] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.055339][T16666] netlink_deliver_tap+0x19c/0x1b0 [ 384.055358][T16666] netlink_unicast+0x7fa/0x9e0 [ 384.055401][T16666] ? __pfx_netlink_unicast+0x10/0x10 [ 384.055431][T16666] ? netlink_sendmsg+0x642/0xb30 [ 384.055449][T16666] ? skb_put+0x11b/0x210 [ 384.055473][T16666] netlink_sendmsg+0x805/0xb30 [ 384.055509][T16666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.055537][T16666] ? aa_sock_msg_perm+0xf1/0x1d0 [ 384.055565][T16666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.055591][T16666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.055612][T16666] __sock_sendmsg+0x219/0x270 [ 384.055642][T16666] ____sys_sendmsg+0x505/0x830 [ 384.055669][T16666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.055702][T16666] ? import_iovec+0x74/0xa0 [ 384.055726][T16666] ___sys_sendmsg+0x21f/0x2a0 [ 384.055750][T16666] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.055816][T16666] ? __fget_files+0x2a/0x420 [ 384.055844][T16666] ? __fget_files+0x3a0/0x420 [ 384.055880][T16666] __x64_sys_sendmsg+0x19b/0x260 [ 384.055911][T16666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.055947][T16666] ? __pfx_ksys_write+0x10/0x10 [ 384.055965][T16666] ? rcu_is_watching+0x15/0xb0 [ 384.055992][T16666] ? do_syscall_64+0xbe/0x3b0 [ 384.056017][T16666] do_syscall_64+0xfa/0x3b0 [ 384.056032][T16666] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.056059][T16666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.056077][T16666] ? clear_bhb_loop+0x60/0xb0 [ 384.056101][T16666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.056126][T16666] RIP: 0033:0x7efda8f8eec9 [ 384.056143][T16666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.056159][T16666] RSP: 002b:00007efda9e8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.056179][T16666] RAX: ffffffffffffffda RBX: 00007efda91e5fa0 RCX: 00007efda8f8eec9 [ 384.056193][T16666] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 384.056205][T16666] RBP: 00007efda9e8b090 R08: 0000000000000000 R09: 0000000000000000 [ 384.056215][T16666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.056225][T16666] R13: 00007efda91e6038 R14: 00007efda91e5fa0 R15: 00007fffc67b0e98 [ 384.056254][T16666] [ 384.361000][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3145'. [ 384.465499][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3149'. [ 384.490781][T16678] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3147'. [ 384.837932][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 384.847138][T16709] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3159'. [ 384.983553][T16730] vcan0: entered allmulticast mode [ 385.022231][T16728] IPVS: set_ctl: invalid protocol: 92 172.30.1.5:20001 [ 385.095231][T16728] Bluetooth: MGMT ver 1.23 [ 385.130714][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 385.147083][T15410] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.147198][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'. [ 385.156691][T15410] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.179239][T15410] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.188312][T15410] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.275780][T16740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3166'. [ 385.310196][T16740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3166'. [ 385.407144][T16743] netlink: 'syz.3.3167': attribute type 20 has an invalid length. [ 385.459311][T16743] netlink: 'syz.3.3167': attribute type 20 has an invalid length. [ 385.529638][T16707] netlink: 'syz.0.3157': attribute type 11 has an invalid length. [ 385.725919][T16749] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 386.316654][T16793] netlink: 'syz.4.3181': attribute type 15 has an invalid length. [ 386.522772][T16807] sctp: [Deprecated]: syz.0.3187 (pid 16807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.522772][T16807] Use struct sctp_sack_info instead [ 386.854818][T16822] netlink: 'syz.0.3191': attribute type 13 has an invalid length. [ 386.873103][T16822] netlink: 'syz.0.3191': attribute type 13 has an invalid length. [ 386.881843][T15410] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.905474][T15410] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.936442][T16826] nbd: must specify at least one socket [ 387.028091][T15410] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.067659][T15410] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.340941][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.350384][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.361335][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.370568][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.379014][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.410918][T16848] wlan0 speed is unknown, defaulting to 1000 [ 387.419920][T16848] lo speed is unknown, defaulting to 1000 [ 387.682458][T16848] chnl_net:caif_netlink_parms(): no params data found [ 387.759145][T16848] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.766403][T16848] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.774112][T16848] bridge_slave_0: entered allmulticast mode [ 387.782067][T16848] bridge_slave_0: entered promiscuous mode [ 387.790155][T16848] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.797305][T16848] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.804594][T16848] bridge_slave_1: entered allmulticast mode [ 387.813356][T16848] bridge_slave_1: entered promiscuous mode [ 387.851201][T16848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.863180][T16848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.894681][T16848] team0: Port device team_slave_0 added [ 387.902793][T16848] team0: Port device team_slave_1 added [ 387.933585][T16848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.940876][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.968047][T16848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.980882][T16848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.988203][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.014673][T16848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.065779][T16848] hsr_slave_0: entered promiscuous mode [ 388.073879][T16848] hsr_slave_1: entered promiscuous mode [ 388.087449][T16848] debugfs: 'hsr0' already exists in 'hsr' [ 388.099628][T16848] Cannot create hsr debugfs directory [ 388.655917][T16848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.668305][T16848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.782190][T16895] netlink: 'syz.1.3214': attribute type 33 has an invalid length. [ 388.854374][T16848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.869660][T16848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.953052][T16902] netlink: 'syz.1.3217': attribute type 2 has an invalid length. [ 389.074201][T16848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.095613][T16848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.112940][T16907] __nla_validate_parse: 16 callbacks suppressed [ 389.112959][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3218'. [ 389.115171][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3218'. [ 389.264461][T16848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.283634][T16848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.400090][T16915] netem: incorrect gi model size [ 389.405319][T16915] netem: change failed [ 389.437911][ T5838] Bluetooth: hci2: command tx timeout [ 389.542496][T16848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.555186][T16848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.569652][T16848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.581805][T16848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.811634][T16848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.846417][T16848] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.863598][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.870843][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.905901][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.913100][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.350222][T16964] netlink: 'syz.3.3237': attribute type 4 has an invalid length. [ 390.474472][T16848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.491839][T16971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.545749][T16848] veth0_vlan: entered promiscuous mode [ 390.559396][T16848] veth1_vlan: entered promiscuous mode [ 390.589863][T16848] veth0_macvtap: entered promiscuous mode [ 390.601323][T16848] veth1_macvtap: entered promiscuous mode [ 390.620623][T16848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.635349][T16848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.650561][T16308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.662668][T16308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.676489][T16308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.685681][T16308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.765732][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.787993][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.825678][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.835398][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.007798][T16978] netlink: 'syz.4.3242': attribute type 1 has an invalid length. [ 391.015794][T16978] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3242'. [ 391.453429][T17009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3250'. [ 391.456212][T17013] netlink: 'syz.2.3252': attribute type 16 has an invalid length. [ 391.472087][T17011] netlink: 'syz.4.3251': attribute type 58 has an invalid length. [ 391.478641][T17014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3253'. [ 391.481893][T17013] netlink: 'syz.2.3252': attribute type 3 has an invalid length. [ 391.497054][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3251'. [ 391.508703][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3252'. [ 391.533914][ T5854] Bluetooth: hci2: command tx timeout [ 391.663955][T17021] netlink: 'syz.1.3254': attribute type 12 has an invalid length. [ 391.675300][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'. [ 391.694895][ T63] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.694916][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'. [ 391.729394][ T63] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.759166][T17028] team0: Device vti0 is of different type [ 391.812362][T17030] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3257'. [ 391.838915][ T63] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.897196][ T63] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.004312][T17041] syz.1.3263 uses old SIOCAX25GETINFO [ 392.111140][T17044] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.829745][T17097] vlan2: entered allmulticast mode [ 392.841928][T17097] gretap0: entered allmulticast mode [ 393.116785][T17118] gretap0: entered promiscuous mode [ 393.124080][T17118] 0ªî{X¹¦: renamed from gretap0 [ 393.132317][T17118] 0ªî{X¹¦: left promiscuous mode [ 393.139459][T17118] 0ªî{X¹¦: entered allmulticast mode [ 393.150129][T17118] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 393.597712][ T5854] Bluetooth: hci2: command 0x040f tx timeout [ 393.718766][T17164] validate_nla: 2 callbacks suppressed [ 393.718786][T17164] netlink: 'syz.3.3301': attribute type 21 has an invalid length. [ 394.053074][T17183] netlink: 'syz.2.3308': attribute type 3 has an invalid length. [ 394.062318][T17180] bond3: Unable to set down delay as MII monitoring is disabled [ 394.078497][T17180] bond3 (unregistering): Released all slaves [ 394.371117][T17199] netlink: 'syz.2.3312': attribute type 1 has an invalid length. [ 394.638617][T17222] __nla_validate_parse: 13 callbacks suppressed [ 394.638636][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 394.686009][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'. [ 394.696686][T17215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3318'. [ 394.729277][T17223] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3320'. [ 394.739339][T17229] netlink: 'syz.4.3322': attribute type 1 has an invalid length. [ 394.804771][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3322'. [ 394.819136][T17229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.852939][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3322'. [ 394.895440][T17240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3325'. [ 394.978695][T17236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.050563][T17229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.069964][T17229] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 395.082029][T17229] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 395.088506][T17257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3327'. [ 395.149951][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 395.539904][T17269] bond1: option lp_interval: invalid value (0) [ 395.550893][T17269] bond1: option lp_interval: allowed values 1 - 2147483647 [ 395.565097][T17269] bond1 (unregistering): Released all slaves [ 395.612145][T17287] tipc: Started in network mode [ 395.628115][T17287] tipc: Node identity ac14142f, cluster identity 4711 [ 395.635191][T17287] tipc: New replicast peer: 0.0.0.0 [ 395.658665][T17287] tipc: Enabled bearer , priority 10 [ 395.672075][T17288] tipc: New replicast peer: 255.255.255.255 [ 395.682579][ T5838] Bluetooth: hci2: command 0x040f tx timeout [ 395.728273][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3339'. [ 395.949066][T17297] vcan0 (unregistering): left allmulticast mode [ 396.378888][T17342] netlink: 'syz.1.3350': attribute type 1 has an invalid length. [ 396.400918][T17343] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 396.402499][T17342] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 396.459769][T17354] wlan0 speed is unknown, defaulting to 1000 [ 396.482754][T17354] lo speed is unknown, defaulting to 1000 [ 396.777772][T14525] tipc: Node number set to 2886997039 [ 397.654094][T17413] netlink: 'syz.1.3372': attribute type 1 has an invalid length. [ 397.767675][ T5838] Bluetooth: hci2: command 0x040f tx timeout [ 397.989775][T17429] netlink: 'syz.2.3373': attribute type 10 has an invalid length. [ 398.251787][T14525] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 398.270740][T14525] hid-generic 0005:0007:0008.0001: item fetching failed at offset 1/2 [ 398.296663][T14525] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22 [ 399.841295][T17443] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 400.147114][T17478] bond3: option miimon: invalid value (18446744073709551585) [ 400.155201][T17478] bond3: option miimon: allowed values 0 - 2147483647 [ 400.166002][T17478] bond3 (unregistering): Released all slaves [ 400.205793][T17484] tipc: Enabled bearer , priority 0 [ 400.257093][T17484] syzkaller0: entered promiscuous mode [ 400.272893][T17484] syzkaller0: entered allmulticast mode [ 400.324838][T17482] tipc: Resetting bearer [ 400.366178][T17482] tipc: Disabling bearer [ 400.381170][T17502] veth0: entered promiscuous mode [ 400.386945][T17504] __nla_validate_parse: 10 callbacks suppressed [ 400.386963][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3396'. [ 400.413987][T17501] veth0: left promiscuous mode [ 400.598084][T17517] team_slave_0: mtu greater than device maximum [ 401.025907][T17536] netlink: 'syz.1.3405': attribute type 16 has an invalid length. [ 401.077716][T17536] netlink: 'syz.1.3405': attribute type 3 has an invalid length. [ 401.085626][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3405'. [ 401.360631][T17546] netlink: 'syz.4.3407': attribute type 10 has an invalid length. [ 401.388403][T17546] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.397285][T17546] bond0: (slave team0): Enslaving as an active interface with an up link [ 401.566837][T17562] netlink: 'syz.4.3412': attribute type 3 has an invalid length. [ 401.568118][T17561] netlink: 'syz.4.3412': attribute type 3 has an invalid length. [ 401.628928][T17567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3412'. [ 401.644664][T17569] netlink: 'syz.2.3414': attribute type 2 has an invalid length. [ 401.654359][T17569] netlink: 'syz.2.3414': attribute type 1 has an invalid length. [ 