last executing test programs: 18.61840503s ago: executing program 3 (id=2076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0x200, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f8ef3a87de"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x4040840) 18.44280422s ago: executing program 0 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002e00)=ANY=[@ANYBLOB="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"], 0x994}], 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4012, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r4], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) 18.372640906s ago: executing program 1 (id=2080): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1}, 0x10}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x48}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r11 = accept4(r2, 0x0, 0x0, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) vmsplice(r2, &(0x7f0000000a00)=[{&(0x7f0000000680)="d63d03e63c8d409ad24eeef97808a62d44add4b8abde1cd4de15992c25a493be16edcaba9588d42864b6061fe81db3d4ef12a4ccabc1e4af0d6fbb9bcd41dc140ac281d444afabc7bec5dd6481385632902ed405b38100d2c0cd5f30809f9cfce28d50fc5119eeb468d8eeb57f8712d9c7d363c17e0e3351d71cdcaff80c300f6a2ec55f81d23be2eceaa5e6cab890611bac679a256bf54baf4e46b8c6e2f0fe6a47270c6765af070510d98f21b88ab6e11e80a79b7a971e41c24d97ea0a79249fa0c2db811539f25ce425f24e30486876dc1e8756bf3c39a3e891de1617d35b8334e35df1905ac04d8d44c655", 0xed}, {&(0x7f0000000340)="57767649d6cb807435089e6675b732bc7ac4de6d256de4ff34c94746a6f43cf061a2672dfb0d367f8de4409a45af5128dc040f1f39fdf82bdcffa00387100d87853992e567f8af43a4936a731988606852544be79bbe39bd39018be5b38f2ca90d4d4fca17434533036b2681e574d57b7893f08ef3e78d88ca4655e8cb5fe9dfdba79c41ab336c8c973027ef27c4e57fd0cc75c349555df8fec263582c914742a3a5b659f195d27dabcb4c2a7bb462a0e812a164f131", 0xb6}, {&(0x7f0000000780)="8be107308e077d8bd2eb4e2fd80072d7768c757bce05b45fdc95c610b4688cee823022c2a7314d74ee4933b15c9df2e35482c40b77e8db9b30d1cece86ee2144e47e3e797ca047b5b820b3acc45c3847def2cbecb0703fc754945930c03cf86d996d83b58371012c15238ac6c7f082124f0309f07efb319f1c98fafd0c3c0cac31d7ee8fca141fec41ef7449f9e2f2b31447be229573b6e6eb7a3f869f15038ad00808c49fb834f79cefe44ac544e6a4afe49e8f167c02e711338c5757de1782f1649e8a8ba11a284c4b9b6c0fbc6c9d64737a", 0xd3}, {&(0x7f0000000080)="ffcda66131ca7f5cd1429d500f0ddb99d592759920852d046b68b95e31", 0x1d}, {&(0x7f0000000880)="5104247afa089c5c90428830cd62d1e6f3cfbc1755e6f2044cac33bc62a7cc8aea0bdbcf3c681d8d694bc62c0cfd8da8cc88c39d14d5430640a8ca32282ef2b69b7b394ecb05ed3f8add893a4c7d9bd9038702cbf63ac3d29d708b9d44206a7a0a8fdcc587185bcc6149206e14847666515d48fb2fd4c8df7ebbba30588d2ea710a2eef1a49fffba4d673741523938e6710ebea4efba3a46dff43d10ee0663259854cf9ee1", 0xa5}, {&(0x7f0000000940)="2f80f7db9cef3d4ccb2c5d35510b06134b0c29377dc0f65b32f9d60915512fc579b0ebf58b92cc07dea44e3e2e998ed66bfcc28baa4edcb47e1e386b8498643b996b3d67fb8a9ae6a3395f8bc82a7ac20064ad1169986d44eb29dd5c34dfbeeb3e6cf39f11c0c6b3b39e54ee913e4ed05ffc690a1642374c5e86bf4a0a3c747acf93011b88c291ab6691a71d7b70d5aa249972b554d0e30c7999fd87e66a323c04030c235fba7635594132933f60d86aeb562ab3b600df3cc1", 0xb9}, {&(0x7f00000004c0)="bd28c6a2a6295292cdd228e705dd7a2bf46019cea3d8d696e9e2892bc52df30e0be43d54cd00ebdcf3ffbe7c1bffec22a2013df29da1e9fb4dc9211381a2e08c7275a85b8bc4727c8a6aa7abda5175824aa561dc000e72c3c74d5f7d141fc0b7651148ff80e47a", 0x67}, {&(0x7f0000000100)}], 0x8, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x42}}, 0x14}, 0x1, 0x0, 0x0, 0x20000805}, 0x4008805) recvmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) 18.135751248s ago: executing program 3 (id=2082): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000001c0)) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x3b) close(r0) bind$can_raw(r0, &(0x7f0000000180), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = epoll_create1(0x0) r4 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x8800000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000002c0)={0x8002015}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000f00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg$can_raw(r0, &(0x7f00000018c0)={0xffffffffffffffff, 0x0, &(0x7f0000001800)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/9, 0x9}, {&(0x7f0000001640)=""/166, 0xa6}, {&(0x7f0000001700)=""/101, 0x65}, {&(0x7f0000001780)=""/122, 0x7a}], 0xa}, 0x101) 18.064054104s ago: executing program 1 (id=2083): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x23}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x90) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40440c5) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x891) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000901) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x17, {0x0, 0x6, @l2={'ib', 0x3a, 'lo\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000800}, 0x80) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f00000006c0)={0xa, 0x4e21, 0x8, @private2, 0x4}, 0x1c) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r10, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xa}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) (rerun: 32) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r11, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x81}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24000000) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000009c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r12, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x18, 0x140d, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x1) (async, rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x17, 0x4, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40800) socketpair(0x2c, 0x4, 0x57, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), r7) sendmsg$L2TP_CMD_NOOP(r14, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r15, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r13, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r16, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, r16, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x40895) 17.925080142s ago: executing program 3 (id=2085): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x81}, &(0x7f0000000100)=0x8) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x1b0, 0x1, 0x1, 0x105, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffffffff}, @CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4d3f2b833f561861}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}]}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000006c0)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={r1, 0xdb, "dbb09313d40352b48d7df485d3ac2bda3df12dda58242b25232146f1f71fbd3b80c5b6050b5266590fc5fd30c0fb4ba5066b7887ec7dda1b2a5df1c85fc55e4ff625ce0ad370b1accc1d9cb16b845e0a354d607a7e60b870867b0dd2acf0e0d4b554dfa91fcb20a830b302e4220bf44bdfba1854817deeaa1b41917b567e01851eebb3c50735cccb9ad571e5294742649e3a151a715635565eac22042999561701251f340cc91eac7a6abd74efb54f20748066541686d7e2aa5120b73c8afdb482efb8e6b4c904a62ece6a9ae34b3b1a03253b41ebe1a2f59f79d5"}, &(0x7f0000000140)=0xe3) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000280)={r4, 0x0, 0x20, 0x0, 0x9}, &(0x7f00000012c0)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000240)={r1, 0x2}, &(0x7f0000000680)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=r6, @ANYBLOB="6b8a00003015010008001d2d331ca54cfac894e39379af007f4000002ecbd1971fa3c498dd011b30a52fcb77468ff7dcb08b4d9d73e87f6eea71d3444f84d2a70dbbb2e5dd415fa319faa59fb08b2f6175fd387f99f356ec308b4485a70bdf7377e5ac2cab18704f03775f9d65f873618d7c6bfd52517bd0d567ab23226d682ac7a528df32ad67c705003a6add0ca9611fb2f0218ee4c3ba0417606329a7b590eb5e897afd16db772f9047bf87ca85"], 0x28}}, 0x0) 17.89328808s ago: executing program 1 (id=2087): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x700}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008011}, 0x40) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000340)={0x34, r7, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x4000000) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x80000000, 0x5, 0x2, 0xabc, 0x3ff, 0x3, 0x1, 0x1, 0x1, 0x0, 0xfffffff9, 0x80000001, 0x8, 0x56, 0xa9, 0x6, 0x1, 0x3, 0x6, 0x5, 0x800}}) syz_emit_ethernet(0xd6, &(0x7f00000001c0)={@link_local={0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x28, 0x4, 0x0, 0x3f, 0xc8, 0x65, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x10, 0x25, 0x0, 0x2, [0x93, 0x2, 0x1]}, @timestamp_prespec={0x44, 0x24, 0xfb, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x11}, {@multicast1, 0x6a7a}, {@loopback, 0x1}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x4c, 0x23, 0x1, 0x0, [{@multicast1, 0x80000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6574}, {@broadcast, 0x6}, {@remote, 0x1}, {@multicast2, 0xfffff50d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4f1}, {@loopback, 0x3}, {@multicast1, 0x33e8}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0x0, [{@broadcast, 0x200}]}]}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}]}}, "001863718e9bf703"}}}}}, 0x0) 17.775751875s ago: executing program 2 (id=2088): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1000, 0x800, 0x80000000, 0x3}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xec, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffff801}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x440}]}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x402}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x11}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb22}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x824}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4a3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x4}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8a6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb46d}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}]}, @CTA_STATUS={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000004}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) 17.589034295s ago: executing program 2 (id=2089): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1ff, 0x1, 0xd8, 0xf74}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x30, r5, 0x5, 0x3ffd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="fa"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0a, 0xfac0c]}]]}, 0x30}}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xc3d, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x1, 0x6, 0x431, 0x7, 0x6, 0x40, 0x10001, 0xfff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r10, &(0x7f0000002000)=[{{&(0x7f0000000cc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000000000000070000004404c3410000000038d4eadb8f54f768ae714b6029be7e0ff6d1cdce80ab6a"], 0x18}}], 0x1, 0x20000000) r11 = socket$inet_smc(0x2b, 0x1, 0x0) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x3, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x20, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd4}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@ldst={0x1, 0x0, 0x2, 0x5, 0x6, 0x100, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x1000, &(0x7f0000002040)=""/4096, 0x41000, 0x41, '\x00', r15, 0x0, r16, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x40003, 0x6, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x1, 0x5, 0xf, 0x4}, {0x0, 0x5, 0xe, 0x5}, {0x4, 0x2, 0x9, 0xc}, {0x0, 0x24, 0x4, 0x1}, {0x4, 0x4, 0xf, 0xb}], 0x10, 0x7f}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000000c0)=0x1, &(0x7f0000000140)=0x2) 17.539230773s ago: executing program 3 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x6e20, @local}}}, 0x84) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001600)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000001640)=r7, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r0, @ANYRES32=r1, @ANYRESOCT=r0], 0x24}}, 0x4) 17.477698757s ago: executing program 1 (id=2091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x2}, 0x1c) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000440), &(0x7f00000004c0)=0x4) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000680)="bef333f6de4f954d5cae570bd57ab174325afcd341197f9c6eecdd6b008b246dc9f0dec998263e41519e3efd1146e36524", 0x31, 0x4, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x40, 0x2fc, 0x6, 0x50, r9, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0xd}, 0x50) (async) sendmsg$nl_route_sched(r8, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20000800) (async) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600) syz_emit_ethernet(0x4e, &(0x7f0000000b00)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000940)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r10, 0x8b20, &(0x7f0000000000)={'virt_wifi0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.401795851s ago: executing program 0 (id=2092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) socket$inet6(0xa, 0x1, 0xa) 17.230258338s ago: executing program 3 (id=2093): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff8}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x50}}, 0x0) r3 = socket(0xb, 0x4, 0x9) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000007c0)="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", 0x16f) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}}, 0x40008095) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xd1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r6, 0x5, 0x2, 0x2}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154601e9ff000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r10], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 17.214679907s ago: executing program 1 (id=2094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001801000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb7020000080000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x1, 0x7, {{0x22, 0x4, 0x1, 0x5, 0x88, 0x67, 0x0, 0x70, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0x28, 0x0, 0x3, [0x81, 0x6]}, @rr={0x7, 0x1f, 0xc7, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @local, @dev={0xac, 0x14, 0x14, 0x17}, @remote, @private=0xa010102]}, @rr={0x7, 0xb, 0xfb, [@broadcast, @local]}, @timestamp_prespec={0x44, 0x1c, 0xf1, 0x3, 0x5, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xf}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x1f, 0x8f, [@multicast2, @remote, @rand_addr=0x64010100, @private=0xa010100, @private=0x418, @private=0xa010102, @private=0xa010101]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x20, 0x7, 0x5, 0x70, {{0xe, 0x4, 0x3, 0x13, 0x38, 0x64, 0x0, 0x7, 0x2f, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x8, 0x5b, 0x0, 0xc, [0x1]}, @timestamp={0x44, 0x1c, 0x8e, 0x0, 0x9, [0x2, 0x3, 0x7fffffff, 0x5, 0xa3, 0x3]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x6772fe89, 0x9, {{0x29, 0x4, 0x3, 0x37, 0xa4, 0x66, 0x0, 0x1, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x24}, {[@ssrr={0x89, 0x7, 0x18, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x2b, 0x0, 0x8, [0x81]}, @timestamp_prespec={0x44, 0x1c, 0x3b, 0x3, 0x5, [{@private=0xa010102, 0xe}, {@multicast1, 0x2}, {@multicast2, 0x6}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x5f, 0xffffffffffffffff, [{0x5, 0x8, "77f58d7f347e"}, {0x2, 0xb, "98d555c57e500368d5"}, {0x2, 0x3, '.'}, {0x5, 0x6, "03e4cb7d"}, {0x2, 0x4, "9d17"}, {0x1, 0xf, "d6452b1be49ce70fe5bb294b5e"}, {0x6, 0x5, "fbadef"}, {0x1, 0xc, "1d30a1953524017ef4d3"}, {0x7, 0xd, "82f0e904fa96a3086f2c8d"}, {0x2, 0xc, "61545c95caac42b6e7b8"}]}]}}}}}) (async) r5 = socket(0x2b, 0x803, 0x20000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async) socket$inet(0x2, 0x2, 0xf) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000500)={@multicast2, @broadcast, 0x0}, &(0x7f0000000540)=0xc) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c00000068000100030000000000008000000000000000000c000200010000000600000008000500", @ANYRES32=0x0, @ANYBLOB="3bd592b18bea6c783efb450238ea9889b40953683064ab14fffd38ae7ca7382abec1e6aa9eb738b71ffe8a6ae6358618692052c22e6b586632f477b61695f04359b7bfa8ebe78f7306a2456b388aa939a62dd924d585d84b69f70512809a41cc91de0730b3016b834b19f801d9862633d74bb9bf8e2df072e431044d259f6464b54d4551edeedb066a30283e4d16d5e2414de7c01346861a02be7a9025aceffb7904d3caa59336d63b372f92a5c4a301e832b7306d9c5a6bdb5cdf6816d68af1d4e9bc58a71b60feab3bf81e4586f0988fe884f5b887755f635ca4a010ba279083293fc897372babc2f6cda3ddb3b9bda4"], 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x4, 0x3, {{0x10, 0x4, 0x1, 0x2, 0x40, 0x65, 0x0, 0x3a, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@rr={0x7, 0xb, 0xc, [@private=0xa010101, @private=0xa010101]}, @noop, @timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x0, [{@multicast2, 0x3}, {@remote}]}, @lsrr={0x83, 0xb, 0x44, [@loopback, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000009c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="020a2abd7000fcdbdf250b0000005000018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r2, @ANYBLOB="080003000300000008000100", @ANYRES32=r3, @ANYBLOB="08000100facaecaa9a9ee1b312a067576b9feb5942c96a7020eca8b1921654b1deef318319b009e904b9c0a227111f761b00f6206229e710ada5e8c09c2e9231262dea3ca8c1efe843398c9f9d640ff002dac0ca1a355dadd18bbdcc350ab59995d31b72a40f556d98d641519741064891bcc8f1718181b575b1147e1f65b657ad49b65194c75189688a1e9e98109d87e8fbce52ceed6e04448a090cdd3db87009c33f5fbc8fd66ae2290a", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c0001800800030001000000500001801400020076657468305f746f5f7465616d0000001400020065727370616e3000000000000000000008000300010000001400020067656e6576653000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="7800018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000300a4df6225080003000200000008000100", @ANYRES32=r14, @ANYBLOB="080003000100000014000200766c616e30000000000000000000000014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776730000000000000000000000000000c0001800800030001000000"], 0x150}, 0x1, 0x0, 0x0, 0x8090}, 0x4000050) 17.168987824s ago: executing program 0 (id=2095): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x4c}, 0x1, 0xffffffff00000003}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @loopback}, &(0x7f0000000100)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffdeb, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x20000854) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x9dd, 0xfffffffb, {{0x12, 0x4, 0x1, 0x4, 0x48, 0x64, 0x0, 0x12, 0x4, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x5b, [@broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010101, @private=0xa010100, @remote, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010020}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x114, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8800}, 0x40) 17.060666403s ago: executing program 1 (id=2096): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010058726964676500001800028faf1db99259bc4148a480185412d3e19f2e176664c2389fb0660af9bae547b94cc4a0070c3a3d8a25890f6b64187f16658bbdeb10842dca"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1f59}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWTABLE={0xb8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x78, 0x6, "3475357ffdc93350aa79a2c3df2f3ede90e0df498fa6b579c8fd5b1a8b5929a87658b42f6ea5cec0447630734385de58c65148a91956a8bdeda9c8c39e0d5278f1aad30c0c0db9e9b882755fcfa8a554278e7ad656628254452145b09b68eba6f4d03915662f753f97d363f822a373dc754ff578"}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) socket(0x3, 0x4, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x24004044) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r10, &(0x7f00000000c0)={0x27, r9, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r15, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x30, r6, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'reno\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4015) 17.042701649s ago: executing program 4 (id=2097): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socketpair(0x1, 0x6, 0x9076, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40804}, 0x28040050) close(r1) 16.87719418s ago: executing program 4 (id=2098): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d3000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 16.875870375s ago: executing program 3 (id=2099): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0xcec, 0x23, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x7fe, 0x0, 0x2000000000903, 0x1}, 0x20) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}}}, 0x108) 16.78955281s ago: executing program 0 (id=2100): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0x89a8, @remote, 0x2}, 0x4f, 0x0}, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 16.724055538s ago: executing program 4 (id=2101): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007100000000000000000008"], 0x0}, 0x90) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022004106"], 0x1c}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x18, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x4, @dev}, 0x10) sendmmsg$inet(r3, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="673cf6f999e4", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000640)="c85b0a", 0x3}], 0x1}}], 0x2, 0x40080) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000780)={@local, 0x0}, &(0x7f0000000840)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x4, 0xc, 0x0, 0x3, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8, 0x7, 