last executing test programs: 1m33.349194172s ago: executing program 1 (id=8096): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xfff7, 0x5, [0x10, 0xc, 0x7, 0x80, 0x5]}, &(0x7f0000000180)=0x12) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000240)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x38, 0x0, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m33.130750356s ago: executing program 1 (id=8100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x1, {{0x2, 0x4e26, @multicast1}}, {{0x2, 0x4623, @broadcast}}}, 0x108) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback, @empty}, 0xc) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x60}]}, 0x3c}}, 0x0) 1m32.961181524s ago: executing program 1 (id=8103): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x40080) (async) close(r3) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) (rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4620, 0x10, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "5ca1652c"}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x4, 0x81, 0x9}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "9920c0dc2c2ea171e384dd74360a53f909f2e2595886de72dfa5d6c4963a6e3623c24662c396d7440d9f702e3c6e7826b5a6783becdf58adef27dc0df23490a5"}}}}}, 0x6c) (async, rerun: 64) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r8 = socket$inet(0x2, 0x2, 0x1) (async) r9 = socket(0x2, 0x2, 0x1) bind$unix(r9, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000101000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003300000000000000ac1414aa0010000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000001000000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000e0000002000000000000000000000000000000006c0000000a000000fc010000000000000000000000000001043500000300"/500], 0x23c}}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) 1m32.848500553s ago: executing program 1 (id=8105): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) nanosleep(&(0x7f0000000200), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m32.73112294s ago: executing program 1 (id=8107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffa722}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x8011) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004700003000000000d90690780a210104ac1414aa070704030e5c610000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00'], 0x0) 1m32.494913314s ago: executing program 1 (id=8112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", "0200", "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0xa000, r0}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000003800018008000600776c6300080008000000000008000500000000000800090000000000060001000a000000050007000000000000000000"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000c, 0x8c4b815a5465c2b1, r6, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x27) shutdown(r0, 0x0) 1m17.493221371s ago: executing program 32 (id=8112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", "0200", "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0xa000, r0}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000ad6783de08d87582bde6f9908e6d70d55da7873a521ba681b94938006777d3e8e56571d95b2d20558311e8da968757b96593167ca029b9249901000000000000009e2a5d74630fed7d034aaed330b1a381d4b9882371d753193a3d938c3b115b9c4ed948c52d41c93ed7733a681d94429bd3ee45bf628f81e98f924db57cc6778c95fea11bcbeec87540852abab3ab55c69340f083f6929f9a40589867263051a60f6b50513a12ab3599a9d94060315eb6856c97ed71dcfe60aa4fe078fdbc5342c6780a494388b3a6a77fee8290ffaaff05d03b15d375ab2ecee99e74c2a9b73f2ddf42454c213239ed50cdac34da987987d9c6bbf580acef953d29c3c409bdfe6bf054ca03f7260e6af7bf0222d00bfd489c8440a4f81018328794d6f3", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000003800018008000600776c6300080008000000000008000500000000000800090000000000060001000a000000050007000000000000000000"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000c, 0x8c4b815a5465c2b1, r6, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x27) shutdown(r0, 0x0) 27.707151213s ago: executing program 5 (id=8697): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0xfffffffe, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x509, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x5, &(0x7f0000000600)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7, 0x0, 0x0, 0x0, 0xb}, @ldst={0x0, 0x1, 0x4, 0x5, 0xa, 0xffffffffffffffe0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x9, 0x5, {{0x19, 0x4, 0x1, 0x2e, 0x64, 0x68, 0x0, 0x9, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@rr={0x7, 0x13, 0xa0, [@multicast2, @private=0xa010100, @loopback, @remote]}, @cipso={0x86, 0x11, 0x1, [{0x5, 0xb, "eb5cbe43d9df61cba8"}]}, @timestamp={0x44, 0x2c, 0xdc, 0x0, 0x7, [0xa, 0x2, 0x6, 0x7, 0x0, 0xc27, 0x4, 0x10, 0x6000000, 0x7f]}]}}}}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x60, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000050}, 0x80) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket(0x2, 0x80805, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 27.57326825s ago: executing program 5 (id=8700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x1, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r4 = socket$kcm(0xa, 0x1, 0x106) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=""/120, 0x133, 0x78, 0x0, 0x8}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r6}, 0x10) sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x60) 27.380529714s ago: executing program 5 (id=8702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48) 27.13405988s ago: executing program 5 (id=8705): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000240), &(0x7f00000006c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r10, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xffff, 0x10, 0x7, 0x3d}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={r11, 0x68, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x5, @private0, 0xff}, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)={0x20, r2, 0x539, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) 27.028357954s ago: executing program 5 (id=8709): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x244, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000140], 0x0, &(0x7f0000000000), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x48, 0x809b, 'caif0\x00', 'nr0\x00', 'batadv0\x00', 'vcan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x3, 0x40, 0x888e, 'batadv0\x00', 'tunl0\x00', 'tunl0\x00', '\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0x116, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xffffffff, 0x8, 0x1, 0x1, 0x0, "3ec15a2cb319abab3ee1fc77b4e243aea712e780e338da32c2ced12d0c1a3afb76cdb84ac92925d8fb75b8120f5baf4c2bd572b1afddcd7d09caeb1350b1e6ad"}}}}]}]}, 0x2bc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) connect$rose(r1, &(0x7f0000002a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') unshare(0x6a040000) socket(0x8, 0x1, 0xe45e) 26.962826579s ago: executing program 2 (id=8710): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001300050000200000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="00040100521900000c001a80080006"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 26.819217316s ago: executing program 2 (id=8713): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r4], 0x50}}, 0x0) 26.745809048s ago: executing program 2 (id=8714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r1, 0x1, 0x1, 0x25dfdbfe}, 0x14}}, 0x0) 26.606164403s ago: executing program 2 (id=8717): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.447115622s ago: executing program 2 (id=8720): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) (async) pipe(&(0x7f0000000000)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 26.263238994s ago: executing program 5 (id=8723): r0 = socket(0x1e, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x110, 0x7, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0x7, 0x3, 0x3, 0x2, 0xffffffffffffffed}, @jmp={0x5, 0x1, 0x7, 0x4, 0x1, 0x0, 0x4}, @generic={0x8, 0x6, 0x2, 0xca, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0xbf, &(0x7f0000000100)=""/191, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x6, 0x4, 0x6}, 0x10, 0x238aa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r0, r2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xa) ppoll(&(0x7f0000000080)=[{r6, 0x2}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fcdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="944c90b94c211a29"], 0x2c}, 0x1, 0x0, 0x0, 0x20001000}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r15 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r15, &(0x7f00000004c0)="800000800000210ee7decd7a0000", 0xe, 0x40054, &(0x7f00000001c0)={0x11, 0x4, r14, 0x1, 0xd8, 0x6, @remote}, 0x14) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r17, 0x0) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000001800000000400000200000000300000", @ANYRES32, @ANYBLOB="71f100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0300000001000000030000ff00000000672acc17ade10000000000000000000000004812f2e20f47c4166417df9769f664282ea67d658c8834ee01b3c52cb16e348b7a6c23e1a4a812b89d14e0e3c4993d8207d24306f3b295989a6e4e31536c86176912289fdbc257b0adc4b31e9db6e1d21444a9b5c00d"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f00000005c0)=@raw=[@ldst={0x2, 0x2, 0x6, 0x1, 0x3, 0x2, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x71, '\x00', r14, 0x25, r16, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xf, 0x5, 0xffffffbe}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r17, 0x1, 0xffffffffffffffff, r18], &(0x7f0000000800)=[{0x2, 0x5, 0xe, 0xb}, {0x5, 0x2, 0xb, 0x7}, {0x1, 0x2, 0x6, 0x2}, {0x2, 0x1, 0x7, 0x8}], 0x10, 0x20}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) 25.741391092s ago: executing program 2 (id=8726): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4040) 16.728212944s ago: executing program 4 (id=8819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250200000008000800", @ANYRES32=r0, @ANYBLOB="9dbe6f6a1dc708065a5352dc72ed8de9d8404270909fabf94c3eff5b0a2d110b9467ea00f032bfcc7f46393d6b7d613c53bb27a8a6c6d23a6160b3"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 16.718202124s ago: executing program 4 (id=8822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x6, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)='%ps \x00'}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003280)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) r5 = getgid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003340)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r11 = syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00') r12 = getpid() sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r9}}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003380)={0x0, 0x0, 0x0}, &(0x7f00000033c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003400)={0x0}, &(0x7f0000003440)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003480)=0x0) r16 = getgid() r17 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000034c0)=0x0) r19 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r19, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="240000002d000100000000000000000008000000", @ANYRES32=r20, @ANYBLOB="0b000080976b0b9ec0f76408686030f7"], 0x24}], 0x1}, 0x0) r21 = getgid() sendmmsg$unix(r1, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="526b5e64c9d61ba6f3060089e9003cb8d84cdc4bc8e01479893c06ae5af8e868cde5e35d53b716ef17435a4dd0e7a82d7d80cf1944f5621ce9c83d1a749d00e6fc653da38f4d1cfaa9f1f0e62d9d321d58a0bf3d8bc89b05657c5f7da49bc91b4fdd46c7f44e738b28e3e857e5ffb2b0969086c9a3c0d2b69ef7b8fc2056f06c499a8b90b0350db3a8e9f2728be05906abe16e38e908ae5923778d617b155f94da3e224f1972f48ad88125c2ab461c679825a32252313ccbb618a5468d9def1c4f81be5d039386525478bf84c1b3", 0xce}, {&(0x7f0000000000)="4da165cfbbdc3c997b55d8fddb9e5c4b14ea071a109ec3d4a42830cc467388c16a0514b58aa91a62a779cbd321d39d5a1dceeb680aeee3dcd564b9e75f0f7841d818418d636f08a3248bd28a3f84d8e74c23e788e86a915329d6ce9698fe0fbd01f6ac51c4364cf37846e860a61a", 0x6e}, {&(0x7f0000000500)="77faaa8ba113cb6472eec953de952398faaa4dc7053790fcd4fe641d4eba9fed5e43f2617aa29e3240e5192caf5027bcdd1828ee1047069d9f2293e69a70bb9d07f58d14f6cbdeaff75d7689a4677f5915089930307f3d302394358594e15773e057461c5d7792304b3a16ec51f033de948133b7ac49dd632b706bbb63d857b494bf65116a8cf02c6aba996a263740ace6d4fe3234ec6d22475498194a48afc118e0eb4554031ae6d22fbdb0e7f20fed0fc8dbe8cda14ec6bce58b987fccfa58b3ff129fe116a9c1981c01181401db6f7b148244d85ab2d60b5173", 0xdb}], 0x3, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0xc8681ec36c93944d}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000940)="252440084b159b71aa654ef028f058f769af6cd19783c6eb1770ef196a999b53560e4b03cdbd9a8d823fdea0a0ecbe61cb89f3b2e97cdac9301a7aa9158301afa53912117c3e03dced2ab37daeec5912e57161356a4ccbb06f1aefe654e6d5e8e524b813", 0x64}], 0x2, &(0x7f0000001c40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r0, r1, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r0, r0, r1]}}], 0xc0, 0x8004}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000001d80)="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", 0xfe}, {&(0x7f0000001e80)="b2fb718f026d5fe00ee911f89c9c9e46e8ba7362e14bcbcac3b315a603738168513b16548ed00accb4b3ba9aefa337639d407685bf9c0de825f2d11dacbd722648e211b5952f1269dd7e230ec1f7c1a35cd7c7998d6abda8699954a997c3402159bdced20d7da69359a2108f7208a0", 0x6f}, {&(0x7f0000001f00)="4d989ca4036f8236abab544743e0c27903612bb5c5db53454562adac6d2be3e53904600b8123ede8be792d16ed891f31c906751c2ded4e543b3b83ae6071411fe3399cd2e703e6a2749e96a160301d106d15967cea6e4eb1bf235a5c4343a39eb949291d2b26cb4dfb8f38a26a02b12d004adae1d6e183895de888e8ee7f8b70b7", 0x81}, {&(0x7f0000001fc0)="f2ea942f4ed72be01ae5b6c98243d0a82f80dba189c6042fe1dbcbd191a1e80f0aa74fd8606651c7cb21a2d9af02d57a5f35a5124956c6d4de9a54", 0x3b}, {&(0x7f0000002000)="69e3d8b0fc4b364a50c3c65456ef421910be21558bb06cbccda86859185294c8ac2c973e903c54e01bbffdc6dae790554635888c85f950877fcf7ccd0ac558f8c0428d029c9cb4fe20bb8665ada5d438108833b0dbfcc8e6", 0x58}, {&(0x7f0000002080)="375cbbddafe08d370cf89c5a61ea996a4a9b6fc790cbcc20d4c57e00da9d146164fd5588d6c59354e9aac50fc5836971ef570e7b20507d40ac1b87707e6db08ff257d4983b3e7f87a0bdb490feb8d922b5a8743e00a94800ca71f8f7bbe24d62bdde71d867256cc68aa2e4c9f9b354c30473909c349b5bc921021c0bd6615ab49d1cef4bc3abbc83fc9159aa6f3132bcaed817e07717bad6f82937ee56c0aa7127dd07", 0xa3}, {&(0x7f0000002140)="b8c027f56a906dfaf2edcf4435f9dd5d3f168b6f522eb41f5c018dc567084cb854ae5205580dd59010171b5589e297350c0da627a235f17dba06e5814d4a71a111ff4c3f9b9f53fa0038ce09211ae6c9cb0e42b65637a4a1571e24a6232b94d51d7158a2ad1974a4cf42ec1a6e7073def2f6158b1cab1c59ab3dc621630855fa89748a6d1927979edd35ba22cb2796536b26ae8cba5481cd24f2bd71a4a617c554ecc2e3c632c5c6b091526c5b35c4f0045bdae602163eab", 0xb8}, {&(0x7f0000002200)="9be2789f0b2a6beeb3307124d2cfd682efa8784e84525a14dedd204da813c5042356c93907825fb0c377bba277c18bd1ae8a04e240952bd1ae507c05cc74755f4d9261099442e0a14525c627f82aac2254dd51d4668e9944b053531955e971783ffbef9719502aaababd2a5a953a42b75648aad9f4e7d589f48f1e110471ece2ece62acaa640b45c7e880987b849dba8bf31501fec0146a55e89f16527d99a8dba9d7983caa17c0a8eeca1876768ac7514e83c3c53f673fc090f69e61c0c295a3eaf361c9f76308652dffcc7db567117aeb1b94f8a8315f983bea0a6661aab407f7bc3e8d8e16ec34a40b8753d54899f6346dcb6a0f804c8beabad8fe169e7ed0d490b155128115477416400d81570a1756372446b2cfe306cb30a0f383334d3d8777e3de1d83c04daeea3a3b71a031c129f7719b6472f7b3733f6285206b4e3a546c54361c836e8863e4e35deee2a1ed38b930a51940d529a3ce1a8745be88b942d4577412d193c297a4d066d19eee508db2f8bf3e3712cc7c5938bb549d85fa7a20c559678e466e29efe5043c01fc4facd5d41857d38de936ddec9312970b9b0b9b708d7ad293c10eff6ec5814a9dfc3b47ad7c2e02ceb5dbda1c0e468f672dc1c34f5900149795416e5f9f734277ee320466c28ac1c582987d07a82e23cf365f8235b6089d0559422119ba69fe9b56299618cb3e723241a82e45acd5b7830c28fdbb2d41150a776d720515e2355015b7dbdea07483d9c70235dbdac15db92047eb86dcde0b66c4a934ba9ec6eed569e000ed1a90887c8bf2e7071c7a9d874c0b9b73c6da30913426af9bcd9e459213fda0ab647bca21deb9c7df95be4f4c6004c2a9f35bd82c1830c61b3784aded7330d7bc9ca9c41f71a49c8f51a321e123cd214370d539334a382680b4c401a86e9ac844cebc14a92b75fa4cac4b9206c575bd7f284661f7e035a94d7f4de4cc596028e1d9771f1d98f63084cd5c98de8dab34b9427ec8ae7a9871836fb26204dba86f629dc668b3d087327e96ae31614650eebedacdd099be0320e89c35d8afb24b617105ca72f2ede86883974412ca352db1d2b2e2ff2b111bb094bc379d08c18ffcb2ea8470e5ab7dfbd3c5d877d94b092995c6038ce8f7c6deb39141e2d8a44bdcd43f1e3da3a2aeb3ab2c398af6dd162e8e7b218cbd20978a4adc551483cbb9d6f5734726cc8bfeff9da26c0d2666b4af05bde58101a5e509d550fcb856929739096cb34edef758e1b9ae6ac1eb64fb14b5ca207a01be6bdec7f101e4e31b1b3ebcb7e3dcfca6899abba120124c0ccaeefe61421aad0d1069483b9efd7f4f8eb66298791b9b9bbe5030832dc69e1f2dc79d04ab0ad1b54dc6a7665c3af96c40a3e3f77991951ad3c12cd7fd385c8efc6dc8ca1c1cc6edc07c36baa8aa811e2c350716ae5bb9d09befb40b234163bb5dbbeefbe85e33f1ed572e04d1d20f058cdb3df0c5b1b4f6fb27ceeb4b9ecada94cf55c30f2c063709cd9b570850661b5f7fec2097d90f8174de76d1b5011928268192ecdc1386f5d3c86e051ad4d110733ef9bcfd63de554edd371093e810bcb964f43698519e29fdf4057fd7cc22ee42834f8a31cf5813dbc0d496aea5d8ae8e2e15d7782a03882c0370808d402bdb65e83f56529cf604a562eb428e8930fea68f0596e885111346156849f6b22639bd66437a3b73f966d4e00ef67adb5d841238a9ce60a523cc51c987b5310b39cef6da6436c8ca8c7641dd284a983d6eb68d9414c930acebdd415485f0e9a596f747412c84eeb5484ce80d28725caf7ff6dbab5d4d78964bff79d95f01efff9ad3d43f95561b05f72a2272147aadb06fba3a461dacc9643c4d787e97715d507a633a076d1c2bc2fc9d698854498879a6c6fa1e4aba01319702a26d6aacaa64c35489a7875d5fcf017f5e575fb227e51a0ed245f1dcbc1884ea15e3996ebdacb9a0b96c4f88b77e0d0c15d1b9edf7b1073c07d84953072ac71ee28f522679774a248b525d24051bccb23bd72fba0b841d41f9e45360d30fcd8d8ee04f40670244eac5ac025ccda5010012e3c7c4571d18dad8b324390b4d19de60aa30fbaed17de4cd1b955d0d4f9c7cbe0b67e2871c7034e3ac9484b0da78e85519ce3a2f8b5879e54a4c08962d437577fd05a61325b261d645a27eaf9bc258b62038b76fdbfefebd3e33c6691421fa4fba6c8cd87e0eb89b71344060ecbb44f0d9d870b5972cb06e1e3d874e6e8f101ea55684b9b9df66c102c17938f2a0cd1990430ce40997d2fc0124e915bb0222f266688dee1e10111078936fbb83b0eec68c5c319436ea96ea0046b79e611f7011e4ced50d78775e700f2f5ea4cda506d9a138c24e6dcc66abf408e13c16ac3bed5951072792af70a61e4f29479c11907a99ec4a8eec949070e3a140c4a1650c6ab600d32887cefe4fc9e2aaae5bcf0ef41853af8089fb5b5e283d55f85350e59f4540efa1877ffc02e2f30d8710c7c8802e9bf532b2e7e61d12f2e721a6df2e5b305c4cb35079ff08eae1348db730999ad046fc58395f6fd829bfdde299029748b516b392cd60012756fca46b9ce083b3d77fad88124cf5830fb80d0afd62fd12292470be144dba4482d76e342a3bd06494a6303a50a116b7fd97a03e713f88da32129fbc5400637e495ead8f51ba8c0c4168487d88e1f450b5debe65b2ade350eaf6f9f1f3f114dcf7bd102bcabe97fea9661c2577ebb155dd2b5b11a15b1e9f2dfab14be524c674f6be0a12c3295e9958060b6bfaf739183d7b9ee8491b7ff7da4c042f98fb76d662c06d69599b8aeff424ce7fe228786a9f42aa28bb67e4e0be065b5097b60333a78b4480bf723364f17bca56fbbbfb5e5017082953d2f39fafe897795ff4e1ca6083d5f6ef346e0e9a80c35f084b4fab1b37aed99eb7437d52a49e0971143822fc52bb1afc77634189b0c58510a22d2cccb409f408199e9f2bc9f6ca084730a2278468d783d5c816e05343fc069e32f4908b7d8b879fa3dd7a3ab965fcc2876c5a6c374bf0c9e5b902f9826bab52bd91a21fb7b1b15bfa3678de30c68c318d6594f63fab2107aebd396bbc911eb45f330a8efb7eaadadd3d453e1fc604eeacb41746544dc26e74bed22adecad3b810d7a9dfd3c524e61bc501e5f4198c0c07a1bbad3712a937e1fc440be04b1a2fd5772d2a6ede78d9bd6fbed92246e730987799edf767cdb23196198044c92cfe61f74c98b75b3ceb6f9cc5f8935d066c52199d895ea43ae45d9d7bfa67741de075d57bb158776bfbaf141f6da94b1df68b098db5e5faa8adbb6bd0f2251804dc626050524b1e7bd216b88269525cf50cb5102fca3b1abbc099cd2b20fcb9b1ee5453951eb61fb6a230f8633d06a47605972de5d51924cc113a84147692e2b55c9aa11c385ec04e8812aadfb69c4fcbbc8a049e568b4492351fd1a61656531371b49d1d91f13d0e2e29c7d1aa19d0eec908e20a78b325ba8b4f61d3857870772b96aa4bc784c57d4b38a6c161e732cb37366a26475f357fb0e26d2d5a538d0b705cbd706a12e9c08c88cce34dfde43c2f0cdd343d46398d00c856c5cb0eaa22a8866592e50fa8c2ec516f80dadc39ede37358b556bb7a748b84b7a2c1648e443f849f852c61a7bfaadc27e9801a006f84c6e8a5e91aa212e6db9338dded8b6396612a5c37de91629d8e79723c42ccde081019eba4d30a90bf4708345cc05e08f06b152727f38eedbf6049a5c2aa4cae93b8c4d77b05a54414a0cb89368c0eefb5a0b26584beb7ec0f9e8d28b2700406fd7f8703d7534b47b1c99c5b954bacf1f8d946b8984a835e30d43b9bacd06e9a4413ec1176797512c6350a1b25a6106f11cda97d88043ac56e58c9ac9ceb6532fe87f1068313759f63044ba053cd829588d8d889de09008179e75b3b6e20efbe98d5e1a3b00533f16f49c228afdf1c989b52076c2fabf1146a4e1d94e5910388df5cadbbe722c207379b239a6f95aff20ebb1d38892bd0609040969da6eae09a5bd1403cbc4f0adf91972033c9cb2430450be40314b7938bc0569a7c6b14d4cc0c0e0b08539fac539423a809b6f56fbb3fff5ca2a2f01fe5f05c1cf0c7b9c6ba6b0a089e85cc2e733b5cdc341d46b82d247934863ff27190f338c0392271aa057acf3e685b8f5755977b6f8f5dda84d0695ddfd95ee5cf2d5e7a5c05bdf240b9a708f910f3b30653f7fdff6c8856824cfea7b8fad786201743cea83721da1c16064fa37e96acc05bffe27d303f8fa0b1cdaf94295553520da21dd4023ca3993f1f8d773f0522ab45914b9d7191b144517325f383a4ed13521b272b7c4270bde5918d6c801f55568c53cc21930d66182f2f79a87530bca01d4fee6c8571a250e72868d16487beab8152fd7de0f123e650e71951aa4fa60f97686e8a7e31ae07533d123011594e449444272c657b05477d4261a0f017fc5288a4f3b472d5f0d3532e98b4b35e2d749b7ab80ede6555fdf63efa9f24f02d7bd95f63366c5e1db64ce40d1f1da0d205687c8671ae16bde54076952b6646fce1f4d410edabd21aa88cf0733974bc59867e7456aeb8c60c0b3114bc20210472a0c5b43193b206d50525f5b37f34007cda44c80f47dec330c9c1c6b8b5282d4e88dfea8d1b3fb043869e3154a36b7ca09b03d74e69794dd995821856461f799880dc19dce73a51f05b98755f4779fd1a0fe9871542511262dfdfa34afae4845a2ab4d52d78be8e729906a710703b88a64c13119b8eb052f437e9c000e2bf6d98301578be28ec01d0e28f36d8cd11bf83976ee12a972a4d4e46a2b5447e6fcd5a52aee251bc11f67e9e16d9f01d9822da039a23d88e140875e2d21e3bc13ddf2e8e04ec0145a5b945f059d77f374b640b0d1d708f970037824dfb48d81023c5345dd5bf06f2dcb2eb89e15e71ad7ef5e35076287c1aa49131d5e88c5d15ec74cc4f76da815776629cc6764b1d5ab5ed32f5dc129075a0f8bf02299f2a39bf26720ddd7d88487a507d463490f52100a78494204b5a0c690a3523efec113e02513bcdf97e3344276b8e834c8b116749c28fec78da19396f80d44d4a303e4a1f002d3143b82f4c742b2e78d62f46b9819144b62aa7525da83e2f3466a64b39d58edab3fe20e5adbb53ec334777373ff7d218edd161062fcaad463255b52a5c61fed2d5a2961c96d99b0b23e82021c49db513d6b67b03f4c9781e9dbd8082655e44c2e75378806dffb6696d0b4affa058ec8abfd0f269f236d9afa6e763292976f173a2657bfafdc8ae3ee58b0d78e9796219d8a1fceb6c7de20a58dc52ff71b57b587bf569dceee0957494f47131007409e967ca2ed95fbcdc50930570da425ad3690c454f48fcc3ceaefbf636be47da813bda7a53ef265f3835bdccd9cc6b67fd9979783138f5de83b2b214632585ea5be7ba32501cec1a2366cfa7f8bb326bcc6345a0ba6dcb4034860a32fdbf625a9bda7209530ffe0fb4e4f04f9ed47ee6d01a2490a7b2820dfbb4cd65bb59b6a67629ee8b3c9a5eeb94f97e4badbd46b98062e4f7be483071baf8dea7b4fc94598c0ecc6cb7e86db93c7aead7232b0658f7efd8bbd3e3c2733c111544de00bdedf490d608ef0740b0f3fe432d1c3daf0df12ca0289f2b560417bc3eddb0303ae90a88d2939013253b16f4d19acf8bd8a6c3c4c8bb03a8fd62ec701132cc7097949f7ef2afcdf7f0f7668846a330426eef9297fe53cb748f1902ccba6a84a825b655d0767cc4d65934461caa44ce56d21d1eef01998156cbe94ab2270c3e8", 0x1000}], 0x8, &(0x7f0000003940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRESHEX=r13, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r9, @ANYRES32=r13, @ANYBLOB="00005b4819d959b4a8aa020000000000000071353d3ef32200000500000002000000a5446059556e921c9dbb067013bc84ccbe3b6ae693e8c820d5fb6ca3e20ac88ee93daa6872801dc0e7bd161b573a54af3bc593df326ab6ea424a66720df4777846acda0605c00c27cb2435c68b0016e07978f9ce42d3a2b8c80605a2fb69a11171c312b8a19447838a7628c80d13275a062780cfb33d7aa0b63f383d408f5fbd1726f2d247bf0679ba566faa2e6a0d9b63905ebc6e53e0a223ab608583cf04cfc642191768084ed3556363018668f74441bd04f42bd6764bef2539368f3be5c285fa479eb9cd90ea647fcd5fcd8e2ab1a3f36e05e742189fa149afe7b9045fe8955fecfaff6d6bc4b76d27bc4f1374785c45fbf04860a46ca3bd0e9dc44bc16ce763e7cef417754c013d10d6611c7c7a624afce5fb32b7ca430aad473f9e8a500c2b3994f2e78cb80ecf7534d7d640c503ecb921b1ddc82b2d7e3bf12ed53bad047b97f2f015afa5ac9c3e5a1d90b7d10c2890bca0508e4d3da69c488133c61637fa78db3ff1943219aaabe0795c0853b74badc97d72335b50a927ef0e5e9c7aaff07d39bff146ead8e51ff17675ea4dc4c18a097edfa45df128f4780cb26cf20df42756717ae9fad2891538a0c3523374d74baf8b54b2a1317681c2c6fc81d606a6c28dddf7c1b4b03df93d271afbdc84da", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r17, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x10000}}], 0x3, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x260, 