last executing test programs: 18.478972162s ago: executing program 1 (id=671): socketpair(0x1d, 0xa, 0x4, &(0x7f00000000c0)={0xffffffffffffffff}) write(r0, &(0x7f0000000100)="cb30bd3a66f22d18f4a302e48135c595198bb218f294546d3a12c8a5455eaebc2ee98d4fa03808cf4d40ffc09a4dc62e3359844117dbec143a3dcbde70db03b82bf3de235f0e7703f8b5639b4e556375c1b95e0419e4b87e246b551ec437145547aba21287f4d9a8ca9179423212e9b626ea59935181783f61fbbc00ef26d657951424f5c0c770d57cfae29822118bf4231bab8bb06cd4318fcabd804728de10c8a0f0f2dcdd03505e421403d380bc8e13582b9ab011c8f34002dcc53f32b90b8c523561cbf92b2a2a2b513d95aec21299ed259fa869103b3edaa89f93d4c21cc79b34438d130efab99e19fa6122c8293b21cdb3f13cc3", 0xf7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x26, 0x5, 0xffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0004804e0a00"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 18.349138055s ago: executing program 4 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xf0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e1479e4c7", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 18.293047213s ago: executing program 1 (id=675): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) 18.184527292s ago: executing program 4 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1d0626bd7000fcdbdf252c00000008000300", @ANYRES32=r6, @ANYBLOB="4b2328a309000056689d91ee2b15cf856e01b0ff154a49561d80eae80e034dbf4c987e4f2cf1ebcb7c085740218610e1cdb35fbda2d04bba7951331af9b5d9d824e2ade75ee6f61f10ad0164a1750ce4ee1b136153b25358b13b8f6b77a5b737628ad50b8b4267ba42a0cfea3694f6afeb493c"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44082}, 0x4000000) 18.181149624s ago: executing program 1 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x84c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}]}, 0x1c}}, 0x4010) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x14, 0x2b, 0x1, 0x70bd2c, 0x5ffc, "", [@typed={0x4, 0xb9}]}, 0x14}], 0x1, 0x0, 0x0, 0x2040}, 0x0) read$rfkill(r7, &(0x7f0000000140), 0x8) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x200000}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018006000100", @ANYRES32=r9, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0x7d, 0x0, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r12, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r11, 0xf503, 0x0) 17.997274967s ago: executing program 4 (id=681): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r1}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) 17.872639959s ago: executing program 4 (id=685): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x8}], 0x3, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000040)=@ipmr_delroute={0x40, 0x19, 0x400, 0x70bd25, 0x25dfdbff, {0x80, 0x80, 0x20, 0x4, 0xfd, 0x1, 0xfe, 0x2, 0x400}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x40}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x9}}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x8}], 0x3, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000040)=@ipmr_delroute={0x40, 0x19, 0x400, 0x70bd25, 0x25dfdbff, {0x80, 0x80, 0x20, 0x4, 0xfd, 0x1, 0xfe, 0x2, 0x400}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x40}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x9}}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) 17.847583775s ago: executing program 1 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) syz_emit_ethernet(0x8d, &(0x7f0000000040)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60ea0c0000578800fe880000000000000000000000000001fe8000000000000000000000000000aa00000000005790780200000100000000d2fad28f4e8783b636022538c67884f4fdc88e31c0e310e0fb2c39766ac58392a0f9653fdf9ec7e6972c9ece3042198cb0b6fbb15f66994f09d27a24f3ec2185138fe030170dda008bd7d42867c177d4e3"], 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) (async) syz_emit_ethernet(0x8d, &(0x7f0000000040)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60ea0c0000578800fe880000000000000000000000000001fe8000000000000000000000000000aa00000000005790780200000100000000d2fad28f4e8783b636022538c67884f4fdc88e31c0e310e0fb2c39766ac58392a0f9653fdf9ec7e6972c9ece3042198cb0b6fbb15f66994f09d27a24f3ec2185138fe030170dda008bd7d42867c177d4e3"], 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) 17.680547354s ago: executing program 1 (id=687): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt(r0, 0x0, 0x80000001, &(0x7f0000000000)=""/157, &(0x7f00000000c0)=0x9d) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'virt_wifi0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000004c0)={r0, 0x7, 0x7, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18}, 0x18) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x22, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@alu={0x36588c3d5ff69576, 0x1, 0x6, 0x9, 0x0, 0x80, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x7c}, @printk={@d}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0xf, 0x9, 0x0, 0x6, 0xfffffffffffffff0}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xbba, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', r4, @fallback=0x32, r5, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x10, 0x3, 0x10}, 0x10, r6, r7, 0x5, &(0x7f0000000980)=[r8], &(0x7f00000009c0)=[{0x0, 0x5, 0x3}, {0x4, 0x2, 0xd, 0xc}, {0x2, 0x1, 0xb, 0x4}, {0x7, 0x4, 0x1, 0x9}, {0x5, 0x5, 0xa, 0x7}], 0x10, 0x1636b350}, 0x94) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000000b80)={&(0x7f0000000b00)=""/90, 0x5a, 0x9}) splice(r7, &(0x7f0000000bc0)=0x4, r7, &(0x7f0000000c00)=0x8001, 0x10, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r9, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000c80)=[0x0], &(0x7f0000000cc0), 0x0, 0xcc, &(0x7f0000000d00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) close(r9) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000000f40)={{r2}, "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"}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f80), r5) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000002180)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f0000001fc0)={0x150, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x534, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x15}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x77e}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r11, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0x88, r10, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8909}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4880}, 0x400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002340)={'netdevsim0\x00'}) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000026c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002680)={&(0x7f00000023c0)={0x2b8, r10, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc712}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "d7f969c210fcd09118ece1f6b6fa6fc56d4ecd4290d2af928a304f072506b0a5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "e17cb260f6913952f5a46c458be65f6b2b108caa0ef4cd69298db33eabbbdee26e182110f051f878dace11dd4d908c212888419369117d416c2b5347d0926f7044763f40c3e9b092f24d2670699e0209f250058dbfccb3aba84ae3dfcdb5c9e7672aa9a268aa8aa6ecc626bf42d5112755e4558548687686b2e45a197d7078297da686773126093fe16159e5ba6ae451c7410af2e0afbfdd24b6ce18541c58712d46a492dfc1beb0e3aaa5c8e1"}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bca2d409716ceaeecb3a445f73f234e876151d37654336a704cf4ea9"}}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "ec527f14b23832f84371ecab665b35d41fcaa198060d0461bb403e9f88bf0bfb7f2cf2832f49c8e7d0173beba71160005b1dcc03b2526af68de8d8c289e6f42343cd327b0a74077f423febddeb783e5e8ffa93f22328c9e7f85aadfc728c243d834cb5b85a41152d5d420727404376400f7a1037d8a5b120de529e55e60090ac6b0add02ffa01591605421c139cc5db3ce120b236d23204e5c00011aab12dc315aa941d0a437091824dae94382de5c2bbaec6fd68bac623f2931ddae891cd6fb941638f9da02d5af11c0e1fc5cb7ed971ec984"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x10}, 0x45800) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000002700)=""/97, &(0x7f0000002780)=0x61) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x34, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x20b3}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40010) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r12, 0x800442d2, &(0x7f0000002940)={0x3, &(0x7f00000028c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a00)={{r8}, &(0x7f0000002980), &(0x7f00000029c0)='%pB \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002a80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 17.626736511s ago: executing program 4 (id=688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) 17.545491575s ago: executing program 1 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0xfffc}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r8) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="6103028181012d5a0d0dbd"], 0xb) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010002000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b3200000000300004802c00018008000100636d70002000f37f08000240000000000c00038005000100ef00000008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002800001028000000040000000f000000000000090000000000000000000000010500000015000000020000000000000c0000000000003000"], 0x0, 0x44}, 0x28) 17.430859761s ago: executing program 4 (id=691): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100), 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 16.996149582s ago: executing program 0 (id=695): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) getuid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r1, 0x95443adfd1525e25, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4048000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r5, 0x2}, 0x8) 16.862461302s ago: executing program 2 (id=697): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 16.744964578s ago: executing program 2 (id=698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x4, 0x10000000) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@deltclass={0x50, 0x29, 0x30, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff3, 0x1}, {0x0, 0x2}, {0x0, 0x4}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0xe, 0x3}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x100, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0xfff1, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbe37f768a554d5a2600010200010008000600000000001400110062726964676530000000f1000000001737"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x165, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaa030800490a0157006500007f069078ffffffffac1414bb071f98ac141433ffffffffac1414aaac1e0101000000000a010100e00000014418c6900000000300001000000000060000000b0000046e830bd2ac1e01010a010101830b6eac1e0101e00000010000004e214e23000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c37fff90780101000000004565e09b27dc0bf2ecb6d9a69b2ba098d68b8c3451b0de8a732799dc784af8c7317538753eb94bd7a1922a9e642990bd93c95a695dc1a228b4473fc69832d38a5238652955a9c1118f15551acbe822cc81e1a644fe6c3e3838c5d664a76b880a91f00d01ee9024d88090bcf72d93c11546ec91394af77da60ccf8c31d299dbd994521d201d23e4d2a25d400779a8fec0d7516952f654114a6ec35cc3353a6d4c1d0326c2aad874309050cfcd5510b948b7831e097e1178b8fd974b30718833fcfc6763fde57a54ed05a592456ba091ecc2f9bd807641cfcafa0703"], 0x0) readv(r7, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000514210600000000000000000800612d3b5da72fb983030000000000a6957398764c9b39824783b39eb01c47da37c1e0b250db239c191f060bdc0e7e629c5446b2a6d5df8297970d7154ab0eb86899e98bb270b8d7b7d52cc68a26b48b1596ca0a715faeb5a7eeeb41abfd1b1bac3554000041a17664155335a2e200f1e3"], 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="e5e8e807b20870", @ANYRES16=r10, @ANYBLOB="010000000000008bf34f10cfcb21b657f4b8ab74e400000037000000080003008d2d30c5aff24aaa59ba2638bedae0ac3a2750f819dfc9ec0c63ae9556edca31b1e19c3367114a4a04d45d0cbc128555bae8e6fda944682a2586a007daae113010e4cd4b9c87e1f526608ca2f56fda1393e5fc6e9e29c22c3aaa4825042849e47160a9dcc2d8b8abed52d4a98bcf78433787cc9704c7e66998fb0c3cb7297d6563834f56ca79cf106009cc974e3abd84555c3d23308b513f38f53cebec1c2bdaa8986f7d4d32b26bdd6fda00"/214, @ANYRES8=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c008600", @ANYRES16=r12, @ANYRESDEC=r1, @ANYRES32=r13, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3baae126650}, 0x20004040) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x140c8000) 16.626250283s ago: executing program 3 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000400)=0x1, 0x4) unshare(0x20000400) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)={@val={0x70}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x3, 0xf2}]}}, {0x5e22, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x3, 0xffffdd86}}}}}}}, 0x42) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0xa}, {}, {0xfff3}}}, 0x24}}, 0x0) 16.60534091s ago: executing program 0 (id=700): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="146217075921f417d2e9cf1753000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0x15, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x80, 0xba08, 0xfffffc00, 0x1000}}) (async) r4 = socket(0x22, 0x2, 0x3) ioctl$IMGETDEVINFO(r4, 0x80044944, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r3, 0x2f, 0x80, 0x91, 0xc0000, 0x18, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x80, 0x10000, 0xb}}) 16.424981354s ago: executing program 0 (id=701): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2a8, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x294, 0x1, [@m_xt={0x154, 0xa, 0x0, 0x0, {{0x7}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4d, 0x6, {0xb, 'security\x00', 0xfb, 0xf, "db32b67415a858318ca81432b4dc5d5526738147f0b08da046db93b204b3955fb990fa"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x4b, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000, "32191f502c659f78524cedcb63159b9970fd761bd5a7356aa2eb78ed001acbeda2"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TARG={0x2a, 