last executing test programs: 19.535065943s ago: executing program 1 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) (async) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) 18.457448599s ago: executing program 1 (id=1638): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x12, 0xd7c, 0x5, 0x1000000}}) 18.395709057s ago: executing program 1 (id=1641): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) 18.279127092s ago: executing program 4 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80402800}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x170, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x2400c810}, 0x40) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000003c0)={{r0}, "b689498977dcb0a0eb9f5bc3a3361568c76c2292f9137311b26c63bf76fa3711687b51fbf23d37a2103dfd2327adef97059c8c1ed0ddb9c23edae04bc8592d58a4153b4c58595e7c0c4bfcf668c38bd763979c780bb2cf18ea0431baa3e4c2cab72586940c6f0e8f9e43d8d161b5d55baf2dc6ff6c0d923e64db9db364e16621d2490e8a85b3a1a2591e61a1889140e22211710dacca93603a5cb0ee9a0d0fa641c7b11029015fe72eac2588381eb840514530213eabcf36c53fa2194239d82402c516704ab04b7938c8cb4c998b2c2bfcf9d897aa144f05008aec5b05e9a3be1bab3b1b35320c73e2ac1a9b53bc9f6915da8f675680a05d3f9f753bf4c2e90ec48e58d36ee19499c77ff62ae405c61266de1a203d3c79a6742f49f1c425e0c5986f533b3217f07ca3cadad558c85074f699c1fac0c67e90d25e24dcdec43629683dedb5a58b1b24f7ad74ff8e934f0c79dc85f458cd398b96cf8e5d53dc7cbd32ea10242d97376331800e6d5f0e44a1d692bbb79cae9edb5bb60b02e68365f0456270edfdd3bb437fbeecc4ee3a63983df0ef89953c2f4633ad6dd36a3a22d4c26c60f16b1bdb721af99f5897d9993572e05fd0dcdbb73a419eab2bd26167f6db8b7495b3bf65f9e91ff59d4897c2908173f4bef46e279097e0671bbcf7935cc653bcf37c64dfbd9dbc7a236c8fdfeccbd6d0e7a89701a93614b4f4dee160b667f85fd323144c865c5651abf9000939688a6d826a92fe9a6d23443f7a73a70ae6e84a90b680357a2c74c8d21a4f3d7a6a4f5d883c8e5996413a60a305252ff36338c9931bc617ca738b2356e73010be7d5e238dcf8eddd9e0264516015b3d0696c366fcd0086d252af19331946844432a557d0a38a1a9eacf943f8568961fad1d278eadf4d451ae1859da32b0d51a6b8dd18141cbb795f91e6009b41e1c9307ae793c48e2f4b83b912fa4d697f512866c5fe56ca33a34c5764bb3423d5aa3505af8756c40eb6b557d196f0ce0a8bd1724a28ae0a345fecad487d35a7eafb894d98ffd7a72961081aff881efadfddab66d386168bd0fc4191a4eab15307c3621b37ce7f9e9087e30555c9ced139722b1fb981a9d7ff24b11c6fe6f94e5d2240bfe7efbb732b50c3763386fddcaa79fa304be7ff4a40686350518d0cebcbe0e5825a66a93bb49013c425bd5b45fa48e44cef29f1f13bc245669e8c71819d13fd44dd632926f6328a458d750291bc76da3e4b0e3a3394aafe25574e35857752ddcb37d91b022291e4db5a96a984db90b1646de214e747364230d3d35b8f6e7ff83a87b8626cce6db8ca7925f97486e280ce4346d95151c7f4e0b208df7b213b344717c841303db9e664684b9125082fc79e316b0111adec6c60c891c559046990279948f88b45e897e88c14cc194e248f684c91893b6a1dc442e1ccceb2acfd19d23ce29cc849981df12b9a743eec9b1a802124cc4d5a043bfce01886f4e7a8dfe3d702ecd5de4eb3431bb9bb82ba762a67ef33df0255a46a317ca542cd55e0366f7c1b2fb5884c424f2803b3c5d9baad92ff58d132abdf23851f750b396c05af63d2dc6c3345f4381adba94c118220ba85fba589c246efe96c89c16cb9dc3d2548c2f409a246ec5db561d47fea894ef982c1006cd3e7cbf6087154d70be7cac6f4f0f713d158b3dd7af31931de907a57de1cb0956b5aabfbcb3eca861f28574bfcf4a303e9e8342aa409e522260f757dd99ef86bcb5adc56dfa860921a9702f19a171c3a4e56c8dde20e7bbcc2baab227d3fad55a3f4958a7de91766bdd27eaf770c111fb876edc6e74d2f263e13c563efc083acd07b85ff82bc5fce59d921a0ca1777e8daf41f6c1d93d0e68170c91b1a0c751d1135caec0bc04161a68e43c3c357c6daf8636dcf59c98ba0129af14719e5829700b1d9ede739e966cb994bd5d5617ef761ca8ed4895ede5634bb871568f57cb45b57f71097f1d4f79933d2d09265a718b5230a561ce387ae1723c66d7120b23e5a0aba4caf426eb03bcb6ed153e97a3c11640b802bc5dc9ad154cc07b61ef2f85fa39e2a7c07749acee29dbf253135e78badd4f18930316c4295f29596fb3ee6a884d65971f23f6a9988ed40b5b2a9fa9e6d3fa7a17651e57dab48776f8c2c037184a909b1b55a0b2b32a2d5aa35a21a2411bd6ff393d29beda0634ce2bde56271807bde78e01caa5779481c8bb801c3ea9a61ea57de4d84c67990cfd225188996c7507034af6939eafb10e0b462f50052f9cda378108c6aafcb0dbc0054e0f2350627a0b116884e5d1fb4c373fc825ae098dfdb0981be184366b3cbf70a3dbc5175f68bc491d5d33ddd8b6aec7bd25292aa1b4a2c51bd67b21f6e3acfd644a97e698d4bd2b23644f3f75a25d98c5077c6a64d0974b2f63499f66901c0accabce7e09790afa0c115f6d6f43fea927b263e43dba8f61543862cefad13aacacb083e7b87417b5a9ceb387fcb4b588b04d13d84d29bcb566229e3e8726011c62f8de25a534819065d6ddd38724d7866a00d6c3552140ccae7289b959a70f26acb1d64d00d789ebe29e1b444ec504195b1cf4ab5ab2fe85e1242a9ccf721bb7423dd2eb6e13192b870582bd97b3ad6fe6f56e06f95328ea06c2be4861d8e2061c8a904f8744b8c8f774a3d2e6a74b82164996922dd1eede04cc6522283949407a952d676885287694007f175078dd36ef308a060d2042f9578674406f8a5676188e3885d96270a7db353e605d3219286a14d0cec28d7056e6258eff53e740b6c235129a08434335e19c1ddd5cc4e633fa43c7766c510ef8df705c18dfc6d255756d68e356473aacb1cecca0fc03f8951e3702b48c19424f2f8a40efeed3c6c1ac96edbe7d181de2a069de552b9d6498c0230f1fdda8f0de5912eb29940285c6b5effa10a5fce1b7165a61b3954bfb2384256bb49c186b8d02a7c87b6ea835b707c5a44211f1d1217c8abcb871dace4657eb23a6e5e92b7f4adedf37440dac70301e0eb896956e7d8ab876e976bc7b3d27becbac26877df6f1b64eaa06b4d229d83e619e501460f0a8a944f9a3f0f4ca5db93fd3860d020c4fe06818234e9b2fbf899c000e106b388cf535264e7bd186c71ebed55f10e3796d8532ef3b1e3867378e653348ce9ed9dacbf78a4c8b2709db703f9f97b9db5e1766d2881a1b358a0fc05a27df289a2b55134e35ce8e8d8f7a9e970997f80c56822cf0c283a8005ce0b61e9a884a4566b47fc9b6914b6b8cc82900528f15634d46ea0845e647a831448ea21899e7a2fdefb9805b6d92abad7918d438cb355e36f078295b84d0f8a7d4080c2328b3ce145cb52fc42f2431e6041b9ef26ccda637431bc844de72f6303e3610c9da6779915627b2665b1b93167006e163dad6621df01472d09186e327eefe0bcc84b07360950dfb9d700bcd2e46cde9bc504e9a4114d246136cbfa736072fa4aee7a0398911d19effccd0be81242e8f965336fa71fb4b3e97fe3181ed11576e461918d9dbee1158189786a04fb1ce20920537aca3a53fed1fc496cca19f09d8a725c0306f5f967d2300f85125ba9ac667482121f2b2ca53bdbf2504a61eb323716b08a0e78cc08c4ef59dd16b71b184e028f9a02c8b437f1d9dd2012ec1dbc30895d24a45ea63c8640acd7ba2740b050e69a8df816d4bd15f213fe8201be1fc2a7f05e11004bc19255f7c6517dfd6bc993d6b02fe9e9da41d97f6e5dd7cf2d91c0a8aaf47a02270f3e1430bb6544e55ed71ca45d3a341514669e1e249066b168760bc8e797751c7081c8caa674c59b2a7e4ef3e75085d896945a5c2d5f4eb10faad217017ccd18bb7ed3a05ff212bd58a9713208368f109e30d7840ee9f32e6252cc2b485297234b453796ea9acdc0394ce970ecb923cbb5fcd6ab0798d136c70a76627554ce939910fb9602a5adedd5eb528cc7f50c7aea1729b2711ae579ad578b35aaee8e7f0a13891abcbc4dd8883814f820d6dbeb0c86c2e0409f9d6e5cdafc7d27af782cdcca9c4dbdd9f007a5bc2703161abbdebe3803f578a62cf33e43604d43595bb81a0edafcf62bfb2eb94238b5c643cf47f9cce60d946cdfd7144e383d1b67e685336680383ad077d4468316ed7f632a967563b89744f44f667eed514c7358d249cbed9158e5b62daa3e1bcbff27ef2a1ad4bd815347e70587dda5bb3039a2a3721b98d768bc7f093dd7cc75459b43295156a2ae36b443532f4aff111a476aa1a5864fea18fb1f58196c1fc8edfa4999c42c53b36a15ca8b8a8874541f8a3d98dd92b6a9b98f74776cfbdbf42a73c2893fca550b7f06859ff8cc4ffefb1de51eec77b71301d4c3f3deeee0b732455fa267feed2ba7ebd233324a29c5b2b701fc5d7474e0d7db6d71a69ea045b6a78bae5a2926276667be777a8a01bf2df90f729e0ecdbd264122529377b0658f786ffe87841c5f256ee15e324579dc373e925c942753a9fcb4bf752de993e83af5df9fd86f1086a314488ca86da3b7cb4c159fa0e7223b72ce95b4905d097b59635815e83befec135a93d5e0523e79dd0f73b0bc60cc83e2c13552cf1ba465db1a237cf54b8b0735408bacaafe806779cf9d6a289f7ae369ac0928a20667a37e448b7fb61c145e1ea951d0b08f77e8a0757f660a45e51e59eeeb55a608d7783b7000062f71fd12c718de257717dde2f59740db34beae055b612932f8923d81f7219cf5ad1d5f3b21fbd7f26631ab0c0f84ec72edbd36841642a9927c7f23aaa26bdacdb25a5b1ff870ac9448b11502bb0b661f377b24bc3a0c059c4d65ec8e8713058a6cb538703e31369bffeaf2f6007df6df08ab1d271be1bcc9e67a5a71fd0e1a7d591afa33fa9c522dc1f8d6010fea7e0c7c92fb5e448d1450326484a6cde5f7f44dd8eb17a428fb88f2e3cd56beb2bf002ff716ecd24f55c29f228af44010decbaa7956da284fa11c771d53e17142f0a8a05bdbc33205b86fe33e157de6dcea33ef9c4812385dfb7f979f57a426c726c54ba3bd6d43d4c70c0edc4b77108f9f9a4ac7c7386630e463235bb407a1de137211c85955df46120c0d439d137e38c09231d75ce4c99eb4488df7b357c961c3428bfd0768264143e16e760a9906492ea0af316090a9d0ce242af0c34334e004b86078f4049f6ce8198014a54f868d94a5e99c7693b2bf9c0e589d54d7ac6c31f1f213c84a54f225158ad0a2353b50106ecde5d6c502ee14ef0410301d390f0a77f1ce0bd20f580df8bc723e9cb88b88c82592ca61b602f48eea3423a2afdd5895f30b960168c67b8ef0b3595ccf1ea146944c563c4bc3ad880818fec222d26d62e30e23538ed7b4cef61af58ed750e2d907b0e27ee78a9260cd96e5e0ba0c7c8b1b01d7bad0ce128bcca10ab1077eed1f012b8fc0c7d7baa75e4d56287684304c0b175baa099b83b38ed7b18f21c54b18bdaccf8ea66ae2cd0a9dab16d31b92e921bcbab680c2c7664ef59b21ac54d1895e904b261188120460e66eab1e85bf38f6945fba8f8536742d0268feb334f6343a5d8bbb1d7d926f315e079ad6d768c95497a1d204dbf28490961f5bf93961ef1f515efa362cf48b5725eca1ba27d30e1bf479ed17bc80916e37cae28913dcbcc24cde0442bbec56a9d184f9a81eaac0434a4ef46dcb9f41f4c6c2aac5b557c54b3b8bc432af626b69f3a959cab5eda9e1b163721df88d93f2628afbd03d5fb68ded321defd0f576c7dc2c0579455d5f7c031f370bfbead4d5423db3c6b1f0ba63f6297be3cc57057f99f7b963c"}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x30, r4, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3, 0xfe, 0x3, 0x9}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x240088c0}, 0x90) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8044404}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r5, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0x8, 0xfffffffd, 0x2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000884) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000001640)={0x0, 'netdevsim0\x00', {0x2}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x3, 0x9, 0x5, 0xb34}]}, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xce2c, 0x17}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040845}, 0x24044080) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001800)={0x0, @multicast1, @broadcast}, &(0x7f0000001840)=0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001880), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@bloom_filter={0x1e, 0x8, 0x7ff, 0x7, 0x208, 0xffffffffffffffff, 0x9, '\x00', r7, r8, 0x2, 0x1, 0x3, 0xe}, 0x50) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000001940)={@rand_addr=0x64010102, @broadcast, 0x1, 0xa, [@empty, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @multicast1]}, 0x38) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r10, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0xa0, r11, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3372}, {0x6, 0x11, 0x3eaa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0xfffa}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)}, 0x20) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000001d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x3, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0, 0x5f, 0x2e, 0x0, 0x0, 0x30]}}, &(0x7f0000001d80)=""/249, 0x2c, 0xf9, 0x0, 0xe}, 0x28) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f40)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002000)=@bpf_tracing={0x1a, 0x15, &(0x7f0000001c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x98}, [@map_fd={0x18, 0xb, 0x1, 0x0, r9}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x448}, @call={0x85, 0x0, 0x0, 0x51}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000}]}, &(0x7f0000001cc0)='GPL\x00', 0x0, 0x2, &(0x7f0000001d00)=""/2, 0x41100, 0x2, '\x00', 0x0, 0x1c, r13, 0x8, &(0x7f0000001ec0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001f00)={0x3, 0x8, 0x0, 0x3}, 0x10, 0x20de0, r10, 0x2, &(0x7f0000001f80)=[r9, r9, r14, r9], &(0x7f0000001fc0)=[{0x5, 0x3, 0x0, 0x2}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x2}, 0x94) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000002280)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002240)={&(0x7f0000002100)={0x118, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_NODE_NAME={0xda, 0xa8, @random="c75fd5406ac3b4c620207c018f8af0f4d28fa4707b6664eb0343ddcbd3f6c630eb446186540a82f663ab04bd8628a4fa1523428784eba3863605300a28cf95a73a25b0d45ece840af3f08dc007fad1bb2635ccf4cf580a052034bf503b70e53a24b6cf6d021093d372257b5d8001247a4a76f60e734fd7b021d3fa5f37ef51b4a4ba8b1ea8b9497b33a12bc85b3cad7e25617ba5bce62c31d774c5da960976b28131888ce9f96a5d04d69cbafe132b3c7241dab9adc98347d2e2c9d97415b058f21a158be7eac6aa7bccc6288f7023aec3c655199294"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x4024010) syz_genetlink_get_family_id$ipvs(&(0x7f00000022c0), r0) socket$tipc(0x1e, 0x2, 0x0) read$nci(r14, &(0x7f0000002300)=""/183, 0xb7) 18.227813317s ago: executing program 3 (id=1644): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000bd00000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000380), 0x8) 18.145433144s ago: executing program 1 (id=1645): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x393, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 18.110780498s ago: executing program 4 (id=1647): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdea, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 17.809790053s ago: executing program 4 (id=1649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x26020480) (async) unshare(0x26020480) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r0, 0x37}, 0x20) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r3], 0x38}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r3], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x9, &(0x7f0000000200)="67c35ed512d7033f935f9190d8220e8f94399e7d54bba4e77d9826a034480293c87612280d5b1075b874f5a0880410c5c04ce8ea3537e2c35c7ecc1aa427") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x1, 0x2, 0x0) (async) socket(0x1, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r12 = socket(0x40000000015, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2720, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async) getsockopt(r12, 0x200000000114, 0x2720, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 17.330612919s ago: executing program 4 (id=1652): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x3ff}, 0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100003040000000000000083481cf87387e7178e106ee81b26cc5e049f", @ANYRES32=r2, @ANYBLOB="080000000000000020001280080001007674690014000280080003000200000008000400ac1414bb"], 0x40}, 0x1, 0x2000000000000000}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 17.267834235s ago: executing program 3 (id=1653): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x9, [0x101, 0x9, 0xf6, 0x9, 0x5, 0x16, 0xe038, 0x7b8, 0x2]}, 0x16) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x303, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e22, 0x4e23, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xfff], 0x0, [0x7]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000"], 0x64}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) (rerun: 64) 17.213337557s ago: executing program 1 (id=1654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) (async) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0xfc6d) 17.048772168s ago: executing program 4 (id=1656): r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891e, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f00000002c0)="882e", 0x2, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) unshare(0x2000400) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x7, 0x40}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x7, 0x40}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x5, 0x6}, 0x8) socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 16.913030292s ago: executing program 3 (id=1658): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2f000000, 0xe, 0x0, &(0x7f0000000780)="5ceced9e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x36, 0x1, 0x8, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0}, 0x40) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000480)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x38, 0x21}, 0x20) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, &(0x7f0000000500)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000340)="64fb6030f5d4d1e5a26303187f6863a1bacbb003fa29121c2f941338823526ca7e7dff1c4f176aaffb9336ed41f9e5f2a876c4bd40dc", 0x1}], 0x1}}], 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r9 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000180)=0x6501, 0x4) sendto$inet(r9, &(0x7f00000002c0)="b401fcc8311bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0x8001, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], &(0x7f0000000340), 0x10, 0x7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r10, r1, 0x4, 0x2, 0xffffffffffffffff, @void, @value=r11, @void, @void, r5}, 0x20) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r12, 0x6, 0x11, 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r14, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r14, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r13, 0x7ca8e000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r14, &(0x7f0000000440)=[{0x0}], 0x1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x8000) 16.888366143s ago: executing program 1 (id=1659): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x20}}, 0x84) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x20000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x9507, 0x20a80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x10000}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4014) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 16.839993435s ago: executing program 4 (id=1661): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000007d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}, @struct]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42}, 0x20) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) 16.460596107s ago: executing program 0 (id=1663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0xe, 0x3, 0x6, 0x0, 0xf, 0xe, 0xa, 0x2, 0xd, 0x10, 0x5, 0x4, 0x2, 0xe, 0xb, 0xf], 0x0, [0x7, 0xffff, 0x8, 0xdde, 0x0, 0x3, 0x3dd, 0x2, 0x1, 0x76d8, 0x8, 0x7f, 0x7, 0x3, 0x81, 0x800], [0xffff, 0x5, 0x8, 0x2, 0x4, 0x3, 0x1, 0x5, 0x1000, 0x6, 0x2, 0x2, 0x1, 0x7b2, 0x2bba, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0xe, 0x3, 0x6, 0x0, 0xf, 0xe, 0xa, 0x2, 0xd, 0x10, 0x5, 0x4, 0x2, 0xe, 0xb, 0xf], 0x0, [0x7, 0xffff, 0x8, 0xdde, 0x0, 0x3, 0x3dd, 0x2, 0x1, 0x76d8, 0x8, 0x7f, 0x7, 0x3, 0x81, 0x800], [0xffff, 0x5, 0x8, 0x2, 0x4, 0x3, 0x1, 0x5, 0x1000, 0x6, 0x2, 0x2, 0x1, 0x7b2, 0x2bba, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) (async) 16.291952638s ago: executing program 3 (id=1665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0xb, 0x209, 0xfff, 0xdb, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r1, 0x6}, &(0x7f0000000300)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20000, 0x1}}}}}}, @IFLA_NET_NS_FD={0x8}]}, 0x50}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@mcast2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1bc}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000140)=0x10cc, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r3, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) 16.291595155s ago: executing program 0 (id=1666): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5bfd2b988c69d96c135fa2b33ba13fd7e51852a0a3b040c7a98212eb0dbbf329d96af322f3b4f78e51560d6c3e35a060a968d86ca98e844400818fbbbd052c56c4ea9e23a9cbb7bd65013d25409b37485dcba1cb0557cbaaaf36ae741b77cd11ce817a8862bd66768232112ad4af9fbe9b57a179e24482cc430f59a1d2df99110c160460b2d3a839886fe5299a1d56b779808a4282e3c6ff", @ANYRES32=r0, @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) 16.216860408s ago: executing program 3 (id=1668): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8001, 0x8001, @loopback, 0x1}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(r2, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4623, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc) bind$packet(r6, &(0x7f0000000240)={0x11, 0x4, r9, 0x1, 0x80, 0x6, @local}, 0x14) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) r10 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) 16.165473858s ago: executing program 0 (id=1669): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xde, 0xef, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f9ced3504faf99b211fb6ffe1abaf69609446af69201ab6a89c254f105ff1e7fba891d9065691e3f98de10099846fef0c2fc339454bc35189d5c9627fd53421eaa3fa4edd4bfb08326eb5d64cc44dbbc7f557153cb010b4a476cb917c3eb783399a31e8a524612c22d9c194e43e628f3b417184d0aa8cb845617b772e", &(0x7f0000000240)=""/239, 0x12f20, 0x0, 0x1f9, 0x183, &(0x7f00000006c0)="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", &(0x7f00000008c0)="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", 0x2, 0x0, 0xa82}, 0x50) 16.113799585s ago: executing program 3 (id=1670): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="8776fbac6c6a763350b4e24bc369580d75a0a4ce7992a4d77324b3aca3939b91b34b15dbadfc7d08612d478ec44ad23a56837b5df7", 0x35}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x40, 0x41, 0x6, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) (async) sendmsg$inet_sctp(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="8776fbac6c6a763350b4e24bc369580d75a0a4ce7992a4d77324b3aca3939b91b34b15dbadfc7d08612d478ec44ad23a56837b5df7", 0x35}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x40, 0x41, 0x6, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @broadcast}, 0x4, 0x1, 0x0, 0x4}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) 16.109400679s ago: executing program 0 (id=1671): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) r2 = socket$pptp(0x18, 0x1, 0x2) accept4(r2, 0x0, 0x0, 0x800) r3 = socket(0x10, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x4000) 15.925084689s ago: executing program 0 (id=1672): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={0xfffffffffffffffe, &(0x7f0000000300)=""/181, &(0x7f00000001c0)="96dba17d028b05db2939d898a4757f2ed84dd61ba20a381e8da1e940bdad6b675c702b31f6373b06ca97", &(0x7f00000003c0)="ecc21da09742ce6ca8c4a1ac4b310612fcf76c4a2d38f162cf6f093367a4be75f800cae93a5695d4130fb918bb069fc495ab14d6383ba57dd3208a9bb2108d0f34cb407bf8630ecbba39702199767b89228f1a36e84498b4720ffbe1edbbbec536611c6621be869d4c1ba1d2ada572f12126e94ac91f5aabe26dd7769b2eb050987530d373353ff3145ddc55ebcf10b365a43d18c6c3a1a832021ec42c2a46", 0x10, r1}, 0x38) 15.892643775s ago: executing program 0 (id=1673): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3ff, 0x6, 0x1520}) read(r0, &(0x7f0000000040)=""/15, 0xf) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x100, 0x70bd28, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x40080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x20, 0x70bd26, 0x3, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300)=0x0) connect$nfc_raw(r0, &(0x7f0000000340)={0x27, r3, 0x1, 0x4}, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040186}, 0x40001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x59}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}}, 0x41) syz_genetlink_get_family_id$nfc(&(0x7f0000000600), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000640)={0x0, 0x9, 0x9}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000e40)={0x14, 0x1, {0x3, @struct={0x5, 0x5}, 0x0, 0x4, 0x100000001, 0x7, 0x40be, 0x6, 0x84, @struct={0x1, 0x6}, 0x7, 0x0, [0xfff, 0x4, 0x7, 0x8000, 0x382b]}, {0x6f1, @usage=0xe, r6, 0x1, 0x30, 0x9, 0x3ff, 0xffff, 0x10, @usage=0xfffffffffffffbff, 0xf62, 0x7c8f, [0xbe, 0x1, 0xfffffffffffffff7, 0xfffffffffffff6ca, 0x5, 0x88]}, {0x1, @struct={0x2, 0x1}, r7, 0x7, 0x8, 0x5, 0x2, 0x4, 0x10, @struct={0x0, 0x2}, 0x8, 0xa4000000, [0x6, 0xfff, 0x5d, 0xf29, 0x10001, 0x81]}, {0x3, 0xaa, 