0x10, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xfc, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x2}, @fwd={0xb}]}, {0x0, [0x5f, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000240)=""/253, 0x36, 0xfd, 0x1, 0x4}, 0x28) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "1bf859", 0x0, 0x11, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x3c, 0x0, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x3b, 0x0, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, @private0, @mcast1, @mcast1, @mcast2, @mcast2]}, @fragment={0xff, 0x0, 0x2, 0x1, 0x0, 0x8, 0x65}, @srh={0x1, 0x0, 0x4, 0x0, 0x9, 0x50, 0xe15b, [@ipv4={'\x00', '\xff\xff', @local}, @private0, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x6c, 0x0, 0x4, 0x0, 0x4, 0x50, 0x4, [@mcast1, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev={0xfe, 0x80, '\x00', 0x39}]}], {0x4e20, 0x4e21, 0x0, 0x0, @opaque="dbf85b271810ca6d183b4e55a639f3eeae15e3ba2da9709d55c26f072588d5c7090b72c34ae01bf284b08f0048089df2701acdbcd20d452c1da8c6752d8d06d7d098af25f7f6404c24ea27d49107971f177c7e9895245578ddc5d2a3b8d950a4e1f37c7d2c857d0e3d9e97"}}}}}}, 0x0) splice(r9, 0x0, r10, &(0x7f00000002c0), 0x6, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_timeval(r11, 0x1, 0x42, &(0x7f0000000340)={0x0, 0x2710}, 0x10) recvmsg(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) 16.665091336s ago: executing program 2 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000828bd7000fedbdf250a00000008000200010000000800030006000000040001800800040008000000050005000b00000051e66bf35f6d1af586f2ad258f9be37a40091094283fc063c8504f40e03a128c208b700eba8a10ace9"], 0x38}, 0x1, 0x0, 0x0, 0x4000881}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYRES8=r3], 0x3c}}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) bind$packet(r1, &(0x7f0000000240)={0x11, 0x7, r3, 0x1, 0x68}, 0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 16.547506199s ago: executing program 2 (id=2103): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 16.469271473s ago: executing program 2 (id=2104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x2}}]}]}]}, 0x48}}, 0x24040800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x18}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 16.277307398s ago: executing program 2 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 16.064917318s ago: executing program 4 (id=2106): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x101, 0x7a, {{0x25, 0x4, 0x1, 0x7, 0x94, 0x66, 0x0, 0x4, 0x2f, 0x0, @empty, @loopback, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0xd9, 0x1, 0x6, [{@local}, {@multicast2}, {@loopback, 0x9}, {@empty, 0x8}, {@remote, 0x27}, {@loopback, 0xd70}]}, @noop, @end, @cipso={0x86, 0x43, 0x3, [{0x1, 0x12, "9ebcf2208d1698208f2b098712e509f7"}, {0x0, 0x7, "fee9f742a5"}, {0x7, 0x6, "e62edc4c"}, {0x6, 0x2}, {0x6, 0x3, "af"}, {0x6, 0x7, "ce80131a2b"}, {0x2, 0x12, "4b8514625e7896f8c8540e339ffa29fd"}]}]}}}}}) connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0) 15.872815039s ago: executing program 0 (id=2107): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.745038347s ago: executing program 0 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffee9, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x3, 0x4}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x0, 0x5, {0x1, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r10], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000280)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x60, 0x0, 0x405, 0x70bd29, 0x25ffdc01, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000411}, 0x44084) 15.599336726s ago: executing program 4 (id=2109): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}]}, 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 15.540786247s ago: executing program 4 (id=2110): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x2, {0x2, 0x0, 0x4}, 0xff}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000480)={0x1d, r4, 0x1, {0x2, 0xff, 0x1}, 0xfd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x8000000, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 1.181358962s ago: executing program 32 (id=2096): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010058726964676500001800028faf1db99259bc4148a480185412d3e19f2e176664c2389fb0660af9bae547b94cc4a0070c3a3d8a25890f6b64187f16658bbdeb10842dca"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1f59}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWTABLE={0xb8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x78, 0x6, "3475357ffdc93350aa79a2c3df2f3ede90e0df498fa6b579c8fd5b1a8b5929a87658b42f6ea5cec0447630734385de58c65148a91956a8bdeda9c8c39e0d5278f1aad30c0c0db9e9b882755fcfa8a554278e7ad656628254452145b09b68eba6f4d03915662f753f97d363f822a373dc754ff578"}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) socket(0x3, 0x4, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x24004044) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r10, &(0x7f00000000c0)={0x27, r9, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r15, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x30, r6, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'reno\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4015) 1.136111014s ago: executing program 33 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.067523671s ago: executing program 34 (id=2099): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0xcec, 0x23, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x7fe, 0x0, 0x2000000000903, 0x1}, 0x20) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}}}, 0x108) 42.940305ms ago: executing program 35 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffee9, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x3, 0x4}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x0, 0x5, {0x1, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r10], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000280)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x60, 0x0, 0x405, 0x70bd29, 0x25ffdc01, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000411}, 0x44084) 0s ago: executing program 36 (id=2110): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x2, {0x2, 0x0, 0x4}, 0xff}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000480)={0x1d, r4, 0x1, {0x2, 0xff, 0x1}, 0xfd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x8000000, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) kernel console output (not intermixed with test programs): 64_sys_setsockopt+0x13f/0x1b0 [ 107.291836][ T6422] ? do_syscall_64+0xfa/0x3b0 [ 107.291857][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.291880][ T6422] __vmalloc_node_range_noprof+0x125/0x12f0 [ 107.291927][ T6422] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.291956][ T6422] ? __kasan_kmalloc+0x93/0xb0 [ 107.291979][ T6422] vmalloc_user_noprof+0xad/0xf0 [ 107.292002][ T6422] ? xskq_create+0xbf/0x170 [ 107.292023][ T6422] xskq_create+0xbf/0x170 [ 107.292046][ T6422] xsk_init_queue+0xb0/0x110 [ 107.292074][ T6422] xsk_setsockopt+0x4dc/0x8d0 [ 107.292096][ T6422] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.292115][ T6422] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.292141][ T6422] ? aa_sock_opt_perm+0xff/0x1b0 [ 107.292158][ T6422] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 107.292175][ T6422] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.292195][ T6422] do_sock_setsockopt+0x179/0x1b0 [ 107.292223][ T6422] __x64_sys_setsockopt+0x13f/0x1b0 [ 107.292242][ T6422] do_syscall_64+0xfa/0x3b0 [ 107.292264][ T6422] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.292284][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.292299][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 107.292319][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.292335][ T6422] RIP: 0033:0x7fb5edb8ebe9 [ 107.292356][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.292369][ T6422] RSP: 002b:00007fb5ee9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.292386][ T6422] RAX: ffffffffffffffda RBX: 00007fb5eddb5fa0 RCX: 00007fb5edb8ebe9 [ 107.292397][ T6422] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 107.292406][ T6422] RBP: 00007fb5edc11e19 R08: 0000000000000004 R09: 0000000000000000 [ 107.292415][ T6422] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.292426][ T6422] R13: 00007fb5eddb6038 R14: 00007fb5eddb5fa0 R15: 00007ffc85c8dac8 [ 107.292463][ T6422] [ 107.646464][ T6422] Mem-Info: [ 107.649768][ T6422] active_anon:5621 inactive_anon:0 isolated_anon:0 [ 107.649768][ T6422] active_file:2564 inactive_file:39829 isolated_file:0 [ 107.649768][ T6422] unevictable:768 dirty:381 writeback:0 [ 107.649768][ T6422] slab_reclaimable:10351 slab_unreclaimable:95986 [ 107.649768][ T6422] mapped:30099 shmem:1355 pagetables:1213 [ 107.649768][ T6422] sec_pagetables:0 bounce:0 [ 107.649768][ T6422] kernel_misc_reclaimable:0 [ 107.649768][ T6422] free:1331800 free_pcp:16673 free_cma:0 [ 107.654512][ T6426] netlink: 48 bytes leftover after parsing attributes in process `syz.1.132'. [ 107.697429][ T6422] Node 0 active_anon:22484kB inactive_anon:0kB active_file:10256kB inactive_file:159112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120396kB dirty:1520kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11972kB pagetables:4704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.739316][ T6422] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.769289][ T6422] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.769375][ T5875] tipc: Node number set to 4269801492 [ 107.799523][ T6422] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 107.810496][ T6422] Node 0 DMA32 free:1421036kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22436kB inactive_anon:0kB active_file:10256kB inactive_file:157536kB unevictable:1536kB writepending:1520kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:47480kB local_pcp:26180kB free_cma:0kB [ 107.843129][ T6422] lowmem_reserve[]: 0 0 1 1 1 [ 107.847935][ T6422] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 107.876982][ T6422] lowmem_reserve[]: 0 0 0 0 0 [ 107.881849][ T6422] Node 1 Normal free:3890536kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19168kB local_pcp:7328kB free_cma:0kB [ 107.998993][ T6422] lowmem_reserve[]: 0 0 0 0 0 [ 108.016929][ T6422] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.052107][ T6432] warning: `syz.4.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.061029][ T6422] Node 0 DMA32: 1557*4kB (UME) 398*8kB (UM) 93*16kB (UME) 104*32kB (UM) 28*64kB (UME) 8*128kB (UME) 5*256kB (M) 7*512kB (M) 4*1024kB (ME) 3*2048kB (M) 340*4096kB (UM) = 1424788kB [ 108.127553][ T6422] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 108.182887][ T6422] Node 1 Normal: 178*4kB (UME) 26*8kB (UME) 37*16kB (UME) 46*32kB (UME) 21*64kB (UME) 7*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3890536kB [ 108.246554][ T6422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.290945][ T6442] tipc: Started in network mode [ 108.292374][ T6422] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.296498][ T6442] tipc: Node identity 268b4c9706e3, cluster identity 4711 [ 108.317183][ T77] tipc: Subscription rejected, illegal request [ 108.327673][ T6422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.332126][ T6442] tipc: Enabled bearer , priority 0 [ 108.344725][ T6422] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.355582][ T6422] 44544 total pagecache pages [ 108.360305][ T6422] 0 pages in swap cache [ 108.370808][ T6445] syzkaller0: entered promiscuous mode [ 108.377888][ T6445] syzkaller0: entered allmulticast mode [ 108.391992][ T6422] Free swap = 124996kB [ 108.396590][ T6422] Total swap = 124996kB [ 108.400777][ T6422] 2097051 pages RAM [ 108.405077][ T6422] 0 pages HighMem/MovableOnly [ 108.412888][ T6442] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 108.426405][ T6422] 425656 pages reserved [ 108.426832][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'. [ 108.440076][ T6422] 0 pages cma reserved [ 108.460960][ T6442] tipc: Resetting bearer [ 108.477374][ T6439] tipc: Resetting bearer [ 108.544058][ T6439] tipc: Disabling bearer [ 109.183807][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.196620][ T6468] syzkaller1: entered promiscuous mode [ 109.202832][ T6468] syzkaller1: entered allmulticast mode [ 109.568743][ T6482] team_slave_0: entered promiscuous mode [ 109.574674][ T6482] team_slave_1: entered promiscuous mode [ 110.073483][ T6511] validate_nla: 3 callbacks suppressed [ 110.073503][ T6511] netlink: 'syz.1.156': attribute type 75 has an invalid length. [ 110.075625][ T6508] netlink: 45 bytes leftover after parsing attributes in process `syz.3.159'. [ 110.079158][ T6511] netlink: 'syz.1.156': attribute type 75 has an invalid length. [ 110.310224][ T6522] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 110.338192][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'. [ 110.362834][ T6517] netlink: 35 bytes leftover after parsing attributes in process `syz.3.161'. [ 110.488883][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 110.697225][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.166'. [ 111.069869][ T6561] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 111.307836][ T6570] netlink: 2 bytes leftover after parsing attributes in process `syz.0.175'. [ 111.489737][ T6576] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 111.848075][ T6601] netlink: 'syz.0.185': attribute type 21 has an invalid length. [ 112.798308][ T6651] __nla_validate_parse: 2 callbacks suppressed [ 112.798329][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 112.865781][ T6653] can: request_module (can-proto-0) failed. [ 113.246522][ T6667] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 113.444747][ T6681] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 113.593779][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.213'. [ 113.642695][ T6691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.720237][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a71c000: rx timeout, send abort [ 113.730043][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805a71c000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.883212][ T6695] netlink: 596 bytes leftover after parsing attributes in process `syz.1.215'. [ 113.911009][ T6695] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 113.939838][ T6695] netlink: 228 bytes leftover after parsing attributes in process `syz.1.215'. [ 113.977183][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 113.993525][ T6695] netlink: 'syz.1.215': attribute type 11 has an invalid length. [ 114.061570][ T6702] team0: No ports can be present during mode change [ 114.385994][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 114.429479][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 114.460419][ T6711] netlink: 'syz.0.221': attribute type 11 has an invalid length. [ 114.537230][ T6720] netlink: 'syz.4.224': attribute type 11 has an invalid length. [ 114.560584][ T6724] netlink: 'syz.3.226': attribute type 16 has an invalid length. [ 114.561357][ T6721] netlink: 'syz.4.224': attribute type 11 has an invalid length. [ 114.579808][ T6726] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 114.609961][ T6719] team0: Device wireguard0 is of different type [ 114.793561][ T6724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.062049][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 116.221461][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.250'. [ 116.507429][ T6821] validate_nla: 1 callbacks suppressed [ 116.507451][ T6821] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 116.714557][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 116.805901][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.866015][ T6829] bridge_slave_1 (unregistering): left allmulticast mode [ 116.902739][ T6829] bridge_slave_1 (unregistering): left promiscuous mode [ 116.916319][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.950853][ T6838] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 116.998363][ T6838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.075259][ T6843] bond2: (slave veth5): Enslaving as an active interface with a down link [ 117.161133][ T6838] bond2: (slave veth0_to_bond): making interface the new active one [ 117.176090][ T6838] veth0_to_bond: entered promiscuous mode [ 117.182506][ T6838] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 117.324837][ T6851] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 117.366402][ T6851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.567803][ T6865] tipc: Enabled bearer , priority 0 [ 117.692383][ T6868] syzkaller0: entered promiscuous mode [ 117.698863][ T6868] syzkaller0: entered allmulticast mode [ 117.735866][ T6865] tipc: Resetting bearer [ 117.748653][ T6864] tipc: Resetting bearer [ 117.908601][ T6864] tipc: Disabling bearer [ 118.302983][ T6910] __nla_validate_parse: 3 callbacks suppressed [ 118.303005][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 118.377943][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 118.439627][ T6917] tc_dump_action: action bad kind [ 118.698759][ T6923] ip6tnl0: Master is either lo or non-ether device [ 119.009522][ T6945] Unsupported ieee802154 address type: 0 [ 119.369021][ T6961] macsec1: entered promiscuous mode [ 119.405079][ T6964] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 119.451098][ T6961] macsec1: entered allmulticast mode [ 119.458330][ T6964] netlink: 'syz.2.292': attribute type 2 has an invalid length. [ 119.470996][ T6964] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.292'. [ 119.546803][ T6972] netlink: 204 bytes leftover after parsing attributes in process `syz.3.295'. [ 119.682631][ T6974] netlink: 64 bytes leftover after parsing attributes in process `syz.4.294'. [ 119.700891][ T6979] netlink: 'syz.2.297': attribute type 1 has an invalid length. [ 119.734805][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 119.929951][ T6979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.950901][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.300'. [ 119.954907][ T6984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.967230][ T6984] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 119.980876][ T6984] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 120.002853][ T6982] bridge_slave_0: left allmulticast mode [ 120.008633][ T6982] bridge_slave_0: left promiscuous mode [ 120.014947][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.109282][ T6985] veth3: entered promiscuous mode [ 120.123714][ T6985] bond2: (slave veth3): Enslaving as an active interface with a down link [ 120.151465][ T6992] vlan2: entered allmulticast mode [ 120.157067][ T6992] bond2: entered allmulticast mode [ 120.244052][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 120.260142][ T6994] xfrm1: entered allmulticast mode [ 122.591949][ T5874] Bluetooth: hci4: command tx timeout [ 123.346794][ T7091] team0: Device ip6gre1 is of different type [ 123.728116][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 124.147411][ T7121] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.329'. [ 124.394135][ T7142] netlink: 'syz.4.333': attribute type 1 has an invalid length. [ 124.427018][ T7133] syz.2.331 (7133) used greatest stack depth: 18008 bytes left [ 124.537737][ T7142] tipc: Enabled bearer , priority 0 [ 124.541575][ T7137] syz.2.331 (7137) used greatest stack depth: 17864 bytes left [ 124.562099][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 124.599481][ T7142] syzkaller0: entered promiscuous mode [ 124.612066][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 124.636581][ T7142] syzkaller0: entered allmulticast mode [ 124.670957][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 124.681280][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 124.742433][ T7155] netlink: 'syz.2.337': attribute type 12 has an invalid length. [ 124.750225][ T7155] netlink: 'syz.2.337': attribute type 11 has an invalid length. [ 124.845385][ T7142] tipc: Resetting bearer [ 124.878002][ T7142] lo speed is unknown, defaulting to 1000 [ 124.970033][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 125.057744][ T7142] lo speed is unknown, defaulting to 1000 [ 125.086200][ T7142] lo speed is unknown, defaulting to 1000 [ 125.104976][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 125.195862][ T7140] tipc: Resetting bearer [ 125.321521][ T7179] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.343'. [ 125.344852][ T7140] tipc: Disabling bearer [ 125.351912][ T7179] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 125.379931][ T7184] netlink: 14 bytes leftover after parsing attributes in process `syz.1.342'. [ 125.518116][ T7184] hsr_slave_0: left promiscuous mode [ 125.544695][ T7184] hsr_slave_1: left promiscuous mode [ 125.900207][ T7142] infiniband syz2: set active [ 125.906569][ T10] lo speed is unknown, defaulting to 1000 [ 125.940067][ T7142] infiniband syz2: added lo [ 125.997565][ T7142] syz2: rxe_create_cq: returned err = -12 [ 126.027981][ T7142] infiniband syz2: Couldn't create ib_mad CQ [ 126.050725][ T7204] veth0: entered promiscuous mode [ 126.052599][ T7142] infiniband syz2: Couldn't open port 1 [ 126.077248][ T7202] veth0: left promiscuous mode [ 126.188560][ T7142] RDS/IB: syz2: added [ 126.252564][ T7142] smc: adding ib device syz2 with port count 1 [ 126.259011][ T7142] smc: ib device syz2 port 1 has pnetid [ 126.319908][ T5939] lo speed is unknown, defaulting to 1000 [ 126.367785][ T7142] lo speed is unknown, defaulting to 1000 [ 126.422143][ T7217] netlink: 