last executing test programs: 21.425609607s ago: executing program 1 (id=2378): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32, @ANYBLOB="0000d40000000000a5"], 0x2c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) 21.244755546s ago: executing program 1 (id=2382): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) 20.831863334s ago: executing program 1 (id=2388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800f7ffffff000000000000b000000085100000070007c900184b0000fbffffff000000fb46000000b70800000000b7080000070000007b8af0ff00000000bfa10000000000000701e600f8ffffffbfa4000000004f6e000007040000f0ffffffb70200000800000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186700000000000000000000ff070000184800000600000000000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r10, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$ALG_SET_KEY(r8, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x2080005, r7}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x29, 0x21100e6, r7}) 20.573756416s ago: executing program 2 (id=2392): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000040000000000000b050000000504000000f4ff0b02000000005f2e2e5f00abfdc5745743b3926ebea21fc0ccce707cf6b1fb9c614d1b507d3a40fbcd52fe"], &(0x7f0000000580)=""/155, 0x36, 0x9b, 0x0, 0x2329}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x0, 0x2, 0x0, 0xb, 0x4, 0x30, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x40, &(0x7f0000000500)=""/64, 0x41000, 0x2d, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000680)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0xffffffffffffffff, r0, r0, r0], &(0x7f0000000700)=[{0x0, 0x1, 0xe, 0xb}, {0x1, 0x2, 0xe, 0xa}, {0x3, 0x1, 0xc}, {0x1, 0x5, 0xd, 0xa}, {0x5, 0x5, 0xb, 0x6}, {0x1, 0x3, 0x5, 0x6}], 0x10, 0x9ee4}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1}, 0x8) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000040)=0x80000000, 0x4) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket(0x2b, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0xe64, 0x3, @private2, 0x202}, 0x1c) accept$ax25(r7, &(0x7f0000000880)={{0x3, @rose}, [@default, @remote, @bcast, @null, @rose, @bcast, @remote, @default]}, &(0x7f0000000900)=0x48) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0xfffffcb7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) recvmmsg(r1, &(0x7f00000091c0)=[{{&(0x7f00000009c0)=@caif=@util, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/11, 0xb}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/251, 0xfb}, {&(0x7f0000000d40)=""/184, 0xb8}], 0x4, &(0x7f0000000e00)=""/4096, 0x1000}, 0x7f68}, {{&(0x7f0000001e00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000001e80)=""/123, 0x7b}], 0x1, &(0x7f0000001f00)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000002f00)=@l2, 0x80, &(0x7f00000051c0)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/250, 0xfa}, {&(0x7f0000004080)=""/101, 0x65}, {&(0x7f0000004100)=""/184, 0xb8}, {&(0x7f00000041c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005240)=""/45, 0x2d}, 0x9}, {{&(0x7f0000005280)=@nl=@proc, 0x80, &(0x7f0000006380)=[{&(0x7f0000005300)=""/124, 0x7c}, {&(0x7f0000005380)=""/4096, 0x1000}], 0x2, &(0x7f00000063c0)=""/136, 0x88}, 0x400}, {{&(0x7f0000006480)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000007680)=[{&(0x7f0000006500)=""/246, 0xf6}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/103, 0x67}], 0x3, &(0x7f00000076c0)=""/214, 0xd6}, 0x1}, {{&(0x7f00000077c0), 0x80, &(0x7f0000008d40)=[{&(0x7f0000007840)=""/246, 0xf6}, {&(0x7f0000007940)=""/163, 0xa3}, {&(0x7f0000007a00)=""/87, 0x57}, {&(0x7f0000007a80)=""/208, 0xd0}, {&(0x7f0000007b80)=""/8, 0x8}, {&(0x7f0000007bc0)=""/4096, 0x1000}, {&(0x7f0000008bc0)=""/77, 0x4d}, {&(0x7f0000008c40)=""/246, 0xf6}], 0x8}, 0x1}, {{&(0x7f0000008dc0)=@xdp, 0x80, &(0x7f0000008e40), 0x0, &(0x7f0000008e80)=""/206, 0xce}}, {{&(0x7f0000008f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000090c0)=[{&(0x7f0000009000)=""/152, 0x98}], 0x1, &(0x7f0000009100)=""/181, 0xb5}, 0x200}], 0x8, 0x20, &(0x7f00000093c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000840)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x14, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x3, 0x8, 0x1, 0xffffffffffffffe8, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x0, 0x3, 0xa, 0x8, 0xffffffffffffffc0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x499, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x1, 0x3, 0x2, 0x8, 0x100, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) 20.482056212s ago: executing program 1 (id=2393): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200003900000000000000080009000d000000", 0x24) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r3, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) 19.793999072s ago: executing program 1 (id=2396): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB='_'], 0x1c}}, 0x20024090) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r3, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB='_'], 0x1c}}, 0x20024090) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200), 0x12) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r3, 0x4) (async) 19.792794824s ago: executing program 2 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8, 0x7, 0x9, 0x3, {{0x13, 0x4, 0x0, 0x7, 0x4c, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x2b, 0x1d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @remote, @loopback, @rand_addr=0x64010100, @private=0xa010101, @broadcast, @local, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x23, 0x1, 0x4, [{@private=0xa010100, 0x9}]}]}}}}}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x4080, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x6a716ab9f9a88e9b}]}}}]}]}], {0x14}}, 0xc8}}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000000)={&(0x7f0000000140)=@can={{0x2}, 0x6, 0x1, 0x0, 0x0, "d34b22fc189a79d3"}, 0x10}}, 0x408d1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xb8, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000007b80), 0x3) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x1e22, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x0, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x52, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x24000880) 19.642123953s ago: executing program 2 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14200000", @ANYRES16=r3, @ANYBLOB="08002dbd7000fcdbdf256600000008000300", @ANYRES32=r4, @ANYBLOB="f01fb9800a00ba000700ff00c7fa00001b007f007e1541090208021100000003000000060000000200000000470491003768414e1d6dad261affc6682ffb530474318690162431317ba03eed0620c2cb1e27bd344a92e7122a000f4cba9e37d01644d3e672c3d50070b996125aee23697e9c708f6db3095662ef3b0c650694f1d6fbc86c9de0913e3788aabd03554ef9067049fb632cb78a46b1dd02d58b91c9ce718ef461888d334c41fccd97baa5b6435c66b83975d618d1b3cb82bf91fd37dff46f8a390c839a4dec9b7dcda30bcc27d4c63c9d0d32bd0cdfadc1619e10c4de1389078387a4e7c30b5f10cb589cca200dd3dde9b1b1bf2a0812f7e57f76eb8a40b4d99e0aab9010f20141e4d5360cbe8fe157e9af9d79ce0786a2b520d3824d07970f3e7c215e34309922f01e18634e639450e72f744fd7bad7dec3b66c63ca6722dbfdf240e51ba2e0f636243bb08994b38e8dd386249597a91ea39052e7fda57709f36d482a381e118d921b515a0f9653049b8fa2522b360edc39f925d6eeba780f72e685db64a80bb0cbedfcf5a893bf6242f056e0cd86af6313a5af10a84a65af6b4524494bf7197cebc0bec387dfe8051a75ac50fe6a5fca3634281cdfa9bb13ad2ea75c044cbbd5e762b6667f05a7046f42a88be7ba6c922e1e54a51260bf81e79710e4f7b39aafc79f23286b030736e90a6a7744f104f6d546c521e6bd1d756eef3d8ce4cd278ca28343fbb6c3b88af2a629cf8cd9a24311f49d2908b2b902d0ec0160215ed54246099316bb4c384d73bc6f9269cf3d72ae192ac12289290948b8a1fd1b0d296ca2087e10a62ea49a3caa5259a355cb6b3f9137dd7f9971bd538ffbff8b954fff6e412b08e6c11dc176528ca21252936758eece1ae2f41cd7e0e8c88d348f4dba5166605d3f2f08967d200ca0da2b103bac1ff271262f24d5877421d2800b73b584d671ce38657fb04153574e495a43d41b2390d4085bc65bc9ef751d09957cbab95a9da7b94f3828c7b6840a4b405921dc7b548d62477244e40180df14927870e77c185a165c5c22ae9f215795d5b66f3b5868f199f9f869be763db7b940be9cb07afd087e4c7556eb45080e40af50e61d9fbb23f0254ef196764177bc285770e71cc1c4fdcfee570f03aa0d3fcf2036e057ce722a4454bbd418a4329ec9df09ca4be34bcff56712bafa78cb062e050fec18f308515a0843a4e73b624ba596af41759ef56c61f05b6cf008c9061138051f42c478107ed15b3e98b0c1d3ac74838670521d7d774403075538a0480b6d1071bdc92ac5620b0589bd052842ba22475fe7cf7b05dabdb2a80d98b769292a1646d6bd6e74af6f721d8a7e906d5be7d5ef6c7da06b5b5f61eb6c42a0531872b6b3de308c61325faa0e4d92e9b257f1240ed971fd2021a9b4353be14e65c4f68c15978dc0a57b0bc768d2e86c4faf52a22ff91cefd182ff12de6bc63c22190bf5d0d997dcb13960238493a20c5afc853749d4063a289729bd333e01293129bb858e3bc2d424bd51d5ee20e7a2c1d97ee8d5047f3976327a3dc53f8fe824a2bfb44f8f6cca08ed6bd602f7865c992dbaa7932f14a9cc09e5006f000f007606051d3500e5fc7606d0073f00787c000602020202020205370380f90c234db928995871dfa4309171e5c5aa2d90e200c340c4bd8660948732404ab4fa7630a0d3c31c133c70bb6ac8dccb1bed6d14c310015a7e156075fc08021100000105000000faffffffff010000000e007f007508010009000200160000000a002a003c0401f7b29a000064050e0080b4ec00ffffffffffff080211000000dd2683c319032d596a00c68109000000000000000300000200092feb3e624e15be68d70301ae060207002a01003c040104b9812d1a004014000d0000000000004c0005000300000000080010000000710701ffff01ff8029dd6c6c6c94ac933d6a7732e83956169cb63d57c9dfeda5046ba2246979db4a04eed5e4bc320e910e863c5a15943db6c52ab05c9670e7b37b5136be6346761e345714c71a72527496ef8905cdfc359baf37ee48055da88ffd115b7b20fae38b81ab576646e2e8d601b4fbaec93450ddf5ce0f202db17ac23e4e99e389496292c80afb39444be45c30b31d483130c5256ce67b5cf4042a339051ef2d3060a3f5c1b3e9437d30bb257cbc07719bdff0b64c4c68608b62d90713d9db1d2d85bcc8c7835d786a58015c5d542b9936a0548e607f886408f390435aaf37e03a8282785f79fc84ce2c4c11b836f9277dca185634859f7bd287ac6415e1f3d3fc0db70b16790896e4d9881021364e1b95a0606a483ac7e17c0d290bb5b33173262f6f4a0c51760cccd736cee7aa1254b611c66082322cffc638d59df89a14a163e74285df252ccdc2b55ba30fb00583c9e91395cbd4878c0ceee26de002bedbaa22b95fc93b8ea5c23eddbd2a44eaa0f6e4f58f6492ed7b574058b43660d7d62d7021f818703f0b6b14c8d8fdb6715a167a13999b0efc83b25e1ae2effcf9641b20e8285996f9d26004678b149a9f440b657ace4bed7fc6d1723ec32d008957d9e1c27dbd9e0231cf93013f1dcb6030a9d62eb3bf239b3979cf8ce14d147cba2b7bc923f8c960fe59821ef2c32211239bbc0221584232c9c30734560dbd9ca877ad9ce1c9f514e8c4d8f2a2ee0d2ef898904337668c5236e75e62c158e689a9fcdcb4a69182993ef8ddf5d02de5d154f60a7d8dcc19870cf09903bfb95c1ce05bead823fb15bede99992f19f8c1efec62df7fb755e740162df94f289e0f0b03b06d5d37411c38a02c4de512ebf832c1bf6f9c20046d936843dd159294bdc6eafad3ca7320c4fb0c65c7950e4cf4158cf29ad155aee026bfe666fe9661fde8794bd22760b6814ff7494ea4e8bcf82f00ca57d6705ff3a2625e16c206349482cf8d10d23592cf679dd3273971f734d9ae704c918dddcbb4ab92d250d80155aa933c9f38aef968e61dd60040fe9545ad8051e7af9e54bd64298d126fe1f15272c7917db50b9cc06384e884f15d7f587c982dfae94a298177c1ccebcb7d0b3ab4b4dd8e94dff7ab3744bcb6edf21c2afe8b3d342ff68a8cce3c2f050db0676753cc55847a129a45d31da9d0fce7372735369070779fcd9d6a42ae7a23edf5cfa7f77959874e39c1c9264f309e4333b06c6ef9a72418bd2961ace10016861227a10bcbc1122dd045ca362b8828e64acf8c4b7c06f673e7fdd1aa5e61aab0b0db5812d1c0fe2370968262f616031a2ae6fc0edd53edc2703265295163c3661ae85f93926416223214d5cb4106f1d58a67c51c7464220d27a8f6885d9948cd624acf686402cce937c8736bcf074a5c6b24a6d53a47ab7c1b4537b9ef3cf8fa60cd6879414598271edd49260981355dd84260c8a28a6291d5c2abb1f1e7d7325d5babb7874d5b510ac30b0997de3be38be31417ea2f18717bc42509ca6aad47a6c7ae35fe8ff5e40eec2ff3271fd4032356eeaeddab5d4d0873b78d998faed5d11859658c8792755de59c8751e58d5fea2fe0e6da84211f2be8a71628ed308d21148b29bd57b6feb782b12efb57661eab89598d2cb5dc35633aea4285022b2b77239f010c31c5976bda785a6ba09c3e38928915e56387c37cb21eb513262e97696b4de8cb25639c7f4a3c3c5bf528da58fbb497d2a98a76f1ea5dd5c4b7bf843a8f9095291e1a8d6f8b97a98e5d5a54e4a1be13e2f3a81d2e7102300532d5b7f712010e0080800800080211000001fffffffffffffc1ca826c08549000a000380018000000000000064004410010681b0181f1686060208002a01052d1a002017070000000000000008000200120000000008080000000e7206030303030303dd25e18379750b1345751c5beb2ee3cd9e7d23b3392dd98ee53f65134f1059beb8a2ffc36c4e5edd8a1130286bca075d79b768999af6ed5a966575880a550a0def047e8ac97a4fac1b2e6658ad76f565636f8d6e5c6e016b401c9a71e49512cfbce5b2da5eae8a47659219d76adef469af85ac18e623f183ebb80d187284878642afdf370f0d6a6ac041e3a6917d03ce9bf3d84e01808ae5ad40477af9b26aff53d3769959122222e4af369886012122f7b24700004a007f008c18080a20f9ede26d4fc49878f45b70c65897bac379501a50b43c0400020bd97107010000ff022b2068047f005e000301026512505050505050080211000001080211000000000048007f0000060101010101016512ffffffffffff080211000000080211000000000cf7ec51dd20613b10a4442b578c10bd03d4fc70f51f3ba303961fc252f28a040607080100060044010e80ca000200bc99c7dfee090e967d84af85bd5775138729b88a10c8940b7a6e33065e41d22d260d1c6c7ec3a7cb928b3fcca8e58a0351c4dc99332c10c18122508a3056e5cb52e48758567a17d5a23a6d55f5cc3cd61b09f49ef098e34f22fc219244bfc5e81473c26bcfad1f3e2c0b335e35457fac7aa3cae0123dd34a04409dc97bdc308b5f8018850a2b71b94f9e0e94e44cd62514a9de812c3ed026542d848d701cf26fd0826354b78c1d1083ba5cebb7b00dfbaee7e09d6fc9c54812dab8cc5e8e783c029596aaa44b000072000200380c901fdd43c24e0a6698dc61d689082bc555ed5bc177fc34626e9aa09f59bcd32c02e9cab06b412cbb12a36b3eb572a19a84e7c52962c3991f7a606b983c7ddc067629bb22fd366d5c667c97e9c5cc1f2f3c0b2556e69d3ceb274296c2d3c62036acb0228fbda11996a9cabc1500009c020e807c0003006b3b1d2cebe3916ed6e763ce217f7a30a57c976087e7ad9c70c5ef411b5dc81589f1f57144e1d0c8dd45c60a366a75b2546db1adc2cd03c05dc7892690f0f3a7755dcd37e7aeed155877634ff8f90de17af2ca510a6188e5ff9d8bd631e42c3e883210b884dce0a825bd352ecf299eeafbd9f50c1077f5322e00030074d4b18820e8760659b45536673bb1501befb0885ef1ee38eab2c28f286df8ca0b97223d46002cf82364000015000300eca58244afe447367685c3d9a94362a20e000000f300030042da35717774de8e4a34bac1c7724cbc765dde17161a6de6792ba16f2f57c73a013a10b3cc46df21c7dbbd784305434165d75d3ff9ffa3ac53de19c6148ceaca4089726c7c74814af39c3d5e87283e7b61905a219ca4fd95006e843e3cf91c0f0da50412834c18f9a56d91a9946c64a54b40129a0a6cd426a2e8385a1f003ded8e75e94b61184e0229241fb736dfef8771de43fb23c947d7504f87f8509405be5f575421d5b995cacfd4c522d8550dd91620a06d0ed2a9f03af94b0a3a05003f6ead3ab2afe96df52f3db1a7fb8c6186408136e5e195e754375a476169d8fd00831c3789e7a4d24c7af7496848917400da000200bf40a622c878c392c86a4032ed2693be8791240011d8ddf7f5f6debba168aeae7a097438ee8027f483afae2aaf6a6e36f35e303584923a4b912e50432c0066a12808561dfb3e2b13e3a59cfd39036028c3af0fed7f9a2b6a7fca9f3de124f754429de30d8dbcb8bef2c07bf83d97d04a58c6facc6dcaeabbd4e3e1dc2cd4411da9a3fe96e258b8ec2a2f376c6c77be4b2cfb91c7bc7fe124dc15b4e66837415aecf0558ea28f5bd563cad219dfb42b5ef2eac75180f50390b01cec6bfcc7191016d4f293e45eb617499aefaadffde53418081366ed4d000004000100930691007433730f7356daae48318de06118d5392bbbe35e88681bd514bdd6b778b9807c7901165065628ffe8c048f6a440dc452b89ed8e13665f0955ce9d7bb98d4c261fedf6bfd3870f79e15e92b5a8f289e0986e572e799dc71fa97a4ec283bcca6cf814bbe2674a792ef23e4f61943c37e82daf72adb1282fcdc096c26521d052e7c47906f0d7972539c6b33d1e818c84e842a0bae37d9d755adebb83e40256eddfa42830fe41bede0a187fccb6ada535b9bbe306b950fcaab70beeed84f70e182946e0fa6563d58d5b3b5db37e3f2cb00178313de2c63730051cf5b88eb35d6bf31fdacc02992700e4b6629107a60248ef2237cefe630bd7a0852083eabfc9e476db9f8d456432c7b6c198ad8a381088ee9ee64bbe5edb751fd789008de30e91125ce307942b6dc89f18ea988a68b3ddb58d286db2c7006d09dd036f5ca639017fe57b8de478e70179f7fc9df06f9497cbeed5f65ac7f6f55d833fd3e62b5d78908e283e5f504d065599e69f0661f8535ef60f5d07890b5fe69af648b19e2bc86104a44385dc93916bb649a902663f6e326713e6e2aafe221011675a70ad698f04207dab9d9e643458ba149e873c4b7a9298b70d452101b5382c99053e965187f6e7f63cc69ce122ad4336dfdc6cf0b0ced1338afe338624f2af653bf4471af84bf09448fd769fa444ba99656545900c07b06e18d9c5666b12bf50927a65cb9dc7b1d53b35b52a77bc5344e9a06677b806c49cfacbabf7a6ed5590ae066451163644cb937d4c4a2e3b0f062585a5e25eca1d6ea1de43f7df59a08629c1b8beaf4f3a16c76850b6eeb04b5d8495bb7b04ad2e61f86217699715375f927c8deab59f0f2616fd902591d9e0ac1de9f7b8a10b4c3c5e26d5d20a57a177520691f9f01aef0764536db1fb38a6d3fced027a60e3eaf23266ec2b9ce72a43b5628fb2657e205dd3ba69ba68037eb41d0373275a2772879c252b6583ddc308d7223406b872a74499748f9a30b7767bfa996ace39b5a65aa3fdfeccaef34405abf1bccfe87537d824629568bfebb5ec73bd70dc033aecab87b68aebea83003e8d67cc336fa02fe15c5a98936073928c07302fab7559aab89e8c326fd173ab40d9d0be7ea0fee7bef25ea13952e24b190eed2324629e7782ae59a48c5f4b30c784e8d301d57ea4d9713af544dc95bc318dcfd4019dd186f9152a64285773d0df48445fafe1e03cbbb76c94ef1068bdd4d9da9d06d954855ad465d905457952e139f0e888cb0dee53d089849e7123323a01baca7fbf7d335cba3b63cabbc83c1630931603ea466f78e6ab4ded9584e3c8442507277e545426b89bb15f07fb43429a4850ebb7e84fb0d6fc7231cb2dc4621f491a9765ae71f45c227fdf70dbbdbf2d98c5233f4e69e9e070818028554cfd1812312b024f991ecadf50b788c143105d21270fe023b89849262acf44a497aec5c9b346c5f8573d267d6c5dcb9d0ca7ba9d81b7a26d5fe78f2b6d550d24ba7b2d46d16f4d723272ad35d4c63c0257870d55f81b605332b07014f958d119d4963cda78ef1985dcbdb336a160678be65ebbe39b61d95fa6b23eda44dbe4bab8ca8fbecc17a6a67d277763644bdc76095bdb4e2ba34d1e1018c820b00740447f8876dfe34752d86c9022147163f821a96bfbca6969cee9940ab51af2528b0725c0abfc0e2aa118b867db0e14e502dce48634c20fbcc68d7a6b1448c14338e897512c8200f1f704249dd7bcde7c896c951668a1431aa254b5e647b9d46b1827bfaaac200326172a409c50cc9c2e7742a8f25f97c4a69922ad7cd92489b8baf7756013d048812752ab54cd749bbe9d17ad6ec109c06bb96d4cf0a1a617ad0542090741256bcb6d48b7f3e57de81c58413a567cea06b9e4754a66d532ae84a1f1eecb348e31fb565d0eba770b00d3dbd148620df90de88f496729185bda01e40a07fd8edb9f10cb7418353e613a265f8ffb929b3e3d6d168e557f7628acc73e179f18490e629e41b490ce727cad1f42711c046149e1b8c607b1dddb17694df9b453272bcfcc073b55e2b935193359c66bd66e050b9bf00aedc47fd47fed355dc0b1ce50c1c8e9014bd85ed0fd5e06cc8bd9c152150acbffe557f5276c4b5f9fcba6a6c13320f287e5a17021bb849033444de03db233fd7c76932747aeba31a35b1aed2756cf42fafd5956088a8391a3fe4a0fb864cc0069670382413fa656dc5179ccb7db91361a3b51a91311859878b2f136a006589b19d732a87466fe0071953e4268be0519098d94153635ea2755f5024bfc6b8e122f0ef557e0a1ca457863701e2bc13fc3d0e6769da684a9a59ef0a1c28b1083317e2b6b9760abc6375b1a0b18d96cad7aef400cc0591009859eac7e3129d2e1747510d36bc57e29170748deea390b4e92c575147c87d0d9e0030f1ac7319556e208118379f528048f26562cc11342a688154bd338bbc9bb672c8d0c8c7505f72154a07f90f49e5b3c1440a1455c6da45c758a1998c04371493792613a9cefec2bf0668b140e0f975904e9dc4bece50624de7e356c83cd0e97e15faf371385c075586d9ec9ddcc8a4b5f7691b966b3049e04db3f1fbc3fc37177e26dfae6438ad011a962f78c9dc0385d9d66a32c6fb55a638365109575531a979dea3d54ae4ba6fa7d49cffe951ecb55262c34eca564da63b2cc7c50675d25d23117fc3cf9312dd71843ce21bee7a7f7e2f7f6dbf07a261f411548b82e88857087f2e02681f039afe63553df90dac850d32aa03c703fe03efc2be43fa15f71891541dcc2b844b5cbddc0ee7e6bdae1dd91eaa9d80d197f274682bda054b7f011b1945a3e39d0fbf79b74700ff9d14a7f659b7f1ac6ca97efc71d2ca0370f6730859a830e1265663a40a172d6ca07c46063622d31d835ced5258fce6dc46b7dc709f5783bf7c2da94a2ee1291e18dc0563221781024c1a8c4396afcd09a58640cb18bac7566986c832c378a7f5c0b6a1849159efd7e392c404354e797bfe20e189b5f9a9098e65881bb222f5248c07e07cef4b9804f9b94fcf307cd61a29358db0d9ae845561c686ca4f272d32cc8d6e29a1ca922572482d6fa39c956aa61e8de97e95091f5c7bcce93b8135929b3c6d7e9360809201f844ee61c1f7b3595ed044d3eb8b26b8f25381f9de629b814cf8fa4d681a0a3aebb4372626a941d5c8cb468a26deb4628850687e258f50b6ec318fb2e31d51d72d1feace66358e97f7fe6eda6b5420c3b3fa8c332e29ac95e16b01f6fc38e4cb52adb4ebd2943b0aa0ad38b2aa3c298ba4de058af84f6724391d3e3db18bad27fd82677eba9ec5d48ba5d62cea68e1756264933ca5f8b2bd66ca4adf6e80a19c31de69cb507cde095330c7973a28ee99a2992db5752f73f18e6f7f4d74c8fa6cdb4c6c717b5ec50d0b1cdb6f6184f40b4e4029bccd599fbede2cf7cc7019b59f421439bc4aeb2a6ae30b9509502fcad27462c39e1c66726d2cf76354b05c057503b3033a45d88bc444b54c2168aa654d70a0188b61ab48a00fb0320822b5e2745e2d8049bee5d86edf700a791137ad1c175d3873084197bc5546fac5f8e6e657c47d62bd0aa778d80df4b1beb54c3c54722b83400c60423a1c043019dd33571ec6a3bc4a76293ea4ad73bf1ec228bd3028108ac3d3b852e92879cbe24f2a0dc07e19473164fd9ae626543684e09428bde77639af7fb93bd97b81fe8d1d96d58af35fd66507a869a9316e24f30f50a7f7ffd5e881f9bc1c5b505967ea6b58ac4b87f4f1299c52762acdff0ed7d033442816267a4e9b9977a2126e3ef3f164d00f9892d6d889d7fe25fea945b193c6833c6774d8b16340abe00b679ceef827125d96789811179764924fb6ad5dfebaea6afe1f66262f696592a4c0a597b96da31e9d3fd095617bd47e2ebf8ae18c7717a9fa297da777f1b165dd0811d40b36a9f6498601d50972e8b54a3fc58fcf17436124adb9e3f39d42b4468b87113f474d3598608d4537bfb9a00a60d81ba504eb4a72489c9bac1204000000c12739cd62a8e45f36b06c158e1ab46e04f2c1048c9511e6986cc0b5b38618b6071aa1316b55ddd245a0e50d5033d8ea5b6ae23d5989857f92048fb43d4a143265212bf31cfaa5b4c1bb1634c7bd08880c112695e4502a8c7fe9780376af470b3cbf627e5b42ab7ea535ec616e0247e89b295bd2d933742bcf7bd13c9564f04988b4323562b51ad140282e4249ff11d2ffd717e7c1b5f6c42e0e418a88f302cf032125f826c6b76a91e185f57670ae8030061bae79f25fc6fc9dee0039b3ab258bfafb421759bd33e5c792a15b947073116204d6081e590d251d3c7be015adae9375ecd48d471527e8febb7e61876a93acf0bba495bed5b0ebeef0805fc8513d68fbd187784a78f3915b80858189fba621d25fe6ea7a061dd33ff204d1e360af34fcd8a85b511273a4a213388dc07aca74bc67de86dda3008000751601002ac62f00d36b5c3b3355626971bee3e613ea9c0482720209f2ffff00000802110000018c6d000002000000080000000804ffffffffffff020000000408021100000101000080040802110000000200000005ffffffffffff070000000008021100000010000000010802110000000500000001080211000001000000000408021100000100000000040600000002da090406030b800004003e010100c0010e0080b00700ffffffffffffffffffffffff0802110000010000040003403b06000000000000640020020602008005b104e305cff3431f323d53b270c20a501681e6a50954223499500ebe148b523d9339fce579f14bcc2a63c5ff60c73d9410fecf7c318a569cf6f5f75dd30ddd91be8678164615d65122f9fa43344da379abb314d61a378a42eea659bc2daaa8c65bd2a46f80031127354125242f5892f167cab79b2ad8a1621fa7e6c91215a1dd5767f8f297579973eacf29fe96ca70821a90350bf630b6d3fcc2fa235efc9d62559cb3515b71de2598267781d3e77ce6e28125030080012a01013c0400002c10760601813a000700ddc5d6005010b27cce2ad6aba7d1232bbd7eaae38184be9da448a35f29ec970cf667153c2494751251905f177c938621a5a3d29cab938a27ae24d9d0a56671acfa9a8033d3e8d5589880b92074dbd69c8a349699b50911848ba2c46c2c0fc26934aef99636b0be276062d9d067c2bcc3d649cb01172cc99bf5fe303325a72667925f50f61acc71901676685ccafe0bf6af2b7ee0602847f15d037190e6fcf46317e05a644e1226a01a5433aea1980908c0964bbade3a18a73184e447a5fba617a87bccb624f4da3f010f0007ef1722a1af018e4b5548d9dfc2cad5542be2b90820e1708c35535ffa7b3ebb218edfbdbf80ac12a55314bcc67514229ce175a7086636fbe99527dba863d44129efba315dd7ccefb63830a1cb5c61250acab654990b5c0db75069ce0ffc95d9672950816a9ee4b85f367d79f5b5f1aef6834a774f1c8f53b2c3cf84d8ebc2c98ec4530525290b0942c4718a5cbc419388b8cd4e591f43a02e16aabf49be4eada0456261148326c02a176478c18c4007d4229e0d22c0f9c80c0ec5e42d9e7dd87426473dc56cd34ac40bd575b220ccc96208234fcfa0ae8bad195642ce98d397e36b8b83544cc449adc69f0963c1a4eb6e751801000600ff00380013e59cd35f8ae8b89d759214254633510406fb800500050065120802110000010802110000010802110000006512727ed82030b6080211000000080211000000000800b70037000000"], 