0x3bc0}}) close(r0) close(r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xa0, r9, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x0, 0x5, 0x7, 0x200]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1376}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9ce}, @NL80211_ATTR_FRAME={0x36, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @random="79925ee486a3", {0x0, 0xff}}, @vht_group_id={0x15, 0x1, {0x7, "6a205f8d95f7d38001e9279c561b2330"}}}}]}, 0xa0}}, 0x800) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000001400)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001440)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001480)=r10, 0x4) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)={0x158, r11, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000880) r12 = accept$netrom(r0, &(0x7f0000001740)={{0x3, @default}, [@rose, @default, @remote, @default, @null, @null, @bcast, @default]}, &(0x7f00000017c0)=0x48) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r12, 0x40049366, &(0x7f0000001800)=0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001840)=0x3, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff5ce8}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x45}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x6c}}, 0x4044004) 15.67930117s ago: executing program 2 (id=1676): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {0x1, 0x5}]}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @ptr={0x4}, @const={0x6, 0x0, 0x0, 0xa, 0x5}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}, @enum64={0x9, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x3, 0x60000, 0x4fce}, {0x2, 0x0, 0x51}, {0x7, 0x3, 0x7}, {0xa, 0x7f, 0xc}, {0x5, 0x5, 0x3}, {0x7, 0x4, 0xfffffffe}, {0x8, 0x6, 0x6}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000040)=""/5, 0xcb, 0x5, 0x9, 0x6, 0x10000}, 0x28) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001300)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x7800, 0x7869, 0x4, 0x3, {{0x18, 0x4, 0x2, 0x1f, 0x60, 0x65, 0x0, 0x6f, 0x4, 0x0, @broadcast, @multicast2, {[@end, @end, @cipso={0x86, 0x22, 0x2, [{0x6, 0xf, "0363d25396815380e0427c22d5"}, {0x2, 0xd, "fc3f9891fcf103eca82063"}]}, @noop, @end, @noop, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x3, [{@local, 0xfffffff8}, {@private=0xa010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xf}]}, @ssrr={0x89, 0x7, 0xa9, [@multicast1]}, @end]}}}}}) r2 = socket(0x21, 0x2, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r5) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1008}, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x35, 0x1003, 0x62}, 0x2c) getsockopt$bt_BT_SECURITY(r2, 0x110, 0x6, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x20, '\x00', r1, @sk_msg, r0}, 0x94) 15.571321768s ago: executing program 2 (id=1677): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b000000060000000000000800000000060000000000000c03000000000000000400000d0002000000000000000000000efaffffff00008b0f000000000000000e00000001000000000000000000ff"], 0x0, 0x67, 0x0, 0x1}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) listen(r1, 0xffffffff) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x10, 0x2d, 0x1, 0x70bd26}, 0x10}], 0x1}, 0x4) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) (async) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) close(r3) 15.489300406s ago: executing program 2 (id=1678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$inet6(0xa, 0xa, 0x312) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000009fd7870947e5f39f54d2ac3c750423f45e18028f52dd79cf1558f38c20f8154041561903a868ba18f2573b4a940330a2360f9487b85b9f6a51a42c8a53b2054274c596cb9e2929238176533051e68f2de8f95258d1", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004054) 15.380238397s ago: executing program 2 (id=1679): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@mcast1={0xff, 0x5}, @remote, @loopback={0xff00000000000000}, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8144008a}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b04f300000000000000020000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523669abf4579f9cd6564e6400f00000045bfe585ab6933a6f6094a0eebad4e35370a000100484d41524b00000008000240000000000900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.34033611s ago: executing program 2 (id=1680): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.189472759s ago: executing program 2 (id=1681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x24, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x0, &(0x7f0000000000)=0x7, 0x4) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd7000fcdbdf25270000000c0005000000000000379e464a9c8fa0db000000140030006f1333ce95f0ba49cb7819c390f2238c05002b000100000006000400a3aa00000c002d000202aaaaaaaaaaaa0600060002000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2502000000000000750f0000000000000008000a006ea7d200"], 0x1c}}, 0x0) 1.147948242s ago: executing program 32 (id=1659): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x20}}, 0x84) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x20000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x9507, 0x20a80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x10000}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4014) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 1.108979184s ago: executing program 33 (id=1661): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000007d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}, @struct]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42}, 0x20) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) 78.649913ms ago: executing program 34 (id=1673): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3ff, 0x6, 0x1520}) read(r0, &(0x7f0000000040)=""/15, 0xf) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x100, 0x70bd28, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x40080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x20, 0x70bd26, 0x3, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300)=0x0) connect$nfc_raw(r0, &(0x7f0000000340)={0x27, r3, 0x1, 0x4}, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040186}, 0x40001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x59}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}}, 0x41) syz_genetlink_get_family_id$nfc(&(0x7f0000000600), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000640)={0x0, 0x9, 0x9}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000e40)={0x14, 0x1, {0x3, @struct={0x5, 0x5}, 0x0, 0x4, 0x100000001, 0x7, 0x40be, 0x6, 0x84, @struct={0x1, 0x6}, 0x7, 0x0, [0xfff, 0x4, 0x7, 0x8000, 0x382b]}, {0x6f1, @usage=0xe, r6, 0x1, 0x30, 0x9, 0x3ff, 0xffff, 0x10, @usage=0xfffffffffffffbff, 0xf62, 0x7c8f, [0xbe, 0x1, 0xfffffffffffffff7, 0xfffffffffffff6ca, 0x5, 0x88]}, {0x1, @struct={0x2, 0x1}, r7, 0x7, 0x8, 0x5, 0x2, 0x4, 0x10, @struct={0x0, 0x2}, 0x8, 0xa4000000, [0x6, 0xfff, 0x5d, 0xf29, 0x10001, 0x81]}, {0x3, 0xaa, 0x3bc0}}) close(r0) close(r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xa0, r9, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x0, 0x5, 0x7, 0x200]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1376}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9ce}, @NL80211_ATTR_FRAME={0x36, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @random="79925ee486a3", {0x0, 0xff}}, @vht_group_id={0x15, 0x1, {0x7, "6a205f8d95f7d38001e9279c561b2330"}}}}]}, 0xa0}}, 0x800) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000001400)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001440)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001480)=r10, 0x4) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)={0x158, r11, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000880) r12 = accept$netrom(r0, &(0x7f0000001740)={{0x3, @default}, [@rose, @default, @remote, @default, @null, @null, @bcast, @default]}, &(0x7f00000017c0)=0x48) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r12, 0x40049366, &(0x7f0000001800)=0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000001840)=0x3, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff5ce8}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x45}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x6c}}, 0x4044004) 47.253714ms ago: executing program 35 (id=1681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x24, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x0, &(0x7f0000000000)=0x7, 0x4) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd7000fcdbdf25270000000c0005000000000000379e464a9c8fa0db000000140030006f1333ce95f0ba49cb7819c390f2238c05002b000100000006000400a3aa00000c002d000202aaaaaaaaaaaa0600060002000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2502000000000000750f0000000000000008000a006ea7d200"], 0x1c}}, 0x0) 0s ago: executing program 36 (id=1670): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="8776fbac6c6a763350b4e24bc369580d75a0a4ce7992a4d77324b3aca3939b91b34b15dbadfc7d08612d478ec44ad23a56837b5df7", 0x35}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x40, 0x41, 0x6, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) (async) sendmsg$inet_sctp(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="8776fbac6c6a763350b4e24bc369580d75a0a4ce7992a4d77324b3aca3939b91b34b15dbadfc7d08612d478ec44ad23a56837b5df7", 0x35}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x40, 0x41, 0x6, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @broadcast}, 0x4, 0x1, 0x0, 0x4}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.236' (ED25519) to the list of known hosts. [ 85.577493][ T5823] cgroup: Unknown subsys name 'net' [ 85.691222][ T5823] cgroup: Unknown subsys name 'cpuset' [ 85.700618][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.400495][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.096357][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.104373][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.113193][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.119231][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.122288][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.135536][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.136852][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.143985][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.157696][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.166343][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.166916][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.174543][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.188255][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.189036][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.203639][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.207341][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.212252][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.225928][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.225964][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.234848][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.247831][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.253692][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.258810][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.271642][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.275114][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.945038][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 91.104970][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.132245][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.205113][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.252607][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 91.342717][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.350506][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.358135][ T5836] bridge_slave_0: entered allmulticast mode [ 91.365789][ T5836] bridge_slave_0: entered promiscuous mode [ 91.408291][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.415571][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.423178][ T5836] bridge_slave_1: entered allmulticast mode [ 91.430696][ T5836] bridge_slave_1: entered promiscuous mode [ 91.563185][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.570461][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.577726][ T5835] bridge_slave_0: entered allmulticast mode [ 91.585042][ T5835] bridge_slave_0: entered promiscuous mode [ 91.620102][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.643287][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.650838][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.658287][ T5835] bridge_slave_1: entered allmulticast mode [ 91.665699][ T5835] bridge_slave_1: entered promiscuous mode [ 91.673092][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.680385][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.687774][ T5833] bridge_slave_0: entered allmulticast mode [ 91.695103][ T5833] bridge_slave_0: entered promiscuous mode [ 91.702996][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.710457][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.718067][ T5834] bridge_slave_0: entered allmulticast mode [ 91.725383][ T5834] bridge_slave_0: entered promiscuous mode [ 91.736487][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.789041][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.796269][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.804183][ T5833] bridge_slave_1: entered allmulticast mode [ 91.811835][ T5833] bridge_slave_1: entered promiscuous mode [ 91.818881][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.826106][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.833774][ T5834] bridge_slave_1: entered allmulticast mode [ 91.841493][ T5834] bridge_slave_1: entered promiscuous mode [ 91.862240][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.869811][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.877416][ T5845] bridge_slave_0: entered allmulticast mode [ 91.884763][ T5845] bridge_slave_0: entered promiscuous mode [ 91.934648][ T5836] team0: Port device team_slave_0 added [ 91.941182][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.948599][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.955822][ T5845] bridge_slave_1: entered allmulticast mode [ 91.963350][ T5845] bridge_slave_1: entered promiscuous mode [ 91.972942][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.010528][ T5836] team0: Port device team_slave_1 added [ 92.019322][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.043830][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.055786][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.080336][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.133560][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.172899][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.191716][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.247686][ T5850] Bluetooth: hci2: command tx timeout [ 92.256253][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.265105][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.291653][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.307171][ T5834] team0: Port device team_slave_0 added [ 92.326988][ T5156] Bluetooth: hci0: command tx timeout [ 92.328002][ T5843] Bluetooth: hci4: command tx timeout [ 92.332741][ T5156] Bluetooth: hci3: command tx timeout [ 92.344432][ T5850] Bluetooth: hci1: command tx timeout [ 92.373017][ T5835] team0: Port device team_slave_0 added [ 92.382546][ T5833] team0: Port device team_slave_0 added [ 92.390714][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.399100][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.425538][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.448817][ T5834] team0: Port device team_slave_1 added [ 92.457980][ T5845] team0: Port device team_slave_0 added [ 92.484304][ T5835] team0: Port device team_slave_1 added [ 92.492801][ T5833] team0: Port device team_slave_1 added [ 92.503581][ T5845] team0: Port device team_slave_1 added [ 92.598871][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.605866][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.632825][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.694388][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.701901][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.728959][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.740888][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.748147][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.774201][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.791516][ T5836] hsr_slave_0: entered promiscuous mode [ 92.798388][ T5836] hsr_slave_1: entered promiscuous mode [ 92.805775][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.813036][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.839480][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.851664][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.858934][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.885095][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.903954][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.911012][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.937410][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.949766][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.956972][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.983200][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.002021][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.009167][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.035808][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.143449][ T5834] hsr_slave_0: entered promiscuous mode [ 93.150116][ T5834] hsr_slave_1: entered promiscuous mode [ 93.156349][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 93.162723][ T5834] Cannot create hsr debugfs directory [ 93.312387][ T5845] hsr_slave_0: entered promiscuous mode [ 93.319101][ T5845] hsr_slave_1: entered promiscuous mode [ 93.325379][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 93.331977][ T5845] Cannot create hsr debugfs directory [ 93.342832][ T5835] hsr_slave_0: entered promiscuous mode [ 93.350799][ T5835] hsr_slave_1: entered promiscuous mode [ 93.357199][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 93.362972][ T5835] Cannot create hsr debugfs directory [ 93.375215][ T5833] hsr_slave_0: entered promiscuous mode [ 93.382002][ T5833] hsr_slave_1: entered promiscuous mode [ 93.389155][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 93.394926][ T5833] Cannot create hsr debugfs directory [ 93.958409][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.972510][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.996011][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.007670][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.066139][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.095111][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.105425][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.117799][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.208175][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.234252][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.265277][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.295600][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.327391][ T5850] Bluetooth: hci2: command tx timeout [ 94.360881][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.395021][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.407066][ T5850] Bluetooth: hci1: command tx timeout [ 94.407106][ T5843] Bluetooth: hci4: command tx timeout [ 94.412597][ T5850] Bluetooth: hci0: command tx timeout [ 94.419246][ T5156] Bluetooth: hci3: command tx timeout [ 94.429708][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.465301][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.520081][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.531153][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.543447][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.555453][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.604138][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.699101][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.722154][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.755412][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.762681][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.801964][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.824715][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.831913][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.849647][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.856845][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.881131][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.895481][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.914353][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.921608][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.979725][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.012711][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.031086][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.042106][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.049776][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.078446][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.085623][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.108252][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.115379][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.133620][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.193035][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.200462][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.226008][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.255277][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.267793][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.303166][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.310459][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.374893][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.382158][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.674139][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.888953][ T5836] veth0_vlan: entered promiscuous mode [ 95.900967][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.918956][ T5836] veth1_vlan: entered promiscuous mode [ 95.977925][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.107536][ T5834] veth0_vlan: entered promiscuous mode [ 96.124624][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.148988][ T5836] veth0_macvtap: entered promiscuous mode [ 96.180789][ T5834] veth1_vlan: entered promiscuous mode [ 96.202552][ T5836] veth1_macvtap: entered promiscuous mode [ 96.215946][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.258313][ T5845] veth0_vlan: entered promiscuous mode [ 96.280247][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.322135][ T5834] veth0_macvtap: entered promiscuous mode [ 96.342884][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.353470][ T5845] veth1_vlan: entered promiscuous mode [ 96.373941][ T5834] veth1_macvtap: entered promiscuous mode [ 96.391624][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.403297][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.415065][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.418325][ T5156] Bluetooth: hci2: command tx timeout [ 96.425170][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.487388][ T5156] Bluetooth: hci0: command tx