401.664990][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 401.731146][T17569] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3414'. [ 401.754276][T17564] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 401.772371][T17564] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3411'. [ 401.843241][T17577] vxcan0: entered allmulticast mode [ 402.133252][T17591] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3423'. [ 402.204570][T17601] netlink: 296 bytes leftover after parsing attributes in process `syz.3.3426'. [ 402.410969][T17610] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 402.482442][T17610] bond1 (unregistering): Released all slaves [ 402.532052][T17628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3430'. [ 402.679672][T17638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3434'. [ 402.838730][T17651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.556577][T17695] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.593518][T17695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.641851][T14523] lo speed is unknown, defaulting to 1000 [ 403.675089][T17697] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 403.924847][T17719] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 403.942073][T17719] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 403.993468][T17727] bridge_slave_1: left allmulticast mode [ 404.001735][T17727] bridge_slave_1: left promiscuous mode [ 404.009446][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.021177][T17727] bridge_slave_0: left allmulticast mode [ 404.026859][T17727] bridge_slave_0: left promiscuous mode [ 404.033061][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.148584][T17719] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.156475][T17719] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 404.175570][T17719] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.183715][T17719] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 404.192181][T17740] netlink: 'syz.4.3463': attribute type 1 has an invalid length. [ 404.200887][T17740] netlink: 'syz.4.3463': attribute type 3 has an invalid length. [ 404.264039][T17719] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.278801][T17719] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 404.314916][T17719] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.322308][T17719] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 404.661075][T17760] macvtap1: entered promiscuous mode [ 404.666621][T17760] vlan0: entered promiscuous mode [ 404.672407][T17760] macvtap1: entered allmulticast mode [ 404.679390][T17760] vlan0: entered allmulticast mode [ 404.684644][T17760] veth0_vlan: entered allmulticast mode [ 404.882673][T17776] bond0: entered allmulticast mode [ 405.030553][T17785] netlink: 'syz.0.3480': attribute type 33 has an invalid length. [ 405.180317][T17792] bridge1: left promiscuous mode [ 405.319384][T17804] sctp: [Deprecated]: syz.4.3484 (pid 17804) Use of int in maxseg socket option. [ 405.319384][T17804] Use struct sctp_assoc_value instead [ 405.634479][T17819] __nla_validate_parse: 16 callbacks suppressed [ 405.634500][T17819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3491'. [ 405.651828][T17819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3491'. [ 405.694617][T17820] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3491'. [ 405.724649][T17819] gretap1: entered promiscuous mode [ 405.768287][T17819] gretap1: entered allmulticast mode [ 405.812336][T17801] wlan0 speed is unknown, defaulting to 1000 [ 405.820779][T17801] lo speed is unknown, defaulting to 1000 [ 405.827761][T17825] bond0: Error: Cannot enslave bond to itself. [ 406.068609][T17834] syzkaller1: entered promiscuous mode [ 406.084331][T17834] syzkaller1: entered allmulticast mode [ 406.114938][T17832] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 406.155820][T17834] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3495'. [ 406.774670][T17872] validate_nla: 4 callbacks suppressed [ 406.774690][T17872] netlink: 'syz.3.3504': attribute type 10 has an invalid length. [ 406.826567][T17872] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 407.766485][T17936] sctp: [Deprecated]: syz.4.3530 (pid 17936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.766485][T17936] Use struct sctp_sack_info instead [ 408.296878][T17960] geneve3: left promiscuous mode [ 408.349721][T17964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3542'. [ 408.503956][T17974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3545'. [ 408.531305][T17972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3546'. [ 408.811512][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3552'. [ 455.668034][ T63] bond3 (unregistering): (slave geneve3): Releasing active interface [ 455.868238][ T63] bond1 (unregistering): (slave bridge4): Releasing active interface [ 456.011803][ T63] bond0 (unregistering): left promiscuous mode [ 456.018529][ T63] bond_slave_0: left promiscuous mode [ 456.024059][ T63] bond_slave_1: left promiscuous mode [ 456.029709][ T63] dummy0: left promiscuous mode [ 456.036058][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.045905][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.056856][ T63] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 456.066308][ T63] bond0 (unregistering): Released all slaves [ 456.081047][ T63] bond1 (unregistering): Released all slaves [ 456.176993][ T63] bond2 (unregistering): Released all slaves [ 456.266652][ T63] bond3 (unregistering): Released all slaves [ 456.367994][ T63] tipc: Disabling bearer [ 456.380925][ T63] tipc: Left network mode [ 456.651178][ T63] batadv0: left promiscuous mode [ 456.659716][ T63] hsr_slave_1: left promiscuous mode [ 456.665509][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.674486][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.058044][ T63] team0 (unregistering): Port device team_slave_0 removed [ 457.670956][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 457.882432][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3559'. [ 457.972611][T18025] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3561'. [ 458.080379][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3563'. [ 458.240574][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3564'. [ 458.540081][T18070] netlink: 'syz.0.3573': attribute type 1 has an invalid length. [ 458.551393][T18070] netlink: 'syz.0.3573': attribute type 1 has an invalid length. [ 458.559749][T18068] netlink: 'syz.0.3573': attribute type 1 has an invalid length. [ 458.572809][T18068] netlink: 'syz.0.3573': attribute type 1 has an invalid length. [ 458.621505][T18075] team0: Device vti0 is of different type [ 458.654857][T18077] netlink: 'syz.0.3575': attribute type 1 has an invalid length. [ 458.665772][T18077] netlink: 'syz.0.3575': attribute type 3 has an invalid length. [ 458.673837][T18077] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3575'. [ 458.852619][T18085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3577'. [ 458.983468][T18091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3578'. [ 459.025190][ T63] IPVS: stop unused estimator thread 0... [ 459.146288][T18100] block nbd3: Unsupported socket: should be TCP or UNIX. [ 459.212826][T18105] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 459.217061][T18106] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 459.288788][T18109] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3585'. [ 459.293323][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'. [ 459.397342][T18114] netlink: 'syz.1.3587': attribute type 1 has an invalid length. [ 459.440703][T18114] bond3: entered promiscuous mode [ 459.446940][T18114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.535463][T18125] bond3: (slave bridge0): making interface the new active one [ 459.543821][T18125] bridge0: entered promiscuous mode [ 459.551750][T18125] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 460.366254][T18189] netlink: 'syz.4.3609': attribute type 1 has an invalid length. [ 460.698964][T18215] netlink: 'syz.0.3617': attribute type 29 has an invalid length. [ 460.712138][T18215] netlink: 'syz.0.3617': attribute type 4 has an invalid length. [ 465.933815][ T3548] bond8 (unregistering): (slave gretap3): Releasing backup interface [ 465.993290][ T3548] team0: Port device geneve3 removed [ 466.455492][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.466488][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.476508][ T3548] bond0 (unregistering): Released all slaves [ 466.489146][ T3548] bond1 (unregistering): Released all slaves [ 466.584342][ T3548] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 466.594973][ T3548] bond2 (unregistering): Released all slaves [ 466.688371][ T3548] bond3 (unregistering): Released all slaves [ 466.780098][ T3548] bond4 (unregistering): (slave bond5): Releasing backup interface [ 466.788274][ T3548] bond5 (unregistering): left promiscuous mode [ 466.795275][ T3548] bond4 (unregistering): Released all slaves [ 466.889904][ T3548] bond5 (unregistering): Released all slaves [ 466.903057][ T3548] bond6 (unregistering): Released all slaves [ 466.915254][ T3548] bond7 (unregistering): Released all slaves [ 467.009095][ T3548] bond8 (unregistering): (slave bond9): Releasing backup interface [ 467.017980][ T3548] bond8 (unregistering): Released all slaves [ 467.110042][ T3548] bond9 (unregistering): Released all slaves [ 467.125381][ T3548] bond10 (unregistering): Released all slaves [ 468.856289][ T3548] tipc: Left network mode [ 469.105049][ T3548] hsr_slave_0: left promiscuous mode [ 469.113866][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.121688][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.141521][ T3548] veth0_macvtap: left promiscuous mode [ 469.251771][ T3548] pimreg (unregistering): left allmulticast mode [ 469.448913][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 469.486834][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 469.968083][ T3548] IPVS: stop unused estimator thread 0... [ 520.772487][T18289] __nla_validate_parse: 81 callbacks suppressed [ 520.772507][T18289] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3641'. [ 520.837311][T18295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.893411][T18304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3638'. [ 520.990446][T18308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3643'. [ 521.008437][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3644'. [ 521.054201][T18310] geneve2: entered promiscuous mode [ 521.061772][T18310] geneve2: entered allmulticast mode [ 521.077688][T15410] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 521.096376][T15410] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 521.114983][T15410] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 521.142680][T15410] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 521.249513][T18322] validate_nla: 66 callbacks suppressed [ 521.249533][T18322] netlink: 'syz.4.3647': attribute type 1 has an invalid length. [ 521.267725][T18322] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3647'. [ 521.347811][T18328] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3650'. [ 521.408594][T18332] macvtap2: entered promiscuous mode [ 521.414137][T18332] macvtap2: entered allmulticast mode [ 521.462104][T18332] macvtap3: entered promiscuous mode [ 521.467968][T18332] macvtap3: entered allmulticast mode [ 521.501195][T18339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.541788][T18342] geneve2: entered promiscuous mode [ 521.547172][T18342] geneve2: entered allmulticast mode [ 521.556291][ T2982] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 521.572892][ T2982] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 521.594275][ T2982] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 521.614066][ T2982] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 521.718581][T14539] IPVS: starting estimator thread 0... [ 521.793928][T18349] tipc: Started in network mode [ 521.808636][T18352] IPVS: using max 35 ests per chain, 84000 per kthread [ 521.813830][T18355] netlink: 'syz.1.3659': attribute type 33 has an invalid length. [ 521.825672][T18349] tipc: Node identity cef2f3d3a08, cluster identity 4711 [ 521.852393][T18349] tipc: Enabled bearer , priority 0 [ 521.866033][T18355] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3659'. [ 521.919211][T18365] siw: device registration error -23 [ 521.959765][T18349] tipc: Disabling bearer [ 522.208288][T18385] netlink: 'syz.1.3667': attribute type 8 has an invalid length. [ 522.372784][T18394] netlink: 'syz.0.3670': attribute type 1 has an invalid length. [ 522.401348][T18396] netlink: 'syz.4.3672': attribute type 14 has an invalid length. [ 522.409457][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3672'. [ 522.421412][T18396] netlink: 'syz.4.3672': attribute type 14 has an invalid length. [ 522.429460][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3672'. [ 522.431160][T18394] netlink: 'syz.0.3670': attribute type 1 has an invalid length. [ 522.510008][T18400] netlink: 'syz.3.3674': attribute type 1 has an invalid length. [ 522.512469][T18403] netlink: 'syz.3.3674': attribute type 1 has an invalid length. [ 522.832277][T18424] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3682'. [ 522.850573][T18424] vlan2: entered allmulticast mode [ 522.855830][T18424] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 522.956586][T18430] netlink: 'syz.0.3684': attribute type 10 has an invalid length. [ 522.964766][T18430] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 522.972773][T18430] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 522.980209][T18430] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 523.658553][T18444] bond4: invalid ARP target 0.0.0.0 specified for addition [ 523.669480][T18444] bond4: option arp_ip_target: invalid value (0) [ 523.749850][T18444] bond4 (unregistering): Released all slaves [ 523.786668][T18440] syzkaller1: entered promiscuous mode [ 523.810325][T18440] syzkaller1: entered allmulticast mode [ 524.164979][T18469] syzkaller0: tun_chr_ioctl cmd 3233830971 [ 524.172536][T15410] syzkaller0: tun_net_xmit 76 [ 524.177726][T15410] syzkaller0: tun_net_xmit 48 [ 524.198808][T14539] syzkaller0: tun_net_xmit 76 [ 525.776491][T18516] bond5: option mode: invalid value (253) [ 525.805602][T18516] bond5 (unregistering): Released all slaves [ 525.968706][T18536] __nla_validate_parse: 4 callbacks suppressed [ 525.968734][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'. [ 526.020557][T18539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'. [ 526.056872][T18536] xfrm1: entered promiscuous mode [ 526.087800][T18536] xfrm1: entered allmulticast mode [ 526.263004][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3716'. [ 526.417084][T18565] netlink: zone id is out of range [ 526.428886][T18565] netlink: del zone limit has 8 unknown bytes [ 526.514129][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3721'. [ 526.518462][T18572] netlink: 'syz.1.3723': attribute type 1 has an invalid length. [ 526.524207][T18573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.531346][T18572] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3723'. [ 526.563249][T18573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.650412][T18578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.710381][T18582] bond1: Unable to set up delay as MII monitoring is disabled [ 526.720721][T18582] bond1 (unregistering): Released all slaves [ 526.849468][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3726'. [ 526.931200][T18594] netlink: 'syz.4.3729': attribute type 32 has an invalid length. [ 526.940763][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3729'. [ 526.972477][T18594] bond5: Setting coupled_control to off (0) [ 527.345547][T18616] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3737'. [ 527.370424][T18615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3737'. [ 527.455066][T18622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3738'. [ 527.515159][T18624] netlink: 'syz.4.3739': attribute type 1 has an invalid length. [ 527.554321][T18626] netlink: 'syz.2.3740': attribute type 1 has an invalid length. [ 527.643336][T18629] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 