0x6, {0x22, 'mangle\x00', 0x8, 0x9}}]}, {0x39, 0x6, "60d8256d6e17304151fd4e116cd17e9a9916f46a1108fe35c2253eb9e0a39371696c312986c3e3f087692e934a942246981749736d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xc8, 0x34, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}]}, {0x7d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x74, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "1f10cb857564b5de5e15fd763f721d3cb07c7f501ff96d4baf222454b982d3dab282917f5b7e1d1c31e301b39e5de046b00c43be855ae539f0d332c8a977b12992"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/389], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg}, 0x70) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e23, 0x7, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x6c, r4}, {0x6, 0x75, 0x6, 0x80, 0x0, 0x7, 0x2, 0x52}, {0x9, 0x2, 0xa, 0x6}, 0x200, 0x6e6bb6, 0x1, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3501, 0x3, 0x2, 0x5, 0xb0e, 0x5, 0x6}}, 0xe8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 16.151408788s ago: executing program 0 (id=702): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000200000d"], 0x0, 0x3a, 0x0, 0x8}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 16.056843094s ago: executing program 3 (id=703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0xa185, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x82, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x4}, @broadcast, @loopback, @multicast2]}]}}}}}}}, 0x0) 15.965125795s ago: executing program 0 (id=704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc811}, 0x804) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001cc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001d00)={0x6c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x4050884) 15.939957527s ago: executing program 3 (id=705): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000e5ff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x90) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f00000000c0), &(0x7f00000001c0)=r1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f0000000600)=""/135, 0x87}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000180)=0x573b, 0x4d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) 15.842547603s ago: executing program 0 (id=706): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond0\x00', {0x2, 0x4e21, @private=0xa010100}}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2d, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r15], 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xf}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) 15.733229929s ago: executing program 2 (id=707): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 15.732658603s ago: executing program 3 (id=708): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0xfff0, @empty}, 0x10) getpeername$l2tp(r0, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) r3 = epoll_create1(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x2}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80800000, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa, 0x0, 0x2}, 0x20) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) 15.657455509s ago: executing program 2 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f00000029c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) 15.634570438s ago: executing program 3 (id=710): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15.440876964s ago: executing program 2 (id=711): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x5e, 0x0, &(0x7f0000000080)="00000000100000002238eca988a8", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x22, 0x2004, 0xffffffffffffffff, @value=r0}, 0x20) (async) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x52, 0x0, &(0x7f00000002c0)) (async) sendmsg$inet(r2, &(0x7f0000001ec0)={&(0x7f00000003c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @generic={0x94, 0x12, "d0581ddc37253c05f7c0c7a54e649600"}, @timestamp_prespec={0x44, 0x4, 0x67, 0x3, 0x7}]}}}], 0x48}, 0x4) r4 = socket(0x0, 0x80000, 0x3) bind$rds(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) 15.203555898s ago: executing program 2 (id=712): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xbc, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4}, {0x0, 0xd, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r0}, 0x90) 15.183400546s ago: executing program 3 (id=713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x21}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0xf534, 0xffffffff, 0x0, 0x8, 0x8d, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket(0x1, 0x2, 0x0) shutdown(r11, 0x0) bind$unix(r11, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f00000015c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 2.147035601s ago: executing program 32 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0xfffc}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r8) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="6103028181012d5a0d0dbd"], 0xb) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010002000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b3200000000300004802c00018008000100636d70002000f37f08000240000000000c00038005000100ef00000008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002800001028000000040000000f000000000000090000000000000000000000010500000015000000020000000000000c0000000000003000"], 0x0, 0x44}, 0x28) 2.094300784s ago: executing program 33 (id=691): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100), 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 71.055015ms ago: executing program 34 (id=706): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond0\x00', {0x2, 0x4e21, @private=0xa010100}}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2d, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r15], 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xf}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) 39.087237ms ago: executing program 35 (id=712): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xbc, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4}, {0x0, 0xd, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r0}, 0x90) 0s ago: executing program 36 (id=713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x21}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0xf534, 0xffffffff, 0x0, 0x8, 0x8d, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket(0x1, 0x2, 0x0) shutdown(r11, 0x0) bind$unix(r11, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f00000015c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.206' (ED25519) to the list of known hosts. [ 82.911794][ T5852] cgroup: Unknown subsys name 'net' [ 83.104755][ T5852] cgroup: Unknown subsys name 'cpuset' [ 83.113692][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.707188][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.626015][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.634379][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.650868][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.659006][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.670727][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.795293][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.803419][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.817561][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.828717][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.838444][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.882586][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.891951][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.902028][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.924805][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.932811][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.972534][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.981400][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.989028][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.997877][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.006672][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.016012][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.026196][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.034687][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.044380][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.062552][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.388723][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 89.640720][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.647986][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.656762][ T5865] bridge_slave_0: entered allmulticast mode [ 89.664286][ T5865] bridge_slave_0: entered promiscuous mode [ 89.688951][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 89.710108][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.719166][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.726801][ T5865] bridge_slave_1: entered allmulticast mode [ 89.734188][ T5865] bridge_slave_1: entered promiscuous mode [ 89.756179][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 89.836705][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.849188][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.951016][ T5865] team0: Port device team_slave_0 added [ 89.992685][ T5865] team0: Port device team_slave_1 added [ 89.998697][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.006156][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.014744][ T5870] bridge_slave_0: entered allmulticast mode [ 90.022622][ T5870] bridge_slave_0: entered promiscuous mode [ 90.109355][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.116663][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.123906][ T5870] bridge_slave_1: entered allmulticast mode [ 90.132004][ T5870] bridge_slave_1: entered promiscuous mode [ 90.231027][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.238010][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.264473][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.309903][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.333565][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.341143][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.367532][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.378985][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 90.393028][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.402429][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 90.418681][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.425958][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.433387][ T5872] bridge_slave_0: entered allmulticast mode [ 90.440774][ T5872] bridge_slave_0: entered promiscuous mode [ 90.482815][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.490098][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.503613][ T5872] bridge_slave_1: entered allmulticast mode [ 90.511456][ T5872] bridge_slave_1: entered promiscuous mode [ 90.608854][ T5870] team0: Port device team_slave_0 added [ 90.618423][ T5870] team0: Port device team_slave_1 added [ 90.645405][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.695539][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.711131][ T5865] hsr_slave_0: entered promiscuous mode [ 90.717634][ T5865] hsr_slave_1: entered promiscuous mode [ 90.731360][ T51] Bluetooth: hci0: command tx timeout [ 90.792723][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.799740][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.826268][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.866799][ T5872] team0: Port device team_slave_0 added [ 90.887238][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.890713][ T51] Bluetooth: hci1: command tx timeout [ 90.894785][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.925991][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.959187][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.966555][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.973751][ T51] Bluetooth: hci2: command tx timeout [ 90.979342][ T5875] bridge_slave_0: entered allmulticast mode [ 90.986711][ T5875] bridge_slave_0: entered promiscuous mode [ 90.995988][ T5872] team0: Port device team_slave_1 added [ 91.002216][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.009341][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.017021][ T5879] bridge_slave_0: entered allmulticast mode [ 91.024342][ T5879] bridge_slave_0: entered promiscuous mode [ 91.051576][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.058790][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.066204][ T5875] bridge_slave_1: entered allmulticast mode [ 91.074237][ T5875] bridge_slave_1: entered promiscuous mode [ 91.095057][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.102351][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.109623][ T5879] bridge_slave_1: entered allmulticast mode [ 91.118615][ T5879] bridge_slave_1: entered promiscuous mode [ 91.130657][ T51] Bluetooth: hci4: command tx timeout [ 91.130675][ T5866] Bluetooth: hci3: command tx timeout [ 91.195872][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.202942][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.229629][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.251256][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.263725][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.299787][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.306864][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.333398][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.372982][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.386425][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.415449][ T5870] hsr_slave_0: entered