last executing test programs: 24.954777205s ago: executing program 3 (id=3262): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0x4, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x4000000) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004600002c0000000000069078ac141400ac1e00014404000000000000278ba424e33a37889272bf88f546e26569202cdd87750600336a47be393d88046234bbe4d254d87c8d75b7716171081690a7e286177646783dc7f9f38dab8f31a40d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 24.823147995s ago: executing program 3 (id=3263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 23.936206783s ago: executing program 3 (id=3271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0xc201}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r1, 0x131dd000) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0xa, 0x300) (async) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050300000000000000000700000008000380", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044080) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be97dbb2c2cd74cf53bcfab1874c250afffe8000000000000000000000000000aaff020000000000000000000000000001042088be280000030c000800050086dd88a888be000000021609660501000000000088a80800220915020000200cf0080200000000000002000494030800655800000002"], 0xfdef) (async) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be97dbb2c2cd74cf53bcfab1874c250afffe8000000000000000000000000000aaff020000000000000000000000000001042088be280000030c000800050086dd88a888be000000021609660501000000000088a80800220915020000200cf0080200000000000002000494030800655800000002"], 0xfdef) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x0) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r11, &(0x7f000000f040)={0x0, 0x0, &(0x7f000000f000)={&(0x7f0000002800)=@newtaction={0x2020, 0x30, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{0x260, 0x1, [@m_mirred={0x1d8, 0x3, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x67c082a7, 0x8, 0x6, 0x4, 0xa}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x4, 0xfffffffd, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0xffffffffffffffff, 0x9, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x80000000, 0xffffffffffffffff, 0x27, 0xffffffcd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xffffffff, 0xffffffffffffffff, 0x0, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x101, 0x3, 0x2, 0xa2e}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x7, 0x10000000, 0x8, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x9, 0x7, 0x6, 0x2}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf3da, 0x8001, 0x0, 0xf6, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x3, 0xffffffffffffffff, 0x0, 0x5bbd715d}, 0x3, r9}}]}, {0x6a, 0x6, "9bada91d80977be45dbd4d2409574ad1d7caaed17e40e2eab7bcfc94f84557aa08b3282ad98a98d49229d8d51eb07d247fb1756f27c86b9952fa85d414f0112885ca68b44ed1f698efdddf7b3e343ff5f3e27df632705e6d364bcbd1405a81385f4401c3adc5"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_simple={0x84, 0x1c, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xf560, 0x20000000, 0x1, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x6, 0x10000000, 0x1ff, 0x8}}]}, {0x25, 0x6, "d1d05c7b656c9da2423492aaa037f4d8e3aa5b497064d124c4a4fbe4fcd48853e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x1dac, 0x1, [@m_skbedit={0xf58, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0xf29, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe50, 0x15, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffffff, 0x8, 0x0, 0x6, 0x1}, 0x2, 0x4}, [{0x7, 0x9, 0x1, 0x7, 0x5fa8, 0x2}, {0x400, 0x2, 0x9a, 0x8, 0x4, 0x5}, {0x79bd, 0x0, 0x98000, 0x3, 0x7, 0x9}, {0x0, 0x3, 0x80000001, 0x4, 0x7ff, 0xd7a}, {0x5, 0x2, 0x7, 0xa0, 0x5, 0xfffffffc}, {0x7, 0x10001, 0x70c, 0x2, 0x7, 0x7}, {0x6, 0x9, 0x7fffffff, 0x3, 0x30a}, {0x6, 0x400, 0xd, 0x9, 0x2, 0x134}, {0x64f600, 0x0, 0x2, 0xff, 0x1, 0x1}, {0x80000001, 0x101, 0x5, 0x5, 0x3, 0xffffffc0}, {0x9, 0x0, 0x6, 0x0, 0xd3, 0x7}, {0x117b, 0x5, 0x8, 0xb0, 0x400, 0x5}, {0x8, 0x8, 0x7, 0xd, 0x4, 0x5}, {0x100, 0x97, 0x9, 0x10001, 0xc6, 0x1}, {0x62cd, 0xfffffffb, 0x6, 0x200, 0x8, 0x3}, {0x9e70, 0x4, 0x10001, 0xffffffff, 0x1, 0x7f}, {0xa, 0x58, 0x595cb1e0, 0x9, 0x1, 0x1}, {0x7, 0x2, 0xd, 0x9, 0xdf3, 0x7}, {0xcd, 0x3, 0x1, 0x80, 0x9, 0x54c}, {0x4, 0x80000000, 0x6, 0x3, 0x3, 0x7ff}, {0x7, 0x2cb, 0x5, 0x8, 0x4, 0x29ec}, {0xfffffffc, 0x6, 0x8f4, 0x6, 0x9, 0x9}, {0x80000000, 0xb, 0x200, 0x2, 0x5, 0x7}, {0xc, 0x7, 0x1, 0x7, 0x1, 0x9}, {0x353c, 0x5, 0x7, 0x7f, 0x0, 0x4}, {0x40, 0x80, 0x8, 0x6}, {0x9586, 0x3, 0xb795, 0x800, 0xcc, 0x4}, {0xfff, 0x1, 0x0, 0x2, 0x2, 0x8}, {0x9, 0x2, 0x5, 0xfffff281, 0x8, 0x400}, {0x0, 0xfffffff0, 0xa, 0x42d8, 0x2, 0x1f5}, {0x4, 0xffff, 0x80000000, 0x2ae2468a, 0x5, 0xff}, {0x8, 0x5, 0x0, 0x401, 0x0, 0x5}, {0xf3, 0x7, 0x4042, 0x1, 0x3, 0xffffffff}, {0x401, 0x0, 0x3d5, 0xfbd, 0x10000, 0x1489}, {0xc, 0x4, 0x9, 0x9, 0x100, 0x5}, {0x1, 0xfc000000, 0x8001, 0x9, 0x80000001, 0x3e3}, {0x2781, 0x2, 0x8001, 0x3, 0x7f, 0x1}, {0x3, 0x6, 0x7, 0xea, 0x8, 0x1000}, {0xe50, 0x6, 0xfffff5f2, 0xfffffffd, 0x8, 0x840}, {0xd90d, 0x8365, 0xa, 0x4, 0x1b51, 0x3}, {0x8, 0x2, 0x52, 0x5a03, 0xfffffffe, 0x10}, {0x7, 0xffff, 0x4, 0xa, 0x6, 0x1}, {0x7e, 0x800, 0x9, 0x8001, 0x400, 0xffffffff}, {0x1, 0x0, 0x7c4f5ea6, 0x5, 0x0, 0xc}, {0x8, 0x8a, 0x6, 0x100, 0x1, 0x6}, {0x8, 0x7, 0x9, 0x3, 0x7, 0x78}, {0x2, 0x81, 0x1, 0x101, 0xfe00000, 0x7fff}, {0x9, 0x3, 0x7, 0x1ff, 0x4, 0x7}, {0x7fff, 0x5, 0x4, 0xa, 0x1, 0x401}, {0x4, 0x80, 0x2, 0x1000, 0x1, 0x37d}, {0x101, 0x3, 0x4f, 0x401, 0x6, 0x6}, {0x40, 0xfffffeff, 0xffff, 0x9, 0x40, 0x80000001}, {0x7, 0x3, 0x8, 0x1, 0x4, 0x9}, {0x43cb, 0x7, 0x2, 0xf4, 0x2, 0x7}, {0x0, 0x1, 0x2, 0x4d, 0x0, 0xffffffff}, {0x3, 0x1, 0x7bc, 0x6, 0xfffffff9, 0x6}, {0x6, 0x9, 0xff, 0x6, 0x0, 0xd11}, {0x3, 0xa2e, 0xcc, 0x0, 0x2}, {0xf87, 0x1, 0x6d, 0x8, 0x7a, 0xa}, {0x7ff, 0xad70, 0x1, 0x8001, 0x4, 0x3}, {0x8001, 0x0, 0x7, 0x7, 0x2}, {0xe, 0x462, 0x7, 0x4, 0xc91, 0x2}, {0x2, 0x6, 0x80, 0x8, 0x2, 0x8}, {0x7, 0x1, 0x0, 0x6, 0x9, 0x6fa6bac8}, {0x2, 0x46e795c4, 0x8, 0xfffffbff, 0xf7c, 0xf}, {0x0, 0x3, 0x101, 0xfffffffa, 0x2, 0xe}, {0x9, 0x661, 0x9, 0xfffffffc, 0x3, 0x6}, {0x3, 0x1, 0x10, 0xf977, 0x79, 0xe0000000}, {0x5, 0x8000, 0x7, 0x7, 0x4, 0x7ff}, {0x5cb, 0x8, 0x3, 0xffff0075, 0x1, 0x2}, {0x3453, 0x3, 0x5, 0x3, 0x476, 0x727}, {0x8, 0x1, 0xc77, 0x1, 0x81, 0xa72f}, {0x0, 0xa, 0x10, 0x8, 0xe, 0x6}, {0x1, 0x8, 0x3, 0x4, 0x0, 0x3}, {0x9150, 0x4000, 0x6, 0x78f, 0x4, 0x4}, {0x0, 0x1, 0x2, 0x9, 0x4, 0x6}, {0x2, 0x6, 0x3, 0x7, 0x7fff, 0xff}, {0x200, 0xff, 0x3, 0x7, 0x3ff, 0x6}, {0x7fffffff, 0x2, 0x8, 0x5, 0x2, 0x7ff}, {0xfff, 0x1ff, 0x8, 0xffff52ca, 0x5, 0x5ad4}, {0x0, 0x4, 0x4, 0xddc, 0x4, 0x9}, {0x8, 0x8, 0x5, 0x80, 0x0, 0xe}, {0x4, 0x2, 0x7fffffff, 0xf, 0x40, 0x7fffffff}, {0x100, 0x5, 0xd049, 0x8, 0x6, 0xdb8}, {0x0, 0x7, 0x99, 0x2, 0x2, 0x1a0}, {0xd5f, 0xa8c, 0x3, 0x7ff, 0x101, 0x7}, {0x82ee, 0x9, 0x1, 0x9, 0x7, 0x9}, {0x1, 0x1, 0xc38, 0x1, 0xf, 0xb7}, {0x1000, 0xfffffffd, 0x8, 0x7, 0x10001, 0x5}, {0x0, 0x3, 0x40, 0x9f, 0x5d0, 0xffff4722}, {0x10001, 0x38, 0x7, 0x6, 0x1, 0x7}, {0x4, 0x7f2, 0x9, 0x3, 0x3, 0x5253}, {0x182, 0x39, 0x9, 0x5, 0x4003, 0x2}, {0xccd, 0x6, 0x5, 0x838, 0x0, 0x4}, {0x101, 0x5, 0x101, 0x3, 0x40000, 0x1}, {0x8, 0x3b68d51, 0xffffffff, 0x8, 0x3, 0x7fff}, {0xe, 0xf, 0x734, 0x9, 0x4, 0x4}, {0xfffffffb, 0x0, 0x7, 0x9, 0x1e}, {0x7fffffff, 0x0, 0x9e, 0x2, 0x6}, {0x0, 0x0, 0x100005, 0x8, 0x5e47944c, 0x3}, {0x1000, 0x9, 0x2, 0x5, 0x6, 0xfffffffe}, {0x9, 0x2, 0x6, 0x3ff, 0x7ff, 0x9}, {0x2, 0x8, 0xb8f, 0xe2, 0xc, 0x8}, {0x9, 0x3, 0x6, 0xfffffffd, 0x3, 0x2}, {0x8, 0x4, 0x80, 0xc0000000, 0x0, 0x9}, {0x401, 0x697, 0x1, 0xabb7, 0x0, 0x6}, {0x8, 0x4, 0x2, 0x3, 0x6, 0x4}, {0x4, 0x7, 0x7, 0x4, 0x1, 0x6}, {0x9, 0x15, 0x95b9, 0x6, 0x4, 0x6}, {0x8001, 0x5, 0x3, 0x8, 0x6, 0x14}, {0x3, 0x1, 0x1, 0x7, 0x200}, {0x80000000, 0x2, 0x5, 0x40, 0x2, 0x9}, {0x4, 0x4, 0x2, 0xfff, 0x8000, 0xc}, {0x40, 0x8, 0x7, 0xffffffff, 0x9, 0x5}, {0x100, 0x4, 0x5, 0x7, 0x7, 0xffffffff}, {0x4, 0x0, 0x81, 0x8, 0x5c968773, 0x5}, {0xf, 0x4, 0x100, 0xa8, 0xfff, 0x81}, {0x1, 0x4, 0x9, 0x3, 0x7, 0x9}, {0xff, 0xdb, 0x8, 0x2, 0x8, 0x7ad0}, {0x400, 0xfffffffb, 0x4, 0x7f, 0x8, 0x1}, {0x5, 0x9, 0xffffffff, 0x1ff, 0x80000000, 0x1}, {0x5, 0xfffffff9, 0x4, 0x107, 0x7, 0xf6d5}, {0xfff, 0xd, 0x9, 0x0, 0x4, 0x80000000}, {0x1000, 0x6, 0x7ff, 0x3, 0xb, 0x7}, {0x80000000, 0x6, 0x10, 0x800, 0x8, 0xff}, {0x7, 0x1ff, 0x1, 0x7ff, 0x7, 0x3}, {0x7f, 0x7b6, 0x5, 0x7c4, 0x0, 0x8}, {0x739f, 0x5f8, 0x8, 0xe, 0xb, 0x6}], [{0x3, 0x1}, {0x5, 0x1}, {0x7}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1a4760fde559f4f8}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x1}, {0x3, 0x9adeb176c7c42d89}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x4}, {0x5}, {0x0, 0x1}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x4}, {}, {0x2, 0x1}, {}, {}, {0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x7}, {0x1, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2020}, 0x1, 0x0, 0x0, 0x4891}, 0x95) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x80000000, @local}, {0x0, 0x37c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 23.505925044s ago: executing program 3 (id=3275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0}}, 0x4881) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, 0x0, 0x0}, 0x20) r7 = socket$isdn(0x22, 0x2, 0x21) close(r7) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000001980)=ANY=[@ANYBLOB="2d63707520c4aca8f9e870327892b0824173413ffec84985823495377f2a2a"], 0x5) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000340)=""/149, 0x95}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000840)=""/144, 0x90}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x8, &(0x7f0000000240)=""/59, 0x3b}, 0x40000160) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @local}}}, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) close(0x3) getsockname$packet(r9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) 23.399578079s ago: executing program 3 (id=3277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x60, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004080) 22.818829425s ago: executing program 3 (id=3283): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x7, 0x2, 0x5, 0x18, 0x4, 0x1}, &(0x7f0000000140)=0x9c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f00000001c0)={r3, 0x40, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @loopback}}, 0xc91, 0x9d13, 0xd91, 0x7ffffffe, 0xe2, 0x7, 0x68}, 0x9c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x118, 0x118, 0x278, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff, 0xff, 0xffffff00, 0x57f726f00c7322f1], [0xffffffff, 0xff, 0x1feffffff], 'vlan0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x2c, 0x5, 0x2, 0x40}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x23, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x80000000, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) socket$nl_route(0x10, 0x3, 0x0) 20.945861134s ago: executing program 4 (id=3310): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f00000000000000200300000004"], 0x18}}, 0x4000) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 20.841582264s ago: executing program 0 (id=3312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80000) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) syz_emit_ethernet(0x24c5, &(0x7f00000011c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "c0a7ac", 0x248f, 0x3a, 0x0, @private1, @empty, {[@fragment={0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x67}, @dstopts={0x5e, 0x2, '\x00', [@ra={0x5, 0x2, 0xe8a}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2d, 0x8001, [0x34]}}]}, @hopopts={0x0, 0x8, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x1, [0x1, 0x9, 0x6, 0x4, 0xffffffffffffffff]}}, @ra={0x5, 0x2, 0x4}, @pad1, @pad1]}, @hopopts={0x84, 0x1d, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x48}, @ra, @generic={0x29, 0xc3, "3078c20f43ac01201891fe68f36de2d46eb9500c15c912759e23bc86be654e7dcf709b5d9c236bfbb3c6f8db2e436a5f6b7b6bb66b6906d9b9400c489a58a28a782b402e8186ee1fb5c82b2d434e1517e64c081588842a00dc6e3f0cf041ad28fa29ece7d700e5768bd17b05ed2ccb9a57ad60b274c056f0c00b53d806a76639b8c8bf34a2f748380b5ac14e6df2bdd235fa8e6be78ac96dfb6dee5a92d2066730b6b0ab5d7a5f2a5dada3744e49d344a77ea483b61784c2bef03726fd93af83d6bf55"}, @jumbo, @enc_lim={0x4, 0x1, 0x9}, @pad1, @ra={0x5, 0x2, 0x4}]}], @ndisc_na={0x88, 0x0, 0x0, 0x9, '\x00', @private0, [{0x5, 0x3, "222a467c06b64a1021a94273352f7ebee1515fcdea6ac5205f"}, {0x18, 0x200, "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"}, {0x1f, 0x1, "a2314c0adcfe3b573fda"}, {0x1e, 0x1d, "1cd2d4bd7a68d279d8b635e4e0376b244e4554bbe7156d89c135f2e6900d311362ef09442487e5d26932a06afe1b31be4ae7b82c250d9e03047b8b1dc18687a5e7b402a703b1aaebba8057694045b520e8fe62996424aafa466da0147d958cc05f49c73ade5b60d73e6307a222f2d123a8b14f695fc24fe914810f00e87b779c3d7929a3b694e55d095fb531466e78e7f9b42e8f413336e9144236588ee3981efeccd52e4445fcb14125bde0f1fb4328b691916a70c6ad71d0ec4512fa7875d4b8bfd480c36468f4f46f3fcfaad8171c841518d602276ed8d96af3827b0f1bbac1b2f29250369e4a1192d2"}, {0x3, 0x8, "a99fea192cb8c29c02d81569a6135a1a8518bfd25aa14f24d75f108250c0e19a3ba6447c9f603b7ca9266a41b2d0853a379aae8e101ee83f707550ff0a3bd5e10ddb8367"}, {0x0, 0x19, "7e4f0bb9280cb4bfb79d4265de7434fd2d530ab8f31574dd7ba72ff2c2f54438930f21b6f6317c137fc48fdaa04efb9dd2724b640d8bb60311d95d76433f8d5ef377a55f4723effe7fd2fedf6d809ee27b005e48587de16a7f46c743f463257bf3ec6498af64ffdd516b8f1f6a33bb0d95c4933da4caccbbd068391554800df954957896811cef9de3b9e0353d117c54f4ed2736e46c72d7d520266b8138b93859dd669114872ea54d8e1651ca764de3740c2039498a84336dd6e95631d5e57ed85203a9b229c10b1f9e451909"}, {0x5, 0x200, "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"}, {0x1, 0x1c, "f47c9ad68052c2fa5c25c211f00cdd0b4c3496898f34decbc79b4fa73d6aad419e38bfe401a95c9fc537482a9f4f00eb790fd832b7f1701629f4b5da19791c88b2d8305305d3021cea2ff9ef622f1d7b51c83a9f9700094cae5f9b51528316d51539950b7427fbc039ff037bee5dc49f1bbde1bf8de0510c7bb4369a5d4926db3c478583e1bf0a30d17112ca4666ba4e30e882c677d405974aa29658f36f18a776a62b4037cbc74c80c7b5bae24d32c7abc949386024317cff952adb6097cdb6f63d80307f99d14dffcad0c6b502c573c807d9d4a3d41563722bfca2c0653740"}]}}}}}}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000240)={0xb73, "bae483"}, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050000000000ff3c28a84f801ee022b56079cea41750169a3e1dbf81a5b7322906e09ff7c7f5cf5ab8406fab"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r1, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c011}, 0x8000) 20.704841763s ago: executing program 4 (id=3313): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) tee(r14, r14, 0x8001, 0x2) sendmmsg$inet6(r14, &(0x7f0000003040)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x173b2a7e, @mcast2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="f05171197e5d0af9b8898545ef3a4bbbb7480d24ac8dedc4ad8c629d31a835d2ca4e5fea2a5378787d07701a4f0953418847019b640d66172b99502904dd2445191103aa9749613ad0ef23a04bf208108742cc3c07bf630bc5fb3e5d290b8641a823c288c9e1145d98a9d4c96756877f041d8c2d8b1d87a515ce9f55f9a8c7e3fbc7932e2727c1ca719c9c31884ec32a", 0x90}, {&(0x7f0000000180)="c9a44ae1f32526a5541b4f94a55bb2b8df1e21b8b6b6cddc2cddf93fa475c33e60e2db41e26790c7e0508b2831b10bd7955b29bece7595ccfbfaa94d426e1ab0cd0357c7d9eede3e263f9a65711267a9f291f7760d627c2954ab65f13aa3299a21e623d9220c53b587d831b319", 0x6d}, {&(0x7f0000000480)="d23433559b6c09a4ec3d195a8ca947a819e9624e837880201aa5aecee6bc08f791c77951947072afc6935185c54d6b58fe896aa55f22206511424042eaad9f8813982f59c6bd8e98c03a5f0dde0385f22ddd773efdd1741fbb84aef0053cbd13b9fdf21aa904a5b45f946e5e490385a5f6cf1aa2b65fb4ba685b053779631b86592b9b440b339df315dd82ac9812c8bb6429878a0159e07253aa6d6baf88b1aed7ed562e208398ff261a86fedd4cbc60847f52fd", 0xb4}, {&(0x7f00000002c0)="ce87593ff8d42a848d4f7a31f4b7b9bba47ff21e6deeaefcbfbf26c999ed7b2fff78876ab73f561d297067cb0ebb57d6b462ef81d3be7a373f56530de281070260f781", 0x43}, {&(0x7f0000000340)="715ef845a3b8a1a287e34fdae15cbb15d5ba941619617f2f400277016bf89c0fa4b4ef4430750451ccdc9567d091ebf151e25dd9110f85a117890423b64652740c21c41604e212397d437680bc59c900bfe26daab0bf64a18ba5deafa87716b07bb7f0fd2f749f708ae871f68657ba0ef5cf69a84d49e2bf47ebb6c7366742e608ca4128986370cf4a489320becfce0a71af46bfc165b7ea6792b26fa483c7f8f201c7c6a9167253ad8bc15bf07c80be46b27df3f254eeb5975061", 0xbb}], 0x5, &(0x7f0000000480)=ANY=[], 0x100}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000dc0)="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", 0x312}], 0x1}}], 0x3, 0x8048001) 20.645588202s ago: executing program 0 (id=3315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x8]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x154, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xdb, 0x7, 0x1, 0x0, "fac98676a6df7053547f0e6e26936669fc62c36afc5736553e516daa19620efbe33880e25cb777df8578e652351f77aeaf6a9d8442b1c7adc0debbbc8fdd4875eb1f69539c0a95e2d4176da3fb082490b8c81a008721ce72b6222868a2c7876b8932dda49a610198f26ffb89780582bc0d34b03b2787eb4ad40afb6492841b55ec3c7b9134be7fb9af98f19c3c667c2dbd009879426927f095ea3da223beb098081b67667a811d125d799b64c877ed132c55b4732238aaad8bcbbfb51f993b921c966b074a1b56bba368d55b32fa15135753fba25f84bc"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x1f4, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x1e0, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7ff}]}}}, {0x84, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x74, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x47, 0x3, "3b38a955a42462d1f1d2b3b9bd452937880455f40763f27db8e30fd932901b5df9c787cacce888d1b3cd02624afdde98b9ed51d9f56c770501f99dbb1e6238b30d529d"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'set\x00'}, @NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x80}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x5c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x9f}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x97}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xa6}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_DELTABLE={0xa8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x7e, 0x6, "faacd2ce92cdb1fa86e9d071802d04a3aade7543ed4e56d9348c1da2d977d60ee08cc0d0e078059ceb99845002aaab9eb92abcc933250a6d6544199b84d37b58f3ed2bdb6e08cfeeac163749ebea60d3332054be2e83abe98fb3a1a4dd0352838c9606608724b076ef19feb0742f87afacf3b16856dad9d15ef5"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x418}, 0x1, 0x0, 0x0, 0x40000}, 0x2c004090) 20.442461195s ago: executing program 0 (id=3318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x12}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x60054) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e22, 0x6, @mcast2, 0x82}, {0xa, 0x4e21, 0x222, @private2={0xfc, 0x2, '\x00', 0x3}, 0x1d}, 0x0, {[0x400, 0x4, 0xff, 0x8000, 0x3, 0x7f, 0x752, 0x5]}}, 0x5c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 20.400050437s ago: executing program 4 (id=3320): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00000000c0)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) 20.147536076s ago: executing program 4 (id=3322): openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async, rerun: 32) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000000100)) (async, rerun: 32) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000400)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, @default}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c00000000000060090a010400000000000000000a0000040900010073797a3100000000080005400000000109000205000000000000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31680b000000000000100000800c00018005000100d1000000140000001100010000000000000000000100000a"], 0xa4}}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 20.146124789s ago: executing program 0 (id=3323): syz_emit_ethernet(0x46, &(0x7f0000000f00)=ANY=[@ANYBLOB="bbb6bbbbbbbb00000000000086dd6002000000103a00fe8000000000000000000000000000bbff0200000000000000000000000000018600907801150d000000000000000000"], 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'macvlan0\x00', 0x800}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) 17.779350185s ago: executing program 0 (id=3326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x3, 0x5) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x590, 0x270, 0xffffffff, 0x0, 0xf0, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @gre_key=0x9, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8) (async, rerun: 64) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="5d08b7bc106101b3881de5e7381b7b332f5a010d37bf10b48da5ea7973ed61abb42e1cc2ef4fe30eb5e1138e131f8ac59284ee82a519e5b065bcca28464a5d3e67932e1d1d793698a7e7675a7d246359737905a9fad9f648ca357f56fa1dcec44f6da949a53574036f40ec86cc0ee27180024d10c2962c3cf965ed9c85e6b04607ca6f4c98edaac6924a4887951158c2cbae5e8ffc2972678ae7e31c9b482cfccc41edd6fd5b4d122213abbbea951bc0b95b0d3cf3a2fc2a642c47dd1bea5c4e7bbda527c6c832ea274989b7244af977f91d14e951b5af68cdede8", 0xdb) 17.673543463s ago: executing program 4 (id=3327): ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x4}, @hci={0x1f, 0x4, 0x3}, @can, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xa, 0x5}) (async) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x3}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="84000000000000007910000000000000c31b8000"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xca, &(0x7f0000000340)=""/202, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) (async, rerun: 64) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) (async) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000080)=0x1, 0x4) 17.60345655s ago: executing program 0 (id=3328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r4, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r2, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r2, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x8, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) 17.333908197s ago: executing program 4 (id=3331): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0xb27ab816dd4ebb64}, 0x4040000) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0xb27ab816dd4ebb64}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="379e0a70c6143dd0f2a0e930c35fda437917f6eed5c4870e9ef9d354b27b601617befd074e156476dd6b3b3283999d4effda0f94ef2d5e2425bf66cb8ca8bb837a4bdf6c97c0fe8f1dce2d20780e61e339495751483416b149ec83e1d94e0fd0adb403ac03247a6689223b229f8d284eabe49a7b6a13c0a4e3f5604bf7db4539299e8ab5749dbcb06eb65bbd462965a8755d1bd9806a7f438efc9ff403a77ffd7ef0298a9500000000000000000000000000002f9f6d47ac2f681d5e2d65cf6d3e5d7fe4b7a3775c36e7f4df152e085cfc3368e08f144a3824c2c29b23b92da4a3199b2e1af7a5cc647d6e04", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000000c0005800700010069620000"], 0x20}}, 0x0) 16.909816231s ago: executing program 2 (id=3335): socket$unix(0x1, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000002000001700000300"/26], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 16.51730481s ago: executing program 2 (id=3337): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x3, 0x101, {{0x14, 0x4, 0x1, 0x1a, 0x50, 0x67, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x8, 0xbc, 0x0, 0x5, [0xb1c1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x9d, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x8f05}, {@loopback, 0x8}]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x6b, [@dev={0xac, 0x14, 0x14, 0x3b}, @local]}, @noop]}}}}}) sendmsg$xdp(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x8, r1, 0x3a}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="638c6ed22a85e4bf5e27f67b4c761be7c4625aab758c6dfe9713e43ca0c87c22bed2a89d43150406fc91", 