527.744474][T18634] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 527.761027][T18634] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 527.771593][T18634] bond1: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 527.844631][T18633] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 527.860662][T18633] bond4 (unregistering): Released all slaves [ 527.904185][T18635] veth3: entered promiscuous mode [ 527.918066][T18635] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 527.961138][T18637] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 528.008105][T18637] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 528.653526][T18696] netlink: 'syz.0.3759': attribute type 1 has an invalid length. [ 528.666612][T18694] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 528.698748][T18694] tipc: Enabled bearer , priority 10 [ 528.988941][T18719] netlink: 'syz.3.3766': attribute type 4 has an invalid length. [ 529.424687][T18762] netlink: 'syz.3.3779': attribute type 25 has an invalid length. [ 529.437762][T18762] netlink: 'syz.3.3779': attribute type 28 has an invalid length. [ 529.884787][T14539] tipc: Node number set to 1853027283 [ 530.140989][T18749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.512889][T18822] "syz.1.3801" (18822) uses obsolete ecb(arc4) skcipher [ 530.660000][T18830] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 530.671649][T18830] bridge_slave_1: left allmulticast mode [ 530.677318][T18830] bridge_slave_1: left promiscuous mode [ 530.683438][T18830] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.699326][T18830] bridge_slave_0: left allmulticast mode [ 530.710374][T18830] bridge_slave_0: left promiscuous mode [ 530.716390][T18830] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.782235][T18837] xt_HMARK: spi-set and port-set can't be combined [ 530.989796][T18847] __nla_validate_parse: 10 callbacks suppressed [ 530.989816][T18847] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3810'. [ 531.015941][T18847] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3810'. [ 531.025627][T18847] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3810'. [ 531.035120][T18848] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3810'. [ 531.045893][T18848] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3810'. [ 531.055566][T18848] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3810'. [ 531.258545][T18861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3815'. [ 531.283282][T18863] netlink: 'syz.4.3816': attribute type 5 has an invalid length. [ 531.309158][T18861] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 531.321120][T18861] bond1 (unregistering): Released all slaves [ 531.340098][T18866] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 531.401817][T18870] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 531.503846][T18874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3820'. [ 531.529011][T18875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3820'. [ 531.660279][T18870] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.668077][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.785041][T18870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.974075][T18870] vlan0: left allmulticast mode [ 531.979198][T18870] veth0_vlan: left allmulticast mode [ 531.992722][T18870] vlan0: left promiscuous mode [ 532.024619][T18893] tipc: Started in network mode [ 532.030503][T18893] tipc: Node identity b6095a63d15c, cluster identity 4711 [ 532.038257][T18893] tipc: Enabled bearer , priority 0 [ 532.045086][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.060741][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 532.070211][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.081340][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 532.096621][T18898] syzkaller0: entered promiscuous mode [ 532.107699][T18898] syzkaller0: entered allmulticast mode [ 532.147656][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.170494][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 532.180640][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.190526][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 532.201962][T18889] tipc: Resetting bearer [ 532.216819][T18883] tipc: Resetting bearer [ 532.318781][T18883] tipc: Disabling bearer [ 532.377020][T18925] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 532.427696][T18925] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 532.435791][T18925] gretap2: entered promiscuous mode [ 532.442309][T18925] gretap2: entered allmulticast mode [ 532.454118][T18931] netlink: 'syz.2.3835': attribute type 12 has an invalid length. [ 532.462491][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3833'. [ 533.099302][T18968] tipc: Started in network mode [ 533.107735][T18968] tipc: Node identity 065b37015712, cluster identity 4711 [ 533.134676][T18968] tipc: Enabled bearer , priority 0 [ 533.169996][T18974] syzkaller0: entered promiscuous mode [ 533.188982][T18974] syzkaller0: entered allmulticast mode [ 533.253397][T18968] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 533.301134][T18968] tipc: Resetting bearer [ 533.330477][T18964] tipc: Resetting bearer [ 533.393474][T18964] tipc: Disabling bearer [ 533.836536][T19017] gretap1: entered promiscuous mode [ 533.879525][T19017] gretap1: entered allmulticast mode [ 534.408722][T19060] netlink: 'syz.3.3877': attribute type 1 has an invalid length. [ 534.443804][T19062] netlink: 'syz.2.3875': attribute type 3 has an invalid length. [ 534.499825][T19064] netlink: 'syz.1.3878': attribute type 1 has an invalid length. [ 534.607121][T19064] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.642153][T19072] bond4: (slave gretap2): making interface the new active one [ 534.655049][T19072] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 535.053604][T19103] veth0: entered promiscuous mode [ 535.369070][T19117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 535.628660][T19141] netlink: 'syz.0.3900': attribute type 11 has an invalid length. [ 535.783718][T19150] netlink: 'syz.4.3905': attribute type 29 has an invalid length. [ 535.811686][T19150] netlink: 'syz.4.3905': attribute type 29 has an invalid length. [ 535.824141][T19150] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 536.021353][T19166] __nla_validate_parse: 21 callbacks suppressed [ 536.021372][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3912'. [ 536.178793][T19183] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 536.336290][T19193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3920'. [ 536.348574][T19196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3922'. [ 536.364256][T19193] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3920'. [ 536.377410][T19193] netlink: 'syz.1.3920': attribute type 6 has an invalid length. [ 536.392310][T19193] netlink: 'syz.1.3920': attribute type 5 has an invalid length. [ 536.400574][T19193] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3920'. [ 536.463964][T19205] tipc: Enabling of bearer rejected, failed to enable media [ 536.634556][T19215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.837818][T19236] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3931'. [ 536.945680][T19242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3935'. [ 537.091116][T19252] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3938'. [ 537.140327][T19252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3938'. [ 537.395640][T19283] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3945'. [ 537.486150][T19286] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 537.720798][T19305] tipc: Enabled bearer , priority 0 [ 537.792536][T19305] syzkaller0: entered promiscuous mode [ 537.798654][T19305] syzkaller0: entered allmulticast mode [ 537.994724][T19304] tipc: Resetting bearer [ 539.425045][T19304] tipc: Disabling bearer [ 539.436940][T19331] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 540.093543][T19354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.515202][T19420] syzkaller0: entered promiscuous mode [ 540.524204][T19420] syzkaller0: entered allmulticast mode [ 540.536182][T19420] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 541.077065][T19462] __nla_validate_parse: 14 callbacks suppressed [ 541.077084][T19462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3997'. [ 541.122171][T19462] netlink: 'syz.2.3997': attribute type 7 has an invalid length. [ 541.146529][T19462] netlink: 'syz.2.3997': attribute type 8 has an invalid length. [ 541.169889][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3997'. [ 541.213999][T19470] syzkaller0: entered promiscuous mode [ 541.219768][T19470] syzkaller0: entered allmulticast mode [ 541.229647][T19470] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 541.280649][T19472] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 541.292847][T19472] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 541.317216][T19472] gretap3: entered promiscuous mode [ 541.322763][T19472] gretap3: entered allmulticast mode [ 541.345820][T19476] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.4003'. [ 541.504910][T19489] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 541.893757][T19512] tipc: Started in network mode [ 541.899028][T19512] tipc: Node identity 1, cluster identity 4711 [ 541.907742][T19512] tipc: Node number set to 1 [ 541.983098][T19514] bond5: option all_slaves_active: invalid value (222) [ 541.991651][T19514] bond5 (unregistering): Released all slaves [ 542.016576][T19517] pim6reg: entered allmulticast mode [ 542.023054][T19517] pim6reg: left allmulticast mode [ 542.606928][T19549] tipc: Enabled bearer , priority 0 [ 542.637089][T19549] syzkaller0: entered promiscuous mode [ 542.643371][T19549] syzkaller0: entered allmulticast mode [ 542.663522][T19549] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 542.686490][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4024'. [ 542.742472][T19558] tipc: Resetting bearer [ 542.767054][T19548] tipc: Resetting bearer [ 542.791916][T19548] tipc: Disabling bearer [ 542.825697][T19566] netlink: 'syz.0.4029': attribute type 9 has an invalid length. [ 542.834467][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'. [ 542.843824][T19566] netlink: 'syz.0.4029': attribute type 9 has an invalid length. [ 542.851699][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'. [ 542.955475][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4031'. [ 543.029018][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4031'. [ 543.091447][T19586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4035'. [ 543.303537][T19595] netlink: 'syz.4.4037': attribute type 1 has an invalid length. [ 543.381833][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 543.622285][T19625] nbd: must specify an index to disconnect [ 543.627000][T19627] netlink: 'syz.3.4047': attribute type 17 has an invalid length. [ 543.850486][T19639] gtp0: entered promiscuous mode [ 543.862714][T19639] gtp0: entered allmulticast mode [ 543.921427][T19644] netlink: 'syz.4.4053': attribute type 8 has an invalid length. [ 543.929104][T19646] netlink: 'syz.2.4054': attribute type 21 has an invalid length. [ 543.958259][ T3548] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.976367][ T3548] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.004623][ T3548] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.026222][T19648] netlink: 'syz.3.4055': attribute type 5 has an invalid length. [ 544.044920][T19648] geneve4: entered promiscuous mode [ 544.050611][T19648] geneve4: entered allmulticast mode [ 544.058216][ T3548] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.077414][ T3548] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 544.107539][ T3548] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 544.107694][T19653] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 544.164655][ T3548] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 544.183712][ T3548] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 544.436443][T19674] netlink: 'syz.2.4063': attribute type 4 has an invalid length. [ 544.803467][T19695] tipc: Enabled bearer , priority 0 [ 544.811088][T19695] syzkaller0: entered promiscuous mode [ 544.816576][T19695] syzkaller0: entered allmulticast mode [ 544.903004][T19695] tipc: Resetting bearer [ 544.932753][T19694] tipc: Resetting bearer [ 544.983124][T19694] tipc: Disabling bearer [ 545.283692][T19733] nbd: must specify at least one socket [ 545.536596][T19743] netlink: 'syz.1.4083': attribute type 11 has an invalid length. [ 545.793254][T19763] vlan2: entered promiscuous mode [ 545.798683][T19763] vlan2: entered allmulticast mode [ 545.803814][T19763] hsr_slave_1: entered allmulticast mode [ 545.974576][T19773] netlink: 'syz.1.4095': attribute type 11 has an invalid length. [ 546.127452][T19788] __nla_validate_parse: 18 callbacks suppressed [ 546.127472][T19788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4100'. [ 546.152423][T19784] validate_nla: 1 callbacks suppressed [ 546.152443][T19784] netlink: 'syz.1.4098': attribute type 6 has an invalid length. [ 546.179553][T19784] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4098'. [ 546.338431][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4106'. [ 546.348752][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4106'. [ 546.541876][T19817] tipc: Enabled bearer , priority 0 [ 546.549848][T19817] syzkaller0: entered promiscuous mode [ 546.555497][T19817] syzkaller0: entered allmulticast mode [ 546.568473][T19817] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 546.657972][T19817] tipc: Resetting bearer [ 546.670976][T19819] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4110'. [ 546.681737][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4110'. [ 546.690884][T19816] tipc: Resetting bearer [ 546.723879][T19816] tipc: Disabling bearer [ 546.735449][T19824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4110'. [ 546.787244][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4111'. [ 546.824559][T19824] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 546.835780][T19824] gretap3: entered promiscuous mode [ 546.845110][T19824] gretap3: entered allmulticast mode [ 547.001592][T19848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4118'. [ 547.072107][T19858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4115'. [ 547.093389][T19857] netlink: 'syz.2.4120': attribute type 1 has an invalid length. [ 547.183079][T19862] netlink: 'syz.1.4121': attribute type 3 has an invalid length. [ 547.193205][T19862] netlink: 'syz.1.4121': attribute type 10 has an invalid length. [ 547.195247][T19864] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 547.452166][T19884] batman_adv: batadv0: Adding interface: dummy0 [ 547.459743][T19884] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.513285][T19884] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 547.684683][T19907] macvtap1: entered promiscuous mode [ 547.690673][T19907] vlan0: entered promiscuous mode [ 547.718046][T19907] macvtap1: entered allmulticast mode [ 547.723484][T19907] vlan0: entered allmulticast mode [ 547.748740][T19907] veth0_vlan: entered allmulticast mode [ 547.829918][T19910] macvtap2: entered promiscuous mode [ 547.855097][T19910] macvtap2: entered allmulticast mode [ 548.743800][T19976] netlink: 'syz.3.4158': attribute type 1 has an invalid length. [ 548.752132][T19976] netlink: 'syz.3.4158': attribute type 1 has an invalid length. [ 548.934847][T19991] netlink: zone id is out of range [ 548.944977][T19992] sctp: [Deprecated]: syz.3.4161 (pid 19992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.944977][T19992] Use struct sctp_sack_info instead [ 548.949016][T19991] netlink: del zone limit has 8 unknown bytes [ 549.243280][T20013] netlink: zone id is out of range [ 549.267753][T20013] netlink: zone id is out of range [ 549.280803][T20013] netlink: get zone limit has 8 unknown bytes [ 549.474758][T20019] IPVS: Scheduler module ip_vs_sip not found [ 549.501585][T20030] netlink: 'syz.2.4175': attribute type 10 has an invalid length. [ 549.509742][T20030] batadv0: entered promiscuous mode [ 549.514985][T20030] batadv0: entered allmulticast mode [ 549.523232][T20030] bridge0: port 3(batadv0) entered