0x30, 0x800, 0x70bd2b, 0x25dfdbde, {}, [{0x24c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x1f0, 0xd, 0x0, 0x0, {{0xa}, {0x138, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0xa8, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x8d, 0x6, "8739a2c3fab48850c8ffe80e3355c8390cd3acb4713c919f03565fe39d3a55528baa4aa8101dbcef1c6f1b43bf385025765114527b0ae8beed88d16babe298f563c392e4ea46125753cb3e86769926dd4c56d9e5b20c53b2a2faded4cebd028bf217bc5bcb3858719749f9feea566d8e5ef1a23545f22d3d145e4696dbcd6bcff935ecbac65f84419e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x260}, 0x1, 0x0, 0x0, 0xc044}, 0x4008804) 16.551396619s ago: executing program 4 (id=8826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000000038000400200001"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16.478685271s ago: executing program 4 (id=8828): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x48195) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 16.196794224s ago: executing program 4 (id=8832): r0 = socket(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000007c0)={r1, 0x5}, &(0x7f0000001800)=0x8) connect$rds(r0, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000110004004800128008000100677470003c00028008000400010000000500060002000000050005000000000008000200", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r3, @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="08588dc4adff41f4e16e11bf50b5a500c861019219eafac45c2fa2788907d0d5"], 0x68}}, 0x24000885) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) sendmsg$inet6(r3, &(0x7f0000000e00)={&(0x7f0000000240)={0xa, 0x4e24, 0xd, @loopback, 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000a80)="93ad2010c61095f4abb46256c0c26ebaebe184e0f53a2315a058e64507c51de267e3c66a571dac8b24b45dfbbad215cd0d747cd5b95d7525baed0e7cbd584d8dd24184e3a5b014c5d3dc790e219f23bf161e44f5ef23b2766fda9126dc755215524c7afe01d6a06c344a9c6d06374e6a1c2261ae9b4fdb811cf7a8c7923827ef88f6273045266382e6ff7b54efed0c3fe0f7a5fb9c61308aa7c56a9f96e4a5b3c665e2274686b0973ce46d5cb45423ed2771114b00386550c5cc16591e9c2501aa4f5b7eb2d4c277015da83a445cf0b85e8e3855429bf2940b19b83703e0fc7abe799b3548db74c50a924b092a76bdf2e0", 0xf1}, {&(0x7f0000000b80)="d143eebcdefe763df065f2e10884960c01625dd83e72486037b50f339364a81459f713420d5a7ecd889e727283682df3dc74e3811c0d7f72e12f3bdd64ec2d3e7ce1651707760fbeb3f727209c0b508c99e4032cce3b4593797d7e568a8f980f42eb3cca09bf2aaa42012dbac96080e42ab93966eb03faecffa4231ee2f045dc84287cede24630f22a5804e954fc52f9459d6c0092b4e6c97574d4e8343ec57fda9d19a62b4ead5c5ec72a4aed609c735ff5f3ea6de7a4450c0a8668b059", 0xbe}, {&(0x7f0000000c40)="7f00b59d680e064af98119787f3438a913f50a3fcd24a41ecc9c67f68bbd6d3e038a6878c9bea9cd5d47eb7dbbbddbcecba3c2693b0fe9f3a0a637e10e4469077e1d09500cd9c06542da9be73138b9896ba1aacac48dd5db3f7099687297b4a5748c74ec020f7b8157beb773b431698ffab0a69baf8b135bcba9b59c849a1b522cdbd7adcc37102795ef45ba07", 0x8d}, {&(0x7f0000000d00)="3744d89cf85f41faa0b7fe05a48fd6f9bb57075d66edc1205e6e1204aa9f5f1fd7e0e77f6b16eb6db0bc189b4d40751f4eced9bed24902b11c878a02a85a9dfa31b3a1a24042eac54026125dd0d20b57bac327eda131a321c301a729b9226a30ee62ed82a55ccffb8287406931568c97126c62c5ff0e81bb5f20d8b42a57554f2dec34ff3ad6143d98649d3bd92ecf8785941101e795b7dc45bb245e1dbb0393a2867067f41ead96da9c", 0xaa}, {&(0x7f00000005c0)="b75a3cfe554a88d3dba5cd99546d9dc3368befb81559edbd688d15882f020df87c38f2", 0x23}], 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="280000000000007ca5000000390000001d02000100000000fe8000000000000000000000000000aa2f37b9e3f7c7f2e56af9d66286e487d059b6c60e2598f323d713354fa7ec82c0829cb0903857939679a5c725762f920276acbff8563319"], 0x28}, 0x4000014) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f00000002c0)={@null, @bcast, 0x3, [@bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000102070000000900020073797a31000000000c00078008001308000000000500050002000000050004000000000011000300686173683a69702c706f727400000000f29220656c93f44f265df92f1a5899cf25f27efdc786588890ab9782cb22112d922538b4a1ee53e84ccfa9bd6a281899931c20cc6b"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0000007b8c8dec7925f6fce19f6dbeb8019ff5956fa1b3e916ff2a7bd77bb7de61fa50e25a6de0c8d6c3941cfada7a9ab5671009748f3d86b29fa8d4149fb62a04d6469476a62acf9955e6f73474da78f352865f94d24b6e37b337713416ee1575a39e1f5a01e5093e1f091f1b808d82017b8af14c0734b5f449adb1047ddbf0b6cb6e18c88539824da2d0faf4483002ad18aec96b31ddb004c87d4c6ffc7ea85d066c268b9b2776c0818449781289476b7b525a60b73d540acffddc10c42aa5b7a9815884fcbf2609fcbc578a5e468bb644eb4d3134df8d96094a", @ANYRES16=r8, @ANYBLOB="8b3300000000000000001500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000024001d80200000801c000d8018000300050004000100000009000200059f1d233d000000"], 0x4c}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000004c0)={r2, @in={{0x2, 0x4e21, @local}}, 0x0, 0x23fb, 0xe46, 0x8, 0x6c, 0x3}, &(0x7f00000001c0)=0x9c) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r8, @ANYBLOB="19e9400c7c67ca317e462a8c4517d3f377cd6ad7b153bc037dcea0dfd886e38f8718f1ef6a5086d64b3270324cd60ab3608e6ccd7d23718009c07fbf6458b600abf3ca12e62aec6ee51b1565124257a0be7b752e3ac4ef03c13e29f4a7a3389c67efa6f15e022e19255b80dd9d763754657e4b50c4888aa8ecc4ebd302e2a1e946", @ANYBLOB="756b1bffd25bc4e95be1adcd7af6f8ca6d665f480698543d64e3c8e600aa7b1335500c29dab03bafc97ae99863", @ANYRESDEC=r7], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r12, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r11) sendmmsg(r11, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="900000"], 0x90}}], 0x1, 0x4000040) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008812}, 0x24040000) 16.062469056s ago: executing program 3 (id=8834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r2 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000180)={@dev, @random, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x108) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000640)={'syztnl2\x00', r6, 0x1, 0x47f804326a31b927, 0xffffc843, 0x107e, {{0x2a, 0x4, 0x0, 0x29, 0xa8, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x1c, 0xfd, 0x3, 0x0, [{@private=0xa010101, 0xffffff01}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xff}, {@private=0xa010102, 0x8000}]}, @timestamp_prespec={0x44, 0x24, 0xf8, 0x3, 0x3, [{@empty, 0x8000}, {@rand_addr=0x64010102, 0x7}, {@multicast1, 0x7}, {@broadcast}]}, @lsrr={0x83, 0xb, 0x3c, [@local, @private=0xa010102]}, @lsrr={0x83, 0x1b, 0xa2, [@remote, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010100, @rand_addr=0x64010100, @loopback, @broadcast]}, @lsrr={0x83, 0x13, 0xb0, [@private=0xa010100, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0x55, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102, @local, @remote]}]}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}}}]}, @NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x0, 0x12, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @rt={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_KEY={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x0, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_KEY={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x0, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_KEY={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x0, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_OBJ_TYPE={0x0, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) 15.989913176s ago: executing program 3 (id=8836): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x4}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x4}}]}, 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 15.862649984s ago: executing program 3 (id=8838): syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) 15.855618422s ago: executing program 0 (id=8839): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcffffff0200000005000000140003800400040008001e000000000004000100180001801400020073797acf3908576532d5b414b3b95f74756e000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x24000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r5, 0x2f, 0x7, 0xa5, 0x6e8, 0xc, @private0, @mcast1, 0x40, 0x8000, 0x10, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000500)={'tunl0\x00', r5, 0x7, 0x700, 0x6, 0x3, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xa0, 0x3, 0x0, [{@broadcast, 0xff}, {@empty, 0x5}]}, @lsrr={0x83, 0x2b, 0x34, [@rand_addr=0x64010101, @broadcast, @multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x77, 0x3, 0x5, [{@rand_addr=0x64010101, 0xffff}]}, @timestamp_prespec={0x44, 0x34, 0x98, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x4}, {@multicast2}, {@multicast2, 0x7}, {@remote, 0x9}, {@empty, 0x2}]}, @end, @noop, @ssrr={0x89, 0x17, 0xb7, [@broadcast, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', r5, 0x20, 0x80, 0x5, 0x1, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x68, 0x0, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @multicast1, {[@ssrr={0x89, 0x7, 0xf2, [@loopback]}, @lsrr={0x83, 0xf, 0xf, [@local, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0x82, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x5}, {@remote, 0x3d89}, {@remote, 0x400}, {@broadcast, 0x80}, {@broadcast, 0xffffff68}, {@multicast1}]}, @timestamp={0x44, 0x8, 0x8, 0x0, 0x3, [0x7]}, @ssrr={0x89, 0x17, 0xe, [@rand_addr=0x64010100, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', r5, 0x4, 0x5, 0xb, 0x9, 0x40, @private1, @private2, 0x7, 0x40, 0xa, 0x7}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x400448e4, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', r5, 0x20, 0x728, 0x40, 0x7fffffff, {{0x4a, 0x4, 0x1, 0x1, 0x128, 0x67, 0x0, 0x8, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x42}, {[@end, @cipso={0x86, 0x46, 0x0, [{0x5, 0x6, "ce03854f"}, {0x2, 0x8, "548c7cfbabcb"}, {0x2, 0xe, "ad59b5d54a723bd4d2dd6824"}, {0x6, 0xa, "e4d8b09d61b97341"}, {0x3, 0x12, "2e7211df3bed079359eb90f37b5c861b"}, {0x5, 0x8, "10620890c743"}]}, @cipso={0x86, 0x68, 0x3, [{0x7, 0x2}, {0x4, 0x12, "08241aa5aa52cdd3d44c27e825cae1b2"}, {0x7, 0x9, "6475b2e5558e75"}, {0x6, 0xf, "f7e405d24abfdf940c8b48593f"}, {0x1, 0x9, "4bbb2c047d21f1"}, {0x6, 0x4, "0218"}, {0x6, 0x8, "25313f6f471b"}, {0x2, 0xb, "aac0692285deb97042"}, {0x0, 0xa, "434d206f7beaf107"}, {0x2, 0xc, "9ccf216a5611b6c9a85d"}]}, @timestamp_prespec={0x44, 0x24, 0xfb, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0xa}}, {@rand_addr=0x64010101, 0xe}, {@rand_addr=0x64010100, 0x1}, {@local, 0x5}]}, @rr={0x7, 0x1b, 0xc9, [@rand_addr=0x64010101, @multicast1, @multicast2, @multicast1, @rand_addr=0x64010101, @multicast1]}, @end, @end, @timestamp={0x44, 0x14, 0x62, 0x0, 0x5, [0x9, 0x6cb7, 0x6, 0x1]}, @timestamp={0x44, 0xc, 0x78, 0x0, 0x3, [0x0, 0x7]}, @ra={0x94, 0x4}]}}}}}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r3, 0x8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000c00)={0x1f0, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4d, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4010000}, 0x5) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 15.83522028s ago: executing program 3 (id=8840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x61, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="4d3bba8d36e8cb213463c84ff0b9102bdbe6d09e12b0f222be04bfffe2a74cf030", 0x21}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x108, 0x4004090}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="89bcdddee977c6e30e522e99c4f605960b7e49ace2eeb15df4617104010000dee31600bb9c77b090f6ce211c01000000af6b91bc4a4e9785ed69f915b403ba3c55d799b896d098443b6ab7afe83f1f5c1c", 0x51}], 0x1, &(0x7f0000000400), 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000000}], 0x3, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280000010076786c616e00"], 0x50}}, 0x4008840) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={r0, 0x1, 0xfffffffffffffff7, 0x8e5a}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000280)) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) write$rfkill(r1, &(0x7f0000000440)={0x7, 0x4, 0x2, 0x1}, 0x8) setsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f0000000540)="69fe8e86bee78bb67afe8e5bedd1978bd0b8cd76d78480505d9e1a783730d96d4744fd117eb230ca6b0cb59fd9e43e5f30ecade649d6df6f948492e138c7f01a75426280b50d72ffb5388610d7dd5f23b39c5e69144e36e12c759a2c08661a61953fe9c22da0", 0x66) 15.714212647s ago: executing program 3 (id=8841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b0, 0x148, 0x2f8, 0x228, 0x228, 0x228, 0x618, 0x618, 0x618, 0x618, 0x618, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x0, 0x0, 0xff000000], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [], 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @dev, [0x0, 0x0, 0x0, 0xffffffff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x8}, {}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @empty, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff000000], [0x0, 0x0, 0xff000000, 0xffffffff], 'veth1_to_hsr\x00', '\x00', {0xff}, {}, 0x62, 0x35, 0x1, 0x10}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x70, 0xd0, 0x0, {0x390, 0x8f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x803, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000140)=ANY=[@ANYRES16]) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000700)={'ip_vti0\x00', r6, 0x10, 0x10, 0x4, 0x1, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x10, "d42b856399c666e3654cb5583ce7"}, @lsrr={0x83, 0x17, 0x1d, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @private=0xa010101]}, @ssrr={0x89, 0xb, 0x3b, [@dev={0xac, 0x14, 0x14, 0x12}, @multicast1]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0xb, 0xab, [@multicast2, @multicast1]}]}}}}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r10], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r11 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) setsockopt$sock_timeval(r7, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000018000900fc9c6dfc643a212374249b77dfffffff00000000"], 0x1c}}, 0x20000084) 15.661993231s ago: executing program 0 (id=8842): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x89e1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x1, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000780)={r2, 0x1, 0x6, @local}, 0x10) 15.567679263s ago: executing program 3 (id=8843): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a000000000000000800060001"], 0x24}}, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @short}, 0xb) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 15.499159229s ago: executing program 0 (id=8844): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) sendmsg$alg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x123) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) (async) sendmsg$alg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x123) (async) 15.455441543s ago: executing program 0 (id=8845): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 15.331166715s ago: executing program 4 (id=8846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x32c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff0097}, {0x6, 0x11, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x80d10e88b7c9de34) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x18c, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf43b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4a00000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe38}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdfe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40011}, 0x40) 15.330000753s ago: executing program 0 (id=8847): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0xfa) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x48, &(0x7f0000000080)={0xa, 0x0}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 15.187146732s ago: executing program 0 (id=8848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff51}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 11.160273767s ago: executing program 33 (id=8723): r0 = socket(0x1e, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x110, 0x7, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0x7, 0x3, 0x3, 0x2, 0xffffffffffffffed}, @jmp={0x5, 0x1, 0x7, 0x4, 0x1, 0x0, 0x4}, @generic={0x8, 0x6, 0x2, 0xca, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0xbf, &(0x7f0000000100)=""/191, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x6, 0x4, 0x6}, 0x10, 0x238aa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r0, r2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xa) ppoll(&(0x7f0000000080)=[{r6, 0x2}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fcdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="944c90b94c211a29"], 0x2c}, 0x1, 0x0, 0x0, 0x20001000}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r15 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r15, &(0x7f00000004c0)="800000800000210ee7decd7a0000", 0xe, 0x40054, &(0x7f00000001c0)={0x11, 0x4, r14, 0x1, 0xd8, 0x6, @remote}, 0x14) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r17, 0x0) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000001800000000400000200000000300000", @ANYRES32, @ANYBLOB="71f100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0300000001000000030000ff00000000672acc17ade10000000000000000000000004812f2e20f47c4166417df9769f664282ea67d658c8834ee01b3c52cb16e348b7a6c23e1a4a812b89d14e0e3c4993d8207d24306f3b295989a6e4e31536c86176912289fdbc257b0adc4b31e9db6e1d21444a9b5c00d"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f00000005c0)=@raw=[@ldst={0x2, 0x2, 0x6, 0x1, 0x3, 0x2, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x71, '\x00', r14, 0x25, r16, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xf, 0x5, 0xffffffbe}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r17, 0x1, 0xffffffffffffffff, r18], &(0x7f0000000800)=[{0x2, 0x5, 0xe, 0xb}, {0x5, 0x2, 0xb, 0x7}, {0x1, 0x2, 0x6, 0x2}, {0x2, 0x1, 0x7, 0x8}], 0x10, 0x20}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) 10.120781136s ago: executing program 34 (id=8726): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4040) 84.088249ms ago: executing program 35 (id=8848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff51}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 51.457124ms ago: executing program 36 (id=8843): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a000000000000000800060001"], 0x24}}, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @short}, 0xb) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 37 (id=8846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x32c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff0097}, {0x6, 0x11, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x80d10e88b7c9de34) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x18c, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf43b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4a00000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe38}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdfe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40011}, 0x40) kernel console output (not intermixed with test programs): m netdevsim4 netdevsim0: renamed from eth0 [ 736.173371][T28579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 736.188906][ T5845] Bluetooth: hci5: command tx timeout [ 736.203033][T28579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 736.268921][T28579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 736.366977][T28818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6624'. [ 736.505441][T28833] netlink: 'syz.0.6628': attribute type 1 has an invalid length. [ 736.580685][T28833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 736.593027][T28840] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6631'. [ 736.605622][T28836] nbd: must specify a device to reconfigure [ 736.658959][T28840] netlink: 'syz.3.6631': attribute type 22 has an invalid length. [ 736.679144][T28833] bond3: (slave gretap2): making interface the new active one [ 736.688229][T28833] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 736.700351][T28842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6629'. [ 736.813629][T28844] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6631'. [ 736.841653][T28840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 736.861255][T28579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.067733][T28854] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 737.094610][T28846] wlan0 speed is unknown, defaulting to 1000 [ 737.146841][T28579] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.289506][T28860] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 737.301697][T28860] bond4 (unregistering): Released all slaves [ 737.449242][T28870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6636'. [ 737.560280][T12166] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.567539][T12166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.608207][T12166] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.615408][T12166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.297904][T28579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.337403][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a240c00: rx timeout, send abort [ 738.768852][T28936] netlink: 'syz.0.6655': attribute type 2 has an invalid length. [ 738.837578][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a243000: rx timeout, send abort [ 738.847431][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a240c00: abort rx timeout. Force session deactivation [ 738.901809][T28579] veth0_vlan: entered promiscuous mode [ 738.949551][T28579] veth1_vlan: entered promiscuous mode [ 739.032376][T28947] bond4 (unregistering): Released all slaves [ 739.188713][T28579] veth0_macvtap: entered promiscuous mode [ 739.224739][T28579] veth1_macvtap: entered promiscuous mode [ 739.300380][T28579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.334785][T28579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.367458][T10413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.424373][T28968] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 739.445181][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a243000: abort rx timeout. Force session deactivation [ 739.558511][T10413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.575855][T10413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.629528][T10413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.820105][T12166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.841066][T12166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.893304][T28993] 8021q: VLANs not supported on ipvlan1 [ 739.912158][T16999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.942377][T16999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.086515][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.086515][T29000] Use struct sctp_sack_info instead [ 740.135088][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.135088][T29000] Use struct sctp_sack_info instead [ 740.195937][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.195937][T29000] Use struct sctp_sack_info instead [ 740.246708][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.246708][T29000] Use struct sctp_sack_info instead [ 740.286382][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.286382][T29000] Use struct sctp_sack_info instead [ 740.304851][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.304851][T29000] Use struct sctp_sack_info instead [ 740.325060][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.325060][T29000] Use struct sctp_sack_info instead [ 740.351981][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.351981][T29000] Use struct sctp_sack_info instead [ 740.378223][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.378223][T29000] Use struct sctp_sack_info instead [ 740.397576][T29000] sctp: [Deprecated]: syz.1.6674 (pid 29000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.397576][T29000] Use struct sctp_sack_info instead [ 740.469462][T29017] tipc: Started in network mode [ 740.474582][T29017] tipc: Node identity ac14140f, cluster identity 4711 [ 740.482309][T29017] tipc: New replicast peer: 255.255.255.255 [ 740.489721][T29017] tipc: Enabled bearer , priority 10 [ 740.654524][T29029] netlink: 'syz.0.6682': attribute type 1 has an invalid length. [ 740.654939][T29027] netlink: 'syz.3.6681': attribute type 58 has an invalid length. [ 740.680606][T29029] netlink: 'syz.0.6682': attribute type 2 has an invalid length. [ 