0x2a}, {&(0x7f0000000140)="c68755dfca28052f608acafa1423a944a626d81961897e602f780753bb4555e2d3410be5525048d0d58602aeae450f1fc9321f334edddfac5b4b5979eea3088e1cb37e9e", 0x44}], 0x2, 0x0, 0x0, 0x20000800}, 0x4000800) 16.516784577s ago: executing program 2 (id=3338): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f00000009c0)=""/139, 0x8b}], 0x9}}], 0x1, 0x10000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) recvmmsg$unix(r2, &(0x7f0000003b00), 0x0, 0x12100, 0x0) 16.138501616s ago: executing program 1 (id=3343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {0x0, 0xe}, {0xd, 0xfff1}}}, 0x24}}, 0x891) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x48, r7, 0x600, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 15.890227271s ago: executing program 1 (id=3344): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095", @ANYRES8=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) close(0x4) (async, rerun: 64) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000f00)) (rerun: 64) 15.774231542s ago: executing program 1 (id=3345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r4 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000cc0)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r11 = syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00') r12 = getpid() sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r9}}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r13 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) r14 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f00000013c0)={'team0\x00', &(0x7f00000012c0)=@ethtool_drvinfo={0x3, "b1015904849180e9a33bba5c09d84bcfaaf125ea71d525c3ca8d29f38ca7de3d", "3e905dc5345719d6c26ae7d6869eafe1308fbe9ec3937a088353ecc234c1b270", "e27209058368b97e07c6a36bd71bf50faaaa4cc459b461563d96fcf43cef9556", "cb2da74058cb8d204d1fcfe681724ba1c43f448a6dd17bc66b6ca749694f6aba", "942b254fd347c27ba8eac26cb159a5d6fca9f2ebd5f690c7d1aae8c50669cfb9", "5fc03157508709b83ecd0a7b"}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000d40)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000e80)=0xe8) r17 = getgid() r18 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r18, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r19, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r20 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r20, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r19, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001c40)={0x8, 0x3, {0x101, @usage=0xbff8, 0x0, 0x1, 0x80, 0x8001, 0x4, 0x7, 0x400, @usage=0x9, 0x9, 0x74d1c4f5, [0x0, 0x3576f8fc, 0x2, 0x8, 0x3, 0x4]}, {0x8, @struct={0x11, 0x4}, 0x0, 0x2, 0x2, 0xe0, 0x6, 0x100000000000000, 0x12, @struct={0xffffffff, 0x1}, 0xa4f3, 0x8, [0x52d, 0x2, 0x9d, 0xd55, 0xdafb, 0xffffffffffffce85]}, {0x0, @struct={0x0, 0x8}, 0x0, 0x7fff, 0x2, 0x3a0, 0x3, 0x9, 0x13, @usage=0x10, 0x2, 0x88f0, [0x0, 0xff, 0xb5, 0x800, 0x3, 0x4]}, {0x8, 0x9, 0x8cc5}}) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000002040)={r21, 0x4, 0xea5, 0x4e783435f2da6da0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)={0x62c, 0x3d, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x2a4, 0xd1, 0x0, 0x1, [@nested={0x4, 0x28}, @nested={0x4, 0x66}, @generic="687a061ae37d41442b03f239d7e36c3920bb560c1ea7042dd16f796597a8c5fe2698041acf65ad3ddf97ca50ad2c", @generic="18947081c5e674d14f98e1973200efb57114c684e6f1ec5bb7334d2e70b1bc09a05e8436c96620d2a0b58793a34d661c3d9712afb2631faf55573b1286cf2cb68bf92fdffaae3e4443d2e7ff14aa5a2bdafd8bb177a59d3a4be6830fc5660db9878f7bac326a18603a1d27cc3ef9cc31eb2a8a0f7f494ad321d1eff5458dfcfaa6d3e2a4562e88a1e98640589c6a0303ab8d7c1ca64275ac54478e2c35a71d3ef7da237f954aee4bc2826fcb17dd3937e9c0cfcf4b7a6e9ca2bf7fcf32dac28cf5a2e54eb6aba7068a74ef6349bc1ca3059e07c60f8aaaf5e24757ca330ee555ef2621a1b00c", @generic="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", @typed={0xc, 0x11e, 0x0, 0x0, @u64=0xfffffffe000000}, @nested={0x4, 0x107}, @generic="84bf391e412f423ef41f99f1501d97d649a2add106c9fb0ae2f8a8964d2a709ea3ba56609bf80409e54ba1d736c782d4e01ef62791477e6dc9f801bdc6caea784f9605b218100c55453897fdbf92f436580587d18c0d281dd483c27c959ed4675c06c9f3c0c738e2161c901babdaf483eee4e6b388423b358e96"]}, @typed={0x8, 0x86, 0x0, 0x0, @fd=r0}, @generic="a31c5df5d7148aa3d03792e195c9faf33b3a84e04e717ce25282494313eb692eb5788e2faef2f9fbaba19b5b4ff6f55afeef2126ae0c806b9be048d21a17cabc100b46cbd6788e2da95ad36431da0768d3a9b3a501ae726b2429321aee84cf87a997ff815458c5afcfd1e7fc5b3dcc2eae47fc0a8836fadda1d45f0b39d8898450e92062f99d10611d0181153cd79fd4437e4f2c22c06a12b82785fd469e1339fb48999c9eb8662b13ee3b3bc7f9d7788e2714190b8f30053b3fb32ac08bfa271364d406012079d013a1f606b3da2ff073e1b2952bf5e7ce18123e25783055b2211b9f62a4660f7f1b09e83975203e77e8", @nested={0x1e8, 0x80, 0x0, 0x1, [@nested={0x4, 0x97}, @generic="ba7e57f0ce9c041106751793229955d35a66417a1fb6fea34ae328b59563115453a44a71892d99217d6bb6e4f9c9437976cb883dca7cda9177ccd48194c4c950afee469fccb47d5a56c76ab08c1e43f3799909fff66d7f2a6703a970253d22cf5699898d3f93d2a594aadb8c5f6d6b899d5991a392624583d1a4ef9ad8e1beb5d80ef488c4ecc6769f4af6fbeea9fbe1b96e3bda5e79784e7cc0e6fff9bd45f17a8f4127888db12805368c2856633618e01bd4186f5588615e312ad62edb", @generic="cb2d5db7bce5f96274abd29df2473163b8c5323be857d172063a158e839bf4f1f2b110bad572a3a1f455db7200fe9c6b196466aac0703da21257076b4bce9eccf79b0b7db317a8b550276684e219acca10c3", @generic="5b97063dce1c1bf42662fb783bc43c9c4c9c77b13f2e7f8823d88c36bb6702a5d9741601599bcaad5286b4ac591f6f53e18f9c5fc221a4eeee0096a0c33de15033d74cf9e4c8a66432ce974ad09be18c377a1ea33e2d5173ae9fb2a81bd2d1527f3cd34a2369bb0d5f648548fb2cfee1583bddcf9410c087ee3f2073ee3d5bdf039133b0563dc7c421890e62c80f3e90547fb74f6a9aa5fa6cb85c9fb97442771281afaecd8caaaabcfcc8afecbc14cb92558f0c7827e1b71142adf49f8d68f0956f7db35ecc349790579381", @nested={0x4, 0x67}]}, @nested={0x19, 0x111, 0x0, 0x1, [@generic="b965c87e07a0a172b948b5313a6c2077da", @nested={0x4, 0x3e}]}, @nested={0x18, 0x13b, 0x0, 0x1, [@nested={0x4, 0xd5}, @nested={0x4, 0xb1}, @typed={0x4, 0xc5}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0xfb4f}]}, @generic="fc378d35d8c5f052df2f815d4759d49062c80243fd1aa5006b74fca78a2e1c33ff86d62f0d85c6a9d973d008b25128d489d79e2e6613baf2d93a59599d61e25b0ab89b231762bf7dbebbbc8360bf90d7c8cac251e52df807151ca72b8a3a2df915"]}, 0x62c}, {&(0x7f0000000080)={0xa8, 0x41, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x13, 0x0, 0x0, @pid=r2}, @nested={0x8e, 0x134, 0x0, 0x1, [@typed={0x14, 0x38, 0x0, 0x0, @ipv6=@private2}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x200}, @typed={0x8, 0x98, 0x0, 0x0, @pid=r3}, @generic="4cbd0eeb6311b5682a4307e2c9a5c0c8d3f5d2a60287f6d30a8fd362d53ced78b9417d185d357d68771b80a8fb885e3205709d028c9e7ba7329d76d95cb43a5438fe651c4ad9e08afd0125f9c985863a82882cf5198a68102fcb", @typed={0x4, 0x49}, @nested={0x4, 0x64}]}]}, 0xa8}, {&(0x7f0000000800)={0x26c, 0x41, 0x8, 0x70bd27, 0x25dfdbff, "", [@typed={0x5, 0x98, 0x0, 0x0, @str='\x00'}, @generic="c09ae510b1761196b987ac8edd9aa9153f7d8b22275a79b340fe5e4fbd1319d740d9268af66e3d0faaf2486d59ab42877f6324f207e91f58abf522695ecddfa08ab455e448cfe97e0b4ae80589576463e4b3cd174cd15e475341851a193245c2e3360ad393ed5199f48ad8545daf5e1d596a9a64af275aa3a464cf0a", @generic="4198c69bbf8b40e9d9cf69556cfc135404c005e1959c32eee59690468fea87b75841c941007c07fe4be793fc79a2069410f1cc8a747ffd1bc562df01aad79c433743d07d0ebef636c46c085bcf837eda6d5ffdeae044c7047e1c0f28abe405227b359521ba961f72cc88ab7a8612b86abf83f97b206c27f5c22fa9c62817302ad4469ede84b664f1b0960df370fad2b27dd61a3746f30c81c931dd9f0e4e5a5964d1c3de4bb2ff23437691e48b47c429357f6c6360b8ef847169004d9beb770591eb78e1cb4410898c42fc979fcdd8fc47d544280531bdff62c8d119441d4a172aa09c40", @generic="590006e98a57bdddf16f3a9fa0ce67e59b7c3375276fcb52d93135d24aa3cdf791a1d16e3534f94f241ce41f42361179f4a0411bab66599f01621c52c870439f8029c097726ad439e410c6d76db6405d97c0a533500a64051749791b10915748a3db8d35d4d450d924390a4d6050709332233c264ad8e8e1b458d5d7186b88404f63b12180c5ad70a49d2368329894f3d3ad21", @nested={0x56, 0x5f, 0x0, 0x1, [@generic="ad7bfdb132f31d30ba93e47669b27acd277a1ed4ff986505f862042a579d4e3a9b5a1817d15252990e913e31856c5cb6868bc0e2fe9d", @typed={0x14, 0x151, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x6, 0x132, 0x0, 0x0, @str='nv'}]}, 0x26c}, {&(0x7f0000000a80)={0x110, 0x13, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x8, 0x8a, 0x0, 0x1, [@nested={0x4, 0xe5}]}, @generic="00eb292035bdbd03e616e96a1442a1e7d46a46b28b9c19fbc747d0ab01a492f78c4a7e88adb9c22371b4147fc0b9b1ec48405d4019dd351bbdffa60deb905a6d028d929346ec3ce5745db76cb59d7625e6f3f8b16a4d65c9e5676468af9f923ebb411d3a4ce6386e8316d4f57b9e34fb0f5afe5c098f6067fe64618527a8b092948379a483174072585fee0a9c6552b9b86941c2b5587415442760ec1c8ccf830e363b691155f452ce74a19027804bb579a7f13469041720353a9ca2bbd524cd9e760d10364a2b8e2bd7190048e6fc0b86968983ae51382b311a867771680052be2ae4f0800c940c349eacc1e286c1155f47bc17cef7209f"]}, 0x110}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r10}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r13, r14, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x68, 0x80}, 0xc4) 15.739360216s ago: executing program 2 (id=3346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) (async, rerun: 32) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, 0x0, 0x0}, 0x20) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000040)=0xb, 0x12) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async, rerun: 32) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (rerun: 32) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18, 0x4014}, 0x2c0408d0) 15.60698616s ago: executing program 1 (id=3347): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xc8f4, 0x77}}]}]}]}, 0x48}}, 0x24040800) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 15.454513175s ago: executing program 2 (id=3348): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050850) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 15.372862674s ago: executing program 1 (id=3349): r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create(0x5) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xf}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000) 15.349795446s ago: executing program 2 (id=3350): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r7], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x888) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, r2, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x4, 0x700000000000000, 0x0, 0xc0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000e8f9756985000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x90) 15.109906828s ago: executing program 1 (id=3351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x9b, 0x0, {{0x2b, 0x4, 0x3, 0x3, 0xac, 0x67, 0x0, 0x1, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_prespec={0x44, 0x34, 0x6e, 0x3, 0x9, [{@private=0xa010100, 0xf}, {@loopback, 0xfffffab6}, {@multicast1, 0xfffffff7}, {@broadcast, 0x7dcf}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@local, 0x100}]}, @cipso={0x86, 0x18, 0x2, [{0x2, 0x12, "57e987b8e9e78ed1e5437c81ede29568"}]}, @timestamp={0x44, 0x18, 0x68, 0x0, 0x5, [0x3, 0x6c4, 0x100, 0x7b, 0xffffffff]}, @generic={0x94, 0xf, "558fdddc16b79e995b701492f5"}, @ssrr={0x89, 0x1b, 0x3a, [@broadcast, @remote, @private=0xa0100fe, @broadcast, @remote, @private=0xa010102]}, @generic={0x86, 0x4, "f09e"}, @ra={0x94, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x4008802) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000580)="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", 0x5ac}], 0x1}}], 0x2, 0x400c404) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x167) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050e72210281ac141440e0", 0x0, 0xd, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0xac) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, &(0x7f0000000040), r10, 0x0, 0x800000000ff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x0, 0x0, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, r10}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x19, 0x5, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20040040) ioctl$FS_IOC_GETFSLABEL(r10, 0x81009431, &(0x7f0000000500)) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdff095a34ed81ac57c", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r5, 0x1, 0x258a3ddf6f8853e8, &(0x7f0000000000), 0x4) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r11, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/223, 0xdf}, 0x8}], 0x1, 0x20010060, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000009500000000f4ffffffffffffff00000000000000fcffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0xe}, 0x94) 2.075572915s ago: executing program 32 (id=3328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r4, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r2, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r2, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x8, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) 2.051107131s ago: executing program 33 (id=3331): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0xb27ab816dd4ebb64}, 0x4040000) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0xb27ab816dd4ebb64}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="379e0a70c6143dd0f2a0e930c35fda437917f6eed5c4870e9ef9d354b27b601617befd074e156476dd6b3b3283999d4effda0f94ef2d5e2425bf66cb8ca8bb837a4bdf6c97c0fe8f1dce2d20780e61e339495751483416b149ec83e1d94e0fd0adb403ac03247a6689223b229f8d284eabe49a7b6a13c0a4e3f5604bf7db4539299e8ab5749dbcb06eb65bbd462965a8755d1bd9806a7f438efc9ff403a77ffd7ef0298a9500000000000000000000000000002f9f6d47ac2f681d5e2d65cf6d3e5d7fe4b7a3775c36e7f4df152e085cfc3368e08f144a3824c2c29b23b92da4a3199b2e1af7a5cc647d6e04", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000000c0005800700010069620000"], 0x20}}, 0x0) 24.961601ms ago: executing program 34 (id=3351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x9b, 0x0, {{0x2b, 0x4, 0x3, 0x3, 0xac, 0x67, 0x0, 0x1, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_prespec={0x44, 0x34, 0x6e, 0x3, 0x9, [{@private=0xa010100, 0xf}, {@loopback, 0xfffffab6}, {@multicast1, 0xfffffff7}, {@broadcast, 0x7dcf}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@local, 0x100}]}, @cipso={0x86, 0x18, 0x2, [{0x2, 0x12, "57e987b8e9e78ed1e5437c81ede29568"}]}, @timestamp={0x44, 0x18, 0x68, 0x0, 0x5, [0x3, 0x6c4, 0x100, 0x7b, 0xffffffff]}, @generic={0x94, 0xf, "558fdddc16b79e995b701492f5"}, @ssrr={0x89, 0x1b, 0x3a, [@broadcast, @remote, @private=0xa0100fe, @broadcast, @remote, @private=0xa010102]}, @generic={0x86, 0x4, "f09e"}, @ra={0x94, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x4008802) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000580)="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", 0x5ac}], 0x1}}], 0x2, 0x400c404) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x167) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050e72210281ac141440e0", 0x0, 0xd, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0xac) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, &(0x7f0000000040), r10, 0x0, 0x800000000ff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x0, 0x0, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, r10}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x19, 0x5, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20040040) ioctl$FS_IOC_GETFSLABEL(r10, 0x81009431, &(0x7f0000000500)) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdff095a34ed81ac57c", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r5, 0x1, 0x258a3ddf6f8853e8, &(0x7f0000000000), 0x4) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r11, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/223, 0xdf}, 0x8}], 0x1, 0x20010060, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000009500000000f4ffffffffffffff00000000000000fcffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0xe}, 0x94) 0s ago: executing program 35 (id=3350): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r7], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x888) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, r2, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x4, 0x700000000000000, 0x0, 0xc0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000e8f9756985000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x90) kernel console output (not intermixed with test programs): 08][T12098] bridge4: entered allmulticast mode [ 222.264530][ T30] audit: type=1804 audit(1766261920.678:2): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1666" name="/newroot/292/cgroup.controllers" dev="tmpfs" ino=1500 res=1 errno=0 [ 222.288093][ T30] audit: type=1800 audit(1766261920.678:3): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1666" name="cgroup.controllers" dev="tmpfs" ino=1500 res=0 errno=0 [ 223.233298][T12142] xt_ecn: cannot match TCP bits for non-tcp packets [ 223.632365][T12169] xt_recent: Unsupported userspace flags (000000b1) [ 224.182769][T12194] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 224.237605][T12200] __nla_validate_parse: 8 callbacks suppressed [ 224.237621][T12200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1695'. [ 224.280756][T12206] netlink: 'syz.1.1696': attribute type 39 has an invalid length. [ 224.320526][T12201] bond11: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 224.347540][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1693'. [ 224.356662][T12201] bond11: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 224.369411][T12201] bond11: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 224.379205][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 224.460942][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1698'. [ 224.517008][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 224.564751][T12226] vlan1: entered allmulticast mode [ 224.607052][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 224.610070][T12226] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 224.707124][T12228] syzkaller0: entered promiscuous mode [ 224.716272][T12228] syzkaller0: entered allmulticast mode [ 224.829942][T12245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1707'. [ 224.922164][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 224.953448][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 225.027422][T12256] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 225.056207][T12262] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 225.173099][T12270] netlink: 'syz.1.1713': attribute type 1 has an invalid length. [ 225.209248][T12271] can: request_module (can-proto-0) failed. [ 225.392396][T12281] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 225.411987][T12287] !€ÿ: renamed from bond_slave_0 [ 225.526923][T12281] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.653496][T12302] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 225.662834][T12302] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1725'. [ 225.709926][T12292] veth8: entered promiscuous mode [ 225.719917][T12292] bond7: (slave veth8): Enslaving as an active interface with an up link [ 225.850956][T12310] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 225.914191][T12310] veth7: entered promiscuous mode [ 226.158178][T12337] netlink: 'syz.3.1733': attribute type 23 has an invalid length. [ 226.372089][T12354] IPv6: sit1: Disabled Multicast RS [ 226.393474][T12354] sit1: entered allmulticast mode [ 226.434871][T12360] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 226.773405][T12387] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 226.891823][T12396] netlink: 'syz.2.1752': attribute type 2 has an invalid length. [ 226.900597][T12396] netlink: 'syz.2.1752': attribute type 2 has an invalid length. [ 226.927685][T12389] nbd: must specify an index to disconnect [ 226.939830][T12396] syzkaller0: entered promiscuous mode [ 226.965965][T12396] syzkaller0: entered allmulticast mode [ 227.202656][T12413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.245792][T12419] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 227.277254][T12417] sctp: [Deprecated]: syz.4.1758 (pid 12417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.277254][T12417] Use struct sctp_sack_info instead [ 227.773588][T12438] gre0: entered promiscuous mode [ 227.787882][T12438] gre0: entered allmulticast mode [ 227.800597][T12438] netlink: 'syz.0.1767': attribute type 16 has an invalid length. [ 227.862520][T12448] openvswitch: netlink: Invalid VLAN frame [ 227.932766][T12448] bridge0: port 3(batadv1) entered blocking state [ 227.960667][T12448] bridge0: port 3(batadv1) entered disabled state [ 227.970857][T12448] batadv1: entered allmulticast mode [ 227.997432][T12448] batadv1: entered promiscuous mode [ 228.286767][T12468] tipc: Enabled bearer , priority 10 [ 228.408197][ T9084] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 228.417910][ T9084] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 228.475784][T12473] vxcan2: entered allmulticast mode [ 228.704631][T12487] IPVS: length: 11 != 8 [ 228.758904][T12488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.952097][T12506] set match dimension is over the limit! [ 229.229090][T12527] syzkaller0: entered promiscuous mode [ 229.234588][T12527] syzkaller0: entered allmulticast mode [ 229.242383][ T9088] syzkaller0: tun_net_xmit 70 [ 229.249425][T12527] syzkaller0: tun_net_xmit 14 [ 229.273774][T12534] __nla_validate_parse: 26 callbacks suppressed [ 229.273791][T12534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1798'. [ 229.277211][T12532] tipc: Enabled bearer , priority 0 [ 229.282688][T12534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1798'. [ 229.299122][T12532] syzkaller0: entered promiscuous mode [ 229.313489][T12532] syzkaller0: entered allmulticast mode [ 229.333084][T12534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1798'. [ 229.354435][T12532] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 229.397662][T12532] tipc: Resetting bearer [ 229.406235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.430089][T12529] tipc: Resetting bearer [ 229.462035][T12529] tipc: Disabling bearer [ 229.687063][T12557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.715258][T12553] validate_nla: 2 callbacks suppressed [ 229.715274][T12553] netlink: 'syz.4.1806': attribute type 3 has an invalid length. [ 229.730562][T12553] netlink: 'syz.4.1806': attribute type 1 has an invalid length. [ 229.915240][T12565] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1807'. [ 230.008380][T12572] netlink: 352 bytes leftover after parsing attributes in process `syz.4.1809'. [ 230.009623][T12545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1803'. [ 230.128336][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 230.229188][T12588] netlink: 'syz.4.1811': attribute type 1 has an invalid length. [ 230.343212][T12592] syz.1.1813: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 230.367142][T12592] CPU: 0 UID: 0 PID: 12592 Comm: syz.1.1813 Not tainted syzkaller #0 PREEMPT(full) [ 230.367174][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.367192][T12592] Call Trace: [ 230.367200][T12592] [ 230.367208][T12592] dump_stack_lvl+0x189/0x250 [ 230.367237][T12592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.367257][T12592] ? __pfx__printk+0x10/0x10 [ 230.367281][T12592] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 230.367301][T12592] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 230.367322][T12592] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 230.367343][T12592] warn_alloc+0x214/0x310 [ 230.367363][T12592] ? stack_trace_save+0x9c/0xe0 [ 230.367390][T12592] ? __pfx_warn_alloc+0x10/0x10 [ 230.367415][T12592] ? kasan_save_track+0x4f/0x80 [ 230.367431][T12592] ? kasan_save_track+0x3e/0x80 [ 230.367446][T12592] ? __kasan_kmalloc+0x93/0xb0 [ 230.367462][T12592] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 230.367478][T12592] ? xskq_create+0x56/0x170 [ 230.367500][T12592] ? xsk_setsockopt+0x4dc/0x8d0 [ 230.367520][T12592] ? do_sock_setsockopt+0x17c/0x1b0 [ 230.367537][T12592] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 230.367555][T12592] ? do_syscall_64+0xfa/0xf80 [ 230.367577][T12592] __vmalloc_node_range_noprof+0x134/0x16a0 [ 230.367627][T12592] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.367651][T12592] ? __kasan_kmalloc+0x93/0xb0 [ 230.367679][T12592] vmalloc_user_noprof+0xad/0xf0 [ 230.367697][T12592] ? xskq_create+0xbf/0x170 [ 230.367721][T12592] xskq_create+0xbf/0x170 [ 230.367747][T12592] xsk_init_queue+0xb0/0x110 [ 230.367773][T12592] xsk_setsockopt+0x4dc/0x8d0 [ 230.367799][T12592] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.367824][T12592] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.367847][T12592] ? aa_sock_opt_perm+0xff/0x1a0 [ 230.367871][T12592] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 230.367887][T12592] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.367908][T12592] do_sock_setsockopt+0x17c/0x1b0 [ 230.367932][T12592] __x64_sys_setsockopt+0x13f/0x1b0 [ 230.367957][T12592] do_syscall_64+0xfa/0xf80 [ 230.367976][T12592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.367993][T12592] ? clear_bhb_loop+0x60/0xb0 [ 230.368013][T12592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.368028][T12592] RIP: 0033:0x7f060478f749 [ 230.368044][T12592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.368057][T12592] RSP: 002b:00007f0605663038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.368076][T12592] RAX: ffffffffffffffda RBX: 00007f06049e5fa0 RCX: 00007f060478f749 [ 230.368088][T12592] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 230.368098][T12592] RBP: 00007f0604813f91 R08: 0000000000000004 R09: 0000000000000000 [ 230.368109][T12592] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.368120][T12592] R13: 00007f06049e6038 R14: 00007f06049e5fa0 R15: 00007fff738e46f8 [ 230.368156][T12592] [ 230.368231][T12592] Mem-Info: [ 230.509211][T12602] netlink: 'syz.4.1811': attribute type 1 has an invalid length. [ 230.546146][T12592] active_anon:6127 inactive_anon:0 isolated_anon:0 [ 230.546146][T12592] active_file:2693 inactive_file:39931 isolated_file:0 [ 230.546146][T12592] unevictable:768 dirty:63 writeback:0 [ 230.546146][T12592] slab_reclaimable:11680 slab_unreclaimable:109293 [ 230.546146][T12592] mapped:32275 shmem:1359 pagetables:1203 [ 230.546146][T12592] sec_pagetables:0 bounce:0 [ 230.546146][T12592] kernel_misc_reclaimable:0 [ 230.546146][T12592] free:1309082 free_pcp:21959 free_cma:0 [ 230.647064][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1816'. [ 230.653115][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1811'. [ 230.665664][T12592] Node 0 active_anon:24508kB inactive_anon:0kB active_file:10772kB inactive_file:159524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133100kB dirty:248kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14772kB pagetables:4764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.691536][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1811'. [ 230.730500][T12592] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.815227][T12592] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.893275][T12592] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 230.899487][T12592] Node 0 DMA32 free:1327480kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24420kB inactive_anon:0kB active_file:10772kB inactive_file:159524kB unevictable:1536kB writepending:248kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:70352kB local_pcp:46248kB free_cma:0kB [ 230.933520][T12592] lowmem_reserve[]: 0 0 1 1 1 [ 230.938346][T12592] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.948443][T12588] bond12: entered promiscuous mode [ 230.977849][T12592] lowmem_reserve[]: 0 0 0 0 0 [ 230.984925][T12592] Node 1 Normal free:3896696kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14144kB local_pcp:8640kB free_cma:0kB [ 231.052880][T12588] 8021q: adding VLAN 0 to HW filter on device bond12 [ 231.059894][T12592] lowmem_reserve[]: 0 0 0 0 0 [ 231.071166][T12592] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 231.103375][T12597] bond12: (slave bridge8): making interface the new active one [ 231.135983][T12597] bridge8: entered promiscuous mode [ 231.142609][T12597] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 231.158982][T12592] Node 0 DMA32: 3296*4kB (UME) 2259*8kB (UME) 1031*16kB (UME) 153*32kB (UME) 31*64kB (ME) 6*128kB (UME) 18*256kB (UME) 6*512kB (UME) 1*1024kB (M) 4*2048kB (UM) 307*4096kB (M) = 1329768kB [ 231.182226][T12601] ip6gre2: entered allmulticast mode [ 231.188509][T12592] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 231.200896][T12592] Node 1 Normal: 150*4kB (UME) 42*8kB (UME) 45*16kB (UME) 120*32kB (UME) 38*64kB (UME) 9*128kB (UME) 6*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3896696kB [ 231.210954][T12608] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 231.224569][T12592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.244546][T12592] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.292131][T12616] ip6gre2: entered allmulticast mode [ 231.295964][T12592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.309727][T12592] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.321824][T12592] 43980 total pagecache pages [ 231.358662][T12592] 0 pages in swap cache [ 231.362852][T12592] Free swap = 124996kB [ 231.391992][T12592] Total swap = 124996kB [ 231.397407][T12592] 2097051 pages RAM [ 231.401228][T12592] 0 pages HighMem/MovableOnly [ 231.407672][T12592] 425122 pages reserved [ 231.411850][T12592] 0 pages cma reserved [ 231.498975][T12629] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.535025][T12631] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.570238][T12631] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.658450][T12631] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.700774][T12631] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.780962][T12631] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.808310][T12631] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.919583][T12655] vxcan0: entered allmulticast mode [ 231.969341][T12631] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.979330][T12631] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.988197][T12668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.137729][ T154] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.163210][T12678] netlink: 'syz.4.1838': attribute type 5 has an invalid length. [ 232.163974][ T154] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.194413][ T154] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.224032][ T154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.266932][ T154] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.275160][ T154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.319090][ T154] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.328638][ T154] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.344000][T12685] openvswitch: netlink: Actions may not be safe on all matching packets [ 232.405146][T12691] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 232.657923][T12708] tipc: Enabled bearer , priority 0 [ 232.788201][T12708] tipc: Resetting bearer [ 233.442841][T12707] tipc: Disabling bearer [ 233.472459][T12767] syzkaller0: entered promiscuous mode [ 233.490199][T12767] syzkaller0: entered allmulticast mode [ 233.910056][T12803] netlink: 'syz.2.1874': attribute type 2 has an invalid length. [ 234.147334][T12813] vcan0 (unregistering): left allmulticast mode [ 234.427826][T12838] __nla_validate_parse: 16 callbacks suppressed [ 234.427838][T12838] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1884'. [ 234.793256][T12866] netlink: 'syz.1.1894': attribute type 12 has an invalid length. [ 234.807185][T12866] netlink: 'syz.1.1894': attribute type 29 has an invalid length. [ 234.826120][T12866] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1894'. [ 234.837781][T12866] netlink: 'syz.1.1894': attribute type 2 has an invalid length. [ 234.845823][T12866] netlink: 'syz.1.1894': attribute type 3 has an invalid length. [ 234.854707][T12866] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1894'. [ 235.021158][T12882] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 235.033374][T12875] bond10: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 235.047940][T12875] bond10: entered promiscuous mode [ 235.053095][T12875] bond10: entered allmulticast mode [ 235.054807][T12873] sctp: [Deprecated]: syz.0.1897 (pid 12873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.054807][T12873] Use struct sctp_sack_info instead [ 235.061576][T12875] 8021q: adding VLAN 0 to HW filter on device bond10 [ 235.276950][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 235.462428][T12912] can: request_module (can-proto-0) failed. [ 235.998285][T12967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.429573][T12999] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 236.582068][T12999] bond11 (unregistering): Released all slaves [ 236.626140][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 236.637808][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'. [ 236.665402][T13001] ip6tnl4: entered promiscuous mode [ 236.672721][T13001] ip6tnl4: entered allmulticast mode [ 236.701494][T13011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.718598][T13011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.728401][T13011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.737992][T13011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.894478][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1938'. [ 237.042866][T13038] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1941'. [ 237.089116][T13045] ipt_REJECT: TCP_RESET invalid for non-tcp [ 237.313172][T13064] vxcan3: entered allmulticast mode [ 237.359172][T13066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1947'. [ 237.370753][T13068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1947'. [ 237.506372][T13072] Bluetooth: MGMT ver 1.23 [ 237.577593][T13073] veth5: entered allmulticast mode [ 237.686594][T13089] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 237.962049][T13085] lo speed is unknown, defaulting to 1000 [ 238.203787][T13109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.237205][T13109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 238.263442][T13109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.490890][T13109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.510665][T13126] openvswitch: netlink: IP tunnel dst address not specified [ 238.516880][T13109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 238.529642][T13109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.694946][T13109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.707784][T13109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 238.725422][T13109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.755061][T13130] tipc: Enabled bearer , priority 0 [ 238.773447][T13130] syzkaller0: entered promiscuous mode [ 238.786370][T13130] syzkaller0: entered allmulticast mode [ 238.818829][T13130] tipc: Resetting bearer [ 238.832015][T13128] tipc: Resetting bearer [ 238.871235][T13128] tipc: Disabling bearer [ 238.894415][T13109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.905799][T13109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 238.918563][T13109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.006336][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 239.168361][T13143] netlink: 'syz.0.1967': attribute type 10 has an invalid length. [ 239.187032][T13143] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 239.197281][T13143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.261738][ T9083] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.289142][ T9083] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 239.297633][ T9083] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.318541][ T9083] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.347254][ T9083] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 239.356643][ T9083] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.367215][T13155] netlink: 'syz.0.1971': attribute type 5 has an invalid length. [ 239.385524][ T9083] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.417371][ T9083] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 239.425846][ T9083] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.500238][ T9083] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.523514][T13162] __nla_validate_parse: 7 callbacks suppressed [ 239.523532][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 239.539961][ T9083] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 239.553772][ T9083] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.563190][T13162] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 239.581592][T13157] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1972'. [ 239.610173][T13160] tipc: Started in network mode [ 239.617326][T13160] tipc: Node identity b6b252cce988, cluster identity 4711 [ 239.624638][T13160] tipc: Enabled bearer , priority 0 [ 239.726307][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.733569][T13160] syzkaller0: entered promiscuous mode [ 239.739749][T13160] syzkaller0: entered allmulticast mode [ 239.751564][T13160] tipc: Resetting bearer [ 239.764173][T13159] tipc: Resetting bearer [ 239.790387][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1975'. [ 239.911939][T13179] siw: device registration error -23 [ 240.055278][T13188] Cannot find set identified by id 1 to match [ 241.248397][T13159] tipc: Disabling bearer [ 241.323344][ T107] tipc: Node number set to 1597657804 [ 241.353084][T13205] ip6t_REJECT: ECHOREPLY is not supported [ 241.377334][T13206] ip6t_REJECT: ECHOREPLY is not supported [ 241.508095][T13215] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 241.911579][T13244] netlink: 'syz.0.1995': attribute type 4 has an invalid length. [ 241.969803][T13244] netlink: 'syz.0.1995': attribute type 4 has an invalid length. [ 242.084678][T13253] vlan2: entered promiscuous mode [ 242.090338][T13253] erspan0: entered promiscuous mode [ 242.170482][T13257] netlink: 'syz.1.1999': attribute type 13 has an invalid length. [ 242.240982][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2001'. [ 242.507957][T13278] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 242.557702][T13282] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2007'. [ 242.682924][T13283] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.729572][T13283] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 242.766836][T13283] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 242.786960][T13290] netlink: 'syz.0.2008': attribute type 2 has an invalid length. [ 242.796278][T13290] netlink: 'syz.0.2008': attribute type 8 has an invalid length. [ 242.829940][T13290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2008'. [ 243.065018][T13303] netlink: 'syz.1.2013': attribute type 9 has an invalid length. [ 243.171581][T13305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2013'. [ 243.213533][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2013'. [ 243.266122][T13303] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 243.314168][T13303] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2013'. [ 243.386455][T13303] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2013'. [ 243.775551][T13347] geneve3: entered promiscuous mode [ 243.784008][ T9083] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 243.804734][ T9083] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 243.823116][ T9083] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 243.841690][ T9083] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 244.728714][T13387] __nla_validate_parse: 2 callbacks suppressed [ 244.728733][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2030'. [ 244.805036][T13394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2031'. [ 244.916908][T13402] netlink: 'syz.1.2034': attribute type 39 has an invalid length. [ 244.960780][T13408] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.038497][T13404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2035'. [ 245.071132][T13404] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 245.098334][T13404] gretap1: entered promiscuous mode [ 245.104240][T13404] gretap1: entered allmulticast mode [ 245.112523][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 245.129878][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 245.257075][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 245.299606][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 245.337975][T13430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.430906][T13420] hsr_slave_1 (unregistering): left promiscuous mode [ 245.847165][T13461] netlink: 'syz.2.2054': attribute type 63 has an invalid length. [ 246.119108][T13479] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2060'. [ 246.218321][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2062'. [ 246.303858][T13488] ipvlan0: mtu less than device minimum [ 246.328834][T13490] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2064'. [ 246.590744][ T8090] udevd[8090]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 246.673382][T13511] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.754346][T13515] openvswitch: netlink: Missing valid actions attribute. [ 246.783048][T13515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.804711][T13515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.828701][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.020780][T13518] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 247.155321][T13533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.480319][T13564] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.487164][T13564] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 247.744040][T13584] validate_nla: 2 callbacks suppressed [ 247.744058][T13584] netlink: 'syz.1.2089': attribute type 21 has an invalid length. [ 247.773744][T13584] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 247.887987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 248.046882][T13602] bond11: option min_links: invalid value (18446744073709551614) [ 248.054783][T13602] bond11: option min_links: allowed values 0 - 2147483647 [ 248.078171][T13602] bond11 (unregistering): Released all slaves [ 248.333262][T13626] erspan0: entered allmulticast mode [ 248.398014][T13629] netlink: 'syz.4.2099': attribute type 1 has an invalid length. [ 248.462810][T13634] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 248.554372][T13634] 8021q: adding VLAN 0 to HW filter on device bond9 [ 248.579214][T13642] bond9: (slave geneve3): making interface the new active one [ 248.589203][T13642] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 248.925988][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 249.328147][T13691] gtp1: entered promiscuous mode [ 249.379203][T13697] netlink: 'syz.1.2125': attribute type 10 has an invalid length. [ 249.379203][T13696] netlink: 'syz.1.2125': attribute type 10 has an invalid length. [ 249.390513][T13697] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.431475][T13697] bridge_slave_1: left allmulticast mode [ 249.438030][T13697] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.451677][T13697] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 249.576676][T13703] syzkaller0: entered promiscuous mode [ 249.582991][T13703] syzkaller0: entered allmulticast mode [ 249.673436][T13709] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.220138][T13745] netlink: 'syz.4.2143': attribute type 8 has an invalid length. [ 250.297056][T13750] __nla_validate_parse: 76 callbacks suppressed [ 250.297073][T13750] netlink: 320 bytes leftover after parsing attributes in process `syz.4.2144'. [ 251.407146][T13753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2145'. [ 251.423034][T13756] netlink: 'syz.4.2147': attribute type 4 has an invalid length. [ 251.439703][T13754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'. [ 251.457482][T13759] netlink: 'syz.0.2148': attribute type 1 has an invalid length. [ 251.494175][T13754] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 251.511052][T13754] bond11 (unregistering): Released all slaves [ 251.560858][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 251.603928][T13759] 8021q: adding VLAN 0 to HW filter on device bond9 [ 251.614964][T13765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 251.645651][T13766] bond9: (slave geneve4): making interface the new active one [ 251.657018][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 251.657260][T13766] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 251.682514][ T9083] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.693332][ T9083] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.790270][ T9083] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.818990][ T9083] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 252.062091][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 252.088722][T13812] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 252.771335][T13856] tipc: Enabled bearer , priority 0 [ 252.801727][T13856] syzkaller0: entered promiscuous mode [ 252.830486][T13856] syzkaller0: entered allmulticast mode [ 252.910655][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 252.919874][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 253.150511][T13853] tipc: Resetting bearer [ 253.191531][T13853] tipc: Disabling bearer [ 253.265650][T13878] bond13: option miimon: invalid value (18446744073709551585) [ 253.292390][T13878] bond13: option miimon: allowed values 0 - 2147483647 [ 253.324125][T13878] bond13 (unregistering): Released all slaves [ 253.410664][T13898] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 253.621086][T13912] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2186'. [ 253.929852][T13929] syzkaller1: entered promiscuous mode [ 253.935519][T13929] syzkaller1: entered allmulticast mode [ 254.035436][T13942] syzkaller0: entered promiscuous mode [ 254.041167][T13942] syzkaller0: entered allmulticast mode [ 254.541121][T13969] net_ratelimit: 5 callbacks suppressed [ 254.541139][T13969] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 254.777145][T13988] ipt_REJECT: TCP_RESET invalid for non-tcp [ 255.031166][T14014] delete_channel: no stack [ 255.181993][T14028] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 255.244312][T14030] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 255.393073][T14037] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 255.628681][T14050] __nla_validate_parse: 14 callbacks suppressed [ 255.628700][T14050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2226'. [ 255.735015][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.741855][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.831661][T14063] netlink: 'syz.4.2231': attribute type 32 has an invalid length. [ 255.848557][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2231'. [ 255.902684][T14063] bond13: option coupled_control: invalid value (52) [ 255.919232][T14076] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.919779][T14063] bond13 (unregistering): Released all slaves [ 256.070095][T14067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2233'. [ 256.125357][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 256.216207][T14095] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2240'. [ 256.304788][T14101] sctp: [Deprecated]: syz.0.2242 (pid 14101) Use of int in max_burst socket option. [ 256.304788][T14101] Use struct sctp_assoc_value instead [ 256.321799][T14101] x_tables: duplicate underflow at hook 3 [ 256.560614][T14120] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2249'. [ 256.629319][T14118] : entered promiscuous mode [ 256.660028][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2251'. [ 256.748640][T14136] netlink: 'syz.1.2253': attribute type 1 has an invalid length. [ 256.796532][T14136] macvlan2: entered promiscuous mode [ 256.801856][T14136] macvlan2: entered allmulticast mode [ 256.810387][T14136] bond10: entered promiscuous mode [ 256.816393][T14136] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.826731][T14136] bond10: left promiscuous mode [ 256.852598][T14139] syzkaller0: entered promiscuous mode [ 256.858328][T14139] syzkaller0: entered allmulticast mode [ 256.875564][T14139] tipc: Enabled bearer , priority 0 [ 257.095494][T14152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 257.174859][T14156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 257.198312][T14156] geneve2: entered promiscuous mode [ 257.233754][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 257.401371][T14169] macsec1: entered promiscuous mode [ 257.409895][T14169] macsec1: entered allmulticast mode [ 257.416725][T14169] bond13: (slave macsec1): Error -34 calling dev_set_mtu [ 257.462949][ T9168] IPVS: starting estimator thread 0... [ 257.566083][T14176] IPVS: using max 37 ests per chain, 88800 per kthread [ 257.684479][T14138] tipc: Resetting bearer [ 257.753072][T14138] tipc: Disabling bearer [ 257.941684][T14199] nbd: device at index 4 is going down [ 258.119174][T14215] netlink: 'syz.1.2277': attribute type 1 has an invalid length. [ 258.154486][T14200] udevd[14200]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 258.166076][T14217] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 258.168623][T14213] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 258.194330][T14225] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 258.219364][T14206] udevd[14206]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 258.236151][T14227] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 258.266898][T14223] bond11: (slave gretap3): making interface the new active one [ 258.272035][T14228] nbd: must specify a size in bytes for the device [ 258.275316][T14223] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 258.359926][T14225] 8021q: adding VLAN 0 to HW filter on device bond12 [ 258.401260][T14239] 8021q: adding VLAN 0 to HW filter on device bond12 [ 258.408723][T14239] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 258.420318][T14239] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 258.445659][T14236] tipc: Enabling of bearer rejected, failed to enable media [ 258.455629][T14242] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 258.529712][T14227] macvlan0: entered promiscuous mode [ 258.544525][T14227] macvlan0: entered allmulticast mode [ 258.571583][T14225] vlan2: entered allmulticast mode [ 258.577344][T14225] bond12: entered allmulticast mode [ 258.638364][T14227] vlan2: entered allmulticast mode [ 258.864596][T14265] bond0: left promiscuous mode [ 258.869752][T14265] bond0: left allmulticast mode [ 258.985418][T14278] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 258.990861][T14275] syzkaller0: entered promiscuous mode [ 259.000453][T14275] syzkaller0: entered allmulticast mode [ 259.205390][T14292] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.223282][T14293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.434933][T14305] IPVS: set_ctl: invalid protocol: 115 172.20.20.25:20002 [ 259.516601][T14311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.545288][T14311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 260.395435][T14384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.402888][T14383] netlink: 'syz.2.2330': attribute type 10 has an invalid length. [ 260.446452][T14383] veth0_virt_wifi: entered allmulticast mode [ 260.510764][T14383] team0: Port device veth0_virt_wifi added [ 260.731356][T14411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.938920][T14428] __nla_validate_parse: 22 callbacks suppressed [ 260.938938][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'. [ 261.058964][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2344'. [ 261.078661][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2344'. [ 261.225172][T14441] bond12 (unregistering): Released all slaves [ 261.251320][T14448] delete_channel: no stack [ 261.424419][T14459] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2349'. [ 261.471643][T14463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2350'. [ 261.591579][T14466] syzkaller0: entered promiscuous mode [ 261.597459][T14466] syzkaller0: entered allmulticast mode [ 261.711824][T14466] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2351'. [ 261.755243][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2354'. [ 261.833797][T14479] syzkaller1: entered promiscuous mode [ 261.839894][T14479] syzkaller1: entered allmulticast mode [ 261.856894][T14479] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2355'. [ 261.904144][T14485] netlink: 'syz.0.2354': attribute type 10 has an invalid length. [ 261.974432][T14488] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 262.003289][T14488] bond10: (slave vcan1): Error -95 calling set_mac_address [ 262.085511][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2361'. [ 262.095047][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2361'. [ 262.213870][T14506] syzkaller1: entered promiscuous mode [ 262.219925][T14506] syzkaller1: entered allmulticast mode [ 263.257570][ T9168] page_pool_release_retry() stalled pool shutdown: id 34, 1 inflight 60 sec [ 263.692224][T14567] team0: Device macvlan3 failed to change mtu [ 263.835014][T14577] syzkaller1: entered promiscuous mode [ 263.854850][T14577] syzkaller1: entered allmulticast mode [ 264.156260][T14594] bridge_slave_1: left allmulticast mode [ 264.178913][T14594] bridge_slave_1: left promiscuous mode [ 264.200101][T14594] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.236877][T14594] bridge_slave_0: left allmulticast mode [ 264.246444][T14594] bridge_slave_0: left promiscuous mode [ 264.252382][T14594] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.644069][T14628] nbd: couldn't find device at index 0 [ 264.677662][T14628] xt_addrtype: ipv6 does not support BROADCAST matching [ 264.774699][T14631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.100053][T14653] IPVS: set_ctl: invalid protocol: 137 172.20.20.48:20000 [ 265.194398][T14667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.325620][T14675] netlink: 'syz.0.2416': attribute type 13 has an invalid length. [ 265.398393][T14682] team0: Cannot enslave team device to itself [ 265.808402][T14706] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 265.869315][T14706] bond13: (slave bridge4): making interface the new active one [ 265.889994][T14706] bond13: (slave bridge4): Enslaving as an active interface with an up link [ 265.944689][T14712] veth7: entered allmulticast mode [ 266.211925][T14721] __nla_validate_parse: 28 callbacks suppressed [ 266.211942][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2431'. [ 266.248320][T14721] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2431'. [ 266.274586][T14721] netlink: 'syz.1.2431': attribute type 9 has an invalid length. [ 266.299116][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'. [ 266.362694][T14728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2433'. [ 266.488805][T14737] netlink: 'syz.1.2435': attribute type 12 has an invalid length. [ 266.531008][T14737] netlink: 'syz.1.2435': attribute type 29 has an invalid length. [ 266.561768][T14737] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2435'. [ 266.606291][T14737] netlink: 'syz.1.2435': attribute type 2 has an invalid length. [ 266.614050][T14737] netlink: 'syz.1.2435': attribute type 3 has an invalid length. [ 266.639404][T14737] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2435'. [ 266.734375][T14746] netlink: 'syz.3.2438': attribute type 11 has an invalid length. [ 266.798628][T14746] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2438'. [ 266.879526][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 267.230312][T14776] netlink: 'syz.2.2449': attribute type 1 has an invalid length. [ 267.291823][T14776] bond9: (slave geneve3): making interface the new active one [ 267.300744][T14776] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 267.310333][ T154] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 267.323998][ T154] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 267.348412][ T154] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 267.358204][ T154] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 267.439167][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2452'. [ 267.825240][T14819] xt_TCPMSS: Only works on TCP SYN packets [ 267.864672][T14820] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2460'. [ 268.064548][T14829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.090975][T14829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.166587][T14835] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 268.191958][T14835] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 268.247386][T14837] netlink: 'syz.3.2469': attribute type 29 has an invalid length. [ 268.256469][T14837] netlink: 'syz.3.2469': attribute type 29 has an invalid length. [ 268.264885][T14837] netlink: 'syz.3.2469': attribute type 29 has an invalid length. [ 268.274115][T14837] netlink: 'syz.3.2469': attribute type 29 has an invalid length. [ 268.284074][T14837] netlink: 'syz.3.2469': attribute type 29 has an invalid length. [ 268.292950][T14837] netlink: 'syz.3.2469': attribute type 29 has an invalid length. [ 268.301629][T14837] netlink: 'syz.3.2469': attribute type 29 has an invalid length. [ 268.373840][T14847] netlink: 'syz.3.2473': attribute type 23 has an invalid length. [ 268.585619][T14858] lo speed is unknown, defaulting to 1000 [ 269.008738][T14887] bond11: option mode: invalid value (133) [ 269.027624][T14887] bond11 (unregistering): Released all slaves [ 269.262232][T14901] netlink: 'syz.3.2486': attribute type 39 has an invalid length. [ 269.387227][T14901] syz_tun (unregistering): left promiscuous mode [ 269.650723][T14923] vxcan1: entered promiscuous mode [ 270.082132][T14935] 8021q: adding VLAN 0 to HW filter on device bond14 [ 270.655668][T14983] xt_hashlimit: size too large, truncated to 1048576 [ 270.728470][T14981] bond10: Setting coupled_control to off (0) [ 271.410935][T15034] __nla_validate_parse: 13 callbacks suppressed [ 271.410956][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 271.472052][T15040] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 271.523731][T15042] gre0: left promiscuous mode [ 271.603177][T15042] ip6gre1: left promiscuous mode [ 271.658083][T15042] gre1: left promiscuous mode [ 271.700415][T15042] ip6erspan0: left promiscuous mode [ 271.719604][T15056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2533'. [ 271.997041][ T154] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.005425][ T154] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.058666][ T154] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.081890][ T154] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.100639][ T154] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.118966][ T154] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.137890][ T154] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.147152][ T154] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.171821][ T154] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.191099][ T154] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.207851][ T154] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.218500][ T154] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 272.227940][T15050] syzkaller0: refused to change device tx_queue_len [ 272.353134][T15092] validate_nla: 9 callbacks suppressed [ 272.353152][T15092] netlink: 'syz.1.2538': attribute type 29 has an invalid length. [ 272.404229][T15092] netlink: 'syz.1.2538': attribute type 29 has an invalid length. [ 272.415198][T15092] netlink: 'syz.1.2538': attribute type 29 has an invalid length. [ 272.435385][T15092] netlink: 'syz.1.2538': attribute type 29 has an invalid length. [ 272.465512][T15092] netlink: 'syz.1.2538': attribute type 29 has an invalid length. [ 272.483291][T15092] netlink: 'syz.1.2538': attribute type 29 has an invalid length. [ 272.511458][T15092] netlink: 'syz.1.2538': attribute type 29 has an invalid length. [ 272.844975][T15128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2547'. [ 273.168178][T15156] sctp: [Deprecated]: syz.2.2553 (pid 15156) Use of int in max_burst socket option. [ 273.168178][T15156] Use struct sctp_assoc_value instead [ 273.193829][T15153] veth0: entered promiscuous mode [ 273.201780][T15153] syzkaller0: entered allmulticast mode [ 273.210589][T15152] veth0: left promiscuous mode [ 273.312656][T15160] lo speed is unknown, defaulting to 1000 [ 273.453945][T15172] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2558'. [ 273.481537][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 273.516375][T15172] gre2: entered promiscuous mode [ 273.521402][T15172] gre2: entered allmulticast mode [ 273.569481][T15175] netlink: 'syz.2.2559': attribute type 3 has an invalid length. [ 273.818897][T15191] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 274.140584][T15222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2566'. [ 274.223548][T15221] wlan0 speed is unknown, defaulting to 1000 [ 274.280794][T15221] wlan0 speed is unknown, defaulting to 1000 [ 274.313514][T15221] wlan0 speed is unknown, defaulting to 1000 [ 274.327864][T15227] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2570'. [ 274.328618][T15231] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 274.367166][T15221] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 274.434906][T15221] wlan0 speed is unknown, defaulting to 1000 [ 274.466854][T15221] wlan0 speed is unknown, defaulting to 1000 [ 274.474853][T15221] wlan0 speed is unknown, defaulting to 1000 [ 274.483340][T15221] wlan0 speed is unknown, defaulting to 1000 [ 274.505244][T15221] wlan0 speed is unknown, defaulting to 1000 [ 274.510240][T15234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2574'. [ 274.523327][T15221] wlan0 speed is unknown, defaulting to 1000 [ 274.533202][T15234] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2574'. [ 274.721948][T15247] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2579'. [ 275.301184][T15279] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 275.318332][T15280] netlink: 'syz.2.2588': attribute type 24 has an invalid length. [ 275.505088][T15279] bond15: (slave ip6gretap1): making interface the new active one [ 275.538107][T15279] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link [ 275.608741][T15295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.638040][T15295] bond0: left promiscuous mode [ 275.648849][T15295] bond0: left allmulticast mode [ 275.731484][T15304] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 275.837209][T15308] syzkaller0: entered promiscuous mode [ 275.842718][T15308] syzkaller0: entered allmulticast mode [ 275.865355][T15314] tipc: Enabling of bearer rejected, failed to enable media [ 276.021908][T15324] gre0: left promiscuous mode [ 276.125081][T15328] 8021q: adding VLAN 0 to HW filter on device bond16 [ 276.442000][T15368] tipc: Trying to set illegal importance in message [ 276.747683][T15386] __nla_validate_parse: 6 callbacks suppressed [ 276.747700][T15386] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2622'. [ 276.810925][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 276.862165][T15393] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2624'. [ 277.443161][T15435] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2637'. [ 277.617419][T15450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2641'. [ 277.882380][T15473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2647'. [ 277.909452][T15473] validate_nla: 4 callbacks suppressed [ 277.909469][T15473] netlink: 'syz.0.2647': attribute type 1 has an invalid length. [ 278.187957][T15496] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 278.213637][T15496] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2653'. [ 278.287524][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 278.307222][T15505] netlink: 'syz.2.2654': attribute type 11 has an invalid length. [ 278.315148][T15505] netlink: 'syz.2.2654': attribute type 11 has an invalid length. [ 278.323726][T15505] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2654'. [ 278.421360][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2657'. [ 278.421631][T15511] netlink: 'syz.2.2658': attribute type 10 has an invalid length. [ 278.608688][T15521] netlink: 'syz.1.2659': attribute type 5 has an invalid length. [ 278.664462][T15526] netlink: 'syz.0.2663': attribute type 3 has an invalid length. [ 278.764828][T15520] syzkaller0: entered promiscuous mode [ 278.772326][T15520] syzkaller0: entered allmulticast mode [ 280.251623][T15552] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 280.267822][T15550] netlink: 'syz.0.2669': attribute type 5 has an invalid length. [ 280.278977][T15555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 280.528392][T15587] syzkaller0: entered promiscuous mode [ 280.548041][T15587] syzkaller0: entered allmulticast mode [ 280.701371][T15581] team0 (unregistering): Port device team_slave_0 removed [ 280.727433][T15581] team0 (unregistering): Port device team_slave_1 removed [ 280.745548][T15581] bond5: left allmulticast mode [ 280.752823][T15581] bond5: left promiscuous mode [ 280.763031][T15581] team0 (unregistering): Port device macvlan3 removed [ 280.780393][T15581] team0 (unregistering): Port device veth0_virt_wifi removed [ 280.800920][T15600] netlink: 'syz.0.2681': attribute type 4 has an invalid length. [ 280.970129][T15614] netlink: 'syz.3.2686': attribute type 7 has an invalid length. [ 281.133166][T15627] netlink: 'syz.3.2688': attribute type 7 has an invalid length. [ 281.159442][T15630] v: renamed from vlan0 [ 281.269108][T15634] nbd1: detected capacity change from 0 to 63 [ 281.296291][T15634] block nbd1: NBD_DISCONNECT [ 281.304709][T15634] block nbd1: Disconnected due to user request. [ 281.319164][T15634] block nbd1: shutting down sockets [ 281.368749][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.378610][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 281.392421][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.402012][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 281.416261][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.425838][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 281.481411][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.491004][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 281.499020][T15635] block nbd1: NBD_DISCONNECT [ 281.503640][T15635] block nbd1: Send disconnect failed -32 [ 281.533401][T15235] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.565228][T15235] Buffer I/O error on dev nbd1, logical block 0, async page read [ 281.597697][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 281.610268][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 281.628213][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 281.636227][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 281.649929][T15235] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.677418][T15235] Buffer I/O error on dev nbd1, logical block 0, async page read [ 281.688702][T15235] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.701722][T15235] Buffer I/O error on dev nbd1, logical block 1, async page read [ 281.710201][T15235] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.720816][T15235] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 281.734927][T15235] ldm_validate_partition_table(): Disk read failed. [ 281.742569][T15235] Dev nbd1: unable to read RDB block 0 [ 281.749200][T15235] nbd1: unable to read partition table [ 281.778148][T15235] ldm_validate_partition_table(): Disk read failed. [ 281.785321][T15235] Dev nbd1: unable to read RDB block 0 [ 281.795633][T15235] nbd1: unable to read partition table [ 281.915437][T15676] __nla_validate_parse: 10 callbacks suppressed [ 281.915455][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 281.993729][T15682] syzkaller0: entered promiscuous mode [ 282.004528][T15682] syzkaller0: entered allmulticast mode [ 282.101553][T15692] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.2708'. [ 282.112806][T15692] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2708'. [ 282.147370][T15693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2705'. [ 282.294904][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2712'. [ 282.325215][T15700] netlink: 'syz.2.2712': attribute type 1 has an invalid length. [ 282.387663][T15700] bond11: entered promiscuous mode [ 282.392885][T15700] bond11: entered allmulticast mode [ 282.399535][T15700] 8021q: adding VLAN 0 to HW filter on device bond11 [ 282.414859][T15708] macvlan4: entered promiscuous mode [ 282.420358][T15708] macvlan4: entered allmulticast mode [ 282.427878][T15708] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 282.564615][T15718] sctp: [Deprecated]: syz.2.2717 (pid 15718) Use of int in maxseg socket option. [ 282.564615][T15718] Use struct sctp_assoc_value instead [ 282.584635][T15717] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 282.682820][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 282.990197][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2725'. [ 282.997807][T15748] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2728'. [ 282.999996][T15740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.119577][T15752] tipc: Enabled bearer , priority 0 [ 283.144376][T15751] syzkaller0: entered promiscuous mode [ 283.196035][T15751] syzkaller0: entered allmulticast mode [ 283.217957][T15757] tipc: Enabling of bearer rejected, failed to enable media [ 283.293705][T15752] tipc: Resetting bearer [ 283.349952][T15772] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 283.401279][T15750] tipc: Resetting bearer [ 283.417016][T15776] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 283.453995][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 283.464724][T15750] tipc: Disabling bearer [ 283.490783][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 284.265063][T15837] netlink: 'syz.1.2754': attribute type 1 has an invalid length. [ 284.348874][T15837] 8021q: adding VLAN 0 to HW filter on device bond14 [ 284.898341][T15890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.222519][T15907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.423220][T15912] syzkaller0: entered promiscuous mode [ 285.430657][T15912] syzkaller0: entered allmulticast mode [ 285.617555][T15928] netlink: 'syz.3.2785': attribute type 7 has an invalid length. [ 285.755600][ T107] IPVS: starting estimator thread 0... [ 285.850692][T15940] IPVS: using max 28 ests per chain, 67200 per kthread [ 