blocking state [ 549.530050][T20030] bridge0: port 3(batadv0) entered disabled state [ 549.598864][ T1129] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 549.608814][ T1129] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 549.817442][T20051] syzkaller1: entered promiscuous mode [ 549.827264][T20051] syzkaller1: entered allmulticast mode [ 549.894254][T20056] netlink: 'syz.4.4183': attribute type 10 has an invalid length. [ 549.912232][T20059] gre0: entered promiscuous mode [ 549.941840][T20059] bond3: (slave gretap0): Device is not bonding slave [ 549.956970][T20059] bond3: option active_slave: invalid value (gretap0) [ 549.970813][T20059] bond3 (unregistering): Released all slaves [ 550.034468][T20067] netlink: 'syz.2.4184': attribute type 1 has an invalid length. [ 550.062110][T20067] netlink: 'syz.2.4184': attribute type 1 has an invalid length. [ 550.288878][T20088] tipc: Enabling of bearer rejected, failed to enable media [ 550.350285][T20088] tipc: Enabled bearer , priority 0 [ 550.367504][T20088] syzkaller0: entered promiscuous mode [ 550.377346][T20088] syzkaller0: entered allmulticast mode [ 550.452023][T20088] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 550.504882][T20088] tipc: Resetting bearer [ 550.536036][T20077] tipc: Resetting bearer [ 550.583604][T20077] tipc: Disabling bearer [ 550.993984][T20126] sctp: [Deprecated]: syz.0.4204 (pid 20126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.993984][T20126] Use struct sctp_sack_info instead [ 551.158160][T20130] tipc: Enabled bearer , priority 0 [ 551.180071][T20130] syzkaller0: entered promiscuous mode [ 551.185590][T20130] syzkaller0: entered allmulticast mode [ 551.272914][T20130] tipc: Resetting bearer [ 551.305430][T20129] tipc: Resetting bearer [ 551.367453][T20129] tipc: Disabling bearer [ 551.630823][T20161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.653814][T20153] syzkaller0: entered promiscuous mode [ 551.659684][T20153] syzkaller0: entered allmulticast mode [ 551.698216][T20159] syzkaller1: entered promiscuous mode [ 551.703737][T20159] syzkaller1: entered allmulticast mode [ 553.185540][T20183] validate_nla: 1 callbacks suppressed [ 553.185559][T20183] netlink: 'syz.2.4222': attribute type 10 has an invalid length. [ 553.256068][T20183] veth0_vlan: entered allmulticast mode [ 553.278384][T20183] veth0_vlan: left promiscuous mode [ 553.292034][T20183] veth0_vlan: entered promiscuous mode [ 553.308730][T20183] team0: Device veth0_vlan failed to register rx_handler [ 553.515562][T20203] __nla_validate_parse: 22 callbacks suppressed [ 553.515583][T20203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4228'. [ 553.536587][T20209] syzkaller1: entered promiscuous mode [ 553.542433][T20209] syzkaller1: entered allmulticast mode [ 553.605047][T20215] netlink: 'syz.0.4232': attribute type 83 has an invalid length. [ 553.764233][T20203] hsr_slave_0 (unregistering): left promiscuous mode [ 554.074440][T20249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.092037][T20248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4242'. [ 554.294183][T20258] syz_tun: entered allmulticast mode [ 554.353376][T20257] syz_tun: left allmulticast mode [ 554.480261][T20271] openvswitch: netlink: Missing key (keys=40, expected=100) [ 554.650148][T20287] netlink: 'syz.0.4256': attribute type 6 has an invalid length. [ 554.792762][T20308] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 554.956837][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4264'. [ 554.966320][T20319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4264'. [ 555.050435][T20327] netlink: 'syz.4.4268': attribute type 12 has an invalid length. [ 555.068783][T20329] netlink: 'syz.3.4266': attribute type 1 has an invalid length. [ 555.103091][T20329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.134630][T20329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.141923][T20329] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 555.153168][T20329] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 555.187398][T20333] veth3: entered promiscuous mode [ 555.195737][T20333] bond2: (slave veth3): Enslaving as an active interface with a down link [ 555.206966][T20333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4266'. [ 555.216882][T20333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.536037][T20352] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 555.543484][T20352] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 555.597298][T20355] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 555.606036][T20355] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 555.738168][T20361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'. [ 555.751073][T20361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4278'. [ 555.795749][T20361] sctp: [Deprecated]: syz.2.4278 (pid 20361) Use of int in max_burst socket option. [ 555.795749][T20361] Use struct sctp_assoc_value instead [ 555.825544][T20366] netlink: 'syz.1.4280': attribute type 1 has an invalid length. [ 555.913380][T20366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 556.097361][T20383] netlink: 'syz.1.4284': attribute type 10 has an invalid length. [ 556.121914][T20383] veth1_macvtap: left promiscuous mode [ 556.220396][T20390] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 556.287902][T20390] bond3: entered promiscuous mode [ 556.293524][T20390] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.369655][T20400] netlink: 516 bytes leftover after parsing attributes in process `syz.4.4288'. [ 556.383515][T20390] bond3: (slave bridge2): making interface the new active one [ 556.396334][T20390] bridge2: entered promiscuous mode [ 556.403489][T20390] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 556.431648][T20400] mac80211_hwsim hwsim25 ÿ: renamed from wlan1 [ 556.961344][T20419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4292'. [ 557.361814][T20457] erspan0: entered promiscuous mode [ 557.372746][T20457] erspan0: entered allmulticast mode [ 557.446867][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4301'. [ 557.469024][T20461] tipc: Enabled bearer , priority 0 [ 557.486230][T20463] syzkaller0: entered promiscuous mode [ 557.500074][T20463] syzkaller0: entered allmulticast mode [ 557.543875][T20464] tipc: Resetting bearer [ 557.582390][T20464] tipc: Disabling bearer [ 557.981328][T20498] netlink: 'syz.2.4314': attribute type 1 has an invalid length. [ 558.116649][T20512] netlink: 'syz.2.4318': attribute type 11 has an invalid length. [ 558.198268][T20515] netlink: 'syz.4.4317': attribute type 1 has an invalid length. [ 558.272601][T20509] netlink: 'syz.4.4317': attribute type 1 has an invalid length. [ 558.486479][T20535] netlink: 'syz.4.4324': attribute type 1 has an invalid length. [ 558.532324][T20535] __nla_validate_parse: 5 callbacks suppressed [ 558.532344][T20535] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4324'. [ 558.635664][T20537] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4323'. [ 558.677076][T20541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4325'. [ 558.715955][T20541] netlink: 'syz.2.4325': attribute type 18 has an invalid length. [ 558.872268][T20541] can: request_module (can-proto-0) failed. [ 558.905347][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4328'. [ 558.915885][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4328'. [ 558.925190][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4328'. [ 559.197917][T20565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4332'. [ 559.386354][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4336'. [ 559.570415][T20591] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.4339'. [ 559.927102][T20609] veth0: entered promiscuous mode [ 559.935547][T20609] netlink: 'syz.1.4344': attribute type 21 has an invalid length. [ 560.068921][T20621] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4347'. [ 560.089472][T20608] veth0: left promiscuous mode [ 560.335194][T20632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.345575][T20632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.355996][T20632] bond0 (unregistering): (slave team0): Releasing backup interface [ 560.366868][T20632] bond0 (unregistering): Released all slaves [ 560.962878][T20674] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 562.139597][T20744] IPVS: Error connecting to the multicast addr [ 562.310818][T14530] IPVS: starting estimator thread 0... [ 562.417901][T20760] IPVS: using max 23 ests per chain, 55200 per kthread [ 562.670702][T20771] netlink: 'syz.0.4395': attribute type 10 has an invalid length. [ 562.990331][T20771] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 563.375597][T20793] ip6erspan0: entered promiscuous mode [ 563.382102][T20793] ip6erspan0: entered allmulticast mode [ 563.425236][T20791] wlan0 speed is unknown, defaulting to 1000 [ 563.425286][T20797] veth1_to_bond: entered allmulticast mode [ 563.525301][T20801] bond0: (slave bond_slave_1): Releasing backup interface [ 563.530464][T20810] sock: sock_set_timeout: `syz.2.4408' (pid 20810) tries to set negative timeout [ 563.580911][T20801] veth1_to_bond (unregistering): left allmulticast mode [ 563.612294][T20791] lo speed is unknown, defaulting to 1000 [ 563.619206][T20810] batman_adv: batadv0: Removing interface: dummy0 [ 563.628332][T20810] bridge0: port 3(batadv0) entered disabled state [ 563.652375][ T30] audit: type=1804 audit(1759526475.367:6): pid=20812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4409" name="/newroot/304/cgroup.controllers" dev="tmpfs" ino=1562 res=1 errno=0 [ 563.691392][T20810] bridge_slave_0: left allmulticast mode [ 563.699266][T20810] bridge_slave_0: left promiscuous mode [ 563.713633][T20810] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.726801][ T30] audit: type=1800 audit(1759526475.367:7): pid=20812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4409" name="cgroup.controllers" dev="tmpfs" ino=1562 res=0 errno=0 [ 563.750699][T20810] bridge_slave_1: left allmulticast mode [ 563.767549][T20810] bridge_slave_1: left promiscuous mode [ 563.773679][T20810] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.788481][T20810] bond0: (slave bond_slave_0): Releasing backup interface [ 563.803989][T20810] bond0: (slave bond_slave_1): Releasing backup interface [ 563.821992][T20810] team0: Port device team_slave_0 removed [ 563.831834][T20810] team0: Port device team_slave_1 removed [ 563.841800][T20810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.856715][T20810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 563.886183][T20816] netlink: 'syz.1.4410': attribute type 4 has an invalid length. [ 563.987317][T20820] tap0: tun_chr_ioctl cmd 1074025672 [ 563.994983][T20820] tap0: ignored: set checksum disabled [ 564.042197][T20832] netlink: 'syz.0.4413': attribute type 1 has an invalid length. [ 564.050597][T20831] netlink: 'syz.0.4413': attribute type 1 has an invalid length. [ 564.074326][T20834] netlink: 'syz.4.4414': attribute type 1 has an invalid length. [ 564.150902][T20836] bond4: (slave gretap4): making interface the new active one [ 564.160591][T20836] bond4: (slave gretap4): Enslaving as an active interface with an up link [ 564.191488][T20839] __nla_validate_parse: 16 callbacks suppressed [ 564.191508][T20839] netlink: 340 bytes leftover after parsing attributes in process `syz.1.4415'. [ 564.244288][T20843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4414'. [ 564.321908][T20842] 8021q: adding VLAN 0 to HW filter on device bond9 [ 564.341634][T20842] bond0: (slave bond9): making interface the new active one [ 564.356095][T20842] bond0: (slave bond9): Enslaving as an active interface with an up link [ 564.393610][T20843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.695944][T20863] ip6gre1: entered allmulticast mode [ 564.748597][T20859] syzkaller0: entered promiscuous mode [ 564.754167][T20859] syzkaller0: entered allmulticast mode [ 564.820877][T20875] dvmrp0: entered allmulticast mode [ 564.843637][T20880] netlink: 'syz.1.4427': attribute type 33 has an invalid length. [ 564.853985][T20880] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4427'. [ 564.873005][T20873] dvmrp0: left allmulticast mode [ 564.924567][T20859] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 565.071744][T20886] netlink: 'syz.0.4430': attribute type 21 has an invalid length. [ 565.080708][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4429'. [ 565.393241][T20903] dvmrp0: entered allmulticast mode [ 565.441375][T20908] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 565.612412][T20919] erspan0: entered allmulticast mode [ 565.876391][T20945] erspan0: left promiscuous mode [ 565.884368][T20945] geneve2: left promiscuous mode [ 565.890309][T20945] veth3: left promiscuous mode [ 565.896851][T20945] ip6erspan0: left promiscuous mode [ 565.976868][T20948] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4451'. [ 565.986812][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4451'. [ 566.054463][T20955] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4451'. [ 566.265172][T20966] netlink: 'syz.2.4457': attribute type 6 has an invalid length. [ 566.278454][T20966] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4457'. [ 566.297075][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4458'. [ 566.316996][T20972] wlan0 speed is unknown, defaulting to 1000 [ 566.332535][T20972] lo speed is unknown, defaulting to 1000 [ 566.450826][T20984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4460'. [ 566.781438][T20998] netlink: 'syz.1.4466': attribute type 1 has an invalid length. [ 566.952179][T21008] gtp0: entered promiscuous mode [ 566.957258][T21008] gtp0: entered allmulticast mode [ 566.979172][T21006] gtp1: entered promiscuous mode [ 566.984183][T21006] gtp1: entered allmulticast mode [ 567.541640][T21051] netlink: 'syz.1.4480': attribute type 2 has an invalid length. [ 567.563306][T21051] : entered promiscuous mode [ 567.950432][T21076] netlink: 'syz.0.4490': attribute type 1 has an invalid length. [ 567.976109][T21081] syzkaller0: create flow: hash 908131937 index 1 [ 567.991429][T15410] syzkaller0: tun_net_xmit 76 [ 567.996286][T15410] syzkaller0: tun_net_xmit 48 [ 568.002168][T21077] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 568.012923][T21076] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 568.018431][T14518] syzkaller0: tun_net_xmit 76 [ 568.197922][T21071] syzkaller0: delete flow: hash 908131937 index 1 [ 569.978100][T21101] team0: Port device team_slave_1 removed [ 570.032244][T21117] geneve3: entered promiscuous mode [ 570.037495][T21117] geneve3: entered allmulticast mode [ 570.056985][T21126] delete_channel: no stack [ 570.064210][T21119] __nla_validate_parse: 9 callbacks suppressed [ 570.064228][T21119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4499'. [ 570.179210][T21131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4503'. [ 570.292692][ T1129] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 570.313355][T21131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4503'. [ 570.337876][ T1129] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 570.346724][ T1129] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 570.396401][T21137] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 570.403802][ T1129] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 570.427741][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4503'. [ 571.061908][T21195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4524'. [ 571.445134][T21217] validate_nla: 1 callbacks suppressed [ 571.445146][T21217] netlink: 'syz.2.4528': attribute type 1 has an invalid length. [ 571.462025][T21217] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4528'. [ 571.471343][T21217] netlink: 'syz.2.4528': attribute type 1 has an invalid length. [ 571.652199][T21223] netlink: 'syz.3.4530': attribute type 5 has an invalid length. [ 571.662789][T21224] netlink: 'syz.3.4530': attribute type 5 has an invalid length. [ 571.766609][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 571.783599][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 572.076656][T21254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4538'. [ 572.081082][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4536'. [ 