promiscuous mode [ 91.422065][ T5870] hsr_slave_1: entered promiscuous mode [ 91.428205][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 91.434106][ T5870] Cannot create hsr debugfs directory [ 91.463692][ T5879] team0: Port device team_slave_0 added [ 91.498975][ T5875] team0: Port device team_slave_0 added [ 91.523334][ T5879] team0: Port device team_slave_1 added [ 91.531724][ T5875] team0: Port device team_slave_1 added [ 91.653166][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.660166][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.686351][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.699159][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.706303][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.732711][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.748854][ T5872] hsr_slave_0: entered promiscuous mode [ 91.755605][ T5872] hsr_slave_1: entered promiscuous mode [ 91.761878][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 91.767637][ T5872] Cannot create hsr debugfs directory [ 91.781458][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.788508][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.814530][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.868747][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.875905][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.903230][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.022935][ T24] cfg80211: failed to load regulatory.db [ 92.028786][ T5875] hsr_slave_0: entered promiscuous mode [ 92.035224][ T5875] hsr_slave_1: entered promiscuous mode [ 92.042247][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 92.047993][ T5875] Cannot create hsr debugfs directory [ 92.093334][ T5879] hsr_slave_0: entered promiscuous mode [ 92.099649][ T5879] hsr_slave_1: entered promiscuous mode [ 92.106439][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 92.112338][ T5879] Cannot create hsr debugfs directory [ 92.450274][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.462941][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.502336][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.542023][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.616456][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.627341][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.639509][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.650258][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.777192][ T5872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.790021][ T5872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.815086][ T51] Bluetooth: hci0: command tx timeout [ 92.826632][ T5872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.838333][ T5872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.900564][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.911698][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.922710][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.934101][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.970565][ T51] Bluetooth: hci1: command tx timeout [ 93.051403][ T51] Bluetooth: hci2: command tx timeout [ 93.078785][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.086258][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.109713][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.122242][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.136223][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.193870][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.206299][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.211086][ T51] Bluetooth: hci3: command tx timeout [ 93.218555][ T5866] Bluetooth: hci4: command tx timeout [ 93.239624][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.247009][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.296696][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.303894][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.323613][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.343930][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.351136][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.382904][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.399328][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.406502][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.463032][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.523175][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.543262][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.550425][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.564568][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.571739][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.615126][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.698168][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.748739][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.804906][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.812082][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.856041][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.863261][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.955281][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.981705][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.997399][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.004560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.074686][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.082024][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.267960][ T5865] veth0_vlan: entered promiscuous mode [ 94.305198][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.335742][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.353103][ T5865] veth1_vlan: entered promiscuous mode [ 94.511973][ T5870] veth0_vlan: entered promiscuous mode [ 94.526549][ T5865] veth0_macvtap: entered promiscuous mode [ 94.554235][ T5870] veth1_vlan: entered promiscuous mode [ 94.589637][ T5865] veth1_macvtap: entered promiscuous mode [ 94.706542][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.757957][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.767336][ T5870] veth0_macvtap: entered promiscuous mode [ 94.780149][ T5870] veth1_macvtap: entered promiscuous mode [ 94.827372][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.891444][ T51] Bluetooth: hci0: command tx timeout [ 94.898355][ T3544] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.915330][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.934601][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.952938][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.967319][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.984085][ T5875] veth0_vlan: entered promiscuous mode [ 94.991509][ T3544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.010325][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.042048][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.050951][ T51] Bluetooth: hci1: command tx timeout [ 95.082361][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.092076][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.118877][ T5875] veth1_vlan: entered promiscuous mode [ 95.131771][ T51] Bluetooth: hci2: command tx timeout [ 95.137699][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.228820][ T5872] veth0_vlan: entered promiscuous mode [ 95.242541][ T5879] veth0_vlan: entered promiscuous mode [ 95.251931][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.259911][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.291362][ T51] Bluetooth: hci3: command tx timeout [ 95.296815][ T51] Bluetooth: hci4: command tx timeout [ 95.312651][ T5872] veth1_vlan: entered promiscuous mode [ 95.343215][ T5879] veth1_vlan: entered promiscuous mode [ 95.368274][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.381168][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.394391][ T5875] veth0_macvtap: entered promiscuous mode [ 95.449663][ T5872] veth0_macvtap: entered promiscuous mode [ 95.458876][ T5875] veth1_macvtap: entered promiscuous mode [ 95.483101][ T5879] veth0_macvtap: entered promiscuous mode [ 95.490957][ T266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.508887][ T266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.546743][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.548145][ T5872] veth1_macvtap: entered promiscuous mode [ 95.578541][ T5879] veth1_macvtap: entered promiscuous mode [ 95.640011][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.649973][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.660907][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.692173][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.722856][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.747167][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.777148][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.866353][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.876254][ T5984] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 95.893218][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.904484][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.949105][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.967020][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.993734][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.038514][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.059109][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.068354][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.077765][ T5990] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 96.129069][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.164200][ T5990] team0: Device hsr_slave_0 failed to register rx_handler [ 96.200912][ T2992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.217282][ T2992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.247540][ T2992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.370938][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.391850][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.427803][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.443898][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.498446][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.508133][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.508247][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 96.561442][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.589399][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.632270][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.656900][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.864461][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.920328][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.971506][ T51] Bluetooth: hci0: command tx timeout [ 96.986083][ T6008] bridge_slave_0: left allmulticast mode [ 97.007937][ T6008] bridge_slave_0: left promiscuous mode [ 97.018462][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.072176][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.132032][ T51] Bluetooth: hci1: command tx timeout [ 97.173477][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 97.182879][ T6008] bond0: (slave bond_slave_0): Releasing backup interface [ 97.202714][ T6008] bond0: (slave bond_slave_1): Releasing backup interface [ 97.210745][ T51] Bluetooth: hci2: command tx timeout [ 97.238592][ T6008] team0: Port device team_slave_0 removed [ 97.258754][ T6008] team0: Port device team_slave_1 removed [ 97.274482][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.285168][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.296857][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.297045][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.316659][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.365294][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 97.371676][ T51] Bluetooth: hci4: command tx timeout [ 97.379492][ T51] Bluetooth: hci3: command tx timeout [ 97.389452][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 97.437881][ T6026] team1: entered promiscuous mode [ 97.445747][ T6026] team1: entered allmulticast mode [ 97.477148][ T6033] veth0: entered promiscuous mode [ 97.483904][ T6026] Zero length message leads to an empty skb [ 97.598621][ T6034] veth0 (unregistering): left promiscuous mode [ 97.703611][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 98.085062][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 98.103348][ T6063] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 98.150971][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 98.246396][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 98.269451][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 98.295187][ T6058] netlink: 288 bytes leftover after parsing attributes in process `syz.0.20'. [ 98.874862][ T6097] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 98.875571][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.886806][ T6098] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.909471][ T6092] Bluetooth: MGMT ver 1.23 [ 98.957574][ T6098] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 99.296190][ T6111] netlink: 'syz.1.37': attribute type 10 has an invalid length. [ 99.327123][ T6111] bridge_slave_1: left promiscuous mode [ 99.378405][ T6111] bridge_slave_1: left allmulticast mode [ 99.388257][ T6120] netlink: 'syz.0.39': attribute type 3 has an invalid length. [ 99.436159][ T6120] netlink: 'syz.0.39': attribute type 2 has an invalid length. [ 99.438165][ T6111] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 99.685176][ T6116] netlink: 'syz.0.39': attribute type 16 has an invalid length. [ 99.693970][ T6116] netlink: 'syz.0.39': attribute type 17 has an invalid length. [ 99.816757][ T6116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.881288][ T6126] lo speed is unknown, defaulting to 1000 [ 99.958172][ T6126] lo speed is