740.688005][T29027] __nla_validate_parse: 5 callbacks suppressed [ 740.688058][T29027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6681'. [ 740.722098][T29029] netlink: 'syz.0.6682': attribute type 1 has an invalid length. [ 740.748552][T29029] netlink: 'syz.0.6682': attribute type 3 has an invalid length. [ 740.779066][T29029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6682'. [ 740.796980][T29039] xt_TCPMSS: Only works on TCP SYN packets [ 740.813031][T29035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6681'. [ 740.938576][T29043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6686'. [ 740.962195][T29045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.966803][T29043] syz_tun: left allmulticast mode [ 740.998353][T29043] syz_tun: left promiscuous mode [ 741.003615][T29043] bridge0: port 3(syz_tun) entered disabled state [ 741.038154][T29043] bridge_slave_1: left allmulticast mode [ 741.054104][T29043] bridge_slave_1: left promiscuous mode [ 741.089043][T29043] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.105225][T29043] bridge_slave_0: left allmulticast mode [ 741.111362][T29043] bridge_slave_0: left promiscuous mode [ 741.118521][T29043] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.196830][T29049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6689'. [ 741.245960][T29045] netlink: 'syz.1.6687': attribute type 12 has an invalid length. [ 741.256806][T29045] netlink: 'syz.1.6687': attribute type 29 has an invalid length. [ 741.266013][T29045] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6687'. [ 741.277126][T29045] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6687'. [ 741.379965][T29049] bridge0: entered promiscuous mode [ 741.385247][T29049] bridge0: entered allmulticast mode [ 741.414848][T29072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.517172][T29072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6693'. [ 741.527650][T29072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6693'. [ 741.538832][T29076] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6695'. [ 741.607227][ T24] tipc: Node number set to 2886997007 [ 742.555842][T29120] syzkaller0: entered promiscuous mode [ 742.579091][T29120] syzkaller0: entered allmulticast mode [ 742.844888][T29148] netlink: 'syz.1.6719': attribute type 4 has an invalid length. [ 742.883885][T29149] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 742.893936][T27889] IPVS: starting estimator thread 0... [ 743.007220][T29155] IPVS: using max 26 ests per chain, 62400 per kthread [ 743.160036][T29168] xt_ecn: cannot match TCP bits for non-tcp packets [ 743.258800][T29173] netlink: 'syz.4.6727': attribute type 6 has an invalid length. [ 743.508256][T29189] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 744.368527][T29231] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1813841847/1813841849 [ 744.380077][T29231] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1813841847/1813841849 [ 745.281681][T29293] macvlan0: entered promiscuous mode [ 745.529449][T29308] netlink: 'syz.2.6767': attribute type 2 has an invalid length. [ 745.724119][T29316] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 745.735768][T29316] bond1 (unregistering): Released all slaves [ 745.957608][T29332] __nla_validate_parse: 9 callbacks suppressed [ 745.957626][T29332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6774'. [ 745.999164][T29332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6774'. [ 746.056825][T29335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6775'. [ 746.077850][T29335] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 746.134238][T29339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6777'. [ 746.653148][T29365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6783'. [ 746.663759][T29365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6783'. [ 746.672975][T29365] netlink: 'syz.0.6783': attribute type 3 has an invalid length. [ 746.712622][T29368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6784'. [ 746.735522][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6784'. [ 746.773612][T29372] xt_socket: unknown flags 0x50 [ 746.958905][T29383] bond0: (slave bond_slave_0): Releasing backup interface [ 746.997555][T29383] bond0: (slave bond_slave_1): Releasing backup interface [ 747.062664][T29383] team0: Port device team_slave_0 removed [ 747.092525][T29383] team0: Port device team_slave_1 removed [ 747.109819][T29383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.124135][T29383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.137208][T29383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.144880][T29383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.158741][T29383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 747.298785][T29395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6789'. [ 747.312562][T29395] netlink: 'syz.0.6789': attribute type 1 has an invalid length. [ 747.322043][T29391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6788'. [ 747.398271][T29400] netlink: 'syz.2.6790': attribute type 24 has an invalid length. [ 747.456508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.935845][T29435] netlink: 'syz.4.6799': attribute type 1 has an invalid length. [ 747.974516][T29427] nbd2: detected capacity change from 0 to 127 [ 747.996166][T29434] block nbd0: reconnected socket [ 748.029139][T29444] netlink: 'syz.3.6802': attribute type 10 has an invalid length. [ 748.038487][T29444] batman_adv: batadv0: Adding interface: netdevsim0 [ 748.045133][T29444] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.068306][ T5836] block nbd2: Receive control failed (result -32) [ 748.074411][T29444] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 748.091326][ T5845] block nbd0: Receive control failed (result -32) [ 748.236620][T29448] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 748.265670][T29448] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 748.352915][T14737] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 748.578566][T14737] dvmrp0 (unregistering): left allmulticast mode [ 748.632668][T14737] bond6 (unregistering): (slave geneve3): Releasing active interface [ 748.655642][T14737] bond4 (unregistering): (slave geneve2): Releasing active interface [ 749.251688][T14737] bond1 (unregistering): Released all slaves [ 749.266954][T14737] bond2 (unregistering): Released all slaves [ 749.282016][T14737] bond3 (unregistering): Released all slaves [ 749.404844][T14737] bond4 (unregistering): Released all slaves [ 749.420742][T14737] bond5 (unregistering): Released all slaves [ 749.547064][T14737] bond6 (unregistering): Released all slaves [ 749.665845][T14737] bond7 (unregistering): Released all slaves [ 749.681412][T14737] bond8 (unregistering): Released all slaves [ 749.695598][T14737] bond9 (unregistering): Released all slaves [ 749.710917][T14737] bond10 (unregistering): Released all slaves [ 749.837456][T14737] bond11 (unregistering): Released all slaves [ 749.956996][T14737] bond12 (unregistering): Released all slaves [ 750.071468][T14737] bond13 (unregistering): Released all slaves [ 750.086677][T14737] bond14 (unregistering): Released all slaves [ 750.102596][T29450] netlink: 'syz.3.6805': attribute type 12 has an invalid length. [ 750.298484][T14737] tipc: Left network mode [ 750.390503][T14737] IPVS: stopping master sync thread 9699 ... [ 750.988343][T29513] __nla_validate_parse: 2 callbacks suppressed [ 751.007719][T29513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6821'. [ 751.086913][T29508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6820'. [ 751.393713][T29525] netlink: 'syz.3.6827': attribute type 4 has an invalid length. [ 751.708033][T29546] xt_TPROXY: Can be used only with -p tcp or -p udp [ 751.741476][T29552] xt_TPROXY: Can be used only with -p tcp or -p udp [ 751.792087][T29554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6836'. [ 751.821716][T29549] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6836'. [ 752.146750][T14737] hsr_slave_0: left promiscuous mode [ 752.169837][T14737] veth0_macvtap: left promiscuous mode [ 752.179561][T14737] veth1_vlan: left promiscuous mode [ 752.322410][T29582] netlink: 'syz.0.6844': attribute type 3 has an invalid length. [ 752.398080][T29588] netlink: 'syz.4.6845': attribute type 1 has an invalid length. [ 752.420051][T29588] netlink: 'syz.4.6845': attribute type 2 has an invalid length. [ 752.429954][T29588] netlink: 'syz.4.6845': attribute type 1 has an invalid length. [ 752.438304][T29588] netlink: 'syz.4.6845': attribute type 3 has an invalid length. [ 752.447764][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6845'. [ 752.594445][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.765753][T29601] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6848'. [ 753.182738][T16991] smc: removing ib device sy [ 753.644382][T29609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6851'. [ 753.665075][T29609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6851'. [ 753.686377][T29609] netlink: 'syz.2.6851': attribute type 3 has an invalid length. [ 753.799852][T29614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6852'. [ 753.891591][T29614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6852'. [ 754.238190][T29633] netlink: 'syz.1.6858': attribute type 6 has an invalid length. [ 754.376921][T29637] netlink: 'syz.4.6859': attribute type 6 has an invalid length. [ 754.558793][T29645] netlink: 'syz.1.6861': attribute type 10 has an invalid length. [ 754.604776][T29645] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.661369][T29645] bridge_slave_1: left allmulticast mode [ 754.677032][T29645] bridge_slave_1: left promiscuous mode [ 754.696999][T29645] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.771954][T29645] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 755.484566][T29677] veth0_virt_wifi: entered allmulticast mode [ 755.534704][T29677] team0: Port device veth0_virt_wifi added [ 755.609390][T29688] Cannot find add_set index 0 as target [ 756.918974][T29751] validate_nla: 2 callbacks suppressed [ 756.918995][T29751] netlink: 'syz.3.6894': attribute type 5 has an invalid length. [ 756.995701][T29738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.099182][T29745] veth0_to_bond: entered allmulticast mode [ 757.273483][T29760] __nla_validate_parse: 8 callbacks suppressed [ 757.273502][T29760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6897'. [ 757.319739][T29762] Bluetooth: MGMT ver 1.23 [ 757.341513][T29763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6897'. [ 758.905789][T14737] IPVS: stop unused estimator thread 0... [ 759.585019][T29811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6910'. [ 759.907530][T29836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6917'. [ 760.253289][T29858] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 760.288420][T29858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6926'. [ 760.394071][T29870] netlink: 'syz.2.6928': attribute type 1 has an invalid length. [ 760.570705][T29875] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 760.570702][T29878] Bluetooth: MGMT ver 1.23 [ 760.595569][T29875] bond4 (unregistering): Released all slaves [ 760.701058][T29883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.927144][T29903] tipc: Enabled bearer , priority 0 [ 760.934923][T29903] syzkaller0: entered promiscuous mode [ 760.940958][T29903] syzkaller0: entered allmulticast mode [ 760.953397][T29903] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 761.025503][T29902] tipc: Resetting bearer [ 761.118394][T29902] tipc: Disabling bearer [ 761.517357][T29934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6947'. [ 761.753096][T29953] netlink: 'syz.3.6954': attribute type 1 has an invalid length. [ 761.900846][T29956] netlink: 'syz.1.6953': attribute type 29 has an invalid length. [ 761.910093][T29955] netlink: 'syz.1.6953': attribute type 29 has an invalid length. [ 762.007162][T29969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6959'. [ 762.022514][T29969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6959'. [ 762.049006][T29969] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6959'. [ 762.396578][T29995] netlink: 'syz.2.6965': attribute type 29 has an invalid length. [ 762.405500][T29995] netlink: 'syz.2.6965': attribute type 29 has an invalid length. [ 762.492018][T30000] Unknown options in mask b7f2 [ 762.698818][T30015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6973'. [ 762.746467][T30017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6971'. [ 762.975552][T30032] tipc: Enabled bearer , priority 0 [ 763.010062][T30027] syzkaller0: entered promiscuous mode [ 763.025859][T30027] syzkaller0: entered allmulticast mode [ 763.117090][T30027] tipc: Resetting bearer [ 763.198110][T30027] tipc: Disabling bearer [ 763.319969][T30042] netlink: 'syz.1.6976': attribute type 39 has an invalid length. [ 763.342094][T30045] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 763.513453][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6981'. [ 763.531479][T30047] bridge3: entered promiscuous mode [ 763.550436][T30047] bridge3: entered allmulticast mode [ 763.598037][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6981'. [ 763.609094][T30004] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.691411][T30004] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.733344][T30004] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.743343][T30004] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.885567][T30061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6985'. [ 764.164063][T30078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6992'. [ 764.184929][T30078] bridge_slave_1: left allmulticast mode [ 764.192138][T30078] bridge_slave_1: left promiscuous mode [ 764.198497][T30078] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.229384][T30078] bridge_slave_0: left allmulticast mode [ 764.244286][T30078] bridge_slave_0: left promiscuous mode [ 764.263285][T30078] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.581480][T30065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6986'. [ 765.889390][T30126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7007'. [ 766.077966][T30129] netlink: 'syz.3.7012': attribute type 13 has an invalid length. [ 766.459051][T30149] bridge_slave_0: left allmulticast mode [ 766.464959][T30149] bridge_slave_0: left promiscuous mode [ 766.471810][T30149] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.530697][T30149] bond0: (slave bridge_slave_1): Releasing backup interface [ 766.573988][T30149] bond0: (slave bond_slave_0): Releasing backup interface [ 766.591718][T30149] bond0: (slave bond_slave_1): Releasing backup interface [ 766.618217][T30149] team0: Port device team_slave_0 removed [ 766.631819][T30149] team0: Port device team_slave_1 removed [ 766.649108][T30149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.670596][T30149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.680834][T30149] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 766.803895][T30168] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 767.355720][T30199] ip6gre1: entered promiscuous mode [ 767.374594][T30199] ip6gre1: entered allmulticast mode [ 767.463333][T30206] netlink: 'syz.1.7028': attribute type 8 has an invalid length. [ 767.611283][T30217] netlink: 'syz.3.7031': attribute type 4 has an invalid length. [ 769.262432][T30224] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 769.274761][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7036'. [ 769.287899][T30234] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7036'. [ 769.300047][T30224] netlink: 'syz.3.7034': attribute type 13 has an invalid length. [ 769.348239][T30233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7036'. [ 769.366761][T30234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7036'. [ 769.417353][T30233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7036'. [ 769.530616][T30244] delete_channel: no stack [ 769.897500][T30265] netlink: 'syz.4.7045': attribute type 1 has an invalid length. [ 769.969391][T30279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7045'. [ 769.995231][T30276] netlink: 'syz.1.7048': attribute type 16 has an invalid length. [ 770.018784][T30276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7048'. [ 770.023379][T30282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7049'. [ 770.160492][T30289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7051'. [ 770.609532][T30321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7060'. [ 771.032105][T30325] syzkaller0: entered promiscuous mode [ 771.038300][T30325] syzkaller0: entered allmulticast mode [ 771.520801][T30365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.085389][T30370] chnl_net:caif_netlink_parms(): no params data found [ 773.498310][T30404] netlink: 'syz.4.7079': attribute type 2 has an invalid length. [ 773.765706][T30415] tipc: Started in network mode [ 773.784088][T30415] tipc: Node identity 9aa7541b3e13, cluster identity 4711 [ 773.797590][T30415] tipc: Enabled bearer , priority 0 [ 773.925835][T30417] syzkaller0: entered promiscuous mode [ 773.953903][T30417] syzkaller0: entered allmulticast mode [ 773.960444][T30417] tipc: Resetting bearer [ 773.978773][T30412] tipc: Resetting bearer [ 774.101735][T30436] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 774.488197][T30456] netlink: 'syz.0.7097': attribute type 1 has an invalid length. [ 774.527721][T30456] netlink: 'syz.0.7097': attribute type 64 has an invalid length. [ 774.535720][T30456] __nla_validate_parse: 10 callbacks suppressed [ 774.535739][T30456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7097'. [ 774.580503][T30464] netlink: 'syz.0.7097': attribute type 64 has an invalid length. [ 774.606068][T30464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7097'. [ 774.644903][T30466] netlink: 'syz.4.7098': attribute type 1 has an invalid length. [ 774.668620][T30466] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7098'. [ 776.156375][T30412] tipc: Disabling bearer [ 776.231446][T28678] tipc: Node number set to 2763281435 [ 776.268265][T30476] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 776.305290][T30476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.323704][T30478] bond3: ARP target 1.0.0.0 is already present [ 776.332882][T30478] bond3: option arp_ip_target: invalid value (1) [ 776.342241][T30481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7102'. [ 776.352157][T30478] bond3 (unregistering): Released all slaves [ 776.462415][T30489] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7104'. [ 776.506589][T30489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7104'. [ 776.578701][T30494] netlink: 'syz.2.7104': attribute type 14 has an invalid length. [ 776.819401][T30504] netlink: 'syz.3.7108': attribute type 10 has an invalid length. [ 776.840883][T30511] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7110'. [ 776.850969][T30504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7108'. [ 776.907181][T30504] team0: Port device geneve0 added [ 776.929516][T16992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.958753][T16992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.990926][T16992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.021268][T16992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.039498][T30518] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 777.047630][T27889] IPVS: starting estimator thread 0... [ 777.136426][T30519] IPVS: using max 29 ests per chain, 69600 per kthread [ 777.533532][T30554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7119'. [ 777.583793][T30554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7119'. [ 778.375450][T30595] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 778.448758][T30595] netlink: 'syz.4.7133': attribute type 19 has an invalid length. [ 778.807392][T30622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.814721][T30622] IPv6: NLM_F_CREATE should be set when creating new route [ 778.822049][T30622] IPv6: NLM_F_CREATE should be set when creating new route [ 778.829344][T30622] IPv6: NLM_F_CREATE should be set when creating new route [ 778.839472][T30622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.878262][T30623] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 778.884799][T30623] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 779.696135][T30673] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 780.066561][T30699] netlink: 'syz.4.7163': attribute type 1 has an invalid length. [ 780.096484][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.153612][T30699] 8021q: adding VLAN 0 to HW filter on device bond3 [ 780.165942][T30703] __nla_validate_parse: 71 callbacks suppressed [ 780.165962][T30703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7162'. [ 780.218452][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7165'. [ 780.249797][T30700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 780.265283][T30700] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 780.278782][T30700] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 780.378305][T30704] veth3: entered promiscuous mode [ 780.404902][T30704] bond3: (slave veth3): Enslaving as an active interface with a down link [ 780.893714][T30753] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 781.055319][T30757] syzkaller0: entered promiscuous mode [ 781.065016][T30757] syzkaller0: entered allmulticast mode [ 781.073026][T30759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7176'. [ 781.110441][T30759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7176'. [ 781.125700][T30767] netlink: 'syz.0.7177': attribute type 1 has an invalid length. [ 781.135541][T30767] netlink: 'syz.0.7177': attribute type 1 has an invalid length. [ 781.142370][T30759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7176'. [ 781.159925][T30767] netlink: 'syz.0.7177': attribute type 1 has an invalid length. [ 781.171407][T30767] netlink: 'syz.0.7177': attribute type 2 has an invalid length. [ 781.179342][T30767] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7177'. [ 781.239177][T30770] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20001 [ 781.251217][T30770] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7179'. [ 781.334865][T30775] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7179'. [ 781.374598][T30776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7181'. [ 781.399923][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7181'. [ 781.399957][T30775] block nbd0: reconnected socket [ 781.486503][ T5845] block nbd0: Receive control failed (result -32) [ 781.915569][T30826] netlink: 'syz.0.7196': attribute type 11 has an invalid length. [ 781.928461][T30819] bond4: option min_links: invalid value (18446744073709551614) [ 781.943671][T30819] bond4: option min_links: allowed values 0 - 2147483647 [ 781.959131][T30819] bond4 (unregistering): Released all slaves [ 782.059098][T30828] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 782.078218][T30828] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 782.086003][T30828] gretap1: entered promiscuous mode [ 782.098957][T30828] gretap1: entered allmulticast mode [ 782.186112][T30833] netlink: 'syz.4.7200': attribute type 1 has an invalid length. [ 782.211016][T30837] netlink: 'syz.1.7202': attribute type 11 has an invalid length. [ 782.330443][T30840] bond4: (slave ip6gretap1): making interface the new active one [ 782.364364][T30840] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 782.415578][T30844] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 782.434620][T30844] bond3 (unregistering): Released all slaves [ 782.488773][T30852] dvmrp0: entered allmulticast mode [ 782.497598][T30852] netlink: 'syz.2.7205': attribute type 2 has an invalid length. [ 782.869153][T30867] syzkaller0: entered promiscuous mode [ 782.874730][T30867] syzkaller0: entered allmulticast mode [ 783.170600][T30886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 783.177944][T30886] IPv6: NLM_F_CREATE should be set when creating new route [ 783.425006][T30899] netlink: 'syz.3.7218': attribute type 3 has an invalid length. [ 783.559534][T30916] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 783.741759][T30928] netlink: 'syz.4.7226': attribute type 1 has an