572.087400][T21254] netlink: 'syz.3.4538': attribute type 7 has an invalid length. [ 572.095313][T21255] netlink: 'syz.4.4536': attribute type 4 has an invalid length. [ 572.105491][T21254] netlink: 'syz.3.4538': attribute type 8 has an invalid length. [ 572.131537][T21254] netlink: 'syz.3.4538': attribute type 33 has an invalid length. [ 572.397781][ T5838] Bluetooth: hci0: command tx timeout [ 572.912754][T21295] nft_compat: unsupported protocol 0 [ 573.315115][T21324] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 573.420842][T21327] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 573.603552][T21333] bond4 (unregistering): Released all slaves [ 573.898340][T21348] 8021q: VLANs not supported on lo [ 574.056572][T21361] 8021q: VLANs not supported on ip_vti0 [ 574.068915][T21364] xt_socket: unknown flags 0x50 [ 574.296250][T21384] batadv_slave_0: entered promiscuous mode [ 574.355211][T21384] batadv_slave_0: left promiscuous mode [ 574.449486][T21394] netlink: 'syz.4.4571': attribute type 17 has an invalid length. [ 574.520281][T21394] erspan0: entered promiscuous mode [ 574.577262][T21394] 0ªî{X¹¦: entered promiscuous mode [ 574.608864][T21394] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 574.630714][T21404] delete_channel: no stack [ 574.962327][T21420] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 575.065878][T21387] tipc: Enabled bearer , priority 0 [ 575.104133][T21430] __nla_validate_parse: 14 callbacks suppressed [ 575.104154][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4588'. [ 575.292956][T21386] tipc: Disabling bearer [ 575.444189][T21454] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4592'. [ 575.488133][T21443] can: request_module (can-proto-0) failed. [ 575.595229][T21460] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4597'. [ 575.632108][T21460] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4597'. [ 575.658083][T21460] netlink: 'syz.3.4597': attribute type 6 has an invalid length. [ 575.681333][T21460] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4597'. [ 575.789894][T21474] bridge0: port 3(team0) entered blocking state [ 575.801389][T21474] bridge0: port 3(team0) entered disabled state [ 575.808954][T21474] team0: entered allmulticast mode [ 575.814186][T21474] team_slave_0: entered allmulticast mode [ 575.821281][T21474] team_slave_1: entered allmulticast mode [ 575.830672][T21474] team0: entered promiscuous mode [ 575.835742][T21474] team_slave_0: entered promiscuous mode [ 575.843995][T21474] team_slave_1: entered promiscuous mode [ 576.260753][T21505] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4614'. [ 576.380646][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4616'. [ 576.404482][T21513] nbd: must specify a size in bytes for the device [ 576.612328][T21523] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 576.624736][T21523] bond5 (unregistering): Released all slaves [ 576.661867][T21531] tipc: Enabling of bearer rejected, failed to enable media [ 577.154006][T21568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.290161][T21578] tipc: Enabled bearer , priority 0 [ 577.311440][T21578] syzkaller0: entered promiscuous mode [ 577.316952][T21578] syzkaller0: entered allmulticast mode [ 577.376255][T21583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4636'. [ 577.393018][T21578] tipc: Resetting bearer [ 577.407249][T21583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4636'. [ 577.468225][T21571] tipc: Resetting bearer [ 577.494676][T21571] tipc: Disabling bearer [ 577.750596][T21605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'. [ 577.797085][T21611] tipc: Enabling of bearer rejected, failed to enable media [ 578.654754][T21670] tipc: Enabling of bearer rejected, failed to enable media [ 578.726925][T21675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.405645][T21718] syzkaller1: entered promiscuous mode [ 579.421836][T21718] syzkaller1: entered allmulticast mode [ 579.533140][T21730] tipc: Enabling of bearer rejected, failed to enable media [ 579.583769][T21735] validate_nla: 3 callbacks suppressed [ 579.583788][T21735] netlink: 'syz.2.4678': attribute type 8 has an invalid length. [ 579.633396][T21733] syz.2.4678: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 579.683280][T21733] CPU: 1 UID: 0 PID: 21733 Comm: syz.2.4678 Not tainted syzkaller #0 PREEMPT(full) [ 579.683313][T21733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 579.683326][T21733] Call Trace: [ 579.683333][T21733] [ 579.683342][T21733] dump_stack_lvl+0x189/0x250 [ 579.683375][T21733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.683399][T21733] ? __pfx__printk+0x10/0x10 [ 579.683428][T21733] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 579.683454][T21733] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 579.683481][T21733] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 579.683510][T21733] warn_alloc+0x214/0x310 [ 579.683538][T21733] ? stack_depot_save_flags+0x40/0x860 [ 579.683568][T21733] ? __pfx_warn_alloc+0x10/0x10 [ 579.683596][T21733] ? kasan_save_track+0x4f/0x80 [ 579.683618][T21733] ? xskq_create+0x56/0x170 [ 579.683655][T21733] ? xsk_init_queue+0xb0/0x110 [ 579.683681][T21733] ? xsk_setsockopt+0x4dc/0x8d0 [ 579.683704][T21733] ? do_sock_setsockopt+0x17c/0x1b0 [ 579.683724][T21733] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 579.683744][T21733] ? do_syscall_64+0xfa/0x3b0 [ 579.683763][T21733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.683792][T21733] __vmalloc_node_range_noprof+0x125/0x12f0 [ 579.683853][T21733] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 579.683886][T21733] ? __kasan_kmalloc+0x93/0xb0 [ 579.683912][T21733] vmalloc_user_noprof+0xad/0xf0 [ 579.683938][T21733] ? xskq_create+0xbf/0x170 [ 579.683968][T21733] xskq_create+0xbf/0x170 [ 579.684001][T21733] xsk_init_queue+0xb0/0x110 [ 579.684032][T21733] xsk_setsockopt+0x4dc/0x8d0 [ 579.684063][T21733] ? __pfx_xsk_setsockopt+0x10/0x10 [ 579.684091][T21733] ? __pfx_aa_sk_perm+0x10/0x10 [ 579.684121][T21733] ? aa_sock_opt_perm+0xff/0x1b0 [ 579.684153][T21733] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 579.684181][T21733] ? __pfx_xsk_setsockopt+0x10/0x10 [ 579.684211][T21733] do_sock_setsockopt+0x17c/0x1b0 [ 579.684240][T21733] __x64_sys_setsockopt+0x13f/0x1b0 [ 579.684269][T21733] do_syscall_64+0xfa/0x3b0 [ 579.684288][T21733] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.684316][T21733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.684336][T21733] ? clear_bhb_loop+0x60/0xb0 [ 579.684360][T21733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.684379][T21733] RIP: 0033:0x7fb8ed98eec9 [ 579.684397][T21733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.684414][T21733] RSP: 002b:00007fb8ee79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 579.684435][T21733] RAX: ffffffffffffffda RBX: 00007fb8edbe5fa0 RCX: 00007fb8ed98eec9 [ 579.684449][T21733] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 579.684461][T21733] RBP: 00007fb8eda11f91 R08: 0000000000000004 R09: 0000000000000000 [ 579.684474][T21733] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.684486][T21733] R13: 00007fb8edbe6038 R14: 00007fb8edbe5fa0 R15: 00007ffde0573f48 [ 579.684520][T21733] [ 580.010739][T21733] Mem-Info: [ 580.013933][T21733] active_anon:3923 inactive_anon:0 isolated_anon:0 [ 580.013933][T21733] active_file:3408 inactive_file:40036 isolated_file:0 [ 580.013933][T21733] unevictable:768 dirty:107 writeback:0 [ 580.013933][T21733] slab_reclaimable:12696 slab_unreclaimable:116384 [ 580.013933][T21733] mapped:29124 shmem:1359 pagetables:1275 [ 580.013933][T21733] sec_pagetables:0 bounce:0 [ 580.013933][T21733] kernel_misc_reclaimable:0 [ 580.013933][T21733] free:1308777 free_pcp:13633 free_cma:0 [ 580.059527][T21733] Node 0 active_anon:15692kB inactive_anon:0kB active_file:13632kB inactive_file:159940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116496kB dirty:428kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13380kB pagetables:4956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.091930][T21733] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.122457][T21733] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.151590][T21733] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 580.157379][T21733] Node 0 DMA32 free:1324644kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15756kB inactive_anon:0kB active_file:13632kB inactive_file:159612kB unevictable:1536kB writepending:428kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:40924kB local_pcp:20688kB free_cma:0kB [ 580.190430][T21733] lowmem_reserve[]: 0 0 0 0 0 [ 580.195183][T21733] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.224089][T21733] lowmem_reserve[]: 0 0 0 0 0 [ 580.230105][T21733] Node 1 Normal free:3895104kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14080kB local_pcp:5408kB free_cma:0kB [ 580.261865][T21733] lowmem_reserve[]: 0 0 0 0 0 [ 580.266619][T21733] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 580.279466][T21733] Node 0 DMA32: 1893*4kB (UM) 582*8kB (UME) 410*16kB (UME) 1046*32kB (UME) 231*64kB (UM) 171*128kB (UM) 233*256kB (UME) 273*512kB (UM) 194*1024kB (UME) 7*2048kB (UM) 201*4096kB (UM) = 1324644kB [ 580.299186][T21733] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 580.310870][T21733] Node 1 Normal: 180*4kB (UME) 58*8kB (UME) 42*16kB (UME) 204*32kB (UME) 56*64kB (UME) 13*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 946*4096kB (M) = 3895104kB [ 580.422627][T21733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.507994][T21733] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 580.527400][T21733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.566531][T21733] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 580.601538][T21733] 44800 total pagecache pages [ 580.606271][T21733] 0 pages in swap cache [ 580.625253][T21733] Free swap = 124996kB [ 580.638087][T21733] Total swap = 124996kB [ 580.643443][T21733] 2097051 pages RAM [ 580.647350][T21733] 0 pages HighMem/MovableOnly [ 580.673564][T21733] 423781 pages reserved [ 580.685854][T21733] 0 pages cma reserved [ 580.696431][T21776] __nla_validate_parse: 7 callbacks suppressed [ 580.696474][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4688'. [ 580.769653][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4688'. [ 580.795416][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4688'. [ 580.833303][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4688'. [ 580.846251][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4688'. [ 580.859642][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4688'. [ 580.904645][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4688'. [ 580.991187][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4688'. [ 581.263449][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4688'. [ 581.273246][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4695'. [ 581.292001][T21808] tipc: Enabled bearer , priority 0 [ 581.314673][T21811] syzkaller0: entered promiscuous mode [ 581.326414][T21811] syzkaller0: entered allmulticast mode [ 581.367528][T21799] tipc: Resetting bearer [ 581.374110][T21799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.382686][T21799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.403104][T21816] netlink: 'syz.1.4696': attribute type 4 has an invalid length. [ 581.422721][T21796] tipc: Resetting bearer [ 581.487072][T21796] tipc: Disabling bearer [ 581.774977][T21848] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 582.585760][T21909] netlink: 'syz.3.4720': attribute type 3 has an invalid length. [ 582.611248][T21911] syzkaller1: entered promiscuous mode [ 582.619598][T21911] syzkaller1: entered allmulticast mode [ 582.776188][T21918] delete_channel: no stack [ 582.850630][T21927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.008844][T21943] netlink: 'syz.4.4730': attribute type 10 has an invalid length. [ 583.024153][T21943] geneve0: entered promiscuous mode [ 583.037357][T21943] geneve0: entered allmulticast mode [ 583.051528][T21943] team0: Port device geneve0 added [ 583.066211][ T63] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.087740][T21939] netlink: 'syz.0.4731': attribute type 1 has an invalid length. [ 583.114183][ T63] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.127882][ T63] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.136118][ T63] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.152212][T21951] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 583.251732][T21958] team_slave_0: entered promiscuous mode [ 583.257526][T21958] team_slave_1: entered promiscuous mode [ 583.265928][T21958] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 583.273984][T21958] team0: Device macvtap2 is already an upper device of the team interface [ 583.289508][T21958] team_slave_0: left promiscuous mode [ 583.295031][T21958] team_slave_1: left promiscuous mode [ 583.328010][T21960] IPVS: ip_vs_edit_dest(): server weight less than zero [ 583.336103][T21960] tipc: Enabled bearer , priority 0 [ 583.345427][T21960] syzkaller0: entered promiscuous mode [ 583.350979][T21960] syzkaller0: entered allmulticast mode [ 583.361663][T21959] tipc: Resetting bearer [ 583.407443][T21959] tipc: Disabling bearer [ 584.634544][T22043] netlink: 'syz.2.4761': attribute type 22 has an invalid length. [ 584.701946][T22043] netlink: 'syz.2.4761': attribute type 22 has an invalid length. [ 585.273097][T22087] netlink: 'syz.2.4775': attribute type 10 has an invalid length. [ 585.284320][T22087] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 585.292556][T22087] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 585.300485][T22087] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 585.326228][T22093] netlink: 'syz.2.4775': attribute type 10 has an invalid length. [ 585.339670][T22093] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 585.472166][T22102] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 585.484066][T22102] bond10: (slave vcan1): Error -95 calling set_mac_address [ 585.875070][T22130] netlink: 'syz.3.4787': attribute type 6 has an invalid length. [ 585.929594][T22137] netlink: 'syz.3.4787': attribute type 6 has an invalid length. [ 586.186208][T22148] netlink: 'syz.1.4790': attribute type 1 has an invalid length. [ 586.543339][T22117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.564536][T22117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.612119][T22117] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 586.619620][T22117] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 586.708894][T22117] gretap1: left promiscuous mode [ 586.714146][T22117] gretap1: left allmulticast mode [ 586.725305][T22117] xfrm1: left promiscuous mode [ 586.730598][T22117] xfrm1: left allmulticast mode [ 586.736178][T22117] gretap2: left promiscuous mode [ 586.741554][T22117] gretap2: left allmulticast mode [ 586.749268][T22117] gretap3: left promiscuous mode [ 586.754492][T22117] gretap3: left allmulticast mode [ 586.802525][T22117] ip6gre1: left allmulticast mode [ 586.809650][T22117] gtp0: left promiscuous mode [ 586.815534][T22117] gtp0: left allmulticast mode [ 586.829303][T22117] gtp1: left promiscuous mode [ 586.834025][T22117] gtp1: left allmulticast mode [ 586.852725][T22117] geneve3: left promiscuous mode [ 586.858089][T22117] geneve3: left allmulticast mode [ 586.980537][T22148] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 587.201098][T22186] __nla_validate_parse: 82 callbacks suppressed [ 587.201117][T22186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4794'. [ 587.225555][T22186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4794'. [ 587.234973][ T1129] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.235725][T22186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4794'. [ 587.244305][ T1129] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.244339][ T1129] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 587.245085][ T1129] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.295104][ T1129] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.306865][ T1129] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 587.329246][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4794'. [ 587.349457][ T1129] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.360759][ T1129] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.369771][ T1129] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 587.409635][ T1129] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.427692][ T1129] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.448644][ T1129] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 588.111736][T22200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.144830][T22200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.436194][T22200] bond3: left promiscuous mode [ 588.441733][T22200] bridge0: left promiscuous mode [ 588.454120][T22200] gretap1: left promiscuous mode [ 588.487463][T22200] gtp0: left promiscuous mode [ 588.495885][T22200] gretap3: left promiscuous mode [ 588.512552][T22200] vlan0: left allmulticast mode [ 588.517460][T22200] veth0_vlan: left allmulticast mode [ 588.523895][T22200] vlan0: left promiscuous mode [ 588.529432][T22200] macvtap1: left promiscuous mode [ 588.662978][T16308] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.722882][T16308] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.771333][T16308] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.783129][T22231] netlink: 'syz.1.4807': attribute type 1 has an invalid length. [ 588.798180][T22232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4806'. [ 588.807750][T16308] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.823110][T22232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4806'. [ 588.844343][T22231] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4807'. [ 588.847164][T16308] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.904839][T16308] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.939188][T16308] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.977929][T16308] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.060652][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4812'. [ 589.109024][T22250] can: request_module (can-proto-0) failed. [ 589.154713][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 589.395163][T22267] IPv6: sit1: Disabled Multicast RS [ 589.402785][T22267] sit1: entered allmulticast mode [ 589.422983][T22273] netlink: 'syz.3.4821': attribute type 1 has an invalid length. [ 589.842929][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4826'. [ 589.854015][T22296] netlink: 'syz.3.4826': attribute type 6 has an invalid length. [ 589.880855][T22296] netlink: 'syz.3.4826': attribute type 6 has an invalid length. [ 590.094590][T22309] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 590.279400][T22324] netlink: 'syz.3.4836': attribute type 21 has an invalid length. [ 590.340160][T22321] netlink: 'syz.4.4835': attribute type 18 has an invalid length. [ 590.349195][T22321] netlink: 'syz.4.4835': attribute type 18 has an invalid length. [ 590.503098][T22333] netlink: 'syz.1.4839': attribute type 1 has an invalid length. [ 590.527977][T22333] netlink: 'syz.1.4839': attribute type 4 has an invalid length. [ 590.571698][T22338] netlink: 'syz.2.4841': attribute type 83 has an invalid length. [ 591.096962][T22376] netlink: 'syz.1.4849': attribute type 13 has an invalid length. [ 591.109407][T22378] netlink: 'syz.3.4850': attribute type 1 has an invalid length. [ 591.404531][T22401] batman_adv: batadv0: Adding interface: dummy0 [ 591.411368][T22401] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.468686][T22401] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 591.962806][T22445] 8021q: VLANs not supported on ip6tnl0 [ 591.976824][T22445] bond0: (slave bond_slave_0): Releasing backup interface [ 592.009836][T22445] team0: Port device team_slave_0 removed [ 592.022507][T22445] team0: Port device team_slave_1 removed [ 592.029291][T22445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.038951][T22445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.047184][T22445] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 592.505614][T22474] __nla_validate_parse: 10 callbacks suppressed [ 592.505635][T22474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4878'. [ 592.562551][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4878'. [ 592.570523][T22484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4880'. [ 592.637075][T22488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4881'. [ 592.910953][T22515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.153981][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4892'. [ 593.549125][T22553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4903'. [ 593.727947][T22568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4905'. [ 593.755251][T22568] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4905'. [ 593.925697][T22574] syzkaller1: entered promiscuous mode [ 593.958892][T22574] syzkaller1: entered allmulticast mode [ 593.981708][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4911'. [ 594.090908][T22581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.279157][T22591] delete_channel: no stack [ 594.409018][T22595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.659497][T22614] netlink: 'syz.2.4920': attribute type 11 has an invalid length. [ 594.671593][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4924'. [ 594.929547][T22632] validate_nla: 4 callbacks suppressed [ 594.929567][T22632] netlink: 'syz.3.4928': attribute type 1 has an invalid length. [ 594.936233][T22633] tipc: Enabling of bearer rejected, failed to enable media [ 594.975075][T22632] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 595.147977][T22650] netlink: 'syz.3.4934': attribute type 2 has an invalid length. [ 595.921408][T22669] 8021q: VLANs not supported on sit0 [ 596.313233][T22728] netlink: 'syz.1.4947': attribute type 1 has an invalid length. [ 596.387760][T22733] netlink: 'syz.0.4949': attribute type 1 has an invalid length. [ 596.411096][T22732] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 596.422487][T22732] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 596.485842][T22728] vlan3: entered allmulticast mode [ 596.491206][T22728] bridge0: entered allmulticast mode [ 596.497477][T22728] bond8: (slave vlan3): Opening slave failed [ 596.533385][T22738] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 596.623379][T22749] netlink: 'syz.1.4953': attribute type 10 has an invalid length. [ 596.954433][T22774] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 596.969358][T22774] netlink: 'syz.2.4963': attribute type 5 has an invalid length. [ 597.487088][T22815] syzkaller0: entered allmulticast mode [ 598.808404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.153209][T22837] gre0: left promiscuous mode [ 599.168404][T22837] erspan0: left allmulticast mode [ 599.175253][T22837] batadv0: left promiscuous mode [ 599.214692][T22840] __nla_validate_parse: 12 callbacks suppressed [ 599.214711][T22840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4980'. [ 599.221789][T22837] batadv0: left allmulticast mode [ 599.241754][T22837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.330518][T22845] netlink: 'syz.4.4982': attribute type 1 has an invalid length. [ 599.359920][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'. [ 599.403515][T22841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.610625][T22864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4982'. [ 599.623962][T22864] 8021q: adding VLAN 0 to HW filter on device bond11 [ 599.973614][T22882] ip6gre1: entered allmulticast mode [ 600.338389][T22903] wg1: entered promiscuous mode [ 600.345147][T22903] wg1: entered allmulticast mode [ 600.542564][T22917] netlink: 'syz.1.5003': attribute type 2 has an invalid length. [ 600.711259][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5005'. [ 600.773324][T22926] bond9: option xmit_hash_policy: invalid value (64) [ 600.786956][T22926] bond9 (unregistering): Released all slaves [ 600.795492][T22932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5007'. [ 600.975496][T22947] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5011'. [ 600.994706][T22950] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5011'. [ 600.994746][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5011'. [ 601.022802][T22947] netlink: 31 bytes leftover after parsing attributes in process `syz.1.5011'. [ 601.033659][T22947] netlink: 'syz.1.5011': attribute type 3 has an invalid length. [ 601.042576][T22947] netlink: 'syz.1.5011': attribute type 2 has an invalid length. [ 601.050526][T22947] netlink: 31 bytes leftover after parsing attributes in process `syz.1.5011'. [ 601.060181][T22950] netlink: 'syz.1.5011': attribute type 3 has an invalid length. [ 601.068165][T22950] netlink: 'syz.1.5011': attribute type 2 has an invalid length. [ 602.250732][T23027] block nbd3: Unsupported socket: should be TCP or UNIX. [ 675.607146][T15412] bridge_slave_0: left promiscuous mode [ 675.615060][T15412] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.868694][T15412] erspan0 (unregistering): left promiscuous mode [ 675.979382][T15412] dvmrp0 (unregistering): left allmulticast mode [ 676.676017][T15412] bond1 (unregistering): Released all slaves [ 676.784998][T15412] bond2 (unregistering): Released all slaves [ 676.888663][T15412] bond3 (unregistering): Released all slaves [ 676.909125][T15412] bond0 (unregistering): Released all slaves [ 676.921781][T15412] bond4 (unregistering): Released all slaves [ 677.019643][T15412] tipc: Disabling bearer [ 677.032561][T15412] tipc: Disabling bearer [ 677.040715][T15412] tipc: Left network mode [ 748.558207][ T31] INFO: task kworker/1:7:22165 blocked for more than 143 seconds. [ 748.566086][ T31] Not tainted syzkaller #0 [ 748.571151][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.579890][ T31] task:kworker/1:7 state:D stack:26568 pid:22165 tgid:22165 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 748.592227][ T31] Workqueue: events rfkill_sync_work [ 748.597542][ T31] Call Trace: [ 748.600858][ T31] [ 748.603779][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 748.608412][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 748.613930][ T31] ? __pfx___schedule+0x10/0x10 [ 748.619239][ T31] ? schedule+0x91/0x360 [ 748.623520][ T31] schedule+0x165/0x360 [ 748.627771][ T31] schedule_preempt_disabled+0x13/0x30 [ 748.633258][ T31] __mutex_lock+0x7e6/0x1350 [ 748.638164][ T31] ? __mutex_lock+0x5bb/0x1350 [ 748.647953][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 748.653301][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 748.667653][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.672912][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 748.697706][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 748.704129][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 748.713725][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 748.719977][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 748.725736][ T31] rfkill_set_block+0x1cf/0x440 [ 748.730942][ T31] rfkill_sync_work+0x114/0x200 [ 748.735814][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 748.741847][ T31] process_scheduled_works+0xade/0x17b0 [ 748.747443][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 748.753492][ T31] worker_thread+0x8a0/0xda0 [ 748.758144][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 748.764481][ T31] ? __kthread_parkme+0x7b/0x200 [ 748.769701][ T31] kthread+0x711/0x8a0 [ 748.773803][ T31] ? __pfx_worker_thread+0x10/0x10 [ 748.778936][ T31] ? __pfx_kthread+0x10/0x10 [ 748.783517][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.788959][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.794191][ T31] ? __pfx_kthread+0x10/0x10 [ 748.799005][ T31] ret_from_fork+0x436/0x7d0 [ 748.803591][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 748.808724][ T31] ? __switch_to_asm+0x39/0x70 [ 748.813475][ T31] ? __switch_to_asm+0x33/0x70 [ 748.818247][ T31] ? __pfx_kthread+0x10/0x10 [ 748.822824][ T31] ret_from_fork_asm+0x1a/0x30 [ 748.827855][ T31] [ 748.830917][ T31] INFO: task kworker/1:14:22224 blocked for more than 143 seconds. [ 748.838957][ T31] Not tainted syzkaller #0 [ 748.844015][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.852768][ T31] task:kworker/1:14 state:D stack:27696 pid:22224 tgid:22224 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 748.864968][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 748.871686][ T31] Call Trace: [ 748.874955][ T31] [ 748.877983][ T31] __schedule+0x1798/0x4cc0 [ 748.882514][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 748.888085][ T31] ? __pfx___schedule+0x10/0x10 [ 748.892957][ T31] ? schedule+0x91/0x360 [ 748.897187][ T31] schedule+0x165/0x360 [ 748.901371][ T31] schedule_preempt_disabled+0x13/0x30 [ 748.906822][ T31] __mutex_lock+0x7e6/0x1350 [ 748.911451][ T31] ? __mutex_lock+0x5bb/0x1350 [ 748.916204][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 748.922602][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 748.927670][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 748.933404][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 748.939143][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 748.945198][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 748.951077][ T31] process_scheduled_works+0xade/0x17b0 [ 748.956628][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 748.962896][ T31] worker_thread+0x8a0/0xda0 [ 748.967517][ T31] ? __kthread_parkme+0x7b/0x200 [ 748.972597][ T31] kthread+0x711/0x8a0 [ 748.976711][ T31] ? __pfx_worker_thread+0x10/0x10 [ 748.981985][ T31] ? __pfx_kthread+0x10/0x10 [ 748.986570][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.991810][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.997002][ T31] ? __pfx_kthread+0x10/0x10 [ 749.001634][ T31] ret_from_fork+0x436/0x7d0 [ 749.006217][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 749.011491][ T31] ? __switch_to_asm+0x39/0x70 [ 749.016245][ T31] ? __switch_to_asm+0x33/0x70 [ 749.021057][ T31] ? __pfx_kthread+0x10/0x10 [ 749.025643][ T31] ret_from_fork_asm+0x1a/0x30 [ 749.030448][ T31] [ 749.033479][ T31] INFO: task syz.0.4986:22858 blocked for more than 143 seconds. [ 749.041528][ T31] Not tainted syzkaller #0 [ 749.046472][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.055197][ T31] task:syz.0.4986 state:D stack:26872 pid:22858 tgid:22858 ppid:16349 task_flags:0x400040 flags:0x00080002 [ 749.067136][ T31] Call Trace: [ 749.070585][ T31] [ 749.073514][ T31] __schedule+0x1798/0x4cc0 [ 749.078086][ T31] ? validate_chain+0x897/0x2140 [ 749.083036][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.087889][ T31] ? __pfx___schedule+0x10/0x10 [ 749.092745][ T31] ? schedule+0x91/0x360 [ 749.096973][ T31] schedule+0x165/0x360 [ 749.101363][ T31] schedule_timeout+0x9a/0x270 [ 749.106158][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 749.111574][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.117206][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.122527][ T31] ? wait_for_completion+0x267/0x5d0 [ 749.127981][ T31] wait_for_completion+0x2bf/0x5d0 [ 749.133106][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 749.138883][ T31] ? __flush_work+0xd2/0xbc0 [ 749.143471][ T31] ? __flush_work+0xd2/0xbc0 [ 749.148099][ T31] __flush_work+0x9b9/0xbc0 [ 749.152683][ T31] ? __flush_work+0xd2/0xbc0 [ 749.157256][ T31] ? __pfx___flush_work+0x10/0x10 [ 749.162451][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 749.167798][ T31] ? __pfx___cancel_work+0x10/0x10 [ 749.172923][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 749.178597][ T31] __cancel_work_sync+0xbe/0x110 [ 749.183551][ T31] rfkill_unregister+0x92/0x220 [ 749.188735][ T31] nfc_unregister_device+0x96/0x2a0 [ 749.193969][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 749.200373][ T31] virtual_ncidev_close+0x56/0x90 [ 749.205442][ T31] __fput+0x44c/0xa70 [ 749.209590][ T31] task_work_run+0x1d1/0x260 [ 749.214211][ T31] ? __pfx_task_work_run+0x10/0x10 [ 749.219631][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 749.225103][ T31] exit_to_user_mode_loop+0xe9/0x110 [ 749.230512][ T31] do_syscall_64+0x2bd/0x3b0 [ 749.235109][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.240341][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.246396][ T31] ? clear_bhb_loop+0x60/0xb0 [ 