unknown, defaulting to 1000 [ 99.988453][ T6158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.003001][ T6126] lo speed is unknown, defaulting to 1000 [ 100.783053][ T960] lo speed is unknown, defaulting to 1000 [ 100.789131][ T6126] infiniband syz0: set active [ 100.800486][ T6126] infiniband syz0: added lo [ 100.822036][ T6126] syz0: rxe_create_cq: returned err = -12 [ 100.828126][ T6126] infiniband syz0: Couldn't create ib_mad CQ [ 100.883114][ T6126] infiniband syz0: Couldn't open port 1 [ 101.007201][ T6126] RDS/IB: syz0: added [ 101.027275][ T6126] smc: adding ib device syz0 with port count 1 [ 101.060704][ T6126] smc: ib device syz0 port 1 has pnetid [ 101.067854][ T960] lo speed is unknown, defaulting to 1000 [ 101.142234][ T6126] lo speed is unknown, defaulting to 1000 [ 101.736717][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.757603][ T6236] __nla_validate_parse: 8 callbacks suppressed [ 101.757622][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 101.778120][ T6238] IPv6: addrconf: prefix option has invalid lifetime [ 101.837450][ T6228] bond0: (slave rose0): Enslaving as an active interface with an up link [ 102.081825][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 102.299722][ T6126] lo speed is unknown, defaulting to 1000 [ 102.812193][ T6126] lo speed is unknown, defaulting to 1000 [ 103.101156][ T6126] lo speed is unknown, defaulting to 1000 [ 103.401113][ T6126] lo speed is unknown, defaulting to 1000 [ 132.974121][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980705][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.974291][ T6423] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 153.984034][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 154.291643][ T6442] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 154.362786][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'. [ 154.455476][ T6445] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 154.464760][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 154.470036][ T6445] netlink: 'syz.0.91': attribute type 3 has an invalid length. [ 154.525822][ T6450] netlink: 'syz.1.93': attribute type 83 has an invalid length. [ 154.533739][ T6445] netlink: 'syz.0.91': attribute type 235 has an invalid length. [ 154.581202][ T6450] warning: `syz.1.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.653627][ T6458] syzkaller1: entered promiscuous mode [ 154.679998][ T6458] syzkaller1: entered allmulticast mode [ 155.041473][ T6479] Bluetooth: MGMT ver 1.23 [ 155.175066][ T6481] lo speed is unknown, defaulting to 1000 [ 156.117735][ T6517] netlink: 57 bytes leftover after parsing attributes in process `syz.4.114'. [ 156.513540][ T6535] netlink: 'syz.3.121': attribute type 7 has an invalid length. [ 156.777305][ T6544] tipc: Started in network mode [ 156.791517][ T6544] tipc: Node identity f6319d73387a, cluster identity 4711 [ 156.799004][ T6544] tipc: Enabled bearer , priority 0 [ 156.867573][ T6544] tipc: Disabling bearer [ 157.024526][ T6050] IPVS: starting estimator thread 0... [ 157.155420][ T6558] IPVS: using max 27 ests per chain, 64800 per kthread [ 157.394265][ T6581] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.136'. [ 157.439724][ T6581] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.136'. [ 157.593723][ T6593] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.141'. [ 157.848788][ T6605] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 157.928423][ T6600] lo speed is unknown, defaulting to 1000 [ 158.071666][ T6614] veth3: entered allmulticast mode [ 158.301731][ T6619] netlink: 96 bytes leftover after parsing attributes in process `syz.0.148'. [ 158.346464][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 158.356521][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.151'. [ 158.787146][ T6649] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 159.018929][ T6668] __nla_validate_parse: 1 callbacks suppressed [ 159.018948][ T6668] netlink: 87 bytes leftover after parsing attributes in process `syz.0.159'. [ 159.130821][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.161'. [ 159.271930][ T6678] tipc: Started in network mode [ 159.278038][ T6678] tipc: Node identity 323eaa587a11, cluster identity 4711 [ 159.293474][ T6678] tipc: Enabled bearer , priority 0 [ 159.326612][ T6678] tipc: Disabling bearer [ 159.836776][ T6701] tipc: Enabled bearer , priority 0 [ 159.898572][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 159.908256][ T6701] syzkaller0: entered promiscuous mode [ 159.919268][ T6701] syzkaller0: entered allmulticast mode [ 159.929719][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 160.022351][ T6701] tipc: Resetting bearer [ 160.043179][ T6719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.107399][ T6698] tipc: Resetting bearer [ 160.165725][ T6698] tipc: Disabling bearer [ 160.239897][ T6754] lo speed is unknown, defaulting to 1000 [ 160.261435][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 160.279760][ T6757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.171'. [ 160.302714][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 160.321118][ T3567] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.336050][ T3567] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.381663][ T3567] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.424324][ T3567] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.854463][ T6775] netlink: 'syz.3.181': attribute type 4 has an invalid length. [ 161.023258][ T6784] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 161.329945][ T6801] netlink: 108 bytes leftover after parsing attributes in process `syz.2.189'. [ 161.478308][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'. [ 161.668513][ T6821] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 161.680027][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 161.913644][ T6837] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 161.961350][ T6840] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 162.037304][ T6844] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 162.047003][ T6844] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 162.128647][ T6847] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 162.143668][ T6847] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 162.282620][ T6857] trusted_key: syz.4.209 sent an empty control message without MSG_MORE. [ 162.307306][ T6859] netlink: 'syz.3.210': attribute type 1 has an invalid length. [ 162.444768][ T6866] netlink: 'syz.4.212': attribute type 12 has an invalid length. [ 162.655701][ T6878] bridge3: entered allmulticast mode [ 163.279564][ T6915] tipc: New replicast peer: 255.255.255.255 [ 163.286826][ T6915] tipc: Enabled bearer , priority 10 [ 163.409292][ T6919] veth1_to_bond: entered allmulticast mode [ 163.450411][ T6919] openvswitch: netlink: Missing key (keys=40, expected=100) [ 163.500932][ T6918] veth1_to_bond: left allmulticast mode [ 163.773614][ T6939] tipc: Enabled bearer , priority 0 [ 163.795620][ T6939] syzkaller0: entered promiscuous mode [ 163.802636][ T6939] syzkaller0: entered allmulticast mode [ 163.859310][ T6939] tipc: Resetting bearer [ 163.912900][ T6938] tipc: Resetting bearer [ 163.973887][ T6938] tipc: Disabling bearer [ 164.108880][ T6948] lo speed is unknown, defaulting to 1000 [ 164.143641][ T6953] __nla_validate_parse: 18 callbacks suppressed [ 164.143665][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 164.196906][ T6955] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 164.317333][ T6955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.345635][ T6958] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 164.441788][ T6959] gretap1: entered promiscuous mode [ 164.473911][ T6959] bond1: (slave gretap1): making interface the new active one [ 164.545634][ T6959] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 164.853095][ T9] tipc: Node number set to 1211083352 [ 165.211606][ T6994] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 165.264822][ T6997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.256'. [ 165.301321][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 165.342104][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 165.797008][ T7018] bridge0: port 3(syz_tun) entered blocking state [ 165.827423][ T7018] bridge0: port 3(syz_tun) entered disabled state [ 165.894658][ T7018] syz_tun: entered allmulticast mode [ 165.945247][ T7018] syz_tun: entered promiscuous mode [ 165.963625][ T7018] bridge0: port 3(syz_tun) entered blocking state [ 165.970396][ T7018] bridge0: port 3(syz_tun) entered forwarding state [ 166.136211][ T7039] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 166.258011][ T7050] netlink: 312 bytes leftover after parsing attributes in process `syz.0.270'. [ 166.668646][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 166.687550][ T7064] scsi_nl_rcv_msg: discarding partial skb [ 166.702771][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 166.743499][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'. [ 166.771896][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 166.774975][ T7076] xfrm1: entered promiscuous mode [ 166.800488][ T7076] xfrm1: entered allmulticast mode [ 166.818507][ T7071] netlink: 104 bytes leftover after parsing attributes in process `syz.1.277'. [ 166.827711][ T7081] validate_nla: 3 callbacks suppressed [ 166.827730][ T7081] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 166.869725][ T6735] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.908977][ T6735] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.944268][ T7084] team_slave_0: mtu greater than device maximum [ 167.050932][ T6735] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.068282][ T6735] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.675190][ T7130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.114027][ T6747] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.130775][ T6747] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.205449][ T3567] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.223512][ T3567] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.278601][ T3567] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.319113][ T3567] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.384003][ T3567] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.402021][ T3567] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.075951][ T7198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.161179][ T7205] netlink: 'syz.4.311': attribute type 7 has an invalid length. [ 169.199532][ T7205] __nla_validate_parse: 9 callbacks suppressed [ 169.199555][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 169.494422][ T7226] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 4, id = 0 [ 169.539092][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 169.676849][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 169.704310][ T7238] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 169.759862][ T7191] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 169.864641][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.321'. [ 169.898419][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 169.987856][ T7252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.323'. [ 170.011585][ T7250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.323'. [ 170.434740][ T7278] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 170.458322][ T7278] netlink: 'syz.0.330': attribute type 11 has an invalid length. [ 170.502344][ T7278] netlink: 224 bytes leftover after parsing attributes in process `syz.0.330'. [ 170.795368][ T7294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.334'. [ 170.821804][ T7297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.862578][ T7302] netlink: 72 bytes leftover after parsing attributes in process `syz.3.337'. [ 170.971047][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 170.998940][ T7305] lo speed is unknown, defaulting to 1000 [ 172.034059][ T7356] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 172.332566][ T7381] rdma_rxe: rxe_newlink: failed to add lo [ 172.362855][ T7381] netlink: 'syz.4.354': attribute type 3 has an invalid length. [ 172.574650][ T7392] gretap1: entered promiscuous mode [ 172.707669][ T7391] bond2: entered promiscuous mode [ 172.713273][ T7391] bond2: entered allmulticast mode [ 172.718913][ T7391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.776621][ T7402] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 172.905351][ T7402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.925026][ T7406] pim6reg1: entered promiscuous mode [ 172.931493][ T7406] pim6reg1: entered allmulticast mode [ 172.987363][ T7411] bond1: (slave veth5): Enslaving as an active interface with a down link [ 173.017786][ T7402] bond1: (slave veth0_to_bond): making interface the new active one [ 173.037960][ T7402] veth0_to_bond: entered promiscuous mode [ 173.044785][ T7402] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 173.117885][ T7411] bond1: (slave veth7): Enslaving as an active interface with a down link [ 173.450105][ T7442] syzkaller1: entered promiscuous mode [ 173.466078][ T7442] syzkaller1: entered allmulticast mode [ 173.807142][ T7458] netlink: 'syz.4.373': attribute type 21 has an invalid length. [ 173.834352][ T7458] netlink: 'syz.4.373': attribute type 22 has an invalid length. [ 173.878673][ T7458] netlink: 'syz.4.373': attribute type 23 has an invalid length. [ 173.903137][ T7458] netlink: 'syz.4.373': attribute type 25 has an invalid length. [ 173.925049][ T7458] netlink: 'syz.4.373': attribute type 26 has an invalid length. [ 174.145073][ T7472] netlink: 'syz.4.376': attribute type 18 has an invalid length. [ 174.193405][ T7475] netlink: 'syz.4.376': attribute type 18 has an invalid length. [ 174.544768][ T7492] __nla_validate_parse: 