last executing test programs: 20.394993851s ago: executing program 4 (id=1631): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x18, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x2, 0x27}}], 0x48}, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0xe3f}, {&(0x7f00000002c0)=""/177, 0xe0}], 0x3}, 0x4}], 0x4000000000000a0, 0x40010000, 0x0) (rerun: 32) 20.305938967s ago: executing program 3 (id=1634): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x303, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x5}}]}, 0x5c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000e40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b80)={0x298, r9, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d6c0de7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a77c628}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18e3043e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6af9fa11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x259df3ae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fab0a72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7144ebfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72960e25}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4820afe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79583985}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541fca1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xee70fbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bf991c2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x791f5348}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17425384}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0xa}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f7ada44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e19edfa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x697d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9241}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1afc3adc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2619b3b5}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52c90dbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4453}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ea4fb8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ebe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18c1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5965a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x325}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa500}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6279a6f2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x177e4851}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43157b5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20a7a2df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x654834fd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72fd6e}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4800}, 0x4040811) sendmsg$nl_route(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000006800020025bd7000fddbdf25000004001600000024000c800800020001000080080002000a00000008000300ce010000000002000200000014000600ff01000000000000000000000000000110a38c0a42dc61300bda8d9f1d000000"], 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x200008c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), r7) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r11, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 20.241888747s ago: executing program 2 (id=1635): r0 = socket$inet6(0xa, 0x5, 0x7fe) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x400c045, &(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x38}, 0xfffff7cb}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r6}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x4, 0x1a, 0x3, 0xfffffff8, 0xa4edcf5297f6789a, @loopback, @private1, 0x0, 0x70, 0x6, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0xfffffffffffffcf6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r11}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000b80)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'gre0\x00', 0x0, 0x10, 0x8000, 0xf48, 0x40000000, {{0x15, 0x4, 0x1, 0x17, 0x54, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @private=0xa010101, {[@end, @timestamp_prespec={0x44, 0x14, 0x9b, 0x3, 0x3, [{@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff6600}]}, @timestamp={0x44, 0x24, 0x56, 0x0, 0x5, [0x401, 0xf538, 0x8, 0x7, 0x7, 0x1, 0x3, 0x60f]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f0000000c80)={0x654, 0x0, 0x102, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffff16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x9, 0xb3, 0x8}, {0x4, 0x52, 0x9, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r9}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffd2f3}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r13}}}]}}]}, 0x654}, 0x1, 0x0, 0x0, 0x1e567d8b89dbd64a}, 0x8014) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltaction={0x80, 0x31, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}]}, 0x80}}, 0xd0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000006c0)="89e7ee0c7cdad9b4b4c57380c988cafbe863cac55dacae57868046e274bcc33635a24a7a3fd03a07f01529ac77968388eb34e5241c9ecf0a57a89bbf024ea2dca023f9826ca4fd2eed0d9b0dc79e72ec4a84ad02c284d4f076a04dc9d416de7792ac65fbaa9be79451ec7904ad7e1d50ab6f5d3f7dfa240c7c749938164a1144ccecfa4815eafd223a3b38642f4f471076f2af29ae25b43d0261a8fbd568cc2541b3f79561abba28db274c1c8cdaa66c21701e20e0835119ddf8667e44fe04bd7bc90c9aef787f80d39d2c757171c141", 0xd0}, {&(0x7f0000000000)="448b7cff03000000000000", 0x8}], 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000c60c11b454a0980001000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fbffffffffffffff000000000000000000000000fcffffffffffffff0000000000000000000000000001"], 0x90) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) accept4(r14, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800) 20.142999292s ago: executing program 3 (id=1638): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x300, 0x70bc29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0x2ea2a60aa6b2593b}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r1, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000e0ff0900030073797a32000000002c000000060a010400000000000000000100000008000b40000000000900010073797a30000000000400074014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r2, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c40)={0x294, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x98, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x54a}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9f}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc0}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x9, 0x0, 0x0, @empty, @loopback, 0x8000, 0x7, 0x0, 0x2}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x4, 0x0}, 0x8) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x8, r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x9, &(0x7f0000000500)=@raw=[@ldst={0x1, 0x2, 0x4, 0xc, 0x9, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @generic={0x8, 0x8, 0x4, 0x2, 0xf}], &(0x7f0000000400)='GPL\x00', 0x4, 0xbf, &(0x7f0000000580)=""/191, 0x41000, 0x49, '\x00', r7, @cgroup_sock_addr=0x1d, r8, 0x8, &(0x7f0000000840)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xa, 0x9, 0x4}, 0x10, r9, r6, 0x2, &(0x7f0000000980)=[r2, r10, r5, r5, r5, r5, 0xffffffffffffffff, r5, r5], &(0x7f00000009c0)=[{0x5, 0x1, 0x6, 0x1}, {0x4, 0x5, 0xb, 0x9}], 0x10, 0x3}, 0x94) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.908136808s ago: executing program 3 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x2) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendto$inet6(r2, &(0x7f0000001400)="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", 0x2c5, 0x6d91fb6102dc910c, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000000000000000001ff020000000000000000000000000001010390787f00000060e1f588000700ffff010000000000000000000000000001ff020000000000000000000000000009"], 0x0) sendmmsg(r2, &(0x7f0000009b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="0f86", 0x2}], 0x1}}], 0x1, 0x4061) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19.496662351s ago: executing program 4 (id=1645): r0 = socket(0x2, 0x80805, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x34008058) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x60, 0x1409, 0x200, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4010001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 17.794977739s ago: executing program 1 (id=1646): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc11000012000102000000080000000000000000bf401db100"/56, @ANYRES32, @ANYRESOCT, @ANYRESDEC], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 17.775480611s ago: executing program 2 (id=1647): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x7, 0x10000}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000040)={{r0}, "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"}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f00000010c0)={0x244, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_IE={0x211, 0x2a, [@random={0x3, 0xc4, "5f2da1600026c21adb2f88beceb7d5465748849ed1bf4f24037380b004d47aefdd1d2c9ab12c2317ec2d904fb723ab799f831c6ba5f1d55e501b3f29281571c8641ebe72823af085d23cbf7de9219a8be546cb396dd6874a1100217e05273ef9c16e04953206e932a3d0c2dd41f40fe6e7f22518cb192562e228bce752fb319187ad31efe65b8e1c4dfe0992363427c85f0204baea0406a7299928f7f8806266f636bee77483deb4e08321305b8e8754d6ba77237ec3107f17f89353f0a5b69bd021f074"}, @mic={0x8c, 0x18, {0xb5f, "c0cc0c0f304f", @long="5cb3fb4f3e9e6074182a97174b37d682"}}, @ht={0x2d, 0x1a, {0xc, 0x1, 0x0, 0x0, {0x1ff, 0xe, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x2}, 0x800, 0x3, 0x8}}, @cf={0x4, 0x6, {0xc9, 0x6, 0x1, 0x100}}, @measure_req={0x26, 0x62, {0x7, 0x3, 0x7f, "af5553ca3ac7ee5910f2bcb2e37b492e43f92cdcec5edb338feacc91cf760c58e71edb5358dcb3f7a85b50d273b530381824425fbf34050289682723864de959b9569ffbfcd10ef5d432275de4b210c8a95d433d4bee7863fd9fd4c6553fa1"}}, @random={0x13, 0x9d, "68e397882a082fcfaed5250e325e605b5343a017ec5dd39d245641963a9f0015e7734d1135cf9e8475afeeb6397d7c8e350b3591593547f14cbb5d24933130c88fa0915b34524b21ecdf2b2bae2442f5a41acf4f492a7d69267648cee48df5776561ce134422dff8cb1ab76229c5b9dfa5e96aa19aa51e88fc1322e761d675ca5284eecb9ea4a15032df707b5e007b2f4f8207ed7bf3718a1b627ece6b"}, @chsw_timing={0x68, 0x4, {0x8, 0x401}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x2c}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x10}]}, 0x244}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, 0xe, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x20000005) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000021c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002180)={&(0x7f0000001540)={0xbd8, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0c]}, @NL80211_ATTR_CONTROL_PORT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @beacon=[@NL80211_ATTR_BEACON_TAIL={0x9e, 0xf, [@chsw_timing={0x68, 0x4, {0x8, 0x2}}, @mic={0x8c, 0x18, {0x585, "827410781d8c", @long="974739234f749eef44672d8bbb032d60"}}, @mic={0x8c, 0x18, {0xab7, "84a23e2fe67c", @long="60b6794d83ca39a2df65d6c0a07584d6"}}, @supported_rates={0x1, 0x4, [{0xc}, {0x48, 0x1}, {0x12, 0x1}, {0x30}]}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ht={0x2d, 0x1a, {0x2000, 0x0, 0x2, 0x0, {0x16, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x2}, 0x300, 0x767, 0x40}}, @cf={0x4, 0x6, {0x7f, 0x5, 0x4, 0x1ff}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x2, @device_b, 0x8, @value, 0x8, 0x7, @device_a, 0x80}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9}}]}, @NL80211_ATTR_FTM_RESPONDER={0x140, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x76, 0x3, "f1da3621faff4141a2e745dd5a7451d2cb49530491ad92b24f9e96e3c70b37e26a1b34c33588b5ecea2228651757bc5620edc4437a78eed053a403eff086bf37214907c8c54fec1006655eca59ac6029e34b8dc426314c913154a0f9d3ee07b8a882f007058547704de5fd130200ff324182"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc1, 0x3, "51ad2e7cca0fb1f512366ffe698ef498edaec4db9678955bcbb13828dc29f3b5a07d3a2e5e4dd04f0b775cd7a0f4460ed171272172b21e3c01f4197507ba403fbc1d41bbd30d02c9b58e961b68c3d979d295503efe34d76f16e2bfb46b23fa90ce364f39702017d2d99b775e199c3b753ca7b79c64bf9b4021d7a7884f317a141326ed02f61fe676299d21874f4e214f64dd66cdb1ec3f3f11cc2af7e0b177e109314a97ebcee76379b377de7c166017bcd112a75ce4980f89943acb0a"}]}, @NL80211_ATTR_IE={0x5d, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @mic={0x8c, 0x18, {0x596, "7534f5f3e044", @long="4471f25ad1671cd817dd779accc2b064"}}, @tim={0x5, 0x16, {0x3, 0x35, 0x10, "5715fdafade2f1f8f316b4b62f8bb699800dc8"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0xd5, 0x1, @device_a, 0x2, 0xff}}]}, @NL80211_ATTR_PROBE_RESP={0x430, 0x91, "9ade679bb9d9551eb905ed93cbda02013a9cf8c5031b494cabfcbb3fc4fb92281a8b902b1a056e718b2bbd38028c1faba0e634e6df8be12cd1a192014299e376b3218dae3c72a5fcc1e92593c0e67eff92dd30e11dd8d202d80dd56dd2b76648206164b23c16d613638846a4cc7950d185009e880501ad9ea61f76716b0bdd7d4d4b9a2c52ef799b8541239686c5527516db93edc9c01f3b74a688e9400a25f5d55d61aff266d11e108274ee85b295411744774c69af42e31fc742111778f66ffd5238e0c028b245cb467211276c4504a3d46e6cb905cecfb53c6d8ea3878330b9887193885fbe736164605ae22c38a9b0fc329205f2eebf707a3d5c852618e6a49938e8252093c86cd516c429d6caf433aee1689aec1bd8704f9e5118882cb030b7660877f92e7fbba9654a345ce940edf62109c076d120aab407e72bb72d9ce5ce4482b62e965989a9428648516a549dd59340cd7874991537f1dfd4ffa39b414eb13ee4e68e6198f37699464c89fb985f609889ac2db9d317f46a9f5c488721bf71bea0d8da4815043812ace0478435e9b059c7931050420e9155119bd8786219d2b3d43feabd5dfcf5d70b906e025ba20f4dee32789d490763266567bcc68cae2f4533cc29f65bfe4358712f34c782a5ae1d79d0b247809751e1bc2cccce1710a1b34f315e1c1d1f08ef8b6f0033a5ee7e6574cc391fed4fa8d24d3dfd9fc588130f09a0bfb170d4ff0303568d875779237e304eb81706f54897200b51394c49ab91157cdd13cb87045481a43fc5313d7f8ea5a152ca1bc69e817c77ae1a1ad39bea1434588737d5ed9ccebebbce01dfecac6dfcaa656ac88ba8035888053305704d1a22972e9e02cbbdbad601dd373913b55a2e33395d54333a94d874a486298a7b9ef81db9e49150f6f6be07e86d56a650498204aceaa7067aac9057faa5c298eccb6c8fd13a68a2523c8f9b6b5593fbef8ca741c2cb3269c88e71d98f64bf554c64c546db2690ab2f9fb63941c72a373546e16bcf15d26faf634eac82131cd1000cf26b3789a32dd7a70ea2e3a9abfe6a736f6dd3c2a60849fab064d590079d71cb46eb49a1613d2e84e27e15e33cd57dbf4c84df78b2e5177cf9c68bd9905ae4a7e293845d79076f036510f50ebab66597e44c92503916a7dc04d5f84ea3d107ee6314b32e7c2181aeb5215e164c65a0dc03f4c802743273c3e6a560683ac711cc00c5173a818db47ecd4dbbb3156d0b3935fa077d3c54e346e68732959e428bae88adefe2c39f68977e19619ba8324bf16f18c86dec787cad245aedb6b2d85d7ee0db8d552c2e4fcc16e5f4d0390265653f05a4092b487652df2bdcb907d2e0d61b08dab641ccb014186d72efc458dff8917e19f31afa4a8ce73d5a0138e8d80d212980d44de51c90abd3e16bc37598941c43ae461af93e72808705fd7b5ed2aa5e2dcad0b87d14da69b2c078a0548ca343e334500487a39641a90bc41382094ae942e0ddbc0b57"}, @NL80211_ATTR_FTM_RESPONDER={0x294, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd7, 0x2, "b4592a131baf5ac39cd0332706af6d0697f60069b15928a117dc377be7cc0845d327820103d74e6ebeab54e6e72a5c6f409cb4649d027836ca506dfdda8bb9f7608417cb0c8218adc0d00799055fa783881649c68f8291d58885abb86f152de72c0152c8b681451ce045993334369247804af74f9e5b89463b69f35ccca35f455a29454556e0d531a7541b18fa41861c87fd6da4a7d4e8024d54bd6316cdbc2c0e0955662fea7c608889bdf39b793ff6d7164a63aa4410f10894d0abb0a788325b12ce1428dbc891ace7a678a303b0400523ee"}, @NL80211_FTM_RESP_ATTR_LCI={0xd2, 0x2, "0debdd99f96beb7aec21f8fd3a810b85b3f8167fcdecb952e91f0ac5fb342759cf837036fc48c9eab5b958b24d6c6fa5f234d5640288b9c61f91b3b7488602d23eb4ddd2041ae17504cac30fbaa222517cb2c882853dd48bbe7124634005d3503dc13823bda81cbbc47b2d168219f52f90dc478d356f60daf408754413f21b12d1c61553bbc43f67d4a899ffa5296eda5d7efa5c411c1b4b41b58145d703f3d101a4b0809ad76f4a7413f9c4d1cf4c2ce0ca5b9793b42b461f407fc6e39553fff410cf2e684cbf518205ebe1fbb8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6, 0x3, 'XX'}, @NL80211_FTM_RESP_ATTR_LCI={0x2e, 0x2, "ce5213dfa2ea589bcdc53166efdfb84f22c1be166381875d8904061236a02440562a94a791dc76b2a669"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xac, 