749.251296][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.257196][ T31] RIP: 0033:0x7f295f58eec9 [ 749.261640][ T31] RSP: 002b:00007ffc2605df88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 749.270225][ T31] RAX: 0000000000000000 RBX: 00000000000925aa RCX: 00007f295f58eec9 [ 749.278533][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 749.286513][ T31] RBP: 00007f295f7e7da0 R08: 0000000000000001 R09: 0000001e2605e27f [ 749.294508][ T31] R10: 0000001b2f920000 R11: 0000000000000246 R12: 00007f295f7e5fac [ 749.302518][ T31] R13: 00007f295f7e5fa0 R14: ffffffffffffffff R15: 00007ffc2605e0a0 [ 749.310701][ T31] [ 749.313831][ T31] INFO: task syz.3.5012:22953 blocked for more than 144 seconds. [ 749.323182][ T31] Not tainted syzkaller #0 [ 749.328148][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.336817][ T31] task:syz.3.5012 state:D stack:25288 pid:22953 tgid:22952 ppid:15466 task_flags:0x400040 flags:0x00080002 [ 749.349041][ T31] Call Trace: [ 749.352354][ T31] [ 749.355297][ T31] __schedule+0x1798/0x4cc0 [ 749.360056][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.364933][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.369920][ T31] ? __pfx___schedule+0x10/0x10 [ 749.374771][ T31] ? schedule+0x91/0x360 [ 749.379184][ T31] schedule+0x165/0x360 [ 749.383335][ T31] schedule_preempt_disabled+0x13/0x30 [ 749.388814][ T31] __mutex_lock+0x7e6/0x1350 [ 749.393396][ T31] ? __mutex_lock+0x5bb/0x1350 [ 749.398230][ T31] ? rfkill_register+0x37/0x8e0 [ 749.403092][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 749.408299][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 749.413838][ T31] ? device_initialize+0x24b/0x440 [ 749.418984][ T31] rfkill_register+0x37/0x8e0 [ 749.423659][ T31] nfc_register_device+0x14a/0x320 [ 749.428815][ T31] nci_register_device+0x87f/0x9d0 [ 749.433924][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 749.439799][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 749.445095][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 749.450515][ T31] virtual_ncidev_open+0x129/0x1a0 [ 749.455621][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 749.461287][ T31] misc_open+0x2b9/0x330 [ 749.465523][ T31] chrdev_open+0x4c9/0x5e0 [ 749.470167][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 749.475097][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 749.481447][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 749.486368][ T31] do_dentry_open+0x953/0x13f0 [ 749.491191][ T31] vfs_open+0x3b/0x340 [ 749.495275][ T31] ? path_openat+0x2ecd/0x3830 [ 749.500287][ T31] path_openat+0x2ee5/0x3830 [ 749.504868][ T31] ? arch_stack_walk+0xfc/0x150 [ 749.509801][ T31] ? stack_depot_save_flags+0x40/0x860 [ 749.515263][ T31] ? __pfx_path_openat+0x10/0x10 [ 749.520219][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.526322][ T31] do_filp_open+0x1fa/0x410 [ 749.531036][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.535993][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 749.541056][ T31] ? _raw_spin_unlock+0x28/0x50 [ 749.545913][ T31] ? alloc_fd+0x64c/0x6c0 [ 749.550283][ T31] do_sys_openat2+0x121/0x1c0 [ 749.554960][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 749.560317][ T31] ? exc_page_fault+0x76/0xf0 [ 749.565001][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 749.570322][ T31] __x64_sys_openat+0x138/0x170 [ 749.575171][ T31] do_syscall_64+0xfa/0x3b0 [ 749.579694][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.584899][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.591399][ T31] ? clear_bhb_loop+0x60/0xb0 [ 749.596166][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.602144][ T31] RIP: 0033:0x7f8c3178eec9 [ 749.606657][ T31] RSP: 002b:00007f8c3267a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 749.615140][ T31] RAX: ffffffffffffffda RBX: 00007f8c319e5fa0 RCX: 00007f8c3178eec9 [ 749.623279][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 749.631273][ T31] RBP: 00007f8c31811f91 R08: 0000000000000000 R09: 0000000000000000 [ 749.639269][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.647229][ T31] R13: 00007f8c319e6038 R14: 00007f8c319e5fa0 R15: 00007fff3a600848 [ 749.655405][ T31] [ 749.658456][ T31] INFO: task syz.4.5029:23014 blocked for more than 144 seconds. [ 749.666167][ T31] Not tainted syzkaller #0 [ 749.671120][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.680096][ T31] task:syz.4.5029 state:D stack:28328 pid:23014 tgid:23013 ppid:15748 task_flags:0x400040 flags:0x00080002 [ 749.692194][ T31] Call Trace: [ 749.695478][ T31] [ 749.698473][ T31] __schedule+0x1798/0x4cc0 [ 749.703005][ T31] ? kasan_save_free_info+0x46/0x50 [ 749.708447][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.713300][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.718179][ T31] ? __pfx___schedule+0x10/0x10 [ 749.723056][ T31] ? schedule+0x91/0x360 [ 749.727291][ T31] schedule+0x165/0x360 [ 749.731474][ T31] schedule_preempt_disabled+0x13/0x30 [ 749.736936][ T31] __mutex_lock+0x7e6/0x1350 [ 749.741686][ T31] ? __mutex_lock+0x5bb/0x1350 [ 749.746446][ T31] ? misc_open+0x51/0x330 [ 749.750829][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 749.755883][ T31] misc_open+0x51/0x330 [ 749.760148][ T31] chrdev_open+0x4c9/0x5e0 [ 749.764564][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 749.769677][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 749.776185][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 749.781181][ T31] do_dentry_open+0x953/0x13f0 [ 749.786038][ T31] vfs_open+0x3b/0x340 [ 749.790141][ T31] ? path_openat+0x2ecd/0x3830 [ 749.794907][ T31] path_openat+0x2ee5/0x3830 [ 749.799657][ T31] ? arch_stack_walk+0xfc/0x150 [ 749.804533][ T31] ? stack_depot_save_flags+0x40/0x860 [ 749.810035][ T31] ? __pfx_path_openat+0x10/0x10 [ 749.814962][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.821076][ T31] do_filp_open+0x1fa/0x410 [ 749.825684][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.830717][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 749.835754][ T31] ? _raw_spin_unlock+0x28/0x50 [ 749.840634][ T31] ? alloc_fd+0x64c/0x6c0 [ 749.844971][ T31] do_sys_openat2+0x121/0x1c0 [ 749.849717][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 749.854903][ T31] ? exc_page_fault+0x76/0xf0 [ 749.859828][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 749.865202][ T31] __x64_sys_openat+0x138/0x170 [ 749.870083][ T31] do_syscall_64+0xfa/0x3b0 [ 749.874577][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.879808][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.885883][ T31] ? clear_bhb_loop+0x60/0xb0 [ 749.890819][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.896715][ T31] RIP: 0033:0x7fa76298eec9 [ 749.901157][ T31] RSP: 002b:00007fa7637a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 749.909601][ T31] RAX: ffffffffffffffda RBX: 00007fa762be5fa0 RCX: 00007fa76298eec9 [ 749.918009][ T31] RDX: 0000000000087142 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 749.926002][ T31] RBP: 00007fa762a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 749.934013][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.942046][ T31] R13: 00007fa762be6038 R14: 00007fa762be5fa0 R15: 00007ffd451bcfc8 [ 749.950196][ T31] [ 749.953250][ T31] INFO: task syz.1.5034:23035 blocked for more than 144 seconds. [ 749.961103][ T31] Not tainted syzkaller #0 [ 749.966043][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.974745][ T31] task:syz.1.5034 state:D stack:28328 pid:23035 tgid:23034 ppid:16012 task_flags:0x400040 flags:0x00080002 [ 749.986838][ T31] Call Trace: [ 749.990151][ T31] [ 749.993076][ T31] __schedule+0x1798/0x4cc0 [ 749.997606][ T31] ? kasan_save_free_info+0x46/0x50 [ 750.002933][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.008172][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.013049][ T31] ? __pfx___schedule+0x10/0x10 [ 750.017987][ T31] ? schedule+0x91/0x360 [ 750.022246][ T31] schedule+0x165/0x360 [ 750.026393][ T31] schedule_preempt_disabled+0x13/0x30 [ 750.031874][ T31] __mutex_lock+0x7e6/0x1350 [ 750.036459][ T31] ? __mutex_lock+0x5bb/0x1350 [ 750.041431][ T31] ? misc_open+0x51/0x330 [ 750.045759][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 750.050831][ T31] misc_open+0x51/0x330 [ 750.054987][ T31] chrdev_open+0x4c9/0x5e0 [ 750.059432][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 750.064361][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 750.070893][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 750.075842][ T31] do_dentry_open+0x953/0x13f0 [ 750.080754][ T31] vfs_open+0x3b/0x340 [ 750.084851][ T31] ? path_openat+0x2ecd/0x3830 [ 750.089664][ T31] path_openat+0x2ee5/0x3830 [ 750.094240][ T31] ? arch_stack_walk+0xfc/0x150 [ 750.099330][ T31] ? stack_depot_save_flags+0x40/0x860 [ 750.104789][ T31] ? __pfx_path_openat+0x10/0x10 [ 750.109751][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.115820][ T31] do_filp_open+0x1fa/0x410 [ 750.120358][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.125201][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 750.130552][ T31] ? _raw_spin_unlock+0x28/0x50 [ 750.135415][ T31] ? alloc_fd+0x64c/0x6c0 [ 750.139775][ T31] do_sys_openat2+0x121/0x1c0 [ 750.144473][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 750.149717][ T31] ? exc_page_fault+0x76/0xf0 [ 750.154563][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 750.160015][ T31] __x64_sys_openat+0x138/0x170 [ 750.164861][ T31] do_syscall_64+0xfa/0x3b0 [ 750.169371][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.174561][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.180672][ T31] ? clear_bhb_loop+0x60/0xb0 [ 750.185569][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.191629][ T31] RIP: 0033:0x7efda8f8eec9 [ 750.196046][ T31] RSP: 002b:00007efda9e8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 750.204515][ T31] RAX: ffffffffffffffda RBX: 00007efda91e5fa0 RCX: 00007efda8f8eec9 [ 750.212528][ T31] RDX: 00000000000c1842 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 750.220843][ T31] RBP: 00007efda9011f91 R08: 0000000000000000 R09: 0000000000000000 [ 750.228980][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.236958][ T31] R13: 00007efda91e6038 R14: 00007efda91e5fa0 R15: 00007fffc67b0e98 [ 750.247620][ T31] [ 750.250765][ T31] INFO: task syz.1.5034:23036 blocked for more than 145 seconds. [ 750.259419][ T31] Not tainted syzkaller #0 [ 750.264366][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.273217][ T31] task:syz.1.5034 state:D stack:28328 pid:23036 tgid:23034 ppid:16012 task_flags:0x400040 flags:0x00080002 [ 750.285166][ T31] Call Trace: [ 750.288671][ T31] [ 750.291600][ T31] __schedule+0x1798/0x4cc0 [ 750.296190][ T31] ? kasan_save_free_info+0x46/0x50 [ 750.301429][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.306301][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.311193][ T31] ? __pfx___schedule+0x10/0x10 [ 750.316059][ T31] ? schedule+0x91/0x360 [ 750.320494][ T31] schedule+0x165/0x360 [ 750.324665][ T31] schedule_preempt_disabled+0x13/0x30 [ 750.330175][ T31] __mutex_lock+0x7e6/0x1350 [ 750.334813][ T31] ? __mutex_lock+0x5bb/0x1350 [ 750.339609][ T31] ? misc_open+0x51/0x330 [ 750.343938][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 750.349148][ T31] misc_open+0x51/0x330 [ 750.353394][ T31] chrdev_open+0x4c9/0x5e0 [ 750.357852][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 750.362813][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 750.369184][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 750.374111][ T31] do_dentry_open+0x953/0x13f0 [ 750.379052][ T31] vfs_open+0x3b/0x340 [ 750.383116][ T31] ? path_openat+0x2ecd/0x3830 [ 750.387905][ T31] path_openat+0x2ee5/0x3830 [ 750.392519][ T31] ? arch_stack_walk+0xfc/0x150 [ 750.397381][ T31] ? stack_depot_save_flags+0x40/0x860 [ 750.403060][ T31] ? __pfx_path_openat+0x10/0x10 [ 750.408317][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.414427][ T31] do_filp_open+0x1fa/0x410 [ 750.419004][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.423876][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 750.428959][ T31] ? _raw_spin_unlock+0x28/0x50 [ 750.433804][ T31] ? alloc_fd+0x64c/0x6c0 [ 750.438295][ T31] do_sys_openat2+0x121/0x1c0 [ 750.442959][ T31] ? __se_sys_futex+0x36f/0x400 [ 750.447848][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 750.453054][ T31] ? __fget_files+0x2a/0x420 [ 750.457703][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 750.462909][ T31] ? __fget_files+0x2a/0x420 [ 750.467497][ T31] __x64_sys_openat+0x138/0x170 [ 750.472516][ T31] do_syscall_64+0xfa/0x3b0 [ 750.477012][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.482308][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.488426][ T31] ? clear_bhb_loop+0x60/0xb0 [ 750.493106][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.499165][ T31] RIP: 0033:0x7efda8f8eec9 [ 750.503572][ T31] RSP: 002b:00007efda9e6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 750.512011][ T31] RAX: ffffffffffffffda RBX: 00007efda91e6090 RCX: 00007efda8f8eec9 [ 750.520018][ T31] RDX: 00000000000c1842 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 750.528287][ T31] RBP: 00007efda9011f91 R08: 0000000000000000 R09: 0000000000000000 [ 750.536252][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.544292][ T31] R13: 00007efda91e6128 R14: 00007efda91e6090 R15: 00007fffc67b0e98 [ 750.552316][ T31] [ 750.555342][ T31] INFO: task syz.1.5034:23037 blocked for more than 145 seconds. [ 750.563245][ T31] Not tainted syzkaller #0 [ 750.568191][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.576841][ T31] task:syz.1.5034 state:D stack:28104 pid:23037 tgid:23034 ppid:16012 task_flags:0x400040 flags:0x00080002 [ 750.588922][ T31] Call Trace: [ 750.592188][ T31] [ 750.595105][ T31] __schedule+0x1798/0x4cc0 [ 750.599642][ T31] ? kasan_save_free_info+0x46/0x50 [ 750.604836][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.609708][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.614543][ T31] ? __pfx___schedule+0x10/0x10 [ 750.619551][ T31] ? schedule+0x91/0x360 [ 750.623791][ T31] schedule+0x165/0x360 [ 750.627965][ T31] schedule_preempt_disabled+0x13/0x30 [ 750.633614][ T31] __mutex_lock+0x7e6/0x1350 [ 750.638353][ T31] ? __mutex_lock+0x5bb/0x1350 [ 750.643123][ T31] ? misc_open+0x51/0x330 [ 750.647442][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 750.652709][ T31] misc_open+0x51/0x330 [ 750.656862][ T31] chrdev_open+0x4c9/0x5e0 [ 750.661313][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 750.666266][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 750.672639][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 750.677624][ T31] do_dentry_open+0x953/0x13f0 [ 750.682411][ T31] vfs_open+0x3b/0x340 [ 750.686474][ T31] ? path_openat+0x2ecd/0x3830 [ 750.691404][ T31] path_openat+0x2ee5/0x3830 [ 750.695980][ T31] ? arch_stack_walk+0xfc/0x150 [ 750.700867][ T31] ? stack_depot_save_flags+0x40/0x860 [ 750.706326][ T31] ? __pfx_path_openat+0x10/0x10 [ 750.711364][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.717433][ T31] do_filp_open+0x1fa/0x410 [ 750.722095][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.726938][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 750.731996][ T31] ? _raw_spin_unlock+0x28/0x50 [ 750.736840][ T31] ? alloc_fd+0x64c/0x6c0 [ 750.741198][ T31] do_sys_openat2+0x121/0x1c0 [ 750.746036][ T31] ? __se_sys_futex+0x36f/0x400 [ 750.751046][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 750.756234][ T31] ? rcu_is_watching+0x15/0xb0 [ 750.761029][ T31] __x64_sys_openat+0x138/0x170 [ 750.765877][ T31] do_syscall_64+0xfa/0x3b0 [ 750.770435][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.775663][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.782127][ T31] ? clear_bhb_loop+0x60/0xb0 [ 750.786827][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.792777][ T31] RIP: 0033:0x7efda8f8eec9 [ 750.797179][ T31] RSP: 002b:00007efda9e49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 750.805644][ T31] RAX: ffffffffffffffda RBX: 00007efda91e6180 RCX: 00007efda8f8eec9 [ 750.813878][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 750.821970][ T31] RBP: 00007efda9011f91 R08: 0000000000000000 R09: 0000000000000000 [ 750.829964][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.838085][ T31] R13: 00007efda91e6218 R14: 00007efda91e6180 R15: 00007fffc67b0e98 [ 750.846060][ T31] [ 750.849103][ T31] INFO: task syz.2.5044:23060 blocked for more than 145 seconds. [ 750.856815][ T31] Not tainted syzkaller #0 [ 750.861794][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.870633][ T31] task:syz.2.5044 state:D stack:28328 pid:23060 tgid:23059 ppid:16848 task_flags:0x400040 flags:0x00080002 [ 750.882578][ T31] Call Trace: [ 750.885845][ T31] [ 750.888819][ T31] __schedule+0x1798/0x4cc0 [ 750.893436][ T31] ? kasan_save_free_info+0x46/0x50 [ 750.898935][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.903808][ T31] ? __lock_acquire+0xab9/0xd20 [ 750.908706][ T31] ? __pfx___schedule+0x10/0x10 [ 750.913608][ T31] ? schedule+0x91/0x360 [ 750.917883][ T31] schedule+0x165/0x360 [ 750.922031][ T31] schedule_preempt_disabled+0x13/0x30 [ 750.927475][ T31] __mutex_lock+0x7e6/0x1350 [ 750.932393][ T31] ? __mutex_lock+0x5bb/0x1350 [ 750.937161][ T31] ? misc_open+0x51/0x330 [ 750.941766][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 750.946788][ T31] misc_open+0x51/0x330 [ 750.950961][ T31] chrdev_open+0x4c9/0x5e0 [ 750.955429][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 750.960704][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 750.967054][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 750.972057][ T31] do_dentry_open+0x953/0x13f0 [ 750.976838][ T31] vfs_open+0x3b/0x340 [ 750.980939][ T31] ? path_openat+0x2ecd/0x3830 [ 750.985695][ T31] path_openat+0x2ee5/0x3830 [ 750.990540][ T31] ? arch_stack_walk+0xfc/0x150 [ 750.995398][ T31] ? stack_depot_save_flags+0x40/0x860 [ 751.000904][ T31] ? __pfx_path_openat+0x10/0x10 [ 751.005830][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.011942][ T31] do_filp_open+0x1fa/0x410 [ 751.016434][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.021499][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 751.026535][ T31] ? _raw_spin_unlock+0x28/0x50 [ 751.031410][ T31] ? alloc_fd+0x64c/0x6c0 [ 751.035733][ T31] do_sys_openat2+0x121/0x1c0 [ 751.040460][ T31] ? __se_sys_futex+0x36f/0x400 [ 751.045327][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 751.050707][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 751.055894][ T31] ? fd_install+0x30d/0x540 [ 751.060465][ T31] __x64_sys_openat+0x138/0x170 [ 751.065308][ T31] do_syscall_64+0xfa/0x3b0 [ 751.069822][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.075029][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.081291][ T31] ? clear_bhb_loop+0x60/0xb0 [ 751.085992][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.091922][ T31] RIP: 0033:0x7fb8ed98eec9 [ 751.096327][ T31] RSP: 002b:00007fb8ee79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 751.104797][ T31] RAX: ffffffffffffffda RBX: 00007fb8edbe5fa0 RCX: 00007fb8ed98eec9 [ 751.112951][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 751.120956][ T31] RBP: 00007fb8eda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 751.128945][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.136903][ T31] R13: 00007fb8edbe6038 R14: 00007fb8edbe5fa0 R15: 00007ffde0573f48 [ 751.145176][ T31] [ 751.148272][ T31] INFO: task syz.2.5044:23066 blocked for more than 145 seconds. [ 751.156022][ T31] Not tainted syzkaller #0 [ 751.161022][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 751.169962][ T31] task:syz.2.5044 state:D stack:26952 pid:23066 tgid:23059 ppid:16848 task_flags:0x400040 flags:0x00080002 [ 751.181976][ T31] Call Trace: [ 751.185250][ T31] [ 751.188206][ T31] __schedule+0x1798/0x4cc0 [ 751.192706][ T31] ? kasan_save_free_info+0x46/0x50 [ 751.198071][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.202910][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.207784][ T31] ? __pfx___schedule+0x10/0x10 [ 751.212661][ T31] ? schedule+0x91/0x360 [ 751.216893][ T31] schedule+0x165/0x360 [ 751.221158][ T31] schedule_preempt_disabled+0x13/0x30 [ 751.226644][ T31] __mutex_lock+0x7e6/0x1350 [ 751.231400][ T31] ? __mutex_lock+0x5bb/0x1350 [ 751.236161][ T31] ? misc_open+0x51/0x330 [ 751.240515][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 751.245550][ T31] misc_open+0x51/0x330 [ 751.249723][ T31] chrdev_open+0x4c9/0x5e0 [ 751.254134][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 751.259230][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 751.265597][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 751.270767][ T31] do_dentry_open+0x953/0x13f0 [ 751.275543][ T31] vfs_open+0x3b/0x340 [ 751.279875][ T31] ? path_openat+0x2ecd/0x3830 [ 751.284669][ T31] path_openat+0x2ee5/0x3830 [ 751.289504][ T31] ? arch_stack_walk+0xfc/0x150 [ 751.294399][ T31] ? stack_depot_save_flags+0x40/0x860 [ 751.300052][ T31] ? __pfx_path_openat+0x10/0x10 [ 751.304984][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.311106][ T31] do_filp_open+0x1fa/0x410 [ 751.315625][ T31] ? __lock_acquire+0xab9/0xd20 [ 751.320511][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 751.325549][ T31] ? _raw_spin_unlock+0x28/0x50 [ 751.330607][ T31] ? alloc_fd+0x64c/0x6c0 [ 751.334956][ T31] do_sys_openat2+0x121/0x1c0 [ 751.339672][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 751.344861][ T31] ? exc_page_fault+0x76/0xf0 [ 751.349614][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 751.354900][ T31] __x64_sys_openat+0x138/0x170 [ 751.359917][ T31] do_syscall_64+0xfa/0x3b0 [ 751.364412][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.369662][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.375719][ T31] ? clear_bhb_loop+0x60/0xb0 [ 751.380418][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.386320][ T31] RIP: 0033:0x7fb8ed98eec9 [ 751.391031][ T31] RSP: 002b:00007fb8ee75d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 751.399527][ T31] RAX: ffffffffffffffda RBX: 00007fb8edbe6180 RCX: 00007fb8ed98eec9 [ 751.407512][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 751.415964][ T31] RBP: 00007fb8eda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 751.424115][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.432117][ T31] R13: 00007fb8edbe6218 R14: 00007fb8edbe6180 R15: 00007ffde0573f48 [ 751.440221][ T31] [ 751.443229][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 751.452587][ T31] [ 751.452587][ T31] Showing all locks held in the system: [ 751.460365][ T31] 1 lock held by khungtaskd/31: [ 751.465311][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 751.475230][ T31] 2 locks held by getty/5600: [ 751.480086][ T31] #0: ffff888033bb50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 751.489889][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 751.500024][ T31] 4 locks held by kworker/u8:10/15412: [ 751.505466][ T31] #0: ffff88801aef6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 751.516675][ T31] #1: ffffc90003b4fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 751.527418][ T31] #2: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 751.536907][ T31] #3: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 751.547234][ T31] 4 locks held by kworker/1:7/22165: [ 751.552575][ T31] #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 751.563584][ T31] #1: ffffc90016b37bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 751.576110][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 751.586142][ T31] #3: ffff8880319ad100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 751.595875][ T31] 3 locks held by kworker/1:14/22224: [ 751.601426][ T31] #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 751.612448][ T31] #1: ffffc900156c7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 751.625982][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 751.637498][ T31] 1 lock held by syz.0.4986/22858: [ 751.642667][ T31] #0: ffff8880319ad100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 751.652494][ T31] 3 locks held by syz.3.5012/22953: [ 751.657996][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.666472][ T31] #1: ffff88805f698100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 751.676103][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 751.686158][ T31] 1 lock held by syz.4.5029/23014: [ 751.691419][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.699890][ T31] 1 lock held by syz.1.5034/23035: [ 751.704984][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.713442][ T31] 1 lock held by syz.1.5034/23036: [ 751.718750][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.727191][ T31] 1 lock held by syz.1.5034/23037: [ 751.732331][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.740818][ T31] 1 lock held by syz.2.5044/23060: [ 751.745915][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.754521][ T31] 1 lock held by syz.2.5044/23066: [ 751.759765][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.768270][ T31] 1 lock held by syz-executor/23069: [ 751.773566][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.782359][ T31] 1 lock held by syz-executor/23071: [ 751.787690][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.796235][ T31] 1 lock held by syz-executor/23073: [ 751.801572][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.810223][ T31] 1 lock held by syz-executor/23075: [ 751.815495][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.823955][ T31] 1 lock held by syz-executor/23077: [ 751.829352][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.838209][ T31] 1 lock held by syz-executor/23079: [ 751.843507][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.852012][ T31] 1 lock held by syz-executor/23081: [ 751.857280][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.865843][ T31] 1 lock held by syz-executor/23083: [ 751.871718][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.880218][ T31] 1 lock held by syz-executor/23085: [ 751.885523][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.894055][ T31] 1 lock held by syz-executor/23087: [ 751.899515][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.908173][ T31] 1 lock held by syz-executor/23089: [ 751.913471][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.922039][ T31] 1 lock held by syz-executor/23091: [ 751.927308][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.935898][ T31] 1 lock held by syz-executor/23093: [ 751.941203][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.949684][ T31] 1 lock held by syz-executor/23095: [ 751.954952][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.963547][ T31] 1 lock held by syz-executor/23097: [ 751.968858][ T31] #0: ffffffff8e556f88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 751.977298][ T31] [ 751.979653][ T31] ============================================= [ 751.979653][ T31] [ 751.988344][ T31] NMI backtrace for cpu 0 [ 751.988362][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 751.988380][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 751.988390][ T31] Call Trace: [ 751.988398][ T31] [ 751.988406][ T31] dump_stack_lvl+0x189/0x250 [ 751.988435][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.988466][ T31] ? __pfx__printk+0x10/0x10 [ 751.988507][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 751.988533][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 751.988559][ T31] ? __pfx__printk+0x10/0x10 [ 751.988591][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 751.988613][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 751.988642][ T31] watchdog+0xf93/0xfe0 [ 751.988666][ T31] ? watchdog+0x1de/0xfe0 [ 751.988690][ T31] kthread+0x711/0x8a0 [ 751.988719][ T31] ? __pfx_watchdog+0x10/0x10 [ 751.988735][ T31] ? __pfx_kthread+0x10/0x10 [ 751.988762][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 751.988790][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.988817][ T31] ? __pfx_kthread+0x10/0x10 [ 751.988842][ T31] ret_from_fork+0x436/0x7d0 [ 751.988866][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 751.988893][ T31] ? __switch_to_asm+0x39/0x70 [ 751.988917][ T31] ? __switch_to_asm+0x33/0x70 [ 751.988941][ T31] ? __pfx_kthread+0x10/0x10 [ 751.988966][ T31] ret_from_fork_asm+0x1a/0x30 [ 751.989008][ T31] [ 751.989015][ T31] Sending NMI from CPU 0 to CPUs 1: [ 752.134597][ C1] NMI backtrace for cpu 1 [ 752.134613][ C1] CPU: 1 UID: 0 PID: 1129 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 752.134634][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 752.134646][ C1] Workqueue: 0x0 (events_unbound) [ 752.134670][ C1] RIP: 0010:resched_curr_lazy+0x0/0x20 [ 752.134698][ C1] Code: ff 4c 89 f7 e8 31 51 94 00 e9 06 fe ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 be 04 00 00 00 66 90 e9 00 fc ff ff f3 0f 1e fa be 05 [ 752.134714][ C1] RSP: 0018:ffffc9000360f838 EFLAGS: 00000002 [ 752.134729][ C1] RAX: 0000000000000000 RBX: ffff888026739ec0 RCX: 0000000000000000 [ 752.134740][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8939fc0 [ 752.134752][ C1] RBP: 0000002e9d58ec88 R08: ffff8880b8927ac3 R09: 1ffff11017124f58 [ 752.134765][ C1] R10: dffffc0000000000 R11: ffffed1017124f59 R12: ffff8880b893aa04 [ 752.134779][ C1] R13: dffffc0000000000 R14: ffff8880b893a080 R15: ffff8880b893a090 [ 752.134792][ C1] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 752.134807][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.134820][ C1] CR2: 00005634fba3d000 CR3: 000000000db36000 CR4: 00000000003526f0 [ 752.134835][ C1] Call Trace: [ 752.134842][ C1] [ 752.134849][ C1] update_curr+0x438/0x730 [ 752.134883][ C1] dequeue_entities+0x1b3/0x30b0 [ 752.134904][ C1] ? sched_clock+0x3f/0x60 [ 752.134929][ C1] ? sched_clock_cpu+0x74/0x430 [ 752.134946][ C1] ? do_raw_spin_lock+0x121/0x290 [ 752.134978][ C1] dequeue_task_fair+0x20e/0x790 [ 752.135003][ C1] __schedule+0x5f1/0x4cc0 [ 752.135041][ C1] ? __lock_acquire+0xab9/0xd20 [ 752.135057][ C1] ? __pfx___schedule+0x10/0x10 [ 752.135091][ C1] ? schedule+0x91/0x360 [ 752.135116][ C1] schedule+0x165/0x360 [ 752.135142][ C1] worker_thread+0xa82/0xda0 [ 752.135162][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 752.135193][ C1] ? __kthread_parkme+0x7b/0x200 [ 752.135217][ C1] kthread+0x711/0x8a0 [ 752.135241][ C1] ? __pfx_worker_thread+0x10/0x10 [ 752.135258][ C1] ? __pfx_kthread+0x10/0x10 [ 752.135281][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 752.135305][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.135330][ C1] ? __pfx_kthread+0x10/0x10 [ 752.135353][ C1] ret_from_fork+0x436/0x7d0 [ 752.135372][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 752.135394][ C1] ? __switch_to_asm+0x39/0x70 [ 752.135416][ C1] ? __switch_to_asm+0x33/0x70 [ 752.135437][ C1] ? __pfx_kthread+0x10/0x10 [ 752.135459][ C1] ret_from_fork_asm+0x1a/0x30 [ 752.135492][ C1] [ 752.135601][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 752.398793][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 752.408069][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 752.418120][ T31] Call Trace: [ 752.421399][ T31] [ 752.424337][ T31] dump_stack_lvl+0x99/0x250 [ 752.428930][ T31] ? __asan_memcpy+0x40/0x70 [ 752.433531][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.438726][ T31] ? __pfx__printk+0x10/0x10 [ 752.443589][ T31] vpanic+0x281/0x750 [ 752.447576][ T31] ? __pfx_vpanic+0x10/0x10 [ 752.452089][ T31] ? preempt_schedule+0xae/0xc0 [ 752.456941][ T31] ? preempt_schedule_common+0x83/0xd0 [ 752.462408][ T31] panic+0xb9/0xc0 [ 752.466141][ T31] ? __pfx_panic+0x10/0x10 [ 752.470558][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 752.475943][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 752.482104][ T31] watchdog+0xfd2/0xfe0 [ 752.486265][ T31] ? watchdog+0x1de/0xfe0 [ 752.490601][ T31] kthread+0x711/0x8a0 [ 752.494702][ T31] ? __pfx_watchdog+0x10/0x10 [ 752.499381][ T31] ? __pfx_kthread+0x10/0x10 [ 752.503973][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 752.509170][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.514400][ T31] ? __pfx_kthread+0x10/0x10 [ 752.518989][ T31] ret_from_fork+0x436/0x7d0 [ 752.523576][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 752.528688][ T31] ? __switch_to_asm+0x39/0x70 [ 752.533448][ T31] ? __switch_to_asm+0x33/0x70 [ 752.538223][ T31] ? __pfx_kthread+0x10/0x10 [ 752.542816][ T31] ret_from_fork_asm+0x1a/0x30 [ 752.547599][ T31] [ 752.550900][ T31] Kernel Offset: disabled [ 752.555216][ T31] Rebooting in 86400 seconds..