8 callbacks suppressed [ 174.544791][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 174.564537][ T7492] openvswitch: netlink: Flow actions attr not present in new flow. [ 174.797540][ T7507] netlink: 80 bytes leftover after parsing attributes in process `syz.4.386'. [ 174.808783][ T7501] netlink: 81 bytes leftover after parsing attributes in process `syz.3.385'. [ 174.999245][ T7511] pim6reg1: entered promiscuous mode [ 175.027265][ T7511] pim6reg1: entered allmulticast mode [ 175.176286][ T7514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.223858][ T7514] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 175.241649][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 175.405950][ T7440] syz.0.367: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.425251][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.0.367 Not tainted syzkaller #0 PREEMPT(full) [ 175.425281][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.425302][ T7440] Call Trace: [ 175.425312][ T7440] [ 175.425321][ T7440] dump_stack_lvl+0x189/0x250 [ 175.425360][ T7440] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 175.425391][ T7440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.425422][ T7440] ? __pfx__printk+0x10/0x10 [ 175.425452][ T7440] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.425477][ T7440] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.425511][ T7440] warn_alloc+0x214/0x310 [ 175.425551][ T7440] ? __pfx_warn_alloc+0x10/0x10 [ 175.425593][ T7440] ? __get_vm_area_node+0x28f/0x300 [ 175.425623][ T7440] ? hash_netport4_resize+0x235/0x1b60 [ 175.425651][ T7440] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 175.425716][ T7440] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.425755][ T7440] ? rcu_is_watching+0x15/0xb0 [ 175.425777][ T7440] ? hash_netport4_resize+0x235/0x1b60 [ 175.425799][ T7440] ? hash_netport4_resize+0x235/0x1b60 [ 175.425819][ T7440] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 175.425850][ T7440] ? hash_netport4_resize+0x235/0x1b60 [ 175.425881][ T7440] hash_netport4_resize+0x235/0x1b60 [ 175.425904][ T7440] ? hash_netport4_uadt+0xc97/0xf30 [ 175.425932][ T7440] ? __pfx_hash_netport4_add+0x10/0x10 [ 175.425955][ T7440] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 175.425990][ T7440] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 175.426024][ T7440] call_ad+0x44b/0xb00 [ 175.426063][ T7440] ? __pfx_call_ad+0x10/0x10 [ 175.426120][ T7440] ? __nla_parse+0x40/0x60 [ 175.426156][ T7440] ip_set_ad+0x791/0x930 [ 175.426195][ T7440] ? __pfx_ip_set_ad+0x10/0x10 [ 175.426265][ T7440] nfnetlink_rcv_msg+0xb4d/0x1130 [ 175.426291][ T7440] ? __netlink_deliver_tap+0x5ad/0x850 [ 175.426320][ T7440] ? netlink_deliver_tap+0x19c/0x1b0 [ 175.426348][ T7440] ? netlink_unicast+0x7fa/0x9e0 [ 175.426372][ T7440] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 175.426426][ T7440] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 175.426487][ T7440] ? kmem_cache_free_bulk+0x2d1/0x520 [ 175.426536][ T7440] netlink_rcv_skb+0x205/0x470 [ 175.426568][ T7440] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 175.426598][ T7440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.426642][ T7440] ? bpf_lsm_capable+0x9/0x20 [ 175.426669][ T7440] ? security_capable+0x7e/0x2e0 [ 175.426707][ T7440] nfnetlink_rcv+0x26a/0x2520 [ 175.426739][ T7440] ? __dev_queue_xmit+0x1d79/0x3b50 [ 175.426775][ T7440] ? __dev_queue_xmit+0x27b/0x3b50 [ 175.426814][ T7440] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 175.426841][ T7440] ? __pfx___dev_queue_xmit+0x10/0x10 [ 175.426882][ T7440] ? ref_tracker_free+0x63a/0x7d0 [ 175.426911][ T7440] ? __asan_memcpy+0x40/0x70 [ 175.426951][ T7440] ? __pfx_ref_tracker_free+0x10/0x10 [ 175.426978][ T7440] ? __skb_clone+0x63/0x7a0 [ 175.427007][ T7440] ? __skb_clone+0x483/0x7a0 [ 175.427038][ T7440] ? skb_clone+0x246/0x3a0 [ 175.427066][ T7440] ? __netlink_deliver_tap+0x807/0x850 [ 175.427098][ T7440] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.427139][ T7440] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.427181][ T7440] netlink_unicast+0x82c/0x9e0 [ 175.427221][ T7440] ? __pfx_netlink_unicast+0x10/0x10 [ 175.427253][ T7440] ? netlink_sendmsg+0x642/0xb30 [ 175.427270][ T7440] ? skb_put+0x11b/0x210 [ 175.427295][ T7440] netlink_sendmsg+0x805/0xb30 [ 175.427327][ T7440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.427350][ T7440] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.427373][ T7440] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.427395][ T7440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.427422][ T7440] __sock_sendmsg+0x21c/0x270 [ 175.427456][ T7440] ____sys_sendmsg+0x505/0x830 [ 175.427487][ T7440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.427522][ T7440] ? import_iovec+0x74/0xa0 [ 175.427551][ T7440] ___sys_sendmsg+0x21f/0x2a0 [ 175.427577][ T7440] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.427643][ T7440] ? __fget_files+0x2a/0x420 [ 175.427661][ T7440] ? __fget_files+0x3a0/0x420 [ 175.427689][ T7440] __x64_sys_sendmsg+0x19b/0x260 [ 175.427716][ T7440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.427749][ T7440] ? rcu_is_watching+0x15/0xb0 [ 175.427774][ T7440] ? do_syscall_64+0xbe/0x3b0 [ 175.427797][ T7440] do_syscall_64+0xfa/0x3b0 [ 175.427814][ T7440] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.427844][ T7440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.427863][ T7440] ? clear_bhb_loop+0x60/0xb0 [ 175.427888][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.427908][ T7440] RIP: 0033:0x7f97ad18ebe9 [ 175.427939][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.427956][ T7440] RSP: 002b:00007f97ae0d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.427978][ T7440] RAX: ffffffffffffffda RBX: 00007f97ad3c5fa0 RCX: 00007f97ad18ebe9 [ 175.427993][ T7440] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 175.428005][ T7440] RBP: 00007f97ad211e19 R08: 0000000000000000 R09: 0000000000000000 [ 175.428018][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.428029][ T7440] R13: 00007f97ad3c6038 R14: 00007f97ad3c5fa0 R15: 00007fffce1a0398 [ 175.428063][ T7440] [ 175.428076][ T7440] Mem-Info: [ 175.945418][ T7440] active_anon:4594 inactive_anon:0 isolated_anon:0 [ 175.945418][ T7440] active_file:2885 inactive_file:39862 isolated_file:0 [ 175.945418][ T7440] unevictable:768 dirty:162 writeback:0 [ 175.945418][ T7440] slab_reclaimable:11266 slab_unreclaimable:98531 [ 175.945418][ T7440] mapped:31116 shmem:1359 pagetables:1057 [ 175.945418][ T7440] sec_pagetables:0 bounce:0 [ 175.945418][ T7440] kernel_misc_reclaimable:0 [ 175.945418][ T7440] free:1328891 free_pcp:14928 free_cma:0 [ 175.996117][ T7440] Node 0 active_anon:18376kB inactive_anon:0kB active_file:11540kB inactive_file:159248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124464kB dirty:648kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13888kB pagetables:4088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.000540][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 176.043360][ T7440] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.137546][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 176.147513][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 176.156166][ T7440] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.164412][ T7543] netlink: 'syz.2.396': attribute type 6 has an invalid length. [ 176.213814][ T7440] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 176.220906][ T7440] Node 0 DMA32 free:1409556kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18304kB inactive_anon:0kB active_file:11540kB inactive_file:157672kB unevictable:1536kB writepending:684kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:40032kB local_pcp:20036kB free_cma:0kB [ 176.264619][ T7440] lowmem_reserve[]: 0 0 1 1 1 [ 176.269673][ T7440] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 176.351157][ T7440] lowmem_reserve[]: 0 0 0 0 0 [ 176.355954][ T7440] Node 1 Normal free:3890316kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20960kB local_pcp:8000kB free_cma:0kB [ 176.438414][ T7440] lowmem_reserve[]: 0 0 0 0 0 [ 176.444108][ T7440] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 176.481703][ T7440] Node 0 DMA32: 482*4kB (M) 211*8kB (UM) 88*16kB (UME) 1274*32kB (UME) 566*64kB (UM) 149*128kB (UME) 33*256kB (UME) 11*512kB (UM) 6*1024kB (UME) 3*2048kB (ME) 313*4096kB (UM) = 1409504kB [ 176.506883][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'. [ 176.526377][ T7440] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 176.541557][ T7440] Node 1 Normal: 207*4kB (UE) 42*8kB (UME) 36*16kB (UME) 56*32kB (UME) 29*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3890316kB [ 176.577391][ T7440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.592734][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 176.602703][ T7558] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 176.615046][ T7440] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.654459][ T7440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.669873][ T7440] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.717476][ T7440] 44103 total pagecache pages [ 176.723694][ T7564] team0: Cannot enslave team device to itself [ 176.730104][ T7440] 0 pages in swap cache [ 176.738335][ T7440] Free swap = 124996kB [ 176.749278][ T7440] Total swap = 124996kB [ 176.797154][ T7440] 2097051 pages RAM [ 176.818299][ T7440] 0 pages HighMem/MovableOnly [ 176.827321][ T7576] can: request_module (can-proto-0) failed. [ 176.852254][ T7440] 425667 pages reserved [ 176.865936][ T7440] 0 pages cma reserved [ 177.069503][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 177.187435][ T7582] hsr_slave_0 (unregistering): left promiscuous mode [ 177.304629][ T7601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.338946][ T7607] delete_channel: no stack [ 177.651984][ T7630] validate_nla: 2 callbacks suppressed [ 177.652004][ T7630] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 177.766773][ T7643] sock: sock_set_timeout: `syz.4.426' (pid 7643) tries to set negative timeout [ 178.909385][ T7680] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.661004][ T7725] __nla_validate_parse: 7 callbacks suppressed [ 179.661021][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 179.809867][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 179.979682][ T7745] tipc: Enabling of bearer rejected, failed to enable media [ 180.045780][ T7749] team0: No ports can be present during mode change [ 180.708151][ T7787] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.470'. [ 180.864879][ T7798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.470'. [ 180.909016][ T7796] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 181.001138][ T7805] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 181.073999][ T7805] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.097352][ T7805] bond0: (slave team0): Enslaving as an active interface with an up link [ 181.133316][ T7813] openvswitch: netlink: Missing valid actions attribute. [ 181.183113][ T7813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.571873][ T7844] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 181.583570][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'. [ 181.589092][ T7847] netlink: 'syz.2.489': attribute type 7 has an invalid length. [ 181.624616][ T7837] netlink: 244 bytes leftover after parsing attributes in process `syz.1.486'. [ 181.654909][ T7847] : entered promiscuous mode [ 181.931008][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 182.026737][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 182.174614][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 182.364473][ T5942] IPVS: starting estimator thread 0... [ 182.470489][ T7895] IPVS: using max 28 ests per chain, 67200 per kthread [ 182.640699][ T7904] netlink: 224 bytes leftover after parsing attributes in process `syz.1.506'. [ 182.902490][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.512'. [ 182.991440][ T7922] netlink: 'syz.0.512': attribute type 7 has an invalid length. [ 183.003163][ T7922] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.005540][ T7928] netlink: 'syz.3.513': attribute type 83 has an invalid length. [ 183.089250][ T7922] bond1: entered allmulticast mode [ 183.096459][ T7922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.104512][ T7922] bridge0: port 3(bond1) entered blocking state [ 183.111106][ T7922] bridge0: port 3(bond1) entered disabled state [ 183.121193][ T7922] bond1: entered promiscuous mode [ 183.127180][ T7922] bridge0: port 3(bond1) entered blocking state [ 183.133828][ T7922] bridge0: port 3(bond1) entered forwarding state [ 183.408851][ T7957] netlink: 'syz.4.522': attribute type 1 has an invalid length. [ 183.577170][ T7957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.588422][ T6700] bridge0: port 3(bond1) entered disabled state [ 183.607293][ T7963] vlan2: entered promiscuous mode [ 183.612684][ T7963] bond2: entered promiscuous mode [ 183.617829][ T7963] vlan2: entered allmulticast mode [ 183.623160][ T7963] bond2: entered allmulticast mode [ 183.639353][ T7967] gretap1: entered promiscuous mode [ 183.665063][ T7967] bond2: (slave gretap1): making interface the new active one [ 183.674898][ T7967] gretap1: entered allmulticast mode [ 183.681662][ T7967] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 183.896581][ T7989] sctp: [Deprecated]: syz.3.528 (pid 7989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.896581][ T7989] Use struct sctp_sack_info instead [ 184.201346][ T6743] veth0_to_bond: left promiscuous mode [ 184.762295][ T8015] __nla_validate_parse: 9 callbacks suppressed [ 184.762316][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 184.823272][ T8018] netlink: 'syz.1.536': attribute type 1 has