0x3, "5f5fbf15f9e9a5e46bd9410782c7d83ac9ea9624f225e8dbd7ace54ad1021324bf46c00f962984a81fd556eb14368ea5976afc1a78d4a099d99b1cd609ced7ceb087f9825a43b25831d7c440a3cf9b7b8dcf7d8c043c2a69d712e1186ff3c129eae39b14fa48864ba6c6f205fda459e922d960a7f1d80dce3a0923ba040824249fd78eec46f9ccc5c1c25b35673e5af32746404a11d965c66587f043cd43b8589346c19f26e88cda"}]}, @NL80211_ATTR_BEACON_TAIL={0x193, 0xf, [@perr={0x84, 0x116, {0x3, 0x12, [{{}, @broadcast, 0x81, @void, 0xa}, {{}, @device_b, 0x1, @void, 0x22}, {{0x0, 0x1}, @device_b, 0xa44a, @value=@device_b, 0x2b}, {{0x0, 0x1}, @device_a, 0xb00, @value=@device_b, 0x7}, {{}, @device_a, 0x0, @void, 0x2c}, {{}, @device_a, 0x3, @void, 0x1c}, {{}, @device_a, 0x7, @void, 0x19}, {{}, @device_a, 0xf, @void, 0x1a}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x7}, {{}, @device_b, 0x1, @void, 0x38}, {{}, @device_b, 0x1, @void, 0x2e}, {{}, @broadcast, 0x36d1, @void, 0x3c}, {{}, @device_b, 0x6, @void, 0x39}, {{}, @device_b, 0x6, @void, 0x37}, {{0x0, 0x1}, @broadcast, 0xd6, @value, 0x28}, {{0x0, 0x1}, @device_a, 0x200, @value=@broadcast, 0x3e}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @broadcast, 0x7}]}}, @chsw_timing={0x68, 0x4, {0xfff8, 0x8a6c}}, @fast_bss_trans={0x37, 0x6f, {0x8, 0x4, "245f58cb0b4ca4449413c515c90a150a", "274b3473db4d83cf19f4c7b2d6669f633037636608de69b49302d0a8c136a31e", "aa08bc2f451ffbfb4ef0131b48850524d47839d697c093bc47566df693a53bdb", [{0x3, 0xa, "1b129d57ea5bc4de4dfb"}, {0x3, 0x1, "12"}, {0x2, 0x3, "7cfea8"}, {0x1, 0x7, "d69cf9274332fc"}]}}]}, @NL80211_ATTR_IE={0x3d, 0x2a, [@measure_req={0x26, 0xf, {0x7, 0x10, 0x4, "76d9280386b0a6e27a6b6911"}}, @mic={0x8c, 0x18, {0xe0e, "4e4abbe8d928", @long="bd7797554fbf758f5809d9e25dcc7e02"}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x40}}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1b, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}]}], @NL80211_ATTR_PBSS={0x4}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x18000}, 0x20040000) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000002200), &(0x7f0000002280)=0x6e, 0x800) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = gettid() r7 = getgid() r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000004840)='devices.allow\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004880)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000004980)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000049c0)={0x0, 0x0, 0x0}, &(0x7f0000004a00)=0xc) r11 = socket$rds(0x15, 0x5, 0x0) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004a40)={0xffffffffffffffff, 0x0, 0x25, 0xe, @void}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004a80)={0x0}, &(0x7f0000004ac0)=0xc) r14 = getuid() r15 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004dc0)={0x0, 0x0, 0x0}, &(0x7f0000004e00)=0xc) r17 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004e40)={0x0, 0x0}, &(0x7f0000004e80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004ec0)={0x0, 0x0, 0x0}, &(0x7f0000004f00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004f40)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000005040)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005080)={0x0, 0x0, 0x0}, &(0x7f00000050c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005440)={0x0}, &(0x7f0000005480)=0xc) sendmmsg$unix(r4, &(0x7f00000057c0)=[{{&(0x7f00000022c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004780)=[{&(0x7f0000002340)="b721d14aa36fe351870dec87c246cbaf4be637eebeba17952897d3825989d325444aafd140c4637d634128d2872d885c2f8d827169738da63b122770a259d3fd5346971ecf1c0f1777ac36e0b4c47e834ce504e5dee6e863a56ef9c810da231799ddf3790be56d7b1fab41e42f4d042755eab6a84380cdf30f35cb076f46460dd89125da7ee8c52ce4272cd7f2d3f7718b63ebe40d7ff24ca8f20b4952c82c119515d0341155cb49bed7b0a6f65d969c13beed49bcc9f0054a67b4d178", 0xbd}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="7a157b70cf4b95686ecc37888e209fc4e7a0b507be58336e490f701566b308d68aa74dc0241db08c3a9cfe3e832281dcd15919d3c11d51c79aba5beb33eca216510e811160c10f2ccd598fac1f331bae8d95ecf4511d36afa89b9891c28db7e7fc182d490931f13bd5cd6d7fb6a2dfd143dff7fde9f2b452475311d29383ca0a00b6b4364ed9632320b5c0e902d3c6095ce8f9fddd2edd6eaf5a8faeb88fbac70d21d6380b4eb3", 0xa7}, {&(0x7f00000034c0)="c04a340ea454d5d73efad5658e2fb80b71c8f96462b933", 0x17}, {&(0x7f0000003500)="8b08151f896162d4b8a4e9a1c73450a9779fb7f24f05150141f2c7db4ce1b4185cd52d7871177f036aca77a9d23b6ecac1243fdeec1d43141ed463b89887d40f76715852b8707b28246cc8a025119f5a026864d023c7", 0x56}, {&(0x7f0000003580)="3b5993e1d10c924159ba3d0523", 0xd}, {&(0x7f00000035c0)="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", 0x1000}, {&(0x7f00000045c0)="61faf247ed9bdb49dc970254d5bb49540dd605155160498dec9c92ec144e", 0x1e}, {&(0x7f0000004600)="ec676183b6dfb97707c3c19a2b6fa39b9fcc1d100fa0baec1379f9adec007f17086306ecac49e50edfc3305642ffa4b5f919a0a425e50b724ea662248857bd8375ddf92489b1ad07726920f9", 0x4c}, {&(0x7f0000004680)="45b557ac94375830d9e0175f19db0583c27895455548266ab6df2225fff70b03dd136e112c4372a804795c88ab7c6daa3c5085c775483e2249e9335c6e892cca5dcdd2f5a23e53de24407b6e6fc60a1fce3d424dc6ad5c80922e046488733c3d8221426dafaf0b1b681d4fed7c8565a4820149ba529c8d90fc9172771049204b47ea8223353b51aba809b11fd4052756d96f133b9574c8d16647ecf964c5e24ac7a3f933ebf7646353fb616e56671056b78cb1fbaa83694ac3c9cdd385413d82004aa1526a017c6cdb60a377", 0xcc}], 0xa, &(0x7f0000004b00)=[@rights={{0x18, 0x1, 0x1, [r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r7}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r2, r2, r8, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r11, r0, r12]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0xe8, 0x80}}, {{&(0x7f0000004c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004c80)="a673db7499f38763fb623a706f7614a8e65ceac8b061b3e4c31e6a7195352aae255f9aedf9e423c6cce24afca975a593cb750871b08e50657b923cb9993f463475777e1f7a84c507fb84c7d68e05302c06a112c49186addd566cf451791f2cf7cf8d7b8381af3f27da2a7fd1a8cfbac4a0fa3ea862677b7edc6101afa548eb3034423483689bef1da5a9df59453ab276c18a6687c02e1b85878ce241b19823c7905c7a948384640f1016ef688fae6ff78bc19f26f41bf416837d9ca558f8cf59c863957723777bd6977d73185c71d97cd4a2ee2e5819efed492e", 0xda}], 0x1, &(0x7f0000005100)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r20, r21}}}], 0x60, 0x80}}, {{&(0x7f0000005180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005400)=[{&(0x7f0000005200)="e0ef5d5371c0d81cc9fcef61eb3ae640250e3b0cb3944529490dd994560783f5ddb4f587d66c0441e099186c6231b3cf9908723bef9888f9c1fd9e67bcbb675d05fd66a2551c8eea2d", 0x49}, {&(0x7f0000005280)="af29842ac2d5603f4d6ffe5aafac069865a460df445ac745467aade9ab0d561e3efb0bb1818206eac4c4754cc76692252f93f90221a324ba56b57691c16f23aeb07d5c4ca07eadecf20bdc6e9bfab9e5586e28438cf7abfadfd6aa2427b518092e05e55f2010bc04fccd36cde1a2c28a0b1854eb06c7c6572d6012bc76695bd2bb5e", 0x82}, {&(0x7f0000005340)="f477cbe707de1c8850de49061ca028f71b16ada7a06804852303b01d15372411667e4e0782f6ef34465cbc1a422065e999b969ecbf5b2194d89e6c5ee9ce0fe3cde94177378dbb66c5a565077e065b4897bfca5c190fd86503a718db8b7cfa74fd2f794cdd678909b7281e9c8e3755e15d99f8e9cdeff4ee1277bd93b48af5d8897f16e17cf7b96afe6e763d74ca7f696a37c7bacb4b5f5c5f524f8496d9a213c8c36335642057c8045390d1b5bc951808423506494b022f09172a49f623", 0xbe}], 0x3, &(0x7f0000005740)=[@cred={{0x1c, 0x1, 0x2, {r22, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2]}}], 0x60, 0x800}}], 0x3, 0x0) 17.686607818s ago: executing program 1 (id=1649): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x4004031) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x2c, 0x40, 0xb, 0xa, 0x400001, 0x81}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000080)=0x5, 0xfffffe63) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r1, @ANYRES32=r3, @ANYBLOB="01000000000000000000080000001800018014000ebc82c779020073797a5f74756e000000000000000000180002800800020011000000040001000800042ec5c75330d76b20bf038c1a657f8490cb403fc6e5f524023e886f3e01ce5dbdcf5c84d282f6e0e14d5cc1cd4809e87509c6e518f121c845f33537e409001885e6063dfecc087a6018846f5afe03a834d387d09d9ebf8bae9299c70bb0956698ea784108e1eee1da4a87954d0109c2f0833d69bb7640ff30cc724d3458502ba87ca65712525b7ebc5bafb46fc84ba6bd7647d5024b78b9e3a3ae40b62609dc698f04dfad5a91802a7c04"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8890) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r3, @ANYBLOB="a183000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, 0x0) 17.685824481s ago: executing program 3 (id=1650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3f}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) 17.628522017s ago: executing program 4 (id=1651): syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000000000000000080045000014000000000004907800000000005aeca2863ca9a2747e1726607e795c000000000000000018907804000000000000000000000000200000"], 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r0}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, 0x140f, 0x200, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x8000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) r3 = socket(0x10, 0x80002, 0xfff) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc2, 0x3, 'ext4_writepages_resu\x00\x00\x00dQ\xc6yYR\xfd\\\xbf\x1c\xcesb\xe8\xed\xba@\xe6\xf7\xd8\"\xc6\xc0\x192\xd4:\xfd\x1d\x92\xe8BM\xe6\xb4\x8a\x19U\x18\x0f\x1f\xdf%\xd8}\xf5\xd9~\fd7\xc6\xf4\xd0;&!\x9c\xc89\xb2\x03\xfbE1\xed\xfe\xa1PN\xcdoQV\xd3[\\j\x0e\xfb\x88S`C\xa3\xb0\xa7`\x0evH\t+\xcb=\xe6d\xfe\x9c\xee\x88\x94#{\x8fTG\xa5Qz\x17\x05aW=\x94\xd4\xea\xfb+\xa0x\xda\x83d@\xdcq\xbd\x82\x9e<\xff&\xdd\xb3z\xb5\xd7\xcc\x8f\x1di\x18H\xe8\x13\xfaU\a)g5\xae\xd3!\xbc~\xfc\x11\xa8\xe2\xb2\xe6\xaeU\x85'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000000c0)=0x1004, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r6) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x148}, 0x10) write(r10, &(0x7f0000000480)="240000001e005f0214fffffffffffff8070000e6b700000000000001080008001d000000", 0x54) 17.574871319s ago: executing program 2 (id=1652): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}}, 0x8014) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008840) (async, rerun: 32) r0 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300021c0000000000000000000000120008003804000045ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b407000000b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db3900030006000000000002000000ac14140000000000000000000200010000000000000006fc0000000003000500000000000200"/224], 0xe0}, 0x1, 0x7}, 0x0) (async) socket(0x2a, 0x5, 0x4) 17.486754376s ago: executing program 0 (id=1653): r0 = socket(0x2b, 0x80801, 0x1) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa8, r4, 0x100, 0x70bd2c, 0x8, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6c46}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) 17.482955343s ago: executing program 3 (id=1654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000200)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast1}}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x42}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10004}) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r11, 0x6, 0x3, 0x0, &(0x7f0000004cc0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3, @ANYRESOCT=r7, @ANYRES16=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}}, 0x20048014) 17.395486622s ago: executing program 4 (id=1655): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1028200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9000}, 0x4004080) 17.38528966s ago: executing program 0 (id=1656): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 17.322676011s ago: executing program 2 (id=1657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r2}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) (async) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r2}, 0x38) (async) 17.290130493s ago: executing program 4 (id=1658): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0xf}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x43, 0x0, 0x0, 0x25dfdbfb, {0x81}, [@generic="749e4e6ab13eef481aeb3f3773250261440b0fe3227f03d2bfa7ca27b3910bf8f9e6397e473cc78ecf2550"]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 17.219664773s ago: executing program 2 (id=1659): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="bf5dba82feb3"}]}, 0x44}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 17.130776424s ago: executing program 3 (id=1660): socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x4) (async) recvmmsg$unix(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x10001, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r4, &(0x7f0000001dc0)=""/4096, 0x1000, 0x2, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xfefffff8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES64=r6], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="91cc4c0000930be26626c892b6bc4315", 0x10) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 17.130111144s ago: executing program 0 (id=1661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x200}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) 17.128061804s ago: executing program 4 (id=1662): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) sendto(r3, 0x0, 0x0, 0x4008044, 0x0, 0x0) (async, rerun: 32) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x84, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x8e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x44, 0x4, 0x1, 0x1c, 0x5e, 0x68, 0x0, 0xfa, 0x29, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x8b, 0x1, 0x1, [{@broadcast, 0x2}, {@rand_addr=0x64010101, 0xff}, {@rand_addr=0x64010100, 0x6}, {@local, 0x7}]}, @timestamp={0x44, 0x10, 0x98, 0x0, 0xb, [0xe, 0x5, 0x6]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x0, 0x8, "b93a85c9d2ac"}, {0x1f76b0e78c8a9006, 0xc, "ec2009043d2436e96e8b"}, {0x1, 0x3, "87"}, {0x1, 0xe, "946e2e2855e1ca0756b2292f"}, {0x1, 0xc, "4479a4f8bb43a7e80fd1"}, {0x7, 0x6, "972b4ade"}]}, @timestamp_prespec={0x44, 0x24, 0x6b, 0x3, 0x3, [{@rand_addr=0x64010101, 0xfff}, {@multicast2, 0x7ff}, {@loopback, 0xb}, {@empty, 0x81}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x12, 0x1, [{0x1, 0x6, "f71b5f9b"}, {0x7, 0x3, "e2"}, {0x0, 0x3, "de"}]}, @timestamp={0x44, 0x14, 0x24, 0x0, 0xb, [0x2, 0x6, 0x3, 0xc367]}, @lsrr={0x83, 0xf, 0x96, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0xf, 0x38}, @timestamp_addr={0x44, 0x1c, 0xe3, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@multicast2, 0x3c50a2fd}, {@local, 0x8}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', r8, 0x29, 0x2, 0x81, 0x100, 0x12, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1, 0x7, 0x8000, 0xff, 0x2}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f00000000c0)=0x2, 0x4) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x1d4, 0x24, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe6}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x5, 0x3, 0x40, 0x1, 0x73, 0x2, 0x4}}, {0xc, 0x2, [0x3, 0xc, 0x9, 0x7]}}, {{0x1c, 0x1, {0x5, 0x23, 0x1, 0x2, 0x0, 0x8, 0x7ff, 0x5}}, {0xe, 0x2, [0x7, 0x2c, 0x100, 0x5, 0xe630]}}, {{0x1c, 0x1, {0x6, 0x3, 0x54e7, 0xa222, 0x0, 0x3ff, 0x43fb, 0xa}}, {0x18, 0x2, [0xc425, 0x9, 0x90, 0x8, 0x401, 0x3, 0x2, 0x1, 0x2, 0x7fff]}}, {{0x1c, 0x1, {0x7, 0x81, 0x1, 0x8, 0x2, 0x6, 0x0, 0x5}}, {0xe, 0x2, [0x3c, 0x4, 0x6, 0x2, 0x6]}}, {{0x1c, 0x1, {0x6, 0x3, 0xb, 0x4, 0x2, 0x2000, 0xf6d, 0x9}}, {0x16, 0x2, [0x8f5, 0x8001, 0x3, 0x2f, 0xfdf1, 0x9, 0x61, 0x7, 0x7fff]}}, {{0x1c, 0x1, {0x0, 0x3, 0x5, 0x80000000, 0x0, 0x4f, 0x8000, 0x1}}, {0x6, 0x2, [0xfffc]}}, {{0x1c, 0x1, {0x8, 0x0, 0x100, 0x5, 0x0, 0x5, 0x7, 0x6}}, {0x10, 0x2, [0x5, 0x16, 0x3, 0xdbb, 0xa25d, 0x3]}}, {{0x1c, 0x1, {0x80, 0xe, 0xe0, 0x1, 0x1, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0x401, 0x81]}}, {{0x1c, 0x1, {0x6, 0x6, 0x7fff, 0x8, 0x2, 0x40, 0x4, 0x7}}, {0x12, 0x2, [0x7f, 0xe23, 0x8, 0x0, 0xa, 0x100, 0x0]}}]}]}, 0x1d4}}, 0x4000) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xd, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 16.997687148s ago: executing program 2 (id=1663): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x1, 0x6, @random="5d614f134629"}, 0x10) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) close(r2) (async) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000042450000000c0000000c000000020000000200000000000300a2613110c782bacec615356a2b0738d90000000000006f01c089e8c4d7724350abface965160d68d675bea986541aa47ac8a2536dbd22a4779141e7e594d8e55dc0f901c9f2f13cbb645c938429ca5ae0d55e1be79cf16712d62a01bc87d506d8e9328167a4c28711fd96ca5d8209648674eb29d981d9be7f11d1bed20237fe1a83f1b7e6f6e84b5b700"], 