0x2014}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100026bd7000fedbdf25250000000c009900e30000804b0000000a0006005050505000340002020202020200000a00060050505050505000000d0034007b080a64a325694825e6ff000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000845}, 0x40000) 19.641259285s ago: executing program 1 (id=2402): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="52010301"], 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x4c094) 19.57013865s ago: executing program 2 (id=2404): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000001005d9fa6e300000000009500000000000000f34e52bdbfa25e1e3c8e18e5f2f056b003fdee3bd930ac039d4feac56b54a76c00ab85d7c82f1f61fbfb5565d4bb9da3e61338141f301ea2bbc3943fa3f4d5845a14f75e3802e62f96fedf0a3874d9e2b34311023528ae4ccd0bb4b9df2cc9484dd98a9caf760e6f61ae0919b0cb8ba4937095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000001005d9fa6e300000000009500000000000000f34e52bdbfa25e1e3c8e18e5f2f056b003fdee3bd930ac039d4feac56b54a76c00ab85d7c82f1f61fbfb5565d4bb9da3e61338141f301ea2bbc3943fa3f4d5845a14f75e3802e62f96fedf0a3874d9e2b34311023528ae4ccd0bb4b9df2cc9484dd98a9caf760e6f61ae0919b0cb8ba4937095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) unshare(0x28000400) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'gre0\x00'}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'gre0\x00'}) bind$bt_sco(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x6, 0x40000, 0x6}, &(0x7f0000000380)=0x10) socket$can_bcm(0x1d, 0x2, 0x2) 19.441843931s ago: executing program 2 (id=2408): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x3}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r1, 0x940, 0x22265}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x8014) 19.266189531s ago: executing program 2 (id=2409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001"], 0x4e) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000340)={0x2, [0x6, 0x3c]}, &(0x7f0000000380)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 18.181492898s ago: executing program 4 (id=2417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x48, 0x1}, 0x18}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) recvmsg$unix(r2, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000c00000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800900010068617368000000001c0002800800014000000000080003400000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) 18.023926937s ago: executing program 4 (id=2418): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r0}, 0x18) 17.974807881s ago: executing program 3 (id=2419): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf}, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x6, 0x7, 0x13, 0x11, 0xc, 0x6, 0x7f, {0x6, 0x407c, 0x7, 0x4, 0x2b52, 0x2}}}}, @TCA_RATE={0x4, 0x5, {0x0, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) 17.808980599s ago: executing program 4 (id=2420): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r4, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}}, 0x20}}, 0x0) 17.699030275s ago: executing program 4 (id=2421): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x16}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0, 0x10}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x24, 0x11, 0x1, 0xffffffef, 0x0, {0x7, 0x0, 0x0, r5, 0xc440, 0x40000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3fc, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x5, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xfffffffd, 0x9, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x408, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0xfffffffe, 0x7f, 0x6, 0x9, 0xff, 0x24, 0x5, 0xb, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x9, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0x10000a, 0x1, 0x0, 0x9, 0x300, 0x6, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x7fffffff, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x67f5, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0xc, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x100005, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0xc, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x8, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x5, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x2, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x100, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x26, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x8, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0xa, 0x6, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x40) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 17.610974756s ago: executing program 3 (id=2422): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xffffff9b}], 0x1, 0x1) 17.545850594s ago: executing program 3 (id=2423): getsockopt$MRT(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) 17.462598323s ago: executing program 3 (id=2424): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5, 0x0, {0x5, 0x4, 0x0, 0x25, 0x9b0d, 0x67, 0x3, 0x80, 0x0, 0x5, @multicast1, @multicast2}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17.406618372s ago: executing program 4 (id=2425): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x700}, 0x20}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x83}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) accept4$netrom(r4, &(0x7f00000000c0)={{}, [@bcast, @remote, @remote, @bcast, @default, @default, @default, @netrom]}, &(0x7f0000000180)=0x48, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 17.254221405s ago: executing program 4 (id=2428): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000240)=""/244, 0xf4}, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x20000000) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005c80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xc, 0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x5) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="30010000ebdd5383"], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc, &(0x7f0000000080), 0x100}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40000) 17.201770489s ago: executing program 3 (id=2429): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x3c, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x3c}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xae}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r6 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf20}, 0x94) 16.943421713s ago: executing program 3 (id=2431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="9424ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r11, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r13 = accept(r11, 0x0, 0x0) recvmmsg(r13, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x5185}], 0x1, 0x10142, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x30, 0x2c, 0x4, 0x70bd26, 0x25df9bfd, {0x0, 0x0, 0x0, r10, {0x9, 0xfff2}, {0x0, 0x7}, {0xe, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4008000) 15.40152011s ago: executing program 0 (id=2437): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="8712000000000000c91020010000000000000000000000000001c2040000000605020005017774823f8fd8324b7eb0edb41eed03e1ea09d016eddeea087b0d357591f5f3dbf3e05b01007f57f2b1a01bb55fc9c4577df622a42245d37ede3caec2"], 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280089b788ccedc88fc8d7289ad5fc18230da2089c1c17b1a19e3d33b6f87283d0c2feb38362aac5040e2b24e967c94ba610fea66363198c3141d50f21f69de42c34519687f38b075774ac42fd00010413d1edc07fb8302268d82cb10959ef8b4685860729b9d42f0e24b9a82b33e868b47c24eda28c494a3c316f7c4551757bdd3"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xa, 0xd}, {0x9, 0xfff2}, {0xfff2, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 15.34284369s ago: executing program 0 (id=2438): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2300, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x20000000) 15.262291202s ago: executing program 0 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x9}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x2}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x2}}, 0x1c}}, 0x20008004) 15.261919541s ago: executing program 0 (id=2440): r0 = socket$kcm(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8035}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @random="68bff8c0476c", @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @empty}}, 0x38) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000500)={0x1f, 0x1}, 0x6) write$bt_hci(r2, &(0x7f0000001480)=ANY=[@ANYBLOB="02000044"], 0x7) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848330000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) 15.211733719s ago: executing program 0 (id=2441): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r6, 0x0, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r9) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10, 0x100}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.14238277s ago: executing program 0 (id=2442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x5}, 0xc) r3 = socket$isdn(0x22, 0x2, 0x24) close(r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r4, 0x9, 0x5, 0x480}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r2, 0x25, 0xc, @val=@netfilter={0x7, 0x0, 0x7}}, 0x20) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={r9, 0x1}, 0x8) close(r0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r7, 0x4) 4.103085026s ago: executing program 32 (id=2402): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="52010301"], 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x4c094) 4.058263628s ago: executing program 33 (id=2409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001"], 0x4e) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000340)={0x2, [0x6, 0x3c]}, &(0x7f0000000380)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.049243484s ago: executing program 34 (id=2428): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000240)=""/244, 0xf4}, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x20000000) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005c80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xc, 0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x5) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="30010000ebdd5383"], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc, &(0x7f0000000080), 0x100}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40000) 1.024073638s ago: executing program 35 (id=2431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="9424ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r11, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r13 = accept(r11, 0x0, 0x0) recvmmsg(r13, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x5185}], 0x1, 0x10142, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x30, 0x2c, 0x4, 0x70bd26, 0x25df9bfd, {0x0, 0x0, 0x0, r10, {0x9, 0xfff2}, {0x0, 0x7}, {0xe, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4008000) 0s ago: executing program 36 (id=2442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x5}, 0xc) r3 = socket$isdn(0x22, 0x2, 0x24) close(r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r4, 0x9, 0x5, 0x480}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r2, 0x25, 0xc, @val=@netfilter={0x7, 0x0, 0x7}}, 0x20) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={r9, 0x1}, 0x8) close(r0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r7, 0x4) kernel console output (not intermixed with test programs): the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.939807][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.952842][ T5845] team0: Port device team_slave_1 added [ 87.971487][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.978523][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.004521][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.053386][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.060844][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.087217][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.113964][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.121387][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.147685][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.180323][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.187539][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.213603][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.225432][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.233253][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.259262][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.296177][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.303190][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.329422][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.366785][ T5837] hsr_slave_0: entered promiscuous mode [ 88.373306][ T5837] hsr_slave_1: entered promiscuous mode [ 88.416207][ T5836] hsr_slave_0: entered promiscuous mode [ 88.422699][ T5836] hsr_slave_1: entered promiscuous mode [ 88.429300][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 88.435122][ T5836] Cannot create hsr debugfs directory [ 88.489079][ T5829] hsr_slave_0: entered promiscuous mode [ 88.495576][ T5829] hsr_slave_1: entered promiscuous mode [ 88.501971][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 88.508332][ T5829] Cannot create hsr debugfs directory [ 88.571325][ T5828] hsr_slave_0: entered promiscuous mode [ 88.577928][ T5828] hsr_slave_1: entered promiscuous mode [ 88.584149][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 88.590023][ T5828] Cannot create hsr debugfs directory [ 88.649210][ T5845] hsr_slave_0: entered promiscuous mode [ 88.656748][ T5845] hsr_slave_1: entered promiscuous mode [ 88.662981][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 88.669419][ T5845] Cannot create hsr debugfs directory [ 89.237185][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.267096][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.279401][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.300112][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.358364][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.371215][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.383432][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.394711][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.493789][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.507642][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.518923][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.532468][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.676148][ T5841] Bluetooth: hci3: command tx timeout [ 89.676624][ T5843] Bluetooth: hci0: command tx timeout [ 89.688968][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.707278][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.721808][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.745248][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.756638][ T5843] Bluetooth: hci1: command tx timeout [ 89.756699][ T5841] Bluetooth: hci2: command tx timeout [ 89.833053][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.846212][ T5841] Bluetooth: hci4: command tx timeout [ 89.879530][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.894436][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.913123][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.932782][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.953243][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.969036][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.999969][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.024093][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.031408][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.070580][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.077851][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.088767][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.096009][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.115418][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.136562][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.143700][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.218208][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.270623][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.277881][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.322045][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.329253][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.359523][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.440397][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.502326][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.509525][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.541863][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.549394][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.622907][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.743503][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.785305][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.792593][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.825367][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.842778][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.850052][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.888969][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.002643][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.125998][ T5836] veth0_vlan: entered promiscuous mode [ 91.163241][ T5836] veth1_vlan: entered promiscuous mode [ 91.193112][ T5837] veth0_vlan: entered promiscuous mode [ 91.242187][ T5837] veth1_vlan: entered promiscuous mode [ 91.267920][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.279423][ T5829] veth0_vlan: entered promiscuous mode [ 91.319449][ T5836] veth0_macvtap: entered promiscuous mode [ 91.355396][ T5836] veth1_macvtap: entered promiscuous mode [ 91.377483][ T5829] veth1_vlan: entered promiscuous mode [ 91.454273][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.470164][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.486625][ T5837] veth0_macvtap: entered promiscuous mode [ 91.510304][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.523804][ T5837] veth1_macvtap: entered promiscuous mode [ 