timeout [ 96.488655][ T5850] Bluetooth: hci3: command tx timeout [ 96.492847][ T5156] Bluetooth: hci4: command tx timeout [ 96.499932][ T5850] Bluetooth: hci1: command tx timeout [ 96.539611][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.576389][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.601741][ T5833] veth0_vlan: entered promiscuous mode [ 96.633510][ T5845] veth0_macvtap: entered promiscuous mode [ 96.669946][ T5845] veth1_macvtap: entered promiscuous mode [ 96.679047][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.688533][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.701877][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.717436][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.732638][ T5833] veth1_vlan: entered promiscuous mode [ 96.740794][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.752851][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.816056][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.833158][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.843368][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.863335][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.876363][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.888708][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.931586][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.940822][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.990416][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.000789][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.025797][ T5835] veth0_vlan: entered promiscuous mode [ 97.032894][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.059283][ T5833] veth0_macvtap: entered promiscuous mode [ 97.126163][ T5833] veth1_macvtap: entered promiscuous mode [ 97.170908][ T5959] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 97.173477][ T5835] veth1_vlan: entered promiscuous mode [ 97.201305][ T5959] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 97.208565][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.218499][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.305163][ T24] cfg80211: failed to load regulatory.db [ 97.308699][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.324691][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.352480][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.395889][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.504259][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.517494][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.524149][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.527032][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.544332][ T5835] veth0_macvtap: entered promiscuous mode [ 97.585899][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.596343][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.614176][ T5835] veth1_macvtap: entered promiscuous mode [ 97.676499][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.741303][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.781878][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.806835][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.863517][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.899010][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.971865][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.991264][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.171879][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.184499][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.338581][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.368094][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.488901][ T5850] Bluetooth: hci2: command tx timeout [ 98.554677][ T5991] netlink: 'syz.3.4': attribute type 11 has an invalid length. [ 98.567903][ T5156] Bluetooth: hci3: command tx timeout [ 98.573374][ T5156] Bluetooth: hci0: command tx timeout [ 98.576975][ T5991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.579374][ T5843] Bluetooth: hci1: command tx timeout [ 98.593574][ T5850] Bluetooth: hci4: command tx timeout [ 98.625085][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.644514][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.709398][ T5997] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.733912][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 98.935747][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 99.044192][ T6007] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 99.087813][ T6011] Zero length message leads to an empty skb [ 99.094123][ T6007] netlink: 'syz.0.18': attribute type 2 has an invalid length. [ 99.171116][ T6022] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 99.305475][ T6015] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 99.336154][ T6015] bond1 (unregistering): Released all slaves [ 99.789383][ T6040] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 99.938928][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 99.965379][ T6042] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 100.074139][ T6046] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.112235][ T10] IPVS: starting estimator thread 0... [ 100.123004][ T6046] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.256881][ T6050] IPVS: using max 27 ests per chain, 64800 per kthread [ 100.628784][ T5906] IPVS: starting estimator thread 0... [ 100.716842][ T6071] IPVS: using max 26 ests per chain, 62400 per kthread [ 100.757078][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.38'. [ 101.001348][ T6087] netlink: 'syz.0.41': attribute type 11 has an invalid length. [ 101.211063][ T6096] netlink: 14 bytes leftover after parsing attributes in process `syz.1.45'. [ 101.248132][ T6094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.360898][ T6096] veth1_macvtap: left promiscuous mode [ 101.454348][ T6094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.493004][ T6104] netlink: 'syz.3.48': attribute type 3 has an invalid length. [ 101.518868][ T6104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.557269][ T6104] netlink: 'syz.3.48': attribute type 3 has an invalid length. [ 101.567253][ T6104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.639574][ T6094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.707896][ T6104] netlink: 'syz.3.48': attribute type 3 has an invalid length. [ 101.722115][ T6104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.740416][ T6104] netlink: 'syz.3.48': attribute type 3 has an invalid length. [ 101.749554][ T6104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.804781][ T6094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.877973][ T6104] netlink: 'syz.3.48': attribute type 3 has an invalid length. [ 101.887786][ T6104] netlink: 'syz.3.48': attribute type 3 has an invalid length. [ 101.895698][ T6104] netlink: 'syz.3.48': attribute type 3 has an invalid length. [ 101.913845][ T6118] º: renamed from veth1_vlan (while UP) [ 102.180883][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.208804][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.259811][ T6127] validate_nla: 26 callbacks suppressed [ 102.259834][ T6127] netlink: 'syz.1.56': attribute type 39 has an invalid length. [ 102.338188][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.377121][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.425157][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.550044][ T6137] xt_l2tp: invalid flags combination: 8 [ 104.368553][ T6225] __nla_validate_parse: 35 callbacks suppressed [ 104.368573][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.85'. [ 104.438611][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.85'. [ 104.632562][ T6234] netlink: 152 bytes leftover after parsing attributes in process `syz.4.88'. [ 105.165135][ T6255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.97'. [ 105.191623][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 105.247969][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 105.454336][ T6267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.101'. [ 105.829885][ T6284] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 105.887671][ T6291] netlink: 'syz.3.109': attribute type 64 has an invalid length. [ 105.895472][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.109'. [ 105.941243][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 106.239546][ T6308] netlink: 'syz.3.113': attribute type 11 has an invalid length. [ 106.258078][ T6305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.114'. [ 106.560092][ T6323] netlink: 'syz.4.119': attribute type 83 has an invalid length. [ 106.990776][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.049297][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.130085][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.158983][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.383230][ T6359] tipc: Started in network mode [ 107.398670][ T6359] tipc: Node identity 0694999a2561, cluster identity 4711 [ 107.428184][ T6359] tipc: Enabled bearer , priority 0 [ 107.458595][ T6365] syzkaller0: entered promiscuous mode [ 107.483519][ T6365] syzkaller0: entered allmulticast mode [ 107.510037][ T6358] tipc: Resetting bearer [ 107.551006][ T6358] tipc: Disabling bearer [ 107.620202][ T6374] openvswitch: netlink: Unknown nsh attribute 0 [ 107.647460][ T6374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.946940][ T6388] lo: entered allmulticast mode [ 107.978281][ T6396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.112725][ T6439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.119937][ T6439] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 110.155015][ T6439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.167298][ T6439] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 110.201435][ T6439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.213143][ T6439] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 110.234949][ T6439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.255734][ T6439] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 110.282034][ T6439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 110.306820][ T6439] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 110.668664][ T6498] syzkaller1: entered promiscuous mode [ 110.688512][ T6498] syzkaller1: entered allmulticast mode [ 110.833572][ T6502] : entered promiscuous mode [ 111.267945][ T6527] syzkaller1: entered promiscuous mode [ 111.303216][ T6527] syzkaller1: entered allmulticast mode [ 111.329012][ T6536] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 111.473039][ T6540] __nla_validate_parse: 11 callbacks suppressed [ 111.473062][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 111.492852][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.176'. [ 111.540448][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 111.591364][ T6540] geneve2: entered promiscuous mode [ 111.616453][ T6540] geneve2: entered allmulticast mode [ 111.658054][ T6544] syzkaller1: entered promiscuous mode [ 111.666794][ T6544] syzkaller1: entered allmulticast mode [ 111.776383][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 111.810679][ T6552] netlink: 224 bytes leftover after parsing attributes in process `syz.1.179'. [ 112.145295][ T5921] IPVS: starting estimator thread 0... [ 112.203606][ T6569] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 112.258102][ T6569] netlink: 232 bytes leftover after parsing attributes in process `syz.1.184'. [ 112.275458][ T6567] IPVS: using max 28 ests per chain, 67200 per kthread [ 112.322011][ T6581] dvmrp0: entered allmulticast mode [ 112.355909][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 112.435559][ T6583] dvmrp0: left allmulticast mode [ 112.471739][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 112.485248][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 112.519389][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.188'. [ 112.867082][ T6600] bond1: entered promiscuous mode [ 112.886340][ T6600] bond1: entered allmulticast mode [ 112.895079][ T6600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.241645][ T6627] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 113.601755][ T6645] netlink: 'syz.1.201': attribute type 33 has an invalid length. [ 113.962899][ T6647] tipc: Started in network mode [ 113.974739][ T6647] tipc: Node identity 7f000001, cluster identity 4711 [ 113.998036][ T6647] tipc: Enabled bearer , priority 10 [ 114.343139][ T6677] pim6reg1: entered promiscuous mode [ 114.359084][ T6677] pim6reg1: entered allmulticast mode [ 114.374903][ T6683] tipc: Started in network mode [ 114.382169][ T6683] tipc: Node identity , cluster identity 4711 [ 114.389743][ T6683] tipc: Failed to obtain node identity [ 114.395611][ T6683] tipc: Enabling of bearer rejected, failed to enable media [ 115.117084][ T5936] tipc: Node number set to 2130706433 [ 115.343701][ T6732] nbd: device at index 0 is going down [ 115.814273][ T5907] udevd[5907]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 116.474636][ T6786] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 116.715776][ T6802] __nla_validate_parse: 15 callbacks suppressed [ 116.715797][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 116.743015][ T6802] netlink: 'syz.2.232': attribute type 20 has an invalid length. [ 116.937377][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.981964][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.991480][ T6822] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 117.006560][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.022633][ T6824] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 117.038034][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.038901][ T6822] netlink: 'syz.3.235': attribute type 2 has an invalid length. [ 117.088417][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.235'. [ 117.100100][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 117.271848][ T6827] netlink: 'syz.2.238': attribute type 3 has an invalid length. [ 117.542805][ T6845] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.244'. [ 117.591351][ T6848] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.244'. [ 117.902623][ T6859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.247'. [ 117.944443][ T6862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.247'. [ 118.205719][ T6875] netlink: 100 bytes leftover after parsing attributes in process `syz.0.250'. [ 118.216503][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 118.259453][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 118.561082][ T6890] syzkaller0: entered promiscuous mode [ 118.566889][ T6890] syzkaller0: entered allmulticast mode [ 119.080066][ T6910] netlink: 'syz.3.258': attribute type 1 has an invalid length. [ 119.908611][ T6936] tipc: Started in network mode [ 119.949286][ T6936] tipc: Node identity 7e444ed8df59, cluster identity 4711 [ 119.978584][ T6936] tipc: Enabled bearer , priority 0 [ 120.129440][ T6936] syzkaller0: entered promiscuous mode [ 120.145402][ T6936] syzkaller0: entered allmulticast mode [ 120.163228][ T6945] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 120.238145][ T6936] tipc: Resetting bearer [ 120.263189][ T6967] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 120.292786][ T6967] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 120.331755][ T6967] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 120.367302][ T6967] netlink: 'syz.0.275': attribute type 2 has an invalid length. [ 120.383168][ T6933] tipc: Resetting bearer [ 120.445776][ T6933] tipc: Disabling bearer [ 120.462042][ T6967] bridge_slave_1: left allmulticast mode [ 120.468716][ T6967] bridge_slave_1: left promiscuous mode [ 120.476155][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.568193][ T6967] bridge_slave_0: left allmulticast mode [ 120.604659][ T6967] bridge_slave_0: left promiscuous mode [ 120.616342][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.718493][ T6977] pim6reg1: entered promiscuous mode [ 120.724093][ T6977] pim6reg1: entered allmulticast mode [ 120.996104][ T6998] netlink: 'syz.4.283': attribute type 64 has an invalid length. [ 121.256334][ T7012] xt_l2tp: unknown flags: 10 [ 121.272761][ T7008] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 121.281498][ T7008] bond1: option packets_per_slave: allowed values 0 - 65535 [ 121.298532][ T7008] bond1 (unregistering): Released all slaves [ 121.360378][ T7010] netlink: 'syz.2.289': attribute type 7 has an invalid length. [ 121.377612][ T7010] netlink: 'syz.2.289': attribute type 8 has an invalid length. [ 121.429768][ T7010] gretap0: entered promiscuous mode [ 121.464639][ T7010] batadv_slave_1: entered promiscuous mode [ 121.473342][ T7010] batadv_slave_1: left promiscuous mode [ 121.495306][ T7010] gretap0: left promiscuous mode [ 121.528489][ T7021] netlink: 'syz.3.290': attribute type 21 has an invalid length. [ 121.568425][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.732899][ T7035] __nla_validate_parse: 12 callbacks suppressed [ 121.732922][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.295'. [ 122.000852][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 122.403401][ T7063] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 122.469679][ T7065] validate_nla: 2 callbacks suppressed [ 122.469694][ T7065] netlink: 'syz.2.306': attribute type 10 has an invalid length. [ 122.492432][ T7065] bond0: (slave wlan1): Opening slave failed [ 122.548189][ T7069] netlink: 240 bytes leftover after parsing attributes in process `syz.0.304'. [ 122.693413][ T7074] veth1_to_bond: entered allmulticast mode [ 122.717833][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 122.909243][ T7074] veth1_to_bond (unregistering): left allmulticast mode [ 123.027803][ T7074] bond0: (slave bond_slave_1): Releasing backup interface [ 123.273891][ T7095] tipc: Enabled bearer , priority 0 [ 123.286126][ T7095] syzkaller0: entered promiscuous mode [ 123.329684][ T7095] syzkaller0: entered allmulticast mode [ 123.368035][ T7100] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.388190][ T7095] tunl0: mtu less than device minimum [ 123.555706][ T7094] tipc: Resetting bearer [ 123.573177][ T7094] tipc: Disabling bearer [ 124.015644][ T7128] team0: Device ip6gre1 is of different type [ 124.073414][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 124.103230][ T7129] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 124.110607][ T7132] ipvlan2: entered promiscuous mode [ 124.117915][ T7129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.324'. [ 124.150209][ T7129] dummy0: entered promiscuous mode [ 124.197694][ T7129] bridge0: port 3(dummy0) entered blocking state [ 124.237233][ T7129] bridge0: port 3(dummy0) entered disabled state [ 124.243822][ T7129] dummy0: entered allmulticast mode [ 124.296699][ T7129] bridge0: port 3(dummy0) entered blocking state [ 124.303940][ T7129] bridge0: port 3(dummy0) entered forwarding state [ 124.348556][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 124.365057][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 124.385023][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 124.423793][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 124.702746][ T7163] veth0: entered promiscuous mode [ 125.164811][ T7189] netlink: 'syz.3.340': attribute type 24 has an invalid length. [ 125.735761][ T7220] openvswitch: netlink: Missing key (keys=40, expected=100) [ 126.616576][ T7265] tipc: Started in network mode [ 126.621721][ T7265] tipc: Node identity 4a7add18850c, cluster identity 4711 [ 126.629903][ T7265] tipc: Enabled bearer , priority 0 [ 126.639431][ T7265] syzkaller0: entered promiscuous mode [ 126.650640][ T7265] syzkaller0: entered allmulticast mode [ 126.675539][ T7271] netlink: 'syz.1.363': attribute type 12 has an invalid length. [ 127.123424][ T7279] tipc: Resetting bearer [ 127.146545][ T7262] tipc: Resetting bearer [ 127.233415][ T7262] tipc: Disabling bearer [ 127.270237][ T7304] __nla_validate_parse: 7 callbacks suppressed [ 127.270258][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 127.455913][ T7314] netlink: 212 bytes leftover after parsing attributes in process `syz.4.375'. [ 127.474119][ T7310] macvtap1: entered promiscuous mode [ 127.487194][ T7310] macvtap1: entered allmulticast mode [ 127.494135][ T7310] bond_slave_0: entered promiscuous mode [ 127.500133][ T7310] bond_slave_1: entered promiscuous mode [ 127.509031][ T7310] bond0: entered allmulticast mode [ 127.515134][ T7310] bond_slave_0: entered allmulticast mode [ 127.524109][ T7310] bond_slave_1: entered allmulticast mode [ 127.530486][ T7310] bond0: entered promiscuous mode [ 127.540279][ T7310] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 127.547783][ T7310] team0: Device macvtap1 failed to register rx_handler [ 127.555411][ T7310] bond0: left allmulticast mode [ 127.563578][ T7310] bond_slave_0: left allmulticast mode [ 127.569536][ T7310] bond_slave_1: left allmulticast mode [ 127.575285][ T7310] bond0: left promiscuous mode [ 127.581697][ T7310] bond_slave_0: left promiscuous mode [ 127.587459][ T7310] bond_slave_1: left promiscuous mode [ 127.729780][ T7319] macvtap1: entered promiscuous mode [ 127.735166][ T7319] vlan0: entered promiscuous mode [ 127.768746][ T7319] macvtap1: entered allmulticast mode [ 127.788209][ T7319] vlan0: entered allmulticast mode [ 127.799272][ T7319] veth0_vlan: entered allmulticast mode [ 127.907460][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 127.959430][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 128.032036][ T7350] netlink: 9 bytes leftover after parsing attributes in process `syz.0.385'. [ 128.303518][ T7367] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.643134][ T7389] netlink: 788 bytes leftover after parsing attributes in process `syz.4.394'. [ 129.281157][ T7414] netlink: 'syz.0.401': attribute type 16 has an invalid length. [ 129.327584][ T7414] netlink: 'syz.0.401': attribute type 3 has an invalid length. [ 129.356144][ T7414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.401'. [ 129.377373][ T7417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.389465][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.402'. [ 129.465975][ T7419] netlink: 164 bytes leftover after parsing attributes in process `syz.2.403'. [ 129.476545][ T7419] netlink: 164 bytes leftover after parsing attributes in process `syz.2.403'. [ 130.026532][ T7460] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 130.141785][ T7467] netlink: 'syz.4.419': attribute type 7 has an invalid length. [ 131.101170][ T7530] netlink: 'syz.0.433': attribute type 2 has an invalid length. [ 131.112555][ T7530] netlink: 'syz.0.433': attribute type 2 has an invalid length. [ 131.121981][ T7530] netlink: 'syz.0.433': attribute type 2 has an invalid length. [ 131.132414][ T7530] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 131.140842][ T7530] netlink: 'syz.0.433': attribute type 2 has an invalid length. [ 131.149224][ T7532] netlink: 'syz.0.433': attribute type 2 has an invalid length. [ 131.244246][ T7525] bond1 (unregistering): Released all slaves [ 131.532710][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.557273][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.563894][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.584321][ T7560] batman_adv: batadv0: Adding interface: dummy0 [ 131.597769][ T7560] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.624617][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.659712][ T7560] batman_adv: batadv0: Interface activated: dummy0 [ 131.661746][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.676963][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.684891][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.693761][ T7564] batadv_slave_1: mtu less than device minimum [ 131.715304][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.732165][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.747529][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.769467][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.793701][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.820605][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.854305][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.885680][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.899144][ T7575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.906428][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.906726][ T7575] IPv6: NLM_F_CREATE should be set when creating new route [ 131.913543][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.968518][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.016811][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.024324][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.043738][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.054416][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.061645][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.068903][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.081558][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.088811][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.095491][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.106446][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.115060][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.122866][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.166982][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.177839][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.202777][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.222433][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.230837][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.245217][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.285300][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.292424][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.299056][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.305607][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.312719][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.319628][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.326060][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.332623][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.342901][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.350033][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.356606][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.402010][ T7590] bond1: entered promiscuous mode [ 132.423466][ T7605] __nla_validate_parse: 75 callbacks suppressed [ 132.423488][ T7605] netlink: 44 bytes leftover after parsing attributes in process `syz.4.456'. [ 132.437442][ T7590] bond1: entered allmulticast mode [ 132.447263][ T7590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.549175][ T7592] bond2: entered promiscuous mode [ 132.554464][ T7592] bond2: entered allmulticast mode [ 132.561161][ T7592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.569637][ T7594] netlink: 132 bytes leftover after parsing attributes in process `syz.1.451'. [ 132.604094][ T7607] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 132.612288][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 132.719274][ T7621] netlink: 596 bytes leftover after parsing attributes in process `syz.2.460'. [ 132.919673][ T7634] netlink: 68 bytes leftover after parsing attributes in process `syz.2.465'. [ 133.018745][ T7637] netlink: 100 bytes leftover after parsing attributes in process `syz.3.466'. [ 133.382063][ T7651] tipc: Enabled bearer , priority 0 [ 133.397842][ T7651] syzkaller0: entered promiscuous mode [ 133.403430][ T7651] syzkaller0: entered allmulticast mode [ 133.538590][ T7649] tipc: Resetting bearer [ 133.586011][ T7649] tipc: Disabling bearer [ 133.596621][ T7674] netlink: 10 bytes leftover after parsing attributes in process `syz.2.476'. [ 133.712959][ T7673] syzkaller0: entered promiscuous mode [ 133.719113][ T7673] syzkaller0: entered allmulticast mode [ 135.325210][ T7706] pim6reg: entered allmulticast mode [ 135.544580][ T7722] validate_nla: 8 callbacks suppressed [ 135.544601][ T7722] netlink: 'syz.3.491': attribute type 11 has an invalid length. [ 135.799244][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 135.820651][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 135.839437][ T7728] veth0_macvtap: left promiscuous mode [ 135.874811][ T7732] tipc: Enabled bearer , priority 0 [ 135.884566][ T7739] netlink: 11 bytes leftover after parsing attributes in process `syz.4.493'. [ 135.906299][ T7735] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 135.941693][ T7732] syzkaller0: entered promiscuous mode [ 135.957292][ T7732] syzkaller0: entered allmulticast mode [ 136.003207][ T7729] tipc: Resetting bearer [ 136.034287][ T7729] tipc: Disabling bearer [ 136.052069][ T7748] sock: sock_set_timeout: `syz.3.499' (pid 7748) tries to set negative timeout [ 136.339415][ T7769] sctp: [Deprecated]: syz.4.505 (pid 7769) Use of int in max_burst socket option deprecated. [ 136.339415][ T7769] Use struct sctp_assoc_value instead [ 136.461102][ T7767] raw_sendmsg: syz.2.506 forgot to set AF_INET. Fix it! [ 136.498643][ T7769] sctp: [Deprecated]: syz.4.505 (pid 7769) Use of int in max_burst socket option deprecated. [ 136.498643][ T7769] Use struct sctp_assoc_value instead [ 136.579737][ T7773] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 137.039744][ T7794] tipc: Enabling of bearer rejected, already enabled [ 137.269516][ T7800] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 137.626198][ T7816] __nla_validate_parse: 7 callbacks suppressed [ 137.626218][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 137.681216][ T7816] dummy0: left allmulticast mode [ 137.693316][ T7816] bridge0: port 3(dummy0) entered disabled state [ 137.722406][ T7816] bridge_slave_1: left allmulticast mode [ 137.729566][ T7816] bridge_slave_1: left promiscuous mode [ 137.735582][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.787123][ T7816] bridge_slave_0: left allmulticast mode [ 137.793355][ T7816] bridge_slave_0: left promiscuous mode [ 137.800628][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.809920][ T7821] netlink: 'syz.4.521': attribute type 29 has an invalid length. [ 137.946103][ T7830] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 1, id = 0 [ 138.257329][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.263746][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.268592][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.530'. [ 138.341973][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 138.589188][ T7858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.533'. [ 138.915006][ T7868] netlink: 'syz.3.536': attribute type 28 has an invalid length. [ 138.923670][ T7868] netlink: 'syz.3.536': attribute type 3 has an invalid length. [ 138.931988][ T7868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.536'. [ 138.991883][ T7868] syzkaller1: entered promiscuous mode [ 139.003508][ T7868] syzkaller1: entered allmulticast mode [ 139.049470][ T7870] macvlan2: entered promiscuous mode [ 139.055430][ T7870] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 139.275592][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 139.313091][ T7882] netlink: 2580 bytes leftover after parsing attributes in process `syz.1.541'. [ 139.512238][ T7897] netlink: 'syz.3.545': attribute type 1 has an invalid length. [ 139.597668][ T7897] veth3: entered promiscuous mode [ 139.629333][ T7897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.545'. [ 139.824065][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 139.932392][ T7927] netlink: 'syz.4.552': attribute type 10 has an invalid length. [ 139.950266][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.001071][ T7927] bridge_slave_1: left allmulticast mode [ 140.027515][ T7927] bridge_slave_1: left promiscuous mode [ 140.037538][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.083477][ T7927] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 140.327550][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 140.364080][ T7944] veth0: entered promiscuous mode [ 140.515286][ T7942] batadv_slave_1: entered promiscuous mode [ 140.528096][ T7942] batadv_slave_1: left promiscuous mode [ 141.002968][ T7967] tipc: Enabled bearer , priority 0 [ 141.023502][ T7967] syzkaller0: entered promiscuous mode [ 141.032693][ T7967] syzkaller0: entered allmulticast mode [ 141.065666][ T7967] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 141.116196][ T7967] unsupported nla_type 52263 [ 141.136576][ T7965] tipc: Resetting bearer [ 141.238839][ T7974] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 141.239225][ T7965] tipc: Disabling bearer [ 141.594622][ T7992] netlink: 'syz.2.575': attribute type 10 has an invalid length. [ 141.605579][ T7992] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 141.616444][ T7992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.604038][ T8045] netlink: 'syz.1.589': attribute type 21 has an invalid length. [ 142.703469][ T8051] __nla_validate_parse: 14 callbacks suppressed [ 142.703493][ T8051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.591'. [ 142.773918][ T8053] netlink: 232 bytes leftover after parsing attributes in process `syz.2.592'. [ 142.957750][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 143.089624][ T8066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.597'. [ 143.296534][ T8075] netlink: 5 bytes leftover after parsing attributes in process `syz.1.601'. [ 143.418267][ T8081] netlink: 'syz.4.602': attribute type 11 has an invalid length. [ 143.633205][ T8086] syzkaller1: entered promiscuous mode [ 143.648801][ T8086] syzkaller1: entered allmulticast mode [ 143.651445][ T8087] netlink: 'syz.2.605': attribute type 1 has an invalid length. [ 143.684100][ T8087] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 143.693458][ T8087] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.605'. [ 143.725363][ T8087] netlink: 'syz.2.605': attribute type 1 has an invalid length. [ 143.734042][ T8087] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 143.766556][ T8088] netlink: 5 bytes leftover after parsing attributes in process `syz.2.605'. [ 143.777031][ T8087] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.605'. [ 144.067973][ T8105] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.611'. [ 144.090979][ T8105] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.611'. [ 144.223475][ T8110] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 144.562675][ T8122] team0 (unregistering): Port device team_slave_0 removed [ 144.603545][ T8122] team0 (unregistering): Port device team_slave_1 removed [ 144.864717][ T8134] netlink: 'syz.3.621': attribute type 10 has an invalid length. [ 144.907095][ T8134] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 145.635834][ T8163] bond1: option resend_igmp: invalid value (32767) [ 145.692776][ T8163] bond1: option resend_igmp: allowed values 0 - 255 [ 145.727498][ T8163] bond1 (unregistering): Released all slaves [ 147.545134][ T8241] nr0: entered allmulticast mode [ 147.559024][ T8245] netlink: 'syz.1.651': attribute type 21 has an invalid length. [ 147.764486][ T8257] Driver unsupported XDP return value 0 on prog (id 121) dev N/A, expect packet loss! [ 148.328144][ T8280] dvmrp1: entered allmulticast mode [ 148.717167][ T8300] syzkaller1: entered promiscuous mode [ 148.722796][ T8300] syzkaller1: entered allmulticast mode [ 148.778744][ T8304] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 148.941014][ T8308] __nla_validate_parse: 11 callbacks suppressed [ 148.941035][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 149.182068][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 149.198083][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.673'. [ 149.275663][ T8325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'. [ 149.349417][ T8328] wð~: renamed from batadv0 (while UP) [ 149.448961][ T8331] netlink: 48 bytes leftover after parsing attributes in process `syz.1.678'. [ 149.503005][ T8333] netlink: 92 bytes leftover after parsing attributes in process `syz.3.679'. [ 149.528768][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 149.966546][ T8360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.685'. [ 149.992978][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 150.411133][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 150.803367][ T8386] veth1_to_bond: entered allmulticast mode [ 150.824028][ T8385] veth1_to_bond: left allmulticast mode [ 151.306544][ T8398] tipc: New replicast peer: 0.0.0.0 [ 151.318614][ T8398] tipc: Enabled bearer , priority 10 [ 152.120970][ T8460] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 152.332320][ T8461] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 152.347874][ T8461] bond1: entered promiscuous mode [ 152.353071][ T8461] bond1: entered allmulticast mode [ 152.359860][ T8461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.438080][ T24] tipc: Node number set to 2703052504 [ 152.598504][ T8484] bridge_slave_0: left allmulticast mode [ 152.624751][ T8484] bridge_slave_0: left promiscuous mode [ 152.638167][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.742263][ T8484] bridge_slave_1: left allmulticast mode [ 152.765299][ T8484] bridge_slave_1: left promiscuous mode [ 152.787713][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.828036][ T8484] bond0: (slave bond_slave_0): Releasing backup interface [ 152.876148][ T8484] team0: Port device team_slave_0 removed [ 152.936799][ T8499] nbd: must specify an index to disconnect [ 153.016373][ T8484] team0: Port device team_slave_1 removed [ 153.024444][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.036373][ T8484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.049726][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.066144][ T8484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.078404][ T8484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.112101][ T8490] lo: entered promiscuous mode [ 153.152469][ T8490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.196202][ T8488] macvtap1: entered promiscuous mode [ 153.211338][ T8488] vlan0: entered promiscuous mode [ 153.222564][ T8488] macvtap1: entered allmulticast mode [ 153.229383][ T8488] vlan0: entered allmulticast mode [ 153.234751][ T8488] veth0_vlan: entered allmulticast mode [ 153.305894][ T8497] macvtap2: entered promiscuous mode [ 153.338059][ T8497] macvtap2: entered allmulticast mode [ 153.626883][ T8516] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 153.741150][ T8523] vlan2: entered promiscuous mode [ 153.746553][ T8523] vlan2: entered allmulticast mode [ 153.784447][ T8523] hsr_slave_1: entered allmulticast mode [ 153.980686][ T8535] __nla_validate_parse: 5 callbacks suppressed [ 153.980707][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 154.557632][ T8548] tipc: Started in network mode [ 154.594827][ T8548] tipc: Node identity 026b014cd935, cluster identity 4711 [ 154.635211][ T8548] tipc: Enabled bearer , priority 0 [ 154.657410][ T8549] syzkaller0: entered promiscuous mode [ 154.692634][ T8549] syzkaller0: entered allmulticast mode [ 154.738331][ T8554] tipc: Resetting bearer [ 154.747698][ T8559] netlink: 'syz.1.738': attribute type 10 has an invalid length. [ 154.774186][ T8561] netlink: 64 bytes leftover after parsing attributes in process `syz.4.740'. [ 154.784525][ T8527] tipc: Resetting bearer [ 154.857500][ T8527] tipc: Disabling bearer [ 154.900259][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.909407][ T8559] bridge_slave_1: left allmulticast mode [ 154.915259][ T8559] bridge_slave_1: left promiscuous mode [ 154.922478][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.938784][ T8559] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 155.040512][ T8568] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 155.159727][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.744'. [ 155.232608][ T8582] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 155.390360][ T8591] lo speed is unknown, defaulting to 1000 [ 155.449459][ T8594] syzkaller1: entered promiscuous mode [ 155.473197][ T8594] syzkaller1: entered allmulticast mode [ 155.524337][ T8599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.752'. [ 155.537166][ T8591] lo speed is unknown, defaulting to 1000 [ 155.575656][ T8600] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 155.693048][ T8591] lo speed is unknown, defaulting to 1000 [ 155.939392][ T1207] lo speed is unknown, defaulting to 1000 [ 155.946142][ T8591] infiniband syz0: set active [ 155.956291][ T8591] infiniband syz0: added lo [ 156.083574][ T8591] RDS/IB: syz0: added [ 156.092688][ T8591] lo speed is unknown, defaulting to 1000 [ 156.122252][ T8614] netlink: 1776 bytes leftover after parsing attributes in process `syz.2.757'. [ 156.132819][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 156.539265][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 156.558954][ T8631] bridge_slave_1: default FDB implementation only supports local addresses [ 156.742887][ T8591] lo speed is unknown, defaulting to 1000 [ 157.143178][ T8652] netlink: 'syz.3.770': attribute type 23 has an invalid length. [ 157.408749][ T8663] netlink: 48 bytes leftover after parsing attributes in process `syz.3.772'. [ 157.459777][ T8663] tipc: MTU too low for tipc bearer [ 157.475251][ T8663] netlink: 'syz.3.772': attribute type 4 has an invalid length. [ 157.537683][ T8591] lo speed is unknown, defaulting to 1000 [ 157.717831][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.776'. [ 157.750243][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.776'. [ 158.309418][ T8699] Bluetooth: MGMT ver 1.23 [ 158.329103][ T8591] lo speed is unknown, defaulting to 1000 [ 159.049366][ T8729] __nla_validate_parse: 2 callbacks suppressed [ 159.049386][ T8729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 159.189843][ T8591] lo speed is unknown, defaulting to 1000 [ 159.211696][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 159.268506][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 159.292588][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'. [ 159.450738][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 159.504875][ T8741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.795'. [ 159.652084][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'. [ 159.703075][ T8757] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 159.738203][ T8757] netlink: 15 bytes leftover after parsing attributes in process `syz.4.798'. [ 160.035958][ T8591] lo speed is unknown, defaulting to 1000 [ 160.166086][ T8774] netlink: 'syz.3.803': attribute type 2 has an invalid length. [ 160.188045][ T8774] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 161.058184][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 161.068754][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 162.547481][ T8845] netlink: 'syz.2.823': attribute type 3 has an invalid length. [ 162.656099][ T8849] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 162.692377][ T8849] netlink: 'syz.0.825': attribute type 11 has an invalid length. [ 162.807441][ T8858] netlink: 'syz.3.829': attribute type 29 has an invalid length. [ 162.816345][ T8858] netlink: 'syz.3.829': attribute type 29 has an invalid length. [ 163.028711][ T8865] netlink: 'syz.2.830': attribute type 10 has an invalid length. [ 163.038347][ T8865] veth0_virt_wifi: entered allmulticast mode [ 163.154704][ T8880] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 163.419999][ T8904] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 164.904982][ T8934] __nla_validate_parse: 9 callbacks suppressed [ 164.909350][ T8934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.848'. [ 164.991754][ T8939] syz_tun: entered allmulticast mode [ 165.021631][ T8939] syz_tun: left allmulticast mode [ 165.031843][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 165.082130][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.850'. [ 165.470075][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 165.502496][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 165.860053][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 165.890191][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 166.091120][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 166.105683][ T9004] netlink: 'syz.0.869': attribute type 19 has an invalid length. [ 166.118858][ T9003] pim6reg: entered allmulticast mode [ 166.125660][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 166.150946][ T9008] pim6reg: left allmulticast mode [ 166.156431][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 166.182422][ T3521] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.191970][ T3521] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.200956][ T9004] netlink: 'syz.0.869': attribute type 19 has an invalid length. [ 166.219525][ T3521] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.238120][ T3521] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.472734][ T9014] syzkaller1: entered promiscuous mode [ 166.483492][ T9014] syzkaller1: entered allmulticast mode [ 166.677923][ T9034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.902982][ T9052] Bluetooth: MGMT ver 1.23 [ 167.500145][ T9090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.598997][ T9097] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.605829][ T9097] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.706293][ T9100] trusted_key: syz.3.898 sent an empty control message without MSG_MORE. [ 167.910984][ T9114] syz_tun: entered allmulticast mode [ 167.969276][ T9118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.008478][ T9121] syz_tun: left allmulticast mode [ 168.593363][ T9168] netlink: 'syz.1.915': attribute type 1 has an invalid length. [ 168.673979][ T9175] 8021q: VLANs not supported on wg2 [ 168.714632][ T9173] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 168.715108][ T9176] openvswitch: netlink: Key type 30 is not supported [ 168.722878][ T9173] netlink: 'syz.0.917': attribute type 2 has an invalid length. [ 168.896179][ T9189] nbd: couldn't find a device at index 0 [ 168.906192][ T9189] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.948821][ T9188] gretap2: entered promiscuous mode [ 168.972378][ T9188] gretap2: entered allmulticast mode [ 169.199014][ T9204] netlink: 'syz.0.926': attribute type 1 has an invalid length. [ 169.209435][ T9204] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 169.651878][ T9220] syz.2.930 (9220) used greatest stack depth: 16840 bytes left [ 169.720846][ T9243] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 169.974429][ T9259] netlink: 'syz.3.938': attribute type 29 has an invalid length. [ 170.003269][ T9259] __nla_validate_parse: 21 callbacks suppressed [ 170.003289][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 170.126614][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 170.153170][ T9266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 170.181532][ T9266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 170.270624][ T9272] netlink: 48 bytes leftover after parsing attributes in process `syz.1.944'. [ 170.349082][ T9282] netlink: 48 bytes leftover after parsing attributes in process `syz.2.945'. [ 170.373478][ T9280] unsupported nlmsg_type 40 [ 170.392893][ T9283] netlink: 'syz.4.946': attribute type 12 has an invalid length. [ 170.420006][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 170.505963][ T9291] vlan2: entered allmulticast mode [ 170.546797][ T9291] bridge0: entered allmulticast mode [ 170.674710][ T9301] netlink: 'syz.1.952': attribute type 1 has an invalid length. [ 170.756294][ T9301] bond2: (slave bridge3): making interface the new active one [ 170.774817][ T9301] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 170.926391][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'. [ 171.080839][ T9320] lo: entered allmulticast mode [ 171.126356][ T9324] geneve2: entered promiscuous mode [ 171.136607][ T9324] geneve2: entered allmulticast mode [ 171.146416][ T9320] lo: left allmulticast mode [ 171.157241][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.961'. [ 171.189594][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.963'. [ 171.349170][ T9332] sctp: [Deprecated]: syz.0.966 (pid 9332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.349170][ T9332] Use struct sctp_sack_info instead [ 171.520681][ T9350] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 172.548618][ T9345] vlan0: left allmulticast mode [ 172.553532][ T9345] veth0_vlan: left allmulticast mode [ 172.560666][ T9345] vlan0: left promiscuous mode [ 172.666512][ T8918] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.717350][ T8918] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.726576][ T8918] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.782850][ T8918] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.918671][ T9401] sctp: [Deprecated]: syz.4.981 (pid 9401) Use of int in maxseg socket option. [ 172.918671][ T9401] Use struct sctp_assoc_value instead [ 173.293145][ T9423] netlink: 'syz.3.990': attribute type 9 has an invalid length. [ 173.371202][ T9423] netlink: 'syz.3.990': attribute type 9 has an invalid length. [ 173.381879][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.398282][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.416859][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.436761][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.471070][ T9437] veth0_to_bridge: entered promiscuous mode [ 173.943773][ T9469] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 174.179096][ T9478] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 174.198452][ T9430] veth0_to_bridge: left promiscuous mode [ 174.639452][ T9501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.703975][ T9522] nftables ruleset with unbound set [ 174.742638][ T9523] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 174.779904][ T9523] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 174.815644][ T9523] netlink: 'syz.2.1016': attribute type 29 has an invalid length. [ 174.821670][ T9526] syz.1.1017 (9526) used obsolete PPPIOCDETACH ioctl [ 174.843529][ T9524] netlink: 'syz.2.1016': attribute type 83 has an invalid length. [ 174.971067][ T9534] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 175.023505][ T9537] __nla_validate_parse: 20 callbacks suppressed [ 175.023527][ T9537] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1020'. [ 175.241671][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1026'. [ 175.502184][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'. [ 175.519308][ T9565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1032'. [ 175.746015][ T9578] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 175.763919][ T9582] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 175.773210][ T9580] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 175.824548][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1035'. [ 175.872111][ T9582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.901684][ T9583] bond2: (slave gretap1): making interface the new active one [ 175.934222][ T9583] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 176.086048][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 176.132687][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'. [ 176.362572][ T9616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.432207][ T9624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1045'. [ 176.489716][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 176.712173][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 176.973889][ T9651] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 177.289800][ T9671] bond0: (slave wlan1): Opening slave failed [ 177.300116][ T9670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.426419][ T9679] bond3: option xmit_hash_policy: invalid value (64) [ 177.445132][ T9679] bond3 (unregistering): Released all slaves [ 177.795079][ T9705] syz.4.1068 uses old SIOCAX25GETINFO [ 178.080010][ T9719] macvtap1: entered promiscuous mode [ 178.085472][ T9719] vlan0: entered promiscuous mode [ 178.099916][ T9719] macvtap1: entered allmulticast mode [ 178.130619][ T9719] vlan0: entered allmulticast mode [ 178.166523][ T9719] veth0_vlan: entered allmulticast mode [ 178.566585][ T9751] lo speed is unknown, defaulting to 1000 [ 178.691896][ T9758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.699347][ T9758] IPv6: NLM_F_CREATE should be set when creating new route [ 178.788887][ T9768] validate_nla: 4 callbacks suppressed [ 178.788907][ T9768] netlink: 'syz.2.1086': attribute type 1 has an invalid length. [ 178.813113][ T9768] netlink: 'syz.2.1086': attribute type 1 has an invalid length. [ 179.635776][ T9806] netlink: 'syz.3.1094': attribute type 11 has an invalid length. [ 180.060562][ T9818] __nla_validate_parse: 19 callbacks suppressed [ 180.060584][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1097'. [ 180.076265][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1097'. [ 180.555429][ T9850] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1106'. [ 180.573555][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1107'. [ 180.601510][ T9848] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1107'. [ 180.656428][ T9856] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1108'. [ 180.684500][ T9859] netlink: 'syz.1.1110': attribute type 142 has an invalid length. [ 180.794048][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 180.830845][ T9865] netlink: zone id is out of range [ 180.836046][ T9865] netlink: zone id is out of range [ 180.863272][ T9865] netlink: zone id is out of range [ 180.869538][ T9865] netlink: zone id is out of range [ 180.874829][ T9865] netlink: zone id is out of range [ 180.880926][ T9865] netlink: zone id is out of range [ 180.887426][ T9865] netlink: zone id is out of range [ 180.892822][ T9865] netlink: zone id is out of range [ 180.908415][ T9865] netlink: zone id is out of range [ 181.112306][ T9883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1120'. [ 181.204381][ T9890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1120'. [ 181.329443][ T9892] bridge_slave_0: entered promiscuous mode [ 181.381505][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'. [ 181.468771][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.632921][ T9905] bond2: invalid ARP target 0.0.0.0 specified for addition [ 181.641001][ T9905] bond2: option arp_ip_target: invalid value (0) [ 181.653113][ T9905] bond2 (unregistering): Released all slaves [ 182.325385][ T9946] netlink: 'syz.1.1139': attribute type 21 has an invalid length. [ 182.591911][ T9963] netlink: 'syz.3.1144': attribute type 4 has an invalid length. [ 182.621401][ T9967] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 182.738971][ T9967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.778132][ T9970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.785997][ T9970] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 182.798490][ T9970] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 182.837848][ T9967] vlan2: entered allmulticast mode [ 182.843676][ T9967] bond4: entered allmulticast mode [ 199.691532][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.698250][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.931514][T10000] nr0: left allmulticast mode [ 206.201997][T10006] team0 (unregistering): Port device team_slave_0 removed [ 206.219838][T10006] team0 (unregistering): Port device team_slave_1 removed [ 206.350657][T10011] __nla_validate_parse: 5 callbacks suppressed [ 206.350679][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1158'. [ 206.372605][T10011] netlink: 'syz.4.1158': attribute type 29 has an invalid length. [ 206.382085][T10011] netlink: 'syz.4.1158': attribute type 29 has an invalid length. [ 206.391821][T10011] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1158'. [ 206.652056][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 206.991699][T10037] veth0: entered promiscuous mode [ 207.033010][T10040] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1166'. [ 207.719607][T10078] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1176'. [ 207.789644][T10081] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 207.790079][T10035] veth0: left promiscuous mode [ 207.801772][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1177'. [ 207.821940][T10081] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1178'. [ 208.021168][T10096] IPv6: NLM_F_REPLACE set, but no existing node found! [ 208.141624][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 208.187326][T10106] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1184'. [ 208.275919][T10108] net_ratelimit: 12 callbacks suppressed [ 208.275940][T10108] openvswitch: netlink: Message has 8 unknown bytes. [ 208.348403][T10116] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1187'. [ 208.420538][T10123] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 208.497488][T10128] syzkaller1: entered promiscuous mode [ 208.503323][T10128] syzkaller1: entered allmulticast mode [ 208.560102][T10130] pim6reg1: entered promiscuous mode [ 208.569321][T10130] pim6reg1: entered allmulticast mode [ 208.940942][T10146] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 209.238578][T10157] netlink: 'syz.4.1201': attribute type 29 has an invalid length. [ 209.323977][T10157] netlink: 'syz.4.1201': attribute type 29 has an invalid length. [ 209.340735][T10157] netlink: 'syz.4.1201': attribute type 23 has an invalid length. [ 209.360508][T10162] tipc: Enabled bearer , priority 0 [ 209.368253][T10162] syzkaller0: entered promiscuous mode [ 209.373906][T10162] syzkaller0: entered allmulticast mode [ 209.383611][T10162] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 209.410115][T10162] tipc: Resetting bearer [ 209.544087][T10169] lo: left promiscuous mode [ 209.551072][T10169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.558197][T10167] xt_l2tp: invalid flags combination: 0 [ 209.580703][T10148] lo speed is unknown, defaulting to 1000 [ 209.604349][T10158] tipc: Resetting bearer [ 209.669628][T10158] tipc: Disabling bearer [ 210.270287][T10197] lo speed is unknown, defaulting to 1000 [ 211.430825][T10249] netlink: 'syz.0.1230': attribute type 2 has an invalid length. [ 211.458692][T10249] __nla_validate_parse: 13 callbacks suppressed [ 211.458715][T10249] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1230'. [ 211.512976][T10249] nbd: must specify at least one socket [ 211.664182][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 211.780132][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 211.855741][T10270] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1236'. [ 211.976054][T10270] bond3 (unregistering): Released all slaves [ 212.060139][T10284] netlink: 'syz.4.1241': attribute type 29 has an invalid length. [ 212.069646][T10286] netlink: 'syz.4.1241': attribute type 29 has an invalid length. [ 212.400983][T10303] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1244'. [ 212.589733][T10319] sch_fq: defrate 0 ignored. [ 212.616313][T10319] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1250'. [ 212.654058][T10320] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1250'. [ 212.703529][T10327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1251'. [ 212.901160][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1256'. [ 212.938322][T10344] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20003 [ 212.950992][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 213.256032][T10372] openvswitch: netlink: Flow key attr not present in new flow. [ 213.439398][T10381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.476548][T10383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.895597][T10412] netlink: 'syz.2.1274': attribute type 4 has an invalid length. [ 214.111689][T10425] netlink: 'syz.0.1280': attribute type 10 has an invalid length. [ 214.401418][T10442] bond5 (unregistering): Released all slaves [ 214.684998][T10471] syzkaller1: entered promiscuous mode [ 214.706259][T10471] syzkaller1: entered allmulticast mode [ 215.116257][T10498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.228670][T10502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.257707][T10502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.282700][T10502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.327875][T10502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.924450][T10526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.377990][T10552] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 216.392116][T10552] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 216.610964][T10560] netlink: 'syz.0.1317': attribute type 18 has an invalid length. [ 216.723869][T10572] __nla_validate_parse: 13 callbacks suppressed [ 216.723893][T10572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1320'. [ 216.765926][T10572] netlink: 'syz.3.1320': attribute type 3 has an invalid length. [ 216.873132][T10576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.127465][ T7830] IPVS: ip_vs_send_async error -101 [ 240.421396][T10599] netlink: 'syz.4.1332': attribute type 11 has an invalid length. [ 240.866386][T10623] netlink: 'syz.1.1338': attribute type 16 has an invalid length. [ 240.900582][T10623] netlink: 'syz.1.1338': attribute type 3 has an invalid length. [ 240.926891][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 241.124757][T10629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.150367][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 241.167829][T10629] bond0: (slave rose0): Enslaving as an active interface with an up link [ 241.174707][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 241.229846][T10629] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1339'. [ 241.282561][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1340'. [ 241.361449][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1340'. [ 241.616977][T10661] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1345'. [ 241.642462][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 241.657727][T10656] gtp1: entered promiscuous mode [ 241.662735][T10656] gtp1: entered allmulticast mode [ 241.707365][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 241.735660][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1345'. [ 242.545931][T10724] netlink: 'syz.3.1360': attribute type 33 has an invalid length. [ 242.623381][T10724] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 242.638525][T10724] bond5 (unregistering): Released all slaves [ 243.179114][T10759] tipc: Enabled bearer , priority 0 [ 243.189526][T10759] hsr0 speed is unknown, defaulting to 1000 [ 243.195976][T10759] hsr0 speed is unknown, defaulting to 1000 [ 243.205456][T10759] hsr0 speed is unknown, defaulting to 1000 [ 243.213680][T10760] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 243.221334][T10759] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 243.294027][T10759] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 243.377817][T10772] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 243.494805][T10759] hsr0 speed is unknown, defaulting to 1000 [ 243.544248][T10759] hsr0 speed is unknown, defaulting to 1000 [ 243.581594][T10759] hsr0 speed is unknown, defaulting to 1000 [ 243.623231][T10759] hsr0 speed is unknown, defaulting to 1000 [ 243.654300][T10759] hsr0 speed is unknown, defaulting to 1000 [ 243.829997][T10794] netlink: 'syz.4.1374': attribute type 10 has an invalid length. [ 244.099031][T10811] netlink: 'syz.1.1379': attribute type 20 has an invalid length. [ 244.112141][T10814] openvswitch: netlink: Actions may not be safe on all matching packets [ 244.132783][T10819] delete_channel: no stack [ 244.134394][T10811] netlink: 'syz.1.1379': attribute type 20 has an invalid length. [ 244.164645][T10818] IPv6: Can't replace route, no match found [ 244.270061][T10824] syz.3.1382: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 244.311794][T10824] CPU: 0 UID: 0 PID: 10824 Comm: syz.3.1382 Not tainted syzkaller #0 PREEMPT(full) [ 244.311826][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.311848][T10824] Call Trace: [ 244.311856][T10824] [ 244.311866][T10824] dump_stack_lvl+0x189/0x250 [ 244.311905][T10824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.311933][T10824] ? __pfx__printk+0x10/0x10 [ 244.311965][T10824] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 244.311993][T10824] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 244.312023][T10824] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 244.312055][T10824] warn_alloc+0x214/0x310 [ 244.312088][T10824] ? stack_depot_save_flags+0x40/0x860 [ 244.312122][T10824] ? __pfx_warn_alloc+0x10/0x10 [ 244.312155][T10824] ? kasan_save_track+0x4f/0x80 [ 244.312179][T10824] ? xskq_create+0x56/0x170 [ 244.312212][T10824] ? xsk_init_queue+0xb0/0x110 [ 244.312241][T10824] ? xsk_setsockopt+0x4dc/0x8d0 [ 244.312265][T10824] ? do_sock_setsockopt+0x17c/0x1b0 [ 244.312287][T10824] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 244.312309][T10824] ? do_syscall_64+0xfa/0x3b0 [ 244.312330][T10824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.312374][T10824] __vmalloc_node_range_noprof+0x125/0x12f0 [ 244.312439][T10824] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 244.312476][T10824] ? __kasan_kmalloc+0x93/0xb0 [ 244.312507][T10824] vmalloc_user_noprof+0xad/0xf0 [ 244.312536][T10824] ? xskq_create+0xbf/0x170 [ 244.312569][T10824] xskq_create+0xbf/0x170 [ 244.312615][T10824] xsk_init_queue+0xb0/0x110 [ 244.312651][T10824] xsk_setsockopt+0x4dc/0x8d0 [ 244.312685][T10824] ? __pfx_xsk_setsockopt+0x10/0x10 [ 244.312716][T10824] ? __pfx_aa_sk_perm+0x10/0x10 [ 244.312749][T10824] ? aa_sock_opt_perm+0xff/0x1b0 [ 244.312788][T10824] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 244.312822][T10824] ? __pfx_xsk_setsockopt+0x10/0x10 [ 244.312856][T10824] do_sock_setsockopt+0x17c/0x1b0 [ 244.312887][T10824] __x64_sys_setsockopt+0x13f/0x1b0 [ 244.312916][T10824] do_syscall_64+0xfa/0x3b0 [ 244.312933][T10824] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.312963][T10824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.312982][T10824] ? clear_bhb_loop+0x60/0xb0 [ 244.313007][T10824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.313028][T10824] RIP: 0033:0x7fb64b18eec9 [ 244.313054][T10824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.313072][T10824] RSP: 002b:00007fb64c037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 244.313094][T10824] RAX: ffffffffffffffda RBX: 00007fb64b3e5fa0 RCX: 00007fb64b18eec9 [ 244.313110][T10824] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 244.313122][T10824] RBP: 00007fb64b211f91 R08: 0000000000000004 R09: 0000000000000000 [ 244.313135][T10824] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.313148][T10824] R13: 00007fb64b3e6038 R14: 00007fb64b3e5fa0 R15: 00007ffd498bd388 [ 244.313183][T10824] [ 244.315304][T10824] Mem-Info: [ 244.640244][T10824] active_anon:4746 inactive_anon:0 isolated_anon:0 [ 244.640244][T10824] active_file:2567 inactive_file:39919 isolated_file:0 [ 244.640244][T10824] unevictable:768 dirty:24 writeback:0 [ 244.640244][T10824] slab_reclaimable:11303 slab_unreclaimable:102309 [ 244.640244][T10824] mapped:29066 shmem:1357 pagetables:1629 [ 244.640244][T10824] sec_pagetables:0 bounce:0 [ 244.640244][T10824] kernel_misc_reclaimable:0 [ 244.640244][T10824] free:1323262 free_pcp:15770 free_cma:0 [ 244.738969][T10824] Node 0 active_anon:18984kB inactive_anon:0kB active_file:10268kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116264kB dirty:96kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12824kB pagetables:6272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.756975][T10839] pim6reg1: entered promiscuous mode [ 244.793987][T10824] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.848588][T10839] pim6reg1: entered allmulticast mode [ 244.863746][T10824] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.914450][T10824] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 244.947815][T10824] Node 0 DMA32 free:1391884kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19044kB inactive_anon:0kB active_file:10268kB inactive_file:159160kB unevictable:1536kB writepending:96kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:39588kB local_pcp:18372kB free_cma:0kB [ 245.008776][T10824] lowmem_reserve[]: 0 0 0 0 0 [ 245.013694][T10824] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 245.114686][T10824] lowmem_reserve[]: 0 0 0 0 0 [ 245.119796][T10824] Node 1 Normal free:3885800kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23056kB local_pcp:14320kB free_cma:0kB [ 245.169005][T10824] lowmem_reserve[]: 0 0 0 0 0 [ 245.179367][T10824] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 245.192865][T10824] Node 0 DMA32: 649*4kB (UM) 1277*8kB (UM) 1248*16kB (UME) 704*32kB (UME) 1004*64kB (UME) 818*128kB (UM) 609*256kB (UME) 429*512kB (UME) 210*1024kB (UME) 10*2048kB (UM) 136*4096kB (UM) = 1392396kB [ 245.214355][T10824] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 245.228601][T10824] Node 1 Normal: 186*4kB (UE) 42*8kB (UME) 37*16kB (UME) 67*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885800kB [ 245.288140][T10824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.301861][T10824] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.312203][T10824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.325790][T10824] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.336180][T10824] 43839 total pagecache pages [ 245.367889][T10824] 0 pages in swap cache [ 245.372296][T10824] Free swap = 124996kB [ 245.383630][T10824] Total swap = 124996kB [ 245.399000][T10824] 2097051 pages RAM [ 245.409533][T10824] 0 pages HighMem/MovableOnly [ 245.421503][T10824] 423781 pages reserved [ 245.431686][T10824] 0 pages cma reserved [ 246.040396][T10887] tipc: Enabling of bearer rejected, failed to enable media [ 246.235319][T10896] __nla_validate_parse: 45 callbacks suppressed [ 246.235341][T10896] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1402'. [ 246.258279][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 246.269153][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 246.374210][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'. [ 246.745286][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 