0x0, 0x26, 0x0, 0x1, 0x7fffffff}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000042450000000c0000000c000000020000000200000000000300a2613110c782bacec615356a2b0738d90000000000006f01c089e8c4d7724350abface965160d68d675bea986541aa47ac8a2536dbd22a4779141e7e594d8e55dc0f901c9f2f13cbb645c938429ca5ae0d55e1be79cf16712d62a01bc87d506d8e9328167a4c28711fd96ca5d8209648674eb29d981d9be7f11d1bed20237fe1a83f1b7e6f6e84b5b700"], 0x0, 0x26, 0x0, 0x1, 0x7fffffff}, 0x28) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000ac0)='memory.pressure\x00', 0x2, 0x0) preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f00000002c0)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2506000800020008000000040001800800020004000000050005000000000008000400ff7f00000000e403248975ece140ace0da1284d0c6144a566aad0e983bfa42a13eb7a878"], 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x44000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r11, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r10, @ANYRES32=r10, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r10, @ANYRES32=r10, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x20000000) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 16.831745602s ago: executing program 0 (id=1664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f489f3a36974b5802bfc29879d4113168746071b041a23e46b640e5fa555f56888b560cf923bbe6077e4ecd3f2e0b81a9412283d99fae83944dc64149acda0a45ab1debde722a8ef9c870a9d90caf211bb92f3f212b8b9d60a7eb8ad50c363446267d496569c2b078fef35838446cb2d58d812cbf3c535511bdfb62a91eadf1cd46f69cdc34d4a00"/173], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) 16.674539178s ago: executing program 1 (id=1665): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r2, 0x952dc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, 0xffffffffffffffff, 0x26}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xf, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 16.584202934s ago: executing program 0 (id=1666): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r3}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010000000000000000000200001000000000000000000500190033000000a9a1b63ac70213eaaa7ec49fa7f742a966b6b0ae0d32376f6285002edbca8fdd684bb2b2378349789d96e4e6d973e49f79d71cb08e07a30c43d1346ecfbdd3c720c60a8fbd776d3d4938c20437e24c5848a557735eaccd08523a3fa78c37cd444310c01e5f58ff80ba8a09b283fd0aff413689e0"], 0x24}}, 0x48850) 16.558731977s ago: executing program 1 (id=1667): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000200)=0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) connect$packet(r1, &(0x7f0000000080)={0x11, 0x15, r2, 0x1, 0x2, 0x6, @multicast}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x1}) write$cgroup_devices(r3, 0x0, 0xffdd) 16.40267078s ago: executing program 0 (id=1668): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000440)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010102, @in=@empty, 0x4e20, 0x4, 0x4e20, 0x8c28, 0x0, 0xe0, 0x20, 0x21, r3, r4}, {0x100, 0x8, 0x6, 0xfffffffffffff266, 0xffffffffffffff87, 0x2, 0x6021, 0x8001}, {0x3, 0xffffffffffffffff, 0x7dfb, 0x6}, 0x5, 0x6e6bb6, 0x1, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3504, 0x0, 0x2, 0x0, 0xfffffffa, 0x3, 0x200}}, 0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000081}, 0x4) 16.343995216s ago: executing program 1 (id=1669): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @broadcast, 0x15, 0xa}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 16.192673622s ago: executing program 1 (id=1670): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110}}], 0x28}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 1.213567614s ago: executing program 32 (id=1668): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000440)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010102, @in=@empty, 0x4e20, 0x4, 0x4e20, 0x8c28, 0x0, 0xe0, 0x20, 0x21, r3, r4}, {0x100, 0x8, 0x6, 0xfffffffffffff266, 0xffffffffffffff87, 0x2, 0x6021, 0x8001}, {0x3, 0xffffffffffffffff, 0x7dfb, 0x6}, 0x5, 0x6e6bb6, 0x1, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3504, 0x0, 0x2, 0x0, 0xfffffffa, 0x3, 0x200}}, 0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000081}, 0x4) 1.165898154s ago: executing program 33 (id=1663): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x1, 0x6, @random="5d614f134629"}, 0x10) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) close(r2) (async) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000042450000000c0000000c000000020000000200000000000300a2613110c782bacec615356a2b0738d90000000000006f01c089e8c4d7724350abface965160d68d675bea986541aa47ac8a2536dbd22a4779141e7e594d8e55dc0f901c9f2f13cbb645c938429ca5ae0d55e1be79cf16712d62a01bc87d506d8e9328167a4c28711fd96ca5d8209648674eb29d981d9be7f11d1bed20237fe1a83f1b7e6f6e84b5b700"], 0x0, 0x26, 0x0, 0x1, 0x7fffffff}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000042450000000c0000000c000000020000000200000000000300a2613110c782bacec615356a2b0738d90000000000006f01c089e8c4d7724350abface965160d68d675bea986541aa47ac8a2536dbd22a4779141e7e594d8e55dc0f901c9f2f13cbb645c938429ca5ae0d55e1be79cf16712d62a01bc87d506d8e9328167a4c28711fd96ca5d8209648674eb29d981d9be7f11d1bed20237fe1a83f1b7e6f6e84b5b700"], 0x0, 0x26, 0x0, 0x1, 0x7fffffff}, 0x28) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000ac0)='memory.pressure\x00', 0x2, 0x0) preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f00000002c0)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2506000800020008000000040001800800020004000000050005000000000008000400ff7f00000000e403248975ece140ace0da1284d0c6144a566aad0e983bfa42a13eb7a878"], 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x44000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r11, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r10, @ANYRES32=r10, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r10, @ANYRES32=r10, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x20000000) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 1.101104592s ago: executing program 34 (id=1660): socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x4) (async) recvmmsg$unix(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x10001, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r4, &(0x7f0000001dc0)=""/4096, 0x1000, 0x2, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xfefffff8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES64=r6], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="91cc4c0000930be26626c892b6bc4315", 0x10) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1.031733565s ago: executing program 35 (id=1662): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) sendto(r3, 0x0, 0x0, 0x4008044, 0x0, 0x0) (async, rerun: 32) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x84, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x8e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x44, 0x4, 0x1, 0x1c, 0x5e, 0x68, 0x0, 0xfa, 0x29, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x8b, 0x1, 0x1, [{@broadcast, 0x2}, {@rand_addr=0x64010101, 0xff}, {@rand_addr=0x64010100, 0x6}, {@local, 0x7}]}, @timestamp={0x44, 0x10, 0x98, 0x0, 0xb, [0xe, 0x5, 0x6]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x0, 0x8, "b93a85c9d2ac"}, {0x1f76b0e78c8a9006, 0xc, "ec2009043d2436e96e8b"}, {0x1, 0x3, "87"}, {0x1, 0xe, "946e2e2855e1ca0756b2292f"}, {0x1, 0xc, "4479a4f8bb43a7e80fd1"}, {0x7, 0x6, "972b4ade"}]}, @timestamp_prespec={0x44, 0x24, 0x6b, 0x3, 0x3, [{@rand_addr=0x64010101, 0xfff}, {@multicast2, 0x7ff}, {@loopback, 0xb}, {@empty, 0x81}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x12, 0x1, [{0x1, 0x6, "f71b5f9b"}, {0x7, 0x3, "e2"}, {0x0, 0x3, "de"}]}, @timestamp={0x44, 0x14, 0x24, 0x0, 0xb, [0x2, 0x6, 0x3, 0xc367]}, @lsrr={0x83, 0xf, 0x96, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0xf, 0x38}, @timestamp_addr={0x44, 0x1c, 0xe3, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@multicast2, 0x3c50a2fd}, {@local, 0x8}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', r8, 0x29, 0x2, 0x81, 0x100, 0x12, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1, 0x7, 0x8000, 0xff, 0x2}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f00000000c0)=0x2, 0x4) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x1d4, 0x24, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe6}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x5, 0x3, 0x40, 0x1, 0x73, 0x2, 0x4}}, {0xc, 0x2, [0x3, 0xc, 0x9, 0x7]}}, {{0x1c, 0x1, {0x5, 0x23, 0x1, 0x2, 0x0, 0x8, 0x7ff, 0x5}}, {0xe, 0x2, [0x7, 0x2c, 0x100, 0x5, 0xe630]}}, {{0x1c, 0x1, {0x6, 0x3, 0x54e7, 0xa222, 0x0, 0x3ff, 0x43fb, 0xa}}, {0x18, 0x2, [0xc425, 0x9, 0x90, 0x8, 0x401, 0x3, 0x2, 0x1, 0x2, 0x7fff]}}, {{0x1c, 0x1, {0x7, 0x81, 0x1, 0x8, 0x2, 0x6, 0x0, 0x5}}, {0xe, 0x2, [0x3c, 0x4, 0x6, 0x2, 0x6]}}, {{0x1c, 0x1, {0x6, 0x3, 0xb, 0x4, 0x2, 0x2000, 0xf6d, 0x9}}, {0x16, 0x2, [0x8f5, 0x8001, 0x3, 0x2f, 0xfdf1, 0x9, 0x61, 0x7, 0x7fff]}}, {{0x1c, 0x1, {0x0, 0x3, 0x5, 0x80000000, 0x0, 0x4f, 0x8000, 0x1}}, {0x6, 0x2, [0xfffc]}}, {{0x1c, 0x1, {0x8, 0x0, 0x100, 0x5, 0x0, 0x5, 0x7, 0x6}}, {0x10, 0x2, [0x5, 0x16, 0x3, 0xdbb, 0xa25d, 0x3]}}, {{0x1c, 0x1, {0x80, 0xe, 0xe0, 0x1, 0x1, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0x401, 0x81]}}, {{0x1c, 0x1, {0x6, 0x6, 0x7fff, 0x8, 0x2, 0x40, 0x4, 0x7}}, {0x12, 0x2, [0x7f, 0xe23, 0x8, 0x0, 0xa, 0x100, 0x0]}}]}]}, 0x1d4}}, 0x4000) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xd, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 36 (id=1670): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110}}], 0x28}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. [ 82.950271][ T5851] cgroup: Unknown subsys name 'net' [ 83.079793][ T5851] cgroup: Unknown subsys name 'cpuset' [ 83.090252][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.923355][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.314863][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.324840][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.333661][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.342261][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.363624][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.372069][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.380270][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.390891][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.400710][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.404671][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.417059][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.425031][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.458457][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.466957][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.474820][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.482802][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.483424][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.491054][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.509340][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.528461][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.578747][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.593290][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.602748][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.612261][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.620729][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.169867][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 90.312380][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 90.404899][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 90.420657][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 90.544535][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 90.583185][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.590541][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.598329][ T5872] bridge_slave_0: entered allmulticast mode [ 90.606080][ T5872] bridge_slave_0: entered promiscuous mode [ 90.648761][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.656202][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.663413][ T5872] bridge_slave_1: entered allmulticast mode [ 90.671266][ T5872] bridge_slave_1: entered promiscuous mode [ 90.763932][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.771342][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.779117][ T5866] bridge_slave_0: entered allmulticast mode [ 90.787001][ T5866] bridge_slave_0: entered promiscuous mode [ 90.818023][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.831385][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.849236][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.856646][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.864480][ T5866] bridge_slave_1: entered allmulticast mode [ 90.873708][ T5866] bridge_slave_1: entered promiscuous mode [ 90.908099][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.915503][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.922682][ T5861] bridge_slave_0: entered allmulticast mode [ 90.931768][ T5861] bridge_slave_0: entered promiscuous mode [ 90.990432][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.997886][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.006069][ T5861] bridge_slave_1: entered allmulticast mode [ 91.014055][ T5861] bridge_slave_1: entered promiscuous mode [ 91.077501][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.084678][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.093143][ T5863] bridge_slave_0: entered allmulticast mode [ 91.101153][ T5863] bridge_slave_0: entered promiscuous mode [ 91.126698][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.138933][ T5872] team0: Port device team_slave_0 added [ 91.162001][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.171509][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.179568][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.186954][ T5863] bridge_slave_1: entered allmulticast mode [ 91.194204][ T5863] bridge_slave_1: entered promiscuous mode [ 91.203815][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.228823][ T5872] team0: Port device team_slave_1 added [ 91.247754][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.254883][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.262552][ T5880] bridge_slave_0: entered allmulticast mode [ 91.271609][ T5880] bridge_slave_0: entered promiscuous mode [ 91.281947][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.336293][ T5861] team0: Port device team_slave_0 added [ 91.342411][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.349964][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.357268][ T5880] bridge_slave_1: entered allmulticast mode [ 91.364716][ T5880] bridge_slave_1: entered promiscuous mode [ 91.413183][ T5861] team0: Port device team_slave_1 added [ 91.466686][ T5866] team0: Port device team_slave_0 added [ 91.476986][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.487245][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.494227][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.496373][ T51] Bluetooth: hci1: command tx timeout [ 91.526080][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.528496][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.544078][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.570694][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.581732][ T51] Bluetooth: hci3: command tx timeout [ 91.585474][ T5865] Bluetooth: hci2: command tx timeout [ 91.587699][ T51] Bluetooth: hci0: command tx timeout [ 91.614428][ T5866] team0: Port device team_slave_1 added [ 91.637337][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.655797][ T51] Bluetooth: hci4: command tx timeout [ 91.664456][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.672177][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.698205][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.717788][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.724785][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.752484][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.767229][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.781047][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.819221][ T5863] team0: Port device team_slave_0 added [ 91.828727][ T5863] team0: Port device team_slave_1 added [ 91.872007][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.879484][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.905649][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.918641][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.925724][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.951710][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.994267][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.001404][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.027741][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.040617][ T5880] team0: Port device team_slave_0 added [ 92.050069][ T5880] team0: Port device team_slave_1 added [ 92.090967][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.098091][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.124782][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.248321][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.256219][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.283259][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.307861][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.314862][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.341278][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.370285][ T5872] hsr_slave_0: entered promiscuous mode [ 92.380166][ T5872] hsr_slave_1: entered promiscuous mode [ 92.393560][ T5861] hsr_slave_0: entered promiscuous mode [ 92.401090][ T5861] hsr_slave_1: entered promiscuous mode [ 92.407917][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 92.413772][ T5861] Cannot create hsr debugfs directory [ 92.604185][ T5863] hsr_slave_0: entered promiscuous mode [ 92.612773][ T5863] hsr_slave_1: entered promiscuous mode [ 92.624610][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 92.631283][ T5863] Cannot create hsr debugfs directory [ 92.683132][ T5866] hsr_slave_0: entered promiscuous mode [ 92.691088][ T5866] hsr_slave_1: entered promiscuous mode [ 92.706126][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 92.711924][ T5866] Cannot create hsr debugfs directory [ 92.801095][ T5880] hsr_slave_0: entered promiscuous mode [ 92.807688][ T5880] hsr_slave_1: entered promiscuous mode [ 92.813781][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 92.820180][ T5880] Cannot create hsr debugfs directory [ 93.348477][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.370404][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.392642][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.412649][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.461644][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.472808][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.490281][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.524968][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.585681][ T51] Bluetooth: hci1: command tx timeout [ 93.610047][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.621557][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.643879][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.655093][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.666426][ T5871] Bluetooth: hci3: command tx timeout [ 93.666438][ T5865] Bluetooth: hci0: command tx timeout [ 93.677417][ T51] Bluetooth: hci2: command tx timeout [ 93.738485][ T51] Bluetooth: hci4: command tx timeout [ 93.809290][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.858353][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.891213][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.909111][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.923761][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.990764][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.029782][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.052581][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.059937][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.107849][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.115027][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.131840][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.150424][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.162117][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.190440][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.230299][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.263565][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.280422][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.287726][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.308356][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.315590][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.488358][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.568752][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.593709][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.601062][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.659536][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.666783][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.779566][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.818720][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.826098][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.875150][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.882383][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.899538][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.959398][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.053476][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.080025][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.100137][ T5861] veth0_vlan: entered promiscuous mode [ 95.140678][ T5861] veth1_vlan: entered promiscuous mode [ 95.163622][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.170919][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.189798][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.197136][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.353445][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.428843][ T5861] veth0_macvtap: entered promiscuous mode [ 95.497435][ T5861] veth1_macvtap: entered promiscuous mode [ 95.584650][ T5872] veth0_vlan: entered promiscuous mode [ 95.623210][ T5872] veth1_vlan: entered promiscuous mode [ 95.638132][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.657586][ T51] Bluetooth: hci1: command tx timeout [ 95.694489][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.735638][ T51] Bluetooth: hci2: command tx timeout [ 95.736559][ T5865] Bluetooth: hci0: command tx timeout [ 95.746702][ T5871] Bluetooth: hci3: command tx timeout [ 95.766373][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.776286][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.799091][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.818660][ T5865] Bluetooth: hci4: command tx timeout [ 95.826924][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.870506][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.954448][ T5872] veth0_macvtap: entered promiscuous mode [ 95.970318][ T5872] veth1_macvtap: entered promiscuous mode [ 96.057793][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.071075][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.091949][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.134998][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.183197][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.192082][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.200323][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.220243][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.244175][ T5880] veth0_vlan: entered promiscuous mode [ 96.251980][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.263108][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.304006][ T5880] veth1_vlan: entered promiscuous mode [ 96.314988][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.342701][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.358944][ T5863] veth0_vlan: entered promiscuous mode [ 96.442455][ T5863] veth1_vlan: entered promiscuous mode [ 96.519396][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.547185][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.590999][ T5880] veth0_macvtap: entered promiscuous mode [ 96.629327][ T5866] veth0_vlan: entered promiscuous mode [ 96.638969][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 96.654352][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.667180][ T5880] veth1_macvtap: entered promiscuous mode [ 96.702128][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.715088][ T5866] veth1_vlan: entered promiscuous mode [ 96.726188][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.813480][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.839645][ T5863] veth0_macvtap: entered promiscuous mode [ 96.869650][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.899216][ T5863] veth1_macvtap: entered promiscuous mode [ 96.929057][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.969605][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.987751][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.020107][ T5866] veth0_macvtap: entered promiscuous mode [ 97.070723][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.124854][ T5866] veth1_macvtap: entered promiscuous mode [ 97.140223][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.149650][ T5998] warning: `syz.1.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.198940][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.258343][ T978] cfg80211: failed to load regulatory.db [ 97.279560][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.303797][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.350288][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.402282][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.420179][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.442074][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.486990][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.490257][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 97.532200][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.569354][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.599800][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 97.626735][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.626794][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.648832][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.661945][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.700323][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.735834][ T5865] Bluetooth: hci1: command tx timeout [ 97.817469][ T5865] Bluetooth: hci2: command tx timeout [ 97.823633][ T5865] Bluetooth: hci0: command tx timeout [ 97.829798][ T5871] Bluetooth: hci3: command tx timeout [ 97.895499][ T5865] Bluetooth: hci4: command tx timeout [ 97.993463][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.005419][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.137485][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.155039][ T6024] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 98.174868][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.193803][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.219659][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.253516][ T6020] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 98.292039][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.322883][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.451120][ T6024] sctp: failed to load transform for md5: -2 [ 98.763874][ T6044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.984481][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.060217][ T6052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.092234][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.267734][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31'. [ 100.293984][ T6115] Zero length message leads to an empty skb [ 100.383657][ T6123] sctp: [Deprecated]: syz.2.29 (pid 6123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.383657][ T6123] Use struct sctp_sack_info instead [ 101.029334][ T6144] netlink: 80 bytes leftover after parsing attributes in process `syz.0.41'. [ 101.059241][ T6148] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 101.071932][ T6148] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 101.364129][ T6159] netlink: 244 bytes leftover after parsing attributes in process `syz.0.44'. [ 101.460797][ T6159] tipc: Started in network mode [ 101.482974][ T6159] tipc: Node identity fa5e350c26cc, cluster identity 4711 [ 101.494853][ T6159] tipc: Enabled bearer , priority 0 [ 101.501508][ T6164] netlink: 'syz.1.49': attribute type 8 has an invalid length. [ 101.540003][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 101.542561][ T6159] tipc: Resetting bearer [ 101.563271][ T6167] netlink: 'syz.3.48': attribute type 10 has an invalid length. [ 101.573113][ T6164] tipc: Enabling not permitted [ 101.583528][ T6164] tipc: Enabling of bearer rejected, failed to enable media [ 101.598587][ T6167] veth1_macvtap: left promiscuous mode [ 101.683219][ T6159] tipc: Disabling bearer [ 102.194696][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 102.589768][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'. [ 102.638161][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.60'. [ 102.695083][ T6222] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.63'. [ 102.935105][ T6231] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.65'. [ 102.974105][ T6228] syzkaller1: entered promiscuous mode [ 103.015174][ T6228] syzkaller1: entered allmulticast mode [ 103.024242][ T6235] netlink: 72 bytes leftover after parsing attributes in process `syz.2.66'. [ 103.223123][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 103.510381][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.70'. [ 103.684308][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74'. [ 103.778894][ T6266] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.785659][ T6266] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.913959][ T6268] tipc: Enabled bearer , priority 0 [ 104.038512][ T6268] tipc: Resetting bearer [ 104.182493][ T6267] tipc: Disabling bearer [ 104.293572][ T6280] geneve2: entered promiscuous mode [ 104.349604][ T6280] geneve2: entered allmulticast mode [ 104.420727][ T6291] sctp: [Deprecated]: syz.0.83 (pid 6291) Use of int in max_burst socket option. [ 104.420727][ T6291] Use struct sctp_assoc_value instead [ 104.920523][ T6314] netlink: 'syz.4.89': attribute type 2 has an invalid length. [ 105.316474][ T6310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.464565][ T6315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.569443][ T6320] netlink: 'syz.3.91': attribute type 5 has an invalid length. [ 105.752535][ T6315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.757028][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.95'. [ 105.774346][ T6329] syzkaller0: entered promiscuous mode [ 105.780765][ T6329] syzkaller0: entered allmulticast mode [ 105.900818][ T6315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.179243][ T6315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.481209][ T1110] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.557213][ T1110] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.650645][ T6372] tipc: Started in network mode [ 106.655934][ T6372] tipc: Node identity 2ee641faef39, cluster identity 4711 [ 106.664500][ T6372] tipc: Enabled bearer , priority 0 [ 106.679835][ T1147] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.690631][ T6374] syzkaller0: entered promiscuous mode [ 106.700544][ T6374] syzkaller0: entered allmulticast mode [ 106.741163][ T1165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.774486][ T6378] bond0: option mode: unable to set because the bond device has slaves [ 106.783591][ T6382] bond0: option mode: unable to set because the bond device has slaves [ 106.820115][ T6372] tipc: Resetting bearer [ 106.833414][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.851714][ T6371] tipc: Resetting bearer [ 106.892281][ T6371] tipc: Disabling bearer [ 107.003925][ T6392] openvswitch: netlink: Message has 5 unknown bytes. [ 107.254211][ T6401] netlink: 'syz.0.112': attribute type 11 has an invalid length. [ 107.283206][ T6401] netlink: 'syz.0.112': attribute type 11 has an invalid length. [ 107.302189][ T6401] __nla_validate_parse: 3 callbacks suppressed [ 107.302208][ T6401] netlink: 224 bytes leftover after parsing attributes in process `syz.0.112'. [ 107.718602][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 107.728558][ T6421] syzkaller1: entered promiscuous mode [ 107.734092][ T6421] syzkaller1: entered allmulticast mode [ 107.757789][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 107.964366][ T6434] netlink: 9 bytes leftover after parsing attributes in process `syz.2.120'. [ 108.181187][ T6438] bond1: entered promiscuous mode [ 108.191374][ T6438] bond1: entered allmulticast mode [ 108.198673][ T6438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.330423][ T30] audit: type=1107 audit(1757995168.715:2): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ºôù•'Pcä‹Ú^Qñ˜ U÷¶Æ@õw”;[n×¾ ÓÊû5ÈŒ>‹-z½˜O%Å‚4Â` [ 108.330423][ T30] Я!