91.575037][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.602955][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.613930][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.637253][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.651586][ T5829] veth0_macvtap: entered promiscuous mode [ 91.674721][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.695352][ T5829] veth1_macvtap: entered promiscuous mode [ 91.740027][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.756437][ T5841] Bluetooth: hci3: command tx timeout [ 91.756448][ T5843] Bluetooth: hci0: command tx timeout [ 91.777836][ T5828] veth0_vlan: entered promiscuous mode [ 91.799320][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.820540][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.831080][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.840046][ T5841] Bluetooth: hci1: command tx timeout [ 91.845948][ T5841] Bluetooth: hci2: command tx timeout [ 91.866736][ T1160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.888523][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.898186][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.913819][ T5828] veth1_vlan: entered promiscuous mode [ 91.923544][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.931886][ T5841] Bluetooth: hci4: command tx timeout [ 91.946623][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.975295][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.001369][ T1160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.012219][ T1160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.032611][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.033167][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.046891][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.153533][ T5845] veth0_vlan: entered promiscuous mode [ 92.167831][ T41] cfg80211: failed to load regulatory.db [ 92.190751][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.229509][ T5828] veth0_macvtap: entered promiscuous mode [ 92.250037][ T5828] veth1_macvtap: entered promiscuous mode [ 92.265881][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.273759][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.309916][ T5845] veth1_vlan: entered promiscuous mode [ 92.351457][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.360274][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.444462][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.468913][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.482653][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.502855][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.512583][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.566059][ T5845] veth0_macvtap: entered promiscuous mode [ 92.588010][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.611951][ T5955] syzkaller0: entered promiscuous mode [ 92.624222][ T5955] syzkaller0: entered allmulticast mode [ 92.660999][ T5955] xfrm1: entered promiscuous mode [ 92.666910][ T5955] xfrm1: entered allmulticast mode [ 92.675370][ T5845] veth1_macvtap: entered promiscuous mode [ 92.745272][ T5958] netlink: 'syz.3.4': attribute type 13 has an invalid length. [ 92.875488][ T5966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 92.910861][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.920726][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.057226][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.085958][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.195306][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.266390][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.291603][ T5973] x_tables: duplicate underflow at hook 2 [ 93.381807][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.427020][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.438354][ T5977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.487837][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.504239][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.632507][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.670634][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.761506][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.795588][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 93.808798][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.843975][ T5841] Bluetooth: hci0: command tx timeout [ 93.844362][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.849753][ T5841] Bluetooth: hci3: command tx timeout [ 93.916814][ T5843] Bluetooth: hci2: command tx timeout [ 93.916822][ T5841] Bluetooth: hci1: command tx timeout [ 93.916928][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.996618][ T5843] Bluetooth: hci4: command tx timeout [ 94.066385][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.107145][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.572553][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 94.648585][ T6017] Zero length message leads to an empty skb [ 94.676796][ T6016] netlink: 'syz.1.21': attribute type 1 has an invalid length. [ 94.739142][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 94.762953][ T6016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21'. [ 94.835277][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21'. [ 95.190371][ T6026] netlink: 56 bytes leftover after parsing attributes in process `syz.3.23'. [ 95.294890][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 95.301696][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 106.019278][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.31'. [ 106.100373][ T6051] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.31'. [ 106.434667][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35'. [ 106.692416][ T6084] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 106.703453][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 106.761759][ T6089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.40'. [ 106.950255][ T6091] sit1: entered promiscuous mode [ 106.970169][ T6091] sit1: entered allmulticast mode [ 107.011259][ T6097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.43'. [ 107.155489][ T6102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.685086][ T6123] bond0: entered promiscuous mode [ 107.698708][ T6123] bond_slave_0: entered promiscuous mode [ 107.730158][ T6123] bond_slave_1: entered promiscuous mode [ 107.768402][ T6123] batadv0: entered promiscuous mode [ 107.801722][ T6123] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 107.958817][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 107.983524][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 108.005572][ T6135] hsr_slave_0: left promiscuous mode [ 108.050883][ T6135] hsr_slave_1: left promiscuous mode [ 108.204908][ T6146] sit0: Caught tx_queue_len zero misconfig [ 108.420252][ T6155] pim6reg: entered allmulticast mode [ 108.475272][ T6165] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 108.722131][ T6169] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.67'. [ 108.784266][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 108.888036][ T6173] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 108.940616][ T6173] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 108.979336][ T6173] gretap1: entered promiscuous mode [ 108.984622][ T6173] gretap1: entered allmulticast mode [ 109.027041][ T6187] netlink: 'syz.0.74': attribute type 4 has an invalid length. [ 109.181815][ T6191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.545514][ T6206] syzkaller0: entered promiscuous mode [ 109.582766][ T6206] syzkaller0: entered allmulticast mode [ 109.700094][ T6222] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 109.874237][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.485206][ T6249] pim6reg527: entered allmulticast mode [ 111.017654][ T6274] syzkaller1: entered promiscuous mode [ 111.035953][ T6274] syzkaller1: entered allmulticast mode [ 111.052924][ T6274] __nla_validate_parse: 8 callbacks suppressed [ 111.052944][ T6274] netlink: 52 bytes leftover after parsing attributes in process `syz.0.97'. [ 111.087636][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.095547][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.569011][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 111.672505][ T6310] batadv1: entered promiscuous mode [ 111.691622][ T6310] batadv1: entered allmulticast mode [ 111.708629][ T6315] Bluetooth: MGMT ver 1.23 [ 111.729978][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.038011][ T6330] syzkaller1: entered promiscuous mode [ 112.077226][ T6330] syzkaller1: entered allmulticast mode [ 112.613490][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.118'. [ 112.632413][ T6360] netlink: 92 bytes leftover after parsing attributes in process `syz.2.118'. [ 113.309498][ T6385] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 113.517430][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 113.674326][ T6403] macsec1: entered promiscuous mode [ 113.703255][ T6403] macsec1: entered allmulticast mode [ 113.724436][ T6403] bond1: (slave macsec1): Error -34 calling dev_set_mtu [ 113.760544][ T6409] veth0: entered promiscuous mode [ 113.849178][ T6412] netlink: 7 bytes leftover after parsing attributes in process `syz.3.133'. [ 114.056236][ T6425] veth0: entered promiscuous mode [ 114.094335][ T6425] veth0: left promiscuous mode [ 114.306867][ T6434] tipc: Started in network mode [ 114.326033][ T6434] tipc: Node identity 42ca16e8ec85, cluster identity 4711 [ 114.343837][ T6434] tipc: Enabled bearer , priority 0 [ 114.412230][ T6434] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 114.483108][ T6433] tipc: Disabling bearer [ 114.633102][ T6449] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 114.671706][ T6449] bond1 (unregistering): Released all slaves [ 115.124243][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.132159][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.196848][ T6461] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 115.220991][ T6409] veth0: left promiscuous mode [ 115.380456][ T6485] x_tables: unsorted entry at hook 2 [ 115.817902][ T6495] netlink: 'syz.2.150': attribute type 13 has an invalid length. [ 116.202374][ T6513] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 116.287817][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.156'. [ 116.298511][ T6504] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 116.317233][ T6504] syzkaller0: entered promiscuous mode [ 116.322787][ T6504] syzkaller0: entered allmulticast mode [ 116.357161][ T6518] tipc: Started in network mode [ 116.370799][ T6518] tipc: Node identity 7ad6ae3ad06d, cluster identity 4711 [ 116.378801][ T6518] tipc: Enabled bearer , priority 0 [ 116.548711][ T6492] tipc: Resetting bearer [ 116.628037][ T6492] tipc: Disabling bearer [ 116.831989][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 116.867029][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 116.992118][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.161'. [ 117.061367][ T6558] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 117.098359][ T6558] warning: `syz.2.165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.537799][ T6576] netlink: 'syz.4.170': attribute type 13 has an invalid length. [ 117.722362][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.791927][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.173'. [ 118.191312][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 118.259897][ T6611] openvswitch: netlink: Multiple metadata blocks provided [ 118.685227][ T6632] netlink: 'syz.1.185': attribute type 2 has an invalid length. [ 118.795199][ T6632] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 118.819931][ T6632] bond2 (unregistering): Released all slaves [ 118.867437][ T6635] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .ù‹qMÿ¡s…%ˆâ#\„¸\có Ó¡“·ãp‡ë[ [ 119.807790][ T6682] netlink: 'syz.4.195': attribute type 10 has an invalid length. [ 119.843390][ T6682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.195'. [ 119.905837][ T6682] team0: Port device geneve0 added [ 119.917880][ T6686] lo: Caught tx_queue_len zero misconfig [ 119.934516][ T6689] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 119.978439][ T6689] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 120.028343][ T6689] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.196'. [ 120.070970][ T6691] wireguard: wg2: Could not create IPv4 socket [ 120.107112][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 120.355928][ T6699] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 120.471058][ T6699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.701494][ T6704] veth3: entered promiscuous mode [ 120.748781][ T6704] bond2: (slave veth3): Enslaving as an active interface with an up link [ 121.019487][ T6725] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 121.306936][ T6748] netlink: 72 bytes leftover after parsing attributes in process `syz.2.217'. [ 121.376349][ T6750] netlink: 48 bytes leftover after parsing attributes in process `syz.1.216'. [ 121.389163][ T6748] bond3 (unregistering): Released all slaves [ 121.397597][ T6750] netlink: 48 bytes leftover after parsing attributes in process `syz.1.216'. [ 121.556300][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 121.592935][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 121.652727][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.221'. [ 121.913620][ T6782] netlink: 'syz.1.224': attribute type 13 has an invalid length. [ 121.956462][ T6782] veth0_macvtap: left promiscuous mode [ 121.962574][ T6782] macvtap0: entered allmulticast mode [ 121.991676][ T6782] macvtap0: refused to change device tx_queue_len [ 122.403537][ T6802] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 122.415648][ T6802] bond3 (unregistering): Released all slaves [ 122.612747][ T6822] netlink: 32 bytes leftover after parsing attributes in process `syz.2.236'. [ 122.646734][ T6822] netlink: 32 bytes leftover after parsing attributes in process `syz.2.236'. [ 122.677580][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 122.687539][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 122.838149][ T6837] erspan0: entered promiscuous mode [ 123.149003][ T6863] netlink: 'syz.4.248': attribute type 5 has an invalid length. [ 123.364149][ T6880] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 124.011924][ T6923] vlan2: entered promiscuous mode [ 124.039405][ T6923] bridge0: entered promiscuous mode [ 124.075181][ T6912] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 124.106778][ T6912] bond2: (slave vcan1): Error -95 calling set_mac_address [ 124.203775][ T6933] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 125.074632][ T6968] tipc: Started in network mode [ 125.093604][ T6968] tipc: Node identity 8ae22376f33f, cluster identity 4711 [ 125.106189][ T6968] tipc: Enabled bearer , priority 0 [ 125.180027][ T6967] tipc: Resetting bearer [ 125.250120][ T6969] syzkaller0: entered allmulticast mode [ 125.276154][ T6964] tipc: Resetting bearer [ 125.318408][ T6964] tipc: Disabling bearer [ 125.850684][ T7011] vxlan0: entered promiscuous mode [ 125.857084][ T7011] vxlan0: entered allmulticast mode [ 125.867871][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.927976][ T7014] syzkaller1: entered promiscuous mode [ 125.943876][ T7014] syzkaller1: entered allmulticast mode [ 125.962531][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.976740][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.999255][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.173380][ T7025] netlink: 'syz.0.293': attribute type 1 has an invalid length. [ 126.443794][ T7042] xt_recent: Unsupported userspace flags (000000b1) [ 126.486343][ T7048] __nla_validate_parse: 12 callbacks suppressed [ 126.486367][ T7048] netlink: 52 bytes leftover after parsing attributes in process `syz.0.302'. [ 126.513700][ T7050] team0: Caught tx_queue_len zero misconfig [ 126.885644][ T7074] netlink: 296 bytes leftover after parsing attributes in process `syz.4.312'. [ 127.120637][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 127.207322][ T7086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.221379][ T7086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.232922][ T7086] bond0 (unregistering): Released all slaves [ 127.386961][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.318'. [ 127.418405][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.318'. [ 127.787352][ T7119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 127.853878][ T7119] syzkaller0: entered promiscuous mode [ 127.877350][ T7119] syzkaller0: entered allmulticast mode [ 127.906686][ T7119] TC_ACT_REPEAT abuse ? [ 127.918263][ T7119] netlink: 156 bytes leftover after parsing attributes in process `syz.1.326'. [ 127.957518][ T7119] netlink: 156 bytes leftover after parsing attributes in process `syz.1.326'. [ 127.989936][ T7129] macvlan0: entered promiscuous mode [ 128.348313][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'. [ 128.450615][ T7155] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 128.463963][ T7157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.503771][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 128.513586][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.565433][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.612411][ T7160] veth0: entered promiscuous mode [ 128.623774][ T7159] veth0: left promiscuous mode [ 128.862137][ T7169] bond3: ARP target 1.0.0.0 is already present [ 128.877287][ T7169] bond3: option arp_ip_target: invalid value (1) [ 128.890510][ T7169] bond3 (unregistering): Released all slaves [ 128.963788][ T7178] netlink: 'syz.0.344': attribute type 3 has an invalid length. [ 129.240464][ T7183] pim6reg: entered allmulticast mode [ 129.267202][ T7183] pim6reg: left allmulticast mode [ 129.401366][ T7200] openvswitch: netlink: Message has 1 unknown bytes. [ 129.428879][ T7200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.488571][ T7198] syzkaller0: entered promiscuous mode [ 129.494124][ T7198] syzkaller0: entered allmulticast mode [ 131.212827][ T7266] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.229192][ T7266] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 131.578074][ T7290] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 131.616091][ T7293] __nla_validate_parse: 7 callbacks suppressed [ 131.616110][ T7293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'. [ 131.632969][ T7290] bond3: entered promiscuous mode [ 131.640042][ T7290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.647713][ T7293] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 131.666073][ T7293] netlink: 'syz.2.377': attribute type 2 has an invalid length. [ 131.671917][ T7290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 131.674245][ T7293] netlink: 'syz.2.377': attribute type 3 has an invalid length. [ 131.692715][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 131.727882][ T7290] bond3: entered allmulticast mode [ 131.799317][ T7290] bond3: (slave bridge1): making interface the new active one [ 131.846979][ T7290] bridge1: entered promiscuous mode [ 131.852463][ T7290] bridge1: entered allmulticast mode [ 131.868418][ T7290] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 132.069896][ T7319] tap0: tun_chr_ioctl cmd 2148553947 [ 132.380201][ T7342] tipc: Started in network mode [ 132.394837][ T7342] tipc: Node identity 6639c95b101c, cluster identity 4711 [ 132.413023][ T7342] tipc: Enabled bearer , priority 0 [ 132.442712][ T7352] syzkaller0: entered promiscuous mode [ 132.500239][ T7352] syzkaller0: entered allmulticast mode [ 132.526696][ T7342] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 132.570108][ T7342] tipc: Resetting bearer [ 132.613359][ T7341] tipc: Resetting bearer [ 132.626441][ T7341] tipc: Disabling bearer [ 133.059105][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.398'. [ 133.096160][ T7376] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 133.177083][ T7376] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.401'. [ 133.209126][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 133.229857][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.238211][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.255927][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 133.309199][ T7384] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 133.364261][ T7390] pim6reg: entered allmulticast mode [ 133.379496][ T7389] netlink: 'syz.3.405': attribute type 3 has an invalid length. [ 133.435188][ T7389] netlink: 244 bytes leftover