246.893992][T10950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1415'. [ 246.905276][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 246.935649][T10952] netlink: 'syz.1.1414': attribute type 21 has an invalid length. [ 246.983434][T10957] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 247.023541][T10952] netlink: 'syz.1.1414': attribute type 6 has an invalid length. [ 247.039579][T10952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1414'. [ 247.144651][T10960] veth1: entered promiscuous mode [ 247.177132][T10960] bond3: (slave veth1): Enslaving as a backup interface with a down link [ 247.205652][T10964] tipc: Enabled bearer , priority 0 [ 247.213570][T10964] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 247.221257][T10964] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 247.240304][T10964] tipc: Resetting bearer [ 247.311277][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'. [ 247.328073][T10968] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1420'. [ 247.709299][T11000] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 247.750035][T11002] netlink: 'syz.1.1431': attribute type 7 has an invalid length. [ 247.854183][T11011] tipc: Enabled bearer , priority 10 [ 248.033964][ T3521] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 248.217283][ T9] tipc: Node number set to 3680371020 [ 248.264988][T11036] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 249.498293][ T30] audit: type=1804 audit(1759665192.743:2): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1454" name="/newroot/260/cgroup.controllers" dev="tmpfs" ino=1340 res=1 errno=0 [ 249.569571][ T30] audit: type=1800 audit(1759665192.753:3): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1454" name="cgroup.controllers" dev="tmpfs" ino=1340 res=0 errno=0 [ 249.971301][T11127] veth0_virt_wifi: entered allmulticast mode [ 249.995368][T11130] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 250.148220][T11132] Bluetooth: MGMT ver 1.23 [ 250.429613][T11160] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 250.441527][T11152] syzkaller0: entered promiscuous mode [ 250.466932][T11152] syzkaller0: entered allmulticast mode [ 250.586186][T11170] netlink: 'syz.2.1480': attribute type 10 has an invalid length. [ 250.633502][T11170] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 251.093431][T11194] netlink: 'syz.3.1487': attribute type 16 has an invalid length. [ 251.118841][T11194] netlink: 'syz.3.1487': attribute type 3 has an invalid length. [ 251.162522][T11198] xfrm1: entered allmulticast mode [ 251.186221][T11198] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 251.283716][T11203] gretap2: entered promiscuous mode [ 252.027709][T11252] netlink: 'syz.1.1504': attribute type 5 has an invalid length. [ 252.153332][T11256] lo speed is unknown, defaulting to 1000 [ 252.229513][T11260] : renamed from hsr0 (while UP) [ 252.490344][T11281] __nla_validate_parse: 79 callbacks suppressed [ 252.490365][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 252.555840][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1512'. [ 252.653569][T11276] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 252.687874][T11276] bond4 (unregistering): Released all slaves [ 252.721277][T11256] hsr0 speed is unknown, defaulting to 1000 [ 252.776077][T11288] syzkaller0: entered promiscuous mode [ 252.790111][T11288] syzkaller0: entered allmulticast mode [ 253.053418][T11301] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1519'. [ 253.080974][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 253.231474][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1518'. [ 253.246925][T11307] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1518'. [ 253.328941][T11318] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 253.475799][T11328] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1526'. [ 253.485554][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 253.735387][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 253.871261][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1531'. [ 253.996200][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.005332][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.017171][ T8079] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.067369][ T5967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.137563][ T5967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.273160][T11371] syz_tun: entered allmulticast mode [ 254.280137][T11371] syz_tun: left allmulticast mode [ 254.672911][T11397] 8021q: VLANs not supported on gre0 [ 255.069928][T11422] tipc: Enabling of bearer rejected, already enabled [ 255.071175][T11392] netlink: 'syz.1.1545': attribute type 2 has an invalid length. [ 255.629956][T11449] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 256.026363][ T8079] IPVS: starting estimator thread 0... [ 256.091363][T11486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.126761][T11481] IPVS: using max 22 ests per chain, 52800 per kthread [ 256.337536][T11490] syzkaller0: entered promiscuous mode [ 256.343322][T11490] syzkaller0: entered allmulticast mode [ 258.010221][T11497] gtp0: entered promiscuous mode [ 258.015456][T11497] gtp0: entered allmulticast mode [ 258.128676][T11503] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 258.167119][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 258.352615][T11526] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 258.362075][T11526] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 258.391478][T11521] tipc: Enabled bearer , priority 0 [ 258.399658][T11521] syzkaller0: entered promiscuous mode [ 258.405207][T11521] syzkaller0: entered allmulticast mode [ 258.451194][T11521] tipc: Resetting bearer [ 258.524171][T11514] tipc: Resetting bearer [ 258.557369][T11514] tipc: Disabling bearer [ 258.774256][T11544] __nla_validate_parse: 8 callbacks suppressed [ 258.774278][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 258.929434][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1582'. [ 259.088194][T11558] netlink: 'syz.4.1587': attribute type 11 has an invalid length. [ 259.096188][T11558] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1587'. [ 259.247080][T11562] tipc: Enabling of bearer rejected, already enabled [ 259.447947][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 260.081983][T11614] netlink: 'syz.1.1602': attribute type 11 has an invalid length. [ 260.099860][T11614] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1602'. [ 260.220851][T11618] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1603'. [ 260.231020][T11618] netlink: 'syz.2.1603': attribute type 9 has an invalid length. [ 260.240045][T11618] netlink: 'syz.2.1603': attribute type 16 has an invalid length. [ 260.248172][T11618] netlink: 'syz.2.1603': attribute type 17 has an invalid length. [ 260.311472][T11618] dummy0: left promiscuous mode [ 260.324491][T11618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.732794][T11637] netlink: 'syz.1.1608': attribute type 3 has an invalid length. [ 260.741381][T11638] netlink: 'syz.1.1608': attribute type 3 has an invalid length. [ 260.777244][T11637] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 260.794926][T11638] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 260.814250][T11644] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 261.037312][T11647] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1609'. [ 261.106233][T11661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1614'. [ 261.159254][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.165621][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.431178][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 261.462316][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 261.546076][T11641] syz.2.1609: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.568400][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.2.1609 Not tainted syzkaller #0 PREEMPT(full) [ 261.568431][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.568444][T11641] Call Trace: [ 261.568453][T11641] [ 261.568462][T11641] dump_stack_lvl+0x189/0x250 [ 261.568498][T11641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.568526][T11641] ? __pfx__printk+0x10/0x10 [ 261.568560][T11641] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.568589][T11641] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.568621][T11641] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 261.568653][T11641] warn_alloc+0x214/0x310 [ 261.568692][T11641] ? __pfx_warn_alloc+0x10/0x10 [ 261.568733][T11641] ? __get_vm_area_node+0x28f/0x300 [ 261.568762][T11641] ? nf_tables_newset+0x132b/0x2530 [ 261.568795][T11641] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 261.568861][T11641] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.568895][T11641] ? rcu_is_watching+0x15/0xb0 [ 261.568922][T11641] ? nf_tables_newset+0x132b/0x2530 [ 261.568948][T11641] ? nf_tables_newset+0x132b/0x2530 [ 261.568974][T11641] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 261.569002][T11641] ? nf_tables_newset+0x132b/0x2530 [ 261.569030][T11641] ? nft_table_lookup+0x211/0x230 [ 261.569057][T11641] ? nft_set_lookup+0x128/0x150 [ 261.569086][T11641] ? nft_hash_privsize+0xaf/0xf0 [ 261.569113][T11641] nf_tables_newset+0x132b/0x2530 [ 261.569157][T11641] ? __pfx_nf_tables_newset+0x10/0x10 [ 261.569216][T11641] ? __nla_parse+0x40/0x60 [ 261.569262][T11641] nfnetlink_rcv+0x11d9/0x2590 [ 261.569342][T11641] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 261.569396][T11641] ? ref_tracker_free+0x63a/0x7d0 [ 261.569464][T11641] ? __netlink_deliver_tap+0x807/0x850 [ 261.569486][T11641] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.569531][T11641] netlink_unicast+0x82c/0x9e0 [ 261.569575][T11641] ? __pfx_netlink_unicast+0x10/0x10 [ 261.569612][T11641] ? netlink_sendmsg+0x642/0xb30 [ 261.569632][T11641] ? skb_put+0x11b/0x210 [ 261.569660][T11641] netlink_sendmsg+0x805/0xb30 [ 261.569695][T11641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.569723][T11641] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.569756][T11641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.569789][T11641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.569814][T11641] __sock_sendmsg+0x219/0x270 [ 261.569850][T11641] ____sys_sendmsg+0x505/0x830 [ 261.569883][T11641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.569921][T11641] ? import_iovec+0x74/0xa0 [ 261.569950][T11641] ___sys_sendmsg+0x21f/0x2a0 [ 261.569979][T11641] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.570050][T11641] ? __fget_files+0x2a/0x420 [ 261.570079][T11641] ? __fget_files+0x3a0/0x420 [ 261.570122][T11641] __x64_sys_sendmsg+0x19b/0x260 [ 261.570152][T11641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.570198][T11641] ? rcu_is_watching+0x15/0xb0 [ 261.570230][T11641] ? do_syscall_64+0xbe/0x3b0 [ 261.570258][T11641] do_syscall_64+0xfa/0x3b0 [ 261.570277][T11641] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.570311][T11641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.570333][T11641] ? clear_bhb_loop+0x60/0xb0 [ 261.570360][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.570381][T11641] RIP: 0033:0x7f2ef9f8eec9 [ 261.570401][T11641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.570419][T11641] RSP: 002b:00007f2efad9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.570442][T11641] RAX: ffffffffffffffda RBX: 00007f2efa1e5fa0 RCX: 00007f2ef9f8eec9 [ 261.570458][T11641] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 261.570472][T11641] RBP: 00007f2efa011f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.570485][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.570498][T11641] R13: 00007f2efa1e6038 R14: 00007f2efa1e5fa0 R15: 00007ffc355d32f8 [ 261.570534][T11641] [ 261.570627][T11641] Mem-Info: [ 261.964063][T11641] active_anon:4785 inactive_anon:0 isolated_anon:0 [ 261.964063][T11641] active_file:2567 inactive_file:39927 isolated_file:0 [ 261.964063][T11641] unevictable:768 dirty:82 writeback:0 [ 261.964063][T11641] slab_reclaimable:11558 slab_unreclaimable:102886 [ 261.964063][T11641] mapped:28993 shmem:1357 pagetables:1488 [ 261.964063][T11641] sec_pagetables:0 bounce:0 [ 261.964063][T11641] kernel_misc_reclaimable:0 [ 261.964063][T11641] free:1321785 free_pcp:15937 free_cma:0 [ 262.016497][T11641] Node 0 active_anon:19140kB inactive_anon:0kB active_file:10268kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115972kB dirty:328kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13060kB pagetables:5808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 262.049950][T11641] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 262.081808][T11641] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.113251][T11641] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 262.131595][T11641] Node 0 DMA32 free:1385976kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19000kB inactive_anon:0kB active_file:10268kB inactive_file:159192kB unevictable:1536kB writepending:328kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:40700kB local_pcp:15672kB free_cma:0kB [ 262.229961][T11641] lowmem_reserve[]: 0 0 0 0 0 [ 262.234761][T11641] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 262.256062][T11686] tipc: Enabled bearer , priority 10 [ 262.313315][T11641] lowmem_reserve[]: 0 0 0 0 0 [ 262.323432][T11641] Node 1 Normal free:3885800kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23056kB local_pcp:8736kB free_cma:0kB [ 262.362547][T11641] lowmem_reserve[]: 0 0 0 0 0 [ 262.367568][T11641] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 262.381860][T11641] Node 0 DMA32: 523*4kB (UME) 1039*8kB (UM) 1024*16kB (UM) 928*32kB (UM) 1000*64kB (UME) 812*128kB (UME) 598*256kB (UME) 423*512kB (UM) 213*1024kB (UME) 10*2048kB (UM) 135*4096kB (UM) = 1385636kB [ 262.402157][T11641] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 262.417359][T11641] Node 1 Normal: 186*4kB (UE) 42*8kB (UME) 37*16kB (UME) 67*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885800kB [ 262.457387][T11641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.496427][T11641] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.528224][T11641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.538317][T11641] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.555072][T11641] 43847 total pagecache pages [ 262.571136][T11641] 0 pages in swap cache [ 262.577190][T11641] Free swap = 124996kB [ 262.585554][T11641] Total swap = 124996kB [ 262.591606][T11641] 2097051 pages RAM [ 262.595456][T11641] 0 pages HighMem/MovableOnly [ 262.611889][T11641] 423781 pages reserved [ 262.616102][T11641] 0 pages cma reserved [ 263.356747][ T9381] tipc: Node number set to 3480673560 [ 263.533524][T11740] bond2: option min_links: invalid value (18446744073709551614) [ 263.542211][T11740] bond2: option min_links: allowed values 0 - 2147483647 [ 263.552644][T11740] bond2 (unregistering): Released all slaves [ 264.672587][T11780] __nla_validate_parse: 3 callbacks suppressed [ 264.672607][T11780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1652'. [ 264.674093][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 264.718575][T11788] syzkaller1: entered promiscuous mode [ 264.729526][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 264.735639][T11788] syzkaller1: entered allmulticast mode [ 264.753581][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 264.766016][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 264.774227][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 264.790345][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 264.798550][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 264.807762][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 264.851200][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 264.860131][T11781] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 265.013987][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 265.091156][T11808] vlan2: entered promiscuous mode [ 265.096781][T11808] bridge0: entered promiscuous mode [ 265.129085][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1660'. [ 265.138883][T11816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1660'. [ 265.157892][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 265.199236][T11808] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1660'. [ 265.251989][T11820] batman_adv: batadv0: Adding interface: dummy0 [ 265.259128][T11820] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.284724][T11820] batman_adv: batadv0: Interface activated: dummy0 [ 265.309701][T11820] batadv0: mtu less than device minimum [ 265.317109][T11820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-240) [ 265.329416][T11820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-240) [ 265.341360][T11820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-240) [ 265.353556][T11820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-240) [ 265.365596][T11820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-240) [ 265.377613][T11820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-240) [ 265.389664][T11820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-240) [ 265.401705][T11820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-240) [ 265.413731][T11820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-240) [ 265.911098][T11856] IPv6: Can't replace route, no match found [ 266.886912][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 283.526985][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.447301][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.571291][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.577885][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.021523][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.028159][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.126859][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 412.807850][ T31] INFO: task kworker/1:12:9365 blocked for more than 143 seconds. [ 412.815709][ T31] Not tainted syzkaller #0 [ 412.820899][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.830005][ T31] task:kworker/1:12 state:D stack:24296 pid:9365 tgid:9365 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 412.842147][ T31] Workqueue: events rfkill_sync_work [ 412.847553][ T31] Call Trace: [ 412.850864][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.853908][ T31] __schedule+0x1798/0x4cc0 [ 412.858734][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 412.864526][ T31] ? __pfx___schedule+0x10/0x10 [ 412.869788][ T31] ? schedule+0x91/0x360 [ 412.874277][ T31] schedule+0x165/0x360 [ 412.878560][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.884079][ T31] __mutex_lock+0x7e6/0x1350 [ 412.891833][ T31] ? __mutex_lock+0x5bb/0x1350 [ 412.896925][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 412.926742][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.931928][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.966689][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 412.972702][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 412.987383][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 412.993192][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 412.998429][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 413.004188][ T31] rfkill_set_block+0x1cf/0x440 [ 413.009756][ T31] rfkill_sync_work+0x114/0x200 [ 413.014702][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 413.020841][ T31] process_scheduled_works+0xade/0x17b0 [ 413.026459][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 413.032569][ T31] worker_thread+0x8a0/0xda0 [ 413.037641][ T31] kthread+0x711/0x8a0 [ 413.041798][ T31] ? __pfx_worker_thread+0x10/0x10 [ 413.047160][ T31] ? __pfx_kthread+0x10/0x10 [ 413.051790][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.057142][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.062390][ T31] ? __pfx_kthread+0x10/0x10 [ 413.067311][ T31] ret_from_fork+0x436/0x7d0 [ 413.071932][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 413.077138][ T31] ? __switch_to_asm+0x39/0x70 [ 413.082040][ T31] ? __switch_to_asm+0x33/0x70 [ 413.087055][ T31] ? __pfx_kthread+0x10/0x10 [ 413.091746][ T31] ret_from_fork_asm+0x1a/0x30 [ 413.097086][ T31] [ 413.100246][ T31] INFO: task syz.1.1659:11804 blocked for more than 143 seconds. [ 413.108040][ T31] Not tainted syzkaller #0 [ 413.112991][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.121800][ T31] task:syz.1.1659 state:D stack:23848 pid:11804 tgid:11802 ppid:5845 task_flags:0x400140 flags:0x00080002 [ 413.134212][ T31] Call Trace: [ 413.137672][ T31] [ 413.140645][ T31] __schedule+0x1798/0x4cc0 [ 413.145186][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.150113][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.155004][ T31] ? __pfx___schedule+0x10/0x10 [ 413.160334][ T31] ? schedule+0x91/0x360 [ 413.164607][ T31] schedule+0x165/0x360 [ 413.168856][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.174340][ T31] __mutex_lock+0x7e6/0x1350 [ 413.179013][ T31] ? rcu_is_watching+0x15/0xb0 [ 413.183936][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.189008][ T31] ? rfkill_register+0x37/0x8e0 [ 413.193883][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.198992][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 413.204037][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.209309][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 413.214702][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 413.220691][ T31] rfkill_register+0x37/0x8e0 [ 413.225407][ T31] wiphy_register+0x2231/0x2aa0 [ 413.230437][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 413.235700][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 413.240903][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 413.247291][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 413.252805][ T31] ? ieee80211_register_hw+0x14a1/0x40d0 [ 413.258569][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 413.264417][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 413.270532][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 413.276466][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 413.283259][ T31] ? __hrtimer_setup+0x187/0x210 [ 413.288446][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 413.294321][ T31] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 413.300219][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 413.306476][ T31] ? __nla_validate_parse+0x251c/0x2d40 [ 413.312494][ T31] ? ____sys_sendmsg+0x505/0x830 [ 413.317509][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 413.322501][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 413.327694][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 413.332918][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 413.338964][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.344721][ T31] ? __nla_parse+0x40/0x60 [ 413.349205][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 413.355557][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 413.361185][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 413.367906][ T31] ? bpf_lsm_capable+0x9/0x20 [ 413.372621][ T31] ? security_capable+0x7e/0x2e0 [ 413.377803][ T31] genl_rcv_msg+0x60e/0x790 [ 413.382353][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.387443][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.393004][ T31] netlink_rcv_skb+0x205/0x470 [ 