€°1æ€BmamŠ´¬È‰·˜fQ 2'¸ÅÕÏ8x´ó?«îC q_¿vlµé>T [ 108.330423][ T30] ä*: ²®Ëb Hõ3y˜Klˆ„·óÛGN¸I”3‰æ‹çT«ëÒp­QxïÃnØ™' [ 108.445767][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 108.720467][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.126'. [ 108.905929][ T6472] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 108.932123][ T6472] netlink: 16110 bytes leftover after parsing attributes in process `syz.2.131'. [ 109.078288][ T6481] netlink: 'syz.4.134': attribute type 3 has an invalid length. [ 109.115564][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'. [ 109.299974][ T6490] sctp: [Deprecated]: syz.3.137 (pid 6490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.299974][ T6490] Use struct sctp_sack_info instead [ 109.730676][ T6500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.877589][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.886177][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.931008][ T6506] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 109.997082][ T6508] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 110.047673][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 110.070191][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 110.178705][ T43] IPVS: starting estimator thread 0... [ 110.275409][ T6516] IPVS: using max 27 ests per chain, 64800 per kthread [ 110.288528][ T6515] IPVS: lc: FWM 3 0x00000003 - no destination available [ 110.314818][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 110.795488][ T6539] netlink: 'syz.0.153': attribute type 21 has an invalid length. [ 110.808069][ T6539] netlink: 'syz.0.153': attribute type 5 has an invalid length. [ 110.998938][ T6543] Bluetooth: MGMT ver 1.23 [ 111.443174][ T6571] sock: sock_set_timeout: `syz.1.163' (pid 6571) tries to set negative timeout [ 111.579599][ T6577] netlink: 'syz.0.166': attribute type 9 has an invalid length. [ 111.677420][ T6532] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.687561][ T6577] netlink: 'syz.0.166': attribute type 9 has an invalid length. [ 111.703859][ T6532] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.720700][ T6532] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.793104][ T6532] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.250069][ T6606] IPv6: sit1: Disabled Multicast RS [ 112.253755][ T6608] openvswitch: netlink: Actions may not be safe on all matching packets [ 112.519309][ T6621] sock: sock_set_timeout: `syz.1.180' (pid 6621) tries to set negative timeout [ 112.567693][ T6621] bridge0: port 3(geneve1) entered blocking state [ 112.590886][ T6621] bridge0: port 3(geneve1) entered disabled state [ 112.601291][ T6621] geneve1: entered allmulticast mode [ 112.647034][ T6621] geneve1: entered promiscuous mode [ 112.666171][ T6628] __nla_validate_parse: 15 callbacks suppressed [ 112.666190][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.181'. [ 112.666817][ T6621] bridge0: port 3(geneve1) entered blocking state [ 112.688244][ T6621] bridge0: port 3(geneve1) entered forwarding state [ 113.052910][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 113.118534][ T6648] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 113.176167][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 113.225732][ T6650] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 113.244978][ T6648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.261835][ T6650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.310918][ T6651] bond2: (slave geneve2): making interface the new active one [ 113.342764][ T6651] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 113.573088][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.605547][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.614651][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.626417][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.680234][ T6672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.085554][ T6685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.197'. [ 114.683256][ T6704] tipc: Enabled bearer , priority 0 [ 114.701352][ T6704] syzkaller0: entered promiscuous mode [ 114.720688][ T6704] syzkaller0: entered allmulticast mode [ 114.742182][ T6704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 114.856002][ T6703] tipc: Resetting bearer [ 114.964910][ T6703] tipc: Disabling bearer [ 114.997716][ T6717] lo: Caught tx_queue_len zero misconfig [ 115.024964][ T6717] tipc: Enabled bearer , priority 0 [ 115.178292][ T6717] syzkaller0: entered promiscuous mode [ 115.184018][ T6717] syzkaller0: entered allmulticast mode [ 115.191051][ T6717] tipc: Resetting bearer [ 115.231060][ T6716] tipc: Resetting bearer [ 115.348910][ T6732] netlink: 76 bytes leftover after parsing attributes in process `syz.4.208'. [ 115.914863][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 116.076293][ T43] tipc: Node number set to 3700569356 [ 116.830708][ T6716] tipc: Disabling bearer [ 117.350462][ T6779] netlink: 92 bytes leftover after parsing attributes in process `syz.1.222'. [ 117.538436][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.225'. [ 117.612730][ T6789] netlink: 144 bytes leftover after parsing attributes in process `syz.2.226'. [ 117.747902][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.227'. [ 117.852379][ T6802] sit0: Caught tx_queue_len zero misconfig [ 117.922749][ T6792] netlink: 9 bytes leftover after parsing attributes in process `syz.1.227'. [ 117.948968][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 117.965830][ T6792] gretap0: entered promiscuous mode [ 118.004880][ T6792] netlink: 5 bytes leftover after parsing attributes in process `syz.1.227'. [ 118.162486][ T6814] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 118.177827][ T6814] bond1: (slave vcan1): Error -95 calling set_mac_address [ 118.194838][ T6792] 0ªî{X¹¦: renamed from gretap0 [ 118.211346][ T6792] 0ªî{X¹¦: left promiscuous mode [ 118.216832][ T6792] 0ªî{X¹¦: entered allmulticast mode [ 118.231006][ T6792] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 118.450998][ T6822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.499046][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 118.549699][ T6835] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 118.632382][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 118.644622][ T6838] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 118.655195][ T6841] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 118.684944][ T6838] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 118.696706][ T6838] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 118.721866][ T6841] netlink: 148 bytes leftover after parsing attributes in process `syz.4.239'. [ 118.734521][ T6838] netlink: 188 bytes leftover after parsing attributes in process `syz.1.238'. [ 118.746198][ T6838] NCSI netlink: No device for ifindex 830110067 [ 118.828171][ T6836] netlink: 'syz.3.237': attribute type 4 has an invalid length. [ 119.095545][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 119.454513][ T6880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.249'. [ 119.582028][ T6885] netlink: 32 bytes leftover after parsing attributes in process `syz.0.251'. [ 119.846659][ T6901] ip6tnl0: Caught tx_queue_len zero misconfig [ 120.081970][ T6911] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 120.093880][ T6902] team0: Device wireguard0 is of different type [ 120.505777][ T6925] IPVS: Error joining to the multicast group [ 120.885201][ T6938] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 120.891786][ T6938] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 121.014148][ T6943] netlink: 'syz.1.269': attribute type 9 has an invalid length. [ 121.046740][ T6944] sctp: [Deprecated]: syz.0.268 (pid 6944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.046740][ T6944] Use struct sctp_sack_info instead [ 121.053622][ T6946] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 121.111698][ T6943] netlink: 'syz.1.269': attribute type 9 has an invalid length. [ 121.134901][ T6946] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 121.158534][ T6949] syz.4.271: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 121.182101][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.4.271 Not tainted syzkaller #0 PREEMPT(full) [ 121.182130][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.182157][ T6949] Call Trace: [ 121.182166][ T6949] [ 121.182176][ T6949] dump_stack_lvl+0x189/0x250 [ 121.182256][ T6949] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 121.182292][ T6949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.182319][ T6949] ? __pfx__printk+0x10/0x10 [ 121.182352][ T6949] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 121.182379][ T6949] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 121.182415][ T6949] warn_alloc+0x214/0x310 [ 121.182452][ T6949] ? stack_depot_save_flags+0x40/0x860 [ 121.182491][ T6949] ? __pfx_warn_alloc+0x10/0x10 [ 121.182537][ T6949] ? kasan_save_track+0x4f/0x80 [ 121.182567][ T6949] ? xskq_create+0x56/0x170 [ 121.182591][ T6949] ? xsk_init_queue+0xb0/0x110 [ 121.182609][ T6949] ? xsk_setsockopt+0x4dc/0x8d0 [ 121.182641][ T6949] ? do_sock_setsockopt+0x179/0x1b0 [ 121.182666][ T6949] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 121.182692][ T6949] ? do_syscall_64+0xfa/0x3b0 [ 121.182716][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.182752][ T6949] __vmalloc_node_range_noprof+0x125/0x12f0 [ 121.182823][ T6949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.182866][ T6949] ? __kasan_kmalloc+0x93/0xb0 [ 121.182902][ T6949] vmalloc_user_noprof+0xad/0xf0 [ 121.182935][ T6949] ? xskq_create+0xbf/0x170 [ 121.182958][ T6949] xskq_create+0xbf/0x170 [ 121.182983][ T6949] xsk_init_queue+0xb0/0x110 [ 121.183008][ T6949] xsk_setsockopt+0x4dc/0x8d0 [ 121.183045][ T6949] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.183080][ T6949] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.183120][ T6949] ? aa_sock_opt_perm+0xff/0x1b0 [ 121.183146][ T6949] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 121.183170][ T6949] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.183223][ T6949] do_sock_setsockopt+0x179/0x1b0 [ 121.183256][ T6949] __x64_sys_setsockopt+0x13f/0x1b0 [ 121.183291][ T6949] do_syscall_64+0xfa/0x3b0 [ 121.183315][ T6949] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.183337][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.183360][ T6949] ? clear_bhb_loop+0x60/0xb0 [ 121.183387][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.183409][ T6949] RIP: 0033:0x7f47ded8eba9 [ 121.183437][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.183456][ T6949] RSP: 002b:00007f47dfb9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.183479][ T6949] RAX: ffffffffffffffda RBX: 00007f47defd5fa0 RCX: 00007f47ded8eba9 [ 121.183495][ T6949] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 121.183509][ T6949] RBP: 00007f47dee11e19 R08: 0000000000000004 R09: 0000000000000000 [ 121.183523][ T6949] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.183537][ T6949] R13: 00007f47defd6038 R14: 00007f47defd5fa0 R15: 00007ffeb5ee03b8 [ 121.183573][ T6949] [ 121.183681][ T6949] Mem-Info: [ 121.258218][ T6532] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.309440][ T6949] active_anon:5662 inactive_anon:0 isolated_anon:0 [ 121.309440][ T6949] active_file:2825 inactive_file:39868 isolated_file:0 [ 121.309440][ T6949] unevictable:768 dirty:26 writeback:0 [ 121.309440][ T6949] slab_reclaimable:10538 slab_unreclaimable:95680 [ 121.309440][ T6949] mapped:29190 shmem:1355 pagetables:1164 [ 121.309440][ T6949] sec_pagetables:0 bounce:0 [ 121.309440][ T6949] kernel_misc_reclaimable:0 [ 121.309440][ T6949] free:1330134 free_pcp:17318 free_cma:0 [ 121.462335][ T6532] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.520606][ T6949] Node 0 active_anon:22648kB inactive_anon:0kB active_file:11300kB inactive_file:159272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116560kB dirty:104kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11852kB pagetables:4412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.555161][ T6532] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.618987][ T6949] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.649918][ T6949] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.654565][ T6955] netlink: zone id is out of range [ 121.692100][ T6949] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 121.698508][ T6949] Node 0 DMA32 free:1423172kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22604kB inactive_anon:0kB active_file:11300kB inactive_file:157700kB unevictable:1536kB writepending:104kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:47628kB local_pcp:21592kB free_cma:0kB [ 121.699364][ T6532] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.739541][ T6955] netlink: zone id is out of range [ 121.748959][ T6955] netlink: zone id is out of range [ 121.768620][ T6949] lowmem_reserve[]: 0 0 1 1 1 [ 121.773694][ T6955] netlink: get zone limit has 8 unknown bytes [ 121.781266][ T6949] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 121.871413][ T6947] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 121.880233][ T6947] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 121.888390][ T6949] lowmem_reserve[]: 0 0 0 0 0 [ 121.919087][ T6949] Node 1 Normal free:3885316kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21248kB local_pcp:10560kB free_cma:0kB [ 122.031261][ T6962] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 122.039232][ T6949] lowmem_reserve[]: 0 0 0 0 0 [ 122.044009][ T6949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.058103][ T6963] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 122.107942][ T6949] Node 0 DMA32: 1574*4kB (UME) 826*8kB (UM) 345*16kB (UM) 361*32kB (UME) 53*64kB (UM) 28*128kB (UM) 6*256kB (UM) 6*512kB (M) 6*1024kB (ME) 4*2048kB (UM) 334*4096kB (M) = 1423960kB [ 122.138820][ T6949] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 122.160902][ T6949] Node 1 Normal: 207*4kB (UME) 41*8kB (UME) 40*16kB (UME) 68*32kB (UME) 28*64kB (UME) 3*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3885316kB [ 122.187473][ T6949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.227674][ T6949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.258250][ T6949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.295825][ T6949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.318862][ T6949] 44045 total pagecache pages [ 122.349757][ T6949] 0 pages in swap cache [ 122.367220][ T6949] Free swap = 124996kB [ 122.371457][ T6949] Total swap = 124996kB [ 122.387789][ T6949] 2097051 pages RAM [ 122.391670][ T6949] 0 pages HighMem/MovableOnly [ 122.415403][ T6949] 425670 pages reserved [ 122.436719][ T6979] tipc: Enabled bearer , priority 0 [ 122.445173][ T6979] syzkaller0: entered promiscuous mode [ 122.445370][ T6949] 0 pages cma reserved [ 122.450995][ T6979] syzkaller0: entered allmulticast mode [ 122.487184][ T6979] tipc: Resetting bearer [ 122.515675][ T6975] tipc: Resetting bearer [ 122.577314][ T6975] tipc: Disabling bearer [ 122.794270][ T6990] IPVS: set_ctl: invalid