an invalid length. [ 184.840029][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 184.862533][ T8023] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 184.904084][ T8028] netlink: 92 bytes leftover after parsing attributes in process `syz.3.535'. [ 184.938117][ T8027] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 184.954275][ T8027] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 184.989084][ T8018] gretap1: entered promiscuous mode [ 185.057767][ T8027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'. [ 185.367407][ T8050] netlink: 50 bytes leftover after parsing attributes in process `syz.4.545'. [ 185.420154][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 185.451260][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 185.560526][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 185.670792][ T8071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'. [ 185.741823][ T8075] bridge_slave_0: left allmulticast mode [ 185.760788][ T8075] bridge_slave_0: left promiscuous mode [ 185.766647][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.818003][ T8075] bridge_slave_1: left allmulticast mode [ 185.831115][ T8075] bridge_slave_1: left promiscuous mode [ 185.842201][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.898388][ T8075] bond0: (slave bond_slave_0): Releasing backup interface [ 185.933361][ T8075] bond0: (slave bond_slave_1): Releasing backup interface [ 185.962878][ T8075] team0: Port device team_slave_0 removed [ 185.977931][ T8075] team0: Port device team_slave_1 removed [ 185.984904][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.999384][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.009913][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.023975][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.053013][ T8075] bond1: (slave gretap1): Releasing active interface [ 186.069278][ T8079] team0: Mode changed to "broadcast" [ 186.109787][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.133672][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.163685][ T8085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.215757][ T8091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.475822][ T8110] af_packet: tpacket_rcv: packet too big, clamped from 216 to 4294967272. macoff=96 [ 186.488710][ T8110] netlink: 'syz.2.564': attribute type 21 has an invalid length. [ 186.523651][ T8110] netlink: 128 bytes leftover after parsing attributes in process `syz.2.564'. [ 186.543231][ T8108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.554194][ T8108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.645396][ T8108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.684556][ T8108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.806094][ T8128] netlink: 'syz.2.566': attribute type 4 has an invalid length. [ 186.951943][ T8108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.966194][ T8108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.999591][ T8137] netpci0: renamed from bridge0 (while UP) [ 187.018579][ T8137] netpci0: port 3(syz_tun) entered disabled state [ 187.025368][ T8137] netpci0: port 2(bridge_slave_1) entered disabled state [ 187.033134][ T8137] netpci0: port 1(bridge_slave_0) entered disabled state [ 187.128632][ T8145] netlink: 'syz.0.571': attribute type 11 has an invalid length. [ 187.148537][ T8108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.159451][ T8108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.448250][ T6700] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.460223][ T6700] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.518239][ T6747] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.531446][ T6747] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.615289][ T6747] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.636736][ T6747] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.682551][ T6747] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.693613][ T6747] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.254864][ T8203] lo speed is unknown, defaulting to 1000 [ 188.804201][ T8237] tipc: Started in network mode [ 188.820429][ T8237] tipc: Node identity ac1414aa, cluster identity 4711 [ 188.827694][ T8237] tipc: Enabling of bearer rejected, failed to enable media [ 189.029200][ T8252] vlan3: entered promiscuous mode [ 189.105331][ T8260] rdma_rxe: rxe_newlink: failed to add wlan1 [ 189.754621][ T8288] netlink: 'syz.3.617': attribute type 7 has an invalid length. [ 189.762766][ T8288] netlink: 'syz.3.617': attribute type 8 has an invalid length. [ 189.770976][ T8288] __nla_validate_parse: 12 callbacks suppressed [ 189.770990][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 190.092717][ T8311] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.624'. [ 190.636460][ T8337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.644184][ T8337] IPv6: NLM_F_CREATE should be set when creating new route [ 191.051089][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 191.150149][ T8353] netlink: 'syz.3.642': attribute type 4 has an invalid length. [ 191.193859][ T8353] netlink: 'syz.3.642': attribute type 4 has an invalid length. [ 191.392584][ T8363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.506663][ T8373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.648'. [ 192.168750][ T8405] netlink: 'syz.0.657': attribute type 7 has an invalid length. [ 192.178675][ T8405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.657'. [ 192.275994][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.658'. [ 192.422410][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'. [ 192.660182][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'. [ 192.852654][ T8445] sctp: [Deprecated]: syz.4.669 (pid 8445) Use of int in max_burst socket option deprecated. [ 192.852654][ T8445] Use struct sctp_assoc_value instead [ 192.869849][ T8445] sctp: [Deprecated]: syz.4.669 (pid 8445) Use of int in max_burst socket option. [ 192.869849][ T8445] Use struct sctp_assoc_value instead [ 192.915178][ T8445] sctp: [Deprecated]: syz.4.669 (pid 8445) Use of int in max_burst socket option. [ 192.915178][ T8445] Use struct sctp_assoc_value instead [ 192.961883][ T8452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.047605][ T8450] can: request_module (can-proto-4) failed. [ 193.243371][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 193.252781][ T8468] tc_dump_action: action bad kind [ 193.393220][ T8472] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 193.403396][ T8472] nbd: error processing sock list [ 193.408817][ T8472] block nbd0: shutting down sockets [ 193.562119][ T8490] netlink: 152064 bytes leftover after parsing attributes in process `syz.2.684'. [ 193.573164][ T8490] netlink: zone id is out of range [ 193.578332][ T8490] netlink: zone id is out of range [ 193.592094][ T8490] netlink: zone id is out of range [ 193.597333][ T8490] netlink: zone id is out of range [ 193.605222][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.686'. [ 193.647843][ T8490] netlink: zone id is out of range [ 193.657497][ T8490] netlink: zone id is out of range [ 193.702136][ T8501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.716366][ T8490] netlink: zone id is out of range [ 193.721630][ T8490] netlink: zone id is out of range [ 193.748409][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.936016][ T6743] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 194.116499][ T8534] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 194.127005][ T8534] netlink: 'syz.3.693': attribute type 4 has an invalid length. [ 194.416180][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.795547][ T8525] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.824801][ T8525] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 194.850981][ T8525] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.858562][ T8525] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 194.873611][ T8564] __nla_validate_parse: 4 callbacks suppressed [ 194.873630][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 194.907418][ T8525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.917634][ T8525] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 194.955847][ T8525] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 194.972561][ T8525] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 195.426804][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 195.788360][ T8611] x_tables: ip_tables: udp match: only valid for protocol 17 [ 195.811531][ T8614] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 195.920029][ T8614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.939776][ T8614] bond3: (slave bond4): making interface the new active one [ 195.950778][ T8614] bond3: (slave bond4): Enslaving as an active interface with an up link [ 195.995952][ T8619] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 196.025274][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.710'. [ 196.076972][ T8614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.352520][ T8639] tipc: Enabling of bearer rejected, failed to enable media [ 196.517603][ T8649] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.713'. [ 255.854252][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.296129][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.650563][ T31] INFO: task kworker/1:7:7147 blocked for more than 143 seconds. [ 348.658432][ T31] Not tainted syzkaller #0 [ 348.663860][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.672700][ T31] task:kworker/1:7 state:D stack:26128 pid:7147 tgid:7147 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 348.685859][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 348.693257][ T31] Call Trace: [ 348.696571][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 348.699512][ T31] __schedule+0x1798/0x4cc0 [ 348.704236][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.709775][ T31] ? __pfx___schedule+0x10/0x10 [ 348.714778][ T31] ? schedule+0x91/0x360 [ 348.719094][ T31] schedule+0x165/0x360 [ 348.723998][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.729513][ T31] __mutex_lock+0x7e6/0x1350 [ 348.734214][ T31] ? __mutex_lock+0x5bb/0x1350 [ 348.739024][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 348.745411][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.751093][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 348.756859][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 348.762648][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 348.770302][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 348.776076][ T31] process_scheduled_works+0xae1/0x17b0 [ 348.810006][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.847064][ T31] worker_thread+0x8a0/0xda0 [ 348.859478][ T31] kthread+0x70e/0x8a0 [ 348.863663][ T31] ? __pfx_worker_thread+0x10/0x10 [ 348.868806][ T31] ? __pfx_kthread+0x10/0x10 [ 348.873485][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.878728][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.884926][ T31] ? __pfx_kthread+0x10/0x10 [ 348.889573][ T31] ret_from_fork+0x3fc/0x770 [ 348.894777][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 348.899950][ T31] ? __switch_to_asm+0x39/0x70 [ 348.904816][ T31] ? __switch_to_asm+0x33/0x70 [ 348.909613][ T31] ? __pfx_kthread+0x10/0x10 [ 348.914778][ T31] ret_from_fork_asm+0x1a/0x30 [ 348.919577][ T31] [ 348.922657][ T31] INFO: task syz.1.689:8513 blocked for more than 143 seconds. [ 348.930373][ T31] Not tainted syzkaller #0 [ 348.935338][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.944464][ T31] task:syz.1.689 state:D stack:25096 pid:8513 tgid:8513 ppid:5865 task_flags:0x400040 flags:0x00004004 [ 348.956423][ T31] Call Trace: [ 348.959716][ T31] [ 348.962713][ T31] __schedule+0x1798/0x4cc0 [ 348.967274][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.973143][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.978058][ T31] ? __pfx___schedule+0x10/0x10 [ 348.983012][ T31] ? schedule+0x91/0x360 [ 348.987306][ T31] schedule+0x165/0x360 [ 348.991615][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.997124][ T31] __mutex_lock+0x7e6/0x1350 [ 349.002205][ T31] ? __mutex_lock+0x5bb/0x1350 [ 349.006985][ T31] ? rfkill_unregister+0xc8/0x220 [ 349.012070][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.017130][ T31] ? __pfx_device_del+0x10/0x10 [ 349.022024][ T31] rfkill_unregister+0xc8/0x220 [ 349.026905][ T31] nfc_unregister_device+0x96/0x2a0 [ 349.032725][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 349.038527][ T31] virtual_ncidev_close+0x56/0x90 [ 349.043613][ T31] __fput+0x449/0xa70 [ 349.047617][ T31] task_work_run+0x1d1/0x260 [ 349.052439][ T31] ? __pfx_task_work_run+0x10/0x10 [ 349.057593][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 349.063533][ T31] exit_to_user_mode_loop+0xec/0x110 [ 349.068837][ T31] do_syscall_64+0x2bd/0x3b0 [ 349.073497][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.079588][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 349.085800][ T31] ? clear_bhb_loop+0x60/0xb0 [ 349.091148][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.097108][ T31] RIP: 0033:0x7fe03318ebe9 [ 349.101598][ T31] RSP: 002b:00007ffc06d5a1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 349.110060][ T31] RAX: 0000000000000000 RBX: 00007fe0333c7da0 RCX: 00007fe03318ebe9 [ 349.118104][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 349.126570][ T31] RBP: 00007fe0333c7da0 R08: 0000000000000188 R09: 0000001506d5a4ef [ 349.134604][ T31] R10: 00007fe0333c7cb0 R11: 0000000000000246 R12: 000000000002f851 [ 349.142633][ T31] R13: 00007fe0333c6090 R14: ffffffffffffffff R15: 00007ffc06d5a310 [ 349.151288][ T31] [ 349.154379][ T31] INFO: task syz.4.691:8525 blocked for more than 143 seconds. [ 349.162039][ T31] Not tainted syzkaller #0 [ 