after parsing attributes in process `syz.3.405'. [ 133.482718][ T7396] netlink: 750 bytes leftover after parsing attributes in process `syz.4.406'. [ 133.494956][ T7396] netlink: 750 bytes leftover after parsing attributes in process `syz.4.406'. [ 133.561410][ T7399] team0: Caught tx_queue_len zero misconfig [ 133.892617][ T7414] bond2: entered promiscuous mode [ 134.754915][ T7472] netlink: 'syz.1.428': attribute type 5 has an invalid length. [ 134.764907][ T7474] netlink: 'syz.4.429': attribute type 8 has an invalid length. [ 134.781481][ T7471] netlink: 'syz.4.429': attribute type 24 has an invalid length. [ 135.348549][ T7504] tipc: Enabled bearer , priority 0 [ 135.362084][ T7505] syzkaller0: entered promiscuous mode [ 135.383596][ T7505] syzkaller0: entered allmulticast mode [ 135.448749][ T7505] tipc: Resetting bearer [ 135.534098][ T7505] tipc: Disabling bearer [ 135.824373][ T7531] lo: Caught tx_queue_len zero misconfig [ 136.058417][ T7544] ip6tnl0: Caught tx_queue_len zero misconfig [ 136.260504][ T7557] bond0: entered promiscuous mode [ 136.286488][ T7557] bond0: entered allmulticast mode [ 136.307556][ T7557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.650272][ T7582] bond0: Caught tx_queue_len zero misconfig [ 136.660412][ T7583] IPVS: set_ctl: invalid protocol: 103 172.20.20.63:20000 [ 136.694109][ T7583] sctp: [Deprecated]: syz.4.464 (pid 7583) Use of int in maxseg socket option. [ 136.694109][ T7583] Use struct sctp_assoc_value instead [ 136.789565][ T7590] netlink: 'syz.0.465': attribute type 2 has an invalid length. [ 136.957925][ T7596] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 136.968634][ T7601] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 137.593380][ T7647] __nla_validate_parse: 9 callbacks suppressed [ 137.593395][ T7647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.482'. [ 137.613343][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.729742][ T7653] openvswitch: netlink: Tunnel attr 247 out of range max 16 [ 137.911814][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.1.485'. [ 137.934414][ T7667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.488'. [ 137.944795][ T7661] tipc: Enabling of bearer rejected, failed to enable media [ 137.956471][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.488'. [ 137.977058][ T7657] x_tables: duplicate underflow at hook 3 [ 138.261611][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.268665][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.302046][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.312877][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.323856][ T7696] netlink: 'syz.1.494': attribute type 23 has an invalid length. [ 138.381801][ T7693] geneve2: entered promiscuous mode [ 138.387777][ T7693] geneve2: entered allmulticast mode [ 138.412053][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.423325][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.437076][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.446614][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.673081][ T7715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.679844][ T7715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.720738][ T7713] Bluetooth: MGMT ver 1.23 [ 138.772324][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 138.798587][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 138.806337][ T7719] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 138.835095][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 138.866453][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 139.456803][ T7766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.479692][ T7766] nbd: must specify an index to disconnect [ 139.546520][ T7776] syzkaller1: entered promiscuous mode [ 139.552189][ T7776] syzkaller1: entered allmulticast mode [ 139.693032][ T7783] netlink: 'syz.2.524': attribute type 83 has an invalid length. [ 139.769245][ T65] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.794188][ T65] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.809918][ T65] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.846059][ T65] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.955362][ T7797] netlink: 'syz.4.530': attribute type 291 has an invalid length. [ 139.984131][ T7802] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 140.094302][ T7807] netlink: 'syz.1.532': attribute type 24 has an invalid length. [ 140.215083][ T7809] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 140.233803][ T7809] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 140.248132][ T7809] syzkaller1: Refused to change device type [ 140.618280][ T7838] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 140.702243][ T7838] bond2: entered promiscuous mode [ 140.707975][ T7838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.785656][ T7849] bond2: (slave bridge3): making interface the new active one [ 140.794256][ T7849] bridge3: entered promiscuous mode [ 140.801766][ T7849] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 140.966559][ T7860] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 140.977208][ T7862] netlink: 'syz.3.549': attribute type 3 has an invalid length. [ 140.986452][ T7862] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 141.010897][ T7860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.043783][ T7860] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 141.159281][ T7870] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 141.167726][ T7876] netlink: 'syz.2.554': attribute type 10 has an invalid length. [ 141.318444][ T7888] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 141.333273][ T7876] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 141.451594][ T7885] hsr_slave_0 (unregistering): left promiscuous mode [ 142.162666][ T7939] netlink: 'syz.3.571': attribute type 9 has an invalid length. [ 142.362617][ T7955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.971562][ T7994] __nla_validate_parse: 187 callbacks suppressed [ 142.971583][ T7994] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.586'. [ 143.004184][ T7995] lo: entered promiscuous mode [ 143.022798][ T7995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.096789][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058890400: rx timeout, send abort [ 143.328848][ T8009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.345288][ T8012] tipc: Enabled bearer , priority 0 [ 143.438135][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 143.453743][ T8012] syzkaller0: entered promiscuous mode [ 143.459914][ T8012] syzkaller0: entered allmulticast mode [ 143.466994][ T8012] tipc: Resetting bearer [ 143.482099][ T8016] team0: Device gtp0 is up. Set it down before adding it as a team port [ 143.606203][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058890400: abort rx timeout. Force session deactivation [ 143.670118][ T8026] x_tables: duplicate underflow at hook 1 [ 143.706735][ T8024] sctp: [Deprecated]: syz.1.597 (pid 8024) Use of int in max_burst socket option deprecated. [ 143.706735][ T8024] Use struct sctp_assoc_value instead [ 143.727879][ T65] tipc: Resetting bearer [ 143.737266][ T8011] tipc: Resetting bearer [ 143.751363][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 144.710248][ T8011] tipc: Disabling bearer [ 144.777875][ T981] tipc: Node number set to 1982187867 [ 144.926263][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 144.967351][ T8048] bond0: entered promiscuous mode [ 144.986332][ T8048] bond_slave_0: entered promiscuous mode [ 144.993207][ T8048] bond_slave_1: entered promiscuous mode [ 145.013861][ T8055] validate_nla: 3 callbacks suppressed [ 145.013882][ T8055] netlink: 'syz.2.604': attribute type 21 has an invalid length. [ 145.038417][ T8048] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 145.072290][ T8048] ip6gretap0: entered promiscuous mode [ 145.083760][ T8048] gretap0: entered promiscuous mode [ 145.090455][ T8048] debugfs: 'hsr1' already exists in 'hsr' [ 145.097732][ T8048] Cannot create hsr debugfs directory [ 145.103984][ T8048] hsr1: entered promiscuous mode [ 145.110272][ T8061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.135838][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 145.183138][ T8055] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.196766][ T8066] netlink: 52 bytes leftover after parsing attributes in process `syz.0.610'. [ 145.238001][ T8055] bond3 (unregistering): Released all slaves [ 145.449791][ T8072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.612'. [ 145.497294][ T8081] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 145.570520][ T8085] netlink: 948 bytes leftover after parsing attributes in process `syz.3.615'. [ 145.670766][ T8090] sctp: [Deprecated]: syz.2.618 (pid 8090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.670766][ T8090] Use struct sctp_sack_info instead [ 145.697107][ T8085] bond3 (unregistering): Released all slaves [ 145.738883][ T10] IPVS: starting estimator thread 0... [ 145.747965][ T8090] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 145.806227][ T8095] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 145.835895][ T8097] IPVS: using max 27 ests per chain, 64800 per kthread [ 145.971523][ T8102] bond4: option min_links: invalid value (18446744073709551614) [ 145.979901][ T8102] bond4: option min_links: allowed values 0 - 2147483647 [ 145.991291][ T8102] bond4 (unregistering): Released all slaves [ 146.018918][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.623'. [ 146.044603][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 146.448207][ T8142] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 146.552366][ T8151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.636'. [ 147.085641][ T8189] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 147.181932][ T8191] dvmrp0: entered allmulticast mode [ 147.209897][ T8191] ÿÿÿÿÿÿ¤lòo¾k‰÷: renamed from lo [ 147.236918][ T8191] dvmrp0: left allmulticast mode [ 147.458381][ T8212] team0: Cannot enslave team device to itself [ 147.472363][ T8212] team0: Cannot enslave team device to itself [ 147.723439][ T8218] team0 (unregistering): Port device team_slave_0 removed [ 147.753698][ T8218] team0 (unregistering): Port device team_slave_1 removed [ 147.788233][ T8235] netlink: 'syz.2.659': attribute type 1 has an invalid length. [ 147.825400][ T8221] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 147.855578][ T8221] bond2 (unregistering): Released all slaves [ 147.949728][ T8235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.976873][ T8237] bond3: (slave geneve2): making interface the new active one [ 147.987777][ T8237] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 148.045033][ T8242] dvmrp0: entered allmulticast mode [ 148.060611][ T1085] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.073423][ T1085] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.083500][ T8247] dvmrp0: left allmulticast mode [ 148.148924][ T1085] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.160347][ T1085] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.174158][ T8252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.184866][ T8256] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 148.197614][ T8256] __nla_validate_parse: 3 callbacks suppressed [ 148.197630][ T8256] netlink: 228 bytes leftover after parsing attributes in process `syz.2.664'. [ 148.292625][ T6010] syzkaller0: tun_net_xmit 76 [ 148.298124][ T6010] syzkaller0: tun_net_xmit 48 [ 148.316071][ T981] syzkaller0: tun_net_xmit 76 [ 148.326991][ T8262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.665'. [ 148.401589][ T30] audit: type=1107 audit(1765568516.247:2): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›00' [ 148.438465][ T8270] netlink: 'syz.2.666': attribute type 9 has an invalid length. [ 150.203753][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 150.223423][ T8292] Unsupported xt match [ 150.223446][ T8292] unable to load match [ 150.235400][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 150.271765][ T8291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.673'. [ 150.314900][ T8298] netlink: 'syz.2.675': attribute type 4 has an invalid length. [ 150.411520][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 150.420632][ T8306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.528344][ T8306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.778764][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 150.801197][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 150.869613][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 150.881949][ T8335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.688'. [ 151.141431][ T8357] netlink: 'syz.1.692': attribute type 3 has an invalid length. [ 151.252301][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.259571][ T8365] bridge0: port 2(bridge_slave_1) entered listening state [ 151.267121][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.274320][ T8365] bridge0: port 1(bridge_slave_0) entered listening state [ 151.290463][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.297897][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.552911][ T8380] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 151.606305][ T8378] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 152.156977][ T8416] netlink: 'syz.1.713': attribute type 11 has an invalid length. [ 152.198672][ T8420] team_slave_0: entered promiscuous mode [ 152.204636][ T8420] team_slave_1: entered promiscuous mode [ 152.249854][ T8420] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.324252][ T8427] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 152.508394][ T8440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.621717][ T8429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.693527][ T8450] netlink: 'syz.4.720': attribute type 24 has an invalid length. [ 152.732660][ T8429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.855161][ T8429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.025127][ T8429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.336490][ T8484] __nla_validate_parse: 4 callbacks suppressed [ 153.336510][ T8484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.727'. [ 153.385286][ T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.418326][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.732'. [ 153.443645][ T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.448661][ T8484] netlink: 43 bytes leftover after parsing attributes in process `syz.1.727'. [ 153.512961][ T65] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.542859][ T8484] netlink: 'syz.1.727': attribute type 6 has an invalid length. [ 153.579489][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.590481][ T8484] netlink: 'syz.1.727': attribute type 5 has an invalid length. [ 153.678328][ T8484] netlink: 43 bytes leftover after parsing attributes in process `syz.1.727'. [ 153.829377][ T8508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.737'. [ 154.042665][ T8521] x_tables: duplicate underflow at hook 3 [ 154.224799][ T8527] netlink: 'syz.2.741': attribute type 32 has an invalid length. [ 154.267150][ T8527] bridge0: port 3(ipvlan2) entered blocking state [ 154.285050][ T8527] bridge0: port 3(ipvlan2) entered disabled state [ 154.303871][ T8527] ipvlan2: entered allmulticast mode [ 154.319829][ T8527] bridge0: entered allmulticast mode [ 154.337262][ T8527] ipvlan2: left allmulticast mode [ 154.350567][ T8527] bridge0: left allmulticast mode [ 154.890164][ T8567] syzkaller1: entered promiscuous mode [ 154.914309][ T8567] syzkaller1: entered allmulticast mode [ 154.996799][ T8575] netlink: 260 bytes leftover after parsing attributes in process `syz.4.756'. [ 155.069200][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.755'. [ 155.507837][ T8608] netlink: 340 bytes leftover after parsing attributes in process `syz.1.763'. [ 155.617248][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 155.636494][ T8615] netlink: 64 bytes leftover after parsing attributes in process `syz.0.767'. [ 155.863016][ T8633] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 156.083872][ T8638] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.090435][ T8638] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 156.135519][ T8638] netlink: 'syz.1.775': attribute type 24 has an invalid length. [ 156.172019][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.179973][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.789853][ T8686] netlink: 'syz.2.790': attribute type 2 has an invalid length. [ 156.854958][ T8695] netlink: 'syz.1.792': attribute type 2 has an invalid length. [ 156.865296][ T8683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.880453][ T8682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.904560][ T8695] 9: entered promiscuous mode [ 157.053583][ T8702] Cannot find set identified by id 65534 to match [ 157.205873][ T8711] syzkaller0: entered promiscuous mode [ 157.215203][ T8711] syzkaller0: entered allmulticast mode [ 157.604794][ T8738] syzkaller0: entered promiscuous mode [ 157.610505][ T8738] syzkaller0: entered allmulticast mode [ 158.057615][ T8765] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 158.071898][ T8769] syzkaller0: entered promiscuous mode [ 158.122657][ T8769] syzkaller0: entered allmulticast mode [ 158.403093][ T8789] __nla_validate_parse: 7 callbacks suppressed [ 158.403114][ T8789] netlink: 40 bytes leftover after parsing attributes in process `syz.4.822'. [ 158.794071][ T8813] netlink: 'syz.0.830': attribute type 3 has an invalid length. [ 158.825860][ T8813] netlink: 666 bytes leftover after parsing attributes in process `syz.0.830'. [ 158.954564][ T8819] tipc: Started in network mode [ 158.963457][ T8819] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 158.974378][ T8819] tipc: Enabled bearer , priority 10 [ 158.984288][ T8821] netlink: 'syz.0.835': attribute type 17 has an invalid length. [ 158.995231][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 159.005873][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.835'. [ 159.182218][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.838'. [ 159.269834][ T8838] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 159.285903][ T8838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.317592][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 159.318465][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 159.953236][ T8894] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 159.962167][ T24] IPVS: starting estimator thread 0... [ 159.978243][ T8897] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 160.066504][ T8896] IPVS: using max 26 ests per chain, 62400 per kthread [ 160.085823][ T981] tipc: Node number set to 1 [ 160.351775][ T8919] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 160.366121][ T8923] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 160.429967][ T8919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.568764][ T8939] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 160.638571][ T8939] team0: No ports can be present during mode change [ 160.649403][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.872'. [ 160.827875][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 160.852738][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 161.024060][ T8964] netlink: 'syz.1.880': attribute type 4 has an invalid length. [ 161.172045][ T8980] bond3: Removing last arp target with arp_interval on [ 161.329354][ T8992] netlink: 'syz.1.890': attribute type 2 has an invalid length. [ 161.340539][ T8986] syz.0.886 (8986) used greatest stack depth: 17656 bytes left [ 161.552584][ T9001] syzkaller0: entered promiscuous mode [ 161.558812][ T9001] syzkaller0: entered allmulticast mode [ 161.661662][ T9009] xt_hashlimit: invalid interval [ 161.674314][ T9010] xt_hashlimit: invalid interval [ 162.085772][ T9024] netlink: 'syz.2.900': attribute type 29 has an invalid length. [ 162.201854][ T9026] bridge_slave_0: left allmulticast mode [ 162.210240][ T9026] bridge_slave_0: left promiscuous mode [ 162.216605][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.236641][ T9026] bridge_slave_1: left allmulticast mode [ 162.242434][ T9026] bridge_slave_1: left promiscuous mode [ 162.248925][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.271668][ T9026] bond0: (slave bond_slave_0): Releasing backup interface [ 162.294641][ T9026] bond0: (slave bond_slave_1): Releasing backup interface [ 162.313543][ T9026] team0: Port device