protocol: 139 172.20.20.170:20001 [ 122.932639][ T6992] __nla_validate_parse: 11 callbacks suppressed [ 122.932661][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 123.066987][ T6981] dvmrp1: entered allmulticast mode [ 123.372065][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 123.477475][ T7012] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 123.532647][ T7015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.295'. [ 124.272484][ T7050] netlink: 'syz.3.306': attribute type 24 has an invalid length. [ 124.570520][ T7075] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 124.612971][ T7073] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 124.937209][ T7087] netlink: 68 bytes leftover after parsing attributes in process `syz.3.313'. [ 124.946354][ T7087] netlink: 68 bytes leftover after parsing attributes in process `syz.3.313'. [ 125.123615][ T7095] bridge_slave_0: left allmulticast mode [ 125.147521][ T7095] bridge_slave_0: left promiscuous mode [ 125.177272][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 125.185625][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.194629][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.318'. [ 125.328936][ T7095] bridge_slave_1: left allmulticast mode [ 125.365319][ T7095] bridge_slave_1: left promiscuous mode [ 125.381459][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.440808][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 125.548507][ T7095] bond0: (slave bond_slave_0): Releasing backup interface [ 125.596365][ T7095] bond0: (slave bond_slave_1): Releasing backup interface [ 125.656193][ T7095] team0: Port device team_slave_0 removed [ 125.687981][ T7095] team0: Port device team_slave_1 removed [ 125.749106][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 125.789286][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 125.949532][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.323'. [ 126.418917][ T5923] IPVS: starting estimator thread 0... [ 126.515604][ T7155] IPVS: using max 24 ests per chain, 57600 per kthread [ 127.342838][ T7179] netlink: 'syz.0.334': attribute type 3 has an invalid length. [ 127.395339][ T7179] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 127.557481][ T30] audit: type=1800 audit(1757995187.945:3): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.340" name="memory.events" dev="tmpfs" ino=323 res=0 errno=0 [ 127.911481][ T7204] netlink: 'syz.1.344': attribute type 28 has an invalid length. [ 127.941419][ T7204] netlink: 'syz.1.344': attribute type 3 has an invalid length. [ 127.963372][ T7204] __nla_validate_parse: 7 callbacks suppressed [ 127.963392][ T7204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.344'. [ 128.084620][ T7213] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 129.598349][ T7281] netlink: 'syz.1.367': attribute type 23 has an invalid length. [ 129.806510][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 129.852716][ T7289] Driver unsupported XDP return value 0 on prog (id 148) dev N/A, expect packet loss! [ 129.938259][ T7291] netlink: 2 bytes leftover after parsing attributes in process `syz.3.369'. [ 129.986738][ T7289] netlink: 2 bytes leftover after parsing attributes in process `syz.3.369'. [ 130.159787][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 130.210067][ T7306] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 130.634396][ T7292] syz.1.370 (7292) used greatest stack depth: 17864 bytes left [ 130.648174][ T7329] 8021q: VLANs not supported on ip6tnl0 [ 130.787838][ T7334] netlink: 728 bytes leftover after parsing attributes in process `syz.2.382'. [ 130.911510][ T7338] : entered promiscuous mode [ 131.093188][ T7347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.247073][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.389'. [ 131.430559][ T7365] netlink: 52 bytes leftover after parsing attributes in process `syz.0.390'. [ 131.449148][ T7358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.451530][ T7368] netlink: 'syz.2.392': attribute type 23 has an invalid length. [ 131.519697][ T7364] netlink: 'syz.2.392': attribute type 3 has an invalid length. [ 131.694070][ T7376] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 131.718721][ T7376] netlink: 204 bytes leftover after parsing attributes in process `syz.3.394'. [ 131.751134][ T7377] netlink: 288 bytes leftover after parsing attributes in process `syz.0.396'. [ 132.106074][ T7395] syz.2.399: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.132989][ T7395] CPU: 1 UID: 0 PID: 7395 Comm: syz.2.399 Not tainted syzkaller #0 PREEMPT(full) [ 132.133022][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.133036][ T7395] Call Trace: [ 132.133044][ T7395] [ 132.133054][ T7395] dump_stack_lvl+0x189/0x250 [ 132.133091][ T7395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.133120][ T7395] ? __pfx__printk+0x10/0x10 [ 132.133152][ T7395] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 132.133179][ T7395] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 132.133208][ T7395] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 132.133239][ T7395] warn_alloc+0x214/0x310 [ 132.133275][ T7395] ? stack_depot_save_flags+0x40/0x860 [ 132.133314][ T7395] ? __pfx_warn_alloc+0x10/0x10 [ 132.133351][ T7395] ? kasan_save_track+0x4f/0x80 [ 132.133381][ T7395] ? xskq_create+0x56/0x170 [ 132.133400][ T7395] ? xsk_init_queue+0xb0/0x110 [ 132.133418][ T7395] ? xsk_setsockopt+0x4dc/0x8d0 [ 132.133448][ T7395] ? do_sock_setsockopt+0x179/0x1b0 [ 132.133473][ T7395] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 132.133498][ T7395] ? do_syscall_64+0xfa/0x3b0 [ 132.133521][ T7395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.133552][ T7395] __vmalloc_node_range_noprof+0x125/0x12f0 [ 132.133620][ T7395] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.133661][ T7395] ? __kasan_kmalloc+0x93/0xb0 [ 132.133695][ T7395] vmalloc_user_noprof+0xad/0xf0 [ 132.133727][ T7395] ? xskq_create+0xbf/0x170 [ 132.133749][ T7395] xskq_create+0xbf/0x170 [ 132.133774][ T7395] xsk_init_queue+0xb0/0x110 [ 132.133797][ T7395] xsk_setsockopt+0x4dc/0x8d0 [ 132.133872][ T7395] ? __pfx_xsk_setsockopt+0x10/0x10 [ 132.133905][ T7395] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.133944][ T7395] ? aa_sock_opt_perm+0xff/0x1b0 [ 132.133969][ T7395] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 132.133995][ T7395] ? __pfx_xsk_setsockopt+0x10/0x10 [ 132.134036][ T7395] do_sock_setsockopt+0x179/0x1b0 [ 132.134071][ T7395] __x64_sys_setsockopt+0x13f/0x1b0 [ 132.134105][ T7395] do_syscall_64+0xfa/0x3b0 [ 132.134127][ T7395] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.134149][ T7395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.134170][ T7395] ? clear_bhb_loop+0x60/0xb0 [ 132.134198][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.134219][ T7395] RIP: 0033:0x7f96a858eba9 [ 132.134239][ T7395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.134257][ T7395] RSP: 002b:00007f96a942f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.134281][ T7395] RAX: ffffffffffffffda RBX: 00007f96a87d5fa0 RCX: 00007f96a858eba9 [ 132.134297][ T7395] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 132.134310][ T7395] RBP: 00007f96a8611e19 R08: 0000000000000004 R09: 0000000000000000 [ 132.134323][ T7395] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.134337][ T7395] R13: 00007f96a87d6038 R14: 00007f96a87d5fa0 R15: 00007fff91f7acf8 [ 132.134373][ T7395] [ 132.134557][ T7395] Mem-Info: [ 132.465322][ T7395] active_anon:5650 inactive_anon:0 isolated_anon:0 [ 132.465322][ T7395] active_file:2826 inactive_file:39875 isolated_file:0 [ 132.465322][ T7395] unevictable:768 dirty:63 writeback:0 [ 132.465322][ T7395] slab_reclaimable:10771 slab_unreclaimable:96829 [ 132.465322][ T7395] mapped:29155 shmem:1355 pagetables:1205 [ 132.465322][ T7395] sec_pagetables:0 bounce:0 [ 132.465322][ T7395] kernel_misc_reclaimable:0 [ 132.465322][ T7395] free:1331982 free_pcp:14503 free_cma:0 [ 132.541635][ T7395] Node 0 active_anon:22600kB inactive_anon:0kB active_file:11304kB inactive_file:159300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116620kB dirty:244kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12072kB pagetables:4376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.585572][ T7395] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.805306][ T7395] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.919071][ T7395] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 132.925006][ T7395] Node 0 DMA32 free:1426408kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22456kB inactive_anon:0kB active_file:11304kB inactive_file:157728kB unevictable:1536kB writepending:244kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:37068kB local_pcp:19820kB free_cma:0kB [ 133.006592][ T7428] netlink: 72 bytes leftover after parsing attributes in process `syz.3.408'. [ 133.056006][ T7395] lowmem_reserve[]: 0 0 1 1 1 [ 133.066925][ T7395] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 133.110289][ T7432] tipc: Started in network mode [ 133.115372][ T7432] tipc: Node identity 0e3a1f671684, cluster identity 4711 [ 133.123292][ T7432] tipc: Enabled bearer , priority 0 [ 133.133905][ T7432] syzkaller0: entered promiscuous mode [ 133.142301][ T7395] lowmem_reserve[]: 0 0 0 0 0 [ 133.155436][ T7432] syzkaller0: entered allmulticast mode [ 133.171172][ T7395] Node 1 Normal free:3885572kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21120kB local_pcp:10528kB free_cma:0kB [ 133.241765][ T7431] tipc: Resetting bearer [ 133.253988][ T7395] lowmem_reserve[]: 0 0 0 0 0 [ 133.281663][ T7395] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 133.313074][ T7395] Node 0 DMA32: 1450*4kB (UME) 1008*8kB (UM) 438*16kB (UM) 756*32kB (UME) 118*64kB (UM) 21*128kB (UM) 7*256kB (UM) 2*512kB (ME) 4*1024kB (M) 2*2048kB (M) 332*4096kB (M) = 1426184kB [ 133.335071][ T7395] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 133.352530][ T7395] Node 1 Normal: 207*4kB (UME) 41*8kB (UME) 40*16kB (UME) 76*32kB (UME) 28*64kB (UME) 3*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3885572kB [ 133.383637][ T7395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.399584][ T7395] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.410667][ T7431] tipc: Disabling bearer [ 133.424736][ T7395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.439010][ T7395] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.449344][ T7395] 44052 total pagecache pages [ 133.454073][ T7395] 0 pages in swap cache [ 133.466370][ T7395] Free swap = 124996kB [ 133.470668][ T7395] Total swap = 124996kB [ 133.481396][ T7395] 2097051 pages RAM [ 133.488199][ T7395] 0 pages HighMem/MovableOnly [ 133.493399][ T7395] 425670 pages reserved [ 133.499496][ T7395] 0 pages cma reserved [ 133.688570][ T7447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.739364][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.416'. [ 133.779746][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 133.808596][ T7451] IPVS: lc: FWM 3 0x00000003 - no destination available [ 133.837171][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 133.885525][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 133.927428][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 134.419574][ T7473] netlink: 92 bytes leftover after parsing attributes in process `syz.0.425'. [ 134.568237][ T7486] netlink: 'syz.4.430': attribute type 4 has an invalid length. [ 134.649605][ T7493] netlink: 312 bytes leftover after parsing attributes in process `syz.1.431'. [ 134.680804][ T7492] netlink: 312 bytes leftover after parsing attributes in process `syz.1.431'. [ 135.222831][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 135.252577][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 135.284951][ T7526] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 135.876320][ T7552] syzkaller1: entered promiscuous mode [ 135.891989][ T7552] syzkaller1: entered allmulticast mode [ 136.017889][ T7566] tc_dump_action: action bad kind [ 136.369436][ T7580] Unsupported xt match [ 136.369459][ T7580] unable to load match [ 137.620793][ T7637] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 137.667875][ T7643] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 137.696896][ T7646] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 138.001681][ T7634] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 138.094387][ T7643] bond2: entered promiscuous mode [ 138.100020][ T7643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.180177][ T7651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.214628][ T7651] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 138.232828][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.242866][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.266285][ T7651] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 138.303395][ T7651] bond2: (slave wireguard0): making interface the new active one [ 138.324776][ T7651] wireguard0: entered promiscuous mode [ 138.332732][ T7651] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 138.342890][ T7650] __nla_validate_parse: 6 callbacks suppressed [ 138.342908][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 138.363786][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.417299][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.461070][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.487244][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.635944][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 138.848513][ T7694] tipc: Started in network mode [ 138.876997][ T7694] tipc: Node identity 928ac6d5722b, cluster identity 4711 [ 138.895905][ T7694] tipc: Enabled bearer , priority 0 [ 139.022667][ T7707] netlink: 'syz.0.486': attribute type 7 has an invalid length. [ 139.036130][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 139.057349][ T7707] netlink: 140 bytes leftover after parsing attributes in process `syz.0.486'. [ 139.089172][ T7694] syzkaller0: entered promiscuous mode [ 139.095453][ T7694] syzkaller0: entered allmulticast mode [ 139.103310][ T7694] tipc: Resetting bearer [ 139.143845][ T7712] netlink: 48 bytes leftover after parsing attributes in process `syz.0.486'. [ 139.160436][ T7711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.207800][ T7692] tipc: Resetting bearer [ 139.564674][ T7730] Bluetooth: MGMT ver 1.23 [ 139.916557][ T981] tipc: Node number set to 3768698581 [ 140.732803][ T7692] tipc: Disabling bearer [ 141.005898][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 141.049932][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.494'. [ 141.267656][ T7754] tipc: Enabled bearer , priority 0 [ 141.283960][ T7754] syzkaller0: entered promiscuous mode [ 141.298903][ T7757] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 141.315598][ T7754] syzkaller0: entered allmulticast mode [ 141.378269][ T7754] tipc: Resetting bearer [ 141.401087][ T7752] tipc: Resetting bearer [ 141.496269][ T7752] tipc: Disabling bearer [ 141.795054][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 141.815419][ T5865] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 141.816254][ T5871] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.872504][ T7780] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 141.937069][ T7784] sch_fq: defrate 0 ignored. [ 141.969038][ T7788] netlink: 164 bytes leftover after parsing attributes in process `syz.0.508'. [ 142.498053][ T7810] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 142.515839][ T7813] netlink: 56 bytes leftover after parsing attributes in process `syz.0.516'. [ 142.545514][ T7813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.961679][ T7831] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 142.971535][ T7832] xt_l2tp: wrong L2TP version: 0 [ 143.181725][ T7843] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 143.220948][ T7840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.314628][ T7849] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 143.472389][ T7853] tipc: Enabled bearer , priority 0 [ 143.508536][ T7853] syzkaller0: entered promiscuous mode [ 143.531089][ T7853] syzkaller0: entered allmulticast mode [ 143.567970][ T7853] tipc: Resetting bearer [ 143.605854][ T7852] tipc: Resetting