349.167006][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.175737][ T31] task:syz.4.691 state:D stack:24568 pid:8525 tgid:8524 ppid:5872 task_flags:0x400040 flags:0x00004006 [ 349.188120][ T31] Call Trace: [ 349.191551][ T31] [ 349.194520][ T31] __schedule+0x1798/0x4cc0 [ 349.199077][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.204188][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.209077][ T31] ? __pfx___schedule+0x10/0x10 [ 349.214666][ T31] ? schedule+0x91/0x360 [ 349.218972][ T31] schedule+0x165/0x360 [ 349.223231][ T31] schedule_preempt_disabled+0x13/0x30 [ 349.228727][ T31] __mutex_lock+0x7e6/0x1350 [ 349.233381][ T31] ? __mutex_lock+0x5bb/0x1350 [ 349.238217][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 349.243945][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.249040][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.254323][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 349.260295][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.266681][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 349.273130][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 349.278291][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 349.284073][ T31] rfkill_set_block+0x1cf/0x440 [ 349.288946][ T31] rfkill_fop_write+0x44b/0x570 [ 349.294078][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 349.299511][ T31] ? security_kernfs_init_security+0x290/0x290 [ 349.306126][ T31] ? rw_verify_area+0x255/0x4d0 [ 349.311036][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.315934][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 349.321349][ T31] vfs_write+0x27b/0xb30 [ 349.325616][ T31] ? __pfx_vfs_write+0x10/0x10 [ 349.331025][ T31] ? __fget_files+0x2a/0x420 [ 349.335647][ T31] ? __fget_files+0x2a/0x420 [ 349.340400][ T31] ? __fget_files+0x3a0/0x420 [ 349.345103][ T31] ? __fget_files+0x2a/0x420 [ 349.349732][ T31] ksys_write+0x145/0x250 [ 349.354233][ T31] ? __pfx_ksys_write+0x10/0x10 [ 349.359170][ T31] ? rcu_is_watching+0x15/0xb0 [ 349.364402][ T31] ? do_syscall_64+0xbe/0x3b0 [ 349.369132][ T31] do_syscall_64+0xfa/0x3b0 [ 349.373704][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.379043][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.385186][ T31] ? clear_bhb_loop+0x60/0xb0 [ 349.389901][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.396269][ T31] RIP: 0033:0x7f9524d8ebe9 [ 349.400752][ T31] RSP: 002b:00007f9525ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.409233][ T31] RAX: ffffffffffffffda RBX: 00007f9524fc5fa0 RCX: 00007f9524d8ebe9 [ 349.417303][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 349.425734][ T31] RBP: 00007f9524e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 349.433765][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.441801][ T31] R13: 00007f9524fc6038 R14: 00007f9524fc5fa0 R15: 00007ffc414c7338 [ 349.449897][ T31] [ 349.453594][ T31] INFO: task syz.0.706:8603 blocked for more than 144 seconds. [ 349.466733][ T31] Not tainted syzkaller #0 [ 349.471799][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.481118][ T31] task:syz.0.706 state:D stack:26760 pid:8603 tgid:8594 ppid:5870 task_flags:0x400040 flags:0x00004004 [ 349.493303][ T31] Call Trace: [ 349.496610][ T31] [ 349.499579][ T31] __schedule+0x1798/0x4cc0 [ 349.504183][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.509093][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.514429][ T31] ? __pfx___schedule+0x10/0x10 [ 349.519351][ T31] ? schedule+0x91/0x360 [ 349.523652][ T31] schedule+0x165/0x360 [ 349.527873][ T31] schedule_preempt_disabled+0x13/0x30 [ 349.533570][ T31] __mutex_lock+0x7e6/0x1350 [ 349.538218][ T31] ? __mutex_lock+0x5bb/0x1350 [ 349.543446][ T31] ? rfkill_register+0x37/0x8e0 [ 349.548320][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.553409][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 349.558812][ T31] ? device_initialize+0x24b/0x440 [ 349.563970][ T31] rfkill_register+0x37/0x8e0 [ 349.568688][ T31] nfc_register_device+0x14a/0x320 [ 349.574269][ T31] nci_register_device+0x87f/0x9d0 [ 349.579401][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 349.585107][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 349.590439][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 349.595837][ T31] virtual_ncidev_open+0x129/0x1a0 [ 349.601591][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 349.607270][ T31] misc_open+0x2bc/0x330 [ 349.611716][ T31] chrdev_open+0x4cc/0x5e0 [ 349.616183][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 349.621219][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 349.627601][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 349.633002][ T31] do_dentry_open+0x953/0x13f0 [ 349.637795][ T31] vfs_open+0x3b/0x340 [ 349.641972][ T31] ? path_openat+0x2ecd/0x3830 [ 349.646767][ T31] path_openat+0x2ee5/0x3830 [ 349.651396][ T31] ? arch_stack_walk+0xfc/0x150 [ 349.656440][ T31] ? stack_depot_save_flags+0x40/0x860 [ 349.662582][ T31] ? __pfx_path_openat+0x10/0x10 [ 349.667553][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.673681][ T31] do_filp_open+0x1fa/0x410 [ 349.678194][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.683147][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 349.688218][ T31] ? _raw_spin_unlock+0x28/0x50 [ 349.693512][ T31] ? alloc_fd+0x64c/0x6c0 [ 349.697872][ T31] do_sys_openat2+0x121/0x1c0 [ 349.702627][ T31] ? __se_sys_futex+0x36f/0x400 [ 349.707511][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 349.712787][ T31] ? rcu_is_watching+0x15/0xb0 [ 349.717583][ T31] __x64_sys_openat+0x138/0x170 [ 349.723105][ T31] do_syscall_64+0xfa/0x3b0 [ 349.727634][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.732870][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.738941][ T31] ? clear_bhb_loop+0x60/0xb0 [ 349.743674][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.749597][ T31] RIP: 0033:0x7f97ad18ebe9 [ 349.754473][ T31] RSP: 002b:00007f97ae0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 349.762946][ T31] RAX: ffffffffffffffda RBX: 00007f97ad3c6090 RCX: 00007f97ad18ebe9 [ 349.771104][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 349.779107][ T31] RBP: 00007f97ad211e19 R08: 0000000000000000 R09: 0000000000000000 [ 349.787542][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.795550][ T31] R13: 00007f97ad3c6128 R14: 00007f97ad3c6090 R15: 00007fffce1a0398 [ 349.803602][ T31] [ 349.806659][ T31] INFO: task syz.3.713:8632 blocked for more than 144 seconds. [ 349.814684][ T31] Not tainted syzkaller #0 [ 349.819638][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.828401][ T31] task:syz.3.713 state:D stack:26824 pid:8632 tgid:8629 ppid:5875 task_flags:0x400040 flags:0x00004004 [ 349.840989][ T31] Call Trace: [ 349.844300][ T31] [ 349.847240][ T31] __schedule+0x1798/0x4cc0 [ 349.851898][ T31] ? kasan_save_free_info+0x46/0x50 [ 349.857124][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.862120][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.867119][ T31] ? __pfx___schedule+0x10/0x10 [ 349.873139][ T31] ? schedule+0x91/0x360 [ 349.877430][ T31] schedule+0x165/0x360 [ 349.881953][ T31] schedule_preempt_disabled+0x13/0x30 [ 349.887467][ T31] __mutex_lock+0x7e6/0x1350 [ 349.892191][ T31] ? __mutex_lock+0x5bb/0x1350 [ 349.896984][ T31] ? misc_open+0x51/0x330 [ 349.901523][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.906592][ T31] misc_open+0x51/0x330 [ 349.911046][ T31] chrdev_open+0x4cc/0x5e0 [ 349.915505][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 349.920510][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 349.926874][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 349.932633][ T31] do_dentry_open+0x953/0x13f0 [ 349.937474][ T31] vfs_open+0x3b/0x340 [ 349.942715][ T31] ? path_openat+0x2ecd/0x3830 [ 349.947541][ T31] path_openat+0x2ee5/0x3830 [ 349.952248][ T31] ? arch_stack_walk+0xfc/0x150 [ 349.957146][ T31] ? stack_depot_save_flags+0x40/0x860 [ 349.962712][ T31] ? __pfx_path_openat+0x10/0x10 [ 349.967675][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.974202][ T31] do_filp_open+0x1fa/0x410 [ 349.978716][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.983633][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 349.988737][ T31] ? _raw_spin_unlock+0x28/0x50 [ 349.993632][ T31] ? alloc_fd+0x64c/0x6c0 [ 349.997983][ T31] do_sys_openat2+0x121/0x1c0 [ 350.003405][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.008629][ T31] ? exc_page_fault+0x76/0xf0 [ 350.013641][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 350.018978][ T31] __x64_sys_openat+0x138/0x170 [ 350.023879][ T31] do_syscall_64+0xfa/0x3b0 [ 350.028744][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.034532][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.040637][ T31] ? clear_bhb_loop+0x60/0xb0 [ 350.045358][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.051437][ T31] RIP: 0033:0x7fc1bd58ebe9 [ 350.056077][ T31] RSP: 002b:00007fc1be3cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 350.065318][ T31] RAX: ffffffffffffffda RBX: 00007fc1bd7c5fa0 RCX: 00007fc1bd58ebe9 [ 350.073327][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 350.081428][ T31] RBP: 00007fc1bd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 350.089420][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.098106][ T31] R13: 00007fc1bd7c6038 R14: 00007fc1bd7c5fa0 R15: 00007ffc448d6398 [ 350.106195][ T31] [ 350.109254][ T31] INFO: task syz.3.713:8634 blocked for more than 144 seconds. [ 350.117065][ T31] Not tainted syzkaller #0 [ 350.122643][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.131382][ T31] task:syz.3.713 state:D stack:28328 pid:8634 tgid:8629 ppid:5875 task_flags:0x400040 flags:0x00004004 [ 350.143369][ T31] Call Trace: [ 350.146682][ T31] [ 350.149626][ T31] __schedule+0x1798/0x4cc0 [ 350.154590][ T31] ? kasan_save_free_info+0x46/0x50 [ 350.159807][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.164718][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.169584][ T31] ? __pfx___schedule+0x10/0x10 [ 350.174510][ T31] ? schedule+0x91/0x360 [ 350.178773][ T31] schedule+0x165/0x360 [ 350.183698][ T31] schedule_preempt_disabled+0x13/0x30 [ 350.189208][ T31] __mutex_lock+0x7e6/0x1350 [ 350.193913][ T31] ? __mutex_lock+0x5bb/0x1350 [ 350.198693][ T31] ? misc_open+0x51/0x330 [ 350.203124][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 350.208209][ T31] misc_open+0x51/0x330 [ 350.213041][ T31] chrdev_open+0x4cc/0x5e0 [ 350.217500][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 350.222506][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 350.228875][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 350.233852][ T31] do_dentry_open+0x953/0x13f0 [ 350.238637][ T31] vfs_open+0x3b/0x340 [ 350.243347][ T31] ? path_openat+0x2ecd/0x3830 [ 350.248147][ T31] path_openat+0x2ee5/0x3830 [ 350.252777][ T31] ? arch_stack_walk+0xfc/0x150 [ 350.257662][ T31] ? stack_depot_save_flags+0x40/0x860 [ 350.263210][ T31] ? __pfx_path_openat+0x10/0x10 [ 350.268176][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.274771][ T31] do_filp_open+0x1fa/0x410 [ 350.279287][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.284175][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 350.289231][ T31] ? _raw_spin_unlock+0x28/0x50 [ 350.294110][ T31] ? alloc_fd+0x64c/0x6c0 [ 350.298469][ T31] do_sys_openat2+0x121/0x1c0 [ 350.303851][ T31] ? __se_sys_futex+0x36f/0x400 [ 350.308724][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.313976][ T31] ? rcu_is_watching+0x15/0xb0 [ 350.318754][ T31] __x64_sys_openat+0x138/0x170 [ 350.323663][ T31] do_syscall_64+0xfa/0x3b0 [ 350.328192][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.334061][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.340163][ T31] ? clear_bhb_loop+0x60/0xb0 [ 350.344878][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.350848][ T31] RIP: 0033:0x7fc1bd58ebe9 [ 350.355285][ T31] RSP: 002b:00007fc1be3aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 350.364128][ T31] RAX: ffffffffffffffda RBX: 00007fc1bd7c6090 RCX: 00007fc1bd58ebe9 [ 350.372180][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 350.380185][ T31] RBP: 00007fc1bd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 350.388486][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.396924][ T31] R13: 00007fc1bd7c6128 R14: 00007fc1bd7c6090 R15: 00007ffc448d6398 [ 350.404972][ T31] [ 350.408028][ T31] INFO: task syz.3.713:8639 blocked for more than 145 seconds. [ 350.415616][ T31] Not tainted syzkaller #0 [ 350.421194][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.429880][ T31] task:syz.3.713 state:D stack:25480 pid:8639 tgid:8629 ppid:5875 task_flags:0x400140 flags:0x00004004 [ 350.441902][ T31] Call Trace: [ 350.445231][ T31] [ 350.448209][ T31] __schedule+0x1798/0x4cc0 [ 350.453163][ T31] ? kasan_save_free_info+0x46/0x50 [ 350.458400][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.463332][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.468233][ T31] ? __pfx___schedule+0x10/0x10 [ 350.473157][ T31] ? schedule+0x91/0x360 [ 350.477427][ T31] schedule+0x165/0x360 [ 350.482236][ T31] schedule_preempt_disabled+0x13/0x30 [ 350.487743][ T31] __mutex_lock+0x7e6/0x1350 [ 350.492592][ T31] ? __mutex_lock+0x5bb/0x1350 [ 350.497438][ T31] ? misc_open+0x51/0x330 [ 350.501877][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 350.506938][ T31] misc_open+0x51/0x330 [ 350.511733][ T31] chrdev_open+0x4cc/0x5e0 [ 350.516209][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 350.521196][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 350.527543][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 350.532544][ T31] do_dentry_open+0x953/0x13f0 [ 350.537345][ T31] vfs_open+0x3b/0x340 [ 350.541873][ T31] ? path_openat+0x2ecd/0x3830 [ 350.546654][ T31] path_openat+0x2ee5/0x3830 [ 