413.398079][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.402943][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.408052][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.413379][ T31] ? down_read+0x1ad/0x2e0 [ 413.417902][ T31] genl_rcv+0x28/0x40 [ 413.421916][ T31] netlink_unicast+0x82c/0x9e0 [ 413.427097][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 413.432433][ T31] ? netlink_sendmsg+0x642/0xb30 [ 413.437475][ T31] ? skb_put+0x11b/0x210 [ 413.441738][ T31] netlink_sendmsg+0x805/0xb30 [ 413.446578][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.451893][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 413.457179][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.462481][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.467915][ T31] __sock_sendmsg+0x219/0x270 [ 413.472612][ T31] ____sys_sendmsg+0x505/0x830 [ 413.477793][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.483122][ T31] ? import_iovec+0x74/0xa0 [ 413.488099][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 413.492801][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.498086][ T31] ? __fget_files+0x2a/0x420 [ 413.502712][ T31] ? __fget_files+0x3a0/0x420 [ 413.507471][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 413.512472][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.518292][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 413.523606][ T31] ? do_syscall_64+0xbe/0x3b0 [ 413.528944][ T31] do_syscall_64+0xfa/0x3b0 [ 413.533591][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.538954][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.545064][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.550048][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.555966][ T31] RIP: 0033:0x7f69d978eec9 [ 413.560574][ T31] RSP: 002b:00007f69da6ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.569062][ T31] RAX: ffffffffffffffda RBX: 00007f69d99e6090 RCX: 00007f69d978eec9 [ 413.577353][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 413.585334][ T31] RBP: 00007f69d9811f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.593394][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.601566][ T31] R13: 00007f69d99e6128 R14: 00007f69d99e6090 R15: 00007ffc03fa56b8 [ 413.610014][ T31] [ 413.613095][ T31] INFO: task syz.4.1661:11805 blocked for more than 144 seconds. [ 413.620939][ T31] Not tainted syzkaller #0 [ 413.625904][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.634771][ T31] task:syz.4.1661 state:D stack:26920 pid:11805 tgid:11805 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 413.647048][ T31] Call Trace: [ 413.650340][ T31] [ 413.653277][ T31] __schedule+0x1798/0x4cc0 [ 413.657858][ T31] ? validate_chain+0x897/0x2140 [ 413.663026][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.667940][ T31] ? __pfx___schedule+0x10/0x10 [ 413.672833][ T31] ? schedule+0x91/0x360 [ 413.677412][ T31] schedule+0x165/0x360 [ 413.681602][ T31] schedule_timeout+0x9a/0x270 [ 413.686462][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 413.692350][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.697734][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.703095][ T31] ? wait_for_completion+0x267/0x5d0 [ 413.708863][ T31] wait_for_completion+0x2bf/0x5d0 [ 413.714023][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 413.719814][ T31] ? __flush_work+0xd2/0xbc0 [ 413.724421][ T31] ? __flush_work+0xd2/0xbc0 [ 413.729102][ T31] __flush_work+0x9b9/0xbc0 [ 413.733625][ T31] ? __flush_work+0xd2/0xbc0 [ 413.738679][ T31] ? __pfx___flush_work+0x10/0x10 [ 413.743720][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 413.749107][ T31] ? __pfx___cancel_work+0x10/0x10 [ 413.754271][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 413.760009][ T31] __cancel_work_sync+0xbe/0x110 [ 413.764978][ T31] rfkill_unregister+0x92/0x220 [ 413.770313][ T31] nfc_unregister_device+0x96/0x2a0 [ 413.775535][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 413.781385][ T31] virtual_ncidev_close+0x56/0x90 [ 413.786470][ T31] __fput+0x44c/0xa70 [ 413.790561][ T31] task_work_run+0x1d1/0x260 [ 413.795256][ T31] ? __pfx_task_work_run+0x10/0x10 [ 413.800857][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 413.806344][ T31] exit_to_user_mode_loop+0xe9/0x110 [ 413.811875][ T31] do_syscall_64+0x2bd/0x3b0 [ 413.816473][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.821980][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.828354][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.833076][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.839023][ T31] RIP: 0033:0x7fc1f478eec9 [ 413.843443][ T31] RSP: 002b:00007ffde58a03c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 413.851927][ T31] RAX: 0000000000000000 RBX: 0000000000040b06 RCX: 00007fc1f478eec9 [ 413.860304][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 413.868508][ T31] RBP: 00007fc1f49e7da0 R08: 0000000000000001 R09: 00000003e58a06bf [ 413.876494][ T31] R10: 0000001b30820000 R11: 0000000000000246 R12: 00007fc1f49e5fac [ 413.884731][ T31] R13: 00007fc1f49e5fa0 R14: ffffffffffffffff R15: 00007ffde58a04e0 [ 413.893294][ T31] [ 413.896378][ T31] INFO: task syz.3.1670:11852 blocked for more than 144 seconds. [ 413.906709][ T31] Not tainted syzkaller #0 [ 413.911764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.922641][ T31] task:syz.3.1670 state:D stack:28712 pid:11852 tgid:11848 ppid:5833 task_flags:0x400040 flags:0x00080002 [ 413.935044][ T31] Call Trace: [ 413.938384][ T31] [ 413.941325][ T31] __schedule+0x1798/0x4cc0 [ 413.945853][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.951002][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.955880][ T31] ? __pfx___schedule+0x10/0x10 [ 413.961016][ T31] ? schedule+0x91/0x360 [ 413.965672][ T31] schedule+0x165/0x360 [ 413.969910][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.975397][ T31] __mutex_lock+0x7e6/0x1350 [ 413.980354][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.985141][ T31] ? genl_rcv_msg+0x10d/0x790 [ 413.990038][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.995408][ T31] ? stack_trace_save+0x9c/0xe0 [ 414.000378][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 414.006032][ T31] ? radix_tree_lookup+0x240/0x290 [ 414.011538][ T31] genl_rcv_msg+0x10d/0x790 [ 414.016073][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.021106][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.026224][ T31] netlink_rcv_skb+0x205/0x470 [ 414.031104][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.036020][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.041574][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.047045][ T31] ? down_read+0x1ad/0x2e0 [ 414.051729][ T31] genl_rcv+0x28/0x40 [ 414.055838][ T31] netlink_unicast+0x82c/0x9e0 [ 414.060707][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 414.066019][ T31] ? netlink_sendmsg+0x642/0xb30 [ 414.071256][ T31] ? skb_put+0x11b/0x210 [ 414.075518][ T31] netlink_sendmsg+0x805/0xb30 [ 414.080351][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.085676][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 414.090865][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.096196][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.101819][ T31] __sock_sendmsg+0x219/0x270 [ 414.106619][ T31] __sys_sendto+0x3bd/0x520 [ 414.111434][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 414.116495][ T31] ? count_memcg_event_mm+0x21/0x260 [ 414.121900][ T31] ? exc_page_fault+0x76/0xf0 [ 414.126996][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 414.132308][ T31] __x64_sys_sendto+0xde/0x100 [ 414.137261][ T31] do_syscall_64+0xfa/0x3b0 [ 414.141815][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.147297][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.153497][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.158970][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.165005][ T31] RIP: 0033:0x7fb64b190d5c [ 414.169673][ T31] RSP: 002b:00007fb64c014ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 414.178214][ T31] RAX: ffffffffffffffda RBX: 00007fb64c014fc0 RCX: 00007fb64b190d5c [ 414.186239][ T31] RDX: 0000000000000020 RSI: 00007fb64c015010 RDI: 0000000000000006 [ 414.195922][ T31] RBP: 0000000000000000 R08: 00007fb64c014f14 R09: 000000000000000c [ 414.204228][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 414.212719][ T31] R13: 00007fb64c014f68 R14: 00007fb64c015010 R15: 0000000000000000 [ 414.221206][ T31] [ 414.224258][ T31] INFO: task syz.0.1673:11861 blocked for more than 144 seconds. [ 414.232151][ T31] Not tainted syzkaller #0 [ 414.237314][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.246159][ T31] task:syz.0.1673 state:D stack:28360 pid:11861 tgid:11859 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 414.258547][ T31] Call Trace: [ 414.262020][ T31] [ 414.264959][ T31] __schedule+0x1798/0x4cc0 [ 414.269529][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.274480][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.279563][ T31] ? __pfx___schedule+0x10/0x10 [ 414.284671][ T31] ? schedule+0x91/0x360 [ 414.289468][ T31] schedule+0x165/0x360 [ 414.293675][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.299262][ T31] __mutex_lock+0x7e6/0x1350 [ 414.304088][ T31] ? __mutex_lock+0x5bb/0x1350 [ 414.309012][ T31] ? genl_rcv_msg+0x10d/0x790 [ 414.313702][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.319122][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 414.324261][ T31] ? radix_tree_lookup+0x240/0x290 [ 414.329777][ T31] genl_rcv_msg+0x10d/0x790 [ 414.334332][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.339561][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 414.344724][ T31] ? __asan_memcpy+0x40/0x70 [ 414.349625][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 414.355034][ T31] netlink_rcv_skb+0x205/0x470 [ 414.359991][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.364854][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.370108][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.375461][ T31] ? down_read+0x1ad/0x2e0 [ 414.380208][ T31] genl_rcv+0x28/0x40 [ 414.384208][ T31] netlink_unicast+0x82c/0x9e0 [ 414.389032][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 414.394357][ T31] ? netlink_sendmsg+0x642/0xb30 [ 414.399379][ T31] ? skb_put+0x11b/0x210 [ 414.403640][ T31] netlink_sendmsg+0x805/0xb30 [ 414.408923][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.414245][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 414.419302][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.424744][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.430262][ T31] __sock_sendmsg+0x219/0x270 [ 414.434984][ T31] __sys_sendto+0x3bd/0x520 [ 414.439789][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 414.444855][ T31] ? count_memcg_event_mm+0x21/0x260 [ 414.450261][ T31] ? exc_page_fault+0x76/0xf0 [ 414.454988][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 414.460350][ T31] __x64_sys_sendto+0xde/0x100 [ 414.465159][ T31] do_syscall_64+0xfa/0x3b0 [ 414.469949][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.475184][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.481529][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.486243][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.492198][ T31] RIP: 0033:0x7f22e1390d5c [ 414.497202][ T31] RSP: 002b:00007f22e226dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 414.505654][ T31] RAX: ffffffffffffffda RBX: 00007f22e226dfc0 RCX: 00007f22e1390d5c [ 414.513820][ T31] RDX: 0000000000000020 RSI: 00007f22e226e010 RDI: 0000000000000003 [ 414.521979][ T31] RBP: 0000000000000000 R08: 00007f22e226df14 R09: 000000000000000c [ 414.530262][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 414.538384][ T31] R13: 00007f22e226df68 R14: 00007f22e226e010 R15: 0000000000000000 [ 414.546393][ T31] [ 414.549540][ T31] INFO: task syz.0.1673:11863 blocked for more than 145 seconds. [ 414.557869][ T31] Not tainted syzkaller #0 [ 414.563030][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.571938][ T31] task:syz.0.1673 state:D stack:27400 pid:11863 tgid:11859 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 414.583984][ T31] Call Trace: [ 414.587727][ T31] [ 414.590679][ T31] __schedule+0x1798/0x4cc0 [ 414.595210][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.600188][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.605180][ T31] ? __pfx___schedule+0x10/0x10 [ 414.610105][ T31] ? schedule+0x91/0x360 [ 414.614373][ T31] schedule+0x165/0x360 [ 414.618844][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.624414][ T31] __mutex_lock+0x7e6/0x1350 [ 414.629079][ T31] ? __mutex_lock+0x5bb/0x1350 [ 414.633880][ T31] ? genl_rcv_msg+0x10d/0x790 [ 414.638663][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.643713][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 414.649154][ T31] ? radix_tree_lookup+0x240/0x290 [ 414.654298][ T31] genl_rcv_msg+0x10d/0x790 [ 414.658891][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.663958][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 414.669056][ T31] ? __asan_memcpy+0x40/0x70 [ 414.673659][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 414.679465][ T31] netlink_rcv_skb+0x205/0x470 [ 414.684278][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.690586][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.695647][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.701213][ T31] ? down_read+0x1ad/0x2e0 [ 414.705671][ T31] genl_rcv+0x28/0x40 [ 414.710088][ T31] netlink_unicast+0x82c/0x9e0 [ 414.714896][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 414.720328][ T31] ? netlink_sendmsg+0x642/0xb30 [ 414.725308][ T31] ? skb_put+0x11b/0x210 [ 414.730455][ T31] netlink_sendmsg+0x805/0xb30 [ 414.735286][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.740921][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 414.745909][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.751280][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.756661][ T31] __sock_sendmsg+0x219/0x270 [ 414.761395][ T31] __sys_sendto+0x3bd/0x520 [ 414.765925][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 414.771282][ T31] ? fd_install+0x97/0x540 [ 414.775719][ T31] ? fd_install+0x30d/0x540 [ 414.780406][ T31] __x64_sys_sendto+0xde/0x100 [ 414.785214][ T31] do_syscall_64+0xfa/0x3b0 [ 414.789773][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.795008][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.801441][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.806139][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.812287][ T31] RIP: 0033:0x7f22e1390d5c [ 414.816813][ T31] RSP: 002b:00007f22e224cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 414.825360][ T31] RAX: ffffffffffffffda RBX: 00007f22e224cfc0 RCX: 00007f22e1390d5c [ 414.833764][ T31] RDX: 0000000000000020 RSI: 00007f22e224d010 RDI: 0000000000000004 [ 414.841905][ T31] RBP: 0000000000000000 R08: 00007f22e224cf14 R09: 000000000000000c [ 414.849997][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 414.858456][ T31] R13: 00007f22e224cf68 R14: 00007f22e224d010 R15: 0000000000000000 [ 414.866817][ T31] [ 414.869880][ T31] INFO: task syz.0.1673:11864 blocked for more than 145 seconds. [ 414.877836][ T31] Not tainted syzkaller #0 [ 414.882786][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.891754][ T31] task:syz.0.1673 state:D stack:28360 pid:11864 tgid:11859 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 414.903845][ T31] Call Trace: [ 414.907331][ T31] [ 414.910284][ T31] __schedule+0x1798/0x4cc0 [ 414.914835][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.920348][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.925356][ T31] ? __pfx___schedule+0x10/0x10 [ 414.930377][ T31] ? schedule+0x91/0x360 [ 414.934678][ T31] schedule+0x165/0x360 [ 414.938927][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.944411][ T31] __mutex_lock+0x7e6/0x1350 [ 414.949303][ T31] ? __mutex_lock+0x5bb/0x1350 [ 414.954088][ T31] ? genl_rcv_msg+0x10d/0x790 [ 414.958861][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.964079][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 414.969368][ T31] ? radix_tree_lookup+0x240/0x290 [ 414.974533][ T31] genl_rcv_msg+0x10d/0x790 [ 414.979429][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.984476][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 414.989588][ T31] ? __asan_memcpy+0x40/0x70 [ 414.994186][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 414.999634][ T31] netlink_rcv_skb+0x205/0x470 [ 415.004410][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.009604][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.014681][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.020126][ T31] ? down_read+0x1ad/0x2e0 [ 415.024578][ T31] genl_rcv+0x28/0x40 [ 415.028834][ T31] netlink_unicast+0x82c/0x9e0 [ 415.033625][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 415.039219][ T31] ? netlink_sendmsg+0x642/0xb30 [ 415.044185][ T31] ? skb_put+0x11b/0x210 [ 415.048471][ T31] netlink_sendmsg+0x805/0xb30 [ 415.053253][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.058645][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 415.063626][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.069213][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.074520][ T31] __sock_sendmsg+0x219/0x270 [ 415.079262][ T31] __sys_sendto+0x3bd/0x520 [ 415.083861][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 415.089166][ T31] ? fd_install+0x97/0x540 [ 415.093699][ T31] ? fd_install+0x30d/0x540 [ 415.098561][ T31] __x64_sys_sendto+0xde/0x100 [ 415.103792][ T31] do_syscall_64+0xfa/0x3b0 [ 415.108358][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.113721][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.120250][ T31] ? clear_bhb_loop+0x60/0xb0 [ 415.124965][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.131334][ T31] RIP: 0033:0x7f22e1390d5c [ 415.135876][ T31] RSP: 002b:00007f22e222bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 415.144600][ T31] RAX: ffffffffffffffda RBX: 00007f22e222bfc0 RCX: 00007f22e1390d5c [ 415.153161][ T31] RDX: 0000000000000020 RSI: 00007f22e222c010 RDI: 0000000000000005 [ 415.161458][ T31] RBP: 0000000000000000 R08: 00007f22e222bf14 R09: 000000000000000c [ 415.169628][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 415.178031][ T31] R13: 00007f22e222bf68 R14: 00007f22e222c010 R15: 0000000000000000 [ 415.186142][ T31] [ 415.189677][ T31] INFO: task syz.0.1673:11867 blocked for more than 145 seconds. [ 415.197838][ T31] Not tainted syzkaller #0 [ 415.202788][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.212112][ T31] task:syz.0.1673 state:D stack:27800 pid:11867 tgid:11859 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 415.224759][ T31] Call Trace: [ 415.228268][ T31] [ 415.231238][ T31] __schedule+0x1798/0x4cc0 [ 415.235791][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.241060][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.245930][ T31] ? __pfx___schedule+0x10/0x10 [ 415.250943][ T31] ? schedule+0x91/0x360 [ 415.255268][ T31] schedule+0x165/0x360 [ 415.259544][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.265064][ T31] __mutex_lock+0x7e6/0x1350 [ 415.270068][ T31] ? __mutex_lock+0x5bb/0x1350 [ 415.274873][ T31] ? genl_rcv_msg+0x10d/0x790 [ 415.279624][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 415.284668][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 415.290851][ T31] ? radix_tree_lookup+0x240/0x290 [ 415.296010][ T31] genl_rcv_msg+0x10d/0x790 [ 415.300835][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.305883][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 415.310972][ T31] ? __asan_memcpy+0x40/0x70 [ 415.315579][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 415.321118][ T31] netlink_rcv_skb+0x205/0x470 [ 415.325910][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.331086][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.336147][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.341645][ T31] ? down_read+0x1ad/0x2e0 [ 415.346089][ T31] genl_rcv+0x28/0x40 [ 415.350120][ T31] netlink_unicast+0x82c/0x9e0 [ 415.354932][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 415.360745][ T31] ? netlink_sendmsg+0x642/0xb30 [ 415.365750][ T31] ? skb_put+0x11b/0x210 [ 415.370484][ T31] netlink_sendmsg+0x805/0xb30 [ 415.375398][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.380811][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 415.385795][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.391527][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.396936][ T31] __sock_sendmsg+0x219/0x270 [ 415.401676][ T31] __sys_sendto+0x3bd/0x520 [ 415.406208][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 415.411385][ T31] ? fd_install+0x97/0x540 [ 415.415860][ T31] ? fd_install+0x30d/0x540 [ 415.420698][ T31] __x64_sys_sendto+0xde/0x100 [ 415.425484][ T31] do_syscall_64+0xfa/0x3b0 [ 415.430042][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.435268][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.441397][ T31] ? clear_bhb_loop+0x60/0xb0 [ 415.446114][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.452325][ T31] RIP: 0033:0x7f22e1390d5c [ 415.456813][ T31] RSP: 002b:00007f22e220aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 415.465272][ T31] RAX: ffffffffffffffda RBX: 00007f22e220afc0 RCX: 00007f22e1390d5c [ 415.473420][ T31] RDX: 000000000000001c RSI: 00007f22e220b010 RDI: 0000000000000006 [ 415.481796][ T31] RBP: 0000000000000000 R08: 00007f22e220af14 R09: 000000000000000c [ 415.489820][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 415.497858][ T31] R13: 00007f22e220af68 R14: 00007f22e220b010 R15: 0000000000000000 [ 415.505884][ T31] [ 415.509245][ T31] INFO: task syz.0.1673:11870 blocked for more than 146 seconds. [ 415.517208][ T31] Not tainted syzkaller #0 [ 415.522166][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.531006][ T31] task:syz.0.1673 state:D stack:28360 pid:11870 tgid:11859 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 415.543313][ T31] Call Trace: [ 415.546651][ T31] [ 415.549618][ T31] __schedule+0x1798/0x4cc0 [ 415.554187][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.559102][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.563991][ T31] ? __pfx___schedule+0x10/0x10 [ 415.569398][ T31] ? schedule+0x91/0x360 [ 415.573689][ T31] schedule+0x165/0x360 [ 415.577927][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.583518][ T31] __mutex_lock+0x7e6/0x1350 [ 415.588161][ T31] ? __mutex_lock+0x5bb/0x1350 [ 415.592939][ T31] ? genl_rcv_msg+0x10d/0x790 [ 415.597896][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 415.602946][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 415.608239][ T31] ? radix_tree_lookup+0x240/0x290 [ 415.613477][ T31] genl_rcv_msg+0x10d/0x790 [ 415.618040][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.623176][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 415.628516][ T31] ? __asan_memcpy+0x40/0x70 [ 415.633215][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 415.638849][ T31] netlink_rcv_skb+0x205/0x470 [ 415.643629][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.648723][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.653868][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.659576][ T31] ? down_read+0x1ad/0x2e0 [ 415.664049][ T31] genl_rcv+0x28/0x40 [ 415.668100][ T31] netlink_unicast+0x82c/0x9e0 [ 415.672935][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 