last executing test programs: 20.444084905s ago: executing program 2 (id=777): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000340)=@req={0xffff, 0x0, 0xf, 0x40}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000004840)={{0x3, @null, 0x9}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast]}, 0x48) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="01000000009271f20f0000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff00"/28], 0x50) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001200010a00000000000000000a000000100000800c0000000000000000000000f4dc15deddeb9d1aa585e9e9ac47635e664fc8c9f4828eacc6f0345a26fe4912c5bc191a9ca6ea475dd6405fc6b159bfa2b6433b8451bc8b78a2c0a5f22f68a1ea"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000200000085000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 20.038629965s ago: executing program 2 (id=782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) socket(0x1e, 0x5, 0x0) (async) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffef, @remote}, 0x10) sendmsg$nfc_llcp(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x27, r2, 0x1, 0x5, 0x7, 0x78, "5fe4d5b19875d2e69f268d1c86e12008c097093bc83c014554cd63568da830769f5df07306cf0a2edd160d3b50905b0680c1e3b26cde89aca72e0332e08153", 0x20}, 0x60, &(0x7f00000002c0)=[{&(0x7f00000003c0)="50f0cf72dd88111abca4a8c4db6fda70816314b7b633eb5fb1c071169e5edbdc2be302c85d7d82163dd9b77d4ea1dace48f6d44f8863dd363b419bb86a79a6dc2a4cb9bb1d83b9a7dff5ed6024c50fb96ebb33a400c8fccdcb8a6cfb113af85de1fbc0e023", 0x65}], 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) read$alg(r5, &(0x7f0000000040)=""/136, 0x88) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x408, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff7b9b}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa1, 0x3, "701717b13d71f807972623f5a995be81359c53d83518862266f0cf295030fd8509f6888dbb7de4667c01c33774566685a197c8e5269e5c5a0e3db06ff6605ffabcc0df93697789fe5f328e9e9efc98c190df9d20758b2144c1bb52727748a7562ddf8eadd4250f4d3a19269b8edf5877d0850f499378e384dd669d106a816339351f295a0c7d95693e9ae0b1bee337f25d41d57f9b84b2fb4a5e6be24d"}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d54}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2dcf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x911}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @remote, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @empty, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x800000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffc7}}}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000) 19.956636422s ago: executing program 4 (id=783): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, 0x0, 0x88) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e0000180002800400120005001600010000000800150000000076"], 0x48}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000580)="040080354f00020000f641a182c955eb22174d369d49bbd390cf0fa860366d647e42653d6b20f5277f023e3d02adb9594d4ad721c9e8d922234f7323e0f5d0cbcab5b24f725199e1b5950b9b953dcdcce8d4122dbc7e775aa9753a91a0a5f22ca796a2b7fbe35665d1ae72612a4a47c48b903efae9fa30825bc5099ebc06d549b63afe8180", 0x85) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r7, 0x89e1, 0x0) (async) bind$rose(r7, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000100)="b8", 0x1, 0x2004c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r5], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x10) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r9, @ANYRESHEX=r3, @ANYBLOB="0500000000000000006aeb18890008000300", @ANYRES16=r4, @ANYRES16=r9], 0x80}}, 0x0) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r8, &(0x7f0000000840)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[{0x5, 0x0, 0x1}], @ipv4=@icmp={{0x3b, 0x4, 0x3, 0x6, 0xf4, 0x67, 0x0, 0x5, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xcf, 0x3, 0x1, [{@rand_addr=0x64010101}, {@multicast1, 0x9}]}, @timestamp={0x44, 0x14, 0xae, 0x0, 0x3, [0x4, 0x3, 0x6, 0xb90e]}, @noop, @cipso={0x86, 0x28, 0x1, [{0x5, 0x12, "48125df1bbdf87fcfff0b0bbf924a5d8"}, {0x7, 0x4, '\"\n'}, {0x5, 0xc, "8aa62243bee49f8dc7b5"}]}, @timestamp_prespec={0x44, 0x24, 0xe7, 0x3, 0x2, [{@loopback}, {@remote, 0x80000000}, {@local, 0x53}, {@loopback, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0x7d, 0x3, 0xc, [{@broadcast, 0x3}, {@broadcast, 0x1}, {@private=0xa010100, 0x1ff}]}, @cipso={0x86, 0xb, 0x0, [{0x1, 0x5, "268864"}]}, @rr={0x7, 0x3, 0xbb}, @cipso={0x86, 0x36, 0x1, [{0x6, 0x11, "fad4a3eff46d98d197ff64c700bbd4"}, {0x0, 0x10, "3c1bcfc3fcbffdad69803b02ba31"}, {0x2, 0xf, "0e713bea30de14901b5589f068"}]}]}}, @info_reply={0x10, 0x0, 0x0, 0x7ff, 0x48}}}}, 0x106) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r12, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac10358b4300000000000000f5ec23fde52168003cc02117c0dc3366b0245aa5f6540af20db25b59cd80ba9d951c213d21207fcfa885d6542f32ba86ec887dfb61e1f5af7a41ebed1bd6af783eea8fae480602d3282df8ac234ab81a8095f53e563557631a10a1e9722d31a82926f232e99e427db63303cb1154b298ae30eb5b8f3164db33b8cd1ffde0d915069e771097222d1816879aa9ae20e232a93fe2452c3b33021a3df40c30b79d73e5936b1186011323c6d569851f694c5f2a04fcf0e166681eecc6bce0", @ANYRES16=r13, @ANYBLOB="01002dbd7000fbdbdf254f00000008000300", @ANYRES32=r14, @ANYBLOB="40007a800c000300b819ef41b86502d214000100fcd8de2f7da8d502bedccae9683b076e080004000300000014000200af4e8a8b482999ab6e42de5e2fa67314"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) (async) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) close(r15) 19.753744033s ago: executing program 4 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}]}, 0x4c}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x3, 0xa, 0x0, 0x4}, 0x20) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'wg2\x00', @link_local}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f0000000180)=""/93, 0x5d}], 0x3, &(0x7f0000000540)=""/10, 0xa}, 0x7fff}, {{&(0x7f0000000680)=@x25={0x9, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/91, 0x5b}], 0x4, &(0x7f00000009c0)=""/48, 0x30}, 0x200}, {{&(0x7f0000000a00)=@can, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/216, 0xd8}, {&(0x7f0000000b80)=""/133, 0x85}, {&(0x7f0000000c40)=""/6, 0x6}], 0x3, &(0x7f0000000cc0)=""/216, 0xd8}}, {{&(0x7f0000000dc0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e40)=""/170, 0xaa}, {&(0x7f0000000f00)=""/180, 0xb4}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/153, 0x99}], 0x4, &(0x7f00000010c0)=""/88, 0x58}, 0x5}], 0x4, 0x10002, &(0x7f0000001240)={0x0, 0x3938700}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="4bafcd7ebae5f0def07fcee3888dd79853b9ece6de358600db1551c185e070e028fa0818037da842b28d42ca81e281e87483f9ba845046d5af66abc540e0cd73a0036bf756d117a318fb", 0x4a}], 0x1}], 0x1, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 19.032645171s ago: executing program 2 (id=790): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04000000000a0101000000000000b2a2ea7255fddda57a21deed386870f436efead273c89bad45e30423"], 0x20}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r1, @ANYBLOB="408052"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1, 0x4) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x3fa, 0x100, 0x709d2c, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000011) 18.823416611s ago: executing program 0 (id=793): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) socket(0x11, 0x80000, 0x400) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa2}, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) close(r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e00050500000000d813774851eda6970000000004402bb3b406cde1c8504399a500"], 0x14}], 0x1}, 0x0) 18.772305483s ago: executing program 2 (id=794): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="57349c822c89dff9dd3e4a9310b60f61f4eded460d5a1a9a93ed3167987bcd311faba7fce433d0fd8f6ffebce9b20f1d96e2c4314640b468bed6b1", 0x3b, 0x8000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r4}, 0x8) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000300)={r6}) sendmmsg(r4, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1}, 0x20) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 18.679209806s ago: executing program 4 (id=795): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) bind$ax25(r3, &(0x7f0000000380)={{0x3, @bcast, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000340)) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x27d6e1196bebf49a}, 0x24004000) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000e8"], 0x100}, 0x20004094) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x80, 0x0, 0x0, 0x9, 0x7cc81ab7}) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000440)={0xfffffffffffffff8, 0x8, '\x00', 0x0, &(0x7f0000000400)=[0x0]}) 18.552897802s ago: executing program 0 (id=796): mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) pipe(&(0x7f0000002740)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0x8}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}]}]}, 0x50}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x891c, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_mtu=0x10001}) (async) ioctl$sock_netdev_private(r2, 0x8942, &(0x7f0000000040)="10c18905a6f504cb00d6be86fc81fdea592bce42077f34ddececae814e9bc73d67b2ce82d644591abca0b4908ff412d4347a03029b9de68fc40b42fad519e86c1b3557f739c0759b97fd29f45a87b6b99ae6dcc8626f0662961a7ed3437d86836e633d2adca64efc3fb48e3b0e96f9aad3712a737b7771f7f6a4573af628f4ad1eb3152b4727c7681ab9efd372fcfafca495d53a7b5d2ec5e75c97525baa2006a63d6a8743e9bf0c21624a4a49e782407374b1699ff9d34a54a2d6afbaee3a02d0c42c1e1e94dbb74609cacc2da65070138c331a9a8dfac85562fd5b1580ae3c8384008206ff5a309a35fae668fb63ac4352089da9c66dfc6c6160ff2113d1276dfcd269298de875ae4ffb7de0a45e6dd8a5c8adf04b6908c0de607269c65aa7d42a043e03d267a0220b4baa7a7d468e6300eddebe3639001dbb99bd84c3d6c70128c7243fb5ee02fcb2077fb9b07993") 18.479066086s ago: executing program 2 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x0, 0x4b, "1a4cd84fa2e011e4dd96438e4ff170d01747637aaedf5cd0ca57770c86c6098341c17297fe5c9dc31ff39f7ad80caa0ac8925db205092a070c2ad5043c2a29cde9dc795dfaad3c70f08783"}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x404c8c4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000140)={0x80}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '+%$+(%&\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2c000040) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004054) 18.382534314s ago: executing program 4 (id=799): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000100)="8c8871a8e8dfe666edd9205c3eae5e7ea294919ca9d166fc54ca70689ffd59eedc0feecc21f0675a07cd65d2b96b030adcddff61704917556886ab38dca825f93ec80b0313bb8f405341874e05e57ab819cd67a9b18681dacdc40b246934e7d0d10c27817e4537610cfe2114af0fa22fa789cbfbaa69385aed0f4ca4ed54a1caa9a99ff448a747657eaa0b97aa7589587ea5bb294a81b225461d6414cea11c775797e1a21117acce280403f2641e7abc3abf777bc488af63eb9986c7787d3630810c3d2776f82a9a45d24a08637a2c6ee248c21a058e6012bc91414329640de76260c315f29e755991773118") socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001400000000000000000000000200000008000000000000004c0000000000000000000000070000000728"], 0x1b0}, 0x20000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0xffffffffffffffde, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x1ec, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1bc, 0x2, {{0xf, [0xc, 0xa, 0x3, 0xc, 0x8, 0x9, 0x0, 0x8, 0xf, 0xc, 0xa, 0xf, 0x5, 0x3, 0xb, 0xa], 0x1, [0x4, 0x9, 0x3ff, 0x569, 0x2, 0x400, 0xf3, 0x401, 0x6, 0x0, 0x6, 0x7, 0x70e4, 0x9, 0xc6, 0x2], [0x4, 0xfe01, 0xc, 0x3, 0x2, 0x8, 0x6, 0x2, 0x3, 0x100, 0x9, 0x8, 0x8, 0x2, 0x101, 0x9]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x40, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x100000001}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0xf}, {0xc}, {0xc}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x101}, {0xc, 0x3, 0x6}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x94, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x5603}, {0xc, 0x4, 0x7f}, {0xc, 0x4, 0x71c}, {0xc, 0x4, 0x11f9a080}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x5d}, {0xc, 0x4, 0x101}]}, @TCA_MQPRIO_MAX_RATE64={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x7}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x7fff}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x7d1}, {0xc, 0x4, 0xf5}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x1ec}}, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) 18.186837244s ago: executing program 4 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'pim6reg0\x00', {0x6}, 0xfbff}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251000000008003b000300000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 18.18122476s ago: executing program 0 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x7, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x10c, 0x2c, 0x200, 0x70bd2d, 0x25dfdbff, {0x13}, [@generic="d579952c782c6d9601bdfbe3a1a93d80e3c8205c8c4bd3e8badec3b722582c3aec951164ebbaedcbd87da1501488e51e9ce76a92a66f7cf3d11711631aee0d8b9ec0f59474aaa81a293f48f61f1993599288016949183d52adae862e88104fdd035ac125e3905ac294b800a355b0924ab50c0faeb7c20efab4191aceb6f12719eba10f1826c3d212a242af1fc2dbd4862bbbb038bdf4271aa06e162c0166c06d43d901cfb36a8a9eb5d667e6b9a7bf7201db16c885236196b4763f91bafe6aa5de65950eef4be8c27e053e46577735e67fdfc84d3bf946f38d790d79f81d44f34253ccaae51ab5bf8f4d05f2c41465a61319717c97"]}, 0x10c}}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x402, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008000) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f0000000440)=""/124, &(0x7f00000003c0)=0x7c) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8000, 0x7800, 0x79, 0xe, {{0x1c, 0x4, 0x3, 0x7, 0x70, 0x65, 0x0, 0x4, 0x2f, 0x0, @empty, @private=0xa010102, {[@generic={0x89, 0x9, "777f6bc34f5214"}, @end, @timestamp={0x44, 0x1c, 0xc3, 0x0, 0xe, [0x2, 0x4, 0x13, 0x7, 0x101, 0x10001]}, @lsrr={0x83, 0x7, 0x71, [@private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0xc8, 0x3, 0x9, [{@rand_addr=0x64010100, 0x1}, {@multicast2, 0x1}]}, @end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x22, [@remote]}, @rr={0x7, 0xf, 0x56, [@dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010101, @local]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @remote}, 0x20, r6}) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 18.084878012s ago: executing program 2 (id=803): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d039474d534e61800192db35c66a99f", 0x5e}], 0x1}, 0x24000008) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r2], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd70000700000008000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000000)={r10}, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073907800000300e000000100000001fe9a90780200000000000000"], 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000180)={0x3, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x88) 18.084664988s ago: executing program 1 (id=804): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38e6ff00", @ANYRES16, @ANYBLOB="01000000000000000000050000000c59e05439ab47b1cd16003e7e5dce348a90e467253ea6f3d1986d527a"], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x8, 0x700, 0x3ff, 0x6}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38e6ff00", @ANYRES16, @ANYBLOB="01000000000000000000050000000c59e05439ab47b1cd16003e7e5dce348a90e467253ea6f3d1986d527a"], 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x8, 0x700, 0x3ff, 0x6}}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) (async) 18.021398176s ago: executing program 4 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x401400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}, [""]}, 0x24}}, 0x50) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e}, 0x48) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="200a2bbd7000fbdbdf25130000000500e4000100000006001000a30000002c00118004000100040003000400070004000100040006000400070004000700040007000400030004000400050013010200000005001900020000000600ed00ff0300004200be004997b2f289772b85c06a7e82ebe647327ea643674a40b222ca3524f3623e35f56927b2b680549a6a039c6dea0bbbf2b28e5d4c407f7dd516ab0328eb6261e874a0941e7533632a904ed29a00000a000600080211"], 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000e5c9c625cb612a3366aaae00", @ANYRES32=r5, @ANYBLOB="18001d801400008005000900000000000600050059000000"], 0x34}}, 0x0) 17.800073865s ago: executing program 1 (id=807): socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff086dd1fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}, 0x1c) sendto$packet(r3, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000440), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000000), 0x4) 17.799773565s ago: executing program 0 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) listen(r3, 0x3) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb406", 0x21}], 0x1}}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 16.830183843s ago: executing program 0 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x2, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x2}, 0x2}, {0x2, 0x3, {0x2, 0xff, 0x2}, {0x0, 0x1, 0x1}, 0x1, 0x2}, {0x2, 0x2, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0x1, 0x2}, {0x1, 0x1, {0x0, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0xfd}], 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x1000}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x4008) r5 = socket(0x2, 0x3, 0xff) sendto$inet(r5, 0x0, 0x0, 0x4085, 0x0, 0x0) 16.676863136s ago: executing program 1 (id=811): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'veth0_virt_wifi\x00'}) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = accept4$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x10, 0x80800) shutdown(r3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xe, 0x0, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x3, 0x1003, 0x4, {0xa, 0x0, 0x0, @loopback}}}, 0x32) r7 = accept4$nfc_llcp(r1, 0x0, &(0x7f0000000600), 0x0) close(r7) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000400)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket(0x1, 0x2, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000240)=""/225, &(0x7f0000000840)=0xe1) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xab, "65811b6a7efaf593e99f9ef6466a1131bcff61ec774566121b03530e7d77374e4c6529cbf281db3e899fd3f30af4213c828faebaeb9da93a8a9ae2409a8f72196a0948fcff6be71e6b0d805d5c99440c0fd27870420acf12e24fdf94ab6fcd8711525b81349a226079a425644c2fcd56eee710cb3ebddaddb36392ba7830b30213aa26f4f5dfe8fd50e4ebc0e81158a17ca5c26d2aa187531539f40712d9926b8714ed9a42eba51a457caa"}, &(0x7f0000000040)=0xb3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000000c0)={r10, 0x5, 0x2, 0x10000, 0x5}, 0x14) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000500)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000640)) 16.445154839s ago: executing program 1 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) 16.296401717s ago: executing program 1 (id=815): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0xffffff63}], 0x1, 0x20}}], 0x48, 0x20000005}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x1, 0x4, {0xb}}, 0x14}}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x50, r3, 0x5906d000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfce) 16.176544542s ago: executing program 3 (id=816): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 16.074621623s ago: executing program 3 (id=817): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r5 = gettid() socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x20, 0x0, 0x4802}, 0x0) 15.976832164s ago: executing program 1 (id=818): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000a700000095"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x3c, &(0x7f0000000180)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5c0d}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x1}, &(0x7f0000000200)=0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @local}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x2f, "bb3842f1af562586324c11467ff411774f7494beb2dd3f9eebea635b8af7ac908fbee26afbbedb7c927021982e7c8f"}, &(0x7f0000000280)=0x37) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.778903028s ago: executing program 0 (id=819): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44001}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x9, 0x200, 0x200, 0xe, 0x6, 0x5ea, 0x8000, 0x4]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) syz_emit_ethernet(0xd8, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x1, 0x1, 0xca, 0x67, 0x1000, 0x7, 0x6, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, {[@rr={0x7, 0x7, 0x5f, [@multicast1]}]}}, {{0x4e23, 0x4e24, r6, r7, 0x1, 0x0, 0x7, 0x10, 0x6, 0x0, 0x6, {[@window={0x3, 0x3, 0xf9}, @mss={0x2, 0x4, 0xfcf5}]}}, {"8e87d4f14ca81646035273b8e9771c359a35c00748ed10091aade3ea9056a846d1da406cd5bd7daee0825f41d74206ded312aa904cb76445ba388902733d24a39797be79dd6c8cb329bb217cad488bfea3a7863355e56dcb7765fc4d56b4d200b43303f590788d08ce09ec846a413ce742a008db79a057ee23582c8d4c1daa61217ae6580847a874c6e8e1ab0e718ad71bd1"}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x21, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffd, 0x0, {0x2, 0x14, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) 15.662466595s ago: executing program 3 (id=820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1a4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe532}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5dc6a4fd}, @TIPC_NLA_NODE_ID={0xf6, 0x3, "d40df3531977ced19f2d1bf6b0d58dd401d333af4f19d4f4c2c3abd9b0033da8c9dc948e9bad6353d73e29a69221ae66bd57db00c581de630204c1eb23745934c49dde980e1f3dc6e182f6489f1ef469221e5588669eecff7b1d4082d82bcf304f584a7001a9bb735c182c0f2434fca585c5cb9e899168066e330366c6853e6381f292d427cba62486d4ea349b9492da75c6c48a0a4e3c68494dd523a6e3e80187dc5c8fdf93a1631b66e6fdfd4b4ef24e8f655cc84fef629e0d5694d08de21905bc8db7f0e15f78230207ff3e7f5417b8bee8384c434373291d89bdf5434dd092d5781208839005231ca743c7e2155b4076"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1a4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe532}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5dc6a4fd}, @TIPC_NLA_NODE_ID={0xf6, 0x3, "d40df3531977ced19f2d1bf6b0d58dd401d333af4f19d4f4c2c3abd9b0033da8c9dc948e9bad6353d73e29a69221ae66bd57db00c581de630204c1eb23745934c49dde980e1f3dc6e182f6489f1ef469221e5588669eecff7b1d4082d82bcf304f584a7001a9bb735c182c0f2434fca585c5cb9e899168066e330366c6853e6381f292d427cba62486d4ea349b9492da75c6c48a0a4e3c68494dd523a6e3e80187dc5c8fdf93a1631b66e6fdfd4b4ef24e8f655cc84fef629e0d5694d08de21905bc8db7f0e15f78230207ff3e7f5417b8bee8384c434373291d89bdf5434dd092d5781208839005231ca743c7e2155b4076"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000) (async) 15.548987986s ago: executing program 3 (id=821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100005800c000880080001"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r2], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x7}, 0x1c) close(r0) 15.318261195s ago: executing program 3 (id=822): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000003080101000000000000000000000000050003001100000006000240004000002c0004"], 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x14, 0x6, "bfe03adc55c504336d8907e2bf2b2f00"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x8917, 0x0) preadv(r0, &(0x7f0000000d40)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000140)=""/70, 0x46}, {&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000b00)=""/220, 0xdc}, {&(0x7f0000000c00)=""/7, 0x7}, {&(0x7f0000000c40)=""/96, 0x60}, {&(0x7f0000000cc0)=""/78, 0x4e}], 0x9, 0x10001, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) 15.200265773s ago: executing program 3 (id=823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) read(r1, &(0x7f0000000200)=""/187, 0xbb) (async) read(r1, &(0x7f0000000200)=""/187, 0xbb) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socket(0x3, 0x80005, 0x1) (async) socket(0x3, 0x80005, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0xfffffffffffffffa, 0x0, 0xf0}) 2.16675818s ago: executing program 32 (id=803): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d039474d534e61800192db35c66a99f", 0x5e}], 0x1}, 0x24000008) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r2], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd70000700000008000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000000)={r10}, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073907800000300e000000100000001fe9a90780200000000000000"], 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000180)={0x3, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x88) 2.123878661s ago: executing program 33 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x401400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}, [""]}, 0x24}}, 0x50) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e}, 0x48) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="200a2bbd7000fbdbdf25130000000500e4000100000006001000a30000002c00118004000100040003000400070004000100040006000400070004000700040007000400030004000400050013010200000005001900020000000600ed00ff0300004200be004997b2f289772b85c06a7e82ebe647327ea643674a40b222ca3524f3623e35f56927b2b680549a6a039c6dea0bbbf2b28e5d4c407f7dd516ab0328eb6261e874a0941e7533632a904ed29a00000a000600080211"], 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000e5c9c625cb612a3366aaae00", @ANYRES32=r5, @ANYBLOB="18001d801400008005000900000000000600050059000000"], 0x34}}, 0x0) 88.995807ms ago: executing program 34 (id=819): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44001}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x9, 0x200, 0x200, 0xe, 0x6, 0x5ea, 0x8000, 0x4]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) syz_emit_ethernet(0xd8, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x1, 0x1, 0xca, 0x67, 0x1000, 0x7, 0x6, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, {[@rr={0x7, 0x7, 0x5f, [@multicast1]}]}}, {{0x4e23, 0x4e24, r6, r7, 0x1, 0x0, 0x7, 0x10, 0x6, 0x0, 0x6, {[@window={0x3, 0x3, 0xf9}, @mss={0x2, 0x4, 0xfcf5}]}}, {"8e87d4f14ca81646035273b8e9771c359a35c00748ed10091aade3ea9056a846d1da406cd5bd7daee0825f41d74206ded312aa904cb76445ba388902733d24a39797be79dd6c8cb329bb217cad488bfea3a7863355e56dcb7765fc4d56b4d200b43303f590788d08ce09ec846a413ce742a008db79a057ee23582c8d4c1daa61217ae6580847a874c6e8e1ab0e718ad71bd1"}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x21, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffd, 0x0, {0x2, 0x14, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) 51.023786ms ago: executing program 35 (id=818): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000a700000095"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x3c, &(0x7f0000000180)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5c0d}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x1}, &(0x7f0000000200)=0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @local}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x2f, "bb3842f1af562586324c11467ff411774f7494beb2dd3f9eebea635b8af7ac908fbee26afbbedb7c927021982e7c8f"}, &(0x7f0000000280)=0x37) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 36 (id=823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) read(r1, &(0x7f0000000200)=""/187, 0xbb) (async) read(r1, &(0x7f0000000200)=""/187, 0xbb) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socket(0x3, 0x80005, 0x1) (async) socket(0x3, 0x80005, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0xfffffffffffffffa, 0x0, 0xf0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 86.878663][ T5850] cgroup: Unknown subsys name 'net' [ 86.971376][ T5850] cgroup: Unknown subsys name 'cpuset' [ 86.980773][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.762544][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.369725][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.377955][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.426472][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.435470][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.443872][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.452940][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.453847][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.461949][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.468117][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.475751][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.482752][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.498054][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.498282][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.509198][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.513237][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.520936][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.529429][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.535229][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.541105][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.557549][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.558250][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.566565][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.573320][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.589217][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.596730][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.315495][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 92.330338][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 92.412097][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 92.504404][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 92.666778][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 92.693181][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.700596][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.708164][ T5878] bridge_slave_0: entered allmulticast mode [ 92.715749][ T5878] bridge_slave_0: entered promiscuous mode [ 92.783101][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.792996][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.800412][ T5878] bridge_slave_1: entered allmulticast mode [ 92.808315][ T5878] bridge_slave_1: entered promiscuous mode [ 92.881215][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.888825][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.896020][ T5861] bridge_slave_0: entered allmulticast mode [ 92.903747][ T5861] bridge_slave_0: entered promiscuous mode [ 92.924934][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.932220][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.940093][ T5865] bridge_slave_0: entered allmulticast mode [ 92.948039][ T5865] bridge_slave_0: entered promiscuous mode [ 92.973912][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.981158][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.988767][ T5861] bridge_slave_1: entered allmulticast mode [ 92.996040][ T5861] bridge_slave_1: entered promiscuous mode [ 93.005994][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.015896][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.023887][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.031237][ T5865] bridge_slave_1: entered allmulticast mode [ 93.039211][ T5865] bridge_slave_1: entered promiscuous mode [ 93.045929][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.053250][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.061863][ T5863] bridge_slave_0: entered allmulticast mode [ 93.069687][ T5863] bridge_slave_0: entered promiscuous mode [ 93.102272][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.155077][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.162417][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.170690][ T5863] bridge_slave_1: entered allmulticast mode [ 93.178848][ T5863] bridge_slave_1: entered promiscuous mode [ 93.225709][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.265487][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.279897][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.290868][ T5878] team0: Port device team_slave_0 added [ 93.313467][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.354399][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.378426][ T5878] team0: Port device team_slave_1 added [ 93.384666][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.392526][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.400187][ T5870] bridge_slave_0: entered allmulticast mode [ 93.408535][ T5870] bridge_slave_0: entered promiscuous mode [ 93.445758][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.483508][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.491278][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.500620][ T5870] bridge_slave_1: entered allmulticast mode [ 93.508193][ T5870] bridge_slave_1: entered promiscuous mode [ 93.530036][ T5861] team0: Port device team_slave_0 added [ 93.555253][ T5865] team0: Port device team_slave_0 added [ 93.577010][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.584147][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.610451][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.621853][ T5868] Bluetooth: hci4: command tx timeout [ 93.627392][ T5867] Bluetooth: hci1: command tx timeout [ 93.636209][ T5861] team0: Port device team_slave_1 added [ 93.644896][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.655973][ T5865] team0: Port device team_slave_1 added [ 93.690799][ T5863] team0: Port device team_slave_0 added [ 93.698938][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.701471][ T5868] Bluetooth: hci2: command tx timeout [ 93.705980][ T5867] Bluetooth: hci0: command tx timeout [ 93.711744][ T5868] Bluetooth: hci3: command tx timeout [ 93.717459][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.748437][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.783431][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.823908][ T5863] team0: Port device team_slave_1 added [ 93.847889][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.854955][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.882009][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.917039][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.924560][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.950944][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.964645][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.971732][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.997753][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.051386][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.062308][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.088965][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.111087][ T5870] team0: Port device team_slave_0 added [ 94.125239][ T5870] team0: Port device team_slave_1 added [ 94.179148][ T5878] hsr_slave_0: entered promiscuous mode [ 94.185849][ T5878] hsr_slave_1: entered promiscuous mode [ 94.226951][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.234513][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.260588][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.273228][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.280274][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.306287][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.394185][ T5861] hsr_slave_0: entered promiscuous mode [ 94.401010][ T5861] hsr_slave_1: entered promiscuous mode [ 94.407688][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 94.413540][ T5861] Cannot create hsr debugfs directory [ 94.420155][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.427386][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.453429][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.492138][ T5865] hsr_slave_0: entered promiscuous mode [ 94.499067][ T5865] hsr_slave_1: entered promiscuous mode [ 94.505240][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 94.511260][ T5865] Cannot create hsr debugfs directory [ 94.534771][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.541820][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.568031][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.717941][ T5863] hsr_slave_0: entered promiscuous mode [ 94.724510][ T5863] hsr_slave_1: entered promiscuous mode [ 94.731006][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 94.736881][ T5863] Cannot create hsr debugfs directory [ 94.859146][ T5870] hsr_slave_0: entered promiscuous mode [ 94.865685][ T5870] hsr_slave_1: entered promiscuous mode [ 94.872083][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 94.878082][ T5870] Cannot create hsr debugfs directory [ 95.334957][ T5878] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.361280][ T5878] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.387159][ T5878] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.398407][ T5878] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.455824][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.477736][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.489842][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.519279][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.596090][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.609458][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.643171][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.654358][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.698073][ T5868] Bluetooth: hci1: command tx timeout [ 95.698432][ T5867] Bluetooth: hci4: command tx timeout [ 95.777689][ T5867] Bluetooth: hci3: command tx timeout [ 95.779908][ T5868] Bluetooth: hci0: command tx timeout [ 95.783351][ T51] Bluetooth: hci2: command tx timeout [ 95.813179][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.824196][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.836575][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.848910][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.942782][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.003978][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.019185][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.043140][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.064977][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.072605][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.134164][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.141579][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.165396][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.193252][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.222350][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.229653][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.276557][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.319099][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.332033][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.339339][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.378719][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.385915][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.411684][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.418969][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.445963][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.471709][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.478981][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.606719][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.639097][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.646307][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.684228][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.691477][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.781358][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.906907][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.932326][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.971879][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.979144][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.043070][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.050301][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.260334][ T5870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.274727][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.294611][ T5878] veth0_vlan: entered promiscuous mode [ 97.303748][ T44] cfg80211: failed to load regulatory.db [ 97.331182][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.403109][ T5878] veth1_vlan: entered promiscuous mode [ 97.504965][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.548551][ T5878] veth0_macvtap: entered