286.942725][T15934] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 286.947072][T15928] __nla_validate_parse: 8 callbacks suppressed [ 286.947089][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 286.966293][T15928] netlink: 'syz.3.2785': attribute type 7 has an invalid length. [ 286.974192][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2785'. [ 287.137760][T15957] netlink: 'syz.3.2795': attribute type 9 has an invalid length. [ 287.152564][T15960] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2796'. [ 287.163909][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 287.178803][T15957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.184507][T15961] batadv2: entered allmulticast mode [ 287.201029][T15960] netlink: 'syz.2.2796': attribute type 5 has an invalid length. [ 287.234839][T15966] netlink: 'syz.1.2794': attribute type 13 has an invalid length. [ 287.314244][T15966] veth0_macvtap: left promiscuous mode [ 287.332755][T15966] macvtap0: entered allmulticast mode [ 287.347151][T15975] netlink: 'syz.2.2800': attribute type 1 has an invalid length. [ 287.361452][T15966] macvtap0: refused to change device tx_queue_len [ 287.366043][T15975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2800'. [ 287.374764][T15972] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.2799'. [ 287.387352][T15972] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.2799'. [ 287.399806][T15973] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.2799'. [ 287.410079][T15973] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.2799'. [ 287.532344][T15987] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2804'. [ 287.543462][T15984] netlink: 'syz.4.2805': attribute type 29 has an invalid length. [ 287.553068][T15984] netlink: 'syz.4.2805': attribute type 29 has an invalid length. [ 287.573456][T15984] netlink: 'syz.4.2805': attribute type 29 has an invalid length. [ 288.127490][T16019] 8021q: adding VLAN 0 to HW filter on device bond17 [ 288.188181][T16023] bond17: (slave ip6gretap2): making interface the new active one [ 288.198495][T16023] bond17: (slave ip6gretap2): Enslaving as an active interface with an up link [ 288.281806][T16040] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 288.332547][T16040] bond14: (slave lo): Enslaving as a backup interface with an up link [ 288.365016][T16040] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 288.642105][T16064] xt_l2tp: v2 doesn't support IP mode [ 288.807469][T16077] lo speed is unknown, defaulting to 1000 [ 289.236610][T16077] wlan0 speed is unknown, defaulting to 1000 [ 289.729427][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 289.740955][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.749890][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 289.761325][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 289.772617][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.965617][T16126] lo speed is unknown, defaulting to 1000 [ 290.230968][T16154] tipc: Enabled bearer , priority 0 [ 290.635596][T16148] tipc: Disabling bearer [ 290.819757][T16173] bond18 (unregistering): Released all slaves [ 291.027551][T16195] validate_nla: 8 callbacks suppressed [ 291.027568][T16195] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 291.153571][T16201] team0: No ports can be present during mode change [ 291.294838][T16126] wlan0 speed is unknown, defaulting to 1000 [ 291.340529][T16210] siw: device registration error -23 [ 291.362727][T16211] x_tables: duplicate underflow at hook 2 [ 291.627288][T16232] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 291.676148][T16236] netlink: 'syz.0.2871': attribute type 10 has an invalid length. [ 291.779793][T16241] netlink: 'syz.3.2874': attribute type 3 has an invalid length. [ 291.806462][ T5832] Bluetooth: hci5: command tx timeout [ 291.820666][T16126] chnl_net:caif_netlink_parms(): no params data found [ 291.860593][T16245] veth9: entered allmulticast mode [ 291.908374][T16243] sit0: entered promiscuous mode [ 291.915797][T16243] netlink: 'syz.4.2875': attribute type 1 has an invalid length. [ 291.970351][T16256] __nla_validate_parse: 14 callbacks suppressed [ 291.970369][T16256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 292.032581][T16256] bond16: Invalid ad_actor_system MAC address. [ 292.038970][T16256] bond16: option ad_actor_system: invalid value (1) [ 292.053475][T16256] bond16 (unregistering): Released all slaves [ 292.081336][T16126] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.089272][T16126] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.097847][T16126] bridge_slave_0: entered allmulticast mode [ 292.113078][T16126] bridge_slave_0: entered promiscuous mode [ 292.129749][T16126] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.137180][T16126] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.145052][T16126] bridge_slave_1: entered allmulticast mode [ 292.147920][T16265] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2880'. [ 292.153428][T16126] bridge_slave_1: entered promiscuous mode [ 292.253144][T16126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.278505][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 292.283605][T16126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.345295][T16126] team0: Port device team_slave_0 added [ 292.359794][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'. [ 292.372190][T16126] team0: Port device team_slave_1 added [ 292.394365][T16272] netlink: 'syz.4.2883': attribute type 5 has an invalid length. [ 292.403982][T16272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2883'. [ 292.407677][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2885'. [ 292.456220][T16272] geneve2: entered promiscuous mode [ 292.461654][T16272] geneve2: entered allmulticast mode [ 292.471250][T16126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.487199][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.534857][T16126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.550784][ T9097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 292.564642][T16126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.573175][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.601126][T16126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.625430][ T9097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 292.648509][ T9097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 292.671176][ T9097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 292.687087][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 292.921691][T16126] hsr_slave_0: entered promiscuous mode [ 292.933592][T16126] hsr_slave_1: entered promiscuous mode [ 292.940319][T16126] debugfs: 'hsr0' already exists in 'hsr' [ 292.946496][T16126] Cannot create hsr debugfs directory [ 293.209241][T16331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2898'. [ 293.225555][T16327] netlink: 'syz.4.2895': attribute type 11 has an invalid length. [ 293.231089][T16126] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.251025][T16327] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2895'. [ 293.259413][T16126] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 293.270460][T16126] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.281211][T16126] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 293.361692][T16126] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.386793][T16126] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 293.398038][T16126] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.412793][T16126] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 293.469994][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 293.505048][T16126] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.521020][T16126] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 293.532820][T16126] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.550700][T16126] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 293.637109][T16126] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.649745][T16126] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 293.660376][T16126] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.671304][T16126] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 293.719024][T16355] netlink: 'syz.1.2906': attribute type 1 has an invalid length. [ 293.745289][T16355] bond15: entered promiscuous mode [ 293.751082][T16355] 8021q: adding VLAN 0 to HW filter on device bond15 [ 293.768693][T16357] tipc: Enabled bearer , priority 0 [ 293.786324][T16357] syzkaller0: entered promiscuous mode [ 293.791803][T16357] syzkaller0: entered allmulticast mode [ 293.808182][T16357] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 293.886445][ T5832] Bluetooth: hci5: command tx timeout [ 293.903693][T16357] tipc: Resetting bearer [ 293.915052][T16356] tipc: Resetting bearer [ 293.946843][T16356] tipc: Disabling bearer [ 294.000337][T16363] bond16: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 294.013680][T16363] bond16 (unregistering): Released all slaves [ 294.089153][T16371] IPVS: Error connecting to the multicast addr [ 294.297896][T16126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.377227][T16126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.435234][T16126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.493641][T16126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.609267][T16406] xt_cgroup: path and classid specified [ 294.624460][T16409] netlink: 'syz.3.2917': attribute type 4 has an invalid length. [ 294.679650][T16409] netlink: 'syz.3.2917': attribute type 4 has an invalid length. [ 294.797623][T16420] IPVS: set_ctl: invalid protocol: 2 172.20.20.46:20000 [ 294.809987][T16126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.858177][T16424] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20000 [ 294.865168][T16126] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.893919][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.901146][ T9097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.950871][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.958081][ T9097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.290651][T16452] x_tables: duplicate underflow at hook 1 [ 295.341895][T16454] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 295.402932][T16461] netlink: 'syz.1.2932': attribute type 1 has an invalid length. [ 295.454491][T16126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.478895][T16461] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 295.559951][T16126] veth0_vlan: entered promiscuous mode [ 295.606536][T16126] veth1_vlan: entered promiscuous mode [ 295.665263][T16126] veth0_macvtap: entered promiscuous mode [ 295.690669][T16126] veth1_macvtap: entered promiscuous mode [ 295.754920][T16126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.788744][T16126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.829358][ T9084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.847991][ T9084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.859131][ T9084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.880307][ T9084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.966270][ T5832] Bluetooth: hci5: command tx timeout [ 296.397068][ T9101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.407368][ T9101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.507941][ T9101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.524601][ T9101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.555626][T16518] netlink: 'syz.0.2946': attribute type 10 has an invalid length. [ 296.857895][T16538] lo speed is unknown, defaulting to 1000 [ 297.303752][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.314347][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.323134][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.331311][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.349562][T16563] tipc: Enabled bearer , priority 0 [ 297.357990][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.388828][T16563] syzkaller0: entered promiscuous mode [ 297.398118][T16563] syzkaller0: entered allmulticast mode [ 297.415732][T16570] __nla_validate_parse: 16 callbacks suppressed [ 297.415750][T16570] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2963'. [ 297.454373][T16563] tipc: Resetting bearer [ 297.549905][T16562] tipc: Resetting bearer [ 297.595586][T16562] tipc: Disabling bearer [ 297.635285][T16566] lo speed is unknown, defaulting to 1000 [ 297.765596][T16580] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.046713][ T5832] Bluetooth: hci5: command tx timeout [ 298.102933][T16538] wlan0 speed is unknown, defaulting to 1000 [ 298.519365][T16609] netlink: 'syz.0.2972': attribute type 13 has an invalid length. [ 298.599510][T16566] wlan0 speed is unknown, defaulting to 1000 [ 298.609302][T16612] siw: device registration error -23 [ 298.837455][T16621] : entered promiscuous mode [ 299.001117][T16628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 299.033238][T16630] ipt_rpfilter: unknown options [ 299.396993][T16648] lo: Caught tx_queue_len zero misconfig [ 299.407920][ T5832] Bluetooth: hci0: command tx timeout [ 299.452922][T16566] chnl_net:caif_netlink_parms(): no params data found [ 299.460695][T16656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2984'. [ 299.564307][ T4561] tipc: Subscription rejected, illegal request [ 299.575760][T16660] veth0: entered promiscuous mode [ 299.608514][T16660] veth0: left promiscuous mode [ 299.656739][T16566] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.663978][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.676535][T16566] bridge_slave_0: entered allmulticast mode [ 299.686633][T16566] bridge_slave_0: entered promiscuous mode [ 299.695456][T16566] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.702823][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.710575][T16566] bridge_slave_1: entered allmulticast mode [ 299.718411][T16566] bridge_slave_1: entered promiscuous mode [ 299.769157][T16566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.782172][T16566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.792489][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2987'. [ 299.833124][T16566] team0: Port device team_slave_0 added [ 299.842207][ T5841] block nbd1: Receive control failed (result -107) [ 299.856938][T16566] team0: Port device team_slave_1 added [ 299.975090][T16566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.992710][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.042294][T16566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.067430][T16566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.074570][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.103702][T16566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.200972][T16692] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 300.231836][T16566] hsr_slave_0: entered promiscuous mode [ 300.259903][T16566] hsr_slave_1: entered promiscuous mode [ 300.271647][T16566] debugfs: 'hsr0' already exists in 'hsr' [ 300.283714][T16566] Cannot create hsr debugfs directory [ 300.655657][T16717] siw: device registration error -23 [ 300.691854][T16566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.708460][T16566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 300.819400][T16566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.831187][T16566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 300.938066][T16566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.969834][T16566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 301.090503][T16566] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.104498][T16566] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 301.128719][T16742] tipc: Enabled bearer , priority 0 [ 301.135758][T16745] syzkaller0: entered promiscuous mode [ 301.145797][T16745] syzkaller0: entered allmulticast mode [ 301.158815][T16742] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 301.185064][T16742] tipc: Resetting bearer [ 301.195497][T16741] tipc: Resetting bearer [ 301.230223][T16741] tipc: Disabling bearer [ 301.248171][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3007'. [ 301.334827][T16566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 301.347912][T16566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 301.371981][T16566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 301.373332][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 301.393673][T16566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.486407][ T5841] Bluetooth: hci0: command tx timeout [ 301.562290][T16566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.573311][T16767] only policy match revision 0 supported [ 301.573332][T16767] unable to load match [ 301.592696][T16770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3012'. [ 301.602042][T16566] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.625832][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.633196][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.634312][T16771] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3012'. [ 301.690704][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.697907][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.755779][T16773] syzkaller0: entered promiscuous mode [ 301.761693][T16773] syzkaller0: entered allmulticast mode [ 301.810029][T16773] Bluetooth: MGMT ver 1.23 [ 301.862386][T16778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3015'. [ 301.998842][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3015'. [ 302.278030][T16812] netlink: 'syz.3.3022': attribute type 1 has an invalid length. [ 302.303935][T16812] bond16: entered promiscuous mode [ 302.311423][T16812] 8021q: adding VLAN 0 to HW filter on device bond16 [ 302.391425][T16566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.457813][T16812] bond16: (slave bridge6): making interface the new active one [ 302.465423][T16812] bridge6: entered promiscuous mode [ 302.487298][T16812] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 302.566908][T16822] tipc: Failed to remove unknown binding: 66,1,1/931693914:4050658192/4050658194 [ 302.648282][T16833] sctp: [Deprecated]: syz.2.3025 (pid 16833) Use of int in max_burst socket option deprecated. [ 302.648282][T16833] Use struct sctp_assoc_value instead [ 302.690919][T16822] bond16: option all_slaves_active: invalid value (222) [ 302.733594][T16822] bond16 (unregistering): Released all slaves [ 302.855107][T16845] netlink: 30 bytes leftover after parsing attributes in process `syz.0.3027'. [ 303.074611][T16566] veth0_vlan: entered promiscuous mode [ 303.103292][T16566] veth1_vlan: entered promiscuous mode [ 303.169216][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 303.241410][T16566] veth0_macvtap: entered promiscuous mode [ 303.263805][T16566] veth1_macvtap: entered promiscuous mode [ 303.270260][T16860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3032'. [ 303.373195][T16872] syzkaller1: entered promiscuous mode [ 303.382424][T16872] syzkaller1: entered allmulticast mode [ 303.395791][T16566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.408008][T16874] nbd: nbd1 already in use [ 303.440391][T16566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.478761][ T4561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.497678][ T4561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.514505][ T4561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.568660][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 303.595329][ T4561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.620110][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 303.786733][ T9084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.813566][ T9084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.899718][ T9084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.918836][ T9084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.970757][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 303.985393][T16902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 304.031192][T16906] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3045'. [ 304.259639][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 304.508447][T16934] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3050'. [ 304.611346][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.621150][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.638107][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.646180][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.653833][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.731866][T16943] lo speed is unknown, defaulting to 1000 [ 304.808102][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3053'. [ 305.429573][T16952] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 305.503679][T16971] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 305.625385][T16971] bond1: (slave lo): Enslaving as a backup interface with an up link [ 305.641162][T16971] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 305.656866][ T5832] Bluetooth: hci0: command 0x040f tx timeout [ 305.683514][T16943] wlan0 speed is unknown, defaulting to 1000 [ 306.155103][T16943] chnl_net:caif_netlink_parms(): no params data found [ 306.196686][T17017] netlink: 'syz.3.3071': attribute type 21 has an invalid length. [ 306.359382][T17031] xt_socket: unknown flags 0x50 [ 306.408679][T16943] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.409750][T17036] xt_socket: unknown flags 0x50 [ 306.416059][T16943] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.428213][T16943] bridge_slave_0: entered allmulticast mode [ 306.436231][T16943] bridge_slave_0: entered promiscuous mode [ 306.449180][T16943] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.456764][T16943] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.464028][T16943] bridge_slave_1: entered allmulticast mode [ 306.488160][T16943] bridge_slave_1: entered promiscuous mode [ 306.682422][T16943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.692390][ T5832] Bluetooth: hci4: command tx timeout [ 306.703702][T16943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.813534][T16943] team0: Port device team_slave_0 added [ 306.839990][T16943] team0: Port device team_slave_1 added [ 306.987107][T17077] netlink: 'syz.1.3085': attribute type 3 has an invalid length. [ 307.001083][T16943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.026283][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.079933][T16943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.169735][T17083] bond2: option all_slaves_active: invalid value (222) [ 307.179042][T17083] bond2 (unregistering): Released all slaves [ 307.205565][T16943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.214542][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.243554][T16943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.404168][T17096] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 307.513064][T16943] hsr_slave_0: entered promiscuous mode [ 307.530864][T16943] hsr_slave_1: entered promiscuous mode [ 307.541741][T16943] debugfs: 'hsr0' already exists in 'hsr' [ 307.550618][T16943] Cannot create hsr debugfs directory [ 307.726530][ T5832] Bluetooth: hci0: command 0x040f tx timeout [ 307.772243][T17118] netlink: 'syz.1.3099': attribute type 23 has an invalid length. [ 308.144384][ T9094] bridge_slave_1: left allmulticast mode [ 308.167044][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.303609][ T9094] bridge_slave_0: left allmulticast mode [ 308.316221][ T9094] bridge_slave_0: left promiscuous mode [ 