350.551307][ T31] ? arch_stack_walk+0xfc/0x150 [ 350.556288][ T31] ? stack_depot_save_flags+0x40/0x860 [ 350.561822][ T31] ? __pfx_path_openat+0x10/0x10 [ 350.566790][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.573683][ T31] do_filp_open+0x1fa/0x410 [ 350.578250][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.583164][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 350.588226][ T31] ? _raw_spin_unlock+0x28/0x50 [ 350.593159][ T31] ? alloc_fd+0x64c/0x6c0 [ 350.597537][ T31] do_sys_openat2+0x121/0x1c0 [ 350.602733][ T31] ? __se_sys_futex+0x36f/0x400 [ 350.607599][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.612849][ T31] ? rcu_is_watching+0x15/0xb0 [ 350.617640][ T31] __x64_sys_openat+0x138/0x170 [ 350.622543][ T31] do_syscall_64+0xfa/0x3b0 [ 350.627077][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.632935][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.639029][ T31] ? clear_bhb_loop+0x60/0xb0 [ 350.643784][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.649709][ T31] RIP: 0033:0x7fc1bd58ebe9 [ 350.654319][ T31] RSP: 002b:00007fc1be389038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 350.663207][ T31] RAX: ffffffffffffffda RBX: 00007fc1bd7c6180 RCX: 00007fc1bd58ebe9 [ 350.671225][ T31] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 350.679218][ T31] RBP: 00007fc1bd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 350.687233][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.695652][ T31] R13: 00007fc1bd7c6218 R14: 00007fc1bd7c6180 R15: 00007ffc448d6398 [ 350.703730][ T31] [ 350.706786][ T31] INFO: task syz.2.712:8631 blocked for more than 145 seconds. [ 350.714430][ T31] Not tainted syzkaller #0 [ 350.719389][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.728492][ T31] task:syz.2.712 state:D stack:25432 pid:8631 tgid:8630 ppid:5879 task_flags:0x400140 flags:0x00004004 [ 350.740467][ T31] Call Trace: [ 350.743850][ T31] [ 350.746794][ T31] __schedule+0x1798/0x4cc0 [ 350.751949][ T31] ? kasan_save_free_info+0x46/0x50 [ 350.757193][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.762221][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.767105][ T31] ? __pfx___schedule+0x10/0x10 [ 350.772029][ T31] ? schedule+0x91/0x360 [ 350.776305][ T31] schedule+0x165/0x360 [ 350.781039][ T31] schedule_preempt_disabled+0x13/0x30 [ 350.786609][ T31] __mutex_lock+0x7e6/0x1350 [ 350.791262][ T31] ? __mutex_lock+0x5bb/0x1350 [ 350.796057][ T31] ? misc_open+0x51/0x330 [ 350.800457][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 350.805520][ T31] misc_open+0x51/0x330 [ 350.809688][ T31] chrdev_open+0x4cc/0x5e0 [ 350.814774][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 350.819762][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 350.826147][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 350.831147][ T31] do_dentry_open+0x953/0x13f0 [ 350.836033][ T31] vfs_open+0x3b/0x340 [ 350.840104][ T31] ? path_openat+0x2ecd/0x3830 [ 350.845323][ T31] path_openat+0x2ee5/0x3830 [ 350.849927][ T31] ? arch_stack_walk+0xfc/0x150 [ 350.854839][ T31] ? stack_depot_save_flags+0x40/0x860 [ 350.860409][ T31] ? __pfx_path_openat+0x10/0x10 [ 350.865401][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.872140][ T31] do_filp_open+0x1fa/0x410 [ 350.876764][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.881681][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 350.886784][ T31] ? _raw_spin_unlock+0x28/0x50 [ 350.891690][ T31] ? alloc_fd+0x64c/0x6c0 [ 350.896065][ T31] do_sys_openat2+0x121/0x1c0 [ 350.901377][ T31] ? __se_sys_futex+0x36f/0x400 [ 350.906289][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.911562][ T31] ? rcu_is_watching+0x15/0xb0 [ 350.916354][ T31] __x64_sys_openat+0x138/0x170 [ 350.921286][ T31] do_syscall_64+0xfa/0x3b0 [ 350.925822][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.931670][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.937762][ T31] ? clear_bhb_loop+0x60/0xb0 [ 350.942554][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.948446][ T31] RIP: 0033:0x7f1acb98ebe9 [ 350.952890][ T31] RSP: 002b:00007f1acc805038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 350.961775][ T31] RAX: ffffffffffffffda RBX: 00007f1acbbc5fa0 RCX: 00007f1acb98ebe9 [ 350.969768][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 350.978149][ T31] RBP: 00007f1acba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 350.986180][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.994739][ T31] R13: 00007f1acbbc6038 R14: 00007f1acbbc5fa0 R15: 00007ffc452818b8 [ 351.002766][ T31] [ 351.005810][ T31] [ 351.005810][ T31] Showing all locks held in the system: [ 351.013589][ T31] 1 lock held by khungtaskd/31: [ 351.018458][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 351.028801][ T31] 2 locks held by getty/5627: [ 351.033557][ T31] #0: ffff88814dc3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 351.043431][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 351.054451][ T31] 2 locks held by kworker/u8:40/6735: [ 351.059929][ T31] 3 locks held by kworker/1:7/7147: [ 351.065183][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 351.076271][ T31] #1: ffffc9001abf7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 351.090258][ T31] #2: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 351.101658][ T31] 2 locks held by syz.1.689/8513: [ 351.106734][ T31] #0: ffff8880270b0100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 351.116953][ T31] #1: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 351.127118][ T31] 2 locks held by syz.4.691/8525: [ 351.132287][ T31] #0: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 351.143035][ T31] #1: ffff8880270b0100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 351.152773][ T31] 3 locks held by syz.0.706/8603: [ 351.157815][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.166323][ T31] #1: ffff88804fca1100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 351.176556][ T31] #2: ffffffff8f813128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.186586][ T31] 1 lock held by syz.3.713/8632: [ 351.191572][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.200069][ T31] 1 lock held by syz.3.713/8634: [ 351.205493][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.214066][ T31] 1 lock held by syz.3.713/8639: [ 351.219020][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.227503][ T31] 1 lock held by syz.2.712/8631: [ 351.233090][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.241628][ T31] 1 lock held by syz-executor/8686: [ 351.246830][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.255337][ T31] 1 lock held by syz-executor/8687: [ 351.261007][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.269476][ T31] 1 lock held by syz-executor/8691: [ 351.274715][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.283298][ T31] 1 lock held by syz-executor/8692: [ 351.288508][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.297592][ T31] 1 lock held by syz-executor/8693: [ 351.303005][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.311543][ T31] 1 lock held by syz-executor/8700: [ 351.316755][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.325700][ T31] 1 lock held by syz-executor/8701: [ 351.331043][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.339536][ T31] 1 lock held by syz-executor/8705: [ 351.344790][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.353899][ T31] 1 lock held by syz-executor/8706: [ 351.359115][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.367630][ T31] 1 lock held by syz-executor/8707: [ 351.372878][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.381835][ T31] 1 lock held by syz-executor/8713: [ 351.387035][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.395605][ T31] 1 lock held by syz-executor/8715: [ 351.400835][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.409301][ T31] 1 lock held by syz-executor/8718: [ 351.415144][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.423665][ T31] 1 lock held by syz-executor/8719: [ 351.428862][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.437436][ T31] 1 lock held by syz-executor/8721: [ 351.443077][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 351.451592][ T31] [ 351.453946][ T31] ============================================= [ 351.453946][ T31] [ 351.462475][ T31] NMI backtrace for cpu 0 [ 351.462488][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.462504][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.462512][ T31] Call Trace: [ 351.462518][ T31] [ 351.462525][ T31] dump_stack_lvl+0x189/0x250 [ 351.462549][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.462567][ T31] ? __pfx__printk+0x10/0x10 [ 351.462597][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 351.462618][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 351.462639][ T31] ? __pfx__printk+0x10/0x10 [ 351.462663][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.462689][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 351.462710][ T31] watchdog+0xf93/0xfe0 [ 351.462734][ T31] ? watchdog+0x1de/0xfe0 [ 351.462759][ T31] kthread+0x70e/0x8a0 [ 351.462779][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.462798][ T31] ? __pfx_kthread+0x10/0x10 [ 351.462818][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.462838][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.462858][ T31] ? __pfx_kthread+0x10/0x10 [ 351.462876][ T31] ret_from_fork+0x3fc/0x770 [ 351.462893][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.462912][ T31] ? __switch_to_asm+0x39/0x70 [ 351.462930][ T31] ? __switch_to_asm+0x33/0x70 [ 351.462949][ T31] ? __pfx_kthread+0x10/0x10 [ 351.462967][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.462998][ T31] [ 351.463003][ T31] Sending NMI from CPU 0 to CPUs 1: [ 351.611026][ C1] NMI backtrace for cpu 1 [ 351.611045][ C1] CPU: 1 UID: 0 PID: 6735 Comm: kworker/u8:40 Not tainted syzkaller #0 PREEMPT(full) [ 351.611064][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.611075][ C1] Workqueue: bat_events batadv_nc_worker [ 351.611114][ C1] RIP: 0010:mark_lock+0x1/0x190 [ 351.611132][ C1] Code: df 48 8b 2c 24 e9 b0 fd ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 [ 351.611147][ C1] RSP: 0018:ffffc9001a17f8e0 EFLAGS: 00000046 [ 351.611160][ C1] RAX: 00000000ffffff05 RBX: 0000000000000002 RCX: 0000000000000002 [ 351.611172][ C1] RDX: 0000000000000008 RSI: ffff8880795c6540 RDI: ffff8880795c5a00 [ 351.611184][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b4789e2 [ 351.611194][ C1] R10: dffffc0000000000 R11: ffffffff8b478910 R12: 00000000ffffff05 [ 351.611206][ C1] R13: 0000000000000001 R14: ffff8880795c6540 R15: ffff8880795c6560 [ 351.611218][ C1] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 351.611231][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.611242][ C1] CR2: 00007ffed246df3c CR3: 000000000df36000 CR4: 00000000003526f0 [ 351.611257][ C1] Call Trace: [ 351.611264][ C1] [ 351.611272][ C1] __lock_acquire+0x6a8/0xd20 [ 351.611301][ C1] ? batadv_nc_worker+0xd2/0x610 [ 351.611322][ C1] lock_acquire+0x120/0x360 [ 351.611346][ C1] ? batadv_nc_worker+0xd2/0x610 [ 351.611371][ C1] ? batadv_nc_worker+0xd2/0x610 [ 351.611393][ C1] ? batadv_nc_worker+0xd2/0x610 [ 351.611424][ C1] batadv_nc_worker+0xef/0x610 [ 351.611446][ C1] ? batadv_nc_worker+0xd2/0x610 [ 351.611468][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 351.611485][ C1] process_scheduled_works+0xae1/0x17b0 [ 351.611515][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.611539][ C1] worker_thread+0x8a0/0xda0 [ 351.611568][ C1] kthread+0x70e/0x8a0 [ 351.611590][ C1] ? __pfx_worker_thread+0x10/0x10 [ 351.611606][ C1] ? __pfx_kthread+0x10/0x10 [ 351.611627][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.611650][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.611674][ C1] ? __pfx_kthread+0x10/0x10 [ 351.611694][ C1] ret_from_fork+0x3fc/0x770 [ 351.611712][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 351.611731][ C1] ? __switch_to_asm+0x39/0x70 [ 351.611753][ C1] ? __switch_to_asm+0x33/0x70 [ 351.611774][ C1] ? __pfx_kthread+0x10/0x10 [ 351.611794][ C1] ret_from_fork_asm+0x1a/0x30 [ 351.611823][ C1] [ 351.612137][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 351.869301][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.878423][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.888487][ T31] Call Trace: [ 351.891778][ T31] [ 351.894720][ T31] dump_stack_lvl+0x99/0x250 [ 351.899331][ T31] ? __asan_memcpy+0x40/0x70 [ 351.903959][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.909180][ T31] ? __pfx__printk+0x10/0x10 [ 351.913908][ T31] vpanic+0x281/0x750 [ 351.917937][ T31] ? __pfx_vpanic+0x10/0x10 [ 351.922479][ T31] ? preempt_schedule+0xae/0xc0 [ 351.927441][ T31] ? preempt_schedule_common+0x83/0xd0 [ 351.932935][ T31] panic+0xb9/0xc0 [ 351.936683][ T31] ? __pfx_panic+0x10/0x10 [ 351.941123][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 351.946524][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 351.952695][ T31] watchdog+0xfd2/0xfe0 [ 351.956879][ T31] ? watchdog+0x1de/0xfe0 [ 351.961232][ T31] kthread+0x70e/0x8a0 [ 351.965320][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.970016][ T31] ? __pfx_kthread+0x10/0x10 [ 351.974623][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.979837][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.985067][ T31] ? __pfx_kthread+0x10/0x10 [ 351.989670][ T31] ret_from_fork+0x3fc/0x770 [ 351.994278][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.999453][ T31] ? __switch_to_asm+0x39/0x70 [ 352.004328][ T31] ? __switch_to_asm+0x33/0x70 [ 352.009103][ T31] ? __pfx_kthread+0x10/0x10 [ 352.013715][ T31] ret_from_fork_asm+0x1a/0x30 [ 352.018521][ T31] [ 352.021878][ T31] Kernel Offset: disabled [ 352.026219][ T31] Rebooting in 86400 seconds..