team_slave_0 removed [ 162.330530][ T9026] team0: Port device team_slave_1 removed [ 162.340977][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.353468][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.369430][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.381193][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.397917][ T9026] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.422849][ T9025] netlink: 'syz.2.900': attribute type 29 has an invalid length. [ 162.594336][ T9043] delete_channel: no stack [ 162.688797][ T9053] wg1 speed is unknown, defaulting to 1000 [ 162.711959][ T9053] wg1 speed is unknown, defaulting to 1000 [ 162.723456][ T9053] wg1 speed is unknown, defaulting to 1000 [ 162.770812][ T9053] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 162.849282][ T9053] wg1 speed is unknown, defaulting to 1000 [ 162.869511][ T9053] wg1 speed is unknown, defaulting to 1000 [ 162.890727][ T9053] wg1 speed is unknown, defaulting to 1000 [ 162.900096][ T9053] wg1 speed is unknown, defaulting to 1000 [ 162.908653][ T9053] wg1 speed is unknown, defaulting to 1000 [ 163.639684][ T9109] netlink: 'syz.4.930': attribute type 10 has an invalid length. [ 163.647744][ T9109] __nla_validate_parse: 8 callbacks suppressed [ 163.647764][ T9109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.930'. [ 163.712888][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.931'. [ 163.753764][ T9109] netlink: 68 bytes leftover after parsing attributes in process `syz.4.930'. [ 163.776028][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.930'. [ 164.334994][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 164.334998][ T9151] netlink: 72 bytes leftover after parsing attributes in process `syz.0.942'. [ 164.370443][ T9152] veth0_macvtap: left promiscuous mode [ 164.411053][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 164.632540][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 164.968015][ T9188] tipc: Enabled bearer , priority 0 [ 164.998930][ T9189] syzkaller0: entered allmulticast mode [ 165.064460][ T9189] tipc: Resetting bearer [ 165.118941][ T9189] tipc: Disabling bearer [ 165.140888][ T9200] netlink: 32 bytes leftover after parsing attributes in process `syz.4.958'. [ 165.152473][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.961'. [ 165.478340][ T9223] bridge4: port 1(veth7) entered blocking state [ 165.486098][ T9223] bridge4: port 1(veth7) entered disabled state [ 165.502115][ T9223] veth7: entered allmulticast mode [ 165.510991][ T9223] veth7: entered promiscuous mode [ 165.590059][ T9233] bridge4: port 2(veth0_to_bond) entered blocking state [ 165.620020][ T9233] bridge4: port 2(veth0_to_bond) entered disabled state [ 165.635528][ T9233] veth0_to_bond: entered allmulticast mode [ 165.644041][ T9242] raw_sendmsg: syz.3.972 forgot to set AF_INET. Fix it! [ 165.658732][ T9233] veth0_to_bond: entered promiscuous mode [ 166.062438][ T5843] block nbd0: Receive control failed (result -32) [ 166.102942][ T9263] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 166.211597][ T9265] macvlan4: entered promiscuous mode [ 166.225812][ T9265] macvlan4: entered allmulticast mode [ 166.241545][ T9265] bond5: entered promiscuous mode [ 166.257446][ T9265] bridge2: entered promiscuous mode [ 166.278340][ T9265] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 166.300279][ T9265] bond5: left promiscuous mode [ 166.305136][ T9265] bridge2: left promiscuous mode [ 166.365128][ T9278] syzkaller1: entered allmulticast mode [ 167.324313][ T9341] syzkaller0: entered promiscuous mode [ 167.342592][ T9341] syzkaller0: entered allmulticast mode [ 167.843152][ T9377] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 167.867326][ T9377] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 167.968824][ T9377] netlink: 'syz.1.1009': attribute type 2 has an invalid length. [ 168.159694][ T9400] nbd: must specify at least one socket [ 168.641033][ T9428] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 168.676194][ T9436] __nla_validate_parse: 13 callbacks suppressed [ 168.676213][ T9436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1024'. [ 168.705055][ T9428] bond4: entered promiscuous mode [ 168.710672][ T9428] bond4: entered allmulticast mode [ 168.716925][ T9428] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.730133][ T9436] netlink: 'syz.1.1024': attribute type 1 has an invalid length. [ 168.740416][ T9436] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1024'. [ 168.998641][ T9461] netlink: 294 bytes leftover after parsing attributes in process `syz.3.1034'. [ 168.999281][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 169.009116][ T9461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.034367][ T9456] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.304096][ T9480] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20002 [ 169.345564][ T9484] Bluetooth: MGMT ver 1.23 [ 169.393471][ T9491] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.499912][ T9501] veth0: entered promiscuous mode [ 169.522779][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1045'. [ 169.560212][ T9496] veth0: left promiscuous mode [ 169.601747][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 169.693260][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 169.717268][ T9513] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 169.772402][ T9516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1049'. [ 170.215891][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 170.252865][ T9543] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 170.602079][ T9569] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1069'. [ 170.850344][ T9590] sctp: [Deprecated]: syz.1.1075 (pid 9590) Use of int in max_burst socket option deprecated. [ 170.850344][ T9590] Use struct sctp_assoc_value instead [ 170.868999][ T9589] ip6gre1: entered allmulticast mode [ 170.992468][ T9596] netlink: 'syz.4.1079': attribute type 1 has an invalid length. [ 171.057011][ T9596] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.097786][ T9600] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.122664][ T9600] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 171.145448][ T9600] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 171.368441][ T9596] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 171.605057][ T9624] ip6gre0: Caught tx_queue_len zero misconfig [ 171.763263][ T9630] batman_adv: batadv0: Adding interface: dummy0 [ 171.782401][ T9630] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.811726][ T9630] batman_adv: batadv0: Interface activated: dummy0 [ 171.833433][ T9635] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 171.897531][ T9639] batadv0: mtu less than device minimum [ 171.908926][ T9639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.921283][ T9639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.933242][ T9639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.945177][ T9639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.957163][ T9639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.969310][ T9639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.981341][ T9639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.273147][ T9664] xt_hashlimit: max too large, truncated to 1048576 [ 172.546514][ T9681] netlink: 'syz.1.1101': attribute type 11 has an invalid length. [ 172.582277][ T9681] netlink: 'syz.1.1101': attribute type 4 has an invalid length. [ 172.606012][ T9681] netlink: 'syz.1.1101': attribute type 5 has an invalid length. [ 172.618094][ T9681] netlink: 'syz.1.1101': attribute type 6 has an invalid length. [ 172.754953][ T9691] netlink: 'syz.4.1105': attribute type 1 has an invalid length. [ 172.768552][ T9691] netlink: 'syz.4.1105': attribute type 1 has an invalid length. [ 172.903323][ T9691] bridge6: entered promiscuous mode [ 172.934078][ T9691] bridge6: entered allmulticast mode [ 173.176130][ T9714] validate_nla: 2 callbacks suppressed [ 173.176152][ T9714] netlink: 'syz.4.1114': attribute type 3 has an invalid length. [ 173.238220][ T9714] netlink: 'syz.4.1114': attribute type 2 has an invalid length. [ 173.437346][ T9723] syzkaller0: entered promiscuous mode [ 173.443163][ T9723] syzkaller0: entered allmulticast mode [ 173.463500][ T9722] tipc: Enabled bearer , priority 0 [ 173.544914][ T9722] tipc: Resetting bearer [ 173.586083][ T9722] tipc: Disabling bearer [ 174.678916][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.707023][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.889787][ T9759] macvlan0: left promiscuous mode [ 175.096803][ T9759] gretap1: left promiscuous mode [ 175.101906][ T9759] gretap1: left allmulticast mode [ 175.136174][ T9759] bond0: left promiscuous mode [ 175.141243][ T9759] bond0: left allmulticast mode [ 175.236945][ T9759] bond2: left promiscuous mode [ 175.241952][ T9759] bridge3: left promiscuous mode [ 175.285349][ T9759] bridge6: left promiscuous mode [ 175.296043][ T9759] bridge6: left allmulticast mode [ 175.317289][ T9773] lo: entered promiscuous mode [ 175.336348][ T9773] tunl0: entered promiscuous mode [ 175.341921][ T9773] gre0: entered promiscuous mode [ 175.361266][ T9773] gretap0: entered promiscuous mode [ 175.367164][ T9773] erspan0: entered promiscuous mode [ 175.372864][ T9773] ip_vti0: entered promiscuous mode [ 175.461783][ T2924] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.471155][ T5847] wg1 speed is unknown, defaulting to 1000 [ 175.487414][ T5847] syz2: Port: 1 Link DOWN [ 175.494412][ T2924] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 175.521000][ T2924] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.555155][ T2924] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 175.627666][ T6045] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.642747][ T6045] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 175.659007][ T5843] block nbd1: Receive control failed (result -32) [ 175.670493][ T6045] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.683146][ T6045] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 175.793270][ T9818] __nla_validate_parse: 17 callbacks suppressed [ 175.793294][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 175.812597][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 175.829047][ T9818] xfrm1: entered promiscuous mode [ 175.834152][ T9818] xfrm1: entered allmulticast mode [ 175.841379][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 175.958703][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 176.024667][ T9829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1143'. [ 176.168163][ T9832] team0 (unregistering): Port device team_slave_0 removed [ 176.180002][ T9832] team0 (unregistering): Port device team_slave_1 removed [ 176.228680][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'. [ 176.368340][ T9850] nbd: illegal input index 2958377 [ 176.483064][ T9857] netlink: 'syz.3.1151': attribute type 13 has an invalid length. [ 176.517843][ T9857] gretap0: refused to change device tx_queue_len [ 176.524257][ T9857] net_ratelimit: 13 callbacks suppressed [ 176.524275][ T9857] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 176.773935][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 176.881166][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'. [ 176.899750][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1157'. [ 176.976233][ T9871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 177.032227][ T9856] wg1 speed is unknown, defaulting to 1000 [ 177.627139][ T9904] netlink: 'syz.4.1166': attribute type 83 has an invalid length. [ 177.718470][ T9875] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.726007][ T9875] bridge0: port 2(bridge_slave_1) entered listening state [ 177.733473][ T9875] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.740713][ T9875] bridge0: port 1(bridge_slave_0) entered listening state [ 177.752882][ T9875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.762558][ T9875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.513022][ T9957] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 178.624111][ T9945] macvlan2: entered promiscuous mode [ 178.629938][ T9945] macvlan2: entered allmulticast mode [ 178.637193][ T9945] bond5: entered promiscuous mode [ 178.645766][ T9945] bridge7: entered promiscuous mode [ 178.662203][ T9945] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.676533][ T9945] bond5: left promiscuous mode [ 178.690502][ T9945] bridge7: left promiscuous mode [ 178.902512][ T9977] 8021q: VLANs not supported on ip6_vti0 [ 178.954003][ T9984] º: renamed from veth1_vlan (while UP) [ 179.076848][ T9987] netlink: 'syz.0.1192': attribute type 14 has an invalid length. [ 179.162137][ T9993] syzkaller0: entered promiscuous mode [ 179.200763][ T9993] syzkaller0: entered allmulticast mode [ 179.618392][ T10] IPVS: starting estimator thread 0... [ 179.624290][T10014] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 179.638045][T10016] netlink: 'syz.1.1200': attribute type 21 has an invalid length. [ 179.668847][T10020] trusted_key: syz.2.1201 sent an empty control message without MSG_MORE. [ 179.690959][T10020] xt_cgroup: path and classid specified [ 179.715834][T10017] IPVS: using max 28 ests per chain, 67200 per kthread [ 179.757288][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 179.765631][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 180.073070][T10037] x_tables: duplicate entry at hook 2 [ 180.107570][T10040] 8021q: VLANs not supported on xfrm0 [ 180.517673][T10056] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 180.650756][T10064] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 180.959301][T10085] __nla_validate_parse: 13 callbacks suppressed [ 180.959322][T10085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1222'. [ 180.979258][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 180.985398][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 181.003100][T10085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1222'. [ 181.056394][T10089] netlink: 'syz.2.1223': attribute type 12 has an invalid length. [ 181.159238][T10089] bond6: option primary_reselect: invalid value (255) [ 181.173251][T10089] bond6 (unregistering): Released all slaves [ 181.312712][T10110] veth1_macvtap: left promiscuous mode [ 181.328304][T10110] macsec0: entered promiscuous mode [ 181.333577][T10110] macsec0: entered allmulticast mode [ 181.414717][T10115] syz_tun: entered allmulticast mode [ 181.445453][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'. [ 181.595333][T10127] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 181.649264][T10130] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1236'. [ 181.764876][T10133] bond6: (slave ip6gretap1): making interface the new active one [ 181.775291][T10133] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 181.835881][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.843294][ C0] bridge0: topology change detected, propagating [ 181.850107][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.857420][ C0] bridge0: topology change detected, propagating [ 181.886573][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1238'. [ 181.982712][T10153] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 182.175077][T10164] bond0: Device is already in use. [ 182.272976][T10169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1249'. [ 182.273091][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 182.449832][T10184] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 182.559572][T10193] xt_hashlimit: max too large, truncated to 1048576 [ 182.844167][T10205] sctp: [Deprecated]: syz.0.1261 (pid 10205) Use of int in maxseg socket option. [ 182.844167][T10205] Use struct sctp_assoc_value instead [ 182.873212][T10205] sctp: [Deprecated]: syz.0.1261 (pid 10205) Use of int in maxseg socket option. [ 182.873212][T10205] Use struct sctp_assoc_value instead [ 182.891988][T10205] sctp: [Deprecated]: syz.0.1261 (pid 10205) Use of int in maxseg socket option. [ 182.891988][T10205] Use struct sctp_assoc_value instead [ 182.911116][T10205] sctp: [Deprecated]: syz.0.1261 (pid 10205) Use of int in maxseg socket option. [ 182.911116][T10205] Use struct sctp_assoc_value instead [ 183.060553][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 183.132200][T10227] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 183.149191][T10227] netlink: 'syz.1.1268': attribute type 11 has an invalid length. [ 183.586874][T10257] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 183.799365][T10255] vlan2: left promiscuous mode [ 183.804291][T10255] bridge0: left promiscuous mode [ 183.811734][T10255] bond2: left promiscuous mode [ 183.819065][T10255] geneve2: left promiscuous mode [ 183.824337][T10255] geneve2: left allmulticast mode [ 183.843804][T10269] netlink: 'syz.0.1280': attribute type 13 has an invalid length. [ 183.868795][T10255] bond4: left promiscuous mode [ 183.873708][T10255] bond4: left allmulticast mode [ 183.881581][T10255] ip6gre1: left allmulticast mode [ 184.033081][T10277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.406897][ T6010] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.417543][ T6010] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.464364][T10283] pimreg: entered allmulticast mode [ 184.472908][ T6010] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.494206][ T6010] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.832180][T10306] syzkaller0: entered promiscuous mode [ 184.838098][T10306] syzkaller0: entered allmulticast mode [ 184.859784][T10276] pimreg: left allmulticast mode [ 184.869878][T10320] netlink: 'syz.4.1290': attribute type 21 has an invalid length. [ 184.890870][T10306] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.029726][T10320] bond6: (slave ip_vti0): Device is not bonding slave [ 185.037401][T10320] bond6: option active_slave: invalid value (ip_vti0) [ 185.047921][T10320] bond6 (unregistering): Released all slaves [ 185.094464][T10327] team0: Mode changed to "activebackup" [ 185.220119][T10336] xt_bpf: check failed: parse error [ 185.796050][T10388] netlink: 'syz.1.1307': attribute type 29 has an invalid length. [ 185.820864][T10386] Cannot find add_set index 65532 as target [ 186.033875][T10402] nft_compat: unsupported protocol 0 [ 186.073129][T10405] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 186.141076][T10410] __nla_validate_parse: 9 callbacks suppressed [ 186.141096][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 186.749509][T10447] netlink: 'syz.3.1326': attribute type 11 has an invalid length. [ 186.785873][T10447] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1326'. [ 186.852099][T10454] pim6reg: entered allmulticast mode [ 186.865401][T10454] pim6reg: left allmulticast mode [ 186.918076][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 186.927965][T10461] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1332'. [ 187.336558][T10478] bond4: entered promiscuous mode [ 187.337963][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 187.341757][T10478] bond4: entered allmulticast mode [ 187.361089][T10478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.388291][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 187.397470][T10487] netlink: 'syz.3.1339': attribute type 30 has an invalid length. [ 187.430935][T10491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.440022][ T3512] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.482640][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 187.496837][ T3512] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.512984][ T65] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.523586][ T65] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.591871][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 187.711717][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1346'. [ 187.733633][ T65] tipc: Subscription rejected, illegal request [ 187.848753][T10512] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1348'. [ 187.880607][T10514] netlink: 'syz.2.1349': attribute type 1 has an invalid length. [ 187.895201][T10514] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 190.738773][ T30] audit: type=1804 audit(1765568558.587:3): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1376" name="/newroot/268/cgroup.controllers" dev="tmpfs" ino=1379 res=1 errno=0 [ 190.770767][ T30] audit: type=1800 audit(1765568558.587:4): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1376" name="cgroup.controllers" dev="tmpfs" ino=1379 res=0 errno=0 [ 