'syz.3.351': attribute type 21 has an invalid length. [ 126.594931][ T7221] IPVS: length: 219 != 24 [ 126.754855][ T7223] tipc: Started in network mode [ 126.778019][ T7223] tipc: Node identity 121f74ab9dbe, cluster identity 4711 [ 126.799151][ T7223] tipc: Enabled bearer , priority 0 [ 126.823086][ T7229] syzkaller0: entered promiscuous mode [ 126.839729][ T7229] syzkaller0: entered allmulticast mode [ 126.897951][ T7223] tipc: Resetting bearer [ 126.960927][ T7222] tipc: Resetting bearer [ 127.039103][ T7222] tipc: Disabling bearer [ 127.169093][ T7142] lo speed is unknown, defaulting to 1000 [ 127.904420][ T7265] team0: Device vti0 is of different type [ 128.180929][ T7142] lo speed is unknown, defaulting to 1000 [ 128.545854][ T7285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.645837][ T6794] veth0_to_bond: left promiscuous mode [ 128.679279][ T7282] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 128.898146][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.934921][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.039926][ T7142] lo speed is unknown, defaulting to 1000 [ 129.235130][ T7306] __nla_validate_parse: 10 callbacks suppressed [ 129.235152][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.375'. [ 129.592976][ T10] IPVS: starting estimator thread 0... [ 129.600258][ T7320] netlink: 48 bytes leftover after parsing attributes in process `syz.0.380'. [ 129.684910][ T7324] IPVS: using max 26 ests per chain, 62400 per kthread [ 129.845707][ T7142] lo speed is unknown, defaulting to 1000 [ 129.856074][ T7329] tipc: Enabled bearer , priority 0 [ 129.866401][ T7329] syzkaller0: entered promiscuous mode [ 129.881875][ T7329] syzkaller0: entered allmulticast mode [ 129.897200][ T7329] tipc: Resetting bearer [ 129.918839][ T7331] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 129.930508][ T7328] tipc: Resetting bearer [ 129.961363][ T7328] tipc: Disabling bearer [ 130.030376][ T7335] netlink: 'syz.0.382': attribute type 83 has an invalid length. [ 130.174245][ T7332] bond2: (slave bridge1): making interface the new active one [ 130.209755][ T7332] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 130.219177][ T7342] netlink: 'syz.2.384': attribute type 10 has an invalid length. [ 130.270714][ T7342] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.310420][ T6799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.329506][ T6799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.478523][ T7347] team_slave_0: entered promiscuous mode [ 130.484375][ T7347] team_slave_1: entered promiscuous mode [ 130.508966][ T7347] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 130.527604][ T7349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.387'. [ 130.544664][ T7347] team0: Device macvtap1 is already an upper device of the team interface [ 130.599417][ T7347] team_slave_0: left promiscuous mode [ 130.604994][ T7347] team_slave_1: left promiscuous mode [ 130.771204][ T7356] tipc: MTU too low for tipc bearer [ 130.962745][ T7367] netlink: 'syz.4.394': attribute type 10 has an invalid length. [ 131.002913][ T7367] team0: Device hsr_slave_0 failed to register rx_handler [ 131.066513][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 131.230066][ T7376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.396'. [ 131.300883][ T7379] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.587302][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 132.078094][ T7410] Driver unsupported XDP return value 0 on prog (id 82) dev N/A, expect packet loss! [ 132.237218][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 132.482281][ T7421] bond3: entered promiscuous mode [ 132.487429][ T7421] bond3: entered allmulticast mode [ 132.506197][ T7421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.624819][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 132.820282][ T7442] syzkaller1: entered promiscuous mode [ 132.839187][ T7442] syzkaller1: entered allmulticast mode [ 132.922283][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928814][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.211886][ T7467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'. [ 133.487700][ T7471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.511872][ T7471] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 133.561423][ T7471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.577610][ T7471] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 133.634855][ T7492] netlink: 128 bytes leftover after parsing attributes in process `syz.4.431'. [ 133.647726][ T7471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.672690][ T7471] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 133.679356][ T7492] openvswitch: netlink: Missing key (keys=40, expected=80) [ 133.721920][ T7471] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.736548][ T7471] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 134.425874][ T7518] veth0: entered promiscuous mode [ 134.438349][ T7514] __nla_validate_parse: 3 callbacks suppressed [ 134.438368][ T7514] netlink: 84 bytes leftover after parsing attributes in process `syz.0.434'. [ 134.558819][ T7520] veth0: left promiscuous mode [ 135.053694][ T7551] netlink: 51 bytes leftover after parsing attributes in process `syz.3.442'. [ 135.252815][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.445'. [ 135.281517][ T7557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.444'. [ 135.329009][ T7557] netlink: 120 bytes leftover after parsing attributes in process `syz.4.444'. [ 135.349959][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 135.391066][ T7567] openvswitch: netlink: IP tunnel dst address not specified [ 135.414262][ T7569] netlink: 68 bytes leftover after parsing attributes in process `syz.3.446'. [ 135.580689][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 135.597350][ T7571] sctp: [Deprecated]: syz.2.449 (pid 7571) Use of int in maxseg socket option. [ 135.597350][ T7571] Use struct sctp_assoc_value instead [ 135.708597][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 136.699285][ T7635] bridge0: port 3(batadv1) entered blocking state [ 136.743227][ T7635] bridge0: port 3(batadv1) entered disabled state [ 136.798057][ T7635] batadv1: entered allmulticast mode [ 136.824386][ T7635] batadv1: entered promiscuous mode [ 136.962426][ T7637] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 137.182279][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 137.192269][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 137.747588][ T7674] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.756974][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 137.844392][ T7672] Bluetooth: MGMT ver 1.23 [ 137.864220][ T7678] tipc: Enabled bearer , priority 0 [ 137.894847][ T7678] syzkaller0: entered promiscuous mode [ 137.920788][ T7678] syzkaller0: entered allmulticast mode [ 137.999154][ T7684] netlink: 'syz.2.478': attribute type 25 has an invalid length. [ 138.065596][ T7678] tipc: Resetting bearer [ 138.155881][ T7676] tipc: Resetting bearer [ 138.304378][ T7676] tipc: Disabling bearer [ 138.313168][ T7697] sctp: [Deprecated]: syz.0.481 (pid 7697) Use of int in max_burst socket option. [ 138.313168][ T7697] Use struct sctp_assoc_value instead [ 138.482721][ T7699] tipc: Enabled bearer , priority 0 [ 138.533692][ T7699] syzkaller0: entered promiscuous mode [ 138.563058][ T7699] syzkaller0: entered allmulticast mode [ 138.573884][ T7717] netlink: 'syz.3.485': attribute type 4 has an invalid length. [ 138.665006][ T7705] tipc: Resetting bearer [ 138.834567][ T7696] tipc: Resetting bearer [ 138.908316][ T7696] tipc: Disabling bearer [ 138.929817][ T7728] veth0: entered promiscuous mode [ 138.970492][ T7727] veth0: left promiscuous mode [ 139.160187][ T7735] tipc: Started in network mode [ 139.178242][ T7735] tipc: Node identity 56a2a524ad79, cluster identity 4711 [ 139.218811][ T7735] tipc: Enabled bearer , priority 0 [ 139.252482][ T7743] syzkaller0: entered promiscuous mode [ 139.258022][ T7743] syzkaller0: entered allmulticast mode [ 139.340329][ T7735] tipc: Resetting bearer [ 139.417158][ T7734] tipc: Resetting bearer [ 139.522854][ T7756] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 139.548597][ T7734] tipc: Disabling bearer [ 139.648198][ T7759] bond1: (slave bridge1): making interface the new active one [ 139.657042][ T7759] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 140.084600][ T7786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.092187][ T7786] IPv6: NLM_F_CREATE should be set when creating new route [ 140.119992][ T7784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.208700][ T7792] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 140.398882][ T7792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.414665][ T7804] __nla_validate_parse: 5 callbacks suppressed [ 140.414686][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 140.536094][ T7800] vlan2: entered allmulticast mode [ 140.541392][ T7800] veth1: entered allmulticast mode [ 140.552652][ T7800] bond3: (slave vlan2): making interface the new active one [ 140.562381][ T7800] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 141.228279][ T7841] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 141.282735][ T7841] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 141.514823][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.518'. [ 142.061913][ T7876] netlink: 164 bytes leftover after parsing attributes in process `syz.4.526'. [ 142.135497][ T7884] netlink: 11 bytes leftover after parsing attributes in process `syz.4.526'. [ 142.379337][ T7895] netlink: 1 bytes leftover after parsing attributes in process `syz.2.531'. [ 142.389637][ T7895] xt_policy: neither incoming nor outgoing policy selected [ 143.102556][ T7925] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 143.355413][ T7925] gretap1: entered promiscuous mode [ 143.380607][ T7925] bond3: (slave gretap1): making interface the new active one [ 143.402511][ T7925] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 143.411375][ T7906] infiniband syz0: set down [ 143.425318][ T7906] infiniband syz0: added bond0 [ 143.550226][ T7937] bond2: entered promiscuous mode [ 143.568982][ T7937] bond2: entered allmulticast mode [ 143.586063][ T7937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.602989][ T7906] RDS/IB: syz0: added [ 143.619007][ T7906] smc: adding ib device syz0 with port count 1 [ 143.626491][ T7906] smc: ib device syz0 port 1 has pnetid [ 143.727917][ T7943] trusted_key: syz.3.546 sent an empty control message without MSG_MORE. [ 143.778011][ T7937] bond2 (unregistering): Released all slaves [ 143.828511][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 144.075961][ T7948] netlink: 68 bytes leftover after parsing attributes in process `syz.4.548'. [ 144.229701][ T7954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.550'. [ 144.297743][ T7954] gretap1: entered promiscuous mode [ 144.312043][ T7954] gretap1: entered allmulticast mode [ 145.118823][ T7968] netlink: 'syz.4.553': attribute type 21 has an invalid length. [ 145.136479][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.195998][ T7968] netlink: 'syz.4.553': attribute type 21 has an invalid length. [ 145.353958][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.381020][ T7968] netlink: 'syz.4.553': attribute type 21 has an invalid length. [ 145.412681][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.448516][ T7968] netlink: 'syz.4.553': attribute type 21 has an invalid length. [ 145.466878][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.480264][ T7977] netlink: 'syz.3.558': attribute type 1 has an invalid length. [ 145.499492][ T7977] netlink: 'syz.3.558': attribute type 2 has an invalid length. [ 145.521812][ T7977] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.558'. [ 145.525766][ T7968] netlink: 'syz.4.553': attribute type 21 has an invalid length. [ 145.548854][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.579524][ T7968] netlink: 'syz.4.553': attribute type 21 has an invalid length. [ 145.616327][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.654289][ T7968] netlink: 'syz.4.553': attribute type 21 has an invalid length. [ 145.695489][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.740411][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.795666][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.817667][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.834585][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.853781][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.873323][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.898379][ T7968] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 146.167653][ T8002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.683840][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 146.902973][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'. [ 146.929244][ T8031] : entered promiscuous mode [ 147.588276][ T8051] netlink: 48 bytes leftover after parsing attributes in process `syz.2.583'. [ 148.045328][ T5909] IPVS: starting estimator thread 0... [ 148.051099][ T8070] IPVS: ip_vs_edit_dest(): server weight less than zero [ 148.089505][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 148.171806][ T8075] IPVS: using max 26 ests per chain, 62400 per kthread [ 148.383218][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 148.442932][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.597'. [ 148.779980][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 148.860105][ T8109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.603'. [ 148.872473][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 149.474890][ T8139] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.857710][ T8153] validate_nla: 9 callbacks suppressed [ 149.857731][ T8153] netlink: 'syz.3.615': attribute type 2 has an invalid length. [ 150.584371][ T8185] veth1_macvtap: left promiscuous mode [ 150.680767][ T8191] __nla_validate_parse: 66 callbacks suppressed [ 150.680791][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 150.699754][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 150.771596][ T77] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.821040][ T77] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.865181][ T8197] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 150.881808][ T77] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.914010][ T77] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.934397][ T8208] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 151.038526][ T8211] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 151.261012][ T8223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.636'. [ 151.276270][ T8221] nbd: must specify at least one socket [ 151.334726][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.636'. [ 151.825909][ T8245] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.642'. [ 151.864114][ T8248] netlink: 56 bytes leftover after parsing attributes in process `syz.0.643'. [ 151.884357][ T8246] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.642'. [ 151.963390][ T8251] netlink: 18 bytes leftover after parsing attributes in process `syz.0.643'. [ 152.005197][ T8252] syz.3.644 uses old SIOCAX25GETINFO [ 152.250243][ T8258] bridge_slave_0: default FDB implementation only supports local addresses [ 152.901489][ T8294] smc: net device macvtap0 applied user defined pnetid SYZ2 [ 152.909389][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.658'. [ 153.086621][ T8302] netlink: 'syz.3.660': attribute type 15 has an invalid length. [ 153.118146][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.660'. [ 153.240512][ T8311] IPv6: sit1: Disabled Multicast RS [ 153.316051][ T8311] sit1: entered allmulticast mode [ 153.716016][ T8330] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 154.555761][ T8366] hsr_slave_1 (unregistering): left promiscuous mode [ 154.853215][ T8384] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 154.931781][ T8384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.214097][ T8389] bond2 (unregistering): Released all slaves [ 156.227013][ T8447] netlink: 'syz.0.700': attribute type 15 has an invalid length. [ 156.257125][ T8444] __nla_validate_parse: 136 callbacks suppressed [ 156.257149][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 156.273447][ T8447] netlink: 'syz.0.700': attribute type 3 has an invalid length. [ 156.578669][ T30] audit: type=1800 audit(1755844492.527:2): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.700" name="memory.events" dev="tmpfs" ino=721 res=0 errno=0 [ 157.032748][ T8481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.710'. [ 157.273954][ T8489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.713'. [ 157.571154][ T8499] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 157.606326][ T8499] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 157.847534][ T8473] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 157.996245][ T8520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.725'. [ 158.606148][ T8544] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 158.664905][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.733'. [ 159.120834][ T8564] tipc: Trying to set illegal importance in message [ 159.256319][ T8572] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.738'. [ 159.839959][ T8586] netlink: 'syz.1.744': attribute type 4 has an invalid length. [ 159.858393][ T8586] netlink: 17 bytes leftover after parsing attributes in process `syz.1.744'. [ 159.896952][ T8581] lo speed is unknown, defaulting to 1000 [ 160.016365][ T8584] netlink: 164 bytes leftover after parsing attributes in process `syz.4.745'. [ 160.105541][ T6794] tipc: Subscription rejected, illegal request [ 160.225492][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 160.227859][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 160.273247][ T8599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.992882][ T8632] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 161.353042][ T8645] __nla_validate_parse: 3 callbacks suppressed [ 161.353063][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 161.649631][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.342770][ T8680] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 162.642358][ T8704] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 163.523410][ T8730] netlink: 'syz.2.789': attribute type 11 has an invalid length. [ 163.531192][ T8730] netlink: 228 bytes leftover after parsing attributes in process `syz.2.789'. [ 163.562402][ T8732] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.791'. [ 163.599849][ T8732] netlink: 'syz.0.791': attribute type 58 has an invalid length. [ 163.609466][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 163.618640][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.791'. [ 163.786629][ T8730] nbd: socks must be embedded in a SOCK_ITEM attr [ 163.858399][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 163.984374][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 164.000428][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 164.023108][ T8749] netlink: 'syz.2.795': attribute type 10 has an invalid length. [ 164.052022][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 164.218889][ T8758] Bluetooth: hci1: Opcode 0x0c1a failed: -22 [ 164.242101][ T8763] Bluetooth: hci1: Opcode 0x0c1a failed: -22 [ 164.308395][ T8762] tipc: Enabled bearer , priority 0 [ 164.320979][ T8762] syzkaller0: entered promiscuous mode [ 164.343764][ T8762] syzkaller0: entered allmulticast mode [ 164.478348][ T8775] netlink: 10 bytes leftover after parsing attributes in process `syz.3.803'. [ 165.000537][ T8796] netlink: 'syz.4.807': attribute type 5 has an invalid length. [ 165.162372][ T8755] tipc: Resetting bearer [ 165.273159][ T8755] tipc: Disabling bearer [ 165.332296][ T8804] netlink: 'syz.4.809': attribute type 10 has an invalid length. [ 165.397906][ T8804] veth1_macvtap: left promiscuous mode [ 165.638752][ T8814] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 165.973480][ T8829] veth1_macvtap: left promiscuous mode [ 165.994905][ T8829] macsec0: entered promiscuous mode [ 166.000247][ T8829] macsec0: entered allmulticast mode [ 166.064015][ T8836] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 166.107770][ T8829] veth1_macvtap: entered promiscuous mode [ 166.121988][ T8829] veth1_macvtap: entered allmulticast mode [ 166.145740][ T8829] macsec0: left promiscuous mode [ 166.156069][ T8829] macsec0: left allmulticast mode [ 166.161154][ T8829] veth1_macvtap: left allmulticast mode [ 166.271906][ T5874] Bluetooth: hci1: command tx timeout [ 166.368338][ T8853] block nbd0: Unsupported socket: shutdown callout must be supported. [ 166.566362][ T8864] __nla_validate_parse: 5 callbacks suppressed [ 166.566440][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 166.615377][ T8866] netlink: 'syz.4.826': attribute type 10 has an invalid length. [ 166.623566][ T8866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.826'. [ 166.634472][ T8866] ipvlan1: entered promiscuous mode [ 166.639839][ T8866] ipvlan1: entered allmulticast mode [ 166.646061][ T8866] veth0_vlan: entered allmulticast mode [ 166.656303][ T8866] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 166.773158][ T5909] IPVS: starting estimator thread 0... [ 166.863110][ T8875] IPVS: using max 33 ests per chain, 79200 per kthread [ 167.194891][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 