415.678378][ T31] ? netlink_sendmsg+0x642/0xb30 [ 415.683372][ T31] ? skb_put+0x11b/0x210 [ 415.688238][ T31] netlink_sendmsg+0x805/0xb30 [ 415.693083][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.698444][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 415.703403][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.708753][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.714088][ T31] __sock_sendmsg+0x219/0x270 [ 415.719117][ T31] __sys_sendto+0x3bd/0x520 [ 415.723672][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 415.728819][ T31] ? fd_install+0x97/0x540 [ 415.733306][ T31] ? fd_install+0x30d/0x540 [ 415.737871][ T31] __x64_sys_sendto+0xde/0x100 [ 415.742653][ T31] do_syscall_64+0xfa/0x3b0 [ 415.747595][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.752839][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.758996][ T31] ? clear_bhb_loop+0x60/0xb0 [ 415.763726][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.769856][ T31] RIP: 0033:0x7f22e1390d5c [ 415.774313][ T31] RSP: 002b:00007f22e21e9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 415.783158][ T31] RAX: ffffffffffffffda RBX: 00007f22e21e9fc0 RCX: 00007f22e1390d5c [ 415.791181][ T31] RDX: 0000000000000020 RSI: 00007f22e21ea010 RDI: 0000000000000008 [ 415.799228][ T31] RBP: 0000000000000000 R08: 00007f22e21e9f14 R09: 000000000000000c [ 415.807639][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 415.815661][ T31] R13: 00007f22e21e9f68 R14: 00007f22e21ea010 R15: 0000000000000000 [ 415.823753][ T31] [ 415.826845][ T31] INFO: task syz.0.1673:11872 blocked for more than 146 seconds. [ 415.834595][ T31] Not tainted syzkaller #0 [ 415.839945][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.850432][ T31] task:syz.0.1673 state:D stack:27688 pid:11872 tgid:11859 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 415.862546][ T31] Call Trace: [ 415.865853][ T31] [ 415.869040][ T31] __schedule+0x1798/0x4cc0 [ 415.873606][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.878839][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.883741][ T31] ? __pfx___schedule+0x10/0x10 [ 415.888708][ T31] ? schedule+0x91/0x360 [ 415.893009][ T31] schedule+0x165/0x360 [ 415.897247][ T31] schedule_preempt_disabled+0x13/0x30 [ 415.902729][ T31] __mutex_lock+0x7e6/0x1350 [ 415.907788][ T31] ? __mutex_lock+0x5bb/0x1350 [ 415.912570][ T31] ? genl_rcv_msg+0x10d/0x790 [ 415.917493][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 415.922549][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 415.927957][ T31] ? radix_tree_lookup+0x240/0x290 [ 415.933109][ T31] genl_rcv_msg+0x10d/0x790 [ 415.938202][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.943314][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 415.948560][ T31] ? __asan_memcpy+0x40/0x70 [ 415.953216][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 415.958653][ T31] netlink_rcv_skb+0x205/0x470 [ 415.963427][ T31] ? __lock_acquire+0xab9/0xd20 [ 415.968624][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.973964][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.979367][ T31] ? down_read+0x1ad/0x2e0 [ 415.983810][ T31] genl_rcv+0x28/0x40 [ 415.987907][ T31] netlink_unicast+0x82c/0x9e0 [ 415.992720][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 415.998380][ T31] ? netlink_sendmsg+0x642/0xb30 [ 416.003330][ T31] ? skb_put+0x11b/0x210 [ 416.007744][ T31] netlink_sendmsg+0x805/0xb30 [ 416.012530][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.018050][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.023003][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.028680][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.034022][ T31] __sock_sendmsg+0x219/0x270 [ 416.038877][ T31] __sys_sendto+0x3bd/0x520 [ 416.043552][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 416.048683][ T31] ? fd_install+0x97/0x540 [ 416.053243][ T31] ? fd_install+0x30d/0x540 [ 416.058093][ T31] __x64_sys_sendto+0xde/0x100 [ 416.062885][ T31] do_syscall_64+0xfa/0x3b0 [ 416.067453][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.072673][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.078784][ T31] ? clear_bhb_loop+0x60/0xb0 [ 416.083504][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.089913][ T31] RIP: 0033:0x7f22e1390d5c [ 416.094370][ T31] RSP: 002b:00007f22e21c8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 416.102827][ T31] RAX: ffffffffffffffda RBX: 00007f22e21c8fc0 RCX: 00007f22e1390d5c [ 416.110982][ T31] RDX: 0000000000000020 RSI: 00007f22e21c9010 RDI: 0000000000000009 [ 416.119252][ T31] RBP: 0000000000000000 R08: 00007f22e21c8f14 R09: 000000000000000c [ 416.127296][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 416.135370][ T31] R13: 00007f22e21c8f68 R14: 00007f22e21c9010 R15: 0000000000000000 [ 416.143449][ T31] [ 416.146482][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 416.155815][ T31] INFO: task syz.2.1681:11888 blocked for more than 146 seconds. [ 416.163611][ T31] Not tainted syzkaller #0 [ 416.168911][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.178248][ T31] task:syz.2.1681 state:D stack:27240 pid:11888 tgid:11887 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 416.190302][ T31] Call Trace: [ 416.193614][ T31] [ 416.196712][ T31] __schedule+0x1798/0x4cc0 [ 416.201317][ T31] ? __lock_acquire+0xab9/0xd20 [ 416.206217][ T31] ? __lock_acquire+0xab9/0xd20 [ 416.211384][ T31] ? __pfx___schedule+0x10/0x10 [ 416.216657][ T31] ? schedule+0x91/0x360 [ 416.220970][ T31] schedule+0x165/0x360 [ 416.225169][ T31] schedule_preempt_disabled+0x13/0x30 [ 416.230726][ T31] __mutex_lock+0x7e6/0x1350 [ 416.235357][ T31] ? __mutex_lock+0x5bb/0x1350 [ 416.240433][ T31] ? genl_rcv_msg+0x10d/0x790 [ 416.245152][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.250460][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 416.255611][ T31] ? radix_tree_lookup+0x240/0x290 [ 416.260784][ T31] genl_rcv_msg+0x10d/0x790 [ 416.265482][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.270802][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 416.275845][ T31] ? __asan_memcpy+0x40/0x70 [ 416.280465][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 416.285855][ T31] netlink_rcv_skb+0x205/0x470 [ 416.290677][ T31] ? __lock_acquire+0xab9/0xd20 [ 416.295540][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.300842][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.306183][ T31] ? down_read+0x1ad/0x2e0 [ 416.310742][ T31] genl_rcv+0x28/0x40 [ 416.314761][ T31] netlink_unicast+0x82c/0x9e0 [ 416.319625][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 416.324952][ T31] ? netlink_sendmsg+0x642/0xb30 [ 416.330406][ T31] ? skb_put+0x11b/0x210 [ 416.334666][ T31] netlink_sendmsg+0x805/0xb30 [ 416.339507][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.344908][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.350039][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.355433][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.361031][ T31] __sock_sendmsg+0x219/0x270 [ 416.365759][ T31] __sys_sendto+0x3bd/0x520 [ 416.370414][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 416.375465][ T31] ? count_memcg_event_mm+0x21/0x260 [ 416.380893][ T31] ? exc_page_fault+0x76/0xf0 [ 416.385635][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 416.391229][ T31] __x64_sys_sendto+0xde/0x100 [ 416.396028][ T31] do_syscall_64+0xfa/0x3b0 [ 416.400674][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.405895][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.412359][ T31] ? clear_bhb_loop+0x60/0xb0 [ 416.417390][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.423296][ T31] RIP: 0033:0x7f2ef9f90d5c [ 416.427780][ T31] RSP: 002b:00007f2efad9dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 416.436267][ T31] RAX: ffffffffffffffda RBX: 00007f2efad9dfc0 RCX: 00007f2ef9f90d5c [ 416.444330][ T31] RDX: 000000000000001c RSI: 00007f2efad9e010 RDI: 0000000000000006 [ 416.452587][ T31] RBP: 0000000000000000 R08: 00007f2efad9df14 R09: 000000000000000c [ 416.460607][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 416.468639][ T31] R13: 00007f2efad9df68 R14: 00007f2efad9e010 R15: 0000000000000000 [ 416.477008][ T31] [ 416.480134][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 416.489223][ T31] INFO: task syz.2.1681:11890 blocked for more than 147 seconds. [ 416.497074][ T31] Not tainted syzkaller #0 [ 416.502263][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.511218][ T31] task:syz.2.1681 state:D stack:27800 pid:11890 tgid:11887 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 416.523187][ T31] Call Trace: [ 416.526476][ T31] [ 416.529464][ T31] __schedule+0x1798/0x4cc0 [ 416.533995][ T31] ? __lock_acquire+0xab9/0xd20 [ 416.539120][ T31] ? __lock_acquire+0xab9/0xd20 [ 416.544253][ T31] ? __pfx___schedule+0x10/0x10 [ 416.549379][ T31] ? schedule+0x91/0x360 [ 416.553684][ T31] schedule+0x165/0x360 [ 416.557915][ T31] schedule_preempt_disabled+0x13/0x30 [ 416.563488][ T31] __mutex_lock+0x7e6/0x1350 [ 416.568512][ T31] ? __mutex_lock+0x5bb/0x1350 [ 416.573322][ T31] ? genl_rcv_msg+0x10d/0x790 [ 416.578060][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.583138][ T31] ? stack_trace_save+0x9c/0xe0 [ 416.588044][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 416.593514][ T31] ? radix_tree_lookup+0x240/0x290 [ 416.598916][ T31] genl_rcv_msg+0x10d/0x790 [ 416.603439][ T31] ? __lock_acquire+0xab9/0xd20 [ 416.608360][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.613498][ T31] netlink_rcv_skb+0x205/0x470 [ 416.618311][ T31] ? __lock_acquire+0xab9/0xd20 [ 416.623170][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.628481][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.633906][ T31] ? down_read+0x1ad/0x2e0 [ 416.638373][ T31] genl_rcv+0x28/0x40 [ 416.642384][ T31] netlink_unicast+0x82c/0x9e0 [ 416.647384][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 416.652723][ T31] ? netlink_sendmsg+0x642/0xb30 [ 416.657947][ T31] ? skb_put+0x11b/0x210 [ 416.662215][ T31] netlink_sendmsg+0x805/0xb30 [ 416.667057][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.672370][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.677386][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.682688][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.688358][ T31] __sock_sendmsg+0x219/0x270 [ 416.693095][ T31] __sys_sendto+0x3bd/0x520 [ 416.697678][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 416.702737][ T31] ? count_memcg_event_mm+0x21/0x260 [ 416.708135][ T31] ? exc_page_fault+0x76/0xf0 [ 416.712923][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 416.718594][ T31] __x64_sys_sendto+0xde/0x100 [ 416.723381][ T31] do_syscall_64+0xfa/0x3b0 [ 416.728035][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.733268][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.739397][ T31] ? clear_bhb_loop+0x60/0xb0 [ 416.744103][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.750292][ T31] RIP: 0033:0x7f2ef9f90d5c [ 416.754723][ T31] RSP: 002b:00007f2efad7cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 416.763231][ T31] RAX: ffffffffffffffda RBX: 00007f2efad7cfc0 RCX: 00007f2ef9f90d5c [ 416.771281][ T31] RDX: 0000000000000028 RSI: 00007f2efad7d010 RDI: 0000000000000004 [ 416.779570][ T31] RBP: 0000000000000000 R08: 00007f2efad7cf14 R09: 000000000000000c [ 416.787697][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 416.795710][ T31] R13: 00007f2efad7cf68 R14: 00007f2efad7d010 R15: 0000000000000000 [ 416.803749][ T31] [ 416.807221][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 416.816295][ T31] [ 416.816295][ T31] Showing all locks held in the system: [ 416.824096][ T31] 1 lock held by khungtaskd/31: [ 416.829050][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 416.839802][ T31] 2 locks held by getty/5594: [ 416.844571][ T31] #0: ffff88814e2050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 416.854522][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 416.865406][ T31] 4 locks held by kworker/1:12/9365: [ 416.870995][ T31] #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.882132][ T31] #1: ffffc90004637bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.897259][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 416.907695][ T31] #3: ffff888050297100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 416.917500][ T31] 3 locks held by syz.1.1659/11804: [ 416.922985][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.931830][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 416.940975][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 416.951027][ T31] 1 lock held by syz.4.1661/11805: [ 416.956298][ T31] #0: ffff888050297100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 416.967280][ T31] 2 locks held by syz.3.1670/11852: [ 416.972616][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.980907][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 416.990142][ T31] 2 locks held by syz.0.1673/11861: [ 416.995359][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.003885][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 417.012960][ T31] 2 locks held by syz.0.1673/11863: [ 417.018298][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.027135][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 417.036278][ T31] 2 locks held by syz.0.1673/11864: [ 417.041664][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.050102][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 417.059498][ T31] 2 locks held by syz.0.1673/11867: [ 417.064768][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.073117][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 417.082299][ T31] 2 locks held by syz.0.1673/11870: [ 417.087831][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.096040][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 417.105170][ T31] 2 locks held by syz.0.1673/11872: [ 417.110441][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.118915][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 417.127945][ T31] 2 locks held by syz.2.1681/11888: [ 417.133145][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.141434][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 417.150804][ T31] 2 locks held by syz.2.1681/11890: [ 417.156004][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 417.164250][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 417.173284][ T31] 2 locks held by syz-executor/11894: [ 417.178925][ T31] #0: ffff888028987918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.189095][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.199123][ T31] 2 locks held by syz-executor/11895: [ 417.204515][ T31] #0: ffff888011102118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.215309][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.226224][ T31] 2 locks held by syz-executor/11899: [ 417.231914][ T31] #0: ffff88807c7d7918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.242120][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.252553][ T31] 2 locks held by syz-executor/11900: [ 417.258200][ T31] #0: ffff88807c7d3118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.268432][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.278669][ T31] 2 locks held by syz-executor/11901: [ 417.284053][ T31] #0: ffff888059394118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.294147][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.304185][ T31] 2 locks held by syz-executor/11907: [ 417.309910][ T31] #0: ffff888043047918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.320041][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.330031][ T31] 2 locks held by syz-executor/11908: [ 417.335411][ T31] #0: ffff88802e96c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.346035][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.356075][ T31] 2 locks held by syz-executor/11912: [ 417.361537][ T31] #0: ffff88802f9a2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.372026][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.382163][ T31] 2 locks held by syz-executor/11913: [ 417.387911][ T31] #0: ffff8880595de118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.398345][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.408417][ T31] 2 locks held by syz-executor/11914: [ 417.413790][ T31] #0: ffff88805952f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.423904][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.434144][ T31] 2 locks held by syz-executor/11920: [ 417.439579][ T31] #0: ffff888022717118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.450493][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.460828][ T31] 2 locks held by syz-executor/11921: [ 417.466215][ T31] #0: ffff88803e7c4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.476402][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.486483][ T31] 2 locks held by syz-executor/11925: [ 417.492357][ T31] #0: ffff88802f0d3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.502506][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.512507][ T31] 2 locks held by syz-executor/11926: [ 417.518175][ T31] #0: ffff88803191a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.528615][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.538699][ T31] 2 locks held by syz-executor/11927: [ 417.544076][ T31] #0: ffff8880502e4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 417.554841][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 417.565195][ T31] [ 417.567576][ T31] ============================================= [ 417.567576][ T31] [ 417.576009][ T31] NMI backtrace for cpu 1 [ 417.576026][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 417.576043][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.576053][ T31] Call Trace: [ 417.576059][ T31] [ 417.576067][ T31] dump_stack_lvl+0x189/0x250 [ 417.576093][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.576158][ T31] ? __pfx__printk+0x10/0x10 [ 417.576191][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 417.576215][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 417.576239][ T31] ? __pfx__printk+0x10/0x10 [ 417.576265][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 417.576283][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 417.576307][ T31] watchdog+0xf93/0xfe0 [ 417.576325][ T31] ? watchdog+0x1de/0xfe0 [ 417.576344][ T31] kthread+0x711/0x8a0 [ 417.576367][ T31] ? __pfx_watchdog+0x10/0x10 [ 417.576381][ T31] ? __pfx_kthread+0x10/0x10 [ 417.576403][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.576426][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.576449][ T31] ? __pfx_kthread+0x10/0x10 [ 417.576470][ T31] ret_from_fork+0x436/0x7d0 [ 417.576488][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 417.576509][ T31] ? __switch_to_asm+0x39/0x70 [ 417.576539][ T31] ? __switch_to_asm+0x33/0x70 [ 417.576565][ T31] ? __pfx_kthread+0x10/0x10 [ 417.576594][ T31] ret_from_fork_asm+0x1a/0x30 [ 417.576636][ T31] [ 417.718878][ T31] Sending NMI from CPU 1 to CPUs 0: [ 417.724147][ C0] NMI backtrace for cpu 0 [ 417.724166][ C0] CPU: 0 UID: 0 PID: 76 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 417.724188][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.724201][ C0] Workqueue: events_unbound toggle_allocation_gate [ 417.724230][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 417.724263][ C0] Code: 20 e9 fc c8 76 09 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 14 25 08 50 48 92 65 8b 0d 98 d6 89 10 81 e1 00 01 ff 00 [ 417.724280][ C0] RSP: 0018:ffffc9000218f818 EFLAGS: 00000246 [ 417.724295][ C0] RAX: ffffffff8166c937 RBX: ffffffff924d4dc0 RCX: ffff88801c3b8000 [ 417.724310][ C0] RDX: dffffc0000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 417.724322][ C0] RBP: ffffc9000218f950 R08: ffff88801a07b063 R09: 1ffff1100340f60c [ 417.724336][ C0] R10: dffffc0000000000 R11: ffffed100340f60d R12: ffffffff924d4dc0 [ 417.724350][ C0] R13: 0000000000000005 R14: ffffffff924d4dca R15: 0000000000000006 [ 417.724362][ C0] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 417.724377][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.724391][ C0] CR2: 00005609cd76c000 CR3: 000000000db36000 CR4: 00000000003526f0 [ 417.724408][ C0] Call Trace: [ 417.724414][ C0] [ 417.724421][ C0] smp_text_poke_batch_finish+0xc17/0x1130 [ 417.724459][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 417.724489][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 417.724525][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 417.724556][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 417.724582][ C0] static_key_enable+0x1a/0x20 [ 417.724605][ C0] toggle_allocation_gate+0xad/0x240 [ 417.724628][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 417.724652][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 417.724675][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 417.724694][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 417.724713][ C0] process_scheduled_works+0xade/0x17b0 [ 417.724749][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.724778][ C0] worker_thread+0x8a0/0xda0 [ 417.724799][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.724833][ C0] ? __kthread_parkme+0x7b/0x200 [ 417.724860][ C0] kthread+0x711/0x8a0 [ 417.724885][ C0] ? __pfx_worker_thread+0x10/0x10 [ 417.724904][ C0] ? __pfx_kthread+0x10/0x10 [ 417.724929][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.724955][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.724983][ C0] ? __pfx_kthread+0x10/0x10 [ 417.725007][ C0] ret_from_fork+0x436/0x7d0 [ 417.725027][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 417.725049][ C0] ? __switch_to_asm+0x39/0x70 [ 417.725074][ C0] ? __switch_to_asm+0x33/0x70 [ 417.725098][ C0] ? __pfx_kthread+0x10/0x10 [ 417.725122][ C0] ret_from_fork_asm+0x1a/0x30 [ 417.725163][ C0] [ 417.726310][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 418.017172][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 418.026291][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 418.036462][ T31] Call Trace: [ 418.039755][ T31] [ 418.042697][ T31] dump_stack_lvl+0x99/0x250 [ 418.047314][ T31] ? __asan_memcpy+0x40/0x70 [ 418.052010][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.057228][ T31] ? __pfx__printk+0x10/0x10 [ 418.061849][ T31] vpanic+0x281/0x750 [ 418.065850][ T31] ? __pfx_vpanic+0x10/0x10 [ 418.070367][ T31] ? preempt_schedule+0xae/0xc0 [ 418.075237][ T31] ? preempt_schedule_common+0x83/0xd0 [ 418.080723][ T31] panic+0xb9/0xc0 [ 418.084487][ T31] ? __pfx_panic+0x10/0x10 [ 418.088931][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 418.094323][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 418.100521][ T31] watchdog+0xfd2/0xfe0 [ 418.104689][ T31] ? watchdog+0x1de/0xfe0 [ 418.109119][ T31] kthread+0x711/0x8a0 [ 418.113204][ T31] ? __pfx_watchdog+0x10/0x10 [ 418.117896][ T31] ? __pfx_kthread+0x10/0x10 [ 418.122507][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.127814][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.133032][ T31] ? __pfx_kthread+0x10/0x10 [ 418.137650][ T31] ret_from_fork+0x436/0x7d0 [ 418.142256][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 418.147392][ T31] ? __switch_to_asm+0x39/0x70 [ 418.152170][ T31] ? __switch_to_asm+0x33/0x70 [ 418.156947][ T31] ? __pfx_kthread+0x10/0x10 [ 418.161555][ T31] ret_from_fork_asm+0x1a/0x30 [ 418.166347][ T31] [ 418.169655][ T31] Kernel Offset: disabled [ 418.173989][ T31] Rebooting in 86400 seconds..