191.337175][T10614] __nla_validate_parse: 4 callbacks suppressed [ 191.337197][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 191.426453][T10632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1384'. [ 191.459006][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 191.593786][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1385'. [ 191.609638][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1385'. [ 191.849918][T10652] netlink: 'syz.1.1392': attribute type 3 has an invalid length. [ 192.041623][T10664] xt_connbytes: Forcing CT accounting to be enabled [ 192.158507][T10674] x_tables: unsorted entry at hook 1 [ 192.348672][T10686] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1404'. [ 192.368961][T10686] unsupported nla_type 35618 [ 192.414296][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 192.423862][T10690] openvswitch: netlink: Flow actions attr not present in new flow. [ 192.599981][T10700] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 192.725215][T10702] netlink: 'syz.4.1409': attribute type 13 has an invalid length. [ 192.759585][T10700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.785790][T10707] bond5: (slave geneve3): making interface the new active one [ 192.794885][T10707] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 192.923896][ T1111] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.949669][ T1111] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.970431][T10714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1412'. [ 193.026110][ T1111] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.050094][ T1111] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.194357][T10734] netlink: 'syz.3.1419': attribute type 9 has an invalid length. [ 193.203339][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'. [ 193.213927][T10734] netlink: 'syz.3.1419': attribute type 11 has an invalid length. [ 193.225396][T10734] netlink: 'syz.3.1419': attribute type 12 has an invalid length. [ 193.298079][T10735] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1419'. [ 193.533439][T10754] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 193.625049][T10758] netlink: 'syz.2.1427': attribute type 8 has an invalid length. [ 193.744564][T10768] sctp: [Deprecated]: syz.4.1430 (pid 10768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.744564][T10768] Use struct sctp_sack_info instead [ 195.996122][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 199.680503][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.687260][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.995986][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 212.002337][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 212.002365][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 212.002400][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 218.157632][T10797] netlink: 'syz.1.1439': attribute type 12 has an invalid length. [ 218.175893][T10797] netlink: 'syz.1.1439': attribute type 29 has an invalid length. [ 218.198295][T10797] __nla_validate_parse: 4 callbacks suppressed [ 218.198316][T10797] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1439'. [ 218.521667][T10824] bond6: option miimon: invalid value (18446744073709551585) [ 218.530955][T10824] bond6: option miimon: allowed values 0 - 2147483647 [ 218.542144][T10824] bond6 (unregistering): Released all slaves [ 218.648311][T10827] netlink: 'syz.4.1449': attribute type 8 has an invalid length. [ 218.772397][T10852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1456'. [ 218.938102][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 218.976896][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'. [ 219.011073][ T6010] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 219.023938][T10872] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 219.200263][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 219.326798][T10884] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.437554][T10890] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 219.489201][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.570439][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.606502][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.711430][T10915] siw: device registration error -23 [ 219.733397][T10915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1474'. [ 219.847453][T10928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.288544][T10947] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 220.297047][T10947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.501802][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 220.824274][T10971] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20004 [ 220.838057][T10971] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20003 [ 220.898581][T10979] netlink: 'syz.1.1492': attribute type 22 has an invalid length. [ 220.925820][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 220.938241][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'. [ 221.049323][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'. [ 221.050898][T10979] netlink: 'syz.1.1492': attribute type 22 has an invalid length. [ 221.142115][ T5841] block nbd2: Receive control failed (result -1) [ 221.392397][T10893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.607596][T10893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.808346][T10893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.211308][T11014] lo: left promiscuous mode [ 223.217088][T11014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.334958][T11029] __nla_validate_parse: 5 callbacks suppressed [ 223.334979][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'. [ 223.398100][T11032] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1509'. [ 223.444198][T11032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1509'. [ 223.466961][ T3487] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.476103][ T3487] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.564682][ T6218] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.597133][T11044] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1512'. [ 223.607951][ T6218] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.712209][T11047] wg1 speed is unknown, defaulting to 1000 [ 223.838742][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 223.849209][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 223.897872][T11064] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1518'. [ 223.901673][T11063] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1517'. [ 224.335287][T11086] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 224.354072][T11084] tipc: New replicast peer: 255.255.255.255 [ 224.387312][T11084] tipc: Enabled bearer , priority 10 [ 224.403842][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 224.500899][T11086] macvlan2: entered promiscuous mode [ 224.529341][T11086] macvlan2: entered allmulticast mode [ 224.565325][T11086] bond7: entered promiscuous mode [ 224.596979][T11086] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.614483][T11086] bond7: left promiscuous mode [ 224.850346][T11109] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1534'. [ 225.079346][T11115] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 225.300003][T11120] bond6: invalid ARP target 0.0.0.0 specified for addition [ 225.333150][T11120] bond6: option arp_ip_target: invalid value (0) [ 225.364450][T11120] bond6 (unregistering): Released all slaves [ 225.458252][T11143] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 225.470954][T11143] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 225.853241][T11166] syzkaller1: entered promiscuous mode [ 225.866616][T11166] syzkaller1: entered allmulticast mode [ 225.945615][T11174] xt_TCPMSS: Only works on TCP SYN packets [ 226.736688][T11218] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 226.951477][T11232] netlink: 'syz.4.1576': attribute type 1 has an invalid length. [ 227.019757][T11232] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.093381][T11232] veth3: entered promiscuous mode [ 227.649067][ T30] audit: type=1107 audit(1765568595.497:5): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 227.658596][T11270] nft_compat: unsupported protocol 0 [ 227.857017][T11279] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 227.864970][T11279] netlink: 'syz.2.1592': attribute type 4 has an invalid length. [ 228.088967][T11295] netlink: 'syz.2.1597': attribute type 21 has an invalid length. [ 228.097204][T11295] netlink: 'syz.2.1597': attribute type 5 has an invalid length. [ 228.108560][T11295] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 228.203906][T11295] bond7 (unregistering): Released all slaves [ 228.384393][T11309] ip6tnl2: entered promiscuous mode [ 228.404981][T11309] ip6tnl2: entered allmulticast mode [ 228.427060][T11317] __nla_validate_parse: 18 callbacks suppressed [ 228.427075][T11317] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1602'. [ 228.484596][T11319] netlink: 'syz.1.1604': attribute type 63 has an invalid length. [ 228.495022][T11319] netlink: 'syz.1.1604': attribute type 63 has an invalid length. [ 228.531233][T11321] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1605'. [ 228.729533][T11335] bond0: Caught tx_queue_len zero misconfig [ 228.847547][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 228.939543][T11350] sctp: [Deprecated]: syz.3.1616 (pid 11350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.939543][T11350] Use struct sctp_sack_info instead [ 228.973170][T11353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1614'. [ 228.997326][T11350] sctp: [Deprecated]: syz.3.1616 (pid 11350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.997326][T11350] Use struct sctp_sack_info instead [ 229.140687][T11350] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.204656][T11350] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.215088][T11350] bond6: (slave macvlan2): Enslaving as a backup interface with a down link [ 229.229377][T11365] macvlan0: entered promiscuous mode [ 229.366015][T11374] macvlan0: left promiscuous mode [ 229.468071][T11384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1625'. [ 229.802041][T11401] tipc: Enabling of bearer rejected, already enabled [ 229.832537][T11405] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.838998][T11405] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.842308][T11406] atomic_op ffff888023633998 conn xmit_atomic 0000000000000000 [ 230.143208][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 230.162708][T11428] validate_nla: 1 callbacks suppressed [ 230.162729][T11428] netlink: 'syz.1.1638': attribute type 30 has an invalid length. [ 230.192885][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 230.199986][T11433] IPVS: set_ctl: invalid protocol: 98 172.20.20.46:20003 [ 230.233136][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 230.472665][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 230.521861][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1646'. [ 230.822633][T11474] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 230.835251][T11474] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 231.150552][T11497] batman_adv: batadv0: Adding interface: dummy0 [ 231.162302][T11497] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.206553][T11497] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 231.272195][T11502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.414403][T11586] netlink: 'syz.2.1688': attribute type 1 has an invalid length. [ 232.436021][T11586] netlink: 'syz.2.1688': attribute type 2 has an invalid length. [ 232.441498][T11589] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.478990][T11592] netlink: 'syz.2.1688': attribute type 1 has an invalid length. [ 232.502065][T11592] netlink: 'syz.2.1688': attribute type 2 has an invalid length. [ 232.546927][T11589] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.619146][T11589] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.692577][T11589] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.833044][ T6218] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.883868][ T6218] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.908042][ T6218] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.944572][ T6218] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.132585][T11623] nbd: illegal input index -8454144 [ 233.168761][T11626] xt_TCPMSS: Only works on TCP SYN packets [ 233.218485][T11616] bridge4: entered promiscuous mode [ 233.224229][T11616] bridge4: entered allmulticast mode [ 233.929151][T11667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.219860][T11673] __nla_validate_parse: 11 callbacks suppressed [ 234.219883][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 234.236755][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 234.558270][T11700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1720'. [ 234.760051][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1723'. [ 234.856971][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1726'. [ 235.038344][T11733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1731'. [ 235.063697][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1731'. [ 235.100231][T11742] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1731'. [ 235.750250][T11776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1743'. [ 236.160435][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 236.361772][T11811] netlink: 'syz.1.1753': attribute type 8 has an invalid length. [ 236.374557][T11808] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 236.393222][T11808] bond7 (unregistering): Released all slaves [ 236.641104][T11830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1760'. [ 236.841481][T11848] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20000 [ 236.851573][T11848] IPVS: set_ctl: invalid protocol: 115 172.30.1.2:20001 [ 237.304976][T11879] geneve2: entered promiscuous mode [ 237.323281][T11879] geneve2: entered allmulticast mode [ 237.495998][T11896] bridge_slave_0: left allmulticast mode [ 237.501818][T11896] bridge_slave_0: left promiscuous mode [ 237.508074][T11896] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.526337][T11896] bridge_slave_1: left allmulticast mode [ 237.532997][T11896] bridge_slave_1: left promiscuous mode [ 237.539298][T11896] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.558783][T11896] team0: Port device team_slave_0 removed [ 237.600018][T11896] team0: Port device team_slave_1 removed [ 237.625485][T11896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.647545][T11896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.679614][T11896] team0: Port device geneve0 removed [ 237.691587][T11896] bond2: (slave bridge3): Releasing backup interface [ 237.705082][T11896] bond5: (slave bridge7): Releasing backup interface [ 237.748832][T11896] bond6: (slave geneve3): Releasing backup interface [ 237.780797][T11897] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 237.792130][T11897] bond7 (unregistering): Released all slaves [ 237.818252][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.864664][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.953712][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.045500][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.416243][T11953] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 238.762127][T11966] openvswitch: netlink: Flow key attr not present in new flow. [ 238.801824][T11943] macvlan0: entered allmulticast mode [ 238.924271][T11981] netlink: 'syz.1.1806': attribute type 9 has an invalid length. [ 238.935833][T11984] Bluetooth: MGMT ver 1.23 [ 238.949161][T11982] SET target dimension over the limit! [ 239.466845][T12010] sock: sock_set_timeout: `syz.2.1813' (pid 12010) tries to set negative timeout [ 239.483040][T12013] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 239.493327][T12010] __nla_validate_parse: 6 callbacks suppressed [ 239.493345][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 239.561906][T12016] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1815'. [ 239.642987][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 239.660546][T12023] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1818'. [ 239.773202][T12027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1822'. [ 239.805959][T12025] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1819'. [ 239.847225][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 239.889713][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'. [ 239.899979][T12029] policy can only be matched on NF_INET_PRE_ROUTING [ 239.900001][T12029] unable to load match [ 240.115385][T12046] netlink: 'syz.3.1826': attribute type 29 has an invalid length. [ 240.133167][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'. [ 240.663301][T12088] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1837'. [ 240.956400][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 240.962697][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 241.091507][T12116] netlink: 'syz.0.1847': attribute type 30 has an invalid length. [ 241.974590][T12162] syzkaller1: entered promiscuous mode [ 241.988481][T12162] syzkaller1: entered allmulticast mode [ 242.582560][T12203] gre0: left promiscuous mode [ 243.028618][T12233] netlink: 'syz.1.1881': attribute type 1 has an invalid length. [ 243.278450][T12241] bond5: (slave geneve3): making interface the new active one [ 243.308169][T12241] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 243.322014][T12255] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 243.343722][ T1111] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 243.395453][ T1111] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 243.433055][ T1111] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 243.474903][ T1111] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 243.924922][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589b1800: rx timeout, send abort [ 244.060127][T12297] tc_dump_action: action bad kind [ 244.182564][T12310] xt_bpf: check failed: parse error [ 244.426100][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589b1000: rx timeout, send abort [ 244.434640][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589b1800: abort rx timeout. Force session deactivation [ 244.752745][T12338] lo: entered promiscuous mode [ 244.762299][T12338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.934582][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589b1000: abort rx timeout. Force session deactivation [ 245.098511][T12360] tunl0: entered promiscuous mode [ 245.112852][T12360] netlink: 'syz.1.1916': attribute type 3 has an invalid length. [ 245.152922][T12360] __nla_validate_parse: 11 callbacks suppressed [ 245.152942][T12360] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1916'. [ 245.194149][T12364] ip6t_srh: unknown srh invflags 4000 [ 245.281899][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 245.291364][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 245.321603][T12375] bridge0: port 3(vlan3) entered blocking state [ 245.346924][T12375] bridge0: port 3(vlan3) entered disabled state [ 245.379494][T12375] vlan3: entered allmulticast mode [ 245.396295][T12375] bridge0: entered allmulticast mode [ 245.442598][T12375] vlan3: left allmulticast mode [ 245.447768][T12375] bridge0: left allmulticast mode [ 245.582035][T12387] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 245.653607][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 245.691049][T12387] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.746915][T12391] syzkaller0: entered allmulticast mode [ 245.897970][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 245.979280][T12412] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1929'. [ 246.188711][T12426] syz.1.1935 uses old SIOCAX25GETINFO [ 246.412992][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 247.021609][T12471] syzkaller0: entered promiscuous mode [ 247.027646][T12471] syzkaller0: entered allmulticast mode [ 247.037862][T12474] xt_cgroup: xt_cgroup: no path or classid specified [ 247.108151][T12479] netlink: 'syz.0.1951': attribute type 1 has an invalid length. [ 247.155467][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1953'. [ 247.190560][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 247.431913][T12479] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.619276][T12497] sock: sock_set_timeout: `syz.2.1956' (pid 12497) tries to set negative timeout [ 