167.936634][ T8936] netlink: 'syz.1.849': attribute type 9 has an invalid length. [ 168.079149][ T8938] netlink: 'syz.2.850': attribute type 10 has an invalid length. [ 168.172322][ T8938] batman_adv: batadv0: Adding interface: team0 [ 168.196336][ T8938] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.230362][ T8938] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 168.372426][ T8950] netlink: 'syz.0.853': attribute type 18 has an invalid length. [ 169.030466][ T8971] netlink: 48 bytes leftover after parsing attributes in process `syz.2.861'. [ 169.166106][ T8983] tipc: New replicast peer: 255.255.255.255 [ 169.187222][ T8983] tipc: Enabled bearer , priority 10 [ 169.325349][ T8983] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 169.345555][ T9000] netlink: 'syz.4.864': attribute type 10 has an invalid length. [ 169.541067][ T8991] ipvlan1: left allmulticast mode [ 169.550200][ T8991] veth0_vlan: left allmulticast mode [ 169.618267][ T24] lo speed is unknown, defaulting to 1000 [ 169.867015][ T9007] tipc: Enabled bearer , priority 0 [ 169.916134][ T9009] bridge0: port 3(batadv1) entered blocking state [ 169.923820][ T9009] bridge0: port 3(batadv1) entered disabled state [ 169.942266][ T9009] batadv1: entered allmulticast mode [ 169.987373][ T9009] batadv1: entered promiscuous mode [ 170.065065][ T9007] tipc: Disabling bearer [ 170.093267][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.872'. [ 170.151518][ T9023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.875'. [ 170.298028][ T9033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.312394][ T5939] tipc: Node number set to 4225475876 [ 170.413962][ T77] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 170.423562][ T77] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 170.500486][ T9038] netlink: 64 bytes leftover after parsing attributes in process `syz.1.879'. [ 170.609309][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.879'. [ 171.202111][ T9079] netlink: 165 bytes leftover after parsing attributes in process `syz.0.894'. [ 171.759096][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 171.923929][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 172.026182][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 172.037203][ T9108] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 172.047580][ T9108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.228292][ T9120] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 172.260103][ T9120] netlink: 184 bytes leftover after parsing attributes in process `syz.1.905'. [ 172.289828][ T9120] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 172.330569][ T9123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.331460][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'. [ 173.071889][ T30] audit: type=1800 audit(1755844509.017:3): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.901" name="memory.events" dev="tmpfs" ino=815 res=0 errno=0 [ 173.180263][ T9147] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 174.019817][ T9182] netlink: 32 bytes leftover after parsing attributes in process `syz.0.923'. [ 174.422992][ T9209] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 174.454748][ T9209] bond0: (slave wlan1): Opening slave failed [ 174.595756][ T9214] netlink: 60 bytes leftover after parsing attributes in process `syz.4.933'. [ 175.290936][ T9243] netlink: 'syz.3.941': attribute type 29 has an invalid length. [ 175.301225][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 175.341357][ T9242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.934540][ T9278] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.953'. [ 175.954095][ T9279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.035256][ T9278] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.953'. [ 176.155010][ T9287] team0: Device vti1 is of different type [ 176.497230][ T9298] netlink: 'syz.2.958': attribute type 6 has an invalid length. [ 176.505565][ T9298] netlink: 'syz.2.958': attribute type 5 has an invalid length. [ 176.589972][ T9302] netlink: 'syz.2.958': attribute type 30 has an invalid length. [ 176.606548][ T9302] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 176.661894][ T9302] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 176.773400][ T9312] tipc: Enabled bearer , priority 10 [ 177.049356][ T9318] __nla_validate_parse: 7 callbacks suppressed [ 177.049377][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 177.401627][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 177.456579][ T9338] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 177.462670][ T9343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'. [ 177.522460][ T9338] netlink: 184 bytes leftover after parsing attributes in process `syz.4.971'. [ 177.892071][ T10] tipc: Node number set to 543706263 [ 178.175165][ T9379] netlink: 'syz.2.983': attribute type 8 has an invalid length. [ 178.230142][ T9379] ip6gre1: entered allmulticast mode [ 178.703961][ T9409] netlink: 'syz.4.990': attribute type 83 has an invalid length. [ 178.915006][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 179.081605][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 179.188658][ T9425] netlink: 156 bytes leftover after parsing attributes in process `syz.1.995'. [ 179.372250][ T9430] tipc: Enabled bearer , priority 0 [ 179.437997][ T9435] syzkaller0: entered promiscuous mode [ 179.485517][ T9435] syzkaller0: entered allmulticast mode [ 179.576165][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 179.628252][ T9444] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.687364][ T9426] tipc: Resetting bearer [ 179.770648][ T9426] tipc: Disabling bearer [ 179.837657][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 179.877291][ T9460] netlink: 'syz.0.1003': attribute type 3 has an invalid length. [ 179.894959][ T9460] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1003'. [ 180.045928][ T9468] netlink: 'syz.2.1005': attribute type 4 has an invalid length. [ 180.580118][ T9500] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 180.894906][ T9504] netlink: 'syz.0.1016': attribute type 5 has an invalid length. [ 181.059200][ T9522] netlink: 'syz.1.1020': attribute type 15 has an invalid length. [ 181.370238][ T9537] netlink: zone id is out of range [ 181.380886][ T9537] netlink: zone id is out of range [ 181.391615][ T9542] IPVS: set_ctl: invalid protocol: 103 172.20.20.20:20000 [ 181.426617][ T9546] netlink: 'syz.2.1023': attribute type 1 has an invalid length. [ 181.441840][ T9537] netlink: zone id is out of range [ 181.447176][ T9537] netlink: zone id is out of range [ 181.453315][ T9537] netlink: zone id is out of range [ 181.458581][ T9537] netlink: zone id is out of range [ 181.464744][ T9537] netlink: zone id is out of range [ 181.470009][ T9537] netlink: zone id is out of range [ 181.479689][ T9537] netlink: zone id is out of range [ 181.745598][ T9561] blkio.reset_stats is deprecated [ 181.889129][ C0] vcan0: j1939_session_tx_dat: 0xffff88803327c400: queue data error: -100 [ 181.911470][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 181.918004][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 181.924605][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 181.931056][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 181.937635][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 181.944110][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 181.950655][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 181.957134][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 181.963680][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 181.970124][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 181.976695][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 181.983164][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 181.991106][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 181.998999][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.006980][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.014872][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.022827][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.030664][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.038640][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.046605][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.054612][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.062479][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.070402][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.078293][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.086267][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.094152][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.102111][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.104343][ T9572] netlink: 'syz.1.1033': attribute type 2 has an invalid length. [ 182.109937][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.110049][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.133435][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.141366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.149258][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.157202][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.165069][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.173057][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.180894][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.188861][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.196722][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.204698][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.212570][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.213068][ T9572] __nla_validate_parse: 17 callbacks suppressed [ 182.213085][ T9572] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.1033'. [ 182.220479][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.243735][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.251705][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.259536][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.267498][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.275366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.283411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.291255][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.301401][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.309293][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.317255][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.325147][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.333109][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.340958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.348973][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.356850][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.364841][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.372956][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.380902][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.388786][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.396752][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.404637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.412596][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.420435][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.428408][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.436276][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.444254][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.452118][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.460060][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.467951][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.475907][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.483914][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.491900][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.499744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.507730][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.515602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.523594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.531531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.539535][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.547418][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.555453][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.563319][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.571291][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.579169][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.587223][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.595117][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.821338][ T9586] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 182.826717][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 182.897510][ T9586] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 183.056699][ T9601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1042'. [ 183.086179][ T9601] syzkaller0: entered promiscuous mode [ 183.092295][ T9601] syzkaller0: entered allmulticast mode [ 183.260393][ T9608] syzkaller0: entered allmulticast mode [ 183.458010][ T9618] netlink: 'syz.3.1048': attribute type 12 has an invalid length. [ 183.469468][ T9618] netlink: 'syz.3.1048': attribute type 29 has an invalid length. [ 183.479146][ T9618] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1048'. [ 183.507158][ T9622] tipc: Started in network mode [ 183.512811][ T9622] tipc: Node identity 4e37e4eff1db, cluster identity 4711 [ 183.523115][ T9622] tipc: Enabled bearer , priority 0 [ 183.650422][ T9627] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 184.312450][ T9662] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 184.430143][ T9666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1065'. [ 184.665637][ T5944] tipc: Node number set to 3219973359 [ 185.176096][ T9693] nbd0: detected capacity change from 0 to 127 [ 185.215381][ T9698] net_ratelimit: 219 callbacks suppressed [ 185.215403][ T9698] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 185.255225][ T5874] block nbd0: Receive control failed (result -104) [ 185.417953][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1076'. [ 185.458479][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 185.461341][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 185.479581][ T9702] bond0: (slave bond_slave_0): Releasing backup interface [ 185.545169][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 185.561370][ T9702] bond0: (slave bond_slave_1): Releasing backup interface [ 185.588820][ T9702] team_slave_0: left promiscuous mode [ 185.599670][ T9702] team0: Port device team_slave_0 removed [ 185.609266][ T9702] team_slave_1: left promiscuous mode [ 185.634447][ T9702] team0: Port device team_slave_1 removed [ 185.643935][ T9702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.651491][ T9702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.663114][ T9702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.670565][ T9702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.715085][ T9702] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 185.812162][ T9715] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 185.889550][ T9724] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 185.958652][ T6792] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.985396][ T6792] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.014835][ T6792] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.045126][ T6792] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.069044][ T9736] sctp: [Deprecated]: syz.1.1083 (pid 9736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.069044][ T9736] Use struct sctp_sack_info instead [ 186.088273][ T9736] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1083'. [ 186.107461][ T9730] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 186.139009][ T9730] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 186.151208][ T9730] gretap1: entered promiscuous mode [ 186.161420][ T9730] gretap1: entered allmulticast mode [ 186.535046][ T9753] bond1: (slave bridge1): Releasing active interface [ 186.661394][ T9758] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.936957][ T9758] raw_sendmsg: syz.1.1088 forgot to set AF_INET. Fix it! [ 186.976661][ T9777] siw: device registration error -23 [ 187.228506][ T9797] __nla_validate_parse: 1 callbacks suppressed [ 187.228526][ T9797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1099'. [ 187.264099][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 187.275626][ T9797] veth0_to_bridge: entered promiscuous mode [ 187.378316][ T9794] veth0_to_bridge: left promiscuous mode [ 187.583254][ T9813] siw: device registration error -23 [ 187.799136][ T9822] validate_nla: 3 callbacks suppressed [ 187.799158][ T9822] netlink: 'syz.3.1107': attribute type 10 has an invalid length. [ 188.064013][ T9834] sctp: [Deprecated]: syz.1.1110 (pid 9834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.064013][ T9834] Use struct sctp_sack_info instead [ 188.287829][ T9828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.436384][ T9851] netlink: 'syz.4.1117': attribute type 26 has an invalid length. [ 188.758447][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'. [ 188.988012][ T9877] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 189.348359][ T9896] lo speed is unknown, defaulting to 1000 [ 189.398492][ T9905] netlink: 'syz.4.1132': attribute type 6 has an invalid length. [ 189.494086][ T9910] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 189.606684][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1134'. [ 189.864638][ T9928] netlink: zone id is out of range [ 189.873250][ T9928] netlink: zone id is out of range [ 189.878515][ T9928] netlink: zone id is out of range [ 189.891996][ T9928] netlink: zone id is out of range [ 189.912367][ T9928] netlink: zone id is out of range [ 189.922631][ T9928] netlink: zone id is out of range [ 189.927791][ T9928] netlink: zone id is out of range [ 190.130810][ T9937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.374211][ T9948] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 190.412417][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1144'. [ 190.441313][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 190.686193][ T9956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.954211][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 191.362964][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 191.391968][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 191.714106][ T9991] net_ratelimit: 1 callbacks suppressed [ 191.714129][ T9991] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 192.208212][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 192.270139][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 192.275884][T10017] bond2: entered promiscuous mode [ 192.285026][T10017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.327508][T10023] bridge3: entered promiscuous mode [ 192.334164][T10023] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 192.823715][T10019] team0 (unregistering): Port device team_slave_0 removed [ 192.848849][T10019] team0 (unregistering): Port device team_slave_1 removed [ 194.318140][T10088] netlink: 'syz.4.1207': attribute type 4 has an invalid length. [ 194.356673][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.363533][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.770224][T10106] syzkaller0: entered promiscuous mode [ 194.780687][T10106] syzkaller0: entered allmulticast mode [ 194.791907][T10110] : renamed from hsr0 (while UP) [ 195.009560][T10124] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1218'. [ 195.281059][T10136] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.495619][T10120] ipip0: entered promiscuous mode [ 196.501339][T10121] netem: unknown loss type 0 [ 196.507014][T10121] netem: change failed [ 196.517829][T10138] syzkaller0: Caught tx_queue_len zero misconfig [ 196.547829][T10144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.671983][T10151] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1225'. [ 196.855731][T10161] tipc: Enabled bearer , priority 0 [ 196.863624][T10161] syzkaller0: entered promiscuous mode [ 196.869274][T10161] syzkaller0: entered allmulticast mode [ 196.892387][T10161] tipc: Resetting bearer [ 196.926522][T10160] tipc: Resetting bearer [ 196.956671][T10160] tipc: Disabling bearer [ 197.099955][T10168] bond4: entered promiscuous mode [ 197.105670][T10168] bond4: entered allmulticast mode [ 197.111535][T10168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.144932][T10168] bond5: entered promiscuous mode [ 197.150023][T10168] bond5: entered allmulticast mode [ 197.156026][T10168] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.478007][ T55] block nbd0: Possible stuck request ffff888055f47000: control (read@0,1024B). Runtime 30 seconds [ 215.489203][ T55] block nbd0: Possible stuck request ffff888055f471c0: control (read@1024,1024B). Runtime 30 seconds [ 215.502234][ T55] block nbd0: Possible stuck request ffff888055f47380: control (read@2048,1024B). Runtime 30 seconds [ 215.513365][ T55] block nbd0: Possible stuck request ffff888055f47540: control (read@3072,1024B). Runtime 30 seconds [ 219.547625][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 219.580642][T10175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.626623][T10175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.643145][T10183] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1234'. [ 