invalid length. [ 784.409397][T30963] xt_TPROXY: Can be used only with -p tcp or -p udp [ 785.200988][T31018] validate_nla: 1 callbacks suppressed [ 785.201010][T31018] netlink: 'syz.1.7254': attribute type 10 has an invalid length. [ 785.237785][T31018] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 785.299690][T31020] ip6gre1: entered promiscuous mode [ 785.304973][T31020] ip6gre1: entered allmulticast mode [ 785.531425][T31035] __nla_validate_parse: 15 callbacks suppressed [ 785.531446][T31035] netlink: 165 bytes leftover after parsing attributes in process `syz.4.7260'. [ 785.550638][T31032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7259'. [ 785.560841][T31033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7259'. [ 786.029831][T31056] netlink: 'syz.0.7267': attribute type 1 has an invalid length. [ 786.038874][T31056] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7267'. [ 786.209991][T31061] bond5 (unregistering): Released all slaves [ 786.294659][T31067] wlan0 speed is unknown, defaulting to 1000 [ 786.410273][T31072] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7272'. [ 786.445100][T31074] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7273'. [ 786.473967][T31074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7273'. [ 786.475133][T31077] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 786.797949][T31093] tipc: Enabled bearer , priority 0 [ 786.808368][T31093] syzkaller0: entered promiscuous mode [ 786.814285][T31093] syzkaller0: entered allmulticast mode [ 786.824105][T31093] SET target dimension over the limit! [ 786.832218][T31093] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 786.871931][T31093] tipc: Resetting bearer [ 786.894285][T31091] tipc: Resetting bearer [ 786.945599][T31091] tipc: Disabling bearer [ 786.985696][T31098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7281'. [ 787.108359][T31105] netlink: 'syz.2.7281': attribute type 1 has an invalid length. [ 787.119645][T31105] netlink: 'syz.2.7281': attribute type 7 has an invalid length. [ 787.127815][T31105] netlink: 'syz.2.7281': attribute type 8 has an invalid length. [ 787.146310][T31105] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7281'. [ 787.155590][T31105] NCSI netlink: No device for ifindex 65584 [ 787.155949][T31106] netlink: 'syz.1.7282': attribute type 13 has an invalid length. [ 787.204364][T31098] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.219231][T31098] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.255576][T31098] ` (unregistering): (slave 0!): Releasing backup interface [ 787.289313][T31098] ` (unregistering): Released all slaves [ 787.345305][T31106] gretap0: refused to change device tx_queue_len [ 787.367164][T31106] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 787.573374][T31126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7287'. [ 788.122810][T31162] syzkaller1: entered promiscuous mode [ 788.146517][T31162] syzkaller1: entered allmulticast mode [ 788.217262][T31164] syzkaller1: entered promiscuous mode [ 788.238589][T31164] syzkaller1: entered allmulticast mode [ 788.674894][T31199] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 788.686035][T31199] syzkaller0: entered promiscuous mode [ 788.694677][T31199] syzkaller0: entered allmulticast mode [ 788.950713][T31206] netlink: 'syz.1.7311': attribute type 1 has an invalid length. [ 789.100346][T31213] bond4: (slave bridge4): making interface the new active one [ 789.167343][T31213] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 789.890842][T31266] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 789.958774][T31266] netlink: 'syz.1.7329': attribute type 4 has an invalid length. [ 790.235987][T31284] sch_fq: defrate 0 ignored. [ 790.274655][T31286] sch_fq: defrate 0 ignored. [ 790.447720][T31298] pim6reg1: entered promiscuous mode [ 790.454220][T31298] pim6reg1: entered allmulticast mode [ 790.735027][T31310] __nla_validate_parse: 6 callbacks suppressed [ 790.735049][T31310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7342'. [ 790.817920][T31312] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 790.847795][T31312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7343'. [ 790.933063][T31316] netlink: 'syz.0.7345': attribute type 126 has an invalid length. [ 791.881917][T31373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7362'. [ 791.902971][T31373] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7362'. [ 792.012561][T31376] bond0: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 792.041213][T31376] bond0: entered promiscuous mode [ 792.069345][T31390] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7368'. [ 792.081026][T31376] bond0: entered allmulticast mode [ 792.093202][T31376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.119918][T31392] netlink: 'syz.1.7367': attribute type 8 has an invalid length. [ 792.258417][T31386] Set syz1 is full, maxelem 2032 reached [ 792.674714][T31402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7371'. [ 792.699359][T31430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7381'. [ 792.763873][T31433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.232101][T31458] bond3: Unable to set up delay as MII monitoring is disabled [ 793.364918][T31458] bond3 (unregistering): Released all slaves [ 793.904671][T31498] tipc: Started in network mode [ 793.916670][T31498] tipc: Node identity a2af9fdbd6a8, cluster identity 4711 [ 793.924321][T31498] tipc: Enabled bearer , priority 0 [ 794.069899][T31509] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 794.079480][T31503] syzkaller0: entered promiscuous mode [ 794.079510][T31503] syzkaller0: entered allmulticast mode [ 794.081510][T31503] tipc: Resetting bearer [ 794.105407][T31509] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 794.121724][T31488] tipc: Resetting bearer [ 794.161150][T31514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7400'. [ 794.228753][T31517] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 794.242503][T31517] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 795.816108][T31488] tipc: Disabling bearer [ 795.826686][T31509] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 796.065261][T31542] netlink: 'syz.3.7411': attribute type 4 has an invalid length. [ 796.104579][T31542] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7411'. [ 796.140427][ T981] tipc: Node number set to 1946656731 [ 810.976961][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 816.098342][ T5836] Bluetooth: hci2: command 0x0419 tx timeout [ 826.336346][T20637] Bluetooth: hci1: command 0x040f tx timeout [ 835.233846][ T13] ` (unregistering): Released all slaves [ 835.342439][ T13] bond1 (unregistering): Released all slaves [ 835.450124][ T13] bond0 (unregistering): Released all slaves [ 835.464497][ T13] bond2 (unregistering): Released all slaves [ 835.478451][ T13] bond3 (unregistering): Released all slaves [ 835.492541][ T13] bond4 (unregistering): Released all slaves [ 835.606500][ T13] bond5 (unregistering): Released all slaves [ 835.621736][ T13] bond6 (unregistering): Released all slaves [ 835.635497][ T13] bond7 (unregistering): Released all slaves [ 835.751034][ T13] bond8 (unregistering): Released all slaves [ 835.890825][ T13] tipc: Disabling bearer [ 835.905541][ T13] tipc: Left network mode [ 836.298167][ T13] hsr_slave_1: left promiscuous mode [ 836.304081][ T13] batman_adv: batadv0: Removing interface: veth5 [ 836.314425][ T13] : left allmulticast mode [ 836.345465][ T13] pimreg3 (unregistering): left allmulticast mode [ 836.363351][ T13] pim6reg (unregistering): left allmulticast mode [ 837.298655][ T13] IPVS: stop unused estimator thread 0... [ 852.897072][T31558] netlink: 'syz.1.7414': attribute type 1 has an invalid length. [ 852.922975][T31558] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 853.182283][T31586] netlink: 'syz.3.7421': attribute type 10 has an invalid length. [ 853.245060][T31586] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 853.506732][T31601] syzkaller0: entered promiscuous mode [ 853.512355][T31601] syzkaller0: entered allmulticast mode [ 853.851297][T31630] xt_hashlimit: overflow, try lower: 3/0 [ 853.988757][T31643] xt_policy: too many policy elements [ 853.996774][T31644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7435'. [ 854.135954][T31653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7438'. [ 855.860163][T31654] wlan0 speed is unknown, defaulting to 1000 [ 855.975296][T31671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7444'. [ 856.156909][T31677] veth3: entered allmulticast mode [ 856.194595][T31682] netlink: 'syz.0.7446': attribute type 1 has an invalid length. [ 856.232176][T31682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 856.261408][T31685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.303897][T31682] bond5: (slave veth3): Enslaving as an active interface with a down link [ 856.354124][T31682] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 856.380662][T31682] bond5: entered promiscuous mode [ 856.385857][T31682] bond5: entered allmulticast mode [ 856.424845][T31692] netlink: 'syz.3.7449': attribute type 1 has an invalid length. [ 856.435094][T31692] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7449'. [ 856.450152][T31695] netlink: 'syz.3.7449': attribute type 1 has an invalid length. [ 856.458290][T31695] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7449'. [ 856.613848][T31706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7455'. [ 856.632048][T31706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7455'. [ 856.677424][T31706] netlink: 'syz.1.7455': attribute type 1 has an invalid length. [ 856.983686][T31733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7460'. [ 857.188860][T31739] netlink: 'syz.3.7463': attribute type 1 has an invalid length. [ 857.214329][T31739] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 857.289896][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7461'. [ 857.380710][T31745] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7466'. [ 857.588252][T31760] team0: left allmulticast mode [ 857.596907][T31760] team_slave_0: left allmulticast mode [ 857.602442][T31760] team_slave_1: left allmulticast mode [ 857.621030][T31760] team0: left promiscuous mode [ 857.625957][T31760] team_slave_0: left promiscuous mode [ 857.632848][T31760] team_slave_1: left promiscuous mode [ 857.639261][T31760] bridge0: port 3(team0) entered disabled state [ 857.653400][T31760] bridge_slave_0: left allmulticast mode [ 857.660171][T31760] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.671292][T31760] bridge_slave_1: left allmulticast mode [ 857.678297][T31760] bridge_slave_1: left promiscuous mode [ 857.684130][T31760] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.728397][T31760] team0: Port device team_slave_0 removed [ 857.765895][T31760] team0: Port device team_slave_1 removed [ 857.786711][T31760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.794202][T31760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.804047][T31760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.816395][T31760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.826961][T31760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 858.409866][T31800] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 858.932350][T31824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.065141][T31856] netlink: 'syz.4.7496': attribute type 39 has an invalid length. [ 859.357710][T31869] __nla_validate_parse: 6 callbacks suppressed [ 859.357732][T31869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7501'. [ 859.485340][T31879] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7503'. [ 859.518071][T31881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7504'. [ 859.752078][T31896] netlink: 'syz.3.7509': attribute type 9 has an invalid length. [ 859.760055][T31896] netlink: 'syz.3.7509': attribute type 11 has an invalid length. [ 859.769725][T31896] netlink: 'syz.3.7509': attribute type 12 has an invalid length. [ 859.786408][T31896] netlink: 192088 bytes leftover after parsing attributes in process `syz.3.7509'. [ 859.818144][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7509'. [ 859.955920][T31917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7512'. [ 859.979658][T31918] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 860.007891][T31923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7515'. [ 860.047282][T31906] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7508'. [ 860.097465][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 860.327483][T31906] vlan3: entered allmulticast mode [ 860.332781][T31906] gretap0: entered allmulticast mode [ 860.410739][T31930] bond3: option all_slaves_active: invalid value (222) [ 860.433008][T31930] bond3 (unregistering): Released all slaves [ 860.785476][T31945] syzkaller0: entered promiscuous mode [ 860.797791][T31945] syzkaller0: entered allmulticast mode [ 860.813424][T31949] lo: entered promiscuous mode [ 860.820667][T31949] netlink: 'syz.3.7523': attribute type 2 has an invalid length. [ 860.834899][T31949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.002266][T31960] netlink: 'syz.2.7525': attribute type 1 has an invalid length. [ 861.161939][T31962] macvlan2: entered promiscuous mode [ 861.168323][T31962] macvlan2: entered allmulticast mode [ 861.201133][T31962] bond1: entered promiscuous mode [ 861.207959][T31962] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 861.251666][T31962] bond1: left promiscuous mode [ 861.494977][T31991] dvmrp0: entered allmulticast mode [ 861.574894][T31991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7535'. [ 861.670902][T31996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7537'. [ 862.294781][T32028] netlink: 'syz.4.7539': attribute type 2 has an invalid length. [ 863.647283][T32028] : entered promiscuous mode [ 864.150722][T32058] SET target dimension over the limit! [ 864.332100][T32082] netlink: 'syz.1.7554': attribute type 8 has an invalid length. [ 864.440284][T32063] netlink: 'syz.0.7540': attribute type 26 has an invalid length. [ 864.451034][T32082] netlink: 'syz.1.7554': attribute type 8 has an invalid length. [ 864.611822][T32069] __nla_validate_parse: 7 callbacks suppressed [ 864.611843][T32069] netlink: 576 bytes leftover after parsing attributes in process `syz.0.7540'. [ 864.675645][T32093] xt_hashlimit: size too large, truncated to 1048576 [ 864.933551][T32106] netlink: 'syz.1.7561': attribute type 3 has an invalid length. [ 864.944308][T32106] netlink: 'syz.1.7561': attribute type 1 has an invalid length. [ 864.972624][T32106] netlink: 212 bytes leftover after parsing attributes in process `syz.1.7561'. [ 865.010331][T32106] NCSI netlink: No device for ifindex 813332851 [ 865.071013][T32110] syzkaller1: entered promiscuous mode [ 865.072036][T32114] netlink: 'syz.0.7564': attribute type 33 has an invalid length. [ 865.076996][T32110] syzkaller1: entered allmulticast mode [ 865.099229][T32114] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7564'. [ 865.211558][T32117] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 865.239058][T32117] bond5 (unregistering): Released all slaves [ 865.342113][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7566'. [ 865.393923][T32129] netlink: 'syz.3.7566': attribute type 10 has an invalid length. [ 865.448276][T32123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 865.500043][T32129] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 865.519526][T32136] bridge0: port 1(syz_tun) entered blocking state [ 865.528131][T32136] bridge0: port 1(syz_tun) entered disabled state [ 865.534808][T32136] syz_tun: entered allmulticast mode [ 865.551191][T32136] syz_tun: entered promiscuous mode [ 865.813122][T32152] netlink: 'syz.2.7573': attribute type 1 has an invalid length. [ 865.868919][T32152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 865.881764][T32158] netlink: 'syz.1.7576': attribute type 3 has an invalid length. [ 865.916420][T32158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7576'. [ 866.226575][T32185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7582'. [ 866.907662][T32211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.034779][T32221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7594'. [ 867.220453][T32229] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.7596'. [ 867.238648][T32229] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 867.551031][T32254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7602'. [ 867.571753][T32254] openvswitch: netlink: Flow actions attr not present in new flow. [ 867.634494][T32254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7602'. [ 867.755390][T32263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.857870][T32268] netlink: 'syz.3.7603': attribute type 4 has an invalid length. [ 867.962288][T32273] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 868.011947][T32277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.344327][T32293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.539925][T32306] bond0: entered promiscuous mode [ 868.549468][T32306] batadv0: entered promiscuous mode [ 868.560371][T32306] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 868.573027][T32306] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 868.711750][T32311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 868.889638][T32328] openvswitch: netlink: IP tunnel TTL not specified. [ 868.999626][T32336] netlink: 'syz.3.7626': attribute type 11 has an invalid length. [ 869.299555][T32348] syzkaller0: entered promiscuous mode [ 869.305099][T32348] syzkaller0: entered allmulticast mode [ 869.465916][T32360] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 869.518672][T32363] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 869.537651][T32360] bond5 (unregistering): Released all slaves [ 869.730524][T32369] syzkaller1: entered promiscuous mode [ 869.736097][T32369] syzkaller1: entered allmulticast mode [ 869.790438][T32376] : entered promiscuous mode [ 869.938699][T32387] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 869.949083][T32387] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 869.977956][T32388] IPv6: NLM_F_REPLACE set, but no existing node found! [ 869.986505][T32380] __nla_validate_parse: 11 callbacks suppressed [ 869.986525][T32380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7640'. [ 870.014163][T32393] macvtap0: Device is already in use. [ 870.042893][T32380] validate_nla: 4 callbacks suppressed [ 870.042914][T32380] netlink: 'syz.3.7640': attribute type 8 has an invalid length. [ 870.064026][T32394] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7638'. [ 870.253223][T32410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7647'. [ 870.264673][T32410] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 870.359913][T32415] netlink: 'syz.0.7648': attribute type 10 has an invalid length. [ 870.368913][T32415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7648'. [ 870.503705][T32418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7649'. [ 870.526464][T32421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7649'. [ 870.596361][T32406] netlink: 'syz.2.7646': attribute type 1 has an invalid length. [ 870.644007][T32424] : renamed from veth1_vlan (while UP) [ 870.683347][T32424] pim6reg: entered allmulticast mode [ 870.817703][T20637] Bluetooth: hci5: command 0x0405 tx timeout [ 871.026916][T32442] openvswitch: netlink: IP tunnel dst address not specified [ 871.190946][T32449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7658'. [ 871.311501][T32459] netlink: 'syz.4.7662': attribute type 64 has an invalid length. [ 871.320199][T32459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7662'. [ 871.791553][T32485] netlink: 'syz.3.7668': attribute type 30 has an invalid length. [ 872.023316][T32494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7671'. [ 872.274815][T32515] xt_nat: multiple ranges no longer supported [ 872.298441][T32515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7675'. [ 872.485081][T32521] netlink: 'syz.1.7678': attribute type 1 has an invalid length. [ 872.499746][T32526] openvswitch: netlink: Tunnel attr 195 out of range max 16 [ 872.517569][T32521] netlink: 'syz.1.7678': attribute type 1 has an invalid length. [ 872.535656][T32526] openvswitch: netlink: Tunnel attr 195 out of range max 16 [ 872.738782][T32541] bond6: option all_slaves_active: invalid value (222) [ 872.780313][T32541] bond6 (unregistering): Released all slaves [ 873.009930][T32563] netlink: 'syz.1.7690': attribute type 6 has an invalid length. [ 873.028915][T32562] netlink: 'syz.1.7690': attribute type 6 has an invalid length. [ 873.635757][T32597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.178501][T32617] ipt_REJECT: ECHOREPLY no longer supported. [ 874.546548][T32636] netlink: 'syz.3.7715': attribute type 1 has an invalid length. [ 874.561638][T32632] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 874.586365][T32632] bond6 (unregistering): Released all slaves [ 874.625818][T32637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 874.674412][T32636] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 874.698157][T32636] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 875.086036][T32658] __nla_validate_parse: 8 callbacks suppressed [ 875.086057][T32658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7721'. [ 875.575689][T32671] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7725'. [ 875.712588][T32677] netlink: 'syz.1.7727': attribute type 4 has an invalid length. [ 875.867465][T32687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7732'. [ 875.878057][T32687] netlink: 'syz.3.7732': attribute type 3 has an invalid length. [ 876.279846][T32707] netlink: 'syz.4.7739': attribute type 21 has an invalid length. [ 876.306364][T32707] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7739'. [ 876.319902][T32707] netlink: 'syz.4.7739': attribute type 4 has an invalid length. [ 876.329110][T32707] netlink: 'syz.4.7739': attribute type 5 has an invalid length. [ 876.340544][T32707] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7739'. [ 876.361902][T32707] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.7739'. [ 876.375649][T32707] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 876.415211][T32710] syzkaller1: entered promiscuous mode [ 876.421581][T32710] syzkaller1: entered allmulticast mode [ 876.463345][T32714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7741'. [ 876.472662][T32714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7741'. [ 876.494277][T32710] IPVS: length: 24 != 110616 [ 876.595539][T32723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7744'. [ 876.747602][T32727] syzkaller0: entered promiscuous mode [ 876.753122][T32727] syzkaller0: entered allmulticast mode [ 876.852745][T32727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7746'. [ 877.222356][T32752] can: request_module (can-proto-0) failed. [ 877.243299][T32752] sctp: [Deprecated]: syz.1.7753 (pid 32752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.243299][T32752] Use struct sctp_sack_info instead [ 877.596008][ T307] netlink: 'syz.3.7761': attribute type 1 has an invalid length. [ 877.635919][ T307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 878.274003][ T342] netlink: 'syz.4.7772': attribute type 32 has an invalid length. [ 878.360762][ T342] bond6: Setting coupled_control to off (0) [ 878.677486][ T370] netlink: 'syz.2.7780': attribute type 6 has an invalid length. [ 878.911761][ T397] netlink: 'syz.0.7784': attribute type 1 has an invalid length. [ 879.047589][ T402] bond6 (unregistering): Released all slaves [ 879.348138][ T430] block nbd0: reconnected socket [ 879.361452][T20637] block nbd0: Receive control failed (result -32) [ 879.517694][ T446] gre1: entered promiscuous mode [ 879.526742][ T446] gre1: entered allmulticast mode [ 879.562413][ T447] gre1: entered promiscuous mode [ 879.586629][ T447] gre1: entered allmulticast mode [ 879.690275][ T457] netlink: 'syz.4.7802': attribute type 11 has an invalid length. [ 879.698688][ T457] netlink: 'syz.4.7802': attribute type 11 has an invalid length. [ 879.735783][ T458] tipc: Enabled bearer , priority 0 [ 879.744306][ T458] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 879.752525][ T458] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 880.445053][ T504] wireguard1: entered promiscuous mode [ 880.452064][ T504] wireguard1: entered allmulticast mode [ 880.461084][ T504] team0: Device wireguard1 is of different type [ 880.488853][ T506] netlink: 'syz.3.7816': attribute type 2 has an invalid length. [ 880.848824][ T524] __nla_validate_parse: 21 callbacks suppressed [ 880.848844][ T524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7822'. [ 880.923126][ T529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7820'. [ 881.313089][ T540] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 881.348715][ T545] team0: Device wireguard0 is of different type [ 881.535645][ T564] netlink: zone id is out of range [ 881.557015][ T564] netlink: zone id is out of range [ 881.573593][ T564] netlink: zone id is out of range [ 881.585639][ T564] netlink: get zone limit has 4 unknown bytes [ 881.668314][ T570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 881.686482][ T570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 881.694770][ T570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 881.717342][ T575] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 881.924861][ T587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7843'. [ 881.948126][ T587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.184855][ T587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.428000][ T617] netlink: 'syz.1.7850': attribute type 1 has an invalid length. [ 882.672055][ T635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7853'. [ 883.000277][ T654] x_tables: unsorted underflow at hook 1 [ 883.043701][ T655] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 883.091565][ T643] syzkaller1: entered promiscuous mode [ 883.113541][ T643] syzkaller1: entered allmulticast mode [ 883.377674][ T672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7862'. [ 883.389442][ T668] tap0: tun_chr_ioctl cmd 1074025676 [ 883.394790][ T668] tap0: owner set to 0 [ 883.431839][ T668] bond4: option miimon: invalid value (18446744073709551585) [ 883.441869][ T668] bond4: option miimon: allowed values 0 - 2147483647 [ 883.455297][ T668] bond4 (unregistering): Released all slaves [ 883.573805][ T681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7866'. [ 883.915634][ T701] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 883.939771][ T708] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7875'. [ 883.975362][ T707] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7875'. [ 884.125464][ T721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7876'. [ 884.173042][ T715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7874'. [ 884.185178][ T715] xt_CONNSECMARK: invalid mode: 0 [ 884.641982][ T741] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 885.010771][ T764] syzkaller0: entered promiscuous mode [ 885.025418][ T764] syzkaller0: entered allmulticast mode [ 885.335024][ T785] xt_l2tp: invalid flags combination: 8 [ 885.544823][ T803] xt_l2tp: invalid flags combination: 0 [ 885.647681][ T801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 885.684638][ T816] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 886.613224][ T865] __nla_validate_parse: 4 callbacks suppressed [ 886.613244][ T865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7913'. [ 886.784603][ T880] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7925'. [ 886.815415][ T880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7925'. [ 887.438752][ T921] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7937'. [ 887.483513][ T915] netlink: 'syz.0.7929': attribute type 39 has an invalid length. [ 887.503260][ T930] macvlan0: entered promiscuous mode [ 887.570613][ T30] audit: type=1804 audit(1766956270.485:15): pid=932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7938" name="/newroot/390/cgroup.controllers" dev="tmpfs" ino=1998 res=1 errno=0 [ 887.587526][ T932] delete_channel: no stack [ 887.614783][ T30] audit: type=1800 audit(1766956270.485:16): pid=932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7938" name="cgroup.controllers" dev="tmpfs" ino=1998 res=0 errno=0 [ 887.860377][ T956] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 887.910611][ T956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7945'. [ 887.920008][ T956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7945'. [ 888.412249][ T989] netlink: 'syz.4.7955': attribute type 1 has an invalid length. [ 888.426834][ T989] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7955'. [ 888.441705][ T989] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7955'. [ 888.514284][ T996] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 888.518219][ T994] bond4: option min_links: invalid value (18446744073709551614) [ 888.529827][ T994] bond4: option min_links: allowed values 0 - 2147483647 [ 888.570287][ T994] bond4 (unregistering): Released all slaves [ 888.694266][ T1005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7961'. [ 888.703780][ T1006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7961'. [ 888.713774][ T1005] netlink: 'syz.1.7961': attribute type 3 has an invalid length. [ 889.056350][ T1031] vlan2: entered promiscuous mode [ 889.061650][ T1031] vlan2: entered allmulticast mode [ 889.087383][ T1031] hsr_slave_1: entered allmulticast mode [ 889.388787][ T1068] smc: net device gre0 applied user defined pnetid SYZ1 [ 889.398534][ T1068] smc: net device gre0 erased user defined pnetid SYZ1 [ 889.616520][T20637] Bluetooth: hci1: command 0x040f tx timeout [ 890.370789][ T1096] IPv6: Can't replace route, no match found [ 890.467807][ T1096] bridge0: port 1(syz_tun) entered blocking state [ 890.474480][ T1096] bridge0: port 1(syz_tun) entered forwarding state [ 890.492728][ T1096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.502835][ T1096] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.548691][ T1096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 890.759794][ T1103] syzkaller1: entered promiscuous mode [ 890.775658][ T1103] syzkaller1: entered allmulticast mode [ 891.134041][ T1141] netlink: 'syz.1.8001': attribute type 3 has an invalid length. [ 891.379839][ T1157] openvswitch: netlink: Key 15 has unexpected len 8 expected 4 [ 891.409578][ T1160] syzkaller0: entered promiscuous mode [ 891.415304][ T1160] syzkaller0: entered allmulticast mode [ 891.608390][ T1163] tc_dump_action: action bad kind [ 891.729276][ T1170] netlink: 'syz.3.8008': attribute type 21 has an invalid length. [ 891.759720][ T1172] syzkaller0: entered promiscuous mode [ 891.765431][ T1172] syzkaller0: entered allmulticast mode [ 892.173646][ T1197] __nla_validate_parse: 16 callbacks suppressed [ 892.173669][ T1197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8016'. [ 892.675250][ T1224] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 892.742211][ T1224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8026'. [ 893.210930][ T1261] sctp: [Deprecated]: syz.4.8037 (pid 1261) Use of int in maxseg socket option. [ 893.210930][ T1261] Use struct sctp_assoc_value instead [ 893.602243][ T1282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8043'. [ 893.635211][ T1289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8044'. [ 893.647450][ T1288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8044'. [ 893.682920][ T1288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8044'. [ 893.706585][ T1289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8044'. [ 893.829214][ T1294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8046'. [ 894.068075][ T1310] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 894.097106][ T1310] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 894.181659][ T1319] netlink: 'syz.4.8053': attribute type 1 has an invalid length. [ 894.189643][ T1319] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8053'. [ 894.322701][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8057'. [ 894.501086][ T1344] netlink: 'syz.2.8060': attribute type 1 has an invalid length. [ 894.540635][ T1344] bond4: entered promiscuous mode [ 894.547519][ T1344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 894.919698][ T1360] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 894.933568][ T1360] bridge4: entered promiscuous mode [ 894.939417][ T1360] bridge4: entered allmulticast mode [ 895.070032][ T1373] netlink: 'syz.3.8069': attribute type 1 has an invalid length. [ 895.152279][ T1379] netlink: 'syz.1.8071': attribute type 4 has an invalid length. [ 895.154667][ T1380] netlink: 'syz.1.8071': attribute type 4 has an invalid length. [ 895.408815][ T1389] netlink: 'syz.1.8073': attribute type 1 has an invalid length. [ 896.027574][T12166] bridge_slave_1: left allmulticast mode [ 896.035699][T12166] bridge_slave_1: left promiscuous mode [ 896.046628][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.067697][T12166] bridge_slave_0: left allmulticast mode [ 896.074632][T12166] bridge_slave_0: left promiscuous mode [ 896.082118][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.096034][T12166] veth3: left allmulticast mode [ 896.105517][T12166] veth3: left promiscuous mode [ 896.110827][T12166] bridge1: port 1(veth3) entered disabled state [ 896.699396][T12166] bridge0 (unregistering): left allmulticast mode [ 897.222024][T12166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.232548][T12166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.242530][T12166] bond0 (unregistering): Released all slaves [ 897.360632][T12166] bond1 (unregistering): Released all slaves [ 897.375089][T12166] bond2 (unregistering): Released all slaves [ 897.499024][T12166] bond3 (unregistering): Released all slaves [ 897.513146][T12166] bond4 (unregistering): Released all slaves [ 897.528213][T12166] bond5 (unregistering): Released all slaves [ 897.543197][T12166] bond6 (unregistering): Released all slaves [ 897.562335][ T1406] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 897.588157][ T1407] tipc: Enabling of bearer rejected, failed to enable media [ 897.783978][T12166] tipc: Disabling bearer [ 897.789643][T12166] tipc: Disabling bearer [ 897.794968][T12166] tipc: Disabling bearer [ 897.823704][T12166] tipc: Left network mode [ 897.843905][ T1438] lo speed is unknown, defaulting to 1000 [ 897.870994][ T1438] lo speed is unknown, defaulting to 1000 [ 897.898259][ T1438] lo speed is unknown, defaulting to 1000 [ 897.932303][ T1443] __nla_validate_parse: 6 callbacks suppressed [ 897.932323][ T1443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8087'. [ 898.313103][ T1438] infiniband syz2: set active [ 898.318559][ T1438] infiniband syz2: added lo [ 898.377666][ T1438] RDS/IB: syz2: added [ 898.382031][ T1438] smc: adding ib device syz2 with port count 1 [ 898.389330][ T1438] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 898.410114][ T981] lo speed is unknown, defaulting to 1000 [ 898.423094][T12166] hsr_slave_1: left promiscuous mode [ 899.132148][T12166] team0 (unregistering): Port device team_slave_1 removed [ 899.182994][T12166] team0 (unregistering): Port device team_slave_0 removed [ 899.573456][T28678] lo speed is unknown, defaulting to 1000 [ 899.639783][ T1438] lo speed is unknown, defaulting to 1000 [ 899.802148][ T1480] netlink: 5496 bytes leftover after parsing attributes in process `syz.4.8099'. [ 900.127009][ T1438] lo speed is unknown, defaulting to 1000 [ 900.446878][ T1520] netlink: 'syz.2.8110': attribute type 19 has an invalid length. [ 900.481275][ T1520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8110'. [ 900.504371][ T1524] netlink: 'syz.4.8111': attribute type 1 has an invalid length. [ 900.513737][ T1520] netlink: 'syz.2.8110': attribute type 19 has an invalid length. [ 900.527860][ T1520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8110'. [ 900.574556][ T1524] 8021q: adding VLAN 0 to HW filter on device bond7 [ 900.620316][ T1520] bridge7: entered promiscuous mode [ 900.625602][ T1520] bridge7: entered allmulticast mode [ 900.648145][ T1525] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8110'. [ 900.713621][ T1438] lo speed is unknown, defaulting to 1000 [ 901.150407][ T1544] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8117'. [ 901.209422][ T1438] lo speed is unknown, defaulting to 1000 [ 901.528765][ T1438] lo speed is unknown, defaulting to 1000 [ 901.610099][ T1555] netlink: 'syz.4.8120': attribute type 1 has an invalid length. [ 901.709751][ T1555] 8021q: adding VLAN 0 to HW filter on device bond8 [ 901.732344][ T1556] bond8: (slave gretap1): making interface the new active one [ 901.741412][ T1556] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 901.830590][T12166] IPVS: stop unused estimator thread 0... [ 901.997610][ T1438] lo speed is unknown, defaulting to 1000 [ 902.017626][T12166] bridge_slave_1: left allmulticast mode [ 902.025603][T12166] bridge_slave_1: left promiscuous mode [ 902.032385][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.045730][ T1570] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8121'. [ 902.057822][ T1570] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8121'. [ 902.068626][T12166] bridge_slave_0: left allmulticast mode [ 902.074328][T12166] bridge_slave_0: left promiscuous mode [ 902.082607][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.702424][T12166] bond1 (unregistering): (slave gretap1): Releasing active interface [ 902.714769][T12166] gretap1 (unregistering): left allmulticast mode [ 903.136374][ T5845] Bluetooth: hci5: command 0x0405 tx timeout [ 903.649897][T12166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.661970][T12166] bond_slave_0: left promiscuous mode [ 903.682309][T12166] bond0 (unregistering): Released all slaves [ 903.839174][T12166] bond1 (unregistering): Released all slaves [ 903.859014][T12166] bond2 (unregistering): Released all slaves [ 904.002274][T12166] bond3 (unregistering): Released all slaves [ 904.147301][T12166] bond4 (unregistering): (slave veth3): Releasing active interface [ 904.158370][T12166] bond4 (unregistering): Released all slaves [ 904.177584][T12166] bond5 (unregistering): Released all slaves [ 904.315964][T12166] bond6 (unregistering): Released all slaves [ 904.453923][T12166] bond7 (unregistering): Released all slaves [ 904.473411][T12166] bond8 (unregistering): Released all slaves [ 904.492343][T12166] bond9 (unregistering): Released all slaves [ 904.514385][ T1438] lo speed is unknown, defaulting to 1000 [ 904.645519][ T1581] netlink: 'syz.4.8127': attribute type 11 has an invalid length. [ 904.687301][T12166] : left promiscuous mode [ 904.981974][T12166] 9: left promiscuous mode [ 905.140854][T12166] tipc: Left network mode [ 905.542020][ T1616] tunl0: entered promiscuous mode [ 905.570610][ T1616] netlink: 'syz.3.8141': attribute type 3 has an invalid length. [ 905.586388][ T1616] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8141'. [ 905.653788][ T1619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8141'. [ 905.667890][ T1619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8141'. [ 905.870435][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8146'. [ 905.948777][ T1625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.081636][ T1637] gtp1: entered promiscuous mode [ 906.092584][ T1637] gtp1: entered allmulticast mode [ 906.126500][T12166] hsr_slave_1: left promiscuous mode [ 906.176755][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 906.199462][T12166] team_slave_0: left promiscuous mode [ 906.205175][T12166] team_slave_1: left promiscuous mode [ 906.226710][T12166] veth1_macvtap: left promiscuous mode [ 906.232323][T12166] veth0_macvtap: left promiscuous mode [ 906.246386][T12166] veth1_vlan: left promiscuous mode [ 906.253690][T12166] veth0_vlan: left promiscuous mode [ 906.283130][ T1643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8150'. [ 906.404345][ T1643] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8150'. [ 906.424336][ T1643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8150'. [ 906.441564][ T1645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8150'. [ 906.544245][ T1654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8152'. [ 906.704869][ T1664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8154'. [ 907.039174][T12166] team0 (unregistering): Port device team_slave_1 removed [ 907.087169][T12166] team0 (unregistering): Port device team_slave_0 removed [ 907.418562][ T1658] geneve3: entered promiscuous mode [ 907.438517][ T1658] geneve3: entered allmulticast mode [ 907.460818][T30004] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 907.506518][T30004] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 907.515478][T30004] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 907.550132][ T3473] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 907.633055][T12166] IPVS: stop unused estimator thread 0... [ 907.698865][ T1669] bridge_slave_0: entered promiscuous mode [ 907.799617][ T1677] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 907.887152][ T1677] netlink: 'syz.0.8158': attribute type 17 has an invalid length. [ 908.313905][ T1706] vxlan0: entered promiscuous mode [ 908.331049][ T1706] vxlan0: entered allmulticast mode [ 908.337925][T28749] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.357156][T28749] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.368337][T28749] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.395336][T28749] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.635318][ T1713] netlink: 'syz.2.8173': attribute type 12 has an invalid length. [ 908.955047][ T1731] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 908.961335][ T1731] syzkaller1: Linktype set failed because interface is up [ 908.973701][ T1735] bridge: RTM_NEWNEIGH with invalid ether address [ 908.979506][ T24] syzkaller1: tun_net_xmit 90 [ 908.988552][ T1732] bridge: RTM_NEWNEIGH with invalid ether address [ 909.183093][ T1740] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 909.704379][ T1762] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 909.991348][ T1774] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 910.015898][ T1774] bond5 (unregistering): Released all slaves [ 910.239736][ T1783] netlink: 'syz.0.8192': attribute type 1 has an invalid length. [ 910.371865][ T1786] 8021q: adding VLAN 0 to HW filter on device bond7 [ 910.383554][ T1786] bond6: (slave bond7): making interface the new active one [ 910.391706][ T1786] bond6: (slave bond7): Enslaving as an active interface with an up link [ 910.437530][ T1791] 8021q: adding VLAN 0 to HW filter on device bond8 [ 910.446958][ T1791] bond6: (slave bond8): Enslaving as a backup interface with an up link [ 910.467193][ T1799] syzkaller0: entered promiscuous mode [ 910.472725][ T1799] syzkaller0: entered allmulticast mode [ 910.855999][ T1816] __nla_validate_parse: 11 callbacks suppressed [ 910.856023][ T1816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8202'. [ 910.884970][ T1816] chnl_net:caif_netlink_parms(): no params data found [ 910.951109][ T1826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8203'. [ 911.043698][ T1830] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8206'. [ 911.101599][ T1835] netlink: 'syz.3.8205': attribute type 10 has an invalid length. [ 911.134454][ T1828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8201'. [ 911.187636][ T1835] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.219915][ T1835] bond0: (slave team0): Enslaving as an active interface with an up link [ 911.230523][ T1839] netlink: 'syz.3.8205': attribute type 1 has an invalid length. [ 911.388201][ T1846] ipvlan1: entered allmulticast mode [ 911.393576][ T1846] veth0_vlan: entered allmulticast mode [ 911.557233][ T1850] tipc: Enabled bearer , priority 0 [ 911.564810][ T1850] syzkaller0: entered promiscuous mode [ 911.573498][ T1850] syzkaller0: entered allmulticast mode [ 911.607339][ T1850] tipc: Resetting bearer [ 911.629216][ T1852] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8214'. [ 911.640555][ T1850] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8212'. [ 911.663107][ T1849] tipc: Resetting bearer [ 911.707535][ T1862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8214'. [ 911.724636][ T1849] tipc: Disabling bearer [ 912.069191][ T1879] netlink: 'syz.2.8219': attribute type 54 has an invalid length. [ 912.268295][ T1883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8222'. [ 912.483111][ T1897] netlink: 'syz.2.8226': attribute type 1 has an invalid length. [ 912.540759][ T1895] syzkaller0: entered promiscuous mode [ 912.546841][ T1895] syzkaller0: entered allmulticast mode [ 912.978324][ T1921] lo: left promiscuous mode [ 913.012183][ T1921] tunl0: left promiscuous mode [ 913.032674][ T1924] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8234'. [ 913.340610][ T1921] bridge0: port 1(syz_tun) entered disabled state [ 913.540246][ T1921] macvlan0: left promiscuous mode [ 913.560114][ T1921] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 913.583833][ T1921] bond1: left allmulticast mode [ 913.589789][ T1921] gre1: left allmulticast mode [ 913.609476][ T1921] veth3: left allmulticast mode [ 913.714956][ T1921] mac80211_hwsim hwsim60 syzkaller0: left promiscuous mode [ 913.723609][ T1921] mac80211_hwsim hwsim60 syzkaller0: left allmulticast mode [ 913.816027][ T1921] vlan2: left promiscuous mode [ 913.826455][ T1921] vlan2: left allmulticast mode [ 913.831378][ T1921] hsr_slave_1: left allmulticast mode [ 913.849156][ T1921] gtp1: left promiscuous mode [ 913.855110][ T1921] gtp1: left allmulticast mode [ 913.880606][ T6048] lo speed is unknown, defaulting to 1000 [ 913.896266][ T6048] syz2: Port: 1 Link DOWN [ 913.908670][ T1944] macvtap1: entered allmulticast mode [ 913.914107][ T1944] veth0_macvtap: entered allmulticast mode [ 913.946807][T17015] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.955772][T17015] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.985826][ T1951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8241'. [ 913.995182][ T1951] openvswitch: netlink: Flow actions attr not present in new flow. [ 914.015019][ T6048] lo speed is unknown, defaulting to 1000 [ 914.021052][T17015] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.046361][T17015] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.160078][ T1953] vlan2: entered allmulticast mode [ 914.165287][ T1953] mac80211_hwsim hwsim70 wlan0: entered allmulticast mode [ 914.720698][ T1990] netlink: 'syz.4.8250': attribute type 1 has an invalid length. [ 914.809691][ T1994] 8021q: adding VLAN 0 to HW filter on device bond10 [ 914.819154][ T1994] bond9: (slave bond10): making interface the new active one [ 914.827539][ T1994] bond9: (slave bond10): Enslaving as an active interface with an up link [ 914.853312][ T1990] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 914.880432][ T1990] 8021q: adding VLAN 0 to HW filter on device bond9 [ 914.986944][ T1999] netlink: 'syz.3.8252': attribute type 5 has an invalid length. [ 915.003327][ T1999] geneve2: entered promiscuous mode [ 915.009302][ T1999] geneve2: entered allmulticast mode [ 915.026034][T28749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 915.055850][T28749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 915.085776][ T1999] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 915.095755][ T1999] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 915.107614][T28749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 915.144311][T28749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 915.379345][ T2012] syzkaller0: entered promiscuous mode [ 915.384972][ T2012] syzkaller0: entered allmulticast mode [ 915.394775][ T2014] openvswitch: netlink: IP tunnel dst address not specified [ 915.588390][ T2022] netlink: 'syz.3.8262': attribute type 11 has an invalid length. [ 915.721316][T20637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 915.733773][T20637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 915.743613][T20637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 915.753180][T20637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 915.761574][T20637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 916.029996][ T2028] wlan0 speed is unknown, defaulting to 1000 [ 916.041244][ T2028] lo speed is unknown, defaulting to 1000 [ 916.357100][ T2061] __nla_validate_parse: 11 callbacks suppressed [ 916.357121][ T2061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8272'. [ 916.723860][ T2028] chnl_net:caif_netlink_parms(): no params data found [ 916.898135][ T2028] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.905402][ T2028] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.913356][ T2028] bridge_slave_0: entered allmulticast mode [ 916.921871][ T2028] bridge_slave_0: entered promiscuous mode [ 916.931305][ T2028] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.939355][ T2028] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.946921][ T2028] bridge_slave_1: entered allmulticast mode [ 916.955100][ T2028] bridge_slave_1: entered promiscuous mode [ 917.012485][ T2028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.027932][ T2028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.079191][ T2028] team0: Port device team_slave_0 added [ 917.088291][ T2028] team0: Port device team_slave_1 added [ 917.130601][ T2028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.139148][ T2028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.186340][ T2028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.204217][ T2028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.212964][ T2028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.272873][ T2028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.446946][ T2028] hsr_slave_0: entered promiscuous mode [ 917.467588][ T2028] hsr_slave_1: entered promiscuous mode [ 917.485165][ T2028] debugfs: 'hsr0' already exists in 'hsr' [ 917.491392][ T2028] Cannot create hsr debugfs directory [ 917.515994][ T2094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8282'. [ 917.714283][ T2106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8284'. [ 917.728217][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8284'. [ 917.739176][ T2106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8284'. [ 917.750003][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8284'. [ 917.869532][T20637] Bluetooth: hci4: command tx timeout [ 918.143029][ T2119] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8290'. [ 918.184309][ T2121] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8290'. [ 918.215622][ T2119] bond6: (slave gre0): Device is not bonding slave [ 918.222536][ T2119] bond6: option active_slave: invalid value (gre0) [ 918.232331][ T2121] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8290'. [ 918.237979][ T2119] bond6 (unregistering): Released all slaves [ 918.323236][ T2028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 918.361022][ T2028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 918.373404][ T2028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 918.408073][ T2028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 918.493505][ T2139] netlink: 'syz.3.8293': attribute type 1 has an invalid length. [ 918.507200][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8293'. [ 918.651185][ T2028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.683771][ T2028] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.707244][T16988] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.714451][T16988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.744860][T16988] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.752123][T16988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.879306][ T2150] block nbd0: reconnected socket [ 918.912745][T20637] block nbd0: Receive control failed (result -32) [ 918.939325][ T2153] netlink: 'syz.3.8299': attribute type 1 has an invalid length. [ 919.031488][ T2153] 8021q: adding VLAN 0 to HW filter on device bond6 [ 919.104134][ T2161] bond6: (slave geneve3): making interface the new active one [ 919.130978][ T2161] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 919.166508][T12166] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 919.191860][T12166] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 919.219631][T12166] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 919.254770][T12166] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 919.292727][ T2028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.439667][ T2186] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 919.498785][ T2186] tipc: Resetting bearer [ 919.888566][ T2028] veth0_vlan: entered promiscuous mode [ 919.930099][ T2028] veth1_vlan: entered promiscuous mode [ 919.936463][T20637] Bluetooth: hci4: command tx timeout [ 920.049100][ T2028] veth0_macvtap: entered promiscuous mode [ 920.110419][ T2028] veth1_macvtap: entered promiscuous mode [ 920.180508][ T2028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.214628][ T2028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.239763][ T2210] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 920.245483][T10010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.292505][T10010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.306687][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.314014][ T2216] IPv6: NLM_F_CREATE should be set when creating new route [ 920.315937][T10010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.321368][ T2216] IPv6: NLM_F_CREATE should be set when creating new route [ 920.394824][T10010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.406943][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.414490][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.498538][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.546523][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.566826][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.603270][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.619461][ T2221] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 920.628855][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.639131][T17007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.666525][T17007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.695613][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.713674][T12166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.723839][T12166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.728537][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.777011][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.784584][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.817286][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.836542][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.844389][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.886701][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.894274][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.944473][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.977062][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.984625][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.999794][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.020107][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.029206][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.045617][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.065344][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.074442][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.083638][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.092707][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.104740][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.114898][ T2216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.428326][ T2240] nbd: illegal input index 2958377 [ 921.433774][ T2244] __nla_validate_parse: 9 callbacks suppressed [ 921.433794][ T2244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8318'. [ 921.610030][ T2255] netlink: 'syz.3.8324': attribute type 12 has an invalid length. [ 922.016363][T20637] Bluetooth: hci4: command tx timeout [ 922.359090][ T2301] netlink: 'syz.5.8340': attribute type 8 has an invalid length. [ 922.507604][ T2310] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8342'. [ 922.697044][ T2322] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8346'. [ 922.752269][ T2326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8347'. [ 922.843665][ T2329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8348'. [ 923.032360][ T2341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 923.185606][ T2348] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8349'. [ 923.207958][ T2351] tipc: Enabling of bearer rejected, failed to enable media [ 923.356594][ T2348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8349'. [ 923.674760][ T2380] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8365'. [ 923.725561][ T2387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8367'. [ 923.935922][ T2400] netlink: 'syz.3.8372': attribute type 13 has an invalid length. [ 924.097523][T20637] Bluetooth: hci4: command tx timeout [ 924.114079][ T2420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8373'. [ 924.431551][ T2400] mac80211_hwsim hwsim60 syzkaller0: left promiscuous mode [ 924.456211][ T2400] mac80211_hwsim hwsim60 syzkaller0: left allmulticast mode [ 924.501074][ T2400] geneve2: left promiscuous mode [ 924.506094][ T2400] geneve2: left allmulticast mode [ 924.698741][ T2442] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 924.698762][ T2442] sctp: [Deprecated]: syz.3.8375 (pid 2442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 924.698762][ T2442] Use struct sctp_sack_info instead [ 926.180362][T20637] Bluetooth: hci4: command tx timeout [ 926.566850][ T2496] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 927.603549][ T2501] __nla_validate_parse: 2 callbacks suppressed [ 927.603569][ T2501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8387'. [ 927.777349][ T2505] netlink: 'syz.5.8388': attribute type 21 has an invalid length. [ 927.785398][ T2505] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8388'. [ 927.846870][ T2507] dvmrp0: entered allmulticast mode [ 929.943504][ T2620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8413'. [ 929.978870][ T2620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8413'. [ 930.214514][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.233007][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.267225][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.284160][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.297231][ T2644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8421'. [ 930.303737][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.314861][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.324123][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.332416][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.342439][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.350611][ T2642] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 930.423523][ T2644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8421'. [ 930.611994][ T2652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.104023][ T2680] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8429'. [ 931.342167][ T2692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8431'. [ 931.355111][ T2692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8431'. [ 931.385862][ T2694] syzkaller1: entered promiscuous mode [ 931.394007][ T2694] syzkaller1: entered allmulticast mode [ 931.406845][ T2692] hsr_slave_0: left promiscuous mode [ 931.424488][ T2692] hsr_slave_1: left promiscuous mode [ 931.920492][ T2721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.991431][ T2721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.463080][ T2748] tipc: Enabling of bearer rejected, already enabled [ 932.519250][ T2755] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 932.535476][ T2755] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 932.914159][ T2771] syzkaller0: entered promiscuous mode [ 932.926181][ T2771] syzkaller0: entered allmulticast mode [ 932.967371][ T2782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8453'. [ 933.189072][ T2788] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8454'. [ 933.550211][ T2802] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8460'. [ 933.589041][ T2804] netlink: 252 bytes leftover after parsing attributes in process `syz.4.8458'. [ 933.689144][ T2811] sctp: [Deprecated]: syz.3.8462 (pid 2811) Use of int in maxseg socket option. [ 933.689144][ T2811] Use struct sctp_assoc_value instead [ 933.710307][ T2805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8457'. [ 933.778028][ T2822] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8462'. [ 936.369901][ T2875] validate_nla: 60 callbacks suppressed [ 936.369924][ T2875] netlink: 'syz.4.8474': attribute type 21 has an invalid length. [ 936.383827][ T2875] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8474'. [ 936.393933][ T2875] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8474'. [ 936.585966][ T2886] netlink: 'syz.3.8477': attribute type 1 has an invalid length. [ 936.635533][ T2890] bridge_slave_0: left allmulticast mode [ 936.652108][ T2890] bridge_slave_0: left promiscuous mode [ 936.668405][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.684426][ T2893] netlink: 'syz.5.8478': attribute type 3 has an invalid length. [ 936.715360][ T2890] bridge_slave_1: left allmulticast mode [ 936.727375][ T2890] bridge_slave_1: left promiscuous mode [ 936.733494][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.753070][ T2890] bond0: (slave bond_slave_0): Releasing backup interface [ 936.770923][ T2901] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8481'. [ 936.788607][ T2890] bond0: (slave bond_slave_1): Releasing backup interface [ 936.813698][ T2890] team0: Port device team_slave_0 removed [ 936.830149][ T2890] team0: Port device team_slave_1 removed [ 936.839484][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.848091][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.858904][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.867041][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.878995][ T2890] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 937.100549][ T2913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8484'. [ 937.288077][ T2922] netlink: 'syz.5.8488': attribute type 27 has an invalid length. [ 937.369087][ T2925] tipc: Enabling of bearer rejected, already enabled [ 937.950116][ T2959] netlink: 'syz.5.8501': attribute type 4 has an invalid length. [ 938.026402][ T2932] netlink: 'syz.0.8489': attribute type 1 has an invalid length. [ 938.165469][ T2932] __nla_validate_parse: 8 callbacks suppressed [ 938.165492][ T2932] netlink: 212 bytes leftover after parsing attributes in process `syz.0.8489'. [ 938.185601][ T2932] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8489'. [ 938.207964][ T2967] netlink: 'syz.2.8504': attribute type 11 has an invalid length. [ 938.215846][ T2967] netlink: 'syz.2.8504': attribute type 11 has an invalid length. [ 938.224194][ T2967] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8504'. [ 938.395551][ T2978] sctp: [Deprecated]: syz.0.8489 (pid 2978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 938.395551][ T2978] Use struct sctp_sack_info instead [ 938.668948][ T3000] netlink: 'syz.3.8512': attribute type 1 has an invalid length. [ 938.736692][ T3003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8512'. [ 938.745636][ T3003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8512'. [ 939.040974][ T3017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8517'. [ 939.054959][ T3017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8517'. [ 939.352947][ T3041] bond1: down delay (1) is not a multiple of miimon (2), value rounded to 0 ms [ 939.371229][ T3042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8524'. [ 939.393673][ T3038] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 939.487860][ T3038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8523'. [ 942.125112][ T3053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 942.146226][ T3058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 942.560641][ T3088] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8537'. [ 942.573860][ T3089] block nbd4: Unsupported socket: should be TCP or UNIX. [ 942.597186][ T3089] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 942.619145][ T3089] pim6reg: entered allmulticast mode [ 942.868743][ T3101] tipc: Enabling of bearer rejected, failed to enable media [ 944.343283][ T3135] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 944.511709][ T3146] __nla_validate_parse: 2 callbacks suppressed [ 944.511731][ T3146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8550'. [ 944.770469][ T3163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8554'. [ 944.792069][ T3163] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8554'. [ 944.889600][ T3168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8556'. [ 944.903861][ T3168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8556'. [ 945.014190][ T3174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8558'. [ 945.360421][ T3190] xt_TCPMSS: Only works on TCP SYN packets [ 945.525353][ T3203] netlink: 'syz.3.8565': attribute type 21 has an invalid length. [ 945.552678][ T3206] netlink: 210296 bytes leftover after parsing attributes in process `syz.4.8568'. [ 945.593980][ T3197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8563'. [ 945.604610][ T3197] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8563'. [ 945.794559][ T3216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8570'. [ 946.795248][ T3266] netlink: 'syz.2.8585': attribute type 1 has an invalid length. [ 946.935746][ T3266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 946.992911][ T3284] netlink: 'syz.3.8590': attribute type 1 has an invalid length. [ 947.000921][ T3284] netlink: 'syz.3.8590': attribute type 2 has an invalid length. [ 947.009114][ T3284] netlink: 'syz.3.8590': attribute type 1 has an invalid length. [ 947.116783][ T3288] netlink: 'syz.3.8593': attribute type 8 has an invalid length. [ 947.981295][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 948.017036][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 948.025954][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 948.038743][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 948.047766][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 948.240857][ T3327] wlan0 speed is unknown, defaulting to 1000 [ 948.257655][ T3327] lo speed is unknown, defaulting to 1000 [ 948.720684][T26244] syz_tun (unregistering): left allmulticast mode [ 948.737132][T26244] syz_tun (unregistering): left promiscuous mode [ 948.743635][T26244] bridge0: port 1(syz_tun) entered disabled state [ 948.950907][T14737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 948.963429][T14737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 949.053217][ T3356] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 949.227723][T14737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 949.247958][T14737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 949.393127][T14737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 949.423192][T14737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 949.532130][ T3367] __nla_validate_parse: 13 callbacks suppressed [ 949.532151][ T3367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8614'. [ 949.842987][T14737] batman_adv: batadv0: Removing interface: netdevsim0 [ 949.860065][T14737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 949.870696][T14737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 950.011054][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 950.099320][ T5845] Bluetooth: hci6: command tx timeout [ 950.332033][ T3408] nbd: nbd0 already in use [ 950.393291][ T3395] wlan0 speed is unknown, defaulting to 1000 [ 950.418015][ T3395] lo speed is unknown, defaulting to 1000 [ 950.428874][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.437160][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.446539][ T3327] bridge_slave_0: entered allmulticast mode [ 950.454934][ T3327] bridge_slave_0: entered promiscuous mode [ 950.464703][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.472993][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.481607][ T3327] bridge_slave_1: entered allmulticast mode [ 950.490479][ T3327] bridge_slave_1: entered promiscuous mode [ 950.946928][ T3421] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8627'. [ 952.177074][ T5845] Bluetooth: hci6: command tx timeout [ 952.495779][T14737] dvmrp0 (unregistering): left allmulticast mode [ 952.546648][T14737] bond6 (unregistering): (slave geneve3): Releasing active interface [ 952.604323][T14737] team0: Port device geneve0 removed [ 952.643352][T14737] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 953.342509][T14737] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 953.353662][T14737] bond0 (unregistering): (slave team0): Releasing backup interface [ 953.364576][T14737] bond0 (unregistering): Released all slaves [ 953.505330][T14737] bond1 (unregistering): Released all slaves [ 953.524857][T14737] bond2 (unregistering): Released all slaves [ 953.674940][T14737] bond3 (unregistering): Released all slaves [ 953.815431][T14737] bond4 (unregistering): Released all slaves [ 953.950585][T14737] bond5 (unregistering): Released all slaves [ 954.089693][T14737] bond6 (unregistering): Released all slaves [ 954.110329][T14737] bond7 (unregistering): Released all slaves [ 954.139193][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.257176][ T5845] Bluetooth: hci6: command tx timeout [ 954.264406][ T3425] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 954.265533][ T3427] netlink: 'syz.2.8628': attribute type 1 has an invalid length. [ 954.296479][ T3427] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8628'. [ 954.314402][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.326853][ T3427] NCSI netlink: No device for ifindex 0 [ 954.334020][ T3430] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8629'. [ 954.470933][ T3327] team0: Port device team_slave_0 added [ 954.485802][ T3435] netlink: 'syz.5.8631': attribute type 10 has an invalid length. [ 954.572410][ T3327] team0: Port device team_slave_1 added [ 954.596077][ T3435] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 954.728540][T27885] IPVS: starting estimator thread 0... [ 954.752055][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.796364][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.827787][ T3440] IPVS: using max 27 ests per chain, 64800 per kthread [ 954.886240][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.937135][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.944697][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.036377][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.194278][ T3327] hsr_slave_0: entered promiscuous mode [ 955.203974][ T3327] hsr_slave_1: entered promiscuous mode [ 955.211420][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 955.218374][ T3327] Cannot create hsr debugfs directory [ 955.371417][ T3458] netlink: 'syz.5.8637': attribute type 1 has an invalid length. [ 955.561355][ T3469] tipc: Started in network mode [ 955.566632][ T3469] tipc: Node identity 92fdea4974ba, cluster identity 4711 [ 955.574044][ T3469] tipc: Enabled bearer , priority 0 [ 955.707047][ T3468] syzkaller0: MTU too low for tipc bearer [ 955.713167][ T3468] tipc: Disabling bearer [ 956.031876][T14737] : left promiscuous mode [ 956.133219][T14737] tipc: Disabling bearer [ 956.150352][T14737] tipc: Left network mode [ 956.212978][ T3502] netlink: 'syz.4.8648': attribute type 1 has an invalid length. [ 956.223364][ T3502] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8648'. [ 956.330808][ T3502] syzkaller0: entered promiscuous mode [ 956.336616][ T5845] Bluetooth: hci6: command tx timeout [ 956.347610][ T3502] syzkaller0: entered allmulticast mode [ 956.576684][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8650'. [ 956.754773][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8652'. [ 959.085483][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 959.134891][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 959.283661][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 959.318741][ T3551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8660'. [ 959.327383][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 959.328640][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8660'. [ 959.350847][ T3553] netlink: 'syz.4.8662': attribute type 10 has an invalid length. [ 959.460379][ T3553] team0: Device veth1_macvtap failed to register rx_handler [ 959.593853][ T3565] netlink: 'syz.2.8663': attribute type 3 has an invalid length. [ 959.833014][T14737] hsr_slave_0: left promiscuous mode [ 959.880830][T14737] hsr_slave_1: left promiscuous mode [ 960.005355][T14737] pim6reg (unregistering): left allmulticast mode [ 961.147218][ T3473] smc: removing ib device syz2 [ 961.174151][ T3571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8663'. [ 961.488212][ T3588] syzkaller1: entered promiscuous mode [ 961.588913][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.018073][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.042634][T17000] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.049913][T17000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.107993][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.115219][T10010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.178469][ T3611] netlink: 'syz.4.8672': attribute type 12 has an invalid length. [ 962.409397][ T3619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8675'. [ 962.437065][ T3619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8675'. [ 962.851617][ T3630] netlink: 'syz.5.8678': attribute type 4 has an invalid length. [ 963.106438][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.183945][ T3327] veth0_vlan: entered promiscuous mode [ 963.248163][ T3327] veth1_vlan: entered promiscuous mode [ 963.368252][ T3327] veth0_macvtap: entered promiscuous mode [ 963.443034][ T3327] veth1_macvtap: entered promiscuous mode [ 963.509707][ T3645] mac80211_hwsim hwsim80 : renamed from wlan1 (while UP) [ 963.605481][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.693084][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.754523][T17015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.799023][T17015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.861391][T17015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.885703][ T3647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.927612][T17015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.273029][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.320912][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.402568][ T3666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8686'. [ 964.438131][T16988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.459027][T16988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.528547][T14737] IPVS: stop unused estimator thread 0... [ 965.045137][ T3701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8695'. [ 965.089270][ T3701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8695'. [ 965.102618][ T3701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8695'. [ 965.113273][ T3701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8695'. [ 965.125970][ T3701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8695'. [ 965.162316][ T3701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8695'. [ 965.197460][ T3701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8695'. [ 965.703319][ T3723] netlink: 'syz.2.8703': attribute type 15 has an invalid length. [ 966.127721][ T3744] netlink: 'syz.0.8707': attribute type 2 has an invalid length. [ 966.195869][ T3743] wlan0 speed is unknown, defaulting to 1000 [ 966.364925][ T3744] 9: entered promiscuous mode [ 966.713031][ T3781] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 966.719567][ T3781] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 967.001321][ T3769] team0 (unregistering): Port device bridge3 removed [ 967.272270][ T3802] ip6t_REJECT: ECHOREPLY is not supported [ 967.662165][ T3823] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 967.759289][ T3828] __nla_validate_parse: 60 callbacks suppressed [ 967.759313][ T3828] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8733'. [ 967.837203][ T3828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 967.994589][ T3835] netlink: 'syz.3.8736': attribute type 1 has an invalid length. [ 968.062336][ T3799] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 968.076802][ T3799] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 968.203973][ T3799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 968.210005][ T3799] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 968.347901][ T3799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 968.354223][ T3799] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 968.427817][ T3799] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 968.446700][ T3799] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 968.559558][ T3799] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 968.576645][ T3799] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 968.595119][ T3852] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8740'. [ 968.609511][ T3853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8740'. [ 968.746605][T20637] Bluetooth: hci6: command 0x0405 tx timeout [ 968.756403][ T3799] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 968.762541][ T3799] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 969.211960][ T3859] netlink: 'syz.4.8741': attribute type 83 has an invalid length. [ 969.774990][ T3881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 970.227096][ T3913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8758'. [ 970.230784][ T3912] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.8759'. [ 970.243574][ T3913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8758'. [ 970.245875][ T3912] openvswitch: netlink: Missing key (keys=40, expected=100) [ 970.264600][ T3908] netlink: 'syz.0.8756': attribute type 1 has an invalid length. [ 970.618407][ T3926] macvtap1: entered promiscuous mode [ 970.655595][ T3926] macvtap1: entered allmulticast mode [ 970.661842][ T3926] veth1_vlan: entered allmulticast mode [ 970.760661][ T3933] macvtap2: entered promiscuous mode [ 970.766994][ T3933] macvtap2: entered allmulticast mode [ 970.899614][ T3929] wlan0 speed is unknown, defaulting to 1000 [ 971.011415][ T3944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8767'. [ 971.691031][ T3984] netlink: 'syz.4.8777': attribute type 1 has an invalid length. [ 971.882790][ T3998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8778'. [ 971.902236][ T3998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8778'. [ 972.145182][ T4005] syzkaller0: entered promiscuous mode [ 972.166190][ T4005] syzkaller0: entered allmulticast mode [ 972.301750][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8783'. [ 974.165310][ T4016] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 974.255516][ T4021] netlink: 'syz.3.8787': attribute type 1 has an invalid length. [ 974.513141][ T4034] netlink: 'syz.3.8793': attribute type 39 has an invalid length. [ 974.589583][ T4037] __nla_validate_parse: 1 callbacks suppressed [ 974.589605][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8794'. [ 975.042283][ T4050] netlink: 'syz.0.8797': attribute type 13 has an invalid length. [ 975.051023][ T4048] netlink: 'syz.0.8797': attribute type 13 has an invalid length. [ 975.224571][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8801'. [ 975.520626][ T4074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8805'. [ 975.633357][ T4088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 975.672600][ T4084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 975.863347][ T4103] netlink: 'syz.4.8815': attribute type 1 has an invalid length. [ 975.872269][ T4103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8815'. [ 976.231416][ T4121] netlink: 'syz.3.8821': attribute type 4 has an invalid length. [ 976.331495][ T4129] x_tables: duplicate entry at hook 1 [ 976.500924][ T4138] IPv4: Oversized IP packet from 127.202.26.0 [ 976.516009][ T4138] netlink: 'syz.3.8827': attribute type 1 has an invalid length. [ 976.525015][ T4134] netlink: 'syz.0.8823': attribute type 1 has an invalid length. [ 976.565212][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8828'. [ 976.780305][ T4153] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8831'. [ 976.790892][ T4153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8831'. [ 977.023567][ T4169] netlink: 'syz.0.8837': attribute type 10 has an invalid length. [ 977.032389][ T4169] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8837'. [ 977.071789][ T4169] team0: Port device geneve0 added [ 977.155871][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8840'. [ 977.329166][ T4181] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 977.343593][ T4180] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 977.374015][ T4183] veth0: entered promiscuous mode [ 977.381212][ T4182] veth0: left promiscuous mode [ 977.474635][ T4188] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 977.668052][ T4195] netlink: 'syz.4.8846': attribute type 1 has an invalid length. [ 977.684459][ T4198] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8847'. [ 977.712538][ T4195] 8021q: adding VLAN 0 to HW filter on device bond11 [ 977.745243][ T4199] bond11: (slave veth7): Enslaving as an active interface with a down link [ 1013.696717][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1029.056518][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1129.536898][ T31] INFO: task kworker/0:12:6688 blocked for more than 143 seconds. [ 1129.544830][ T31] Not tainted syzkaller #0 [ 1129.550747][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1129.559769][ T31] task:kworker/0:12 state:D stack:21304 pid:6688 tgid:6688 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1129.571980][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1129.578841][ T31] Call Trace: [ 1129.582219][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1129.585204][ T31] __schedule+0x14bc/0x5000 [ 1129.590111][ T31] ? __pfx___schedule+0x10/0x10 [ 1129.595037][ T31] ? schedule+0x91/0x360 [ 1129.599530][ T31] schedule+0x165/0x360 [ 1129.604704][ T31] schedule_preempt_disabled+0x13/0x30 [ 1129.610337][ T31] __mutex_lock+0x7e6/0x1350 [ 1129.614993][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1129.620444][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1129.626858][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1129.631988][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1129.637810][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1129.643578][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1129.650156][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1129.655936][ T31] process_scheduled_works+0xad1/0x1770 [ 1129.662960][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1129.676425][ T31] worker_thread+0x8a0/0xda0 [ 1129.681131][ T31] kthread+0x711/0x8a0 [ 1129.685267][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1129.701274][ T31] ? __pfx_kthread+0x10/0x10 [ 1129.705960][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1129.711714][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1129.718592][ T31] ? __pfx_kthread+0x10/0x10 [ 1129.723262][ T31] ret_from_fork+0x599/0xb30 [ 1129.728996][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1129.734181][ T31] ? __switch_to_asm+0x39/0x70 [ 1129.739338][ T31] ? __switch_to_asm+0x33/0x70 [ 1129.744165][ T31] ? __pfx_kthread+0x10/0x10 [ 1129.749273][ T31] ret_from_fork_asm+0x1a/0x30 [ 1129.754115][ T31] [ 1129.757517][ T31] INFO: task syz.1.8112:1530 blocked for more than 143 seconds. [ 1129.765193][ T31] Not tainted syzkaller #0 [ 1129.771717][ T31] Blocked by coredump. [ 1129.797469][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1129.806399][ T31] task:syz.1.8112 state:D stack:25080 pid:1530 tgid:1521 ppid:26565 task_flags:0x40054c flags:0x00080001 [ 1129.819732][ T31] Call Trace: [ 1129.823068][ T31] [ 1129.826422][ T31] __schedule+0x14bc/0x5000 [ 1129.831009][ T31] ? __pfx___schedule+0x10/0x10 [ 1129.835920][ T31] ? schedule+0x91/0x360 [ 1129.841580][ T31] schedule+0x165/0x360 [ 1129.845808][ T31] schedule_preempt_disabled+0x13/0x30 [ 1129.851359][ T31] __mutex_lock+0x7e6/0x1350 [ 1129.857282][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1129.862137][ T31] ? rfkill_unregister+0xc8/0x220 [ 1129.867713][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1129.872782][ T31] ? __pfx_device_del+0x10/0x10 [ 1129.877918][ T31] ? hci_sock_dev_event+0x42d/0x630 [ 1129.883174][ T31] ? __cancel_work_sync+0x5c/0x110 [ 1129.888495][ T31] rfkill_unregister+0xc8/0x220 [ 1129.893404][ T31] hci_unregister_dev+0x374/0x5b0 [ 1129.898827][ T31] vhci_release+0x152/0x1a0 [ 1129.903388][ T31] ? __pfx_vhci_release+0x10/0x10 [ 1129.909459][ T31] __fput+0x44c/0xa70 [ 1129.913502][ T31] task_work_run+0x1d4/0x260 [ 1129.918140][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1129.923329][ T31] ? kmem_cache_free+0x197/0x620 [ 1129.928719][ T31] ? do_exit+0x6c0/0x2310 [ 1129.933111][ T31] do_exit+0x6c5/0x2310 [ 1129.937669][ T31] ? cgroup1_freezing+0x20/0x350 [ 1129.942664][ T31] ? __pfx_do_exit+0x10/0x10 [ 1129.947581][ T31] ? cgroup1_freezing+0x20/0x350 [ 1129.952564][ T31] ? cgroup1_freezing+0x20/0x350 [ 1129.957844][ T31] do_group_exit+0x21c/0x2d0 [ 1129.962474][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1129.967854][ T31] get_signal+0x1285/0x1340 [ 1129.972413][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 1129.978034][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1129.984228][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1129.989988][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 1129.995312][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.000145][ T31] do_syscall_64+0x2d0/0xf80 [ 1130.004765][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.011021][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1130.015717][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.022080][ T31] RIP: 0033:0x7f27ebf8f749 [ 1130.026658][ T31] RSP: 002b:00007f27ecea6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1130.035152][ T31] RAX: 0000000000000003 RBX: 00007f27ec1e6180 RCX: 00007f27ebf8f749 [ 1130.043205][ T31] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 1130.051654][ T31] RBP: 00007f27ec013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1130.059723][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.067783][ T31] R13: 00007f27ec1e6218 R14: 00007f27ec1e6180 R15: 00007ffe261dff88 [ 1130.075790][ T31] [ 1130.079219][ T31] INFO: task syz.5.8723:3778 blocked for more than 143 seconds. [ 1130.087094][ T31] Not tainted syzkaller #0 [ 1130.092081][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1130.101024][ T31] task:syz.5.8723 state:D stack:24888 pid:3778 tgid:3778 ppid:2028 task_flags:0x400040 flags:0x00080002 [ 1130.113294][ T31] Call Trace: [ 1130.116639][ T31] [ 1130.119713][ T31] __schedule+0x14bc/0x5000 [ 1130.124346][ T31] ? __pfx___schedule+0x10/0x10 [ 1130.129400][ T31] ? schedule+0x91/0x360 [ 1130.133682][ T31] schedule+0x165/0x360 [ 1130.138418][ T31] schedule_preempt_disabled+0x13/0x30 [ 1130.143918][ T31] __mutex_lock+0x7e6/0x1350 [ 1130.148577][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1130.153365][ T31] ? rfkill_unregister+0xc8/0x220 [ 1130.158556][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1130.163644][ T31] ? __pfx_device_del+0x10/0x10 [ 1130.168967][ T31] ? __cancel_work_sync+0x5c/0x110 [ 1130.174133][ T31] rfkill_unregister+0xc8/0x220 [ 1130.179157][ T31] nfc_unregister_device+0x96/0x300 [ 1130.184405][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1130.190223][ T31] virtual_ncidev_close+0x56/0x90 [ 1130.195299][ T31] __fput+0x44c/0xa70 [ 1130.199572][ T31] task_work_run+0x1d4/0x260 [ 1130.204191][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1130.209474][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 1130.214882][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1130.220388][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 1130.225682][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.230781][ T31] do_syscall_64+0x2d0/0xf80 [ 1130.235443][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.241749][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1130.246564][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.252519][ T31] RIP: 0033:0x7fce13b8f749 [ 1130.257291][ T31] RSP: 002b:00007ffddfc2b3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1130.265732][ T31] RAX: 0000000000000000 RBX: 00007fce13de7da0 RCX: 00007fce13b8f749 [ 1130.273887][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1130.282061][ T31] RBP: 00007fce13de7da0 R08: 000000000000023c R09: 0000001edfc2b6ef [ 1130.290442][ T31] R10: 00007fce13de7cb0 R11: 0000000000000246 R12: 00000000000ec335 [ 1130.298536][ T31] R13: 00007fce13de6270 R14: ffffffffffffffff R15: 00007ffddfc2b510 [ 1130.306634][ T31] [ 1130.309729][ T31] INFO: task syz.2.8726:3799 blocked for more than 144 seconds. [ 1130.319259][ T31] Not tainted syzkaller #0 [ 1130.324249][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1130.333031][ T31] task:syz.2.8726 state:D stack:24224 pid:3799 tgid:3798 ppid:27198 task_flags:0x400140 flags:0x00080002 [ 1130.345164][ T31] Call Trace: [ 1130.348877][ T31] [ 1130.351837][ T31] __schedule+0x14bc/0x5000 [ 1130.356448][ T31] ? __pfx___schedule+0x10/0x10 [ 1130.361352][ T31] ? schedule+0x91/0x360 [ 1130.365619][ T31] schedule+0x165/0x360 [ 1130.369870][ T31] schedule_preempt_disabled+0x13/0x30 [ 1130.375355][ T31] __mutex_lock+0x7e6/0x1350 [ 1130.380229][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1130.385022][ T31] ? nfc_dev_down+0x3b/0x290 [ 1130.389728][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1130.394803][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1130.400039][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1130.406431][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1130.411699][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1130.417653][ T31] nfc_dev_down+0x3b/0x290 [ 1130.422296][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1130.428108][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 1130.433251][ T31] rfkill_set_block+0x1d2/0x440 [ 1130.438394][ T31] rfkill_fop_write+0x44b/0x570 [ 1130.443294][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1130.448796][ T31] ? security_kernfs_init_security+0x220/0x290 [ 1130.455014][ T31] ? rw_verify_area+0x255/0x4d0 [ 1130.459991][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1130.465513][ T31] vfs_write+0x27e/0xb30 [ 1130.470094][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1130.474878][ T31] ? __fget_files+0x2a/0x420 [ 1130.479566][ T31] ? __fget_files+0x2a/0x420 [ 1130.484262][ T31] ? __fget_files+0x3a0/0x420 [ 1130.489010][ T31] ? __fget_files+0x2a/0x420 [ 1130.493627][ T31] ksys_write+0x145/0x250 [ 1130.503889][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1130.508831][ T31] ? do_syscall_64+0xbe/0xf80 [ 1130.513562][ T31] do_syscall_64+0xfa/0xf80 [ 1130.518138][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.524246][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1130.529371][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.535304][ T31] RIP: 0033:0x7f289858f749 [ 1130.539796][ T31] RSP: 002b:00007f28994bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1130.548314][ T31] RAX: ffffffffffffffda RBX: 00007f28987e5fa0 RCX: 00007f289858f749 [ 1130.556649][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 1130.564673][ T31] RBP: 00007f2898613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1130.572929][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.581164][ T31] R13: 00007f28987e6038 R14: 00007f28987e5fa0 R15: 00007ffc5735c118 [ 1130.589486][ T31] [ 1130.592578][ T31] INFO: task syz.3.8843:4185 blocked for more than 144 seconds. [ 1130.602857][ T31] Not tainted syzkaller #0 [ 1130.607867][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1130.616864][ T31] task:syz.3.8843 state:D stack:23400 pid:4185 tgid:4184 ppid:3327 task_flags:0x400140 flags:0x00080002 [ 1130.628855][ T31] Call Trace: [ 1130.632278][ T31] [ 1130.635226][ T31] __schedule+0x14bc/0x5000 [ 1130.639807][ T31] ? __pfx___schedule+0x10/0x10 [ 1130.644689][ T31] ? schedule+0x91/0x360 [ 1130.649189][ T31] schedule+0x165/0x360 [ 1130.653365][ T31] schedule_preempt_disabled+0x13/0x30 [ 1130.659303][ T31] __mutex_lock+0x7e6/0x1350 [ 1130.664006][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1130.668836][ T31] ? rfkill_register+0x37/0x8e0 [ 1130.673709][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1130.679029][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 1130.683989][ T31] ? nl80211_common_reg_change_event+0x55d/0x6b0 [ 1130.690542][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1130.695882][ T31] ? __queue_delayed_work+0x212/0x2d0 [ 1130.701369][ T31] rfkill_register+0x37/0x8e0 [ 1130.706451][ T31] wiphy_register+0x246a/0x2d20 [ 1130.711360][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 1130.716643][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1130.721991][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1130.728195][ T31] ieee80211_register_hw+0x34a7/0x4110 [ 1130.733776][ T31] ? ieee80211_register_hw+0x1421/0x4110 [ 1130.739982][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1130.745845][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1130.751881][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1130.757956][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1130.764320][ T31] ? __hrtimer_setup+0x181/0x200 [ 1130.769535][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1130.775390][ T31] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 1130.781306][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1130.787700][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 1130.793315][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 1130.798820][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1130.803983][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1130.809770][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1130.815335][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.820482][ T31] ? __nla_parse+0x40/0x60 [ 1130.824997][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1130.831738][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1130.837486][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1130.843608][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1130.848340][ T31] ? security_capable+0x7e/0x2e0 [ 1130.853338][ T31] genl_rcv_msg+0x60e/0x790 [ 1130.858301][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.863390][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1130.868988][ T31] netlink_rcv_skb+0x208/0x470 [ 1130.873776][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.878847][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1130.884163][ T31] ? down_read+0x274/0x2e0 [ 1130.888846][ T31] ? genl_rcv+0xd/0x40 [ 1130.893016][ T31] genl_rcv+0x28/0x40 [ 1130.897092][ T31] netlink_unicast+0x82f/0x9e0 [ 1130.902001][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1130.907377][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1130.912367][ T31] ? skb_put+0x11b/0x210 [ 1130.917069][ T31] netlink_sendmsg+0x805/0xb30 [ 1130.921877][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.927312][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1130.932416][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1130.937782][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.943128][ T31] __sock_sendmsg+0x21c/0x270 [ 1130.948119][ T31] ____sys_sendmsg+0x505/0x820 [ 1130.952911][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1130.958299][ T31] ? import_iovec+0x74/0xa0 [ 1130.962856][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1130.967638][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1130.973183][ T31] ? futex_wait+0x285/0x360 [ 1130.978108][ T31] ? __fget_files+0x2a/0x420 [ 1130.982777][ T31] ? __fget_files+0x3a0/0x420 [ 1130.987544][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1130.992518][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1130.998138][ T31] ? do_syscall_64+0xbe/0xf80 [ 1131.002904][ T31] do_syscall_64+0xfa/0xf80 [ 1131.007845][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.013949][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1131.018691][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.024639][ T31] RIP: 0033:0x7f7c2b78f749 [ 