247.700045][T12502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1959'. [ 247.772311][T12506] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 247.782384][T12504] gretap1: entered promiscuous mode [ 247.826412][T12504] gretap1: entered allmulticast mode [ 247.986542][T12517] netlink: 'syz.2.1963': attribute type 21 has an invalid length. [ 248.012275][T12517] netlink: 'syz.2.1963': attribute type 1 has an invalid length. [ 248.050451][T12526] netlink: 'syz.1.1967': attribute type 63 has an invalid length. [ 248.176922][T12533] netlink: 'syz.1.1969': attribute type 7 has an invalid length. [ 248.208335][T12533] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 248.220150][T12534] netlink: 'syz.4.1968': attribute type 83 has an invalid length. [ 248.491985][T12559] tipc: Enabled bearer , priority 0 [ 248.627485][T12568] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 248.919479][T12584] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.933118][T12584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.978794][T12585] netlink: 'syz.2.1983': attribute type 12 has an invalid length. [ 249.025409][T12590] ip6gre1: entered allmulticast mode [ 249.298276][T12612] netlink: 'syz.0.1986': attribute type 5 has an invalid length. [ 249.381157][T12617] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.513991][T12625] netlink: 'syz.3.1990': attribute type 8 has an invalid length. [ 249.559065][T12605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.601232][T12605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.623329][T12605] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 249.649486][T12605] bond0 (unregistering): Released all slaves [ 249.687347][T12617] tc_dump_action: action bad kind [ 249.715058][T12625] bond0: entered promiscuous mode [ 249.721889][T12625] bond0: left promiscuous mode [ 249.735080][ T9796] tipc: Node number set to 2864426554 [ 250.019264][T12644] netlink: 'syz.2.2001': attribute type 11 has an invalid length. [ 250.047862][T12645] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 250.086222][ T9796] IPVS: starting estimator thread 0... [ 250.086648][T12645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.101534][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 250.109363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.119646][T12649] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 250.179681][T12647] IPVS: using max 36 ests per chain, 86400 per kthread [ 250.189023][T12645] __nla_validate_parse: 25 callbacks suppressed [ 250.189175][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2000'. [ 250.262631][T12660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.273768][T12660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.293341][T12660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.313443][T12660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.317357][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 250.331349][T12660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.349512][T12660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.582298][T12679] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2010'. [ 250.620802][T12679] ksmbd: Unknown IPC event: 3, ignore. [ 250.914522][T12706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2021'. [ 250.926459][T12696] nbd3: detected capacity change from 0 to 127 [ 250.929518][T12703] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.942533][T12700] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 250.951667][ T5843] block nbd3: Receive control failed (result -32) [ 251.091977][T12715] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2023'. [ 251.106516][T12716] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2023'. [ 251.286537][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'. [ 251.331668][T12733] 8021q: VLANs not supported on ip_vti0 [ 251.439475][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 252.334653][T12773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.405555][T12778] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2040'. [ 252.808831][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 252.880089][T12812] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 252.890292][T12813] netlink: 'syz.3.2046': attribute type 83 has an invalid length. [ 253.183029][T12828] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 253.462281][T12856] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 253.711384][T12875] netlink: 'syz.1.2069': attribute type 11 has an invalid length. [ 253.731768][T12876] netlink: 'syz.1.2069': attribute type 11 has an invalid length. [ 254.112424][T12905] netlink: 'syz.0.2074': attribute type 1 has an invalid length. [ 254.134903][T12905] netlink: 'syz.0.2074': attribute type 1 has an invalid length. [ 254.243201][T12915] tipc: Enabling of bearer rejected, already enabled [ 254.489767][T12931] netlink: 'syz.0.2083': attribute type 6 has an invalid length. [ 254.497757][T12931] netlink: 'syz.0.2083': attribute type 5 has an invalid length. [ 254.696679][T12943] netlink: 'syz.1.2085': attribute type 83 has an invalid length. [ 254.710929][T12939] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 254.787501][T12939] bond10 (unregistering): Released all slaves [ 255.156629][T12970] tipc: Enabled bearer , priority 0 [ 255.205209][T12969] tipc: Disabling bearer [ 255.522388][T12997] __nla_validate_parse: 13 callbacks suppressed [ 255.522410][T12997] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2102'. [ 255.656952][T13005] netlink: 'syz.0.2105': attribute type 4 has an invalid length. [ 255.669718][T13005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2105'. [ 255.841915][T13017] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 255.968719][T13027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2112'. [ 255.988507][T13027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2112'. [ 256.208864][T13047] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 256.222322][T13039] pim6reg1: entered promiscuous mode [ 256.240222][T13039] pim6reg1: entered allmulticast mode [ 256.771882][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 256.921750][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2131'. [ 256.974209][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2131'. [ 257.066991][T13099] TCP: TCP_TX_DELAY enabled [ 257.099623][T13096] sch_fq: defrate 0 ignored. [ 257.109677][T13083] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2131'. [ 257.249652][T13104] bridge6: entered allmulticast mode [ 257.300855][T13113] bond0: Device is already in use. [ 257.519657][T13126] net_ratelimit: 6 callbacks suppressed [ 257.519678][T13126] openvswitch: netlink: Key type 34 is out of range max 32 [ 257.668225][T13132] openvswitch: netlink: EtherType 50a is less than min 600 [ 257.683638][T13132] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 257.762058][T13132] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.781417][T13140] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2147'. [ 257.810686][T13138] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 257.835387][T13138] bond6: entered allmulticast mode [ 257.890854][T13141] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 257.922554][T13146] netlink: 'syz.3.2150': attribute type 10 has an invalid length. [ 258.448455][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'. [ 258.564513][T13179] netlink: 'syz.2.2160': attribute type 21 has an invalid length. [ 258.596116][T13179] netlink: 'syz.2.2160': attribute type 6 has an invalid length. [ 258.911416][T13199] veth11: entered allmulticast mode [ 259.115959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.675475][T13232] netlink: 'syz.3.2177': attribute type 30 has an invalid length. [ 259.690073][T13236] netlink: 'syz.2.2176': attribute type 2 has an invalid length. [ 259.863584][T13251] bond0: Device is already in use. [ 259.997739][T13259] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 260.018596][T13259] vlan0: entered promiscuous mode [ 260.025338][T13259] bridge0: entered promiscuous mode [ 260.054040][T13260] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 260.602510][T13290] sch_tbf: burst 19872 is lower than device lo mtu (262224) ! [ 260.612242][T13284] xt_hashlimit: overflow, rate too high: 0 [ 260.633400][T13285] xt_hashlimit: overflow, rate too high: 0 [ 260.852279][T13303] __nla_validate_parse: 13 callbacks suppressed [ 260.852299][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2197'. [ 260.882047][T13308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2196'. [ 260.971921][ T65] syzkaller0: tun_net_xmit 76 [ 260.975696][T13303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2197'. [ 260.978819][ T65] syzkaller0: tun_net_xmit 48 [ 260.995948][ T5847] syzkaller0: tun_net_xmit 76 [ 261.120910][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.318341][T13328] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 261.488747][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 262.017874][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 262.819964][T13328] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 263.160422][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'. [ 263.185987][T13377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2215'. [ 263.198904][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'. [ 263.210961][T13377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2215'. [ 263.254778][T13377] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2215'. [ 263.536021][T13407] unsupported nlmsg_type 40 [ 263.652141][T13408] netlink: 'syz.2.2224': attribute type 7 has an invalid length. [ 263.681087][T13408] netlink: 'syz.2.2224': attribute type 7 has an invalid length. [ 264.277764][T13450] Cannot find map_set index 0 as target [ 264.296581][T13453] netlink: 'syz.0.2239': attribute type 10 has an invalid length. [ 264.335031][T13453] netlink: 'syz.0.2239': attribute type 10 has an invalid length. [ 264.526350][T13470] netlink: 'syz.3.2242': attribute type 10 has an invalid length. [ 264.563608][T13472] xt_bpf: check failed: parse error [ 264.573881][T13465] netlink: 'syz.4.2244': attribute type 11 has an invalid length. [ 264.636293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.654179][T13477] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 264.731283][T13477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.844832][T13484] bond0: (slave veth13): Enslaving as an active interface with a down link [ 265.221775][T13499] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 265.317852][T13499] bond8: (slave lo): Enslaving as a backup interface with an up link [ 265.347006][T13499] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 265.389956][T13502] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 265.897384][T13534] __nla_validate_parse: 14 callbacks suppressed [ 265.897405][T13534] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2263'. [ 265.930449][T13536] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2266'. [ 265.941471][T13536] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2266'. [ 265.958948][T13536] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2266'. [ 266.056245][T13541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2270'. [ 266.086111][T13541] netlink: 'syz.0.2270': attribute type 2 has an invalid length. [ 266.094003][T13541] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2270'. [ 266.120510][T13548] bond0: (slave caif0): Error: Device type is different from other slaves [ 266.130728][T13546] bond0: (slave caif0): Error: Device type is different from other slaves [ 266.326608][T13559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2274'. [ 266.480344][T13573] netlink: 'syz.4.2277': attribute type 1 has an invalid length. [ 266.497404][T13572] netlink: 408 bytes leftover after parsing attributes in process `syz.3.2278'. [ 266.522481][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2277'. [ 266.561488][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2277'. [ 266.572954][T13579] tipc: Enabling of bearer rejected, media not registered [ 266.753576][T13594] tipc: Enabling of bearer rejected, failed to enable media [ 266.989712][T13607] bridge9: entered promiscuous mode [ 266.997358][T13607] bridge9: entered allmulticast mode [ 267.006536][T13607] team0: Port device bridge9 added [ 267.585457][T13640] netlink: 'syz.1.2301': attribute type 1 has an invalid length. [ 267.616509][T13640] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.694873][T13642] veth5: entered promiscuous mode [ 267.704982][T13642] bond7: (slave veth5): Enslaving as an active interface with a down link [ 267.718012][ T5843] block nbd4: Receive control failed (result -32) [ 268.252858][T13668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.764145][T13692] tipc: Enabled bearer , priority 0 [ 268.777170][T13692] syzkaller0: entered promiscuous mode [ 268.793015][T13692] syzkaller0: entered allmulticast mode [ 268.810724][T13692] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 268.956670][T13700] tipc: Resetting bearer [ 268.974805][T13702] IPv6: sit2: Disabled Multicast RS [ 269.001660][T13705] validate_nla: 2 callbacks suppressed [ 269.001680][T13705] netlink: 'syz.1.2327': attribute type 6 has an invalid length. [ 269.036333][T13691] tipc: Resetting bearer [ 269.077202][T13691] tipc: Disabling bearer [ 269.251377][T13722] C: renamed from team_slave_0 [ 269.279414][T13722] netlink: 'syz.4.2330': attribute type 1 has an invalid length. [ 269.305966][T13722] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 270.032142][T13781] bond0: entered promiscuous mode [ 270.050961][T13781] bond0: left promiscuous mode [ 270.117417][T13790] netlink: 'syz.1.2345': attribute type 3 has an invalid length. [ 270.637482][T13828] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 270.759389][T13835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.894664][T13841] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 270.908173][T13841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 271.017388][T13848] gtp2: entered promiscuous mode [ 271.035983][T13848] gtp2: entered allmulticast mode [ 271.302022][T13867] __nla_validate_parse: 27 callbacks suppressed [ 271.302043][T13867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2367'. [ 271.331734][T13863] nbd5: detected capacity change from 0 to 127 [ 271.339513][T13867] openvswitch: netlink: Flow key attr not present in new flow. [ 271.343834][ T5843] block nbd5: Receive control failed (result -32) [ 271.583801][T13878] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 271.677806][T13888] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 272.204131][T13928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2383'. [ 272.267545][T13941] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 272.419710][T13946] netlink: 'syz.3.2386': attribute type 10 has an invalid length. [ 272.702645][T13966] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 272.748828][T13966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2392'. [ 272.801513][T13966] netlink: 'syz.2.2392': attribute type 23 has an invalid length. [ 272.851396][T13951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.006362][T13951] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 273.061525][T13951] vxlan0: left promiscuous mode [ 273.070062][T13951] bond3: left promiscuous mode [ 273.074973][T13951] bridge1: left promiscuous mode [ 273.093091][T13951] xfrm1: left promiscuous mode [ 273.099324][T13951] bond4: left promiscuous mode [ 273.118245][T13951] gretap1: left promiscuous mode [ 273.135003][T13951] gtp2: left promiscuous mode [ 273.149358][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2391'. [ 273.162322][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2391'. [ 273.172296][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 273.219908][T13932] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.246771][T13932] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.265819][T13932] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.285190][T13932] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.296432][T13932] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.305441][T13932] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.342138][T13932] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.365756][T13932] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.465819][T13990] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2394'. [ 273.481888][T13994] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2397'. [ 273.612220][T14004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2401'. [ 273.802331][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2405'. [ 273.811387][T14023] netlink: 'syz.4.2405': attribute type 5 has an invalid length. [ 273.843749][T14023] geneve4: entered promiscuous mode [ 273.862651][T14023] geneve4: entered allmulticast mode [ 273.873454][ T1085] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 273.882095][ T1085] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 273.892510][ T1085] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 273.905395][ T1085] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 274.152516][T14038] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 274.657263][T14064] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20000 [ 274.729400][T14069] netlink: 'syz.4.2412': attribute type 2 has an invalid length. [ 274.836554][T14036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.842830][T14036] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 274.922653][T14036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.939943][T14036] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 274.963532][T14036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.974075][T14036] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 274.993506][T14036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.001065][T14036] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 275.034430][T14036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.045723][T14036] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 275.603033][T14109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.651875][T14109] 0: reclassify loop, rule prio 0, protocol 800 [ 277.863960][T14216] __nla_validate_parse: 6 callbacks suppressed [ 277.863976][T14216] netlink: 181328 bytes leftover after parsing attributes in process `syz.0.2437'. [ 277.999682][T14222] netlink: 'syz.0.2440': attribute type 10 has an invalid length. [ 278.008412][T14222] veth0_virt_wifi: entered allmulticast mode [ 278.223718][T14230] delete_channel: no stack [ 322.560085][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.999815][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 428.806104][ T31] INFO: task kworker/1:12:9797 blocked for more than 143 seconds. [ 428.814056][ T31] Not tainted syzkaller #0 [ 428.819223][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.828213][ T31] task:kworker/1:12 state:D stack:23672 pid:9797 tgid:9797 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 428.840333][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 428.847266][ T31] Call Trace: [ 428.850575][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 428.853531][ T31] __schedule+0x14bc/0x5000 [ 428.859675][ T31] ? __pfx___schedule+0x10/0x10 [ 428.864605][ T31] ? schedule+0x91/0x360 [ 428.869778][ T31] schedule+0x165/0x360 [ 428.873989][ T31] schedule_preempt_disabled+0x13/0x30 [ 428.879701][ T31] __mutex_lock+0x7e6/0x1350 [ 428.884400][ T31] ? __mutex_lock+0x5bb/0x1350 [ 428.889336][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 428.906577][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 428.911710][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 428.946724][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 428.952549][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 428.960420][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 428.967656][ T31] process_scheduled_works+0xad1/0x1770 [ 428.973310][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.979547][ T31] worker_thread+0x8a0/0xda0 [ 428.984212][ T31] kthread+0x711/0x8a0 [ 428.988407][ T31] ? __pfx_worker_thread+0x10/0x10 [ 428.993552][ T31] ? __pfx_kthread+0x10/0x10 [ 428.998497][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 429.003911][ T31] ? __pfx_kthread+0x10/0x10 [ 429.008740][ T31] ret_from_fork+0x599/0xb30 [ 429.013384][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 429.018577][ T31] ? __switch_to_asm+0x39/0x70 [ 429.023420][ T31] ? __switch_to_asm+0x33/0x70 [ 429.028578][ T31] ? __pfx_kthread+0x10/0x10 [ 429.033191][ T31] ret_from_fork_asm+0x1a/0x30 [ 429.039011][ T31] [ 429.042099][ T31] INFO: task syz.1.2402:14008 blocked for more than 143 seconds. [ 429.050861][ T31] Not tainted syzkaller #0 [ 429.056343][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.065046][ T31] task:syz.1.2402 state:D stack:24296 pid:14008 tgid:14008 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 429.077246][ T31] Call Trace: [ 429.080560][ T31] [ 429.083522][ T31] __schedule+0x14bc/0x5000 [ 429.088391][ T31] ? __pfx___schedule+0x10/0x10 [ 429.093313][ T31] ? schedule+0x91/0x360 [ 429.097680][ T31] schedule+0x165/0x360 [ 429.101878][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.107409][ T31] __mutex_lock+0x7e6/0x1350 [ 429.112041][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.117399][ T31] ? rfkill_unregister+0xc8/0x220 [ 429.122471][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.127754][ T31] ? __pfx_device_del+0x10/0x10 [ 429.132653][ T31] ? __cancel_work_sync+0x5c/0x110 [ 429.137858][ T31] rfkill_unregister+0xc8/0x220 [ 429.142769][ T31] nfc_unregister_device+0x96/0x2a0 [ 429.148491][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 429.154255][ T31] virtual_ncidev_close+0x56/0x90 [ 429.159395][ T31] __fput+0x44c/0xa70 [ 429.163416][ T31] task_work_run+0x1d4/0x260 [ 429.168318][ T31] ? __pfx_task_work_run+0x10/0x10 [ 429.173461][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 429.179209][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 429.184713][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 429.190097][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.194915][ T31] do_syscall_64+0x2e3/0xf80 [ 429.199637][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.206005][ T31] ? clear_bhb_loop+0x60/0xb0 [ 429.210734][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.216728][ T31] RIP: 0033:0x7f22e618f749 [ 429.221166][ T31] RSP: 002b:00007ffe97d71408 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 429.229635][ T31] RAX: 0000000000000000 RBX: 00007f22e63e7da0 RCX: 00007f22e618f749 [ 429.237908][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 429.245944][ T31] RBP: 00007f22e63e7da0 R08: 0000000000000138 R09: 0000001097d716ff [ 429.253938][ T31] R10: 00007f22e63e7cb0 R11: 0000000000000246 R12: 0000000000042ff6 [ 429.261999][ T31] R13: 00007f22e63e6270 R14: ffffffffffffffff R15: 00007ffe97d71520 [ 429.270293][ T31] [ 429.273338][ T31] INFO: task syz.2.2409:14036 blocked for more than 143 seconds. [ 429.281691][ T31] Not tainted syzkaller #0 [ 429.286705][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.295395][ T31] task:syz.2.2409 state:D stack:24448 pid:14036 tgid:14035 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 429.307677][ T31] Call Trace: [ 429.310993][ T31] [ 429.313936][ T31] __schedule+0x14bc/0x5000 [ 429.318565][ T31] ? __pfx___schedule+0x10/0x10 [ 429.323466][ T31] ? schedule+0x91/0x360 [ 429.327820][ T31] schedule+0x165/0x360 [ 429.332018][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.337851][ T31] __mutex_lock+0x7e6/0x1350 [ 429.342470][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.347304][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 429.352635][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.363517][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 429.369058][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 429.374969][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 429.381361][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 429.387302][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 429.392455][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 429.398552][ T31] rfkill_set_block+0x1d2/0x440 [ 429.403453][ T31] rfkill_fop_write+0x44b/0x570 [ 429.408397][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 429.413807][ T31] ? security_kernfs_init_security+0x270/0x290 [ 429.420047][ T31] ? rw_verify_area+0x255/0x4d0 [ 429.424933][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 429.430677][ T31] vfs_write+0x27e/0xb30 [ 429.434948][ T31] ? __pfx_vfs_write+0x10/0x10 [ 429.440158][ T31] ? __fget_files+0x2a/0x420 [ 429.444801][ T31] ? __fget_files+0x2a/0x420 [ 429.449508][ T31] ? __fget_files+0x3a0/0x420 [ 429.454226][ T31] ? __fget_files+0x2a/0x420 [ 429.459166][ T31] ksys_write+0x145/0x250 [ 429.463546][ T31] ? __pfx_ksys_write+0x10/0x10 [ 429.468491][ T31] ? do_syscall_64+0xbe/0xf80 [ 429.473206][ T31] do_syscall_64+0xfa/0xf80 [ 429.477786][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.483880][ T31] ? clear_bhb_loop+0x60/0xb0 [ 429.488922][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.494834][ T31] RIP: 0033:0x7f009958f749 [ 429.499518][ T31] RSP: 002b:00007f009a45f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.508161][ T31] RAX: ffffffffffffffda RBX: 00007f00997e5fa0 RCX: 00007f009958f749 [ 429.516622][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 429.524628][ T31] RBP: 00007f0099613f91 R08: 0000000000000000 R09: 0000000000000000 [ 429.532680][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.540737][ T31] R13: 00007f00997e6038 R14: 00007f00997e5fa0 R15: 00007ffdc1fa9698 [ 429.549060][ T31] [ 429.552109][ T31] INFO: task syz.4.2428:14139 blocked for more than 144 seconds. [ 429.565022][ T31] Not tainted syzkaller #0 [ 429.570094][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.579116][ T31] task:syz.4.2428 state:D stack:25984 pid:14139 tgid:14131 ppid:5845 task_flags:0x400140 flags:0x00080002 [ 429.591168][ T31] Call Trace: [ 429.594528][ T31] [ 429.597567][ T31] __schedule+0x14bc/0x5000 [ 429.602128][ T31] ? __pfx___schedule+0x10/0x10 [ 429.607470][ T31] ? schedule+0x91/0x360 [ 429.611747][ T31] schedule+0x165/0x360 [ 429.615974][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.621466][ T31] __mutex_lock+0x7e6/0x1350 [ 429.626243][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.631052][ T31] ? rfkill_register+0x37/0x8e0 [ 429.636248][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.641340][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 429.646798][ T31] ? device_initialize+0x24b/0x440 [ 429.651947][ T31] rfkill_register+0x37/0x8e0 [ 429.656707][ T31] nfc_register_device+0x14a/0x320 [ 429.661860][ T31] nci_register_device+0x87f/0x9d0 [ 429.667352][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 429.673012][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 429.678400][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 429.683818][ T31] virtual_ncidev_open+0x129/0x1a0 [ 429.688999][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 429.694657][ T31] misc_open+0x2d5/0x350 [ 429.699261][ T31] chrdev_open+0x4cc/0x5e0 [ 429.703737][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 429.708796][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 429.715171][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 429.720409][ T31] do_dentry_open+0x7ce/0x1420 [ 429.725224][ T31] vfs_open+0x3b/0x340 [ 429.729656][ T31] ? path_openat+0x33f3/0x3dd0 [ 429.734463][ T31] path_openat+0x340e/0x3dd0 [ 429.739305][ T31] ? do_sys_openat2+0xbc/0x200 [ 429.744102][ T31] ? __x64_sys_openat+0x138/0x170 [ 429.749231][ T31] ? __pfx_path_openat+0x10/0x10 [ 429.754207][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 429.759727][ T31] do_filp_open+0x1fa/0x410 [ 429.764265][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 429.769397][ T31] ? _raw_spin_unlock+0x28/0x50 [ 429.774296][ T31] ? alloc_fd+0x64c/0x6c0 [ 429.778720][ T31] do_sys_openat2+0x121/0x200 [ 429.783429][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.789032][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.793848][ T31] __x64_sys_openat+0x138/0x170 [ 429.798770][ T31] do_syscall_64+0xfa/0xf80 [ 429.803319][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.809486][ T31] ? clear_bhb_loop+0x60/0xb0 [ 429.814206][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.820558][ T31] RIP: 0033:0x7f1eaf58f749 [ 429.825021][ T31] RSP: 002b:00007f1eb044a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.833745][ T31] RAX: ffffffffffffffda RBX: 00007f1eaf7e6090 RCX: 00007f1eaf58f749 [ 429.841819][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 429.850538][ T31] RBP: 00007f1eaf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 429.858766][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.866942][ T31] R13: 00007f1eaf7e6128 R14: 00007f1eaf7e6090 R15: 00007ffebc1d9438 [ 429.874949][ T31] [ 429.878129][ T31] INFO: task syz.3.2431:14153 blocked for more than 144 seconds. [ 429.886168][ T31] Not tainted syzkaller #0 [ 429.891114][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.899986][ T31] task:syz.3.2431 state:D stack:26408 pid:14153 tgid:14152 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 429.912064][ T31] Call Trace: [ 429.915366][ T31] [ 429.919305][ T31] __schedule+0x14bc/0x5000 [ 429.923901][ T31] ? __pfx___schedule+0x10/0x10 [ 429.929440][ T31] ? schedule+0x91/0x360 [ 429.933731][ T31] schedule+0x165/0x360 [ 429.938326][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.943825][ T31] __mutex_lock+0x7e6/0x1350 [ 429.951039][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 429.956527][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.961344][ T31] ? misc_open+0x51/0x350 [ 429.965985][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.971092][ T31] misc_open+0x51/0x350 [ 429.975299][ T31] chrdev_open+0x4cc/0x5e0 [ 429.980566][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 429.985537][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 429.991967][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 429.997116][ T31] do_dentry_open+0x7ce/0x1420 [ 430.001923][ T31] vfs_open+0x3b/0x340 [ 430.006367][ T31] ? path_openat+0x33f3/0x3dd0 [ 430.011168][ T31] path_openat+0x340e/0x3dd0 [ 430.015873][ T31] ? do_sys_openat2+0xbc/0x200 [ 430.020662][ T31] ? __x64_sys_openat+0x138/0x170 [ 430.025975][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.030954][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 430.036313][ T31] do_filp_open+0x1fa/0x410 [ 430.040858][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.046168][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.051057][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.055499][ T31] do_sys_openat2+0x121/0x200 [ 430.060258][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.065492][ T31] ? exc_page_fault+0x82/0x100 [ 430.070707][ T31] __x64_sys_openat+0x138/0x170 [ 430.076109][ T31] do_syscall_64+0xfa/0xf80 [ 430.080659][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.086835][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.091548][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.097806][ T31] RIP: 0033:0x7fc07ff8f749 [ 430.102258][ T31] RSP: 002b:00007fc080df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.110777][ T31] RAX: ffffffffffffffda RBX: 00007fc0801e5fa0 RCX: 00007fc07ff8f749 [ 430.118858][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 430.127208][ T31] RBP: 00007fc080013f91 R08: 0000000000000000 R09: 0000000000000000 [ 430.135207][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.143265][ T31] R13: 00007fc0801e6038 R14: 00007fc0801e5fa0 R15: 00007fff0397f758 [ 430.151328][ T31] [ 430.154381][ T31] INFO: task syz.0.2442:14229 blocked for more than 144 seconds. [ 430.162786][ T31] Not tainted syzkaller #0 [ 430.167793][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.176560][ T31] task:syz.0.2442 state:D stack:28152 pid:14229 tgid:14228 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 430.188837][ T31] Call Trace: [ 430.192152][ T31] [ 430.195088][ T31] __schedule+0x14bc/0x5000 [ 430.199711][ T31] ? __pfx___schedule+0x10/0x10 [ 430.204602][ T31] ? schedule+0x91/0x360 [ 430.208923][ T31] schedule+0x165/0x360 [ 430.213126][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.218968][ T31] __mutex_lock+0x7e6/0x1350 [ 430.223610][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 430.228641][ T31] ? __mutex_lock+0x5bb/0x1350 [ 430.233443][ T31] ? misc_open+0x51/0x350 [ 430.237976][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.243060][ T31] misc_open+0x51/0x350 [ 430.247572][ T31] chrdev_open+0x4cc/0x5e0 [ 430.252022][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.257045][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 430.263469][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 430.268676][ T31] do_dentry_open+0x7ce/0x1420 [ 430.273494][ T31] vfs_open+0x3b/0x340 [ 430.277947][ T31] ? path_openat+0x33f3/0x3dd0 [ 430.282760][ T31] path_openat+0x340e/0x3dd0 [ 430.287479][ T31] ? do_sys_openat2+0xbc/0x200 [ 430.292273][ T31] ? __x64_sys_openat+0x138/0x170 [ 430.297390][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.302372][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 430.307649][ T31] do_filp_open+0x1fa/0x410 [ 430.312177][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.317309][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.322191][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.326616][ T31] do_sys_openat2+0x121/0x200 [ 430.331348][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.336926][ T31] ? exc_page_fault+0x82/0x100 [ 430.341771][ T31] __x64_sys_openat+0x138/0x170 [ 430.346741][ T31] do_syscall_64+0xfa/0xf80 [ 430.351279][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.357419][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.362127][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.368371][ T31] RIP: 0033:0x7f11d158f749 [ 430.372814][ T31] RSP: 002b:00007f11d248d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.381503][ T31] RAX: ffffffffffffffda RBX: 00007f11d17e5fa0 RCX: 00007f11d158f749 [ 430.389554][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 430.401876][ T31] RBP: 00007f11d1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 430.409948][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.417990][ T31] R13: 00007f11d17e6038 R14: 00007f11d17e5fa0 R15: 00007ffc2a82de88 [ 430.426316][ T31] [ 430.429581][ T31] [ 430.429581][ T31] Showing all locks held in the system: [ 430.437383][ T31] 1 lock held by khungtaskd/31: [ 430.442270][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 430.452289][ T31] 2 locks held by getty/5591: [ 430.457379][ T31] #0: ffff88814d25c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.467266][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 430.477643][ T31] 3 locks held by kworker/1:12/9797: [ 430.482966][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 430.494499][ T31] #1: ffffc90002f47b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 430.508117][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 430.519770][ T31] 2 locks held by syz.1.2402/14008: [ 430.524975][ T31] #0: ffff888143e94100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 430.534825][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 430.545024][ T31] 2 locks held by syz.2.2409/14036: [ 430.550588][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 430.560910][ T31] #1: ffff888143e94100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 430.570732][ T31] 3 locks held by syz.4.2428/14139: [ 430.576301][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.584838][ T31] #1: ffff8880279a1100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 430.594602][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 430.604778][ T31] 1 lock held by syz.3.2431/14153: [ 430.610181][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.618741][ T31] 1 lock held by syz.0.2442/14229: [ 430.623878][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.632424][ T31] 1 lock held by syz-executor/14235: [ 430.637974][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.646508][ T31] 1 lock held by syz-executor/14236: [ 430.651807][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.660345][ T31] 1 lock held by syz-executor/14238: [ 430.665965][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.674438][ T31] 1 lock held by syz-executor/14240: [ 430.679796][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.688359][ T31] 1 lock held by syz-executor/14242: [ 430.693668][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.702495][ T31] 1 lock held by syz-executor/14248: [ 430.708054][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.716659][ T31] 1 lock held by syz-executor/14249: [ 430.721966][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.730767][ T31] 1 lock held by syz-executor/14251: [ 430.736120][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.744647][ T31] 1 lock held by syz-executor/14253: [ 430.750009][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.758765][ T31] 1 lock held by syz-executor/14255: [ 430.764056][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.772675][ T31] 1 lock held by syz-executor/14261: [ 430.778025][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.786843][ T31] 1 lock held by syz-executor/14262: [ 430.792140][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.800684][ T31] 1 lock held by syz-executor/14264: [ 430.806056][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.814576][ T31] 1 lock held by syz-executor/14266: [ 430.820452][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.829130][ T31] 1 lock held by syz-executor/14268: [ 430.834450][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 430.843042][ T31] [ 430.845396][ T31] ============================================= [ 430.845396][ T31] [ 430.854320][ T31] NMI backtrace for cpu 1 [ 430.854343][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 430.854360][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.854370][ T31] Call Trace: [ 430.854376][ T31] [ 430.854382][ T31] dump_stack_lvl+0x189/0x250 [ 430.854408][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.854425][ T31] ? __pfx__printk+0x10/0x10 [ 430.854457][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 430.854475][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.854493][ T31] ? __pfx__printk+0x10/0x10 [ 430.854517][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.854541][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 430.854559][ T31] watchdog+0xf3c/0xf80 [ 430.854582][ T31] ? watchdog+0x1e2/0xf80 [ 430.854605][ T31] kthread+0x711/0x8a0 [ 430.854627][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.854645][ T31] ? __pfx_kthread+0x10/0x10 [ 430.854665][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.854683][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 430.854702][ T31] ? __pfx_kthread+0x10/0x10 [ 430.854721][ T31] ret_from_fork+0x599/0xb30 [ 430.854746][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.854776][ T31] ? __switch_to_asm+0x39/0x70 [ 430.854793][ T31] ? __switch_to_asm+0x33/0x70 [ 430.854810][ T31] ? __pfx_kthread+0x10/0x10 [ 430.854830][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.854860][ T31] [ 430.854866][ T31] Sending NMI from CPU 1 to CPUs 0: [ 431.001469][ C0] NMI backtrace for cpu 0 [ 431.001487][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 431.001508][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.001519][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 431.001547][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 431.001564][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 431.001580][ C0] RAX: 540da709d57a9a00 RBX: ffffffff8197438a RCX: 540da709d57a9a00 [ 431.001593][ C0] RDX: 0000000000000001 RSI: ffffffff8d76be8f RDI: ffffffff8bbfc660 [ 431.001605][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 431.001618][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 431.001631][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 431.001643][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 431.001656][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.001668][ C0] CR2: 00005641b3d4a000 CR3: 00000000331d0000 CR4: 00000000003526f0 [ 431.001685][ C0] Call Trace: [ 431.001693][ C0] [ 431.001699][ C0] default_idle+0x13/0x20 [ 431.001724][ C0] default_idle_call+0x73/0xb0 [ 431.001750][ C0] do_idle+0x1ea/0x520 [ 431.001769][ C0] ? irqentry_exit+0x5ba/0x660 [ 431.001794][ C0] ? __pfx_do_idle+0x10/0x10 [ 431.001819][ C0] cpu_startup_entry+0x44/0x60 [ 431.001837][ C0] rest_init+0x2de/0x300 [ 431.001854][ C0] start_kernel+0x3ae/0x410 [ 431.001873][ C0] x86_64_start_reservations+0x24/0x30 [ 431.001896][ C0] x86_64_start_kernel+0x143/0x1c0 [ 431.001918][ C0] common_startup_64+0x13e/0x147 [ 431.001948][ C0]