bearer [ 143.674001][ T7852] tipc: Disabling bearer [ 143.872178][ T7875] netlink: 'syz.1.535': attribute type 178 has an invalid length. [ 143.949172][ T7879] syzkaller1: entered promiscuous mode [ 143.967298][ T7879] syzkaller1: entered allmulticast mode [ 144.002799][ T7882] __nla_validate_parse: 2 callbacks suppressed [ 144.002818][ T7882] netlink: 96 bytes leftover after parsing attributes in process `syz.2.539'. [ 144.064303][ T7879] tipc: MTU too low for tipc bearer [ 144.070510][ T7886] tipc: MTU too low for tipc bearer [ 144.071692][ T7890] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 144.302037][ T7899] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 144.374620][ T7899] netlink: 184 bytes leftover after parsing attributes in process `syz.3.541'. [ 144.386325][ T7906] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 144.438136][ T7890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.451558][ T7899] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 144.622448][ T7909] bond3: (slave veth0_to_bond): making interface the new active one [ 144.653010][ T7909] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 144.847813][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 144.974214][ T7921] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 145.050143][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 145.088652][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 145.260148][ T7932] tipc: Enabled bearer , priority 0 [ 145.276323][ T7932] syzkaller0: entered promiscuous mode [ 145.305065][ T7932] syzkaller0: entered allmulticast mode [ 145.336418][ T7932] tipc: Resetting bearer [ 145.367441][ T7933] dvmrp1: entered allmulticast mode [ 145.386012][ T7929] tipc: Resetting bearer [ 145.410148][ T7929] tipc: Disabling bearer [ 145.941547][ T7955] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.165956][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'. [ 146.195811][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'. [ 146.211029][ T7967] vxcan1: entered allmulticast mode [ 146.312619][ T7970] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.327812][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 146.412565][ T7970] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 146.581365][ T7979] tipc: Enabled bearer , priority 0 [ 146.601393][ T7979] syzkaller0: entered promiscuous mode [ 146.620831][ T7979] syzkaller0: entered allmulticast mode [ 146.646496][ T7979] tipc: Resetting bearer [ 146.663191][ T7978] tipc: Resetting bearer [ 146.718795][ T7978] tipc: Disabling bearer [ 146.969028][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 147.243469][ T8005] netlink: 'syz.1.573': attribute type 21 has an invalid length. [ 147.255764][ T8005] netlink: 'syz.1.573': attribute type 6 has an invalid length. [ 147.294480][ T8005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.573'. [ 147.501931][ T8011] tipc: Enabling of bearer rejected, failed to enable media [ 147.931021][ T8033] netlink: 'syz.3.582': attribute type 3 has an invalid length. [ 148.164030][ T8044] vlan2: entered promiscuous mode [ 148.847876][ T8078] netlink: 'syz.2.597': attribute type 4 has an invalid length. [ 149.261092][ T8094] __nla_validate_parse: 3 callbacks suppressed [ 149.261112][ T8094] netlink: 256 bytes leftover after parsing attributes in process `syz.4.602'. [ 149.296155][ T8094] unsupported nlmsg_type 40 [ 149.468478][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 149.580973][ T8103] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 149.645847][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.608'. [ 149.906550][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 149.952817][ T8120] netlink: 'syz.2.612': attribute type 33 has an invalid length. [ 149.981307][ T8120] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 150.043566][ T8125] netlink: 48 bytes leftover after parsing attributes in process `syz.0.611'. [ 150.280763][ T8140] tipc: Enabled bearer , priority 0 [ 150.311718][ T8140] syzkaller0: entered promiscuous mode [ 150.334052][ T8140] syzkaller0: entered allmulticast mode [ 150.381006][ T8140] tipc: Resetting bearer [ 150.388885][ T8136] tipc: Resetting bearer [ 150.429672][ T8136] tipc: Disabling bearer [ 152.356855][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 152.536615][ T8197] bond3: entered allmulticast mode [ 152.542175][ T8197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.551583][ T8197] bridge0: port 3(bond3) entered blocking state [ 152.558270][ T8197] bridge0: port 3(bond3) entered disabled state [ 152.568914][ T8197] bond3: entered promiscuous mode [ 152.576046][ T8197] bridge0: port 3(bond3) entered blocking state [ 152.582611][ T8197] bridge0: port 3(bond3) entered forwarding state [ 152.619319][ T1110] bridge0: port 3(bond3) entered disabled state [ 152.708176][ T8204] tipc: Enabled bearer , priority 0 [ 152.742109][ T8210] syzkaller0: entered promiscuous mode [ 152.748297][ T8210] syzkaller0: entered allmulticast mode [ 152.804523][ T8199] tipc: Resetting bearer [ 152.839648][ T8195] tipc: Resetting bearer [ 152.940143][ T8195] tipc: Disabling bearer [ 153.024180][ T8219] openvswitch: netlink: IP tunnel TTL not specified. [ 153.031250][ T8227] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.644'. [ 153.499141][ T8247] syzkaller0: entered promiscuous mode [ 153.507376][ T8247] syzkaller0: entered allmulticast mode [ 153.775445][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 153.877756][ T8270] netlink: 512 bytes leftover after parsing attributes in process `syz.1.658'. [ 154.090482][ T8272] netlink: 'syz.3.659': attribute type 21 has an invalid length. [ 154.130597][ T8277] netlink: 'syz.0.660': attribute type 9 has an invalid length. [ 154.155813][ T8277] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.660'. [ 154.315569][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.664'. [ 154.381760][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.664'. [ 154.462314][ T8289] gretap1: entered promiscuous mode [ 154.500453][ T8289] gretap1: entered allmulticast mode [ 154.519322][ T8297] netlink: 25 bytes leftover after parsing attributes in process `syz.3.667'. [ 154.540480][ T8297] netlink: 116 bytes leftover after parsing attributes in process `syz.3.667'. [ 154.652158][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 154.810538][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 154.822476][ T8308] netlink: 'syz.2.669': attribute type 39 has an invalid length. [ 155.385277][ T8339] netlink: 'syz.0.679': attribute type 4 has an invalid length. [ 155.595894][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 155.755058][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 155.780406][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.959762][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.997585][ T8354] netlink: 88 bytes leftover after parsing attributes in process `syz.0.685'. [ 156.215684][ T8363] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 156.249442][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 156.678936][ T8385] tipc: Enabled bearer , priority 0 [ 156.743786][ T8386] syzkaller0: entered promiscuous mode [ 156.757156][ T8386] syzkaller0: entered allmulticast mode [ 156.778518][ T8385] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 156.795953][ T8388] netlink: 'syz.4.697': attribute type 21 has an invalid length. [ 156.822852][ T8385] tipc: Resetting bearer [ 156.838778][ T8394] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 156.868020][ T8383] tipc: Resetting bearer [ 156.925614][ T8397] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 156.934778][ T8383] tipc: Disabling bearer [ 157.049829][ T8407] netlink: 'syz.1.700': attribute type 7 has an invalid length. [ 157.057753][ T8407] netlink: 'syz.1.700': attribute type 8 has an invalid length. [ 157.102199][ T8407] sock: sock_timestamping_bind_phc: sock not bind to device [ 158.119105][ T8458] trusted_key: syz.2.717 sent an empty control message without MSG_MORE. [ 158.378273][ T8469] netlink: 'syz.3.721': attribute type 3 has an invalid length. [ 158.779656][ T8495] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 158.790568][ T8495] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.328943][ T8521] __nla_validate_parse: 9 callbacks suppressed [ 159.328964][ T8521] netlink: 240 bytes leftover after parsing attributes in process `syz.3.734'. [ 159.751342][ T8541] netlink: 'syz.3.739': attribute type 4 has an invalid length. [ 159.764235][ T8547] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 159.774636][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.738'. [ 160.201105][ T8569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.373229][ T8576] netlink: 'syz.1.747': attribute type 4 has an invalid length. [ 160.854464][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 160.906243][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.754'. [ 161.079727][ T8611] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 161.095633][ T8609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.761'. [ 161.143398][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 161.174191][ T8611] bond3 (unregistering): Released all slaves [ 161.197502][ T8621] netlink: 256 bytes leftover after parsing attributes in process `syz.4.763'. [ 161.219018][ T8617] ip6tnl1: entered promiscuous mode [ 161.227148][ T8617] ip6tnl1: entered allmulticast mode [ 161.299829][ T8627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.615484][ T8644] netlink: 44 bytes leftover after parsing attributes in process `syz.0.769'. [ 161.629544][ T8644] netlink: 44 bytes leftover after parsing attributes in process `syz.0.769'. [ 161.860067][ T8654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.872244][ T8654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.069427][ T8654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.093393][ T8654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.180457][ T8670] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 162.212236][ T8665] openvswitch: netlink: Missing key (keys=40, expected=100) [ 162.250029][ T8654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.261032][ T8654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.281258][ T8670] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 162.369920][ T8654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.393662][ T8654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.412630][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.779'. [ 162.482533][ T1147] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.491098][ T1147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.512792][ T1147] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.521186][ T1147] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.542382][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.559128][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.581225][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.589732][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.210935][ T8692] syzkaller0: entered promiscuous mode [ 164.219122][ T8692] syzkaller0: entered allmulticast mode [ 164.231085][ T8700] tipc: Enabled bearer , priority 0 [ 164.271379][ T8692] tipc: Resetting bearer [ 164.286348][ T8710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.298668][ T8685] tipc: Resetting bearer [ 164.312156][ T8704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.538600][ T8685] tipc: Disabling bearer [ 165.710112][ T8732] __nla_validate_parse: 3 callbacks suppressed [ 165.710134][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 165.799599][ T8736] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.794'. [ 166.083743][ T8758] v: renamed from veth0_macvtap (while UP) [ 166.349459][ T8769] delete_channel: no stack [ 166.377390][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 166.389115][ T8768] : renamed from hsr0 (while UP) [ 166.395157][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 166.413283][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 166.585501][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.811'. [ 166.594734][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 166.644086][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 166.753482][ T8794] netlink: 'syz.2.814': attribute type 10 has an invalid length. [ 166.765729][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 166.862160][ T8802] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 166.914907][ T8802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.938120][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 166.953765][ T8806] bond4: (slave geneve2): making interface the new active one [ 166.963953][ T8806] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 166.974239][ T8802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.254827][ T8826] xt_HMARK: proto mask must be zero with L3 mode [ 167.314225][ T8830] tipc: Invalid UDP bearer configuration [ 167.314283][ T8830] tipc: Enabling of bearer rejected, failed to enable media [ 168.245639][ T8883] raw_sendmsg: syz.1.841 forgot to set AF_INET. Fix it! [ 168.324157][ T8886] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 168.339164][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031713c00: rx timeout, send abort [ 168.345775][ T8886] netlink: 'syz.4.842': attribute type 3 has an invalid length. [ 168.349239][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031713400: rx timeout, send abort [ 168.365046][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031713c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 168.380608][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031713400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 168.543721][ T8899] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 168.604118][ T8902] tipc: Enabled bearer , priority 0 [ 168.639146][ T8902] syzkaller0: entered promiscuous mode [ 168.673105][ T8902] syzkaller0: entered allmulticast mode [ 168.744532][ T8902] tipc: Resetting bearer [ 168.759179][ T8901] tipc: Resetting bearer [ 168.832275][ T8901] tipc: Disabling bearer [ 169.193286][ T8937] bridge_slave_0: left allmulticast mode [ 169.204448][ T8937] bridge_slave_0: left promiscuous mode [ 169.214804][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.269960][ T8937] bridge_slave_1: left allmulticast mode [ 169.292246][ T8937] bridge_slave_1: left promiscuous mode [ 169.298519][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.317286][ T8937] bond3: (slave veth0_to_bond): Releasing active interface [ 169.341961][ T8937] bond0: (slave bond_slave_0): Releasing backup interface [ 169.399740][ T8937] bond0: (slave bond_slave_1): Releasing backup interface [ 169.501577][ T8937] team0: Port device team_slave_0 removed [ 169.563021][ T8937] team0: Port device team_slave_1 removed [ 169.584994][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.596168][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.625868][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.638843][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.661647][ T8937] geneve1: left allmulticast mode [ 169.666967][ T8937] geneve1: left promiscuous mode [ 169.672386][ T8937] bridge0: port 3(geneve1) entered disabled state [ 169.999928][ T8982] netlink: 'syz.1.872': attribute type 4 has an invalid length. [ 170.060175][ T8990] netlink: 'syz.1.872': attribute type 4 has an invalid length. [ 170.751731][ T9033] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 171.000246][ T9042] __nla_validate_parse: 49 callbacks suppressed [ 171.000267][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 171.065419][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 171.091254][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 171.250988][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.892'. [ 171.332627][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.894'. [ 171.558675][ T9074] netlink: 92 bytes leftover after parsing attributes in process `syz.3.898'. [ 171.644029][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a313c00: rx timeout, send abort [ 171.653009][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a313c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 