219.710134][T10190] delete_channel: no stack [ 220.248166][T10208] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 220.618011][T10232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1248'. [ 221.048064][T10238] netlink: 'syz.2.1252': attribute type 6 has an invalid length. [ 221.528342][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 221.549216][T10265] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1258'. [ 221.989525][T10276] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 221.998755][T10275] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 222.417453][T10295] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1269'. [ 222.464177][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 223.315303][T10341] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1278'. [ 223.345397][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 223.357553][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'. [ 223.382761][T10342] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 223.949411][T10378] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 223.961584][T10377] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 224.049040][T10378] : entered promiscuous mode [ 224.092912][T10383] nbd: nbd0 already in use [ 224.348357][T10402] netlink: 'syz.4.1298': attribute type 5 has an invalid length. [ 224.376822][T10402] netlink: 'syz.4.1298': attribute type 7 has an invalid length. [ 224.396903][T10402] netlink: 'syz.4.1298': attribute type 8 has an invalid length. [ 224.882236][T10425] __nla_validate_parse: 7 callbacks suppressed [ 224.882335][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 224.985863][T10428] netlink: 'syz.2.1305': attribute type 1 has an invalid length. [ 225.092860][T10434] rdma_rxe: rxe_newlink: failed to add lo [ 225.167249][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1307'. [ 225.257072][ T24] IPVS: starting estimator thread 0... [ 225.362167][T10445] IPVS: using max 27 ests per chain, 64800 per kthread [ 225.583125][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'. [ 225.889457][T10475] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1318'. [ 226.349799][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 226.349822][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 226.648962][T10506] vlan2: entered promiscuous mode [ 226.784378][T10508] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1326'. [ 226.846842][T10508] IPv6: sit3: Disabled Multicast RS [ 227.062187][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 227.345248][T10539] geneve2: entered promiscuous mode [ 227.350624][T10539] geneve2: entered allmulticast mode [ 227.450435][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1335'. [ 227.479074][T10544] geneve2: entered promiscuous mode [ 227.608474][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 227.626595][T10550] ip6gretap1: entered promiscuous mode [ 227.652249][T10550] ip6gretap1: entered allmulticast mode [ 227.996838][T10576] validate_nla: 1 callbacks suppressed [ 227.996859][T10576] netlink: 'syz.1.1345': attribute type 13 has an invalid length. [ 228.039017][T10576] netlink: 'syz.1.1345': attribute type 13 has an invalid length. [ 228.131188][T10587] netlink: 'syz.3.1350': attribute type 3 has an invalid length. [ 228.139214][T10587] netlink: 'syz.3.1350': attribute type 1 has an invalid length. [ 228.217176][T10582] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.373383][T10589] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.409715][T10589] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 228.424733][T10589] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 228.980177][T10638] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 229.021291][T10638] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 229.039482][T10638] netlink: 'syz.3.1361': attribute type 2 has an invalid length. [ 229.143763][T10645] veth1_to_bond: entered allmulticast mode [ 229.199326][T10639] veth1_to_bond: left allmulticast mode [ 229.481399][T10665] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 229.500630][T10665] netlink: 'syz.4.1371': attribute type 10 has an invalid length. [ 229.587959][T10672] netlink: 'syz.4.1371': attribute type 30 has an invalid length. [ 230.096871][T10689] __nla_validate_parse: 18 callbacks suppressed [ 230.096913][T10689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1378'. [ 230.247389][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 230.329418][T10694] bond3: entered promiscuous mode [ 230.344067][T10694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.396255][T10701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.420328][T10701] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 230.438934][T10701] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 230.480483][T10701] bond3: (slave wireguard0): making interface the new active one [ 230.493875][T10701] wireguard0: entered promiscuous mode [ 230.502574][T10701] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 230.932986][T10728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1388'. [ 230.949866][T10728] ip6tnl2: entered promiscuous mode [ 230.955463][T10728] ip6tnl2: entered allmulticast mode [ 230.999423][T10719] bond0: option mode: unable to set because the bond device is up [ 231.117052][T10730] can: request_module (can-proto-4) failed. [ 231.117552][T10731] can: request_module (can-proto-4) failed. [ 231.434328][T10746] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 231.452857][T10746] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 231.479537][T10746] gretap1: entered promiscuous mode [ 231.516601][T10746] gretap1: entered allmulticast mode [ 231.650769][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1398'. [ 231.893071][T10761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1402'. [ 232.078795][T10772] pim6reg1: entered promiscuous mode [ 232.092385][T10772] pim6reg1: entered allmulticast mode [ 232.273238][T10776] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 232.683290][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 232.744474][T10810] sctp: [Deprecated]: syz.2.1414 (pid 10810) Use of int in maxseg socket option. [ 232.744474][T10810] Use struct sctp_assoc_value instead [ 233.116734][T10826] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 233.507153][T10836] sctp: [Deprecated]: syz.0.1424 (pid 10836) Use of int in max_burst socket option deprecated. [ 233.507153][T10836] Use struct sctp_assoc_value instead [ 234.309364][T10874] validate_nla: 3 callbacks suppressed [ 234.309386][T10874] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 234.398520][T10874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.484928][T10879] bond2: (slave gretap2): making interface the new active one [ 234.525194][T10879] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 234.561333][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 234.662519][T10890] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 234.716585][T10893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.010264][T10910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.585022][T10939] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.585022][T10937] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.588309][T10940] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1456'. [ 235.625172][T10939] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1456'. [ 235.650232][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1457'. [ 235.811071][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 235.836849][T10950] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 235.911987][T10956] netlink: 'syz.0.1462': attribute type 2 has an invalid length. [ 236.212518][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 236.235277][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 236.236573][T10967] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1465'. [ 236.252486][T10972] netlink: 'syz.1.1464': attribute type 5 has an invalid length. [ 236.273097][T10968] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 236.280681][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1464'. [ 236.350012][T10972] geneve2: entered promiscuous mode [ 236.364106][T10972] geneve2: entered allmulticast mode [ 236.378557][ T6797] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 236.409878][ T6797] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 236.428893][ T6797] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 236.440554][ T6797] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 236.669445][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1471'. [ 236.935139][T11006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1476'. [ 237.222455][T11024] netlink: 'syz.3.1483': attribute type 2 has an invalid length. [ 237.346554][T11028] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 237.371218][T11028] block nbd1: not configured, cannot reconfigure [ 237.425596][T11032] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 238.148470][T11072] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 238.198303][T11072] bond6: (slave vcan0): Error -95 calling set_mac_address [ 238.313696][T11081] bridge_slave_0: entered promiscuous mode [ 238.757261][T11111] tipc: Enabling of bearer rejected, failed to enable media [ 238.931956][T11117] netlink: 'syz.3.1509': attribute type 58 has an invalid length. [ 239.505085][T11144] syzkaller0: entered promiscuous mode [ 239.516590][T11144] syzkaller0: entered allmulticast mode [ 239.518873][T11147] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 240.140858][T11178] sctp: [Deprecated]: syz.4.1529 (pid 11178) Use of int in maxseg socket option. [ 240.140858][T11178] Use struct sctp_assoc_value instead [ 240.205035][T11178] sctp: [Deprecated]: syz.4.1529 (pid 11178) Use of int in maxseg socket option. [ 240.205035][T11178] Use struct sctp_assoc_value instead [ 240.589288][T11202] lo speed is unknown, defaulting to 1000 [ 240.698103][T11197] __nla_validate_parse: 17 callbacks suppressed [ 240.698127][T11197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1536'. [ 240.811315][T11217] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 240.835170][T11216] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 241.893621][T11252] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1548'. [ 241.914435][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1545'. [ 242.258301][T11220] infiniband syz!: set active [ 242.292133][T11220] infiniband syz!: added team_slave_0 [ 242.298336][T11220] syz!: rxe_create_cq: returned err = -12 [ 242.303304][T11264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1551'. [ 242.329656][T11220] infiniband syz!: Couldn't create ib_mad CQ [ 242.346856][T11220] infiniband syz!: Couldn't open port 1 [ 242.440636][T11272] netlink: 'syz.1.1552': attribute type 16 has an invalid length. [ 242.493185][T11220] RDS/IB: syz!: added [ 242.513302][T11272] netlink: 'syz.1.1552': attribute type 17 has an invalid length. [ 242.521985][T11220] smc: adding ib device syz! with port count 1 [ 242.549489][T11220] smc: ib device syz! port 1 has pnetid [ 242.582169][T11269] tipc: Resetting bearer [ 242.588697][T11269] tipc: Resetting bearer [ 242.743915][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1556'. [ 242.761415][T11279] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1556'. [ 242.800109][T11272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.941515][T11282] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744072901124804) [ 242.970352][T11282] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 243.262730][T11292] veth1_to_bond: entered allmulticast mode [ 243.303409][T11296] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 243.311192][T11296] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 243.423308][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 243.472187][T11296] veth1_to_bond: left allmulticast mode [ 243.542747][T11304] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1564'. [ 243.679016][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1568'. [ 243.693485][T11311] netlink: 'syz.3.1567': attribute type 12 has an invalid length. [ 243.843817][T11316] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 243.862614][T11316] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1569'. [ 243.886265][T11316] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 245.554481][ T55] block nbd0: Possible stuck request ffff888055f47000: control (read@0,1024B). Runtime 60 seconds [ 245.565720][ T55] block nbd0: Possible stuck request ffff888055f471c0: control (read@1024,1024B). Runtime 60 seconds [ 245.577748][ T55] block nbd0: Possible stuck request ffff888055f47380: control (read@2048,1024B). Runtime 60 seconds [ 245.588760][ T55] block nbd0: Possible stuck request ffff888055f47540: control (read@3072,1024B). Runtime 60 seconds [ 247.849814][ T5234] udevd[5234]: worker [5876] /devices/virtual/block/nbd0 is taking a long time [ 255.797514][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804058][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.558119][T11333] __nla_validate_parse: 1 callbacks suppressed [ 263.558140][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 263.626122][T11340] block nbd4: not configured, cannot reconfigure [ 263.722420][T11344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1579'. [ 263.731440][T11344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1579'. [ 263.779133][T11346] syzkaller1: entered allmulticast mode [ 263.949487][T11356] sctp: [Deprecated]: syz.3.1582 (pid 11356) Use of int in maxseg socket option. [ 263.949487][T11356] Use struct sctp_assoc_value instead [ 264.223419][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 264.340674][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 264.726653][T11401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1598'. [ 264.759198][T11403] validate_nla: 1 callbacks suppressed [ 264.759218][T11403] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 264.861482][T11403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.876453][T11412] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1602'. [ 264.966126][T11411] bond4: (slave veth3): Enslaving as an active interface with a down link [ 265.009989][T11403] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 265.098664][T11421] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 265.339602][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'. [ 265.429304][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'. [ 265.767302][T11455] syzkaller0: Caught tx_queue_len zero misconfig [ 266.045929][T11463] macvtap1: entered allmulticast mode [ 266.060099][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 266.075659][T11463] veth0_macvtap: entered allmulticast mode [ 266.241419][T11476] lo speed is unknown, defaulting to 1000 [ 266.390500][T11480] netlink: 'syz.4.1624': attribute type 10 has an invalid length. [ 266.399078][T11480] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 266.492842][T11481] IPVS: ip_vs_add_dest(): server weight less than zero [ 267.178222][T11503] netlink: 'syz.0.1631': attribute type 1 has an invalid length. [ 267.228096][T11505] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 267.277268][T11505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.289667][T11480] siw: device registration error -23 [ 267.298488][T11505] vlan3: entered allmulticast mode [ 267.304424][T11505] veth1: entered allmulticast mode [ 267.315052][T11505] bond3: (slave vlan3): making interface the new active one [ 267.324096][T11505] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 267.840712][T11536] netlink: 'syz.2.1640': attribute type 8 has an invalid length. [ 267.856961][T11536] tipc: Enabling not permitted [ 267.864475][T11536] tipc: Enabling of bearer rejected, failed to enable media [ 268.244988][T11556] netlink: del zone limit has 4 unknown bytes [ 268.391935][T11547] lo speed is unknown, defaulting to 1000 [ 269.211384][T11575] __nla_validate_parse: 1 callbacks suppressed [ 269.211432][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 269.440693][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 269.547978][T11583] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1655'. [ 269.592744][T11583] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 269.641025][T11586] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1657'. [ 270.066872][T11601] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.125925][T11604] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1662'. [ 270.186957][T11606] FAULT_INJECTION: forcing a failure. [ 270.186957][T11606] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 270.234252][T11606] CPU: 0 UID: 0 PID: 11606 Comm: syz.0.1663 Not tainted syzkaller #0 PREEMPT(full) [ 270.234282][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.234308][T11606] Call Trace: [ 270.234317][T11606] [ 270.234327][T11606] dump_stack_lvl+0x189/0x250 [ 270.234360][T11606] ? __pfx____ratelimit+0x10/0x10 [ 270.234390][T11606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.234416][T11606] ? __pfx__printk+0x10/0x10 [ 270.234447][T11606] ? __might_fault+0xb0/0x130 [ 270.234490][T11606] should_fail_ex+0x414/0x560 [ 270.234525][T11606] _copy_from_user+0x2d/0xb0 [ 270.234552][T11606] __sys_sendto+0x25c/0x520 [ 270.234589][T11606] ? __pfx___sys_sendto+0x10/0x10 [ 270.234618][T11606] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 270.234664][T11606] ? __fget_files+0x3a0/0x420 [ 270.234727][T11606] ? ksys_write+0x22a/0x250 [ 270.234757][T11606] ? __pfx_ksys_write+0x10/0x10 [ 270.234789][T11606] ? rcu_is_watching+0x15/0xb0 [ 270.234816][T11606] __x64_sys_sendto+0xde/0x100 [ 270.234851][T11606] do_syscall_64+0xfa/0x3b0 [ 270.234880][T11606] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.234907][T11606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.234928][T11606] ? clear_bhb_loop+0x60/0xb0 [ 270.234952][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.234972][T11606] RIP: 0033:0x7f2545f8ebe9 [ 270.234990][T11606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.235008][T11606] RSP: 002b:00007f2546e14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 270.235030][T11606] RAX: ffffffffffffffda RBX: 00007f25461b5fa0 RCX: 00007f2545f8ebe9 [ 270.235045][T11606] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 270.235059][T11606] RBP: 00007f2546e14090 R08: 00002000000001c0 R09: 000000000000001c [ 270.235072][T11606] R10: 0000000020000041 R11: 0000000000000246 R12: 0000000000000001 [ 270.235085][T11606] R13: 00007f25461b6038 R14: 00007f25461b5fa0 R15: 00007ffecc8b1c58 [ 270.235117][T11606] [ 270.760799][T11623] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1669'. [ 270.974916][T11636] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1672'. [ 270.998664][T11635] bond4: (slave veth0_to_bond): Releasing active interface [ 271.086900][T11635] bond2: (slave bridge3): Releasing backup interface [ 271.119968][T11635] bridge3: left promiscuous mode [ 271.167854][T11635] bond3: (slave wireguard0): Releasing backup interface [ 271.195980][T11635] wireguard0: left promiscuous mode [ 271.245420][T11635] bond4: (slave veth3): Releasing active interface [ 271.490756][T11642] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 271.685302][T11652] syzkaller1: entered promiscuous mode [ 271.698986][T11652] syzkaller1: entered allmulticast mode [ 272.074361][T11660] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 272.308703][T11675] tipc: Enabled bearer , priority 0 [ 272.342165][T11668] syzkaller0: entered promiscuous mode [ 272.347955][T11668] syzkaller0: entered allmulticast mode [ 272.376555][T11668] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 272.465569][T11668] tipc: Resetting bearer [ 272.490699][T11667] tipc: Resetting bearer [ 272.546637][T11667] tipc: Disabling bearer [ 272.810856][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1689'. [ 272.891418][T11703] netlink: 'syz.2.1691': attribute type 11 has an invalid length. [ 272.900210][T11703] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1691'. [ 272.964167][T11696] netlink: 'syz.1.1689': attribute type 29 has an invalid length. [ 272.972863][T11697] netlink: 'syz.1.1689': attribute type 29 has an invalid length. [ 272.984415][T11696] netlink: 'syz.1.1689': attribute type 29 has an invalid length. [ 272.993803][T11697] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1689'. [ 273.004052][T11696] IPv6: NLM_F_REPLACE set, but no existing node found! [ 273.013613][T11697] IPv6: NLM_F_REPLACE set, but no existing node found! [ 273.391421][T11730] bridge: RTM_NEWNEIGH with invalid ether address [ 274.337522][T11769] __nla_validate_parse: 8 callbacks suppressed [ 274.337543][T11769] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1711'. [ 274.483285][T11779] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1713'. [ 275.364695][T11825] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1723'. [ 275.659752][ T55] block nbd0: Possible stuck request ffff888055f47000: control (read@0,1024B). Runtime 90 seconds [ 275.670586][ T55] block nbd0: Possible stuck request ffff888055f471c0: control (read@1024,1024B). Runtime 90 seconds [ 275.681824][ T55] block nbd0: Possible stuck request ffff888055f47380: control (read@2048,1024B). Runtime 90 seconds [ 275.693122][ T55] block nbd0: Possible stuck request ffff888055f47540: control (read@3072,1024B). Runtime 90 seconds [ 