promiscuous mode [ 97.565244][ T5878] veth1_macvtap: entered promiscuous mode [ 97.656155][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.672995][ T5861] veth0_vlan: entered promiscuous mode [ 97.714340][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.740978][ T5861] veth1_vlan: entered promiscuous mode [ 97.771569][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.779930][ T5867] Bluetooth: hci1: command tx timeout [ 97.785387][ T5867] Bluetooth: hci4: command tx timeout [ 97.816908][ T5865] veth0_vlan: entered promiscuous mode [ 97.853502][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.861583][ T5867] Bluetooth: hci0: command tx timeout [ 97.867708][ T51] Bluetooth: hci3: command tx timeout [ 97.869583][ T5867] Bluetooth: hci2: command tx timeout [ 97.891980][ T3524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.934896][ T3524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.952688][ T3524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.965165][ T5865] veth1_vlan: entered promiscuous mode [ 97.986602][ T3524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.112116][ T5861] veth0_macvtap: entered promiscuous mode [ 98.157105][ T5861] veth1_macvtap: entered promiscuous mode [ 98.210039][ T5865] veth0_macvtap: entered promiscuous mode [ 98.233316][ T5870] veth0_vlan: entered promiscuous mode [ 98.243384][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.249259][ T5865] veth1_macvtap: entered promiscuous mode [ 98.260461][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.308161][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.356946][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.372513][ T5870] veth1_vlan: entered promiscuous mode [ 98.391244][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.400037][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.414086][ T3499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.429252][ T3499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.460521][ T3499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.491571][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.503786][ T3499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.521787][ T5878] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.563100][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.626917][ T5863] veth0_vlan: entered promiscuous mode [ 98.642991][ T1147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.652226][ T1147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.682041][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.691464][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.754990][ T5863] veth1_vlan: entered promiscuous mode [ 98.792911][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.804856][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.866654][ T5870] veth0_macvtap: entered promiscuous mode [ 98.917785][ T5870] veth1_macvtap: entered promiscuous mode [ 98.952499][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 98.964079][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.972839][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.996390][ T5863] veth0_macvtap: entered promiscuous mode [ 99.043340][ T5863] veth1_macvtap: entered promiscuous mode [ 99.072490][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.086799][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.106159][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.145787][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.245655][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.269152][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.281278][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.306407][ T5995] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 99.314569][ T5995] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 99.332264][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.342524][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.358262][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.381410][ T5997] netem: change failed [ 99.423446][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.454356][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 99.457489][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.468962][ T5999] netlink: 50 bytes leftover after parsing attributes in process `syz.1.8'. [ 99.481819][ T5999] netlink: 50 bytes leftover after parsing attributes in process `syz.1.8'. [ 99.502628][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.603249][ T3499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.635340][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.680398][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.718667][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.809096][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.816985][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.864031][ T5867] Bluetooth: hci1: command tx timeout [ 99.869631][ T5868] Bluetooth: hci4: command tx timeout [ 99.924501][ T6009] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 99.938988][ T5867] Bluetooth: hci2: command tx timeout [ 99.940142][ T5868] Bluetooth: hci3: command tx timeout [ 99.944475][ T5867] Bluetooth: hci0: command tx timeout [ 99.986489][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.000749][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 100.011765][ T6006] tipc: Started in network mode [ 100.016769][ T6006] tipc: Node identity 46b0a8650b0a, cluster identity 4711 [ 100.024615][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.044964][ T6006] tipc: Enabled bearer , priority 0 [ 100.124063][ T6015] syzkaller0: entered promiscuous mode [ 100.149527][ T6015] syzkaller0: entered allmulticast mode [ 100.202626][ T6006] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 100.203636][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.251829][ T6006] tipc: Resetting bearer [ 100.291367][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 100.436639][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.458440][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.467778][ T6024] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 100.505164][ T6005] tipc: Resetting bearer [ 100.520111][ T6005] tipc: Disabling bearer [ 100.547658][ T6024] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 100.595918][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.614051][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16'. [ 100.625366][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.652292][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 100.680302][ T6027] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16'. [ 100.727669][ T6031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.987378][ T6044] netlink: 'syz.4.5': attribute type 6 has an invalid length. [ 101.430167][ T6063] Zero length message leads to an empty skb [ 101.558620][ T6067] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 101.566962][ T6067] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 101.614318][ T6067] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.055428][ T6081] netlink: 'syz.4.34': attribute type 4 has an invalid length. [ 102.700488][ T6011] udevd[6011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 102.774693][ T6011] udevd[6011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 102.849912][ T6116] team_slave_0: entered promiscuous mode [ 102.855816][ T6116] team_slave_1: entered promiscuous mode [ 102.884356][ T6116] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 102.912616][ T6116] team0: Device macvtap1 is already an upper device of the team interface [ 102.939297][ T6116] team_slave_0: left promiscuous mode [ 102.944837][ T6116] team_slave_1: left promiscuous mode [ 103.560529][ T6154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.226421][ T6184] __nla_validate_parse: 82 callbacks suppressed [ 104.226791][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 105.236900][ T6195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.252415][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 105.771538][ T6222] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 105.791331][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 105.952630][ T6230] syz_tun: entered promiscuous mode [ 105.978332][ T6230] syz_tun: entered allmulticast mode [ 106.290515][ T6247] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 106.461298][ T6247] bond1 (unregistering): Released all slaves [ 106.694756][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 106.760813][ T6267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.893578][ T6263] bridge1: port 1(veth3) entered blocking state [ 106.909618][ T6263] bridge1: port 1(veth3) entered disabled state [ 106.918187][ T6263] veth3: entered allmulticast mode [ 106.926001][ T6263] veth3: entered promiscuous mode [ 106.954869][ T6270] bridge1: port 2(veth0_to_bond) entered blocking state [ 107.009680][ T6270] bridge1: port 2(veth0_to_bond) entered disabled state [ 107.061931][ T6270] veth0_to_bond: entered allmulticast mode [ 107.095738][ T6280] netlink: 'syz.2.93': attribute type 4 has an invalid length. [ 107.116251][ T6270] veth0_to_bond: entered promiscuous mode [ 107.161590][ T6280] netlink: 'syz.2.93': attribute type 4 has an invalid length. [ 107.488227][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 107.889603][ T6337] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 107.900194][ T6331] syz.0.102 uses obsolete (PF_INET,SOCK_PACKET) [ 107.925921][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 107.976679][ T6325] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 108.340487][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 108.670418][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 109.272244][ T6395] tipc: Started in network mode [ 109.301709][ T6395] tipc: Node identity , cluster identity 4711 [ 109.308989][ T6395] tipc: Failed to set node id, please configure manually [ 109.317244][ T6395] tipc: Enabling of bearer rejected, failed to enable media [ 109.404851][ T6396] team0: Device ip6gre1 is of different type [ 109.529499][ T6402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 109.537660][ T6402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 109.545611][ T6402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 109.553636][ T6402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 109.561620][ T6402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 109.569736][ T6402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 109.577739][ T6402] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 109.960165][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 110.446647][ T6439] !: renamed from dummy0 (while UP) [ 110.523004][ T6442] netlink: 1 bytes leftover after parsing attributes in process `syz.4.128'. [ 110.578868][ T6442] xt_policy: neither incoming nor outgoing policy selected [ 110.677751][ T6450] warning: `syz.3.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.984441][ T6469] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 111.033814][ T6473] netlink: 56 bytes leftover after parsing attributes in process `syz.4.136'. [ 111.059950][ T6473] netlink: 48 bytes leftover after parsing attributes in process `syz.4.136'. [ 111.144042][ T6469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.181973][ T6479] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 111.214090][ T6479] netlink: 232 bytes leftover after parsing attributes in process `syz.4.136'. [ 111.279806][ T6475] bond1: (slave gretap1): making interface the new active one [ 111.320107][ T6475] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 111.359691][ T6479] nbd0: detected capacity change from 0 to 549764202496 [ 111.368457][ T6473] netlink: 'syz.4.136': attribute type 12 has an invalid length. [ 111.401862][ T6473] netlink: 132 bytes leftover after parsing attributes in process `syz.4.136'. [ 111.449311][ T5868] block nbd0: Receive control failed (result -104) [ 111.460396][ T6482] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 111.752136][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 111.922341][ T6505] bridge3: port 1(veth5) entered blocking state [ 111.953229][ T6505] bridge3: port 1(veth5) entered disabled state [ 111.974052][ T6505] veth5: entered allmulticast mode [ 111.995417][ T6505] veth5: entered promiscuous mode [ 112.026555][ T6498] veth0_to_bond: left allmulticast mode [ 112.055685][ T6498] veth0_to_bond: left promiscuous mode [ 112.080508][ T6498] bridge1: port 2(veth0_to_bond) entered disabled state [ 112.119965][ T6498] bridge3: port 2(veth0_to_bond) entered blocking state [ 112.134574][ T6498] bridge3: port 2(veth0_to_bond) entered disabled state [ 112.145898][ T6498] veth0_to_bond: entered allmulticast mode [ 112.164845][ T6498] veth0_to_bond: entered promiscuous mode [ 112.185890][ T6515] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 112.435071][ T6526] tap0: tun_chr_ioctl cmd 1074025677 [ 112.461714][ T6526] tap0: linktype set to 65534 [ 112.750641][ T6535] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.152'. [ 112.820392][ T6544] rdma_op ffff8880246ae9f0 conn xmit_rdma 0000000000000000 [ 112.866334][ T6541] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 112.879775][ T6541] netlink: 232 bytes leftover after parsing attributes in process `syz.2.154'. [ 112.895186][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 113.134627][ T6554] netlink: 'syz.0.157': attribute type 83 has an invalid length. [ 113.489014][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805983bc00: rx timeout, send abort [ 113.989904][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058335400: rx timeout, send abort [ 113.998496][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805983bc00: abort rx timeout. Force session deactivation [ 114.374088][ T6623] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 114.412247][ T6625] vlan2: entered allmulticast mode [ 114.419131][ T6625] bond0: entered allmulticast mode [ 114.424452][ T6625] bond_slave_0: entered allmulticast mode [ 114.434896][ T6625] bond_slave_1: entered allmulticast mode [ 114.498225][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058335400: abort rx timeout. Force session deactivation [ 114.916624][ T6646] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 115.171310][ T6658] tipc: Started in network mode [ 115.176316][ T6658] tipc: Node identity ce77cda8a91b, cluster identity 4711 [ 115.184583][ T6658] tipc: Enabled bearer , priority 0 [ 115.195889][ T6654] syzkaller0: entered promiscuous mode [ 115.201984][ T6654] syzkaller0: entered allmulticast mode [ 115.212858][ T6649] tipc: Started in network mode [ 115.221949][ T6649] tipc: Node identity be2a7f05bcbd, cluster identity 4711 [ 115.235248][ T6649] tipc: Enabled bearer , priority 0 [ 115.263732][ T6649] syzkaller0: entered promiscuous mode [ 115.270087][ T6649] syzkaller0: entered allmulticast mode [ 115.282150][ T6654] tipc: Resetting bearer [ 115.297898][ T6649] tipc: Resetting bearer [ 115.321091][ T6653] tipc: Resetting bearer [ 115.336000][ T6653] tipc: Disabling bearer [ 115.369546][ T6648] tipc: Resetting bearer [ 115.430215][ T6648] tipc: Disabling bearer [ 115.746087][ T6673] delete_channel: no stack [ 116.018694][ T6690] geneve2: entered promiscuous mode [ 116.023992][ T6690] geneve2: entered allmulticast mode [ 116.059594][ T6692] netlink: 'syz.0.195': attribute type 11 has an invalid length. [ 116.098886][ T6692] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 116.202457][ T6326] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 19999 - 0 [ 116.235781][ T6326] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.260810][ T6326] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.279269][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.295991][ T6692] bridge_slave_1: left allmulticast mode [ 116.307324][ T6692] bridge_slave_1: left promiscuous mode [ 116.322395][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.360194][ T6692] bridge_slave_1: entered allmulticast mode [ 116.371293][ T6692] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 116.407181][ T6326] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.864623][ T6735] netlink: 'syz.1.204': attribute type 32 has an invalid length. [ 116.895393][ T6735] __nla_validate_parse: 8 callbacks suppressed [ 116.895415][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 116.985413][ T6735] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 116.999363][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 117.290689][ T6759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.211'. [ 117.310352][ T6761] netlink: 48 bytes leftover after parsing attributes in process `syz.1.211'. [ 117.485081][ T6746] bridge6: port 1(veth3) entered blocking state [ 117.492287][ T6746] bridge6: port 1(veth3) entered disabled state [ 117.499200][ T6746] veth3: entered allmulticast mode [ 117.510833][ T6746] veth3: entered promiscuous mode [ 117.520571][ T6750] bridge6: port 2(veth0_to_bond) entered blocking state [ 117.529933][ T6750] bridge6: port 2(veth0_to_bond) entered disabled state [ 117.537944][ T6750] veth0_to_bond: entered allmulticast mode [ 117.546561][ T6750] veth0_to_bond: entered promiscuous mode [ 117.649109][ T6767] net_ratelimit: 47 callbacks suppressed [ 117.649132][ T6767] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.803943][ T6774] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 117.887727][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.216'. [ 118.125156][ T6794] netlink: 36 bytes leftover after parsing attributes in process `syz.4.220'. [ 118.557774][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.566007][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.592105][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 118.662950][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 118.704720][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.849076][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.104121][ T6818] bridge1: port 1(veth3) entered blocking state [ 119.127423][ T6818] bridge1: port 1(veth3) entered disabled state [ 119.144235][ T6818] veth3: entered allmulticast mode [ 119.178679][ T6818] veth3: entered promiscuous mode [ 119.191345][ T6813] bridge1: port 2(veth0_to_bond) entered blocking state [ 119.200666][ T6813] bridge1: port 2(veth0_to_bond) entered disabled state [ 119.217636][ T6813] veth0_to_bond: entered allmulticast mode [ 119.252397][ T6813] veth0_to_bond: entered promiscuous mode [ 119.274960][ T6830] tipc: New replicast peer: 255.255.255.255 [ 119.290819][ T6830] tipc: Enabled bearer , priority 10 [ 119.340343][ T6840] bond0: option mode: unable to set because the bond device has slaves [ 119.468035][ T6850] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 119.534688][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 120.097497][ T6878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.238'. [ 120.158647][ T6881] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 120.201569][ T6881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.408174][ T6036] tipc: Node number set to 43482885 [ 121.390947][ T6945] bridge4: port 1(veth7) entered blocking state [ 121.396806][ T6948] FAULT_INJECTION: forcing a failure. [ 121.396806][ T6948] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.398816][ T6945] bridge4: port 1(veth7) entered disabled state [ 121.414884][ T6948] CPU: 0 UID: 0 PID: 6948 Comm: syz.2.257 Not tainted syzkaller #0 PREEMPT(full) [ 121.414920][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.414943][ T6948] Call Trace: [ 121.414954][ T6948] [ 121.414965][ T6948] dump_stack_lvl+0x189/0x250 [ 121.415002][ T6948] ? __pfx____ratelimit+0x10/0x10 [ 121.415037][ T6948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.415066][ T6948] ? __pfx__printk+0x10/0x10 [ 121.415102][ T6948] ? __might_fault+0xb0/0x130 [ 121.415151][ T6948] should_fail_ex+0x414/0x560 [ 121.415191][ T6948] _copy_from_user+0x2d/0xb0 [ 121.415220][ T6948] ___sys_sendmsg+0x158/0x2a0 [ 121.415248][ T6948] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.415317][ T6948] ? __fget_files+0x2a/0x420 [ 121.415353][ T6948] ? __fget_files+0x3a0/0x420 [ 121.415402][ T6948] __x64_sys_sendmsg+0x19b/0x260 [ 121.415431][ T6948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.415467][ T6948] ? __pfx_ksys_write+0x10/0x10 [ 121.415496][ T6948] ? rcu_is_watching+0x15/0xb0 [ 121.415527][ T6948] ? do_syscall_64+0xbe/0x3b0 [ 121.415567][ T6948] do_syscall_64+0xfa/0x3b0 [ 121.415599][ T6948] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.415648][ T6948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.415671][ T6948] ? clear_bhb_loop+0x60/0xb0 [ 121.415702][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.415725][ T6948] RIP: 0033:0x7f591878ebe9 [ 121.415748][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.415767][ T6948] RSP: 002b:00007f5919670038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.415797][ T6948] RAX: ffffffffffffffda RBX: 00007f59189b5fa0 RCX: 00007f591878ebe9 [ 121.415815][ T6948] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 121.415831][ T6948] RBP: 00007f5919670090 R08: 0000000000000000 R09: 0000000000000000 [ 121.415846][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.415859][ T6948] R13: 00007f59189b6038 R14: 00007f59189b5fa0 R15: 00007ffc982555b8 [ 121.415895][ T6948] [ 121.633259][ T6945] veth7: entered allmulticast mode [ 121.646704][ T6945] veth7: entered promiscuous mode [ 121.676445][ T6950] veth0_to_bond: left allmulticast mode [ 121.705747][ T6950] veth0_to_bond: left promiscuous mode [ 121.743357][ T6950] bridge3: port 2(veth0_to_bond) entered disabled state [ 121.773035][ T6950] bridge4: port 2(veth0_to_bond) entered blocking state [ 121.805926][ T6950] bridge4: port 2(veth0_to_bond) entered disabled state [ 121.815502][ T6950] veth0_to_bond: entered allmulticast mode [ 121.830891][ T6950] veth0_to_bond: entered promiscuous mode [ 121.880329][ T6963] netlink: 'syz.0.260': attribute type 18 has an invalid length. [ 121.925112][ T6963] __nla_validate_parse: 8 callbacks suppressed [ 121.925135][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 121.930791][ T6323] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.959081][ T6323] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.982345][ T6963] netlink: 'syz.0.260': attribute type 18 has an invalid length. [ 122.005473][ T6323] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.044240][ T6323] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.121294][ T6968] bridge_slave_0: left allmulticast mode [ 122.158415][ T6968] bridge_slave_0: left promiscuous mode [ 122.164407][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.263906][ T6968] bridge_slave_1: left allmulticast mode [ 122.281323][ T6968] bridge_slave_1: left promiscuous mode [ 122.315397][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.352221][ T6968] veth0_to_bond: left allmulticast mode [ 122.358666][ T6968] veth0_to_bond: left promiscuous mode [ 122.364454][ T6968] bridge4: port 2(veth0_to_bond) entered disabled state [ 122.379463][ T6968] bond0: (slave bond_slave_0): Releasing backup interface [ 122.391609][ T6968] bond0: (slave bond_slave_1): Releasing backup interface [ 122.408639][ T6968] team0: Port device team_slave_0 removed [ 122.422314][ T6968] team0: Port device team_slave_1 removed [ 122.430640][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.439254][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.448504][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.455930][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.473821][ T6968] veth3: left allmulticast mode [ 122.480855][ T6968] veth3: left promiscuous mode [ 122.485870][ T6968] bridge1: port 1(veth3) entered disabled state [ 122.505283][ T6968] bond1: (slave gretap1): Releasing active interface [ 122.516896][ T6968] veth5: left allmulticast mode [ 122.522152][ T6968] veth5: left promiscuous mode [ 122.527880][ T6968] bridge3: port 1(veth5) entered disabled state [ 122.539435][ T6968] veth7: left allmulticast mode [ 122.544399][ T6968] veth7: left promiscuous mode [ 122.550867][ T6968] bridge4: port 1(veth7) entered disabled state [ 122.575285][ T6979] team0: Mode changed to "broadcast" [ 122.753488][ T6993] FAULT_INJECTION: forcing a failure. [ 122.753488][ T6993] name failslab, interval 1, probability 0, space 0, times 1 [ 122.795698][ T6993] CPU: 1 UID: 0 PID: 6993 Comm: syz.1.268 Not tainted syzkaller #0 PREEMPT(full) [ 122.795727][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.795739][ T6993] Call Trace: [ 122.795747][ T6993] [ 122.795757][ T6993] dump_stack_lvl+0x189/0x250 [ 122.795788][ T6993] ? __pfx____ratelimit+0x10/0x10 [ 122.795816][ T6993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.795841][ T6993] ? __pfx__printk+0x10/0x10 [ 122.795877][ T6993] ? __pfx___might_resched+0x10/0x10 [ 122.795903][ T6993] should_fail_ex+0x414/0x560 [ 122.795936][ T6993] should_failslab+0xa8/0x100 [ 122.795968][ T6993] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 122.795999][ T6993] ? __alloc_skb+0x112/0x2d0 [ 122.796035][ T6993] __alloc_skb+0x112/0x2d0 [ 122.796070][ T6993] netlink_sendmsg+0x5c6/0xb30 [ 122.796112][ T6993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.796146][ T6993] ? aa_sock_msg_perm+0xf1/0x1d0 [ 122.796182][ T6993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.796204][ T6993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.796236][ T6993] __sock_sendmsg+0x21c/0x270 [ 122.796267][ T6993] ____sys_sendmsg+0x505/0x830 [ 122.796320][ T6993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.796353][ T6993] ? import_iovec+0x74/0xa0 [ 122.796381][ T6993] ___sys_sendmsg+0x21f/0x2a0 [ 122.796414][ T6993] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.796476][ T6993] ? __fget_files+0x2a/0x420 [ 122.796507][ T6993] ? __fget_files+0x3a0/0x420 [ 122.796550][ T6993] __x64_sys_sendmsg+0x19b/0x260 [ 122.796576][ T6993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.796608][ T6993] ? __pfx_ksys_write+0x10/0x10 [ 122.796633][ T6993] ? rcu_is_watching+0x15/0xb0 [ 122.796659][ T6993] ? do_syscall_64+0xbe/0x3b0 [ 122.796694][ T6993] do_syscall_64+0xfa/0x3b0 [ 122.796722][ T6993] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.796750][ T6993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.796771][ T6993] ? clear_bhb_loop+0x60/0xb0 [ 122.796796][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.796816][ T6993] RIP: 0033:0x7f1538b8ebe9 [ 122.796835][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.796853][ T6993] RSP: 002b:00007f15399e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.796875][ T6993] RAX: ffffffffffffffda RBX: 00007f1538db5fa0 RCX: 00007f1538b8ebe9 [ 122.796890][ T6993] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 122.796902][ T6993] RBP: 00007f15399e2090 R08: 0000000000000000 R09: 0000000000000000 [ 122.796914][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.796926][ T6993] R13: 00007f1538db6038 R14: 00007f1538db5fa0 R15: 00007ffe43db1a08 [ 122.796959][ T6993] [ 123.163937][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 123.173201][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 123.263522][ T7009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.274'. [ 123.286506][ T7004] bridge0: port 2(vlan3) entered blocking state [ 123.293374][ T7004] bridge0: port 2(vlan3) entered disabled state [ 123.301306][ T7004] vlan3: entered allmulticast mode [ 123.307166][ T7004] bridge0: entered allmulticast mode [ 123.316612][ T7004] vlan3: left allmulticast mode [ 123.339343][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 123.353860][ T7004] bridge0: left allmulticast mode [ 123.450772][ T7022] netlink: 182572 bytes leftover after parsing attributes in process `syz.2.275'. [ 123.558840][ T7016] tipc: Enabling of bearer rejected, failed to enable media [ 123.602310][ T7005] syzkaller0: entered promiscuous mode [ 123.609568][ T7005] syzkaller0: entered allmulticast mode [ 123.634174][ T7023] bridge1: port 1(veth0_to_bond) entered blocking state [ 123.642449][ T7023] bridge1: port 1(veth0_to_bond) entered disabled state [ 123.651914][ T7023] veth0_to_bond: entered allmulticast mode [ 123.664771][ T7023] veth0_to_bond: entered promiscuous mode [ 124.240445][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.283'. [ 124.367764][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 124.444351][ T7062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.283'. [ 124.696116][ T7065] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 124.769038][ T7065] bond2: (slave vcan1): Error -95 calling set_mac_address [ 124.827029][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 124.853617][ T7066] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 124.873049][ T7066] bond2: (slave vcan1): Error -95 calling set_mac_address [ 125.338412][ T7103] netlink: 'syz.0.295': attribute type 29 has an invalid length. [ 125.384474][ T7103] veth1_to_bond: entered allmulticast mode [ 125.527949][ T7103] bond0: (slave bond_slave_1): Releasing backup interface [ 125.560664][ T7103] bond_slave_1 (unregistering): left allmulticast mode [ 125.666612][ T7113] netlink: 'syz.2.299': attribute type 62 has an invalid length. [ 125.751864][ T7103] veth1_to_bond (unregistering): left allmulticast mode [ 126.463100][ T7137] vlan3: entered allmulticast mode [ 126.511204][ T7137] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 126.666626][ T7151] FAULT_INJECTION: forcing a failure. [ 126.666626][ T7151] name failslab, interval 1, probability 0, space 0, times 0 [ 126.690618][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(full) [ 126.690649][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.690662][ T7151] Call Trace: [ 126.690670][ T7151] [ 126.690680][ T7151] dump_stack_lvl+0x189/0x250 [ 126.690711][ T7151] ? __pfx____ratelimit+0x10/0x10 [ 126.690741][ T7151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.690767][ T7151] ? __pfx__printk+0x10/0x10 [ 126.690798][ T7151] ? __lock_acquire+0xab9/0xd20 [ 126.690840][ T7151] should_fail_ex+0x414/0x560 [ 126.690873][ T7151] should_failslab+0xa8/0x100 [ 126.690906][ T7151] kmem_cache_alloc_noprof+0x73/0x3c0 [ 126.690934][ T7151] ? skb_clone+0x212/0x3a0 [ 126.690962][ T7151] skb_clone+0x212/0x3a0 [ 126.690989][ T7151] __netlink_deliver_tap+0x404/0x850 [ 126.691034][ T7151] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.691065][ T7151] netlink_deliver_tap+0x19c/0x1b0 [ 126.691097][ T7151] netlink_unicast+0x7fa/0x9e0 [ 126.691135][ T7151] ? __pfx_netlink_unicast+0x10/0x10 [ 126.691164][ T7151] ? netlink_sendmsg+0x642/0xb30 [ 126.691192][ T7151] ? skb_put+0x11b/0x210 [ 126.691229][ T7151] netlink_sendmsg+0x805/0xb30 [ 126.691271][ T7151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.691306][ T7151] ? aa_sock_msg_perm+0xf1/0x1d0 [ 126.691341][ T7151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.691364][ T7151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.691396][ T7151] __sock_sendmsg+0x21c/0x270 [ 126.691426][ T7151] ____sys_sendmsg+0x505/0x830 [ 126.691463][ T7151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.691495][ T7151] ? import_iovec+0x74/0xa0 [ 126.691523][ T7151] ___sys_sendmsg+0x21f/0x2a0 [ 126.691547][ T7151] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.691611][ T7151] ? __fget_files+0x2a/0x420 [ 126.691642][ T7151] ? __fget_files+0x3a0/0x420 [ 126.691686][ T7151] __x64_sys_sendmsg+0x19b/0x260 [ 126.691710][ T7151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.691743][ T7151] ? __pfx_ksys_write+0x10/0x10 [ 126.691768][ T7151] ? rcu_is_watching+0x15/0xb0 [ 126.691795][ T7151] ? do_syscall_64+0xbe/0x3b0 [ 126.691830][ T7151] do_syscall_64+0xfa/0x3b0 [ 126.691858][ T7151] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.691886][ T7151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.691907][ T7151] ? clear_bhb_loop+0x60/0xb0 [ 126.691933][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.691953][ T7151] RIP: 0033:0x7f170838ebe9 [ 126.691972][ T7151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.691989][ T7151] RSP: 002b:00007f17091f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.692011][ T7151] RAX: ffffffffffffffda RBX: 00007f17085b5fa0 RCX: 00007f170838ebe9 [ 126.692026][ T7151] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 126.692039][ T7151] RBP: 00007f17091f5090 R08: 0000000000000000 R09: 0000000000000000 [ 126.692051][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.692063][ T7151] R13: 00007f17085b6038 R14: 00007f17085b5fa0 R15: 00007ffe39c68da8 [ 126.692097][ T7151] [ 127.216433][ T7161] veth5: entered allmulticast mode [ 127.267997][ T7161] netlink: 'syz.2.315': attribute type 11 has an invalid length. [ 127.315191][ T7161] __nla_validate_parse: 7 callbacks suppressed [ 127.315211][ T7161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.315'. [ 127.694461][ T7186] netlink: 'syz.1.318': attribute type 10 has an invalid length. [ 127.735845][ T7186] team0: Device ipvlan1 failed to register rx_handler [ 127.842387][ T7193] netlink: 172 bytes leftover after parsing attributes in process `syz.0.322'. [ 127.968816][ T7199] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 127.991346][ T7199] netlink: 224 bytes leftover after parsing attributes in process `syz.2.324'. [ 128.003995][ T7202] FAULT_INJECTION: forcing a failure. [ 128.003995][ T7202] name failslab, interval 1, probability 0, space 0, times 0 [ 128.041806][ T7202] CPU: 1 UID: 0 PID: 7202 Comm: syz.4.325 Not tainted syzkaller #0 PREEMPT(full) [ 128.041836][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.041849][ T7202] Call Trace: [ 128.041858][ T7202] [ 128.041867][ T7202] dump_stack_lvl+0x189/0x250 [ 128.041899][ T7202] ? __pfx____ratelimit+0x10/0x10 [ 128.041930][ T7202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.041956][ T7202] ? __pfx__printk+0x10/0x10 [ 128.041990][ T7202] ? __pfx___might_resched+0x10/0x10 [ 128.042011][ T7202] ? fs_reclaim_acquire+0x7d/0x100 [ 128.042050][ T7202] should_fail_ex+0x414/0x560 [ 128.042085][ T7202] should_failslab+0xa8/0x100 [ 128.042118][ T7202] __kmalloc_noprof+0xcb/0x4f0 [ 128.042146][ T7202] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 128.042179][ T7202] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 128.042213][ T7202] genl_family_rcv_msg_doit+0xb8/0x300 [ 128.042246][ T7202] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 128.042280][ T7202] ? apparmor_capable+0x137/0x1b0 [ 128.042316][ T7202] ? bpf_lsm_capable+0x9/0x20 [ 128.042345][ T7202] ? security_capable+0x7e/0x2e0 [ 128.042383][ T7202] genl_rcv_msg+0x60e/0x790 [ 128.042415][ T7202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.042437][ T7202] ? __pfx_wg_set_device+0x10/0x10 [ 128.042465][ T7202] ? __asan_memcpy+0x40/0x70 [ 128.042489][ T7202] ? __pfx_ref_tracker_free+0x10/0x10 [ 128.042528][ T7202] netlink_rcv_skb+0x208/0x470 [ 128.042556][ T7202] ? __lock_acquire+0xab9/0xd20 [ 128.042588][ T7202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.042614][ T7202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.042667][ T7202] ? down_read+0x1ad/0x2e0 [ 128.042703][ T7202] genl_rcv+0x28/0x40 [ 128.042724][ T7202] netlink_unicast+0x82c/0x9e0 [ 128.042763][ T7202] ? __pfx_netlink_unicast+0x10/0x10 [ 128.042793][ T7202] ? netlink_sendmsg+0x642/0xb30 [ 128.042822][ T7202] ? skb_put+0x11b/0x210 [ 128.042860][ T7202] netlink_sendmsg+0x805/0xb30 [ 128.042903][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.042938][ T7202] ? aa_sock_msg_perm+0xf1/0x1d0 [ 128.042974][ T7202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.042996][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.043029][ T7202] __sock_sendmsg+0x21c/0x270 [ 128.043061][ T7202] ____sys_sendmsg+0x505/0x830 [ 128.043090][ T7202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.043123][ T7202] ? import_iovec+0x74/0xa0 [ 128.043153][ T7202] ___sys_sendmsg+0x21f/0x2a0 [ 128.043177][ T7202] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.043243][ T7202] ? __fget_files+0x2a/0x420 [ 128.043274][ T7202] ? __fget_files+0x3a0/0x420 [ 128.043325][ T7202] __x64_sys_sendmsg+0x19b/0x260 [ 128.043351][ T7202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.043385][ T7202] ? __pfx_ksys_write+0x10/0x10 [ 128.043410][ T7202] ? rcu_is_watching+0x15/0xb0 [ 128.043438][ T7202] ? do_syscall_64+0xbe/0x3b0 [ 128.043474][ T7202] do_syscall_64+0xfa/0x3b0 [ 128.043503][ T7202] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.043531][ T7202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.043552][ T7202] ? clear_bhb_loop+0x60/0xb0 [ 128.043579][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.043599][ T7202] RIP: 0033:0x7f189958ebe9 [ 128.043618][ T7202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.043636][ T7202] RSP: 002b:00007f189a404038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.043659][ T7202] RAX: ffffffffffffffda RBX: 00007f18997b5fa0 RCX: 00007f189958ebe9 [ 128.043674][ T7202] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 128.043687][ T7202] RBP: 00007f189a404090 R08: 0000000000000000 R09: 0000000000000000 [ 128.043700][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.043712][ T7202] R13: 00007f18997b6038 R14: 00007f18997b5fa0 R15: 00007ffd56336568 [ 128.043746][ T7202] [ 128.466610][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.328'. [ 128.566398][ T7203] netlink: 104 bytes leftover after parsing attributes in process `syz.2.324'. [ 128.712050][ T7223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.884177][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 128.955178][ T7232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.331'. [ 129.335815][ T7242] netlink: 276 bytes leftover after parsing attributes in process `syz.4.336'. [ 129.441957][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 129.558379][ T7256] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 129.582467][ T7256] netlink: 224 bytes leftover after parsing attributes in process `syz.0.339'. [ 129.773757][ T7268] FAULT_INJECTION: forcing a failure. [ 129.773757][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 129.825802][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.4.340 Not tainted syzkaller #0 PREEMPT(full) [ 129.825832][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.825846][ T7268] Call Trace: [ 129.825854][ T7268] [ 129.825864][ T7268] dump_stack_lvl+0x189/0x250 [ 129.825896][ T7268] ? __pfx____ratelimit+0x10/0x10 [ 129.825927][ T7268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.825953][ T7268] ? __pfx__printk+0x10/0x10 [ 129.825991][ T7268] ? __pfx___might_resched+0x10/0x10 [ 129.826020][ T7268] ? fs_reclaim_acquire+0x7d/0x100 [ 129.826061][ T7268] should_fail_ex+0x414/0x560 [ 129.826095][ T7268] should_failslab+0xa8/0x100 [ 129.826128][ T7268] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 129.826159][ T7268] ? __alloc_skb+0x112/0x2d0 [ 129.826196][ T7268] __alloc_skb+0x112/0x2d0 [ 129.826233][ T7268] netlink_ack+0x146/0xa50 [ 129.826261][ T7268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.826290][ T7268] ? __asan_memcpy+0x40/0x70 [ 129.826314][ T7268] ? __pfx_ref_tracker_free+0x10/0x10 [ 129.826354][ T7268] netlink_rcv_skb+0x28c/0x470 [ 129.826382][ T7268] ? __lock_acquire+0xab9/0xd20 [ 129.826415][ T7268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.826441][ T7268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.826494][ T7268] ? down_read+0x1ad/0x2e0 [ 129.826531][ T7268] genl_rcv+0x28/0x40 [ 129.826551][ T7268] netlink_unicast+0x82c/0x9e0 [ 129.826590][ T7268] ? __pfx_netlink_unicast+0x10/0x10 [ 129.826621][ T7268] ? netlink_sendmsg+0x642/0xb30 [ 129.826649][ T7268] ? skb_put+0x11b/0x210 [ 129.826687][ T7268] netlink_sendmsg+0x805/0xb30 [ 129.826730][ T7268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.826767][ T7268] ? aa_sock_msg_perm+0xf1/0x1d0 [ 129.826809][ T7268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.826832][ T7268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.826866][ T7268] __sock_sendmsg+0x21c/0x270 [ 129.826897][ T7268] ____sys_sendmsg+0x505/0x830 [ 129.826926][ T7268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.826959][ T7268] ? import_iovec+0x74/0xa0 [ 129.826988][ T7268] ___sys_sendmsg+0x21f/0x2a0 [ 129.827019][ T7268] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.827080][ T7268] ? __fget_files+0x2a/0x420 [ 129.827112][ T7268] ? __fget_files+0x3a0/0x420 [ 129.827155][ T7268] __x64_sys_sendmsg+0x19b/0x260 [ 129.827180][ T7268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.827213][ T7268] ? __pfx_ksys_write+0x10/0x10 [ 129.827239][ T7268] ? rcu_is_watching+0x15/0xb0 [ 129.827266][ T7268] ? do_syscall_64+0xbe/0x3b0 [ 129.827301][ T7268] do_syscall_64+0xfa/0x3b0 [ 129.827329][ T7268] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.827357][ T7268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.827378][ T7268] ? clear_bhb_loop+0x60/0xb0 [ 129.827405][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.827425][ T7268] RIP: 0033:0x7f189958ebe9 [ 129.827444][ T7268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.827461][ T7268] RSP: 002b:00007f189a404038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.827483][ T7268] RAX: ffffffffffffffda RBX: 00007f18997b5fa0 RCX: 00007f189958ebe9 [ 129.827498][ T7268] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 129.827511][ T7268] RBP: 00007f189a404090 R08: 0000000000000000 R09: 0000000000000000 [ 129.827523][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.827534][ T7268] R13: 00007f18997b6038 R14: 00007f18997b5fa0 R15: 00007ffd56336568 [ 129.827568][ T7268] [ 131.242248][ T7310] bridge3: port 1(veth3) entered blocking state [ 131.251812][ T7310] bridge3: port 1(veth3) entered disabled state [ 131.260603][ T7310] veth3: entered allmulticast mode [ 131.269427][ T7310] veth3: entered promiscuous mode [ 131.283994][ T7316] bridge3: port 2(veth0_to_bond) entered blocking state [ 131.295498][ T7316] bridge3: port 2(veth0_to_bond) entered disabled state [ 131.306036][ T7316] veth0_to_bond: entered allmulticast mode [ 131.320695][ T7316] veth0_to_bond: entered promiscuous mode [ 131.544291][ T7337] Illegal XDP return value 2649213875 on prog (id 84) dev syz_tun, expect packet loss! [ 131.705503][ T7352] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 132.245851][ T7366] bridge2: port 1(veth3) entered blocking state [ 132.266002][ T7366] bridge2: port 1(veth3) entered disabled state [ 132.273070][ T7366] veth3: entered allmulticast mode [ 132.282785][ T7366] veth3: entered promiscuous mode [ 132.296569][ T7378] veth0_to_bond: left allmulticast mode [ 132.302409][ T7378] veth0_to_bond: left promiscuous mode [ 132.308394][ T7378] bridge1: port 1(veth0_to_bond) entered disabled state [ 132.328293][ T7378] bridge2: port 2(veth0_to_bond) entered blocking state [ 132.335559][ T7378] bridge2: port 2(veth0_to_bond) entered disabled state [ 132.343561][ T7378] veth0_to_bond: entered allmulticast mode [ 132.351997][ T7378] veth0_to_bond: entered promiscuous mode [ 132.443149][ T7396] __nla_validate_parse: 6 callbacks suppressed [ 132.443170][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 132.722618][ T7406] vlan2: entered promiscuous mode [ 132.775429][ T7406] vlan2: entered allmulticast mode [ 132.791138][ T7406] hsr_slave_1: entered allmulticast mode [ 132.841113][ T7413] netlink: 'syz.3.384': attribute type 1 has an invalid length. [ 132.850790][ T7414] raw_sendmsg: syz.4.385 forgot to set AF_INET. Fix it! [ 132.886697][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 132.901016][ T7413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.908591][ T7413] IPv6: NLM_F_CREATE should be set when creating new route [ 133.058410][ T7416] netlink: 'syz.4.385': attribute type 2 has an invalid length. [ 133.071020][ T7423] syzkaller1: entered promiscuous mode [ 133.101889][ T7423] syzkaller1: entered allmulticast mode [ 133.479415][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 133.574892][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 133.616780][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 133.667468][ T7448] netlink: 'syz.4.391': attribute type 33 has an invalid length. [ 133.706782][ T7444] bridge2: port 1(veth7) entered blocking state [ 133.724354][ T7444] bridge2: port 1(veth7) entered disabled state [ 133.748928][ T7444] veth7: entered allmulticast mode [ 133.757383][ T7444] veth7: entered promiscuous mode [ 133.765755][ T7438] veth0_to_bond: left allmulticast mode [ 133.821757][ T7438] veth0_to_bond: left promiscuous mode [ 133.848984][ T7438] bridge1: port 2(veth0_to_bond) entered disabled state [ 133.899506][ T7438] bridge2: port 2(veth0_to_bond) entered blocking state [ 133.908499][ T7438] bridge2: port 2(veth0_to_bond) entered disabled state [ 133.918263][ T7438] veth0_to_bond: entered allmulticast mode [ 133.926362][ T7438] veth0_to_bond: entered promiscuous mode [ 134.209367][ T7466] bridge_slave_0: left allmulticast mode [ 134.227698][ T7466] bridge_slave_0: left promiscuous mode [ 134.252033][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.461886][ T7466] bridge_slave_1: left allmulticast mode [ 134.468221][ T7466] bridge_slave_1: left promiscuous mode [ 134.474089][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.502874][ T7466] veth0_to_bond: left allmulticast mode [ 134.508864][ T7466] veth0_to_bond: left promiscuous mode [ 134.514690][ T7466] bridge6: port 2(veth0_to_bond) entered disabled state [ 134.525694][ T7466] bond0: (slave bond_slave_0): Releasing backup interface [ 134.545759][ T7466] bond0: (slave bond_slave_1): Releasing backup interface [ 134.576863][ T7466] team0: Port device team_slave_0 removed [ 134.599380][ T7466] team0: Port device team_slave_1 removed [ 134.606210][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.628028][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.636957][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.644565][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.664479][ T7466] veth3: left allmulticast mode [ 134.671062][ T7466] veth3: left promiscuous mode [ 134.676110][ T7466] bridge6: port 1(veth3) entered disabled state [ 135.059662][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 135.093531][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 135.161218][ T7490] tipc: Enabled bearer , priority 0 [ 135.181527][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 135.184871][ T7490] syzkaller0: entered promiscuous mode [ 135.216437][ T7490] syzkaller0: entered allmulticast mode [ 135.269382][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 135.361714][ T7490] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 135.561136][ T7506] bridge5: port 1(veth9) entered blocking state [ 135.570972][ T7506] bridge5: port 1(veth9) entered disabled state [ 135.581053][ T7506] veth9: entered allmulticast mode [ 135.592686][ T7506] veth9: entered promiscuous mode [ 135.673465][ T7505] bridge5: port 2(veth0_to_bond) entered blocking state [ 135.681561][ T7505] bridge5: port 2(veth0_to_bond) entered disabled state [ 135.694331][ T7505] veth0_to_bond: entered allmulticast mode [ 135.710996][ T7505] veth0_to_bond: entered promiscuous mode [ 135.723042][ T7490] tipc: Resetting bearer [ 135.783945][ T7489] tipc: Resetting bearer [ 135.991490][ T7489] tipc: Disabling bearer [ 136.396235][ T7538] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 136.415613][ T7533] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 136.439973][ T7533] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 136.516294][ T7540] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 136.660779][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 137.071136][ T7572] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 137.453691][ T7587] sctp: [Deprecated]: syz.0.432 (pid 7587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.453691][ T7587] Use struct sctp_sack_info instead [ 137.679028][ T7604] __nla_validate_parse: 3 callbacks suppressed [ 137.679048][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 137.796191][ T7610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.898955][ T7607] tipc: Enabled bearer , priority 0 [ 138.056261][ T7607] tipc: Disabling bearer [ 138.113267][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 138.127544][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 138.263597][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.271687][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.450279][ T7638] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 138.670072][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 138.885339][ T7653] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.052721][ T7658] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 139.158077][ T7662] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 139.244861][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 139.267207][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 139.296337][ T7666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.303659][ T7666] IPv6: NLM_F_CREATE should be set when creating new route [ 139.311064][ T7666] IPv6: NLM_F_CREATE should be set when creating new route [ 139.318381][ T7666] IPv6: NLM_F_CREATE should be set when creating new route [ 139.331405][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 139.352250][ T7660] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 139.398019][ T7660] netlink: 184 bytes leftover after parsing attributes in process `syz.0.452'. [ 139.448889][ T7673] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.456'. [ 139.491141][ T7674] netlink: 260 bytes leftover after parsing attributes in process `syz.3.455'. [ 139.614817][ T7680] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 139.625938][ T7681] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 139.801753][ T7686] tipc: Enabled bearer , priority 0 [ 139.809903][ T7686] syzkaller0: entered promiscuous mode [ 139.815430][ T7686] syzkaller0: entered allmulticast mode [ 139.905249][ T7686] tipc: Resetting bearer [ 139.972562][ T7683] tipc: Resetting bearer [ 140.012508][ T7683] tipc: Disabling bearer [ 140.386908][ T7703] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 140.447327][ T7218] IPVS: starting estimator thread 0... [ 140.567382][ T7714] IPVS: using max 26 ests per chain, 62400 per kthread [ 140.649241][ T7721] geneve2: entered promiscuous mode [ 140.675128][ T7721] geneve2: entered allmulticast mode [ 140.709115][ T7730] netlink: 'syz.3.474': attribute type 10 has an invalid length. [ 140.726404][ T6329] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 140.915038][ T7729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.951656][ T7729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.981670][ T7730] bond0: (slave ): Enslaving as an active interface with an up link [ 140.995399][ T6329] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 141.054417][ T6329] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 141.214476][ T7748] hsr_slave_0: left promiscuous mode [ 141.231671][ T7748] hsr_slave_1: left promiscuous mode [ 141.460232][ T55] block nbd0: Possible stuck request ffff888025497000: control (read@0,4096B). Runtime 30 seconds [ 141.908824][ T7783] bridge0: entered promiscuous mode [ 141.914112][ T7783] bridge0: entered allmulticast mode [ 141.928006][ T7779] vlan1: entered allmulticast mode [ 141.933446][ T7779] veth0_vlan: entered allmulticast mode [ 142.324162][ T7802] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 142.540836][ T7811] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 142.583524][ T7808] bridge6: port 1(veth11) entered blocking state [ 142.594221][ T7808] bridge6: port 1(veth11) entered disabled state [ 142.602872][ T7808] veth11: entered allmulticast mode [ 142.617512][ T7808] veth11: entered promiscuous mode [ 142.671015][ T7729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.682742][ T7729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.694120][ T7729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 142.732176][ T7811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.769712][ T7806] bond1: (slave geneve2): making interface the new active one [ 142.779844][ T7806] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 142.791011][ T7814] veth0_to_bond: left allmulticast mode [ 142.796638][ T7814] veth0_to_bond: left promiscuous mode [ 142.803125][ T7814] bridge5: port 2(veth0_to_bond) entered disabled state [ 142.828886][ T7814] bridge6: port 2(veth0_to_bond) entered blocking state [ 142.860626][ T7814] bridge6: port 2(veth0_to_bond) entered disabled state [ 142.868703][ T7814] veth0_to_bond: entered allmulticast mode [ 142.892820][ T7814] veth0_to_bond: entered promiscuous mode [ 142.973891][ T7826] __nla_validate_parse: 12 callbacks suppressed [ 142.973913][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.503'. [ 143.035493][ T7729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.047821][ T7729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.075956][ T7729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 143.193367][ T7729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.225872][ T7729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.256544][ T7729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 143.272223][ T7842] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 143.464887][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 143.475585][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 143.486000][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 143.496342][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 143.506846][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 143.517263][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 143.527584][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 143.538120][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 143.538671][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512 [ 143.570208][ T7842] bond1: entered promiscuous mode [ 143.583422][ T7842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.683508][ T7856] tipc: Enabled bearer , priority 0 [ 143.932843][ T7856] tipc: Disabling bearer [ 143.991388][ T3524] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.041090][ T3524] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 144.071905][ T3524] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.116171][ T3524] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.140811][ T3524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 144.166553][ T3524] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.243440][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 144.253643][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 144.281005][ T7883] netlink: 'syz.1.519': attribute type 11 has an invalid length. [ 144.384308][ T6333] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.396545][ T6333] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 144.421650][ T6333] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.627394][ T6333] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.660206][ T6333] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 144.681435][ T6333] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.883165][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 145.219603][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.530'. [ 145.606375][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 145.607920][ T7936] netlink: 'syz.4.534': attribute type 4 has an invalid length. [ 145.661858][ T7942] netlink: 'syz.4.534': attribute type 4 has an invalid length. [ 145.698371][ T7941] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 145.880922][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 145.993236][ T7957] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 146.002070][ T7957] netlink: 228 bytes leftover after parsing attributes in process `syz.4.542'. [ 146.122536][ T7948] macvtap1: entered promiscuous mode [ 146.142211][ T7948] vlan0: entered promiscuous mode [ 146.163408][ T7948] macvtap1: entered allmulticast mode [ 146.173360][ T7948] vlan0: entered allmulticast mode [ 146.215725][ T7965] x_tables: ip_tables: udp match: only valid for protocol 17 [ 146.224331][ T7963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.545'. [ 146.282575][ T7963] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 146.397302][ T7969] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 146.532682][ T7969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.582606][ T7976] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 146.754018][ T7978] veth0_to_bond: left allmulticast mode [ 146.767963][ T7978] veth0_to_bond: left promiscuous mode [ 146.809694][ T7978] bridge6: port 2(veth0_to_bond) entered disabled state [ 146.832174][ T7989] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 147.080211][ T7989] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.326797][ T8013] netlink: 100 bytes leftover after parsing attributes in process `syz.2.559'. [ 147.353660][ T8012] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 147.380459][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.389406][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.507751][ T30] audit: type=1107 audit(1755753158.266:2): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aÃZ÷,L U$tƒ¥ôWcL¿ÊŠRvKÌ{\)ú†uo fvýf oV³n4ñ‘gŠ•ËÑ'a/â9¬|4¿Q–I±K„œo„ß}¹ ÛQszï­:úš^†ž;' [ 147.571907][ T30] audit: type=1107 audit(1755753158.316:3): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aÃZ÷,L U$tƒ¥ôWcL¿ÊŠRvKÌ{\)ú†uo fvýf oV³n4ñ‘gŠ•ËÑ'a/â9¬|4¿Q–I±K„œo„ß}¹ ÛQszï­:úš^†ž;' [ 147.745136][ T8029] tipc: Started in network mode [ 147.757331][ T8031] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 147.759896][ T8029] tipc: Node identity 569dbae08907, cluster identity 4711 [ 147.783935][ T8029] tipc: Enabled bearer , priority 0 [ 147.829699][ T8034] netlink: 'syz.2.567': attribute type 21 has an invalid length. [ 147.851507][ T8031] batman_adv: batadv0: Adding interface: team0 [ 147.933183][ T8031] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.004270][ T8031] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 148.050106][ T8036] syzkaller0: entered promiscuous mode [ 148.059239][ T8036] syzkaller0: entered allmulticast mode [ 148.180014][ T8028] tipc: Resetting bearer [ 148.246081][ T8028] tipc: Disabling bearer [ 148.551600][ T8067] __nla_validate_parse: 6 callbacks suppressed [ 148.551618][ T8067] netlink: 84 bytes leftover after parsing attributes in process `syz.1.574'. [ 148.594873][ T8056] syzkaller1: entered promiscuous mode [ 148.617676][ T8056] syzkaller1: entered allmulticast mode [ 148.760911][ T8072] netlink: 144 bytes leftover after parsing attributes in process `syz.2.576'. [ 148.792981][ T8073] netlink: 168 bytes leftover after parsing attributes in process `syz.1.577'. [ 148.895844][ T8072] bond2: entered promiscuous mode [ 148.908330][ T8077] syz.1.577 uses old SIOCAX25GETINFO [ 148.920617][ T8072] bond2: entered allmulticast mode [ 148.926866][ T8072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.114323][ T8092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.581'. [ 149.152155][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 149.479327][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 149.926311][ T8119] tipc: Enabled bearer , priority 0 [ 149.971817][ T8122] batman_adv: batadv0: Removing interface: team0 [ 149.989182][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 150.003435][ T8122] bond0: (slave ): Releasing backup interface [ 150.012426][ T8122] bond0: (slave ): the permanent HWaddr of slave - 9e:ad:b0:c0:16:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 150.035566][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 150.056643][ T8122] bond0: (slave wlan1): Releasing backup interface [ 150.079527][ T8122] veth9: left allmulticast mode [ 150.084685][ T8122] veth9: left promiscuous mode [ 150.091647][ T8122] bridge5: port 1(veth9) entered disabled state [ 150.102835][ T8122] veth11: left allmulticast mode [ 150.109528][ T8122] veth11: left promiscuous mode [ 150.115451][ T8122] bridge6: port 1(veth11) entered disabled state [ 150.125988][ T8119] syzkaller0: entered promiscuous mode [ 150.133551][ T8119] syzkaller0: entered allmulticast mode [ 150.174873][ T8131] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 150.339155][ T8137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 150.402243][ T8131] tipc: Resetting bearer [ 150.504527][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 150.522584][ T8131] tipc: Disabling bearer [ 150.718045][ T8153] dvmrp0: entered allmulticast mode [ 150.726789][ T8153] validate_nla: 1 callbacks suppressed [ 150.726808][ T8153] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 150.766097][ T8156] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 