308.334361][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.766865][ T5832] Bluetooth: hci4: command tx timeout [ 308.775055][ T9094] bond1 (unregistering): (slave gretap1): Releasing active interface [ 308.860635][ T9094] bond9 (unregistering): (slave geneve4): Releasing active interface [ 308.885538][ T9094] bond4 (unregistering): (slave geneve2): Releasing active interface [ 308.917751][ T9094] team0: Port device geneve0 removed [ 309.443791][ T9094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.456500][ T9094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.466109][ T9094] bond0 (unregistering): Released all slaves [ 309.480036][ T9094] bond1 (unregistering): Released all slaves [ 309.505184][ T9094] bond2 (unregistering): Released all slaves [ 309.521198][ T9094] bond3 (unregistering): (slave veth5): Releasing active interface [ 309.531926][ T9094] bond3 (unregistering): Released all slaves [ 309.545081][ T9094] bond4 (unregistering): Released all slaves [ 309.639154][ T9094] bond5 (unregistering): Released all slaves [ 309.733361][ T9094] bond6 (unregistering): Released all slaves [ 309.746432][ T9094] bond7 (unregistering): Released all slaves [ 309.759116][ T9094] bond8 (unregistering): Released all slaves [ 309.858936][ T9094] bond9 (unregistering): Released all slaves [ 309.871548][ T9094] bond10 (unregistering): Released all slaves [ 310.037155][T17159] geneve2: entered promiscuous mode [ 310.050401][T17159] geneve2: entered allmulticast mode [ 310.080070][ T9072] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 310.108271][ T9072] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 310.140729][ T9093] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 310.188248][ T9093] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 310.311360][T17178] netlink: 'syz.4.3111': attribute type 10 has an invalid length. [ 310.819656][T16943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.843759][T17205] __nla_validate_parse: 14 callbacks suppressed [ 310.843777][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3118'. [ 310.859738][ T5832] Bluetooth: hci4: command tx timeout [ 310.876823][T16943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.898514][T16943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.911659][T16943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.955814][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3119'. [ 311.164357][T17231] netlink: 'syz.2.3123': attribute type 2 has an invalid length. [ 311.181266][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'. [ 311.216317][T17231] netlink: 'syz.2.3123': attribute type 2 has an invalid length. [ 311.248832][T17236] netlink: 'syz.1.3124': attribute type 10 has an invalid length. [ 311.291835][T17236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.340936][T17239] netlink: 'syz.1.3124': attribute type 10 has an invalid length. [ 311.341890][T17236] batadv0: entered promiscuous mode [ 311.364288][T17236] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 311.379402][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3125'. [ 311.394010][T16943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.476544][T16943] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.529547][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.536767][ T9093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.559569][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.566813][ T9093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.578114][ T9094] 9: left promiscuous mode [ 311.644775][T17255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3129'. [ 311.690294][ T9094] tipc: Left network mode [ 311.731534][T17257] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 311.740167][T16943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.789448][T17259] netlink: 'syz.2.3131': attribute type 4 has an invalid length. [ 311.893172][T17266] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3131'. [ 312.681705][T16943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.712528][T17312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3141'. [ 312.826440][T17319] netlink: 'syz.2.3142': attribute type 9 has an invalid length. [ 312.834595][T17319] netlink: 'syz.2.3142': attribute type 11 has an invalid length. [ 312.842842][T17319] netlink: 'syz.2.3142': attribute type 12 has an invalid length. [ 312.851763][T17319] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3142'. [ 312.926574][ T5832] Bluetooth: hci4: command tx timeout [ 312.955188][T17321] netlink: 'syz.1.3141': attribute type 7 has an invalid length. [ 312.965129][T17323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3142'. [ 313.215166][T16943] veth0_vlan: entered promiscuous mode [ 313.259262][T16943] veth1_vlan: entered promiscuous mode [ 313.396553][T17337] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 313.489288][ T9094] hsr_slave_0: left promiscuous mode [ 313.513781][ T9094] hsr_slave_1: left promiscuous mode [ 313.524689][ T9094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.551325][ T9094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.594615][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3152'. [ 313.909353][ T9094] team0 (unregistering): Port device team_slave_1 removed [ 313.951392][ T9094] team0 (unregistering): Port device C removed [ 314.027049][ T9088] smc: removing ib device syû [ 314.247439][T17345] tipc: Started in network mode [ 314.252364][T17345] tipc: Node identity 4, cluster identity 4711 [ 314.259716][T17345] tipc: Node number set to 4 [ 314.309941][T16943] veth0_macvtap: entered promiscuous mode [ 314.371104][T16943] veth1_macvtap: entered promiscuous mode [ 314.450945][T16943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.558357][T16943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.600497][ T9093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.742126][ T9093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.819554][T17384] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.847434][T17384] netlink: 'syz.1.3164': attribute type 5 has an invalid length. [ 315.294707][T17376] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.302486][T17376] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.827025][T17376] bridge_slave_0: left allmulticast mode [ 315.832725][T17376] bridge_slave_0: left promiscuous mode [ 315.877346][T17376] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.009115][T17376] bridge_slave_1: left allmulticast mode [ 316.016306][T17376] bridge_slave_1: left promiscuous mode [ 316.034073][T17376] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.165451][T17376] bond0: (slave bond_slave_0): Releasing backup interface [ 316.246982][T17376] bond0: (slave bond_slave_1): Releasing backup interface [ 316.322940][T17376] team0: Port device team_slave_0 removed [ 316.408612][T17376] team0: Port device team_slave_1 removed [ 316.456075][T17376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.491351][T17376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.525082][T17376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.564675][T17376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.596926][T17376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.631946][ T9093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.673426][T17384] geneve4: entered promiscuous mode [ 316.679201][T17384] geneve4: entered allmulticast mode [ 316.689370][ T9093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.703533][ T9093] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 316.730634][ T9093] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 316.750159][T17420] __nla_validate_parse: 5 callbacks suppressed [ 316.750177][T17420] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3174'. [ 316.778555][ T9093] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 316.807331][ T9093] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 316.838337][T17424] netlink: 'syz.2.3177': attribute type 2 has an invalid length. [ 316.857581][T17424] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3177'. [ 316.884912][T17424] netlink: 'syz.2.3177': attribute type 1 has an invalid length. [ 316.962856][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'. [ 316.999285][T17428] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 317.020959][T17428] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 317.108674][T17424] gretap1: entered promiscuous mode [ 317.123400][T17431] netlink: 'syz.1.3179': attribute type 9 has an invalid length. [ 317.132346][T17431] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.3179'. [ 317.161086][ T9094] IPVS: stop unused estimator thread 0... [ 317.171713][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.171834][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.193924][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.223914][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.291878][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.314494][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.509757][T17444] syzkaller0: entered promiscuous mode [ 317.515355][T17444] syzkaller0: entered allmulticast mode [ 317.867347][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 318.071784][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3191'. [ 319.360009][T17456] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3184'. [ 319.594106][T17490] netlink: 'syz.4.3196': attribute type 1 has an invalid length. [ 320.022004][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.033276][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.043117][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.053386][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.063023][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.123218][T17490] syzkaller0: entered promiscuous mode [ 320.201870][T17516] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3200'. [ 320.217849][T17490] syzkaller0: entered allmulticast mode [ 320.426820][T17524] netlink: 'syz.2.3202': attribute type 16 has an invalid length. [ 320.432411][T17526] netlink: 'syz.3.3203': attribute type 1 has an invalid length. [ 320.434667][T17524] netlink: 'syz.2.3202': attribute type 3 has an invalid length. [ 320.463079][T17524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3202'. [ 321.919631][T17526] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 322.024427][T17508] lo speed is unknown, defaulting to 1000 [ 322.130009][ T5841] Bluetooth: hci3: command tx timeout [ 322.279201][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 322.301324][T17560] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3210'. [ 322.425681][T17508] wlan0 speed is unknown, defaulting to 1000 [ 322.507824][T17571] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.3213'. [ 322.571479][T17578] netlink: 'syz.3.3215': attribute type 1 has an invalid length. [ 322.597027][T17580] netlink: 'syz.3.3215': attribute type 1 has an invalid length. [ 322.630701][T17580] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 322.632509][T17578] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 322.671825][T17588] netlink: 'syz.4.3217': attribute type 1 has an invalid length. [ 322.728526][T17588] Cannot find del_set index 0 as target [ 322.751166][T17591] netlink: 'syz.3.3218': attribute type 3 has an invalid length. [ 322.763217][T17591] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3218'. [ 322.898395][ T9097] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 322.916510][T17593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.940785][T17508] chnl_net:caif_netlink_parms(): no params data found [ 323.094776][T17615] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3223'. [ 323.104475][T17615] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3223'. [ 323.162075][T17508] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.180064][T17508] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.200270][T17508] bridge_slave_0: entered allmulticast mode [ 323.220057][T17508] bridge_slave_0: entered promiscuous mode [ 323.242065][T17508] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.258645][T17508] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.276607][T17508] bridge_slave_1: entered allmulticast mode [ 323.296640][T17508] bridge_slave_1: entered promiscuous mode [ 323.424676][T17508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.460050][T17508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.562315][T17641] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3229'. [ 323.580984][T17641] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 323.715952][T17644] netlink: 22140 bytes leftover after parsing attributes in process `syz.4.3229'. [ 324.208539][ T5832] Bluetooth: hci3: command tx timeout [ 324.281129][T17632] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 324.298274][T17632] syzkaller1: linktype set to 823 [ 324.318362][T17508] team0: Port device team_slave_0 added [ 324.339105][T17508] team0: Port device team_slave_1 added [ 324.395285][T17508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.426937][T17508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.463882][T17508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.528484][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3233'. [ 324.531576][T17508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.560104][T17508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.587022][T17508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.842762][T17669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3238'. [ 324.851175][T17508] hsr_slave_0: entered promiscuous mode [ 324.862813][T17508] hsr_slave_1: entered promiscuous mode [ 324.870399][T17508] debugfs: 'hsr0' already exists in 'hsr' [ 324.878938][T17508] Cannot create hsr debugfs directory [ 324.971490][T17674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.074818][T17684] wireguard0: entered promiscuous mode [ 325.080791][T17684] wireguard0: entered allmulticast mode [ 325.093080][T17684] team0: Device wireguard0 is of different type [ 325.290586][T17694] netlink: 'syz.4.3246': attribute type 1 has an invalid length. [ 325.402176][T17707] netlink: 'syz.0.3249': attribute type 16 has an invalid length. [ 325.435617][T17508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.447124][T17508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.459848][T17508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 325.498158][T17702] netlink: 'syz.3.3247': attribute type 1 has an invalid length. [ 325.654333][T17508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.684658][T17508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.707193][T17508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 325.829284][T17729] netlink: 'syz.0.3257': attribute type 15 has an invalid length. [ 325.852523][T17508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.863668][T17508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.875658][T17508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 325.947489][T17508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.960318][T17508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.974076][T17508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 326.162411][T17508] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.175498][T17508] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.195761][T17508] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.210633][T17508] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.287737][ T5832] Bluetooth: hci3: command 0x040f tx timeout [ 326.291803][T17746] gtp0: entered promiscuous mode [ 326.300057][T17746] gtp0: entered allmulticast mode [ 326.348438][T17508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.391458][T17508] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.413017][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.420255][ T9088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.445127][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.452450][ T9088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.802050][T17767] team_slave_1: mtu less than device minimum [ 326.868896][T17765] netlink: 'syz.2.3265': attribute type 5 has an invalid length. [ 326.988089][T17508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.123878][T17508] veth0_vlan: entered promiscuous mode [ 327.140834][T17778] syzkaller0: entered promiscuous mode [ 327.153190][T17778] syzkaller0: entered allmulticast mode [ 327.187255][T17508] veth1_vlan: entered promiscuous mode [ 327.296484][T17776] __nla_validate_parse: 11 callbacks suppressed [ 327.296505][T17776] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3268'. [ 327.447784][T17508] veth0_macvtap: entered promiscuous mode [ 327.474522][T17508] veth1_macvtap: entered promiscuous mode [ 327.481813][T17791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3271'. [ 327.535442][T17508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.629744][T17508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.683666][ T3496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.717715][T17800] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 327.741815][ T3496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.768599][ T3496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.792486][T17798] vlan1: entered allmulticast mode [ 327.807196][T17798] veth0_vlan: entered allmulticast mode [ 327.817970][ T3496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.828660][T17803] delete_channel: no stack [ 327.879505][T17807] netlink: 'syz.0.3276': attribute type 2 has an invalid length. [ 327.938045][T17807] netlink: 'syz.0.3276': attribute type 8 has an invalid length. [ 327.996670][T17807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3276'. [ 328.100956][T17810] bond17: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 328.116282][T17817] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3279'. [ 328.169228][T17810] bond17 (unregistering): Released all slaves [ 328.231138][T17813] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 328.257438][T17813] bond3 (unregistering): Released all slaves [ 328.320108][ T9094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.335023][ T9094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.368486][ T5841] Bluetooth: hci3: command 0x040f tx timeout [ 328.384751][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.417488][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.507387][T17833] x_tables: duplicate underflow at hook 2 [ 328.548759][T17838] netem: incorrect gi model size [ 328.554839][T17838] netem: change failed [ 328.560573][T17837] tipc: Enabled bearer , priority 27 [ 328.585532][T17839] syzkaller1: entered promiscuous mode [ 328.606546][T17839] syzkaller1: entered allmulticast mode [ 328.664005][T17843] netlink: 'syz.0.3286': attribute type 4 has an invalid length. [ 328.710931][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3286'. [ 328.757116][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3289'. [ 328.894219][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3293'. [ 328.912295][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3293'. [ 329.083000][T17866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3294'. [ 329.123007][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 329.178091][T17869] syzkaller0: entered promiscuous mode [ 329.183785][T17869] syzkaller0: entered allmulticast mode [ 329.252530][T17870] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 329.481378][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.492589][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.501163][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.509661][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.519211][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.605672][T17872] lo speed is unknown, defaulting to 1000 [ 329.875528][ T9097] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.900718][ T9097] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 329.924241][ T9097] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 329.958256][T17888] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 330.020589][ T9097] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.036020][ T9097] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 330.051972][T17890] netlink: 'syz.0.3303': attribute type 2 has an invalid length. [ 330.064769][ T9097] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 330.145070][T17872] wlan0 speed is unknown, defaulting to 1000 [ 330.181194][ T9097] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.212645][ T9097] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 330.253495][ T9097] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 330.443063][ T9097] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.463788][ T5832] Bluetooth: hci3: command 0x040f tx timeout [ 330.481504][ T9097] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 330.492487][ T9097] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 330.538403][T17912] geneve3: entered promiscuous mode [ 330.543874][T17912] geneve3: entered allmulticast mode [ 331.027878][T17940] xt_TCPMSS: Only works on TCP SYN packets [ 331.063279][T17872] chnl_net:caif_netlink_parms(): no params data found [ 331.085343][T17940] xt_TCPMSS: Only works on TCP SYN packets [ 331.126025][ T9097] bridge_slave_1: left allmulticast mode [ 331.139729][T17940] xt_TCPMSS: Only works on TCP SYN packets [ 331.145700][T17940] xt_TCPMSS: Only works on TCP SYN packets [ 331.154500][ T9097] bridge_slave_1: left promiscuous mode [ 331.185429][T17940] xt_TCPMSS: Only works on TCP SYN packets [ 331.190940][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.245073][ T9097] bridge_slave_0: left allmulticast mode [ 331.272655][ T9097] bridge_slave_0: left promiscuous mode [ 331.286212][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.469093][ T9097] ip6gretap0 (unregistering): left promiscuous mode [ 331.565254][ T9097] sit0 (unregistering): left allmulticast mode [ 331.566944][ T5832] Bluetooth: hci1: command tx timeout [ 331.760836][ T9097] bond5 (unregistering): (slave gretap3): Releasing active interface [ 331.783999][ T9097] bond9 (unregistering): (slave gretap4): Releasing active interface [ 332.106739][ T9097] bond13 (unregistering): (slave bridge4): Releasing active interface [ 332.207885][ T9097] bond16 (unregistering): (slave bridge6): Releasing backup interface [ 332.218375][ T9097] bridge6 (unregistering): left promiscuous mode [ 332.310733][ T9097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.321745][ T9097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.331319][ T9097] bond0 (unregistering): Released all slaves [ 332.343892][ T9097] bond1 (unregistering): Released all slaves [ 332.454697][ T9097] bond2 (unregistering): Released all slaves [ 332.467732][ T9097] bond3 (unregistering): Released all slaves [ 332.602483][ T9097] bond4 (unregistering): Released all slaves [ 332.715253][ T9097] bond5 (unregistering): Released all slaves [ 332.820843][ T9097] bond6 (unregistering): Released all slaves [ 332.834100][ T9097] bond7 (unregistering): Released all slaves [ 332.941349][ T9097] bond8 (unregistering): Released all slaves [ 333.040399][ T9097] bond9 (unregistering): Released all slaves [ 333.144212][ T9097] bond10 (unregistering): Released all slaves [ 333.158172][ T9097] bond11 (unregistering): Released all slaves [ 333.268264][ T9097] bond12 (unregistering): Released all slaves [ 333.281488][ T9097] bond13 (unregistering): Released all slaves [ 333.294881][ T9097] bond14 (unregistering): (slave