275.770930][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 275.826246][T11853] netlink: 'syz.4.1729': attribute type 6 has an invalid length. [ 275.876485][T11853] netlink: 'syz.4.1729': attribute type 6 has an invalid length. [ 276.008520][T11861] netlink: 'syz.4.1729': attribute type 7 has an invalid length. [ 276.062590][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'. [ 276.245908][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 276.266336][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 276.376912][T11848] team0 (unregistering): Port device team_slave_0 removed [ 276.401385][T11848] team0 (unregistering): Port device team_slave_1 removed [ 276.410072][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1735'. [ 276.459714][ T928] syz!: Port: 1 Link DOWN [ 276.464818][T11868] veth1_to_bond: entered allmulticast mode [ 276.528952][T11870] veth1_to_bond: left allmulticast mode [ 276.677214][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1736'. [ 276.700744][T11894] batadv1: left allmulticast mode [ 276.718575][T11894] batadv1: left promiscuous mode [ 276.752092][T11894] bridge0: port 3(batadv1) entered disabled state [ 276.860894][T11894] bridge_slave_1: left allmulticast mode [ 276.869756][T11894] bridge_slave_1: left promiscuous mode [ 276.877336][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.905418][T11894] bridge_slave_0: left allmulticast mode [ 276.911198][T11894] bridge_slave_0: left promiscuous mode [ 276.918742][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.155409][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'. [ 277.532196][T11945] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 277.865135][T11954] syz_tun: entered allmulticast mode [ 277.889308][T11950] syz_tun: left allmulticast mode [ 278.025709][T11968] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.198964][T11977] tipc: Resetting bearer [ 278.655166][T11998] syz.4.1766: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 278.684154][T12002] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 278.717386][T11998] CPU: 1 UID: 0 PID: 11998 Comm: syz.4.1766 Not tainted syzkaller #0 PREEMPT(full) [ 278.717416][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.717430][T11998] Call Trace: [ 278.717439][T11998] [ 278.717449][T11998] dump_stack_lvl+0x189/0x250 [ 278.717484][T11998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.717511][T11998] ? __pfx__printk+0x10/0x10 [ 278.717542][T11998] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 278.717568][T11998] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 278.717596][T11998] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 278.717626][T11998] warn_alloc+0x214/0x310 [ 278.717661][T11998] ? stack_depot_save_flags+0x40/0x860 [ 278.717693][T11998] ? __pfx_warn_alloc+0x10/0x10 [ 278.717729][T11998] ? kasan_save_track+0x4f/0x80 [ 278.717757][T11998] ? xskq_create+0x56/0x170 [ 278.717784][T11998] ? xsk_init_queue+0xb0/0x110 [ 278.717807][T11998] ? xsk_setsockopt+0x4dc/0x8d0 [ 278.717831][T11998] ? do_sock_setsockopt+0x179/0x1b0 [ 278.717862][T11998] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 278.717880][T11998] ? do_syscall_64+0xfa/0x3b0 [ 278.717910][T11998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.717941][T11998] __vmalloc_node_range_noprof+0x125/0x12f0 [ 278.718008][T11998] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.718047][T11998] ? __kasan_kmalloc+0x93/0xb0 [ 278.718080][T11998] vmalloc_user_noprof+0xad/0xf0 [ 278.718112][T11998] ? xskq_create+0xbf/0x170 [ 278.718142][T11998] xskq_create+0xbf/0x170 [ 278.718180][T11998] xsk_init_queue+0xb0/0x110 [ 278.718211][T11998] xsk_setsockopt+0x4dc/0x8d0 [ 278.718241][T11998] ? __pfx_xsk_setsockopt+0x10/0x10 [ 278.718268][T11998] ? __pfx_aa_sk_perm+0x10/0x10 [ 278.718304][T11998] ? aa_sock_opt_perm+0xff/0x1b0 [ 278.718328][T11998] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 278.718351][T11998] ? __pfx_xsk_setsockopt+0x10/0x10 [ 278.718379][T11998] do_sock_setsockopt+0x179/0x1b0 [ 278.718419][T11998] __x64_sys_setsockopt+0x13f/0x1b0 [ 278.718447][T11998] do_syscall_64+0xfa/0x3b0 [ 278.718476][T11998] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.718504][T11998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.718525][T11998] ? clear_bhb_loop+0x60/0xb0 [ 278.718551][T11998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.718572][T11998] RIP: 0033:0x7fb47178ebe9 [ 278.718596][T11998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.718614][T11998] RSP: 002b:00007fb472562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 278.718636][T11998] RAX: ffffffffffffffda RBX: 00007fb4719b5fa0 RCX: 00007fb47178ebe9 [ 278.718652][T11998] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 278.718664][T11998] RBP: 00007fb471811e19 R08: 0000000000000004 R09: 0000000000000000 [ 278.718678][T11998] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.718691][T11998] R13: 00007fb4719b6038 R14: 00007fb4719b5fa0 R15: 00007fff2c9a6748 [ 278.718728][T11998] [ 278.718830][T11998] Mem-Info: [ 278.721799][T12002] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 278.740814][T11998] active_anon:5623 inactive_anon:0 isolated_anon:0 [ 278.740814][T11998] active_file:3141 inactive_file:39898 isolated_file:0 [ 278.740814][T11998] unevictable:768 dirty:75 writeback:0 [ 278.740814][T11998] slab_reclaimable:11109 slab_unreclaimable:107845 [ 278.740814][T11998] mapped:29280 shmem:1355 pagetables:1227 [ 278.740814][T11998] sec_pagetables:0 bounce:0 [ 278.740814][T11998] kernel_misc_reclaimable:0 [ 278.740814][T11998] free:1319107 free_pcp:13276 free_cma:0 [ 279.144465][T11998] Node 0 active_anon:22660kB inactive_anon:0kB active_file:12564kB inactive_file:159396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117196kB dirty:300kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13384kB pagetables:5048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 279.206456][T12024] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.251802][T11998] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 279.287919][T11998] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.399711][T11998] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 279.409419][T11998] Node 0 DMA32 free:1365892kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22312kB inactive_anon:0kB active_file:12564kB inactive_file:157820kB unevictable:1536kB writepending:300kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:38140kB local_pcp:19996kB free_cma:0kB [ 279.527968][T11998] lowmem_reserve[]: 0 0 1 1 1 [ 279.558044][T11998] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 279.590775][T12037] __nla_validate_parse: 8 callbacks suppressed [ 279.590796][T12037] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1777'. [ 279.648590][T11998] lowmem_reserve[]: 0 0 0 0 0 [ 279.664966][T11998] Node 1 Normal free:3893484kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16608kB local_pcp:9664kB free_cma:0kB [ 279.733046][T11998] lowmem_reserve[]: 0 0 0 0 0 [ 279.739045][T11998] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 279.752613][T11998] Node 0 DMA32: 1737*4kB (UM) 508*8kB (UM) 250*16kB (UME) 272*32kB (UME) 232*64kB (UM) 41*128kB (UME) 2*256kB (UM) 7*512kB (UM) 5*1024kB (UME) 9*2048kB (UME) 316*4096kB (M) = 1365796kB [ 279.786070][T11998] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 279.851782][T11998] Node 1 Normal: 179*4kB (UME) 26*8kB (UME) 37*16kB (UME) 116*32kB (UME) 30*64kB (UME) 8*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3893484kB [ 279.908586][T11998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.925969][T11998] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.935753][T11998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.959203][T11998] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.971277][T12054] syzkaller0: entered promiscuous mode [ 279.982019][T11998] 44392 total pagecache pages [ 279.990074][T12054] syzkaller0: entered allmulticast mode [ 279.995990][T11998] 0 pages in swap cache [ 280.001485][T12057] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 280.010336][T11998] Free swap = 124996kB [ 280.014721][T11998] Total swap = 124996kB [ 280.018958][T11998] 2097051 pages RAM [ 280.021541][T12057] syzkaller0: Linktype set failed because interface is up [ 280.026467][T11998] 0 pages HighMem/MovableOnly [ 280.036108][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 280.037540][ T12] syzkaller0: tun_net_xmit 48 [ 280.074158][T11998] 425656 pages reserved [ 280.078365][T11998] 0 pages cma reserved [ 280.086655][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.105783][T12054] netlink: 'syz.2.1784': attribute type 1 has an invalid length. [ 280.137466][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1784'. [ 280.175980][T12056] bridge_slave_1 (unregistering): left allmulticast mode [ 280.177002][T12066] tipc: Can't bind to reserved service type 0 [ 280.183963][T12056] bridge_slave_1 (unregistering): left promiscuous mode [ 280.214846][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.556279][T12078] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1794'. [ 280.585675][T12078] netlink: 'syz.3.1794': attribute type 10 has an invalid length. [ 280.602857][T12078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1794'. [ 280.615065][T12078] dummy0: entered promiscuous mode [ 280.629369][T12078] bridge0: port 3(dummy0) entered blocking state [ 280.639099][T12078] bridge0: port 3(dummy0) entered disabled state [ 280.646266][T12078] dummy0: entered allmulticast mode [ 280.659207][T12078] bridge0: port 3(dummy0) entered blocking state [ 280.665736][T12078] bridge0: port 3(dummy0) entered forwarding state [ 280.679984][T12080] tipc: Enabled bearer , priority 12 [ 280.681090][T12078] netlink: 'syz.3.1794': attribute type 10 has an invalid length. [ 280.703025][T12078] veth0_vlan: entered allmulticast mode [ 280.841946][T12090] netlink: 'syz.0.1797': attribute type 10 has an invalid length. [ 280.920868][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 280.960305][T12094] netlink: 'syz.3.1799': attribute type 4 has an invalid length. [ 281.029389][T12098] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1799'. [ 282.194388][T12098] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.035485][T12149] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1813'. [ 283.208948][T12154] netlink: 'syz.0.1814': attribute type 29 has an invalid length. [ 283.340008][T12164] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.1814'. [ 283.349749][T12155] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.1814'. [ 283.396103][T12163] batman_adv: batadv0: Removing interface: team0 [ 283.473484][T12163] bond0: (slave bond_slave_0): Releasing backup interface [ 283.553825][T12163] bond0: (slave bond_slave_1): Releasing backup interface [ 283.710777][T12163] team0: Port device team_slave_0 removed [ 283.728432][T12183] netlink: 'syz.3.1821': attribute type 6 has an invalid length. [ 283.770134][T12183] netlink: 'syz.3.1821': attribute type 5 has an invalid length. [ 283.803375][T12163] team0: Port device team_slave_1 removed [ 283.818395][T12163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.846863][T12163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.915016][T12163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.964980][T12163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.038479][T12163] bond0: (slave wlan1): Releasing backup interface [ 284.095907][T12163] bond2: (slave veth3): Releasing active interface [ 284.152209][T12163] bond3: (slave gretap1): Releasing active interface [ 284.203164][T12163] bond4: (slave geneve2): Releasing backup interface [ 284.324632][T12206] openvswitch: netlink: Message has 5 unknown bytes. [ 284.409106][ T77] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 284.475596][ T77] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 284.499306][ T77] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 284.593680][ T6799] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 284.881781][T12235] __nla_validate_parse: 7 callbacks suppressed [ 284.881801][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 284.989584][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 285.056242][T12242] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 285.070885][T12242] bond4: (slave vcan1): Error -95 calling set_mac_address [ 285.240602][T12251] GUP no longer grows the stack in syz.0.1838 (12251): 200000003000-20000000a000 (200000001000) [ 285.252036][T12251] CPU: 1 UID: 0 PID: 12251 Comm: syz.0.1838 Not tainted syzkaller #0 PREEMPT(full) [ 285.252067][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.252082][T12251] Call Trace: [ 285.252091][T12251] [ 285.252101][T12251] dump_stack_lvl+0x189/0x250 [ 285.252140][T12251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.252168][T12251] ? __pfx__printk+0x10/0x10 [ 285.252205][T12251] ? find_vma+0xe7/0x160 [ 285.252236][T12251] ? __lock_acquire+0xab9/0xd20 [ 285.252282][T12251] __get_user_pages+0x24d0/0x2ce0 [ 285.252312][T12251] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 285.252398][T12251] ? rcu_is_watching+0x15/0xb0 [ 285.252428][T12251] __gup_longterm_locked+0xde9/0x1660 [ 285.252474][T12251] ? sanity_check_pinned_pages+0x123a/0x1300 [ 285.252510][T12251] gup_fast_fallback+0x1e6a/0x2010 [ 285.252578][T12251] ? __pfx_gup_fast_fallback+0x10/0x10 [ 285.252624][T12251] ? pin_user_pages_fast+0x4d/0xb0 [ 285.252656][T12251] iov_iter_extract_pages+0x35a/0x5e0 [ 285.252693][T12251] extract_iter_to_sg+0xe46/0x24e0 [ 285.252746][T12251] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 285.252803][T12251] ? __asan_memset+0x22/0x50 [ 285.252832][T12251] af_alg_get_rsgl+0x436/0x810 [ 285.252881][T12251] aead_recvmsg+0x4cc/0x13f0 [ 285.252944][T12251] ? __pfx_aead_recvmsg+0x10/0x10 [ 285.252978][T12251] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 285.253004][T12251] ? __pfx_aead_recvmsg+0x10/0x10 [ 285.253035][T12251] sock_recvmsg_nosec+0x186/0x1c0 [ 285.253070][T12251] ____sys_recvmsg+0x3aa/0x460 [ 285.253105][T12251] ? __pfx_____sys_recvmsg+0x10/0x10 [ 285.253147][T12251] ? import_iovec+0x74/0xa0 [ 285.253176][T12251] ___sys_recvmsg+0x1b5/0x510 [ 285.253206][T12251] ? __pfx____sys_recvmsg+0x10/0x10 [ 285.253270][T12251] ? __might_fault+0xb0/0x130 [ 285.253305][T12251] do_recvmmsg+0x307/0x770 [ 285.253340][T12251] ? __pfx_do_recvmmsg+0x10/0x10 [ 285.253359][T12251] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 285.253416][T12251] ? __pfx_do_futex+0x10/0x10 [ 285.253466][T12251] __x64_sys_recvmmsg+0x190/0x240 [ 285.253493][T12251] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 285.253521][T12251] ? rcu_is_watching+0x15/0xb0 [ 285.253562][T12251] ? do_syscall_64+0xbe/0x3b0 [ 285.253597][T12251] do_syscall_64+0xfa/0x3b0 [ 285.253626][T12251] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.253655][T12251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.253675][T12251] ? clear_bhb_loop+0x60/0xb0 [ 285.253702][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.253722][T12251] RIP: 0033:0x7f2545f8ebe9 [ 285.253742][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.253760][T12251] RSP: 002b:00007f2546e14038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 285.253781][T12251] RAX: ffffffffffffffda RBX: 00007f25461b5fa0 RCX: 00007f2545f8ebe9 [ 285.253797][T12251] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000009 [ 285.253810][T12251] RBP: 00007f2546011e19 R08: 0000000000000000 R09: 0000000000000000 [ 285.253823][T12251] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 285.253835][T12251] R13: 00007f25461b6038 R14: 00007f25461b5fa0 R15: 00007ffecc8b1c58 [ 285.253878][T12251] [ 285.854692][T12264] netlink: 'syz.1.1842': attribute type 1 has an invalid length. [ 285.896445][T12263] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 285.927475][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 286.022271][T12278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1845'. [ 286.031955][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1843'. [ 286.059778][T12271] bridge_slave_1 (unregistering): left allmulticast mode [ 286.070171][T12271] bridge_slave_1 (unregistering): left promiscuous mode [ 286.078309][T12271] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.127170][T12274] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 286.140425][T12274] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 286.244385][T12263] gretap2: entered promiscuous mode [ 286.312162][T12263] bond7: (slave gretap2): making interface the new active one [ 286.320420][T12263] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 286.339205][T12283] macvlan4: entered promiscuous mode [ 286.349683][T12283] macvlan4: entered allmulticast mode [ 286.357217][T12283] bond7: entered promiscuous mode [ 286.375263][T12283] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 286.393395][T12283] bond7: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 286.428073][T12283] bond7: left promiscuous mode [ 286.619877][T12300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.667076][T12301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.678525][T12303] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1851'. [ 286.795046][T12308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1853'. [ 286.822673][T12310] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 287.373904][T12341] netlink: zone id is out of range [ 287.392313][T12346] vlan1: entered allmulticast mode [ 287.392397][T12341] netlink: zone id is out of range [ 287.411981][T12346] veth0_vlan: entered allmulticast mode [ 287.431439][T12346] netlink: 'syz.1.1865': attribute type 11 has an invalid length. [ 287.446125][T12341] netlink: del zone limit has 4 unknown bytes [ 287.462134][T12346] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1865'. [ 287.840552][T12371] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 288.357082][T12385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1874'. [ 288.668369][T12398] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 288.905113][T12404] bond7: (slave gretap2): making interface the new active one [ 288.942817][T12404] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 289.316315][T12435] netlink: 'syz.1.1892': attribute type 1 has an invalid length. [ 289.362010][T12435] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1892'. [ 289.520195][T12446] batadv2: entered allmulticast mode [ 289.574116][T12448] netlink: 'syz.0.1894': attribute type 2 has an invalid length. [ 289.955888][T12470] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 289.980396][T12470] __nla_validate_parse: 2 callbacks suppressed [ 289.980418][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 290.000682][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1902'. [ 290.060722][T12475] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1904'. [ 290.147134][T12476] tipc: Enabling of bearer rejected, already enabled [ 290.180719][T12485] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1907'. [ 290.207197][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 290.219524][T12485] gretap0: entered promiscuous mode [ 290.248337][T12488] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1907'. [ 290.293653][T12488] 0ªî{X¹¦: renamed from gretap0 [ 290.321014][T12488] 0ªî{X¹¦: left promiscuous mode [ 290.336789][T12488] 0ªî{X¹¦: entered allmulticast mode [ 290.356887][T12488] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 290.449527][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 290.637539][T12511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1912'. [ 290.768890][T12519] netlink: 'syz.3.1914': attribute type 10 has an invalid length. [ 290.786069][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 290.830982][T12522] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.1915'. [ 290.849669][T12522] netlink: 'syz.2.1915': attribute type 20 has an invalid length. [ 290.894845][ T6799] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.895004][T12522] netlink: 'syz.2.1915': attribute type 20 has an invalid length. [ 290.914503][ T6799] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.954887][T12527] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 290.965517][T12527] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 290.976573][ T6799] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.019535][ T6799] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.143132][T12535] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 291.182062][T12535] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 291.668146][T12553] veth3: entered promiscuous mode [ 291.676557][T12556] netlink: 'syz.2.1925': attribute type 4 has an invalid length. [ 292.249630][T12589] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 292.419743][T12598] netlink: 'syz.3.1937': attribute type 32 has an invalid length. [ 292.450777][T12598] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 293.079300][T12631] hsr_slave_0: left promiscuous mode [ 293.126524][T12631] hsr_slave_1: left promiscuous mode [ 293.182554][T12633] netlink: 'syz.2.1948': attribute type 27 has an invalid length. [ 293.356958][T12648] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 293.628273][T12664] geneve2: entered promiscuous mode [ 293.643872][T12664] geneve2: entered allmulticast mode [ 293.673089][ T6799] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 293.691212][ T6797] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 293.736979][ T6797] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 293.785040][ T6797] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 294.535954][T12711] netlink: 'syz.0.1969': attribute type 4 has an invalid length. [ 294.643718][T12717] netlink: 'syz.0.1969': attribute type 4 has an invalid length. [ 294.676681][T12716] geneve3: entered promiscuous mode [ 294.691867][T12716] geneve3: entered allmulticast mode [ 294.808856][T12723] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 294.846222][T12720] openvswitch: netlink: Message has 8 unknown bytes. [ 295.135132][T12741] __nla_validate_parse: 18 callbacks suppressed [ 295.135156][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'. [ 295.327040][T12747] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1981'. [ 295.507061][T12760] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1986'. [ 296.144088][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 296.171101][T12798] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 296.182684][T12798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.198346][T12797] macvlan3: entered allmulticast mode [ 296.233016][T12797] bond0: (slave macvlan3): Opening slave failed [ 296.334106][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1999'. [ 296.395117][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'. [ 296.630169][T12824] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 296.722695][T12832] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 296.763777][T12824] bridge0: port 3(dummy0) entered disabled state [ 296.823354][T12824] dummy0: left allmulticast mode [ 296.838363][T12824] dummy0: left promiscuous mode [ 296.861677][T12824] bridge0: port 3(dummy0) entered disabled state [ 296.906278][T12832] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 297.740364][T12868] netlink: 'syz.4.2019': attribute type 13 has an invalid length. [ 297.852963][T12868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.906105][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 298.125502][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2026'. [ 298.224336][T12894] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 298.244076][T12894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2027'. [ 298.279242][T12894] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 298.288670][T12904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2029'. [ 299.030992][T12937] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 299.209207][T12945] 8021q: adding VLAN 0 to HW filter on device bond10 [ 299.231580][T12945] bond9: (slave bond10): making interface the new active one [ 299.251761][T12945] bond9: (slave bond10): Enslaving as an active interface with an up link [ 299.287232][T12937] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 299.307348][T12937] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 299.736685][T12978] IPVS: Unknown mcast interface: nicvf0 [ 300.689234][T13027] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 300.717694][T13027] __nla_validate_parse: 4 callbacks suppressed [ 300.717714][T13027] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2069'. [ 300.741971][T13027] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 301.282831][T13064] netlink: 2420 bytes leftover after parsing attributes in process `syz.0.2079'. [ 301.319077][T13064] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2079'. [ 301.341954][T13064] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2079'. [ 301.357260][T13064] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2079'. [ 301.472769][T13070] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2081'. [ 301.520673][T13072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.713685][T13085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2086'. [ 301.777605][T13089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.807041][T13089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.831766][T13089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.839297][T13089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.906203][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'. [ 301.990593][T13099] netlink: 'syz.2.2089': attribute type 4 has an invalid length. [ 302.160960][T13104] netlink: 'syz.1.2091': attribute type 1 has an invalid length. [ 302.170763][T13104] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2091'. [ 302.454881][T13119] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2093'. [ 302.466107][T13119] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 302.648568][T13127] nbd: socks must be embedded in a SOCK_ITEM attr [ 302.899677][T13145] openvswitch: netlink: Flow key attr not present in new flow. [ 303.169475][T13160] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 303.198098][T13160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.714975][ T55] block nbd0: Possible stuck request ffff888055f47000: control (read@0,1024B). Runtime 120 seconds [ 305.726148][ T55] block nbd0: Possible stuck request ffff888055f471c0: control (read@1024,1024B). Runtime 120 seconds [ 305.737204][ T55] block nbd0: Possible stuck request ffff888055f47380: control (read@2048,1024B). Runtime 120 seconds [ 305.748349][ T55] block nbd0: Possible stuck request ffff888055f47540: control (read@3072,1024B). Runtime 120 seconds [ 317.237369][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.793386][ T55] block nbd0: Possible stuck request ffff888055f47000: control (read@0,1024B). Runtime 150 seconds [ 335.804385][ T55] block nbd0: Possible stuck request ffff888055f471c0: control (read@1024,1024B). Runtime 150 seconds [ 335.815492][ T55] block nbd0: Possible stuck request ffff888055f47380: control (read@2048,1024B). Runtime 150 seconds [ 335.826621][ T55] block nbd0: Possible stuck request ffff888055f47540: control (read@3072,1024B). Runtime 150 seconds [ 358.193741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.876005][ T55] block nbd0: Possible stuck request ffff888055f47000: control (read@0,1024B). Runtime 180 seconds [ 365.886993][ T55] block nbd0: Possible stuck request ffff888055f471c0: control (read@1024,1024B). Runtime 180 seconds [ 365.898219][ T55] block nbd0: Possible stuck request ffff888055f47380: control (read@2048,1024B). Runtime 180 seconds [ 365.909490][ T55] block nbd0: Possible stuck request ffff888055f47540: control (read@3072,1024B). Runtime 180 seconds [ 367.156262][ T5234] udevd[5234]: worker [5876] /devices/virtual/block/nbd0 timeout; kill it [ 367.165200][ T5234] udevd[5234]: seq 14087 '/devices/virtual/block/nbd0' killed [ 378.679216][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.953861][ T55] block nbd0: Possible stuck request ffff888055f47000: control (read@0,1024B). Runtime 210 seconds [ 395.964959][ T55] block nbd0: Possible stuck request ffff888055f471c0: control (read@1024,1024B). Runtime 210 seconds [ 395.976071][ T55] block nbd0: Possible stuck request ffff888055f47380: control (read@2048,1024B). Runtime 210 seconds [ 395.987403][ T55] block nbd0: Possible stuck request ffff888055f47540: control (read@3072,1024B). Runtime 210 seconds [ 426.032490][ T55] block nbd0: Possible stuck request ffff888055f47000: control (read@0,1024B). Runtime 240 seconds [ 426.043504][ T55] block nbd0: Possible stuck request ffff888055f471c0: control (read@1024,1024B). Runtime 240 seconds [ 426.054696][ T55] block nbd0: Possible stuck request ffff888055f47380: control (read@2048,1024B). Runtime 240 seconds [ 426.065915][ T55] block nbd0: Possible stuck request ffff888055f47540: control (read@3072,1024B). Runtime 240 seconds [ 440.124318][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.632065][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 451.639688][ T31] Not tainted syzkaller #0 [ 451.644795][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.653588][ T31] task:kworker/0:1 state:D stack:21000 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 451.665846][ T31] Workqueue: events rfkill_sync_work [ 451.671193][ T31] Call Trace: [ 451.674619][ T31] [ 451.677600][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 451.682151][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 451.688254][ T31] ? __pfx___schedule+0x10/0x10 [ 451.693565][ T31] ? schedule+0x91/0x360 [ 451.697878][ T31] schedule+0x165/0x360 [ 451.702171][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.707666][ T31] __mutex_lock+0x7e6/0x1360 [ 451.712385][ T31] ? __mutex_lock+0x5b6/0x1360 [ 451.717218][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 451.722599][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 451.734175][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.739438][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 451.785485][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 451.805813][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 451.811702][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 451.816854][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 451.822718][ T31] rfkill_set_block+0x1cf/0x440 [ 451.827621][ T31] rfkill_sync_work+0x114/0x200 [ 451.833178][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 451.838967][ T31] process_scheduled_works+0xae1/0x17b0 [ 451.844615][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 451.850641][ T31] worker_thread+0x8a0/0xda0 [ 451.855325][ T31] kthread+0x711/0x8a0 [ 451.859417][ T31] ? __pfx_worker_thread+0x10/0x10 [ 451.864621][ T31] ? __pfx_kthread+0x10/0x10 [ 451.869248][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.874538][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.879766][ T31] ? __pfx_kthread+0x10/0x10 [ 451.884408][ T31] ret_from_fork+0x3f9/0x770 [ 451.889026][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 451.894221][ T31] ? __switch_to_asm+0x39/0x70 [ 451.899013][ T31] ? __switch_to_asm+0x33/0x70 [ 451.903912][ T31] ? __pfx_kthread+0x10/0x10 [ 451.908538][ T31] ret_from_fork_asm+0x1a/0x30 [ 451.913377][ T31] [ 451.916449][ T31] INFO: task kworker/0:2:120 blocked for more than 143 seconds. [ 451.924160][ T31] Not tainted syzkaller #0 [ 451.929113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.937835][ T31] task:kworker/0:2 state:D stack:23496 pid:120 tgid:120 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 451.949977][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 451.956932][ T31] Call Trace: [ 451.960231][ T31] [ 451.963232][ T31] __schedule+0x1798/0x4cc0 [ 451.967777][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 451.973189][ T31] ? __pfx___schedule+0x10/0x10 [ 451.978060][ T31] ? schedule+0x91/0x360 [ 451.982460][ T31] schedule+0x165/0x360 [ 451.986651][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.992192][ T31] __mutex_lock+0x7e6/0x1360 [ 451.996818][ T31] ? __mutex_lock+0x5b6/0x1360 [ 452.001661][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 452.007951][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.013049][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 452.018788][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 452.024561][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 452.030666][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 452.036983][ T31] process_scheduled_works+0xae1/0x17b0 [ 452.042647][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 452.048662][ T31] worker_thread+0x8a0/0xda0 [ 452.053497][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.059950][ T31] ? __kthread_parkme+0x7b/0x200 [ 452.064958][ T31] kthread+0x711/0x8a0 [ 452.069060][ T31] ? __pfx_worker_thread+0x10/0x10 [ 452.074189][ T31] ? __pfx_kthread+0x10/0x10 [ 452.078786][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.084051][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.089288][ T31] ? __pfx_kthread+0x10/0x10 [ 452.093910][ T31] ret_from_fork+0x3f9/0x770 [ 452.098619][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 452.103829][ T31] ? __switch_to_asm+0x39/0x70 [ 452.108638][ T31] ? __switch_to_asm+0x33/0x70 [ 452.113585][ T31] ? __pfx_kthread+0x10/0x10 [ 452.118219][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.123081][ T31] [ 452.126250][ T31] INFO: task syz.1.2096:13124 blocked for more than 143 seconds. [ 452.134009][ T31] Not tainted syzkaller #0 [ 452.138957][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.147707][ T31] task:syz.1.2096 state:D stack:25096 pid:13124 tgid:13124 ppid:5870 task_flags:0x400040 flags:0x00004004 [ 452.159872][ T31] Call Trace: [ 452.164695][ T31] [ 452.167753][ T31] __schedule+0x1798/0x4cc0 [ 452.172610][ T31] ? validate_chain+0x897/0x2140 [ 452.177582][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.182586][ T31] ? __pfx___schedule+0x10/0x10 [ 452.187495][ T31] ? schedule+0x91/0x360 [ 452.192187][ T31] schedule+0x165/0x360 [ 452.196393][ T31] schedule_timeout+0x9a/0x270 [ 452.201183][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 452.206758][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.212392][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.217664][ T31] ? wait_for_completion+0x267/0x5d0 [ 452.223102][ T31] wait_for_completion+0x2bf/0x5d0 [ 452.228261][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 452.234039][ T31] ? __flush_work+0xd2/0xbc0 [ 452.238646][ T31] ? __flush_work+0xd2/0xbc0 [ 452.243298][ T31] __flush_work+0x9b9/0xbc0 [ 452.247836][ T31] ? __flush_work+0xd2/0xbc0 [ 452.253402][ T31] ? __pfx___flush_work+0x10/0x10 [ 452.258462][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 452.264180][ T31] ? __pfx___cancel_work+0x10/0x10 [ 452.269342][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 452.275235][ T31] __cancel_work_sync+0xbe/0x110 [ 452.280207][ T31] rfkill_unregister+0x92/0x220 [ 452.285213][ T31] nfc_unregister_device+0x96/0x2a0 [ 452.290447][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 452.296372][ T31] virtual_ncidev_close+0x56/0x90 [ 452.301422][ T31] __fput+0x44c/0xa70 [ 452.305653][ T31] task_work_run+0x1d1/0x260 [ 452.310280][ T31] ? __pfx_task_work_run+0x10/0x10 [ 452.315454][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 452.320927][ T31] exit_to_user_mode_loop+0xec/0x110 [ 452.326435][ T31] do_syscall_64+0x2bd/0x3b0 [ 452.331045][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.337209][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.343523][ T31] ? clear_bhb_loop+0x60/0xb0 [ 452.348259][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.356468][ T31] RIP: 0033:0x7f64c038ebe9 [ 452.360915][ T31] RSP: 002b:00007ffde5ef7ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 452.369492][ T31] RAX: 0000000000000000 RBX: 00007f64c05b7da0 RCX: 00007f64c038ebe9 [ 452.377621][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 452.386041][ T31] RBP: 00007f64c05b7da0 R08: 000000000000021c R09: 0000001ee5ef7daf [ 452.394163][ T31] R10: 00007f64c05b7cb0 R11: 0000000000000246 R12: 000000000004a125 [ 452.402285][ T31] R13: 00007f64c05b6090 R14: ffffffffffffffff R15: 00007ffde5ef7bd0 [ 452.410320][ T31] [ 452.413508][ T31] INFO: task syz.3.2099:13136 blocked for more than 144 seconds. [ 452.421250][ T31] Not tainted syzkaller #0 [ 452.426464][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.435539][ T31] task:syz.3.2099 state:D stack:26696 pid:13136 tgid:13135 ppid:5868 task_flags:0x400040 flags:0x00004004 [ 452.447982][ T31] Call Trace: [ 452.451304][ T31] [ 452.454315][ T31] __schedule+0x1798/0x4cc0 [ 452.458856][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.463864][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.468749][ T31] ? __pfx___schedule+0x10/0x10 [ 452.473688][ T31] ? schedule+0x91/0x360 [ 452.477976][ T31] schedule+0x165/0x360 [ 452.482266][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.487849][ T31] __mutex_lock+0x7e6/0x1360 [ 452.492578][ T31] ? __mutex_lock+0x5b6/0x1360 [ 452.497388][ T31] ? rfkill_fop_open+0x12d/0x820 [ 452.502491][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.507605][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 452.513066][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 452.518564][ T31] rfkill_fop_open+0x12d/0x820 [ 452.523486][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 452.528816][ T31] misc_open+0x2b9/0x330 [ 452.533132][ T31] chrdev_open+0x4c9/0x5e0 [ 452.537564][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 452.542828][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 452.549200][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 452.554227][ T31] do_dentry_open+0x950/0x13f0 [ 452.559027][ T31] vfs_open+0x3b/0x340 [ 452.563662][ T31] ? path_openat+0x2ecd/0x3830 [ 452.568454][ T31] path_openat+0x2ee5/0x3830 [ 452.573142][ T31] ? arch_stack_walk+0xfc/0x150 [ 452.578032][ T31] ? stack_depot_save_flags+0x40/0x860 [ 452.583648][ T31] ? __pfx_path_openat+0x10/0x10 [ 452.588786][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.595604][ T31] do_filp_open+0x1fa/0x410 [ 452.600203][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.605200][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 452.610288][ T31] ? _raw_spin_unlock+0x28/0x50 [ 452.615334][ T31] ? alloc_fd+0x64c/0x6c0 [ 452.619710][ T31] do_sys_openat2+0x121/0x1c0 [ 452.624530][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.629783][ T31] ? exc_page_fault+0x76/0xf0 [ 452.634567][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 452.639895][ T31] __x64_sys_openat+0x138/0x170 [ 452.644853][ T31] do_syscall_64+0xfa/0x3b0 [ 452.649370][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.655050][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.661954][ T31] ? clear_bhb_loop+0x60/0xb0 [ 452.666665][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.672687][ T31] RIP: 0033:0x7fb5edb8ebe9 [ 452.677230][ T31] RSP: 002b:00007fb5ee9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 452.685766][ T31] RAX: ffffffffffffffda RBX: 00007fb5eddb5fa0 RCX: 00007fb5edb8ebe9 [ 452.693931][ T31] RDX: 0000000000044000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 452.702072][ T31] RBP: 00007fb5edc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 452.710075][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.718107][ T31] R13: 00007fb5eddb6038 R14: 00007fb5eddb5fa0 R15: 00007ffc85c8dac8 [ 452.726199][ T31] [ 452.729238][ T31] INFO: task syz.2.2105:13165 blocked for more than 144 seconds. [ 452.737074][ T31] Not tainted syzkaller #0 [ 452.742147][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.750843][ T31] task:syz.2.2105 state:D stack:23656 pid:13165 tgid:13164 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 452.763246][ T31] Call Trace: [ 452.766645][ T31] [ 452.769591][ T31] __schedule+0x1798/0x4cc0 [ 452.774178][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.779064][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.784030][ T31] ? __pfx___schedule+0x10/0x10 [ 452.788904][ T31] ? schedule+0x91/0x360 [ 452.793218][ T31] schedule+0x165/0x360 [ 452.797437][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.803097][ T31] __mutex_lock+0x7e6/0x1360 [ 452.807748][ T31] ? __mutex_lock+0x5b6/0x1360 [ 452.812604][ T31] ? rfkill_register+0x37/0x8e0 [ 452.817485][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.822659][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 452.827621][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.833098][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 452.838408][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 452.844188][ T31] rfkill_register+0x37/0x8e0 [ 452.848903][ T31] wiphy_register+0x214c/0x28d0 [ 452.853881][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 452.859113][ T31] ? ieee80211_init_rate_ctrl_alg+0x114/0x5f0 [ 452.865375][ T31] ieee80211_register_hw+0x3425/0x4080 [ 452.870874][ T31] ? ieee80211_register_hw+0x1471/0x4080 [ 452.876739][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 452.882710][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.889072][ T31] ? __hrtimer_setup+0x187/0x210 [ 452.894131][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 452.899984][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 452.905839][ T31] ? finish_task_switch+0x266/0x950 [ 452.911061][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 452.917385][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 452.923095][ T31] ? __sock_sendmsg+0x219/0x270 [ 452.927975][ T31] ? ____sys_sendmsg+0x505/0x830 [ 452.932973][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 452.938113][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 452.943962][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 452.949525][ T31] ? __nla_parse+0x40/0x60 [ 452.954041][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 452.960483][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 452.966191][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 452.972350][ T31] ? bpf_lsm_capable+0x9/0x20 [ 452.977056][ T31] ? security_capable+0x7e/0x2e0 [ 452.982310][ T31] genl_rcv_msg+0x60e/0x790 [ 452.986845][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.993988][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 452.999593][ T31] ? __asan_memcpy+0x40/0x70 [ 453.005773][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.011213][ T31] netlink_rcv_skb+0x205/0x470 [ 453.016089][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.020974][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.026138][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.031470][ T31] ? down_read+0x1ad/0x2e0 [ 453.035930][ T31] genl_rcv+0x28/0x40 [ 453.039917][ T31] netlink_unicast+0x82f/0x9e0 [ 453.045765][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 