150.786442][ T8153] netlink: 'syz.4.598': attribute type 2 has an invalid length. [ 150.794881][ T8156] nbd: error processing sock list [ 150.800218][ T8156] block nbd1: shutting down sockets [ 150.911924][ T8156] sch_tbf: peakrate 7157070371468877819 is lower than or equals to rate 17020723593984517741 ! [ 151.300381][ T8180] bridge7: entered promiscuous mode [ 151.307761][ T8180] bridge7: entered allmulticast mode [ 151.528528][ T8179] syzkaller0: entered promiscuous mode [ 151.555132][ T8179] syzkaller0: entered allmulticast mode [ 151.584058][ T8197] Bluetooth: MGMT ver 1.23 [ 151.809789][ T5868] Bluetooth: hci4: link tx timeout [ 151.815340][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.839117][ T5868] Bluetooth: hci4: link tx timeout [ 151.844312][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.745476][ T8253] netlink: 'syz.4.629': attribute type 11 has an invalid length. [ 152.792187][ T8253] netlink: 'syz.4.629': attribute type 11 has an invalid length. [ 153.428297][ T8283] netlink: 'syz.2.639': attribute type 11 has an invalid length. [ 153.545729][ T8289] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 153.590318][ T8289] netlink: 'syz.4.640': attribute type 3 has an invalid length. [ 153.639722][ T8289] __nla_validate_parse: 9 callbacks suppressed [ 153.639745][ T8289] netlink: 224 bytes leftover after parsing attributes in process `syz.4.640'. [ 153.867722][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 153.939484][ T8306] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 154.289245][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 154.376790][ T8330] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001 [ 154.791837][ T8344] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 154.815468][ T8349] netlink: 'syz.0.657': attribute type 4 has an invalid length. [ 154.833519][ T8344] netlink: 224 bytes leftover after parsing attributes in process `syz.4.655'. [ 154.878618][ T8357] netlink: 'syz.0.657': attribute type 4 has an invalid length. [ 154.900827][ T8344] tipc: Started in network mode [ 154.913591][ T8344] tipc: Node identity bebb146deaa6, cluster identity 4711 [ 154.955952][ T8344] tipc: Enabled bearer , priority 0 [ 154.995828][ T8359] syzkaller0: entered promiscuous mode [ 155.001994][ T8359] syzkaller0: entered allmulticast mode [ 155.041926][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 155.145783][ T8342] tipc: Resetting bearer [ 155.149579][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 155.256762][ T8342] tipc: Disabling bearer [ 155.562959][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 155.573113][ T8378] ksmbd: Unknown IPC event: 8, ignore. [ 155.863028][ T8393] netlink: 104 bytes leftover after parsing attributes in process `syz.4.665'. [ 156.381269][ T8402] syzkaller1: entered promiscuous mode [ 156.421052][ T8402] syzkaller1: entered allmulticast mode [ 156.490563][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.668'. [ 157.044532][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.052401][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.332976][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.361946][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.481447][ T8423] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 157.862647][ T8410] bond1: left promiscuous mode [ 157.878954][ T8414] IPVS: Unknown mcast interface: dvmrp0 [ 158.027212][ T6327] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.043793][ T6327] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.079799][ T6327] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.115434][ T6327] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.185503][ T5941] IPVS: starting estimator thread 0... [ 158.287963][ T8432] IPVS: using max 24 ests per chain, 57600 per kthread [ 158.303139][ T5234] udevd[5234]: worker [6864] terminated by signal 33 (Unknown signal 33) [ 158.318271][ T5234] udevd[5234]: worker [6864] failed while handling '/devices/virtual/block/loop3' [ 158.461645][ T8439] trusted_key: syz.4.680 sent an empty control message without MSG_MORE. [ 158.670449][ T8452] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 158.691974][ T8453] sctp: [Deprecated]: syz.2.682 (pid 8453) Use of int in maxseg socket option. [ 158.691974][ T8453] Use struct sctp_assoc_value instead [ 158.953190][ T8460] netlink: 44 bytes leftover after parsing attributes in process `syz.3.686'. [ 159.287559][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 159.422147][ T8470] bridge8: port 1(veth13) entered blocking state [ 159.446553][ T8470] bridge8: port 1(veth13) entered disabled state [ 159.462957][ T8470] veth13: entered allmulticast mode [ 159.479911][ T8470] veth13: entered promiscuous mode [ 159.489798][ T8471] bridge8: port 2(veth0_to_bond) entered blocking state [ 159.497433][ T8471] bridge8: port 2(veth0_to_bond) entered disabled state [ 159.508365][ T8471] veth0_to_bond: entered allmulticast mode [ 159.527212][ T8471] veth0_to_bond: entered promiscuous mode [ 159.546016][ T8473] netlink: 'syz.2.690': attribute type 29 has an invalid length. [ 159.560232][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 159.803571][ T8485] Bluetooth: MGMT ver 1.23 [ 159.842593][ T8484] nbd: device at index 3 is going down [ 160.082149][ T7269] udevd[7269]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 160.269733][ T3524] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.439251][ T8504] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 160.756874][ T8509] syzkaller0: entered promiscuous mode [ 160.762859][ T8509] syzkaller0: entered allmulticast mode [ 161.150546][ T8360] Set syz1 is full, maxelem 65536 reached [ 161.262544][ T8526] netlink: 64 bytes leftover after parsing attributes in process `syz.1.704'. [ 161.275163][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 162.628907][ T8537] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:19999 [ 162.647516][ T8535] netlink: 'syz.1.707': attribute type 11 has an invalid length. [ 163.039600][ T8560] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 163.631657][ T8590] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.920904][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 163.956343][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 163.956462][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'. [ 163.968030][ T8607] netlink: 45 bytes leftover after parsing attributes in process `syz.3.731'. [ 163.984430][ T8600] netlink: 'syz.2.729': attribute type 15 has an invalid length. [ 163.997785][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 164.006872][ T8601] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 164.014320][ T8601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.039028][ T8610] netlink: 45 bytes leftover after parsing attributes in process `syz.3.731'. [ 164.062243][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 164.394369][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.736'. [ 164.589179][ T8634] openvswitch: netlink: Flow key attr not present in new flow. [ 164.607353][ T8637] netlink: 'syz.2.740': attribute type 11 has an invalid length. [ 164.615346][ T8637] netlink: 224 bytes leftover after parsing attributes in process `syz.2.740'. [ 164.628093][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'. [ 164.637561][ T8637] netlink: 'syz.2.740': attribute type 7 has an invalid length. [ 164.646713][ T8637] netlink: 'syz.2.740': attribute type 8 has an invalid length. [ 164.655395][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 164.681909][ T8638] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 164.711171][ T8626] bridge9: port 1(veth15) entered blocking state [ 164.721349][ T8626] bridge9: port 1(veth15) entered disabled state [ 164.730361][ T8626] veth15: entered allmulticast mode [ 164.744235][ T8626] veth15: entered promiscuous mode [ 164.753989][ T8630] veth0_to_bond: left allmulticast mode [ 164.765272][ T8630] veth0_to_bond: left promiscuous mode [ 164.773917][ T8630] bridge8: port 2(veth0_to_bond) entered disabled state [ 164.798159][ T8630] bridge9: port 2(veth0_to_bond) entered blocking state [ 164.825236][ T8630] bridge9: port 2(veth0_to_bond) entered disabled state [ 164.833145][ T8630] veth0_to_bond: entered allmulticast mode [ 164.841993][ T8630] veth0_to_bond: entered promiscuous mode [ 164.850130][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 164.865400][ T8632] tc_dump_action: action bad kind [ 165.161401][ T8655] netlink: 112 bytes leftover after parsing attributes in process `syz.2.745'. [ 165.373860][ T8660] hsr_slave_1 (unregistering): left promiscuous mode [ 165.433357][ T8665] netlink: 'syz.0.748': attribute type 10 has an invalid length. [ 165.468691][ T8662] ip6gre1: entered allmulticast mode [ 165.567656][ T8665] geneve1: entered allmulticast mode [ 165.603283][ T8665] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 165.785051][ T8681] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 165.862676][ T8677] bridge10: port 1(veth17) entered blocking state [ 165.878976][ T8677] bridge10: port 1(veth17) entered disabled state [ 165.886214][ T8677] veth17: entered allmulticast mode [ 165.903709][ T8677] veth17: entered promiscuous mode [ 165.922365][ T8684] veth0_to_bond: left allmulticast mode [ 165.949322][ T8684] veth0_to_bond: left promiscuous mode [ 165.965311][ T8684] bridge9: port 2(veth0_to_bond) entered disabled state [ 166.045490][ T8684] bridge10: port 2(veth0_to_bond) entered blocking state [ 166.067820][ T8684] bridge10: port 2(veth0_to_bond) entered disabled state [ 166.078608][ T8684] veth0_to_bond: entered allmulticast mode [ 166.093935][ T8684] veth0_to_bond: entered promiscuous mode [ 166.705078][ T8723] erspan0: entered promiscuous mode [ 166.713324][ T8723] erspan0: entered allmulticast mode [ 167.031859][ T8732] bridge5: port 1(veth9) entered blocking state [ 167.039060][ T8732] bridge5: port 1(veth9) entered disabled state [ 167.045591][ T8732] veth9: entered allmulticast mode [ 167.054069][ T8732] veth9: entered promiscuous mode [ 167.099058][ T8734] veth0_to_bond: left allmulticast mode [ 167.108144][ T8734] veth0_to_bond: left promiscuous mode [ 167.124149][ T8734] bridge2: port 2(veth0_to_bond) entered disabled state [ 167.138548][ T8734] bridge5: port 2(veth0_to_bond) entered blocking state [ 167.150953][ T8734] bridge5: port 2(veth0_to_bond) entered disabled state [ 167.158811][ T8734] veth0_to_bond: entered allmulticast mode [ 167.166288][ T8734] veth0_to_bond: entered promiscuous mode [ 167.181266][ T8742] tipc: Enabled bearer , priority 0 [ 167.199572][ T8738] syzkaller0: entered promiscuous mode [ 167.205114][ T8738] syzkaller0: entered allmulticast mode [ 167.262179][ T8738] hsr0: mtu less than device minimum [ 167.305833][ T8736] tipc: Resetting bearer [ 167.423417][ T8736] tipc: Disabling bearer [ 167.837578][ T8772] netlink: 'syz.0.780': attribute type 9 has an invalid length. [ 168.655741][ T8793] bridge3: port 1(veth5) entered blocking state [ 168.693129][ T8793] bridge3: port 1(veth5) entered disabled state [ 168.709396][ T8793] veth5: entered allmulticast mode [ 168.716804][ T8793] veth5: entered promiscuous mode [ 168.731933][ T8797] veth0_to_bond: left allmulticast mode [ 168.750098][ T8797] veth0_to_bond: left promiscuous mode [ 168.767391][ T8797] bridge2: port 2(veth0_to_bond) entered disabled state [ 168.801427][ T8797] bridge3: port 2(veth0_to_bond) entered blocking state [ 168.826079][ T8797] bridge3: port 2(veth0_to_bond) entered disabled state [ 168.837356][ T8797] veth0_to_bond: entered allmulticast mode [ 168.846045][ T8797] veth0_to_bond: entered promiscuous mode [ 169.429145][ T8841] syz_tun: entered allmulticast mode [ 169.490311][ T8843] __nla_validate_parse: 12 callbacks suppressed [ 169.490336][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 169.536012][ T8841] syz_tun: left allmulticast mode [ 169.542723][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 169.789443][ T8856] tipc: New replicast peer: 255.255.255.255 [ 169.797900][ T8856] tipc: Enabled bearer , priority 10 [ 169.842189][ T8856] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 169.906030][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'. [ 169.918504][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'. [ 170.145250][ T8869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.152231][ T8869] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 170.190325][ T8869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.204945][ T8869] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 170.318146][ T8869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.324141][ T8869] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 170.357000][ T8869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.365060][ T8869] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 170.807654][ T9] tipc: Node number set to 1304078437 [ 170.922615][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 171.071455][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 171.231820][ T9] IPVS: starting estimator thread 0... [ 171.274782][ T8910] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 171.354651][ T8912] IPVS: using max 24 ests per chain, 57600 per kthread [ 171.540522][ T55] block nbd0: Possible stuck request ffff888025497000: control (read@0,4096B). Runtime 60 seconds [ 171.641956][ T8926] syzkaller1: entered promiscuous mode [ 171.657259][ T8926] syzkaller1: entered allmulticast mode [ 171.992484][ T8941] netlink: 248 bytes leftover after parsing attributes in process `syz.1.818'. [ 172.091363][ T8939] veth0_virt_wifi: renamed from veth0_vlan [ 172.560884][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.822'. [ 172.575347][ T8964] netlink: 72 bytes leftover after parsing attributes in process `syz.3.822'. [ 172.592983][ T8964] netlink: 72 bytes leftover after parsing attributes in process `syz.3.822'. [ 175.137555][ T5234] udevd[5234]: worker [6225] /devices/virtual/block/nbd0 is taking a long time [ 199.701503][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.708325][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.618508][ T55] block nbd0: Possible stuck request ffff888025497000: control (read@0,4096B). Runtime 90 seconds [ 231.702300][ T55] block nbd0: Possible stuck request ffff888025497000: control (read@0,4096B). Runtime 120 seconds [ 261.143912][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.150362][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.778100][ T55] block nbd0: Possible stuck request ffff888025497000: control (read@0,4096B). Runtime 150 seconds [ 291.857939][ T55] block nbd0: Possible stuck request ffff888025497000: control (read@0,4096B). Runtime 180 seconds [ 294.162635][ T5234] udevd[5234]: worker [6225] /devices/virtual/block/nbd0 timeout; kill it [ 294.174610][ T5234] udevd[5234]: seq 11623 '/devices/virtual/block/nbd0' killed [ 321.937546][ T55] block nbd0: Possible stuck request ffff888025497000: control (read@0,4096B). Runtime 210 seconds [ 322.582538][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.589012][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.187545][ T31] INFO: task dhcpcd:5528 blocked for more than 143 seconds. [ 332.194889][ T31] Not tainted syzkaller #0 [ 332.200293][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.209102][ T31] task:dhcpcd state:D stack:24072 pid:5528 tgid:5528 ppid:1 task_flags:0x400140 flags:0x00004002 [ 332.221122][ T31] Call Trace: [ 332.224414][ T31] [ 332.227552][ T31] __schedule+0x1798/0x4cc0 [ 332.232112][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.237121][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.242183][ T31] ? __pfx___schedule+0x10/0x10 [ 332.247772][ T31] ? schedule+0x91/0x360 [ 332.252466][ T31] schedule+0x165/0x360 [ 332.256679][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.263654][ T31] __mutex_lock+0x7e6/0x1360 [ 332.268651][ T31] ? __mutex_lock+0x5b6/0x1360 [ 332.273480][ T31] ? genl_rcv_msg+0x10d/0x790 [ 332.278773][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.283860][ T31] ? stack_trace_save+0x9c/0xe0 [ 332.289468][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 332.327044][ T31] ? radix_tree_lookup+0x240/0x290 [ 332.332268][ T31] genl_rcv_msg+0x10d/0x790 [ 332.375871][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.381273][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.386387][ T31] netlink_rcv_skb+0x208/0x470 [ 332.391606][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.396521][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.402115][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.407838][ T31] ? down_read+0x1ad/0x2e0 [ 332.412328][ T31] genl_rcv+0x28/0x40 [ 332.416339][ T31] netlink_unicast+0x82c/0x9e0 [ 332.422096][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 332.427792][ T31] ? netlink_sendmsg+0x642/0xb30 [ 332.432779][ T31] ? skb_put+0x11b/0x210 [ 332.437562][ T31] netlink_sendmsg+0x805/0xb30 [ 332.442389][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.448706][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.453623][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.458690][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.464024][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.469461][ T31] __sock_sendmsg+0x21c/0x270 [ 332.474194][ T31] ____sys_sendmsg+0x505/0x830 [ 332.479079][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.484405][ T31] ? import_iovec+0x74/0xa0 [ 332.489070][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 332.493791][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.499667][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 332.504698][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 332.509789][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.515294][ T31] ? __secure_computing+0xe2/0x2a0 [ 332.520509][ T31] do_syscall_64+0xfa/0x3b0 [ 332.525065][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.531441][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.537957][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.542679][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.549124][ T31] RIP: 0033:0x7fe5a2b94407 [ 332.553569][ T31] RSP: 002b:00007ffebd874110 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 332.562151][ T31] RAX: ffffffffffffffda RBX: 00007fe5a2b0a740 RCX: 00007fe5a2b94407 [ 332.570295][ T31] RDX: 0000000000000000 RSI: 00007ffebd874190 RDI: 000000000000000e [ 332.579438][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.587708][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005590a53eee10 [ 332.595758][ T31] R13: 000000000000000e R14: 00007ffebd888650 R15: 00005590bd115db0 [ 332.603929][ T31] [ 332.607526][ T31] INFO: task kworker/1:6:5941 blocked for more than 143 seconds. [ 332.615274][ T31] Not tainted syzkaller #0 [ 332.620334][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.629125][ T31] task:kworker/1:6 state:D stack:23144 pid:5941 tgid:5941 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 332.641764][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 332.648653][ T31] Call Trace: [ 332.651977][ T31] [ 332.654946][ T31] __schedule+0x1798/0x4cc0 [ 332.659827][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 332.665312][ T31] ? __pfx___schedule+0x10/0x10 [ 332.670919][ T31] ? schedule+0x91/0x360 [ 332.675229][ T31] schedule+0x165/0x360 [ 332.679696][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.685250][ T31] __mutex_lock+0x7e6/0x1360 [ 332.690025][ T31] ? __mutex_lock+0x5b6/0x1360 [ 332.694839][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 332.701544][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.706615][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 332.712438][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 332.718315][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 332.724426][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 332.730572][ T31] process_scheduled_works+0xae1/0x17b0 [ 332.736190][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.742306][ T31] worker_thread+0x8a0/0xda0 [ 332.746938][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.753417][ T31] ? __kthread_parkme+0x7b/0x200 [ 332.758729][ T31] kthread+0x711/0x8a0 [ 332.762900][ T31] ? __pfx_worker_thread+0x10/0x10 [ 332.768119][ T31] ? __pfx_kthread+0x10/0x10 [ 332.772747][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.778049][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.783287][ T31] ? __pfx_kthread+0x10/0x10 [ 332.788240][ T31] ret_from_fork+0x3f9/0x770 [ 332.792847][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 332.798107][ T31] ? __switch_to_asm+0x39/0x70 [ 332.802921][ T31] ? __switch_to_asm+0x33/0x70 [ 332.808616][ T31] ? __pfx_kthread+0x10/0x10 [ 332.813258][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.820058][ T31] [ 332.823221][ T31] INFO: task syz.2.803:8857 blocked for more than 144 seconds. [ 332.860956][ T31] Not tainted syzkaller #0 [ 332.865957][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.879538][ T31] task:syz.2.803 state:D stack:25096 pid:8857 tgid:8857 ppid:5870 task_flags:0x400040 flags:0x00004004 [ 332.896232][ T31] Call Trace: [ 332.902300][ T31] [ 332.905278][ T31] __schedule+0x1798/0x4cc0 [ 332.914788][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.923640][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.932798][ T31] ? __pfx___schedule+0x10/0x10 [ 332.940319][ T31] ? schedule+0x91/0x360 [ 332.944619][ T31] schedule+0x165/0x360 [ 332.953052][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.961496][ T31] __mutex_lock+0x7e6/0x1360 [ 332.966142][ T31] ? __mutex_lock+0x5b6/0x1360 [ 332.975422][ T31] ? rfkill_unregister+0xc8/0x220 [ 332.984029][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.994477][ T31] ? __pfx_device_del+0x10/0x10 [ 333.002036][ T31] rfkill_unregister+0xc8/0x220 [ 333.011133][ T31] nfc_unregister_device+0x96/0x2a0 [ 333.016387][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 333.025610][ T31] virtual_ncidev_close+0x56/0x90 [ 333.036198][ T31] __fput+0x44c/0xa70 [ 333.042863][ T31] task_work_run+0x1d1/0x260 [ 333.051649][ T31] ? __pfx_task_work_run+0x10/0x10 [ 333.056819][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 333.065055][ T31] exit_to_user_mode_loop+0xec/0x110 [ 333.074611][ T31] do_syscall_64+0x2bd/0x3b0 [ 333.081881][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.092453][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.102269][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.111157][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.119777][ T31] RIP: 0033:0x7f591878ebe9 [ 333.124233][ T31] RSP: 002b:00007ffc98255718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 333.137800][ T31] RAX: 0000000000000000 RBX: 00007f59189b7da0 RCX: 00007f591878ebe9 [ 333.145824][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 333.161009][ T31] RBP: 00007f59189b7da0 R08: 0000000000000200 R09: 0000001e98255a0f [ 333.172639][ T31] R10: 00007f59189b7cb0 R11: 0000000000000246 R12: 0000000000029a59 [ 333.184416][ T31] R13: 00007f59189b6090 R14: ffffffffffffffff R15: 00007ffc98255830 [ 333.195861][ T31] [ 333.202785][ T31] INFO: task syz.4.805:8869 blocked for more than 144 seconds. [ 333.212324][ T31] Not tainted syzkaller #0 [ 333.217618][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.226397][ T31] task:syz.4.805 state:D stack:24856 pid:8869 tgid:8866 ppid:5863 task_flags:0x400040 flags:0x00004006 [ 333.239388][ T31] Call Trace: [ 333.242699][ T31] [ 333.245637][ T31] __schedule+0x1798/0x4cc0 [ 333.250277][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.255175][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.260701][ T31] ? __pfx___schedule+0x10/0x10 [ 333.265730][ T31] ? schedule+0x91/0x360 [ 333.270547][ T31] schedule+0x165/0x360 [ 333.274760][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.280433][ T31] __mutex_lock+0x7e6/0x1360 [ 333.285076][ T31] ? __mutex_lock+0x5b6/0x1360 [ 333.290339][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 333.295719][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.301421][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.306938][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 333.312975][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.319393][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 333.325148][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 333.330668][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 333.336452][ T31] rfkill_set_block+0x1d2/0x440 [ 333.341421][ T31] rfkill_fop_write+0x44b/0x570 [ 333.346316][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 333.351792][ T31] ? __pfx_security_file_permission+0x10/0x10 [ 333.358397][ T31] ? rw_verify_area+0x255/0x4d0 [ 333.363309][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.368319][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 333.373745][ T31] vfs_write+0x27b/0xb30 [ 333.378152][ T31] ? __pfx_vfs_write+0x10/0x10 [ 333.382991][ T31] ? __fget_files+0x2a/0x420 [ 333.388249][ T31] ? __fget_files+0x2a/0x420 [ 333.392892][ T31] ? __fget_files+0x3a0/0x420 [ 333.397674][ T31] ? __fget_files+0x2a/0x420 [ 333.402337][ T31] ksys_write+0x145/0x250 [ 333.406700][ T31] ? __pfx_ksys_write+0x10/0x10 [ 333.411709][ T31] ? do_syscall_64+0xbe/0x3b0 [ 333.416438][ T31] do_syscall_64+0xfa/0x3b0 [ 333.421413][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.426673][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.432874][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.437659][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.443581][ T31] RIP: 0033:0x7f189958ebe9 [ 333.448444][ T31] RSP: 002b:00007f189a3c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.456889][ T31] RAX: ffffffffffffffda RBX: 00007f18997b6180 RCX: 00007f189958ebe9 [ 333.465079][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 333.476868][ T31] RBP: 00007f1899611e19 R08: 0000000000000000 R09: 0000000000000000 [ 333.485267][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.493377][ T31] R13: 00007f18997b6218 R14: 00007f18997b6180 R15: 00007ffd56336568 [ 333.501480][ T31] [ 333.504558][ T31] INFO: task syz.1.818:8941 blocked for more than 144 seconds. [ 333.512644][ T31] Not tainted syzkaller #0 [ 333.517669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.526357][ T31] task:syz.1.818 state:D stack:24648 pid:8941 tgid:8935 ppid:5861 task_flags:0x400140 flags:0x00004006 [ 333.539023][ T31] Call Trace: [ 333.542370][ T31] [ 333.545311][ T31] __schedule+0x1798/0x4cc0 [ 333.549985][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.554891][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.559872][ T31] ? __pfx___schedule+0x10/0x10 [ 333.564771][ T31] ? schedule+0x91/0x360 [ 333.569392][ T31] schedule+0x165/0x360 [ 333.573591][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.579145][ T31] __mutex_lock+0x7e6/0x1360 [ 333.583786][ T31] ? __mutex_lock+0x5b6/0x1360 [ 333.588643][ T31] ? rfkill_register+0x37/0x8e0 [ 333.593617][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.599069][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 333.604038][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.609361][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 333.614679][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 333.620408][ T31] rfkill_register+0x37/0x8e0 [ 333.625125][ T31] wiphy_register+0x214c/0x28d0 [ 333.630357][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 333.635576][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 333.640817][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 333.646929][ T31] ieee80211_register_hw+0x3425/0x4080 [ 333.652502][ T31] ? ieee80211_register_hw+0x1491/0x4080 [ 333.658626][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 333.664450][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.670871][ T31] ? __hrtimer_setup+0x187/0x210 [ 333.675836][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 333.681782][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 333.687982][ T31] ? __pfx__printk+0x10/0x10 [ 333.692621][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 333.698762][ T31] ? __nla_validate_parse+0x251c/0x2d40 [ 333.704350][ T31] ? __sock_sendmsg+0x21c/0x270 [ 333.709280][ T31] ? ____sys_sendmsg+0x505/0x830 [ 333.714258][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 333.719790][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 333.725569][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 333.731225][ T31] ? __nla_parse+0x40/0x60 [ 333.735684][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 333.742120][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 333.748078][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 333.754187][ T31] ? bpf_lsm_capable+0x9/0x20 [ 333.758970][ T31] ? security_capable+0x7e/0x2e0 [ 333.763991][ T31] genl_rcv_msg+0x60e/0x790 [ 333.768571][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.773634][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 333.779720][ T31] netlink_rcv_skb+0x208/0x470 [ 333.784530][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.789476][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.794531][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.799942][ T31] ? down_read+0x1ad/0x2e0 [ 333.804410][ T31] genl_rcv+0x28/0x40 [ 333.808840][ T31] netlink_unicast+0x82c/0x9e0 [ 333.813664][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 333.819062][ T31] ? netlink_sendmsg+0x642/0xb30 [ 333.824034][ T31] ? skb_put+0x11b/0x210 [ 333.828378][ T31] netlink_sendmsg+0x805/0xb30 [ 333.833187][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.838940][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.843928][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.849295][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.854615][ T31] __sock_sendmsg+0x21c/0x270 [ 333.859704][ T31] ____sys_sendmsg+0x505/0x830 [ 333.864516][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.870534][ T31] ? import_iovec+0x74/0xa0 [ 333.875089][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 333.879907][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.885172][ T31] ? __fget_files+0x2a/0x420 [ 333.889949][ T31] ? __fget_files+0x3a0/0x420 [ 333.894690][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 333.899774][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.905273][ T31] ? rcu_is_watching+0x15/0xb0 [ 333.910197][ T31] ? do_syscall_64+0xbe/0x3b0 [ 333.914954][ T31] do_syscall_64+0xfa/0x3b0 [ 333.919741][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.924980][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.931311][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.936043][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.942311][ T31] RIP: 0033:0x7f1538b8ebe9 [ 333.946764][ T31] RSP: 002b:00007f15399a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.955491][ T31] RAX: ffffffffffffffda RBX: 00007f1538db6180 RCX: 00007f1538b8ebe9 [ 333.963645][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 333.971711][ T31] RBP: 00007f1538c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 333.979999][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.988156][ T31] R13: 00007f1538db6218 R14: 00007f1538db6180 R15: 00007ffe43db1a08 [ 333.996176][ T31] [ 333.999324][ T31] INFO: task syz.0.819:8951 blocked for more than 145 seconds. [ 334.006888][ T31] Not tainted syzkaller #0 [ 334.012091][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.021402][ T31] task:syz.0.819 state:D stack:26920 pid:8951 tgid:8945 ppid:5865 task_flags:0x400040 flags:0x00004004 [ 334.033453][ T31] Call Trace: [ 334.036789][ T31] [ 334.039800][ T31] __schedule+0x1798/0x4cc0 [ 334.044353][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.049321][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.054209][ T31] ? __pfx___schedule+0x10/0x10 [ 334.059237][ T31] ? schedule+0x91/0x360 [ 334.063524][ T31] schedule+0x165/0x360 [ 334.067760][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.073251][ T31] __mutex_lock+0x7e6/0x1360 [ 334.077989][ T31] ? __mutex_lock+0x5b6/0x1360 [ 334.082798][ T31] ? genl_rcv_msg+0x10d/0x790 [ 334.087759][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.092820][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 334.098103][ T31] ? radix_tree_lookup+0x240/0x290 [ 334.103268][ T31] genl_rcv_msg+0x10d/0x790 [ 334.107860][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.112923][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 334.118092][ T31] ? __asan_memcpy+0x40/0x70 [ 334.122807][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 334.128272][ T31] netlink_rcv_skb+0x208/0x470 [ 334.133095][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.138130][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.143218][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.148612][ T31] ? down_read+0x1ad/0x2e0 [ 334.153070][ T31] genl_rcv+0x28/0x40 [ 334.157109][ T31] netlink_unicast+0x82c/0x9e0 [ 334.161916][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 334.167299][ T31] ? netlink_sendmsg+0x642/0xb30 [ 334.172292][ T31] ? skb_put+0x11b/0x210 [ 334.176777][ T31] netlink_sendmsg+0x805/0xb30 [ 334.181985][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.187437][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.192441][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.198045][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.203424][ T31] __sock_sendmsg+0x21c/0x270 [ 334.208655][ T31] __sys_sendto+0x3bd/0x520 [ 334.213291][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 334.218414][ T31] ? count_memcg_event_mm+0x21/0x260 [ 334.223773][ T31] ? exc_page_fault+0x76/0xf0 [ 334.228572][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 334.233938][ T31] __x64_sys_sendto+0xde/0x100 [ 334.238876][ T31] do_syscall_64+0xfa/0x3b0 [ 334.243444][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.248746][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.254841][ T31] ? clear_bhb_loop+0x60/0xb0 [ 334.259703][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.265631][ T31] RIP: 0033:0x7f6e06590a7c [ 334.270125][ T31] RSP: 002b:00007f6e073dbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 334.278650][ T31] RAX: ffffffffffffffda RBX: 00007f6e073dbfc0 RCX: 00007f6e06590a7c [ 334.286648][ T31] RDX: 0000000000000020 RSI: 00007f6e073dc010 RDI: 0000000000000006 [ 334.294744][ T31] RBP: 0000000000000000 R08: 00007f6e073dbf14 R09: 000000000000000c [ 334.302833][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 334.311199][ T31] R13: 00007f6e073dbf68 R14: 00007f6e073dc010 R15: 0000000000000000 [ 334.319422][ T31] [ 334.322587][ T31] INFO: task syz.3.823:8969 blocked for more than 145 seconds. [ 334.330323][ T31] Not tainted syzkaller #0 [ 334.335284][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.344256][ T31] task:syz.3.823 state:D stack:27240 pid:8969 tgid:8968 ppid:5878 task_flags:0x400140 flags:0x00004004 [ 334.356526][ T31] Call Trace: [ 334.360143][ T31] [ 334.363260][ T31] __schedule+0x1798/0x4cc0 [ 334.367905][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.372820][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.377787][ T31] ? __pfx___schedule+0x10/0x10 [ 334.382814][ T31] ? schedule+0x91/0x360 [ 334.387148][ T31] schedule+0x165/0x360 [ 334.391363][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.396883][ T31] __mutex_lock+0x7e6/0x1360 [ 334.401557][ T31] ? __mutex_lock+0x5b6/0x1360 [ 334.406367][ T31] ? genl_rcv_msg+0x10d/0x790 [ 334.411163][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.416237][ T31] ? stack_trace_save+0x9c/0xe0 [ 334.422436][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 334.428170][ T31] ? radix_tree_lookup+0x240/0x290 [ 334.433329][ T31] genl_rcv_msg+0x10d/0x790 [ 334.438623][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.443530][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.448758][ T31] netlink_rcv_skb+0x208/0x470 [ 334.453722][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.459139][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.464216][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.469885][ T31] ? down_read+0x1ad/0x2e0 [ 334.474341][ T31] genl_rcv+0x28/0x40 [ 334.478707][ T31] netlink_unicast+0x82c/0x9e0 [ 334.483530][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 334.488900][ T31] ? netlink_sendmsg+0x642/0xb30 [ 334.493879][ T31] ? skb_put+0x11b/0x210 [ 334.498570][ T31] netlink_sendmsg+0x805/0xb30 [ 334.503393][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.508899][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.513931][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.519317][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.524667][ T31] __sock_sendmsg+0x21c/0x270 [ 334.529667][ T31] __sys_sendto+0x3bd/0x520 [ 334.534215][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 334.539389][ T31] ? count_memcg_event_mm+0x21/0x260 [ 334.544852][ T31] ? exc_page_fault+0x76/0xf0 [ 334.549661][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 334.554995][ T31] __x64_sys_sendto+0xde/0x100 [ 334.559878][ T31] do_syscall_64+0xfa/0x3b0 [ 334.564421][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.569712][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.575812][ T31] ? clear_bhb_loop+0x60/0xb0 [ 334.581236][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.587341][ T31] RIP: 0033:0x7f1708390a7c [ 334.591787][ T31] RSP: 002b:00007f17091f3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 334.600289][ T31] RAX: ffffffffffffffda RBX: 00007f17091f3fc0 RCX: 00007f1708390a7c [ 334.608361][ T31] RDX: 0000000000000024 RSI: 00007f17091f4010 RDI: 0000000000000004 [ 334.616360][ T31] RBP: 0000000000000000 R08: 00007f17091f3f14 R09: 000000000000000c [ 334.624611][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 334.632840][ T31] R13: 00007f17091f3f68 R14: 00007f17091f4010 R15: 0000000000000000 [ 334.641196][ T31] [ 334.644279][ T31] INFO: task syz-executor:9013 blocked for more than 145 seconds. [ 334.652325][ T31] Not tainted syzkaller #0 [ 334.657419][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.666194][ T31] task:syz-executor state:D stack:28040 pid:9013 tgid:9013 ppid:1 task_flags:0x400040 flags:0x00004000 [ 334.678289][ T31] Call Trace: [ 334.681597][ T31] [ 334.684554][ T31] __schedule+0x1798/0x4cc0 [ 334.689192][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.694131][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.699213][ T31] ? __pfx___schedule+0x10/0x10 [ 334.704127][ T31] ? schedule+0x91/0x360 [ 334.708461][ T31] schedule+0x165/0x360 [ 334.712651][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.718296][ T31] __mutex_lock+0x7e6/0x1360 [ 334.722944][ T31] ? __mutex_lock+0x5b6/0x1360 [ 334.727801][ T31] ? rfkill_register+0x37/0x8e0 [ 334.732691][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.738164][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 334.743580][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 334.749185][ T31] ? device_initialize+0x24b/0x440 [ 334.754327][ T31] rfkill_register+0x37/0x8e0 [ 334.759131][ T31] hci_register_dev+0x3f5/0x890 [ 334.764059][ T31] vhci_create_device+0x39c/0x6e0 [ 334.769230][ T31] vhci_write+0x3ce/0x4a0 [ 334.773626][ T31] vfs_write+0x5c9/0xb30 [ 334.778034][ T31] ? __pfx_vhci_write+0x10/0x10 [ 334.782924][ T31] ? __pfx_vfs_write+0x10/0x10 [ 334.788085][ T31] ? count_memcg_event_mm+0x21/0x260 [ 334.793426][ T31] ksys_write+0x145/0x250 [ 334.797878][ T31] ? __pfx_ksys_write+0x10/0x10 [ 334.802811][ T31] ? do_syscall_64+0xbe/0x3b0 [ 334.807795][ T31] do_syscall_64+0xfa/0x3b0 [ 334.812339][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.817657][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.823763][ T31] ? clear_bhb_loop+0x60/0xb0 [ 334.828557][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.834572][ T31] RIP: 0033:0x7f843c98d660 [ 334.839081][ T31] RSP: 002b:00007ffc33b7a828 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 334.847581][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f843c98d660 [ 334.855598][ T31] RDX: 0000000000000002 RSI: 00007ffc33b7a83a RDI: 00000000000000ca [ 334.863947][ T31] RBP: 00007f843cbb67b8 R08: 0000000000000000 R09: 00007f843d6ed6c0 [ 334.872002][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 334.880232][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 334.888324][ T31] [ 334.891528][ T31] INFO: task syz-executor:9014 blocked for more than 146 seconds. [ 334.899568][ T31] Not tainted syzkaller #0 [ 334.904629][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.913503][ T31] task:syz-executor state:D stack:27800 pid:9014 tgid:9014 ppid:1 task_flags:0x400040 flags:0x00004000 [ 334.925734][ T31] Call Trace: [ 334.929126][ T31] [ 334.932093][ T31] __schedule+0x1798/0x4cc0 [ 334.936735][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.941677][ T31] ? __lock_acquire+0xab9/0xd20 [ 334.946580][ T31] ? __pfx___schedule+0x10/0x10 [ 334.951556][ T31] ? schedule+0x91/0x360 [ 334.955940][ T31] schedule+0x165/0x360 [ 334.960359][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.965875][ T31] __mutex_lock+0x7e6/0x1360 [ 334.970773][ T31] ? __mutex_lock+0x5b6/0x1360 [ 334.975685][ T31] ? rfkill_register+0x37/0x8e0 [ 334.980660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.985729][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 334.991149][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 334.996562][ T31] ? device_initialize+0x24b/0x440 [ 335.001739][ T31] rfkill_register+0x37/0x8e0 [ 335.006473][ T31] hci_register_dev+0x3f5/0x890 [ 335.011919][ T31] vhci_create_device+0x39c/0x6e0 [ 335.017235][ T31] vhci_write+0x3ce/0x4a0 [ 335.021610][ T31] vfs_write+0x5c9/0xb30 [ 335.025968][ T31] ? __pfx_vhci_write+0x10/0x10 [ 335.030932][ T31] ? __pfx_vfs_write+0x10/0x10 [ 335.035744][ T31] ? count_memcg_event_mm+0x21/0x260 [ 335.041170][ T31] ksys_write+0x145/0x250 [ 335.045556][ T31] ? __pfx_ksys_write+0x10/0x10 [ 335.050537][ T31] ? do_syscall_64+0xbe/0x3b0 [ 335.055270][ T31] do_syscall_64+0xfa/0x3b0 [ 335.060271][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.065528][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.071692][ T31] ? clear_bhb_loop+0x60/0xb0 [ 335.076413][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.082583][ T31] RIP: 0033:0x7f171018d660 [ 335.087098][ T31] RSP: 002b:00007ffc671c53a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 335.095594][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f171018d660 [ 335.103749][ T31] RDX: 0000000000000002 RSI: 00007ffc671c53ba RDI: 00000000000000ca [ 335.111836][ T31] RBP: 00007f17103b67b8 R08: 0000000000000000 R09: 00007f1710eed6c0 [ 335.120002][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 335.128064][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 335.136112][ T31] [ 335.139251][ T31] INFO: task syz-executor:9018 blocked for more than 146 seconds. [ 335.147565][ T31] Not tainted syzkaller #0 [ 335.152651][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.161615][ T31] task:syz-executor state:D stack:28040 pid:9018 tgid:9018 ppid:1 task_flags:0x400040 flags:0x00004000 [ 335.173633][ T31] Call Trace: [ 335.177185][ T31] [ 335.180147][ T31] __schedule+0x1798/0x4cc0 [ 335.184675][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.189830][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.194729][ T31] ? __pfx___schedule+0x10/0x10 [ 335.199700][ T31] ? schedule+0x91/0x360 [ 335.203991][ T31] schedule+0x165/0x360 [ 335.208290][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.213810][ T31] __mutex_lock+0x7e6/0x1360 [ 335.218682][ T31] ? __mutex_lock+0x5b6/0x1360 [ 335.223495][ T31] ? rfkill_register+0x37/0x8e0 [ 335.228430][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 335.233502][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 335.238887][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 335.244301][ T31] ? device_initialize+0x24b/0x440 [ 335.250138][ T31] rfkill_register+0x37/0x8e0 [ 335.255400][ T31] hci_register_dev+0x3f5/0x890 [ 335.260427][ T31] vhci_create_device+0x39c/0x6e0 [ 335.265502][ T31] vhci_write+0x3ce/0x4a0 [ 335.270074][ T31] vfs_write+0x5c9/0xb30 [ 335.274373][ T31] ? __pfx_vhci_write+0x10/0x10 [ 335.279324][ T31] ? __pfx_vfs_write+0x10/0x10 [ 335.284126][ T31] ? count_memcg_event_mm+0x21/0x260 [ 335.290568][ T31] ksys_write+0x145/0x250 [ 335.294941][ T31] ? __pfx_ksys_write+0x10/0x10 [ 335.300212][ T31] ? do_syscall_64+0xbe/0x3b0 [ 335.304941][ T31] do_syscall_64+0xfa/0x3b0 [ 335.309553][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.314798][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.320975][ T31] ? clear_bhb_loop+0x60/0xb0 [ 335.325690][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.331660][ T31] RIP: 0033:0x7f338098d660 [ 335.336107][ T31] RSP: 002b:00007ffcf2b02ff8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 335.344673][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f338098d660 [ 335.352769][ T31] RDX: 0000000000000002 RSI: 00007ffcf2b0300a RDI: 00000000000000ca [ 335.360801][ T31] RBP: 00007f3380bb67b8 R08: 0000000000000000 R09: 00007f33816ed6c0 [ 335.368895][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 335.376926][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 335.385000][ T31] [ 335.388177][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 335.397294][ T31] INFO: task syz-executor:9019 blocked for more than 146 seconds. [ 335.405308][ T31] Not tainted syzkaller #0 [ 335.410517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.419336][ T31] task:syz-executor state:D stack:28040 pid:9019 tgid:9019 ppid:1 task_flags:0x400040 flags:0x00004000 [ 335.431397][ T31] Call Trace: [ 335.434701][ T31] [ 335.437723][ T31] __schedule+0x1798/0x4cc0 [ 335.442276][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.447305][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.452200][ T31] ? __pfx___schedule+0x10/0x10 [ 335.457251][ T31] ? schedule+0x91/0x360 [ 335.461542][ T31] schedule+0x165/0x360 [ 335.465720][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.471293][ T31] __mutex_lock+0x7e6/0x1360 [ 335.475941][ T31] ? __mutex_lock+0x5b6/0x1360 [ 335.480811][ T31] ? rfkill_register+0x37/0x8e0 [ 335.485715][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 335.490863][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 335.496187][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 335.501680][ T31] ? device_initialize+0x24b/0x440 [ 335.506862][ T31] rfkill_register+0x37/0x8e0 [ 335.511648][ T31] hci_register_dev+0x3f5/0x890 [ 335.516543][ T31] vhci_create_device+0x39c/0x6e0 [ 335.521917][ T31] vhci_write+0x3ce/0x4a0 [ 335.526290][ T31] vfs_write+0x5c9/0xb30 [ 335.530980][ T31] ? __pfx_vhci_write+0x10/0x10 [ 335.535949][ T31] ? __pfx_vfs_write+0x10/0x10 [ 335.540934][ T31] ? count_memcg_event_mm+0x21/0x260 [ 335.546288][ T31] ksys_write+0x145/0x250 [ 335.550772][ T31] ? __pfx_ksys_write+0x10/0x10 [ 335.556222][ T31] ? do_syscall_64+0xbe/0x3b0 [ 335.561033][ T31] do_syscall_64+0xfa/0x3b0 [ 335.565591][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.571111][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.577297][ T31] ? clear_bhb_loop+0x60/0xb0 [ 335.582900][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.588898][ T31] RIP: 0033:0x7fc80a58d660 [ 335.593341][ T31] RSP: 002b:00007ffdbea233f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 335.601840][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc80a58d660 [ 335.610008][ T31] RDX: 0000000000000002 RSI: 00007ffdbea2340a RDI: 00000000000000ca [ 335.618565][ T31] RBP: 00007fc80a7b67b8 R08: 0000000000000000 R09: 00007fc80b2ed6c0 [ 335.626589][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 335.634920][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 335.643024][ T31] [ 335.646073][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 335.655171][ T31] INFO: task syz-executor:9020 blocked for more than 146 seconds. [ 335.663044][ T31] Not tainted syzkaller #0 [ 335.668087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.676806][ T31] task:syz-executor state:D stack:28040 pid:9020 tgid:9020 ppid:1 task_flags:0x400040 flags:0x00004000 [ 335.688836][ T31] Call Trace: [ 335.692175][ T31] [ 335.695117][ T31] __schedule+0x1798/0x4cc0 [ 335.699894][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.704810][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.709745][ T31] ? __pfx___schedule+0x10/0x10 [ 335.714648][ T31] ? schedule+0x91/0x360 [ 335.718976][ T31] schedule+0x165/0x360 [ 335.723181][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.728715][ T31] __mutex_lock+0x7e6/0x1360 [ 335.733362][ T31] ? __mutex_lock+0x5b6/0x1360 [ 335.738419][ T31] ? rfkill_register+0x37/0x8e0 [ 335.743316][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 335.748426][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 335.753789][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 335.759293][ T31] ? device_initialize+0x24b/0x440 [ 335.764530][ T31] rfkill_register+0x37/0x8e0 [ 335.769394][ T31] hci_register_dev+0x3f5/0x890 [ 335.774301][ T31] vhci_create_device+0x39c/0x6e0 [ 335.779420][ T31] vhci_write+0x3ce/0x4a0 [ 335.783789][ T31] vfs_write+0x5c9/0xb30 [ 335.788116][ T31] ? __pfx_vhci_write+0x10/0x10 [ 335.793007][ T31] ? __pfx_vfs_write+0x10/0x10 [ 335.797875][ T31] ? count_memcg_event_mm+0x21/0x260 [ 335.803219][ T31] ksys_write+0x145/0x250 [ 335.807648][ T31] ? __pfx_ksys_write+0x10/0x10 [ 335.812538][ T31] ? do_syscall_64+0xbe/0x3b0 [ 335.817355][ T31] do_syscall_64+0xfa/0x3b0 [ 335.821923][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.827311][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.833414][ T31] ? clear_bhb_loop+0x60/0xb0 [ 335.838211][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.844136][ T31] RIP: 0033:0x7f52b198d660 [ 335.848850][ T31] RSP: 002b:00007ffd4c0b8e78 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 335.857384][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f52b198d660 [ 335.865384][ T31] RDX: 0000000000000002 RSI: 00007ffd4c0b8e8a RDI: 00000000000000ca [ 335.873457][ T31] RBP: 00007f52b1bb67b8 R08: 0000000000000000 R09: 00007f52b26ed6c0 [ 335.881555][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 335.889716][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 335.897789][ T31] [ 335.900835][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 335.909963][ T31] [ 335.909963][ T31] Showing all locks held in the system: [ 335.917738][ T31] 1 lock held by khungtaskd/31: [ 335.922612][ T31] #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 335.932727][ T31] 1 lock held by klogd/5223: [ 335.938216][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 335.948358][ T31] 2 locks held by dhcpcd/5528: [ 335.953151][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 335.961498][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 335.971114][ T31] 2 locks held by getty/5624: [ 335.975821][ T31] #0: ffff888033afe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 335.985794][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 335.996038][ T31] 3 locks held by kworker/1:6/5941: [ 336.001751][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 336.012857][ T31] #1: ffffc900046e7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 336.026830][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 336.038636][ T31] 1 lock held by udevd/6225: [ 336.043265][ T31] #0: ffff888024f0e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 336.052891][ T31] 2 locks held by kworker/u8:24/6327: [ 336.058404][ T31] 3 locks held by kworker/u8:25/6329: [ 336.063801][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 336.074157][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 336.083262][ T31] #2: ffff8880b8625918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 336.092418][ T31] 2 locks held by syz.2.803/8857: [ 336.098033][ T31] #0: ffff888030611100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 336.107933][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 336.118206][ T31] 2 locks held by syz.4.805/8869: [ 336.123342][ T31] #0: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 336.133845][ T31] #1: ffff888030611100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 336.143783][ T31] 3 locks held by syz.1.818/8941: [ 336.148910][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 336.157745][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 336.166773][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.176814][ T31] 2 locks held by syz.0.819/8951: [ 336.182073][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 336.190731][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 336.199968][ T31] 2 locks held by syz.3.823/8969: [ 336.205013][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 336.213287][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 336.222949][ T31] 2 locks held by syz-executor/9013: [ 336.228382][ T31] #0: ffff88807eb2e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.238637][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.249070][ T31] 2 locks held by syz-executor/9014: [ 336.254384][ T31] #0: ffff88807d5d1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.264591][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.274645][ T31] 2 locks held by syz-executor/9018: [ 336.280392][ T31] #0: ffff888056463918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.290560][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.300719][ T31] 2 locks held by syz-executor/9019: [ 336.306039][ T31] #0: ffff88802e81a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.316456][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.326632][ T31] 2 locks held by syz-executor/9020: [ 336.331997][ T31] #0: ffff88802e819918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.342821][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.352909][ T31] 2 locks held by syz-executor/9023: [ 336.358345][ T31] #0: ffff88802ac11918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.368782][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.378906][ T31] 2 locks held by syz-executor/9024: [ 336.384211][ T31] #0: ffff88802ac14118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.394322][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.404626][ T31] 2 locks held by syz-executor/9028: [ 336.410131][ T31] #0: ffff88807b852118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.420410][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.430809][ T31] 2 locks held by syz-executor/9029: [ 336.436126][ T31] #0: ffff888057809118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.446255][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.456294][ T31] 2 locks held by syz-executor/9030: [ 336.462023][ T31] #0: ffff88805780a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.472232][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.482316][ T31] 2 locks held by syz-executor/9033: [ 336.488044][ T31] #0: ffff888030e91118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.498237][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.508315][ T31] 2 locks held by syz-executor/9034: [ 336.513738][ T31] #0: ffff88807c1af118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.524212][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.534322][ T31] 2 locks held by syz-executor/9037: [ 336.539734][ T31] #0: ffff888023f55918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.550196][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.560269][ T31] 2 locks held by syz-executor/9038: [ 336.565579][ T31] #0: ffff888022b63918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.575719][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.586645][ T31] 2 locks held by syz-executor/9040: [ 336.592433][ T31] #0: ffff8880780a2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 336.602624][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 336.612998][ T31] [ 336.615362][ T31] ============================================= [ 336.615362][ T31] [ 336.623900][ T31] NMI backtrace for cpu 1 [ 336.623918][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 336.623939][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.623951][ T31] Call Trace: [ 336.623960][ T31] [ 336.623968][ T31] dump_stack_lvl+0x189/0x250 [ 336.624002][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.624029][ T31] ? __pfx__printk+0x10/0x10 [ 336.624075][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 336.624104][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.624133][ T31] ? __pfx__printk+0x10/0x10 [ 336.624168][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.624207][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 336.624236][ T31] watchdog+0xf93/0xfe0 [ 336.624272][ T31] ? watchdog+0x1de/0xfe0 [ 336.624308][ T31] kthread+0x711/0x8a0 [ 336.624340][ T31] ? __pfx_watchdog+0x10/0x10 [ 336.624369][ T31] ? __pfx_kthread+0x10/0x10 [ 336.624398][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.624425][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.624450][ T31] ? __pfx_kthread+0x10/0x10 [ 336.624477][ T31] ret_from_fork+0x3f9/0x770 [ 336.624502][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 336.624532][ T31] ? __switch_to_asm+0x39/0x70 [ 336.624560][ T31] ? __switch_to_asm+0x33/0x70 [ 336.624586][ T31] ? __pfx_kthread+0x10/0x10 [ 336.624614][ T31] ret_from_fork_asm+0x1a/0x30 [ 336.624658][ T31] [ 336.624666][ T31] Sending NMI from CPU 1 to CPUs 0: [ 336.772136][ C0] NMI backtrace for cpu 0 [ 336.772154][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 336.772174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.772185][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 336.772215][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c6 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 336.772231][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 336.772248][ C0] RAX: 1da3a5f71a5a7f00 RBX: ffffffff819683a8 RCX: 1da3a5f71a5a7f00 [ 336.772262][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b6a5a RDI: ffffffff8be33300 [ 336.772274][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 336.772287][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa37e30 [ 336.772301][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 336.772313][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 336.772327][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.772339][ C0] CR2: 00007f65b9240bd0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 336.772355][ C0] Call Trace: [ 336.772362][ C0] [ 336.772368][ C0] default_idle+0x13/0x20 [ 336.772384][ C0] default_idle_call+0x74/0xb0 [ 336.772400][ C0] do_idle+0x1e8/0x510 [ 336.772417][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 336.772440][ C0] ? __pfx_do_idle+0x10/0x10 [ 336.772460][ C0] ? do_idle+0x4ed/0x510 [ 336.772479][ C0] cpu_startup_entry+0x44/0x60 [ 336.772495][ C0] rest_init+0x2de/0x300 [ 336.772513][ C0] start_kernel+0x3a9/0x410 [ 336.772534][ C0] x86_64_start_reservations+0x24/0x30 [ 336.772557][ C0] x86_64_start_kernel+0x143/0x1c0 [ 336.772581][ C0] common_startup_64+0x13e/0x147 [ 336.772614][ C0] [ 336.773199][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 336.964471][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 336.973594][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.983663][ T31] Call Trace: [ 336.986956][ T31] [ 336.989901][ T31] dump_stack_lvl+0x99/0x250 [ 336.994510][ T31] ? __asan_memcpy+0x40/0x70 [ 336.999109][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.004318][ T31] ? __pfx__printk+0x10/0x10 [ 337.008934][ T31] vpanic+0x281/0x750 [ 337.012931][ T31] ? __pfx_vpanic+0x10/0x10 [ 337.017443][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 337.023000][ T31] ? preempt_schedule+0xae/0xc0 [ 337.027866][ T31] ? preempt_schedule_common+0x83/0xd0 [ 337.033345][ T31] panic+0xb9/0xc0 [ 337.037078][ T31] ? __pfx_panic+0x10/0x10 [ 337.041506][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 337.046899][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 337.053067][ T31] watchdog+0xfd2/0xfe0 [ 337.057245][ T31] ? watchdog+0x1de/0xfe0 [ 337.061599][ T31] kthread+0x711/0x8a0 [ 337.065683][ T31] ? __pfx_watchdog+0x10/0x10 [ 337.070380][ T31] ? __pfx_kthread+0x10/0x10 [ 337.074985][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.080196][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.085414][ T31] ? __pfx_kthread+0x10/0x10 [ 337.090025][ T31] ret_from_fork+0x3f9/0x770 [ 337.094629][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 337.099757][ T31] ? __switch_to_asm+0x39/0x70 [ 337.104540][ T31] ? __switch_to_asm+0x33/0x70 [ 337.109317][ T31] ? __pfx_kthread+0x10/0x10 [ 337.113950][ T31] ret_from_fork_asm+0x1a/0x30 [ 337.118776][ T31] [ 337.122209][ T31] Kernel Offset: disabled [ 337.126546][ T31] Rebooting in 86400 seconds..