lo): Releasing backup interface [ 333.306176][ T9097] bond14 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 333.321054][ T9097] bond14 (unregistering): Released all slaves [ 333.334321][ T9097] bond15 (unregistering): Released all slaves [ 333.435557][ T9097] bond16 (unregistering): Released all slaves [ 333.482513][T17965] bridge0: port 3(vlan2) entered blocking state [ 333.495298][T17965] bridge0: port 3(vlan2) entered disabled state [ 333.502680][T17965] vlan2: entered allmulticast mode [ 333.514573][T17965] bridge0: entered allmulticast mode [ 333.533876][T17965] vlan2: left allmulticast mode [ 333.539882][T17965] bridge0: left allmulticast mode [ 333.654480][ T5832] Bluetooth: hci1: command tx timeout [ 333.728609][ T9097] : left promiscuous mode [ 333.807207][T17998] __nla_validate_parse: 8 callbacks suppressed [ 333.807224][T17998] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3329'. [ 333.817062][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 333.841017][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 333.867759][ T9097] tipc: Disabling bearer [ 333.904276][ T9097] tipc: Disabling bearer [ 333.916342][ T9097] tipc: Left network mode [ 333.934589][ T9097] IPVS: stopping backup sync thread 16232 ... [ 334.009150][T17872] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.019639][T17872] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.028591][T17872] bridge_slave_0: entered allmulticast mode [ 334.055062][T17872] bridge_slave_0: entered promiscuous mode [ 334.111424][T17872] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.125376][T17872] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.135173][T17872] bridge_slave_1: entered allmulticast mode [ 334.142844][T17872] bridge_slave_1: entered promiscuous mode [ 334.230638][T17872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.279035][T17872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.362236][T17872] team0: Port device team_slave_0 added [ 334.374271][T17872] team0: Port device team_slave_1 added [ 334.391387][T18020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3334'. [ 334.427050][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3335'. [ 334.452182][T17872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.476373][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.550824][T17872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.566125][T17872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.577199][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.588707][T18030] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3336'. [ 334.613462][T17872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.718618][T18036] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3339'. [ 334.742054][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3338'. [ 334.772432][T17872] hsr_slave_0: entered promiscuous mode [ 334.780571][T17872] hsr_slave_1: entered promiscuous mode [ 334.787688][T17872] debugfs: 'hsr0' already exists in 'hsr' [ 334.793576][T17872] Cannot create hsr debugfs directory [ 334.874626][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 334.897016][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3340'. [ 335.114515][T18053] netlink: 'syz.1.3342': attribute type 9 has an invalid length. [ 335.653630][T17872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.682048][T17872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.698243][T17872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.722564][T17872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.729878][ T5832] Bluetooth: hci1: command tx timeout [ 335.756834][T18081] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 335.798086][T18082] netlink: 'syz.1.3347': attribute type 10 has an invalid length. [ 335.847480][T18082] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 336.043318][T17872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.070873][T17872] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.085559][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.092782][ T9072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.111253][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.118456][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.366040][T18003] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 336.372587][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout [ 336.383489][T18003] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 336.562307][T17872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.625573][T17872] veth0_vlan: entered promiscuous mode [ 336.643186][T17872] veth1_vlan: entered promiscuous mode [ 336.691896][T17872] veth0_macvtap: entered promiscuous mode [ 336.703470][T17872] veth1_macvtap: entered promiscuous mode [ 336.730223][T17872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.744730][T17872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.760988][ T2140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.770219][ T2140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.782013][ T2140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.791253][ T2140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.981880][T18003] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 336.988460][T18003] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 337.046113][T18003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.052225][T18003] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 337.092988][T18003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.101311][T18003] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 378.609736][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.616520][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.052870][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.059420][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.726973][ T31] INFO: task kworker/u8:27:9097 blocked for more than 143 seconds. [ 495.735005][ T31] Not tainted syzkaller #0 [ 495.740091][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.748853][ T31] task:kworker/u8:27 state:D stack:23512 pid:9097 tgid:9097 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 495.761044][ T31] Workqueue: netns cleanup_net [ 495.765904][ T31] Call Trace: [ 495.769191][ T31] [ 495.772113][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 495.776892][ T31] ? __pfx___schedule+0x10/0x10 [ 495.782201][ T31] ? schedule+0x91/0x360 [ 495.786632][ T31] schedule+0x165/0x360 [ 495.791123][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.796712][ T31] __mutex_lock+0x7e6/0x1350 [ 495.801339][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.806465][ T31] ? rfkill_unregister+0xc8/0x220 [ 495.816120][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.821200][ T31] ? __pfx_device_del+0x10/0x10 [ 495.864961][ T31] rfkill_unregister+0xc8/0x220 [ 495.877475][ T31] wiphy_unregister+0x238/0xab0 [ 495.882373][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 495.895248][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 495.900745][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 495.906090][ T31] ? ieee80211_unregister_hw+0x144/0x2c0 [ 495.911743][ T31] ? kfree+0x1c0/0x660 [ 495.915808][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 495.921447][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 495.927129][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 495.933218][ T31] hwsim_exit_net+0xef4/0xfb0 [ 495.937945][ T31] ? hwsim_exit_net+0x333/0xfb0 [ 495.942995][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 495.948311][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 495.954145][ T31] ops_undo_list+0x49a/0x990 [ 495.958861][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 495.963984][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 495.969399][ T31] cleanup_net+0x4d8/0x7a0 [ 495.973836][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 495.978904][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.984129][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 495.989943][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 495.995671][ T31] process_scheduled_works+0xad1/0x1770 [ 496.001335][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.007395][ T31] worker_thread+0x8a0/0xda0 [ 496.012007][ T31] kthread+0x711/0x8a0 [ 496.016130][ T31] ? __pfx_worker_thread+0x10/0x10 [ 496.021242][ T31] ? __pfx_kthread+0x10/0x10 [ 496.025828][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.031088][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 496.036408][ T31] ? __pfx_kthread+0x10/0x10 [ 496.041014][ T31] ret_from_fork+0x599/0xb30 [ 496.045592][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.051333][ T31] ? __switch_to_asm+0x39/0x70 [ 496.056183][ T31] ? __switch_to_asm+0x33/0x70 [ 496.060952][ T31] ? __pfx_kthread+0x10/0x10 [ 496.065528][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.070391][ T31] [ 496.073431][ T31] INFO: task kworker/0:9:9169 blocked for more than 143 seconds. [ 496.081231][ T31] Not tainted syzkaller #0 [ 496.086289][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.094965][ T31] task:kworker/0:9 state:D stack:22904 pid:9169 tgid:9169 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 496.107075][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 496.113778][ T31] Call Trace: [ 496.117157][ T31] [ 496.120103][ T31] __schedule+0x14bc/0x5000 [ 496.124649][ T31] ? __pfx___schedule+0x10/0x10 [ 496.129558][ T31] ? schedule+0x91/0x360 [ 496.133810][ T31] schedule+0x165/0x360 [ 496.138037][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.143508][ T31] __mutex_lock+0x7e6/0x1350 [ 496.148198][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.152971][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 496.159298][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.164341][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 496.170113][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 496.175945][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 496.182020][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 496.187824][ T31] process_scheduled_works+0xad1/0x1770 [ 496.193396][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.199481][ T31] worker_thread+0x8a0/0xda0 [ 496.204090][ T31] ? __kthread_parkme+0x7b/0x200 [ 496.209901][ T31] kthread+0x711/0x8a0 [ 496.214003][ T31] ? __pfx_worker_thread+0x10/0x10 [ 496.219179][ T31] ? __pfx_kthread+0x10/0x10 [ 496.223780][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.229351][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 496.234559][ T31] ? __pfx_kthread+0x10/0x10 [ 496.239326][ T31] ret_from_fork+0x599/0xb30 [ 496.243941][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.249151][ T31] ? __switch_to_asm+0x39/0x70 [ 496.253923][ T31] ? __switch_to_asm+0x33/0x70 [ 496.258740][ T31] ? __pfx_kthread+0x10/0x10 [ 496.263350][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.268271][ T31] [ 496.271347][ T31] INFO: task syz-executor:17872 blocked for more than 143 seconds. [ 496.279387][ T31] Not tainted syzkaller #0 [ 496.284327][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.293091][ T31] task:syz-executor state:D stack:20968 pid:17872 tgid:17872 ppid:1 task_flags:0x400140 flags:0x00080002 [ 496.305076][ T31] Call Trace: [ 496.308494][ T31] [ 496.311431][ T31] __schedule+0x14bc/0x5000 [ 496.316126][ T31] ? __pfx___schedule+0x10/0x10 [ 496.321016][ T31] ? schedule+0x91/0x360 [ 496.325255][ T31] schedule+0x165/0x360 [ 496.329474][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.335098][ T31] __mutex_lock+0x7e6/0x1350 [ 496.339749][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 496.344695][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.349658][ T31] ? misc_open+0x51/0x350 [ 496.354028][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.359204][ T31] misc_open+0x51/0x350 [ 496.363471][ T31] chrdev_open+0x4cc/0x5e0 [ 496.368821][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.373794][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 496.380230][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.385193][ T31] do_dentry_open+0x7ce/0x1420 [ 496.390067][ T31] vfs_open+0x3b/0x340 [ 496.394161][ T31] ? path_openat+0x33f3/0x3dd0 [ 496.399102][ T31] path_openat+0x340e/0x3dd0 [ 496.403801][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 496.409217][ T31] ? stack_depot_save_flags+0x40/0x850 [ 496.414700][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 496.420402][ T31] ? getname_flags+0xb8/0x540 [ 496.425089][ T31] ? __pfx_path_openat+0x10/0x10 [ 496.430114][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 496.435064][ T31] do_filp_open+0x1fa/0x410 [ 496.439690][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 496.444745][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.449676][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.454015][ T31] do_sys_openat2+0x121/0x200 [ 496.458743][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.463950][ T31] ? fput_close_sync+0x113/0x220 [ 496.468996][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 496.474299][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 496.479611][ T31] __x64_sys_openat+0x138/0x170 [ 496.484489][ T31] do_syscall_64+0xfa/0xf80 [ 496.489028][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.495083][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.499811][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.505755][ T31] RIP: 0033:0x7fd51d18df90 [ 496.510278][ T31] RSP: 002b:00007fff0b9435a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 496.518751][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd51d18df90 [ 496.526781][ T31] RDX: 0000000000000002 RSI: 00007fd51d214a62 RDI: 00000000ffffff9c [ 496.534771][ T31] RBP: 00007fd51d214a62 R08: 0000000000000000 R09: 0000000000000000 [ 496.542912][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 496.550983][ T31] R13: 0000000000000003 R14: 00007fff0b943978 R15: 0000000000000000 [ 496.559056][ T31] [ 496.562104][ T31] INFO: task syz.0.3328:17991 blocked for more than 144 seconds. [ 496.573832][ T31] Not tainted syzkaller #0 [ 496.578836][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.587562][ T31] task:syz.0.3328 state:D stack:25752 pid:17991 tgid:17991 ppid:16943 task_flags:0x400040 flags:0x00080002 [ 496.599565][ T31] Call Trace: [ 496.602875][ T31] [ 496.605817][ T31] __schedule+0x14bc/0x5000 [ 496.610387][ T31] ? __pfx___schedule+0x10/0x10 [ 496.615249][ T31] ? schedule+0x91/0x360 [ 496.619686][ T31] schedule+0x165/0x360 [ 496.623856][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.629485][ T31] __mutex_lock+0x7e6/0x1350 [ 496.634096][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.638912][ T31] ? rfkill_unregister+0xc8/0x220 [ 496.643942][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.649090][ T31] ? __pfx_device_del+0x10/0x10 [ 496.653976][ T31] ? __cancel_work_sync+0x5c/0x110 [ 496.659173][ T31] rfkill_unregister+0xc8/0x220 [ 496.664034][ T31] nfc_unregister_device+0x96/0x300 [ 496.669283][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 496.675010][ T31] virtual_ncidev_close+0x56/0x90 [ 496.680102][ T31] __fput+0x44c/0xa70 [ 496.684151][ T31] task_work_run+0x1d4/0x260 [ 496.689081][ T31] ? __pfx_task_work_run+0x10/0x10 [ 496.694211][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 496.699660][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 496.705153][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 496.710643][ T31] ? rcu_is_watching+0x15/0xb0 [ 496.715435][ T31] do_syscall_64+0x2d0/0xf80 [ 496.720167][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.726285][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.730984][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.736947][ T31] RIP: 0033:0x7f9178b8f749 [ 496.741359][ T31] RSP: 002b:00007ffdf0f4cc28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 496.749842][ T31] RAX: 0000000000000000 RBX: 00007f9178de7da0 RCX: 00007f9178b8f749 [ 496.757928][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 496.765947][ T31] RBP: 00007f9178de7da0 R08: 0000000000000174 R09: 00000016f0f4cf1f [ 496.773927][ T31] R10: 00000000003ffc68 R11: 0000000000000246 R12: 0000000000051aa0 [ 496.781953][ T31] R13: 00007f9178de6090 R14: ffffffffffffffff R15: 00007ffdf0f4cd40 [ 496.790007][ T31] [ 496.793042][ T31] INFO: task syz.4.3331:18002 blocked for more than 144 seconds. [ 496.800910][ T31] Not tainted syzkaller #0 [ 496.805898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.814570][ T31] task:syz.4.3331 state:D stack:25752 pid:18002 tgid:18002 ppid:16566 task_flags:0x400040 flags:0x00080002 [ 496.826535][ T31] Call Trace: [ 496.829831][ T31] [ 496.832757][ T31] __schedule+0x14bc/0x5000 [ 496.837376][ T31] ? __pfx___schedule+0x10/0x10 [ 496.842244][ T31] ? schedule+0x91/0x360 [ 496.847040][ T31] schedule+0x165/0x360 [ 496.851224][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.856762][ T31] __mutex_lock+0x7e6/0x1350 [ 496.861391][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.866245][ T31] ? rfkill_fop_release+0x4b/0x220 [ 496.871374][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.876480][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 496.882036][ T31] rfkill_fop_release+0x4b/0x220 [ 496.887022][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 496.892582][ T31] __fput+0x44c/0xa70 [ 496.896617][ T31] task_work_run+0x1d4/0x260 [ 496.901215][ T31] ? __pfx_task_work_run+0x10/0x10 [ 496.906361][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 496.911743][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 496.917251][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 496.922537][ T31] ? rcu_is_watching+0x15/0xb0 [ 496.927560][ T31] do_syscall_64+0x2d0/0xf80 [ 496.932170][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.938316][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.943009][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.949722][ T31] RIP: 0033:0x7fb1a7d8f749 [ 496.954134][ T31] RSP: 002b:00007ffd7d0c5808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 496.963132][ T31] RAX: 0000000000000000 RBX: 00007fb1a7fe7da0 RCX: 00007fb1a7d8f749 [ 496.971619][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 496.979668][ T31] RBP: 00007fb1a7fe7da0 R08: 0000000000000000 R09: 000000117d0c5aff [ 496.988364][ T31] R10: 00007fb1a7fe7cb0 R11: 0000000000000246 R12: 0000000000051bbb [ 496.996818][ T31] R13: 00007fb1a7fe6090 R14: ffffffffffffffff R15: 00007ffd7d0c5920 [ 497.004832][ T31] [ 497.009133][ T31] INFO: task syz.4.3331:18003 blocked for more than 144 seconds. [ 497.017487][ T31] Not tainted syzkaller #0 [ 497.022604][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.031502][ T31] task:syz.4.3331 state:D stack:24632 pid:18003 tgid:18002 ppid:16566 task_flags:0x400040 flags:0x00080002 [ 497.043597][ T31] Call Trace: [ 497.046998][ T31] [ 497.049941][ T31] __schedule+0x14bc/0x5000 [ 497.054445][ T31] ? __pfx___schedule+0x10/0x10 [ 497.059342][ T31] ? schedule+0x91/0x360 [ 497.063592][ T31] schedule+0x165/0x360 [ 497.067823][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.073286][ T31] __mutex_lock+0x7e6/0x1350 [ 497.077911][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.082692][ T31] ? nfc_dev_down+0x3b/0x290 [ 497.087937][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.092975][ T31] ? do_raw_spin_lock+0x121/0x290 [ 497.098138][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 497.104058][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 497.109465][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 497.115204][ T31] nfc_dev_down+0x3b/0x290 [ 497.119703][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 497.125434][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 497.130638][ T31] rfkill_set_block+0x1d2/0x440 [ 497.135509][ T31] rfkill_fop_write+0x44b/0x570 [ 497.140413][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 497.145792][ T31] ? security_kernfs_init_security+0x220/0x290 [ 497.152040][ T31] ? rw_verify_area+0x255/0x4d0 [ 497.156939][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 497.162304][ T31] vfs_write+0x27e/0xb30 [ 497.166744][ T31] ? __pfx_vfs_write+0x10/0x10 [ 497.171518][ T31] ? __fget_files+0x2a/0x420 [ 497.176178][ T31] ? __fget_files+0x2a/0x420 [ 497.180780][ T31] ? __fget_files+0x3a0/0x420 [ 497.185457][ T31] ? __fget_files+0x2a/0x420 [ 497.190160][ T31] ksys_write+0x145/0x250 [ 497.194498][ T31] ? __pfx_ksys_write+0x10/0x10 [ 497.199400][ T31] ? do_syscall_64+0xbe/0xf80 [ 497.204080][ T31] do_syscall_64+0xfa/0xf80 [ 497.208644][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.215148][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.219948][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.225890][ T31] RIP: 0033:0x7fb1a7d8f749 [ 497.230319][ T31] RSP: 002b:00007fb1a8ba2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.238859][ T31] RAX: ffffffffffffffda RBX: 00007fb1a7fe5fa0 RCX: 00007fb1a7d8f749 [ 497.247746][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 497.255783][ T31] RBP: 00007fb1a7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.263825][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.271870][ T31] R13: 00007fb1a7fe6038 R14: 00007fb1a7fe5fa0 R15: 00007ffd7d0c56a8 [ 497.279934][ T31] [ 497.282969][ T31] INFO: task syz.2.3350:18096 blocked for more than 144 seconds. [ 497.290738][ T31] Not tainted syzkaller #0 [ 497.295673][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.304378][ T31] task:syz.2.3350 state:D stack:25064 pid:18096 tgid:18095 ppid:16126 task_flags:0x400140 flags:0x00080002 [ 497.316365][ T31] Call Trace: [ 497.319648][ T31] [ 497.322572][ T31] __schedule+0x14bc/0x5000 [ 497.327435][ T31] ? __pfx___schedule+0x10/0x10 [ 497.332445][ T31] ? schedule+0x91/0x360 [ 497.336754][ T31] schedule+0x165/0x360 [ 497.340912][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.346421][ T31] __mutex_lock+0x7e6/0x1350 [ 497.351017][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.355773][ T31] ? rfkill_register+0x37/0x8e0 [ 497.360693][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.365733][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 497.371219][ T31] ? device_initialize+0x24b/0x440 [ 497.376384][ T31] rfkill_register+0x37/0x8e0 [ 497.381102][ T31] nfc_register_device+0x14a/0x390 [ 497.386337][ T31] nci_register_device+0x87f/0x9d0 [ 497.391478][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 497.397198][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 497.402507][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 497.408028][ T31] virtual_ncidev_open+0x129/0x1a0 [ 497.413301][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 497.418981][ T31] misc_open+0x2d5/0x350 [ 497.423297][ T31] chrdev_open+0x4cc/0x5e0 [ 497.427749][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.432702][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 497.439234][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.444197][ T31] do_dentry_open+0x7ce/0x1420 [ 497.449057][ T31] vfs_open+0x3b/0x340 [ 497.453133][ T31] ? path_openat+0x33f3/0x3dd0 [ 497.457957][ T31] path_openat+0x340e/0x3dd0 [ 497.462570][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 497.467982][ T31] ? stack_depot_save_flags+0x40/0x850 [ 497.473477][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 497.479144][ T31] ? getname_flags+0xb8/0x540 [ 497.483831][ T31] ? __pfx_path_openat+0x10/0x10 [ 497.489066][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 497.494005][ T31] do_filp_open+0x1fa/0x410 [ 497.498576][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 497.503626][ T31] ? _raw_spin_unlock+0x28/0x50 [ 497.508557][ T31] ? alloc_fd+0x64c/0x6c0 [ 497.512907][ T31] do_sys_openat2+0x121/0x200 [ 497.517642][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.522918][ T31] ? rcu_is_watching+0x15/0xb0 [ 497.527720][ T31] __x64_sys_openat+0x138/0x170 [ 497.532579][ T31] do_syscall_64+0xfa/0xf80 [ 497.537138][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.543224][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.547970][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.553868][ T31] RIP: 0033:0x7f556d98f749 [ 497.558308][ T31] RSP: 002b:00007f556e86f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.566776][ T31] RAX: ffffffffffffffda RBX: 00007f556dbe5fa0 RCX: 00007f556d98f749 [ 497.574733][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 497.582745][ T31] RBP: 00007f556da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.590763][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.598763][ T31] R13: 00007f556dbe6038 R14: 00007f556dbe5fa0 R15: 00007ffd8a7d4fc8 [ 497.606821][ T31] [ 497.609859][ T31] INFO: task syz.1.3351:18107 blocked for more than 145 seconds. [ 497.618167][ T31] Not tainted syzkaller #0 [ 497.623123][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.631858][ T31] task:syz.1.3351 state:D stack:25256 pid:18107 tgid:18106 ppid:17508 task_flags:0x400140 flags:0x00080002 [ 497.643864][ T31] Call Trace: [ 497.647310][ T31] [ 497.650262][ T31] __schedule+0x14bc/0x5000 [ 497.654800][ T31] ? __pfx___schedule+0x10/0x10 [ 497.659719][ T31] ? schedule+0x91/0x360 [ 497.663967][ T31] schedule+0x165/0x360 [ 497.668173][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.673637][ T31] __mutex_lock+0x7e6/0x1350 [ 497.678297][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 497.683254][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.688076][ T31] ? misc_open+0x51/0x350 [ 497.692421][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.697525][ T31] misc_open+0x51/0x350 [ 497.701744][ T31] chrdev_open+0x4cc/0x5e0 [ 497.706223][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.711168][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 497.717636][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.722592][ T31] do_dentry_open+0x7ce/0x1420 [ 497.727497][ T31] vfs_open+0x3b/0x340 [ 497.731577][ T31] ? path_openat+0x33f3/0x3dd0 [ 497.736422][ T31] path_openat+0x340e/0x3dd0 [ 497.741026][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 497.746454][ T31] ? stack_depot_save_flags+0x40/0x850 [ 497.751938][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 497.757619][ T31] ? getname_flags+0xb8/0x540 [ 497.762305][ T31] ? __pfx_path_openat+0x10/0x10 [ 497.767270][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 497.772256][ T31] do_filp_open+0x1fa/0x410 [ 497.776834][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 497.781878][ T31] ? _raw_spin_unlock+0x28/0x50 [ 497.786785][ T31] ? alloc_fd+0x64c/0x6c0 [ 497.791122][ T31] do_sys_openat2+0x121/0x200 [ 497.795789][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.801038][ T31] ? rcu_is_watching+0x15/0xb0 [ 497.805812][ T31] __x64_sys_openat+0x138/0x170 [ 497.810733][ T31] do_syscall_64+0xfa/0xf80 [ 497.815224][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.821461][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.826208][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.832115][ T31] RIP: 0033:0x7f931718f749 [ 497.836560][ T31] RSP: 002b:00007f9318066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.845021][ T31] RAX: ffffffffffffffda RBX: 00007f93173e5fa0 RCX: 00007f931718f749 [ 497.853160][ T31] RDX: 0000000000048241 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 497.861175][ T31] RBP: 00007f9317213f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.869324][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.877521][ T31] R13: 00007f93173e6038 R14: 00007f93173e5fa0 R15: 00007ffc25405c28 [ 497.885499][ T31] [ 497.888783][ T31] INFO: task syz-executor:18130 blocked for more than 145 seconds. [ 497.896726][ T31] Not tainted syzkaller #0 [ 497.901671][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.910648][ T31] task:syz-executor state:D stack:27608 pid:18130 tgid:18130 ppid:1 task_flags:0x400040 flags:0x00080000 [ 497.922617][ T31] Call Trace: [ 497.925963][ T31] [ 497.928907][ T31] __schedule+0x14bc/0x5000 [ 497.933429][ T31] ? __pfx___schedule+0x10/0x10 [ 497.938363][ T31] ? schedule+0x91/0x360 [ 497.942626][ T31] schedule+0x165/0x360 [ 497.946861][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.952342][ T31] __mutex_lock+0x7e6/0x1350 [ 497.957036][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 497.962044][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.967149][ T31] ? misc_open+0x51/0x350 [ 497.971506][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.976618][ T31] misc_open+0x51/0x350 [ 497.980805][ T31] chrdev_open+0x4cc/0x5e0 [ 497.985229][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 497.990265][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 497.996638][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.001573][ T31] do_dentry_open+0x7ce/0x1420 [ 498.006403][ T31] vfs_open+0x3b/0x340 [ 498.010485][ T31] ? path_openat+0x33f3/0x3dd0 [ 498.015258][ T31] path_openat+0x340e/0x3dd0 [ 498.019945][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 498.025237][ T31] ? __pfx_path_openat+0x10/0x10 [ 498.030219][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 498.035272][ T31] do_filp_open+0x1fa/0x410 [ 498.039909][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 498.045097][ T31] ? _raw_spin_unlock+0x28/0x50 [ 498.050200][ T31] ? alloc_fd+0x64c/0x6c0 [ 498.054608][ T31] do_sys_openat2+0x121/0x200 [ 498.059349][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 498.064564][ T31] ? fd_install+0x95/0x3d0 [ 498.069060][ T31] ? fd_install+0x307/0x3d0 [ 498.073575][ T31] __x64_sys_openat+0x138/0x170 [ 498.078583][ T31] do_syscall_64+0xfa/0xf80 [ 498.083096][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.089279][ T31] ? clear_bhb_loop+0x60/0xb0 [ 498.093992][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.099941][ T31] RIP: 0033:0x7f5ebd38df11 [ 498.104358][ T31] RSP: 002b:00007ffe4a2c7bc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 498.112864][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5ebd38df11 [ 498.120876][ T31] RDX: 0000000000000002 RSI: 00007f5ebd4149b7 RDI: 00000000ffffff9c [ 498.129494][ T31] RBP: 00007f5ebd4149b7 R08: 0000000000000000 R09: 00007f5ebe11d6c0 [ 498.137701][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 498.145784][ T31] R13: 0000000000000003 R14: 00007ffe4a2c7f98 R15: 0000000000000000 [ 498.153882][ T31] [ 498.157048][ T31] INFO: task syz-executor:18131 blocked for more than 145 seconds. [ 498.164947][ T31] Not tainted syzkaller #0 [ 498.169926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.178658][ T31] task:syz-executor state:D stack:27832 pid:18131 tgid:18131 ppid:1 task_flags:0x400040 flags:0x00080000 [ 498.190645][ T31] Call Trace: [ 498.194020][ T31] [ 498.197140][ T31] __schedule+0x14bc/0x5000 [ 498.201690][ T31] ? __pfx___schedule+0x10/0x10 [ 498.206759][ T31] ? schedule+0x91/0x360 [ 498.211055][ T31] schedule+0x165/0x360 [ 498.215211][ T31] schedule_preempt_disabled+0x13/0x30 [ 498.220780][ T31] __mutex_lock+0x7e6/0x1350 [ 498.225384][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 498.230374][ T31] ? __mutex_lock+0x5bb/0x1350 [ 498.235145][ T31] ? misc_open+0x51/0x350 [ 498.239589][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 498.244645][ T31] misc_open+0x51/0x350 [ 498.248874][ T31] chrdev_open+0x4cc/0x5e0 [ 498.253307][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.258317][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 498.264753][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.269762][ T31] do_dentry_open+0x7ce/0x1420 [ 498.274551][ T31] vfs_open+0x3b/0x340 [ 498.278664][ T31] ? path_openat+0x33f3/0x3dd0 [ 498.283434][ T31] path_openat+0x340e/0x3dd0 [ 498.288692][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 498.293991][ T31] ? __pfx_path_openat+0x10/0x10 [ 498.298958][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 498.303911][ T31] do_filp_open+0x1fa/0x410 [ 498.308475][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 498.313593][ T31] ? _raw_spin_unlock+0x28/0x50 [ 498.318501][ T31] ? alloc_fd+0x64c/0x6c0 [ 498.322844][ T31] do_sys_openat2+0x121/0x200 [ 498.327585][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 498.332972][ T31] ? fd_install+0x95/0x3d0 [ 498.337437][ T31] ? fd_install+0x307/0x3d0 [ 498.342005][ T31] __x64_sys_openat+0x138/0x170 [ 498.346936][ T31] do_syscall_64+0xfa/0xf80 [ 498.351450][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.357587][ T31] ? clear_bhb_loop+0x60/0xb0 [ 498.362279][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.368260][ T31] RIP: 0033:0x7f441218df11 [ 498.372678][ T31] RSP: 002b:00007ffec9224790 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 498.381144][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f441218df11 [ 498.389144][ T31] RDX: 0000000000000002 RSI: 00007f44122149b7 RDI: 00000000ffffff9c [ 498.397152][ T31] RBP: 00007f44122149b7 R08: 0000000000000000 R09: 00007f4412f1d6c0 [ 498.405111][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 498.413125][ T31] R13: 0000000000000003 R14: 00007ffec9224b68 R15: 0000000000000000 [ 498.421163][ T31] [ 498.424173][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 498.433275][ T31] INFO: task syz-executor:18134 blocked for more than 146 seconds. [ 498.441427][ T31] Not tainted syzkaller #0 [ 498.446503][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.455340][ T31] task:syz-executor state:D stack:27608 pid:18134 tgid:18134 ppid:1 task_flags:0x400040 flags:0x00080000 [ 498.467328][ T31] Call Trace: [ 498.470612][ T31] [ 498.473545][ T31] __schedule+0x14bc/0x5000 [ 498.478149][ T31] ? __pfx___schedule+0x10/0x10 [ 498.483048][ T31] ? schedule+0x91/0x360 [ 498.487357][ T31] schedule+0x165/0x360 [ 498.491519][ T31] schedule_preempt_disabled+0x13/0x30 [ 498.497052][ T31] __mutex_lock+0x7e6/0x1350 [ 498.501654][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 498.506751][ T31] ? __mutex_lock+0x5bb/0x1350 [ 498.511528][ T31] ? misc_open+0x51/0x350 [ 498.515939][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 498.521021][ T31] misc_open+0x51/0x350 [ 498.525196][ T31] chrdev_open+0x4cc/0x5e0 [ 498.529718][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.534671][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 498.541065][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.546084][ T31] do_dentry_open+0x7ce/0x1420 [ 498.550877][ T31] vfs_open+0x3b/0x340 [ 498.554941][ T31] ? path_openat+0x33f3/0x3dd0 [ 498.559757][ T31] path_openat+0x340e/0x3dd0 [ 498.564365][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 498.569716][ T31] ? __pfx_path_openat+0x10/0x10 [ 498.574662][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 498.579690][ T31] do_filp_open+0x1fa/0x410 [ 498.584212][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 498.589320][ T31] ? _raw_spin_unlock+0x28/0x50 [ 498.594190][ T31] ? alloc_fd+0x64c/0x6c0 [ 498.598603][ T31] do_sys_openat2+0x121/0x200 [ 498.603311][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 498.608620][ T31] ? fd_install+0x95/0x3d0 [ 498.613052][ T31] ? fd_install+0x307/0x3d0 [ 498.617648][ T31] __x64_sys_openat+0x138/0x170 [ 498.622514][ T31] do_syscall_64+0xfa/0xf80 [ 498.627050][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.633123][ T31] ? clear_bhb_loop+0x60/0xb0 [ 498.637895][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.643796][ T31] RIP: 0033:0x7ff298b8df11 [ 498.648360][ T31] RSP: 002b:00007ffc377e9b90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 498.656833][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff298b8df11 [ 498.664810][ T31] RDX: 0000000000000002 RSI: 00007ff298c149b7 RDI: 00000000ffffff9c [ 498.672834][ T31] RBP: 00007ff298c149b7 R08: 0000000000000000 R09: 00007ff29991d6c0 [ 498.680875][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 498.689040][ T31] R13: 0000000000000003 R14: 00007ffc377e9f68 R15: 0000000000000000 [ 498.697092][ T31] [ 498.700103][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 498.709188][ T31] INFO: task syz-executor:18135 blocked for more than 146 seconds. [ 498.717137][ T31] Not tainted syzkaller #0 [ 498.722071][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.730875][ T31] task:syz-executor state:D stack:27832 pid:18135 tgid:18135 ppid:1 task_flags:0x400040 flags:0x00080000 [ 498.742832][ T31] Call Trace: [ 498.746161][ T31] [ 498.749103][ T31] __schedule+0x14bc/0x5000 [ 498.753620][ T31] ? __pfx___schedule+0x10/0x10 [ 498.758527][ T31] ? schedule+0x91/0x360 [ 498.762788][ T31] schedule+0x165/0x360 [ 498.767009][ T31] schedule_preempt_disabled+0x13/0x30 [ 498.772476][ T31] __mutex_lock+0x7e6/0x1350 [ 498.777103][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 498.782050][ T31] ? __mutex_lock+0x5bb/0x1350 [ 498.786919][ T31] ? misc_open+0x51/0x350 [ 498.791273][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 498.796386][ T31] misc_open+0x51/0x350 [ 498.800555][ T31] chrdev_open+0x4cc/0x5e0 [ 498.804971][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.809961][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 498.816353][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 498.821313][ T31] do_dentry_open+0x7ce/0x1420 [ 498.826187][ T31] vfs_open+0x3b/0x340 [ 498.830277][ T31] ? path_openat+0x33f3/0x3dd0 [ 498.835157][ T31] path_openat+0x340e/0x3dd0 [ 498.839870][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 498.845177][ T31] ? __pfx_path_openat+0x10/0x10 [ 498.850197][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 498.855163][ T31] do_filp_open+0x1fa/0x410 [ 498.859762][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 498.864819][ T31] ? _raw_spin_unlock+0x28/0x50 [ 498.869745][ T31] ? alloc_fd+0x64c/0x6c0 [ 498.874102][ T31] do_sys_openat2+0x121/0x200 [ 498.878874][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 498.884096][ T31] ? fd_install+0x95/0x3d0 [ 498.888562][ T31] ? fd_install+0x307/0x3d0 [ 498.893087][ T31] __x64_sys_openat+0x138/0x170 [ 498.897981][ T31] do_syscall_64+0xfa/0xf80 [ 498.902490][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.908600][ T31] ? clear_bhb_loop+0x60/0xb0 [ 498.913284][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.919227][ T31] RIP: 0033:0x7f03e098df11 [ 498.923641][ T31] RSP: 002b:00007fff45f88ca0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 498.932305][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f03e098df11 [ 498.940354][ T31] RDX: 0000000000000002 RSI: 00007f03e0a149b7 RDI: 00000000ffffff9c [ 498.948349][ T31] RBP: 00007f03e0a149b7 R08: 0000000000000000 R09: 00007f03e171d6c0 [ 498.956561][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 498.964567][ T31] R13: 0000000000000003 R14: 00007fff45f89078 R15: 0000000000000000 [ 498.972668][ T31] [ 498.975697][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 498.984973][ T31] [ 498.984973][ T31] Showing all locks held in the system: [ 498.992878][ T31] 5 locks held by kworker/u8:0/12: [ 498.998067][ T31] 1 lock held by khungtaskd/31: [ 499.002934][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 499.013046][ T31] 1 lock held by syslogd/5180: [ 499.017857][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 499.027827][ T31] 2 locks held by getty/5588: [ 499.032503][ T31] #0: ffff8880301a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 499.042324][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 499.052486][ T31] 4 locks held by kworker/u8:27/9097: [ 499.057896][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 499.068838][ T31] #1: ffffc9001baa7b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 499.079484][ T31] #2: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 499.088957][ T31] #3: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 499.099302][ T31] 3 locks held by kworker/0:9/9169: [ 499.104501][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 499.115529][ T31] #1: ffffc9001bb67b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 499.129077][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 499.140486][ T31] 1 lock held by syz-executor/17872: [ 499.145772][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.154355][ T31] 2 locks held by syz.0.3328/17991: [ 499.159628][ T31] #0: ffff88805826f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 499.169924][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 499.180145][ T31] 1 lock held by syz.4.3331/18002: [ 499.185352][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220 [ 499.195601][ T31] 2 locks held by syz.4.3331/18003: [ 499.200858][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 499.211010][ T31] #1: ffff88805826f100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 499.220034][ T31] 3 locks held by syz.2.3350/18096: [ 499.225217][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.233698][ T31] #1: ffff88807bda9100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x390 [ 499.243320][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 499.253274][ T31] 1 lock held by syz.1.3351/18107: [ 499.258455][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.266986][ T31] 1 lock held by syz-executor/18130: [ 499.272264][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.280786][ T31] 1 lock held by syz-executor/18131: [ 499.286157][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.294622][ T31] 1 lock held by syz-executor/18134: [ 499.299962][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.308459][ T31] 1 lock held by syz-executor/18135: [ 499.313726][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.322267][ T31] 1 lock held by syz-executor/18141: [ 499.328488][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.337240][ T31] 1 lock held by syz-executor/18144: [ 499.342528][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.351042][ T31] 1 lock held by syz-executor/18145: [ 499.356366][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.364824][ T31] 1 lock held by syz-executor/18148: [ 499.370163][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.378689][ T31] 1 lock held by syz-executor/18149: [ 499.383983][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.392597][ T31] 1 lock held by syz-executor/18155: [ 499.397968][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.406733][ T31] 1 lock held by syz-executor/18158: [ 499.412048][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.420585][ T31] 1 lock held by syz-executor/18159: [ 499.425962][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.434424][ T31] 1 lock held by syz-executor/18162: [ 499.439765][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.448293][ T31] 1 lock held by syz-executor/18163: [ 499.453564][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 499.462095][ T31] [ 499.464421][ T31] ============================================= [ 499.464421][ T31] [ 499.472939][ T31] NMI backtrace for cpu 0 [ 499.472959][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 499.472976][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.472990][ T31] Call Trace: [ 499.472996][ T31] [ 499.473003][ T31] dump_stack_lvl+0x189/0x250 [ 499.473029][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.473049][ T31] ? __pfx__printk+0x10/0x10 [ 499.473079][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 499.473104][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 499.473128][ T31] ? __pfx__printk+0x10/0x10 [ 499.473154][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 499.473181][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 499.473205][ T31] sys_info+0x135/0x170 [ 499.473224][ T31] watchdog+0xf95/0xfe0 [ 499.473252][ T31] ? watchdog+0x20a/0xfe0 [ 499.473282][ T31] kthread+0x711/0x8a0 [ 499.473307][ T31] ? __pfx_watchdog+0x10/0x10 [ 499.473329][ T31] ? __pfx_kthread+0x10/0x10 [ 499.473352][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.473376][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 499.473392][ T31] ? __pfx_kthread+0x10/0x10 [ 499.473414][ T31] ret_from_fork+0x599/0xb30 [ 499.473433][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 499.473460][ T31] ? __switch_to_asm+0x39/0x70 [ 499.473479][ T31] ? __switch_to_asm+0x33/0x70 [ 499.473497][ T31] ? __pfx_kthread+0x10/0x10 [ 499.473519][ T31] ret_from_fork_asm+0x1a/0x30 [ 499.473556][ T31] [ 499.473562][ T31] Sending NMI from CPU 0 to CPUs 1: [ 499.623252][ C1] NMI backtrace for cpu 1 [ 499.623270][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 499.623287][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.623296][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 499.623317][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 499.623331][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 499.623345][ C1] RAX: 7b8bb633545fb100 RBX: ffffffff81978fda RCX: 7b8bb633545fb100 [ 499.623357][ C1] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360 [ 499.623368][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 499.623380][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 499.623391][ C1] R13: 1ffff110038dbb70 R14: 0000000000000001 R15: 0000000000000001 [ 499.623402][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 499.623414][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.623425][ C1] CR2: 00005640b8aff168 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 499.623439][ C1] Call Trace: [ 499.623446][ C1] [ 499.623453][ C1] default_idle+0x13/0x20 [ 499.623469][ C1] default_idle_call+0x73/0xb0 [ 499.623488][ C1] do_idle+0x1ea/0x520 [ 499.623504][ C1] ? irqentry_exit+0x5ba/0x660 [ 499.623522][ C1] ? __pfx_do_idle+0x10/0x10 [ 499.623546][ C1] cpu_startup_entry+0x44/0x60 [ 499.623562][ C1] start_secondary+0x101/0x110 [ 499.623584][ C1] common_startup_64+0x13e/0x147 [ 499.623611][ C1] [ 499.789557][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 499.796414][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 499.805502][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.815543][ T31] Call Trace: [ 499.818824][ T31] [ 499.821739][ T31] dump_stack_lvl+0x99/0x250 [ 499.826314][ T31] ? __asan_memcpy+0x40/0x70 [ 499.830887][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.836073][ T31] ? __pfx__printk+0x10/0x10 [ 499.840668][ T31] vpanic+0x237/0x6d0 [ 499.844638][ T31] ? __pfx_vpanic+0x10/0x10 [ 499.849167][ T31] ? preempt_schedule_common+0x83/0xd0 [ 499.854614][ T31] panic+0xb9/0xc0 [ 499.858327][ T31] ? __pfx_panic+0x10/0x10 [ 499.862725][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 499.868082][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 499.874227][ T31] watchdog+0xfdf/0xfe0 [ 499.878373][ T31] ? watchdog+0x20a/0xfe0 [ 499.882702][ T31] kthread+0x711/0x8a0 [ 499.886781][ T31] ? __pfx_watchdog+0x10/0x10 [ 499.891479][ T31] ? __pfx_kthread+0x10/0x10 [ 499.896083][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.901293][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 499.906485][ T31] ? __pfx_kthread+0x10/0x10 [ 499.911086][ T31] ret_from_fork+0x599/0xb30 [ 499.915669][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 499.920772][ T31] ? __switch_to_asm+0x39/0x70 [ 499.925525][ T31] ? __switch_to_asm+0x33/0x70 [ 499.930274][ T31] ? __pfx_kthread+0x10/0x10 [ 499.934861][ T31] ret_from_fork_asm+0x1a/0x30 [ 499.939641][ T31] [ 499.943126][ T31] Kernel Offset: disabled [ 499.947436][ T31] Rebooting in 86400 seconds..