453.051105][ T31] ? netlink_sendmsg+0x642/0xb30 [ 453.056089][ T31] ? skb_put+0x11b/0x210 [ 453.060335][ T31] netlink_sendmsg+0x805/0xb30 [ 453.066690][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.072081][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 453.077038][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.082593][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.087918][ T31] __sock_sendmsg+0x219/0x270 [ 453.092880][ T31] ____sys_sendmsg+0x505/0x830 [ 453.097768][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.103190][ T31] ? import_iovec+0x74/0xa0 [ 453.107706][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 453.112580][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.117869][ T31] ? __fget_files+0x2a/0x420 [ 453.122688][ T31] ? __fget_files+0x3a0/0x420 [ 453.127429][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 453.132467][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.137979][ T31] ? rcu_is_watching+0x15/0xb0 [ 453.142940][ T31] ? do_syscall_64+0xbe/0x3b0 [ 453.147667][ T31] do_syscall_64+0xfa/0x3b0 [ 453.152756][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.157994][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.164219][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.168933][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.174958][ T31] RIP: 0033:0x7f453778ebe9 [ 453.179395][ T31] RSP: 002b:00007f4538658038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.187943][ T31] RAX: ffffffffffffffda RBX: 00007f45379b5fa0 RCX: 00007f453778ebe9 [ 453.195977][ T31] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 453.204189][ T31] RBP: 00007f4537811e19 R08: 0000000000000000 R09: 0000000000000000 [ 453.212216][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.220208][ T31] R13: 00007f45379b6038 R14: 00007f45379b5fa0 R15: 00007ffda86b78e8 [ 453.228749][ T31] [ 453.231935][ T31] INFO: task syz.0.2108:13180 blocked for more than 144 seconds. [ 453.239692][ T31] Not tainted syzkaller #0 [ 453.244988][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.253750][ T31] task:syz.0.2108 state:D stack:27016 pid:13180 tgid:13179 ppid:5869 task_flags:0x400140 flags:0x00004004 [ 453.265859][ T31] Call Trace: [ 453.269199][ T31] [ 453.272226][ T31] __schedule+0x1798/0x4cc0 [ 453.276778][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.281883][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.286774][ T31] ? __pfx___schedule+0x10/0x10 [ 453.291693][ T31] ? schedule+0x91/0x360 [ 453.295943][ T31] schedule+0x165/0x360 [ 453.300101][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.305663][ T31] __mutex_lock+0x7e6/0x1360 [ 453.310262][ T31] ? __mutex_lock+0x5b6/0x1360 [ 453.315378][ T31] ? genl_rcv_msg+0x10d/0x790 [ 453.320088][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.325283][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 453.330429][ T31] ? radix_tree_lookup+0x240/0x290 [ 453.335601][ T31] genl_rcv_msg+0x10d/0x790 [ 453.340644][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.345784][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 453.350850][ T31] ? __asan_memcpy+0x40/0x70 [ 453.355497][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.360893][ T31] netlink_rcv_skb+0x205/0x470 [ 453.365851][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.370736][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.375807][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.381142][ T31] ? down_read+0x1ad/0x2e0 [ 453.385813][ T31] genl_rcv+0x28/0x40 [ 453.389825][ T31] netlink_unicast+0x82f/0x9e0 [ 453.397325][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 453.402762][ T31] ? netlink_sendmsg+0x642/0xb30 [ 453.407734][ T31] ? skb_put+0x11b/0x210 [ 453.412051][ T31] netlink_sendmsg+0x805/0xb30 [ 453.416855][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.422460][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 453.427456][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.432773][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.438067][ T31] __sock_sendmsg+0x219/0x270 [ 453.442895][ T31] __sys_sendto+0x3bd/0x520 [ 453.447430][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 453.452546][ T31] ? count_memcg_event_mm+0x21/0x260 [ 453.457967][ T31] ? exc_page_fault+0x76/0xf0 [ 453.462782][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 453.468105][ T31] __x64_sys_sendto+0xde/0x100 [ 453.473214][ T31] do_syscall_64+0xfa/0x3b0 [ 453.477750][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.483113][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.489203][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.493933][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.499827][ T31] RIP: 0033:0x7f2545f90a7c [ 453.504343][ T31] RSP: 002b:00007f2546e12ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 453.512871][ T31] RAX: ffffffffffffffda RBX: 00007f2546e12fc0 RCX: 00007f2545f90a7c [ 453.520863][ T31] RDX: 0000000000000020 RSI: 00007f2546e13010 RDI: 0000000000000007 [ 453.529079][ T31] RBP: 0000000000000000 R08: 00007f2546e12f14 R09: 000000000000000c [ 453.537297][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 453.545591][ T31] R13: 00007f2546e12f68 R14: 00007f2546e13010 R15: 0000000000000000 [ 453.553746][ T31] [ 453.556809][ T31] INFO: task syz.4.2110:13186 blocked for more than 145 seconds. [ 453.565633][ T31] Not tainted syzkaller #0 [ 453.570619][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.579367][ T31] task:syz.4.2110 state:D stack:26920 pid:13186 tgid:13185 ppid:5861 task_flags:0x400040 flags:0x00004004 [ 453.591409][ T31] Call Trace: [ 453.594783][ T31] [ 453.597746][ T31] __schedule+0x1798/0x4cc0 [ 453.602564][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.607465][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.612430][ T31] ? __pfx___schedule+0x10/0x10 [ 453.617313][ T31] ? schedule+0x91/0x360 [ 453.621611][ T31] schedule+0x165/0x360 [ 453.625799][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.631281][ T31] __mutex_lock+0x7e6/0x1360 [ 453.636286][ T31] ? __mutex_lock+0x5b6/0x1360 [ 453.641099][ T31] ? genl_rcv_msg+0x10d/0x790 [ 453.645979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.651048][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 453.656226][ T31] ? radix_tree_lookup+0x240/0x290 [ 453.661361][ T31] genl_rcv_msg+0x10d/0x790 [ 453.665963][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.671007][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 453.676087][ T31] ? __asan_memcpy+0x40/0x70 [ 453.680684][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.686262][ T31] netlink_rcv_skb+0x205/0x470 [ 453.691062][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.695999][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.702239][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.707586][ T31] ? down_read+0x1ad/0x2e0 [ 453.712414][ T31] genl_rcv+0x28/0x40 [ 453.716448][ T31] netlink_unicast+0x82f/0x9e0 [ 453.721240][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 453.726683][ T31] ? netlink_sendmsg+0x642/0xb30 [ 453.731814][ T31] ? skb_put+0x11b/0x210 [ 453.736172][ T31] netlink_sendmsg+0x805/0xb30 [ 453.740976][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.747814][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 453.752997][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.758313][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.763771][ T31] __sock_sendmsg+0x219/0x270 [ 453.768499][ T31] __sys_sendto+0x3bd/0x520 [ 453.773142][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 453.778243][ T31] ? fd_install+0x97/0x540 [ 453.782938][ T31] ? fd_install+0x30d/0x540 [ 453.787497][ T31] __x64_sys_sendto+0xde/0x100 [ 453.792476][ T31] do_syscall_64+0xfa/0x3b0 [ 453.797033][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.802415][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.808528][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.813364][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.819306][ T31] RIP: 0033:0x7fb471790a7c [ 453.823920][ T31] RSP: 002b:00007fb472560ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 453.832482][ T31] RAX: ffffffffffffffda RBX: 00007fb472560fc0 RCX: 00007fb471790a7c [ 453.840496][ T31] RDX: 0000000000000020 RSI: 00007fb472561010 RDI: 000000000000000a [ 453.848641][ T31] RBP: 0000000000000000 R08: 00007fb472560f14 R09: 000000000000000c [ 453.856990][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 453.865317][ T31] R13: 00007fb472560f68 R14: 00007fb472561010 R15: 0000000000000000 [ 453.873388][ T31] [ 453.876433][ T31] INFO: task syz.4.2110:13187 blocked for more than 145 seconds. [ 453.884356][ T31] Not tainted syzkaller #0 [ 453.889291][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.898012][ T31] task:syz.4.2110 state:D stack:28360 pid:13187 tgid:13185 ppid:5861 task_flags:0x400040 flags:0x00004004 [ 453.910072][ T31] Call Trace: [ 453.913427][ T31] [ 453.916390][ T31] __schedule+0x1798/0x4cc0 [ 453.920987][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.926058][ T31] ? __lock_acquire+0xab9/0xd20 [ 453.930953][ T31] ? __pfx___schedule+0x10/0x10 [ 453.935912][ T31] ? schedule+0x91/0x360 [ 453.940197][ T31] schedule+0x165/0x360 [ 453.944526][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.950025][ T31] __mutex_lock+0x7e6/0x1360 [ 453.954831][ T31] ? __mutex_lock+0x5b6/0x1360 [ 453.959617][ T31] ? genl_rcv_msg+0x10d/0x790 [ 453.964422][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.969465][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 453.974864][ T31] ? radix_tree_lookup+0x240/0x290 [ 453.980011][ T31] genl_rcv_msg+0x10d/0x790 [ 453.984709][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.989744][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 453.994820][ T31] ? __asan_memcpy+0x40/0x70 [ 453.999436][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 454.004954][ T31] netlink_rcv_skb+0x205/0x470 [ 454.009746][ T31] ? __lock_acquire+0xab9/0xd20 [ 454.014693][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.019724][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.025136][ T31] ? down_read+0x1ad/0x2e0 [ 454.029564][ T31] genl_rcv+0x28/0x40 [ 454.035071][ T31] netlink_unicast+0x82f/0x9e0 [ 454.039904][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 454.046885][ T31] ? netlink_sendmsg+0x642/0xb30 [ 454.052051][ T31] ? skb_put+0x11b/0x210 [ 454.056332][ T31] netlink_sendmsg+0x805/0xb30 [ 454.061152][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.066598][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 454.071907][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.077233][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.082800][ T31] __sock_sendmsg+0x219/0x270 [ 454.087558][ T31] __sys_sendto+0x3bd/0x520 [ 454.092254][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 454.097335][ T31] ? count_memcg_event_mm+0x21/0x260 [ 454.102804][ T31] ? exc_page_fault+0x76/0xf0 [ 454.107525][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 454.113521][ T31] __x64_sys_sendto+0xde/0x100 [ 454.118507][ T31] do_syscall_64+0xfa/0x3b0 [ 454.123202][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.128434][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.134626][ T31] ? clear_bhb_loop+0x60/0xb0 [ 454.139352][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.145336][ T31] RIP: 0033:0x7fb471790a7c [ 454.149780][ T31] RSP: 002b:00007fb47253fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 454.158269][ T31] RAX: ffffffffffffffda RBX: 00007fb47253ffc0 RCX: 00007fb471790a7c [ 454.166432][ T31] RDX: 0000000000000020 RSI: 00007fb472540010 RDI: 0000000000000009 [ 454.174496][ T31] RBP: 0000000000000000 R08: 00007fb47253ff14 R09: 000000000000000c [ 454.182517][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 454.190519][ T31] R13: 00007fb47253ff68 R14: 00007fb472540010 R15: 0000000000000000 [ 454.198834][ T31] [ 454.202052][ T31] [ 454.202052][ T31] Showing all locks held in the system: [ 454.209788][ T31] 4 locks held by kworker/0:1/10: [ 454.215178][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.226308][ T31] #1: ffffc900000f7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.238731][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 454.248894][ T31] #3: ffff88807c139100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 454.258773][ T31] 1 lock held by khungtaskd/31: [ 454.265216][ T31] #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 454.275194][ T31] 3 locks held by kworker/0:2/120: [ 454.280332][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.291551][ T31] #1: ffffc90002dc7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.305997][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 454.317795][ T31] 2 locks held by getty/5626: [ 454.322794][ T31] #0: ffff88814ccfd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 454.332906][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 454.343216][ T31] 1 lock held by udevd/5876: [ 454.347824][ T31] #0: ffff88807e106358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 454.357209][ T31] 2 locks held by kworker/u8:14/6798: [ 454.362799][ T31] 1 lock held by syz.1.2096/13124: [ 454.367934][ T31] #0: ffff88807c139100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 454.377847][ T31] 2 locks held by syz.3.2099/13136: [ 454.383209][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.391729][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 454.402203][ T31] 3 locks held by syz.2.2105/13165: [ 454.407428][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.415819][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 454.425375][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 454.437342][ T31] 2 locks held by syz.0.2108/13180: [ 454.442775][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.451027][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 454.460246][ T31] 2 locks held by syz.4.2110/13186: [ 454.465549][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.473857][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 454.483035][ T31] 2 locks held by syz.4.2110/13187: [ 454.488244][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 454.496526][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 454.506099][ T31] 1 lock held by syz-executor/13196: [ 454.511438][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.520095][ T31] 1 lock held by syz-executor/13197: [ 454.525776][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.535273][ T31] 1 lock held by syz-executor/13198: [ 454.540694][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.549313][ T31] 1 lock held by syz-executor/13201: [ 454.554659][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.563314][ T31] 1 lock held by syz-executor/13202: [ 454.568616][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.577127][ T31] 1 lock held by syz-executor/13204: [ 454.582568][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.591064][ T31] 1 lock held by syz-executor/13209: [ 454.596383][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.604966][ T31] 1 lock held by syz-executor/13210: [ 454.610253][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.618786][ T31] 1 lock held by syz-executor/13214: [ 454.624218][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.632763][ T31] 1 lock held by syz-executor/13215: [ 454.638064][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.646882][ T31] 1 lock held by syz-executor/13219: [ 454.652221][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.660688][ T31] 1 lock held by syz-executor/13222: [ 454.666096][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.674631][ T31] 1 lock held by syz-executor/13223: [ 454.679920][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.688520][ T31] 1 lock held by syz-executor/13226: [ 454.693842][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.702452][ T31] 1 lock held by syz-executor/13227: [ 454.707750][ T31] #0: ffffffff8e9c12c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 454.716306][ T31] [ 454.718648][ T31] ============================================= [ 454.718648][ T31] [ 454.727534][ T31] NMI backtrace for cpu 1 [ 454.727564][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 454.727589][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.727602][ T31] Call Trace: [ 454.727610][ T31] [ 454.727621][ T31] dump_stack_lvl+0x189/0x250 [ 454.727649][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.727668][ T31] ? __pfx__printk+0x10/0x10 [ 454.727702][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 454.727723][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 454.727742][ T31] ? __pfx__printk+0x10/0x10 [ 454.727766][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 454.727792][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 454.727812][ T31] watchdog+0xf93/0xfe0 [ 454.727837][ T31] ? watchdog+0x1de/0xfe0 [ 454.727862][ T31] kthread+0x711/0x8a0 [ 454.727884][ T31] ? __pfx_watchdog+0x10/0x10 [ 454.727904][ T31] ? __pfx_kthread+0x10/0x10 [ 454.727924][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.727943][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.727961][ T31] ? __pfx_kthread+0x10/0x10 [ 454.727980][ T31] ret_from_fork+0x3f9/0x770 [ 454.727998][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 454.728019][ T31] ? __switch_to_asm+0x39/0x70 [ 454.728037][ T31] ? __switch_to_asm+0x33/0x70 [ 454.728055][ T31] ? __pfx_kthread+0x10/0x10 [ 454.728074][ T31] ret_from_fork_asm+0x1a/0x30 [ 454.728106][ T31] [ 454.728114][ T31] Sending NMI from CPU 1 to CPUs 0: [ 454.874111][ C0] NMI backtrace for cpu 0 [ 454.874131][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 454.874151][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.874164][ C0] Workqueue: bat_events batadv_nc_worker [ 454.874190][ C0] RIP: 0010:check_preemption_disabled+0x5c/0x120 [ 454.874220][ C0] Code: ce 26 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 41 ca 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 50 a0 92 41 f6 47 2f [ 454.874236][ C0] RSP: 0018:ffffc90000117980 EFLAGS: 00000046 [ 454.874250][ C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000000 [ 454.874262][ C0] RDX: 0000000000000002 RSI: ffffffff8dba5da0 RDI: ffffffff8be33300 [ 454.874274][ C0] RBP: ffff88801ce96540 R08: 0000000000000000 R09: ffffffff8b46f452 [ 454.874286][ C0] R10: dffffc0000000000 R11: ffffffff8b46f380 R12: 0000000000000002 [ 454.874299][ C0] R13: 0000000000000002 R14: ffffffff8e139ea0 R15: ffff88801ce95a00 [ 454.874311][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 454.874325][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.874336][ C0] CR2: 0000556b6d6c9fb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 454.874352][ C0] Call Trace: [ 454.874359][ C0] [ 454.874368][ C0] lock_release+0x27a/0x3e0 [ 454.874396][ C0] ? batadv_nc_worker+0xd2/0x610 [ 454.874418][ C0] ? batadv_nc_worker+0xd2/0x610 [ 454.874440][ C0] batadv_nc_worker+0x28c/0x610 [ 454.874462][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 454.874481][ C0] process_scheduled_works+0xae1/0x17b0 [ 454.874513][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.874539][ C0] worker_thread+0x8a0/0xda0 [ 454.874571][ C0] kthread+0x711/0x8a0 [ 454.874594][ C0] ? __pfx_worker_thread+0x10/0x10 [ 454.874610][ C0] ? __pfx_kthread+0x10/0x10 [ 454.874633][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.874656][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.874694][ C0] ? __pfx_kthread+0x10/0x10 [ 454.874716][ C0] ret_from_fork+0x3f9/0x770 [ 454.874736][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 454.874757][ C0] ? __switch_to_asm+0x39/0x70 [ 454.874781][ C0] ? __switch_to_asm+0x33/0x70 [ 454.874804][ C0] ? __pfx_kthread+0x10/0x10 [ 454.874826][ C0] ret_from_fork_asm+0x1a/0x30 [ 454.874858][ C0] [ 454.875199][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 455.114138][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 455.123253][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.133316][ T31] Call Trace: [ 455.136603][ T31] [ 455.139629][ T31] dump_stack_lvl+0x99/0x250 [ 455.144235][ T31] ? __asan_memcpy+0x40/0x70 [ 455.148838][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.154042][ T31] ? __pfx__printk+0x10/0x10 [ 455.158658][ T31] vpanic+0x281/0x750 [ 455.162679][ T31] ? __pfx_vpanic+0x10/0x10 [ 455.167192][ T31] ? preempt_schedule+0xae/0xc0 [ 455.172055][ T31] ? preempt_schedule_common+0x83/0xd0 [ 455.177546][ T31] panic+0xb9/0xc0 [ 455.181279][ T31] ? __pfx_panic+0x10/0x10 [ 455.185706][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 455.191106][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 455.197270][ T31] watchdog+0xfd2/0xfe0 [ 455.201447][ T31] ? watchdog+0x1de/0xfe0 [ 455.205794][ T31] kthread+0x711/0x8a0 [ 455.209877][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.214564][ T31] ? __pfx_kthread+0x10/0x10 [ 455.219165][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.224376][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.229602][ T31] ? __pfx_kthread+0x10/0x10 [ 455.234207][ T31] ret_from_fork+0x3f9/0x770 [ 455.238817][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.243954][ T31] ? __switch_to_asm+0x39/0x70 [ 455.248732][ T31] ? __switch_to_asm+0x33/0x70 [ 455.253508][ T31] ? __pfx_kthread+0x10/0x10 [ 455.258110][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.262897][ T31] [ 455.266235][ T31] Kernel Offset: disabled [ 455.270558][ T31] Rebooting in 86400 seconds..