1131.029100][ T31] RSP: 002b:00007f7c299f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.037811][ T31] RAX: ffffffffffffffda RBX: 00007f7c2b9e5fa0 RCX: 00007f7c2b78f749 [ 1131.045794][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1131.054022][ T31] RBP: 00007f7c2b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1131.062135][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.070384][ T31] R13: 00007f7c2b9e6038 R14: 00007f7c2b9e5fa0 R15: 00007ffe94583c58 [ 1131.078439][ T31] [ 1131.081511][ T31] INFO: task syz.4.8846:4195 blocked for more than 144 seconds. [ 1131.089274][ T31] Not tainted syzkaller #0 [ 1131.094246][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.103336][ T31] task:syz.4.8846 state:D stack:22440 pid:4195 tgid:4194 ppid:28579 task_flags:0x400140 flags:0x00080002 [ 1131.115867][ T31] Call Trace: [ 1131.119231][ T31] [ 1131.122216][ T31] __schedule+0x14bc/0x5000 [ 1131.127124][ T31] ? __pfx___schedule+0x10/0x10 [ 1131.132031][ T31] ? schedule+0x91/0x360 [ 1131.136700][ T31] schedule+0x165/0x360 [ 1131.140879][ T31] schedule_preempt_disabled+0x13/0x30 [ 1131.146423][ T31] __mutex_lock+0x7e6/0x1350 [ 1131.151066][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1131.155844][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1131.160902][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1131.165982][ T31] ? radix_tree_lookup+0x240/0x290 [ 1131.171173][ T31] genl_rcv_msg+0x10d/0x790 [ 1131.175715][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.180933][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1131.185899][ T31] netlink_rcv_skb+0x208/0x470 [ 1131.190940][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.195984][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1131.201373][ T31] ? down_read+0x274/0x2e0 [ 1131.205805][ T31] ? genl_rcv+0xd/0x40 [ 1131.209946][ T31] genl_rcv+0x28/0x40 [ 1131.214027][ T31] netlink_unicast+0x82f/0x9e0 [ 1131.219066][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1131.224391][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1131.229417][ T31] ? skb_put+0x11b/0x210 [ 1131.233715][ T31] netlink_sendmsg+0x805/0xb30 [ 1131.238809][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.244153][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1131.249446][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1131.254745][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.260092][ T31] __sock_sendmsg+0x21c/0x270 [ 1131.264822][ T31] __sys_sendto+0x3bd/0x520 [ 1131.269397][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1131.274514][ T31] ? fd_install+0x95/0x3d0 [ 1131.279220][ T31] ? fd_install+0x307/0x3d0 [ 1131.283764][ T31] __x64_sys_sendto+0xde/0x100 [ 1131.288576][ T31] do_syscall_64+0xfa/0xf80 [ 1131.293093][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.299437][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1131.304134][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.310509][ T31] RIP: 0033:0x7f581cd915dc [ 1131.314959][ T31] RSP: 002b:00007f581dc14ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1131.323413][ T31] RAX: ffffffffffffffda RBX: 00007f581dc14fc0 RCX: 00007f581cd915dc [ 1131.331448][ T31] RDX: 0000000000000020 RSI: 00007f581dc15010 RDI: 0000000000000007 [ 1131.339683][ T31] RBP: 0000000000000000 R08: 00007f581dc14f14 R09: 000000000000000c [ 1131.347743][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 1131.355756][ T31] R13: 00007f581dc14f68 R14: 00007f581dc15010 R15: 0000000000000000 [ 1131.363851][ T31] [ 1131.367283][ T31] INFO: task syz.4.8846:4199 blocked for more than 145 seconds. [ 1131.374961][ T31] Not tainted syzkaller #0 [ 1131.380416][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.389277][ T31] task:syz.4.8846 state:D stack:22120 pid:4199 tgid:4194 ppid:28579 task_flags:0x400140 flags:0x00080002 [ 1131.401503][ T31] Call Trace: [ 1131.404802][ T31] [ 1131.407796][ T31] __schedule+0x14bc/0x5000 [ 1131.412366][ T31] ? __pfx___schedule+0x10/0x10 [ 1131.417333][ T31] ? schedule+0x91/0x360 [ 1131.421628][ T31] schedule+0x165/0x360 [ 1131.425816][ T31] schedule_preempt_disabled+0x13/0x30 [ 1131.431634][ T31] __mutex_lock+0x7e6/0x1350 [ 1131.436514][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1131.441335][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1131.446115][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1131.451191][ T31] ? radix_tree_lookup+0x240/0x290 [ 1131.457211][ T31] genl_rcv_msg+0x10d/0x790 [ 1131.461788][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.466916][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1131.471950][ T31] netlink_rcv_skb+0x208/0x470 [ 1131.476811][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.481884][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1131.487594][ T31] ? down_read+0x274/0x2e0 [ 1131.492080][ T31] ? genl_rcv+0xd/0x40 [ 1131.496344][ T31] genl_rcv+0x28/0x40 [ 1131.500370][ T31] netlink_unicast+0x82f/0x9e0 [ 1131.505192][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1131.510572][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1131.515561][ T31] ? skb_put+0x11b/0x210 [ 1131.520194][ T31] netlink_sendmsg+0x805/0xb30 [ 1131.525019][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.530430][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1131.535425][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1131.546142][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.551515][ T31] __sock_sendmsg+0x21c/0x270 [ 1131.557195][ T31] __sys_sendto+0x3bd/0x520 [ 1131.561844][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1131.567256][ T31] ? fd_install+0x95/0x3d0 [ 1131.571745][ T31] ? fd_install+0x307/0x3d0 [ 1131.576355][ T31] __x64_sys_sendto+0xde/0x100 [ 1131.581184][ T31] do_syscall_64+0xfa/0xf80 [ 1131.585732][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.592309][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1131.597098][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.603032][ T31] RIP: 0033:0x7f581cd915dc [ 1131.607536][ T31] RSP: 002b:00007f581dbf3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1131.615993][ T31] RAX: ffffffffffffffda RBX: 00007f581dbf3fc0 RCX: 00007f581cd915dc [ 1131.624052][ T31] RDX: 0000000000000020 RSI: 00007f581dbf4010 RDI: 0000000000000008 [ 1131.632448][ T31] RBP: 0000000000000000 R08: 00007f581dbf3f14 R09: 000000000000000c [ 1131.640687][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1131.648757][ T31] R13: 00007f581dbf3f68 R14: 00007f581dbf4010 R15: 0000000000000000 [ 1131.657181][ T31] [ 1131.660272][ T31] INFO: task syz.0.8848:4201 blocked for more than 145 seconds. [ 1131.667959][ T31] Not tainted syzkaller #0 [ 1131.672929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.681694][ T31] task:syz.0.8848 state:D stack:28280 pid:4201 tgid:4200 ppid:26845 task_flags:0x400040 flags:0x00080002 [ 1131.694027][ T31] Call Trace: [ 1131.697565][ T31] [ 1131.700560][ T31] __schedule+0x14bc/0x5000 [ 1131.705148][ T31] ? __pfx___schedule+0x10/0x10 [ 1131.710246][ T31] ? schedule+0x91/0x360 [ 1131.714539][ T31] schedule+0x165/0x360 [ 1131.719081][ T31] schedule_preempt_disabled+0x13/0x30 [ 1131.724598][ T31] __mutex_lock+0x7e6/0x1350 [ 1131.729309][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1131.734124][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1131.738879][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1131.744315][ T31] ? radix_tree_lookup+0x240/0x290 [ 1131.749844][ T31] genl_rcv_msg+0x10d/0x790 [ 1131.754417][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.759543][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1131.764635][ T31] netlink_rcv_skb+0x208/0x470 [ 1131.769548][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.774713][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1131.781550][ T31] ? down_read+0x274/0x2e0 [ 1131.786113][ T31] ? genl_rcv+0xd/0x40 [ 1131.790252][ T31] genl_rcv+0x28/0x40 [ 1131.794266][ T31] netlink_unicast+0x82f/0x9e0 [ 1131.799138][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1131.804465][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1131.810803][ T31] ? skb_put+0x11b/0x210 [ 1131.815108][ T31] netlink_sendmsg+0x805/0xb30 [ 1131.819999][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.825331][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1131.831681][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1131.837361][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.843141][ T31] __sock_sendmsg+0x21c/0x270 [ 1131.847921][ T31] __sys_sendto+0x3bd/0x520 [ 1131.852468][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1131.857723][ T31] ? exc_page_fault+0x82/0x100 [ 1131.862545][ T31] __x64_sys_sendto+0xde/0x100 [ 1131.867781][ T31] do_syscall_64+0xfa/0xf80 [ 1131.872334][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.878661][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1131.883383][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.889410][ T31] RIP: 0033:0x7f448af915dc [ 1131.893864][ T31] RSP: 002b:00007f448be11ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1131.902853][ T31] RAX: ffffffffffffffda RBX: 00007f448be11fc0 RCX: 00007f448af915dc [ 1131.910895][ T31] RDX: 0000000000000020 RSI: 00007f448be12010 RDI: 0000000000000004 [ 1131.919131][ T31] RBP: 0000000000000000 R08: 00007f448be11f14 R09: 000000000000000c [ 1131.927499][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1131.935512][ T31] R13: 00007f448be11f68 R14: 00007f448be12010 R15: 0000000000000000 [ 1131.944884][ T31] [ 1131.948143][ T31] INFO: task syz-executor:4205 blocked for more than 145 seconds. [ 1131.955983][ T31] Not tainted syzkaller #0 [ 1131.961831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.970693][ T31] task:syz-executor state:D stack:27832 pid:4205 tgid:4205 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1131.982844][ T31] Call Trace: [ 1131.986489][ T31] [ 1131.989467][ T31] __schedule+0x14bc/0x5000 [ 1131.994053][ T31] ? __pfx___schedule+0x10/0x10 [ 1131.999895][ T31] ? schedule+0x91/0x360 [ 1132.004199][ T31] schedule+0x165/0x360 [ 1132.008492][ T31] schedule_preempt_disabled+0x13/0x30 [ 1132.013991][ T31] __mutex_lock+0x7e6/0x1350 [ 1132.019030][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1132.023854][ T31] ? rfkill_register+0x37/0x8e0 [ 1132.028976][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1132.034094][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1132.040549][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1132.045978][ T31] ? device_initialize+0x24b/0x440 [ 1132.052064][ T31] rfkill_register+0x37/0x8e0 [ 1132.056885][ T31] hci_register_dev+0x3f2/0x8b0 [ 1132.061801][ T31] vhci_create_device+0x39c/0x650 [ 1132.066895][ T31] vhci_write+0x3ce/0x4a0 [ 1132.071278][ T31] vfs_write+0x5c9/0xb30 [ 1132.075565][ T31] ? __pfx_vhci_write+0x10/0x10 [ 1132.080825][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1132.085680][ T31] ksys_write+0x145/0x250 [ 1132.090271][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1132.095167][ T31] ? do_syscall_64+0xbe/0xf80 [ 1132.100707][ T31] do_syscall_64+0xfa/0xf80 [ 1132.105367][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.111899][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1132.116778][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.122721][ T31] RIP: 0033:0x7f4e7cd8e1c0 [ 1132.127219][ T31] RSP: 002b:00007fff48570e28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1132.135666][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4e7cd8e1c0 [ 1132.144084][ T31] RDX: 0000000000000002 RSI: 00007fff48570e3a RDI: 00000000000000ca [ 1132.153248][ T31] RBP: 00007f4e7cfe67b8 R08: 0000000000000000 R09: 00007f4e7db1d6c0 [ 1132.161834][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1132.170182][ T31] R13: 0000000000000003 R14: 00007fff48571188 R15: 0000000000000000 [ 1132.178506][ T31] [ 1132.181588][ T31] INFO: task syz-executor:4207 blocked for more than 146 seconds. [ 1132.189553][ T31] Not tainted syzkaller #0 [ 1132.194554][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1132.203672][ T31] task:syz-executor state:D stack:27832 pid:4207 tgid:4207 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1132.215718][ T31] Call Trace: [ 1132.219364][ T31] [ 1132.222343][ T31] __schedule+0x14bc/0x5000 [ 1132.228386][ T31] ? __pfx___schedule+0x10/0x10 [ 1132.233298][ T31] ? schedule+0x91/0x360 [ 1132.237817][ T31] schedule+0x165/0x360 [ 1132.242030][ T31] schedule_preempt_disabled+0x13/0x30 [ 1132.247674][ T31] __mutex_lock+0x7e6/0x1350 [ 1132.252313][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1132.257781][ T31] ? rfkill_register+0x37/0x8e0 [ 1132.262691][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1132.268418][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1132.273857][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1132.279309][ T31] ? device_initialize+0x24b/0x440 [ 1132.284470][ T31] rfkill_register+0x37/0x8e0 [ 1132.289626][ T31] hci_register_dev+0x3f2/0x8b0 [ 1132.294537][ T31] vhci_create_device+0x39c/0x650 [ 1132.299703][ T31] vhci_write+0x3ce/0x4a0 [ 1132.304082][ T31] vfs_write+0x5c9/0xb30 [ 1132.308519][ T31] ? __pfx_vhci_write+0x10/0x10 [ 1132.313414][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1132.318588][ T31] ksys_write+0x145/0x250 [ 1132.322974][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1132.329160][ T31] ? do_syscall_64+0xbe/0xf80 [ 1132.333990][ T31] do_syscall_64+0xfa/0xf80 [ 1132.339866][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.345988][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1132.351257][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.357501][ T31] RIP: 0033:0x7f531598e1c0 [ 1132.362131][ T31] RSP: 002b:00007ffc4a32a8b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1132.371720][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f531598e1c0 [ 1132.381413][ T31] RDX: 0000000000000002 RSI: 00007ffc4a32a8ca RDI: 00000000000000ca [ 1132.389483][ T31] RBP: 00007f5315be67b8 R08: 0000000000000000 R09: 00007f531671d6c0 [ 1132.398622][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1132.407054][ T31] R13: 0000000000000003 R14: 00007ffc4a32ac18 R15: 0000000000000000 [ 1132.415090][ T31] [ 1132.418341][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1132.427463][ T31] [ 1132.427463][ T31] Showing all locks held in the system: [ 1132.435214][ T31] 1 lock held by khungtaskd/31: [ 1132.442456][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1132.453620][ T31] 2 locks held by getty/5596: [ 1132.458561][ T31] #0: ffff8880307e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1132.468911][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1132.480564][ T31] 2 locks held by kworker/1:7/5953: [ 1132.485802][ T31] 3 locks held by kworker/0:12/6688: [ 1132.491822][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1132.505257][ T31] #1: ffffc9000b007b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1132.519987][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1132.531771][ T31] 2 locks held by kworker/u8:2/28749: [ 1132.537292][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1132.547466][ T31] #1: ffffc9000b92fb80 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1132.562676][ T31] 1 lock held by syz.1.8112/1530: [ 1132.567781][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1132.582146][ T31] 2 locks held by syz.5.8723/3778: [ 1132.588180][ T31] #0: ffff888099309100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 1132.598290][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1132.608742][ T31] 2 locks held by syz.2.8726/3799: [ 1132.613996][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 1132.624465][ T31] #1: ffff888099309100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 1132.633689][ T31] 3 locks held by syz.3.8843/4185: [ 1132.638869][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.647332][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1132.656850][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.666973][ T31] 2 locks held by syz.4.8846/4195: [ 1132.672116][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.680587][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1132.689863][ T31] 2 locks held by syz.4.8846/4199: [ 1132.695060][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.703301][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1132.712554][ T31] 2 locks held by syz.0.8848/4201: [ 1132.717734][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.726004][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1132.735102][ T31] 2 locks held by syz-executor/4205: [ 1132.741905][ T31] #0: ffff88804978f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.752097][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.762197][ T31] 2 locks held by syz-executor/4207: [ 1132.769025][ T31] #0: ffff88802931f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.779202][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.789215][ T31] 2 locks held by syz-executor/4211: [ 1132.794507][ T31] #0: ffff8880343ab918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.804999][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.815113][ T31] 2 locks held by syz-executor/4212: [ 1132.820633][ T31] #0: ffff88804f82d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.830989][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.841056][ T31] 2 locks held by syz-executor/4213: [ 1132.846409][ T31] #0: ffff888048729918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.856830][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.867036][ T31] 2 locks held by syz-executor/4218: [ 1132.872362][ T31] #0: ffff888052b42118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.882557][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.892777][ T31] 2 locks held by syz-executor/4220: [ 1132.898234][ T31] #0: ffff88807b8f7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.908326][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.918629][ T31] 2 locks held by syz-executor/4224: [ 1132.923931][ T31] #0: ffff888049df5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.934019][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.943995][ T31] 2 locks held by syz-executor/4225: [ 1132.949575][ T31] #0: ffff888050be2918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.959733][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.969756][ T31] 2 locks held by syz-executor/4226: [ 1132.975062][ T31] #0: ffff888064ce3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1132.987071][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1132.997289][ T31] 2 locks held by syz-executor/4231: [ 1133.002614][ T31] #0: ffff88803a89c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1133.012959][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1133.022999][ T31] 2 locks held by syz-executor/4233: [ 1133.028346][ T31] #0: ffff88807a782918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1133.038685][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1133.048690][ T31] 2 locks held by syz-executor/4237: [ 1133.054075][ T31] #0: ffff888050be1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1133.065075][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1133.075306][ T31] 2 locks held by syz-executor/4238: [ 1133.080646][ T31] #0: ffff888050be3118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1133.090762][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1133.101071][ T31] 2 locks held by syz-executor/4239: [ 1133.106427][ T31] #0: ffff888033a55118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1133.116549][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1133.127029][ T31] [ 1133.129386][ T31] ============================================= [ 1133.129386][ T31] [ 1133.137996][ T31] NMI backtrace for cpu 0 [ 1133.138016][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1133.138047][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.138058][ T31] Call Trace: [ 1133.138065][ T31] [ 1133.138074][ T31] dump_stack_lvl+0x189/0x250 [ 1133.138102][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.138123][ T31] ? __pfx__printk+0x10/0x10 [ 1133.138159][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1133.138186][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1133.138219][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1133.138248][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1133.138275][ T31] sys_info+0x135/0x170 [ 1133.138297][ T31] watchdog+0xf95/0xfe0 [ 1133.138325][ T31] ? watchdog+0x20a/0xfe0 [ 1133.138355][ T31] kthread+0x711/0x8a0 [ 1133.138380][ T31] ? __pfx_watchdog+0x10/0x10 [ 1133.138402][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.138426][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1133.138452][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1133.138468][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.138491][ T31] ret_from_fork+0x599/0xb30 [ 1133.138510][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1133.138535][ T31] ? __switch_to_asm+0x39/0x70 [ 1133.138556][ T31] ? __switch_to_asm+0x33/0x70 [ 1133.138577][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.138600][ T31] ret_from_fork_asm+0x1a/0x30 [ 1133.138637][ T31] [ 1133.138646][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1133.285497][ C1] NMI backtrace for cpu 1 [ 1133.285515][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1133.285535][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.285547][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1133.285571][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1133.285587][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1133.285603][ C1] RAX: 900251d13f673200 RBX: ffffffff81978fda RCX: 900251d13f673200 [ 1133.285618][ C1] RDX: 0000000000000001 RSI: ffffffff8d7925ee RDI: ffffffff8bc08360 [ 1133.285630][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1133.285644][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 1133.285657][ C1] R13: 1ffff110038dcb70 R14: 0000000000000001 R15: 0000000000000001 [ 1133.285669][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 1133.285684][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1133.285696][ C1] CR2: 0000559c6922e000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1133.285713][ C1] Call Trace: [ 1133.285721][ C1] [ 1133.285729][ C1] default_idle+0x13/0x20 [ 1133.285750][ C1] default_idle_call+0x73/0xb0 [ 1133.285772][ C1] do_idle+0x1ea/0x520 [ 1133.285792][ C1] ? irqentry_exit+0x5ba/0x660 [ 1133.285812][ C1] ? __pfx_do_idle+0x10/0x10 [ 1133.285842][ C1] cpu_startup_entry+0x44/0x60 [ 1133.285861][ C1] start_secondary+0x101/0x110 [ 1133.285888][ C1] common_startup_64+0x13e/0x147 [ 1133.285921][ C1] [ 1133.287031][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1133.287076][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1133.287141][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.287181][ T31] Call Trace: [ 1133.287206][ T31] [ 1133.287238][ T31] dump_stack_lvl+0x99/0x250 [ 1133.287307][ T31] ? __asan_memcpy+0x40/0x70 [ 1133.287364][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.287439][ T31] ? __pfx__printk+0x10/0x10 [ 1133.287573][ T31] vpanic+0x237/0x6d0 [ 1133.287668][ T31] ? __pfx_vpanic+0x10/0x10 [ 1133.287745][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1133.287822][ T31] panic+0xb9/0xc0 [ 1133.287888][ T31] ? __pfx_panic+0x10/0x10 [ 1133.287956][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1133.288042][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1133.288131][ T31] watchdog+0xfdf/0xfe0 [ 1133.288228][ T31] ? watchdog+0x20a/0xfe0 [ 1133.288319][ T31] kthread+0x711/0x8a0 [ 1133.288405][ T31] ? __pfx_watchdog+0x10/0x10 [ 1133.288482][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.288559][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1133.288638][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1133.288701][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.288778][ T31] ret_from_fork+0x599/0xb30 [ 1133.288845][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1133.288938][ T31] ? __switch_to_asm+0x39/0x70 [ 1133.289033][ T31] ? __switch_to_asm+0x33/0x70 [ 1133.289107][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.289190][ T31] ret_from_fork_asm+0x1a/0x30 [ 1133.289293][ T31] [ 1133.604146][ T31] Kernel Offset: disabled [ 1133.608474][ T31] Rebooting in 86400 seconds..