171.667523][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ed17000: rx timeout, send abort [ 171.676379][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ed17000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.404169][ T9117] tipc: Enabled bearer , priority 0 [ 172.413852][ T9117] syzkaller0: entered promiscuous mode [ 172.423443][ T9117] syzkaller0: entered allmulticast mode [ 172.432848][ T9117] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 172.469231][ T9117] tipc: Resetting bearer [ 172.488956][ T9116] tipc: Resetting bearer [ 172.552276][ T9116] tipc: Disabling bearer [ 172.684675][ T9137] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 172.703063][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 172.820157][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 173.476632][ T9181] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.924'. [ 173.496828][ T9184] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 173.612008][ T9183] IPVS: Scheduler module ip_vs_@ not found [ 173.725172][ T9199] netlink: 'syz.4.930': attribute type 6 has an invalid length. [ 173.798128][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.931'. [ 173.932151][ T9211] syzkaller1: entered promiscuous mode [ 173.946666][ T9211] syzkaller1: entered allmulticast mode [ 174.539619][ T9249] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 174.877138][ T9265] netlink: 'syz.0.953': attribute type 1 has an invalid length. [ 174.893408][ T9265] netlink: 'syz.0.953': attribute type 2 has an invalid length. [ 174.906392][ T9265] netlink: 'syz.0.953': attribute type 1 has an invalid length. [ 175.191972][ T9280] netlink: 'syz.3.955': attribute type 2 has an invalid length. [ 175.294853][ T9286] tipc: Started in network mode [ 175.315773][ T9286] tipc: Node identity 9a5f5f417fda, cluster identity 4711 [ 175.340779][ T9286] tipc: Enabled bearer , priority 0 [ 175.377899][ T9290] syzkaller0: entered allmulticast mode [ 175.486873][ T9281] tipc: Disabling bearer [ 175.763196][ T9322] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 175.864367][ T9322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.982273][ T9324] veth3: entered promiscuous mode [ 175.997213][ T9324] bond1: (slave veth3): Enslaving as an active interface with an up link [ 176.232696][ T9345] nbd: must specify at least one socket [ 176.296762][ T9347] tipc: New replicast peer: 255.255.255.255 [ 176.304044][ T9347] tipc: Enabled bearer , priority 10 [ 176.324959][ T9347] __nla_validate_parse: 6 callbacks suppressed [ 176.324979][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'. [ 176.375675][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 176.395560][ T9356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.978'. [ 176.413875][ T9356] netlink: 21 bytes leftover after parsing attributes in process `syz.2.978'. [ 176.425428][ T9356] netlink: 21 bytes leftover after parsing attributes in process `syz.2.978'. [ 176.441161][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.977'. [ 176.453192][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 176.615876][ T9367] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 176.627785][ T9367] tipc: Enabled bearer , priority 12 [ 176.794958][ T9381] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 176.907676][ T9386] netlink: 224 bytes leftover after parsing attributes in process `syz.1.989'. [ 176.918997][ T9385] netlink: 224 bytes leftover after parsing attributes in process `syz.1.989'. [ 177.083123][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.993'. [ 177.732738][ T9443] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 177.750538][ T981] tipc: Node number set to 3850723137 [ 178.136974][ T9469] validate_nla: 5 callbacks suppressed [ 178.136997][ T9469] netlink: 'syz.3.1016': attribute type 10 has an invalid length. [ 178.211040][ T9474] netlink: 'syz.3.1016': attribute type 10 has an invalid length. [ 178.267782][ T9469] team0: Port device dummy0 added [ 178.286948][ T9475] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 178.343904][ T9474] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.394281][ T9474] team0: Failed to send options change via netlink (err -105) [ 178.406538][ T9474] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.418058][ T9474] team0: Port device dummy0 removed [ 178.433498][ T9474] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 178.635143][ T30] audit: type=1800 audit(1757995239.015:4): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1023" name="memory.events" dev="tmpfs" ino=1070 res=0 errno=0 [ 178.697427][ T30] audit: type=1804 audit(1757995239.055:5): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1023" name="/newroot/207/memory.events" dev="tmpfs" ino=1070 res=1 errno=0 [ 178.883170][ T9515] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 178.902526][ T9515] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 178.936186][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 178.972315][ T9522] gre1: entered promiscuous mode [ 178.978846][ T9522] gre1: entered allmulticast mode [ 179.118883][ T9526] veth0: entered promiscuous mode [ 179.175182][ T9530] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 179.349013][ T9540] tipc: Enabled bearer , priority 0 [ 179.392506][ T9540] syzkaller0: entered promiscuous mode [ 179.399227][ T9540] syzkaller0: entered allmulticast mode [ 179.426208][ T9540] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 179.458674][ T9540] tipc: Resetting bearer [ 179.479897][ T9539] tipc: Resetting bearer [ 179.532973][ T9539] tipc: Disabling bearer [ 179.682370][ T9550] bridge0: port 1(veth0_to_bridge) entered blocking state [ 179.691580][ T9550] bridge0: port 1(veth0_to_bridge) entered disabled state [ 179.700705][ T9550] veth0_to_bridge: entered allmulticast mode [ 179.711368][ T9550] veth0_to_bridge: entered promiscuous mode [ 179.720664][ T9550] bridge0: port 1(veth0_to_bridge) entered blocking state [ 179.728033][ T9550] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 179.765122][ T9552] team_slave_0: mtu greater than device maximum [ 179.997066][ T9557] bond0: (slave dummy0): Releasing backup interface [ 180.087216][ T9557] bridge_slave_0: left promiscuous mode [ 180.107544][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.143722][ T9557] bridge_slave_1: left allmulticast mode [ 180.166947][ T9557] bridge_slave_1: left promiscuous mode [ 180.172909][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.190563][ T9557] bond0: (slave bond_slave_0): Releasing backup interface [ 180.202732][ T9557] bond0: (slave bond_slave_1): Releasing backup interface [ 180.265152][ T9557] team0: Port device team_slave_0 removed [ 180.304276][ T9557] team0: Port device team_slave_1 removed [ 180.321703][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.330419][ T9557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.355448][ T9557] bond2: (slave wireguard0): Releasing backup interface [ 180.364025][ T9557] wireguard0: left promiscuous mode [ 180.408363][ T9557] bond4: (slave geneve2): Releasing active interface [ 180.606614][ T9592] syzkaller0: refused to change device tx_queue_len [ 181.571075][ T9657] __nla_validate_parse: 15 callbacks suppressed [ 181.571098][ T9657] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1073'. [ 181.592199][ T9657] wireguard: wg2: Could not create IPv4 socket [ 181.851827][ T9674] sock: sock_set_timeout: `syz.4.1080' (pid 9674) tries to set negative timeout [ 182.021943][ T9680] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.066318][ T9689] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1086'. [ 182.359887][ T9715] openvswitch: netlink: IP tunnel TTL not specified. [ 182.370511][ T9715] veth0_to_team: entered promiscuous mode [ 182.377172][ T9715] veth0_to_team: entered allmulticast mode [ 182.430048][ T9717] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1091'. [ 182.442245][ T9717] syzkaller0: entered promiscuous mode [ 182.469698][ T9717] syzkaller0: entered allmulticast mode [ 182.802671][ T9741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1097'. [ 183.129771][ T9763] netlink: ct family unspecified [ 183.140664][ T9763] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.177121][ T9761] batadv_slave_0: entered allmulticast mode [ 183.189354][ T9757] batadv_slave_0: left allmulticast mode [ 183.251570][ T9769] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1106'. [ 183.294099][ T9775] netlink: 'syz.3.1109': attribute type 2 has an invalid length. [ 183.349401][ T9766] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.555637][ T7653] IPVS: starting estimator thread 0... [ 183.582335][ T9798] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 183.610289][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 183.655547][ T9796] IPVS: using max 26 ests per chain, 62400 per kthread [ 183.698597][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 183.741510][ T9806] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1119'. [ 183.957652][ T9819] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 183.965659][ T9819] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1122'. [ 184.166183][ T9829] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1125'. [ 184.238955][ T9838] tipc: Enabling of bearer rejected, failed to enable media [ 184.733910][ T9869] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001 [ 184.745667][ T9867] openvswitch: netlink: EtherType 0 is less than min 600 [ 184.751936][ T9869] netlink: 'syz.2.1139': attribute type 10 has an invalid length. [ 184.819116][ T9869] team0: Device hsr_slave_0 failed to register rx_handler [ 185.095614][ T5871] Bluetooth: hci1: command tx timeout [ 185.134069][ T9896] netlink: 'syz.4.1149': attribute type 10 has an invalid length. [ 185.161758][ T9896] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.178230][ T9896] bond0: (slave team0): Enslaving as an active interface with an up link [ 185.663134][ T9922] netlink: 'syz.4.1156': attribute type 10 has an invalid length. [ 185.676828][ T9922] hsr0: mtu greater than device maximum [ 186.208893][ T9948] netlink: 'syz.2.1162': attribute type 83 has an invalid length. [ 186.419234][ T9956] sctp: [Deprecated]: syz.2.1166 (pid 9956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.419234][ T9956] Use struct sctp_sack_info instead [ 186.443351][ T9958] sock: sock_set_timeout: `syz.1.1167' (pid 9958) tries to set negative timeout [ 186.623950][ T9968] __nla_validate_parse: 9 callbacks suppressed [ 186.623971][ T9968] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1169'. [ 186.659189][ T9968] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1169'. [ 186.666785][ T9960] netlink: 'syz.0.1168': attribute type 12 has an invalid length. [ 187.038734][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'. [ 187.365868][T10017] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1180'. [ 187.395160][T10018] netlink: 'syz.2.1182': attribute type 4 has an invalid length. [ 187.553176][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1180'. [ 187.644078][T10025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.680472][T10028] netlink: 'syz.3.1184': attribute type 6 has an invalid length. [ 187.816137][T10025] bond0: (slave rose0): Enslaving as an active interface with an up link [ 188.620843][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 188.725744][T10068] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 189.220323][T10080] tipc: Enabled bearer , priority 0 [ 189.248249][T10080] syzkaller0: entered promiscuous mode [ 189.253790][T10080] syzkaller0: entered allmulticast mode [ 189.395054][T10080] tipc: Resetting bearer [ 189.424472][T10080] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1194'. [ 189.448060][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 189.465622][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 189.594022][T10094] bridge0: port 1(veth0_to_bridge) entered disabled state [ 189.610573][T10097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1198'. [ 189.733658][T10078] tipc: Resetting bearer [ 189.763537][T10078] tipc: Disabling bearer [ 189.801877][ T5871] Bluetooth: hci4: link tx timeout [ 189.808229][ T5871] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.834123][T10108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.581209][T10142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.998978][T10174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.224101][T10186] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.739873][T10210] validate_nla: 1 callbacks suppressed [ 191.739893][T10210] netlink: 'syz.3.1224': attribute type 1 has an invalid length. [ 191.758051][T10210] __nla_validate_parse: 11 callbacks suppressed [ 191.758069][T10210] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1224'. [ 191.790319][T10210] tipc: Enabled bearer , priority 0 [ 191.802686][T10210] syzkaller0: entered promiscuous mode [ 191.810740][T10210] syzkaller0: entered allmulticast mode [ 191.826014][T10210] lo: mtu less than device minimum [ 191.833106][T10209] tipc: Resetting bearer [ 191.895949][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 191.906248][T10209] tipc: Disabling bearer [ 191.923196][T10219] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 192.177639][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'. [ 192.204725][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 192.224307][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 192.249280][T10236] tipc: Enabled bearer , priority 0 [ 192.267624][T10236] syzkaller0: entered promiscuous mode [ 192.273164][T10236] syzkaller0: entered allmulticast mode [ 192.330655][T10236] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 192.362823][T10236] tipc: Resetting bearer [ 192.397641][T10234] tipc: Resetting bearer [ 192.426988][T10234] tipc: Disabling bearer [ 192.467067][T10247] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 192.475761][T10247] tipc: Enabled bearer , priority 10 [ 192.667402][T10260] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 192.691225][T10264] tunl0: Caught tx_queue_len zero misconfig [ 192.844446][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 192.952601][T10277] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 192.980259][T10277] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 192.991979][T10277] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 193.217462][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'. [ 193.222858][T10299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1255'. [ 193.230293][T10295] sit1: entered promiscuous mode [ 193.243914][T10295] sit1: entered allmulticast mode [ 193.321121][T10294] hsr_slave_1 (unregistering): left promiscuous mode [ 193.478613][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 193.500875][T10310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.513553][T10311] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.1260'. [ 193.555588][T10311] openvswitch: netlink: Message has 5 unknown bytes. [ 193.594319][T10311] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.1260'. [ 193.620158][T10311] openvswitch: netlink: Message has 5 unknown bytes. [ 193.636162][T10309] sctp: [Deprecated]: syz.1.1258 (pid 10309) Use of int in maxseg socket option. [ 193.636162][T10309] Use struct sctp_assoc_value instead [ 193.660918][T10309] tipc: Enabling of bearer rejected, failed to enable media [ 193.671847][T10309] batadv_slave_1: entered allmulticast mode [ 194.072404][T10347] tipc: Enabled bearer , priority 0 [ 194.082802][T10347] syzkaller0: entered promiscuous mode [ 194.089037][T10347] syzkaller0: entered allmulticast mode [ 194.119342][T10347] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 194.164240][T10347] tipc: Resetting bearer [ 194.193525][T10346] tipc: Resetting bearer [ 194.228136][T10346] tipc: Disabling bearer [ 194.482051][T10363] netlink: 'syz.1.1273': attribute type 21 has an invalid length. [ 194.500025][T10363] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 194.516099][T10363] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.527462][T10368] syzkaller1: entered promiscuous mode [ 194.532996][T10368] syzkaller1: entered allmulticast mode [ 194.850367][T10381] netlink: 'syz.3.1280': attribute type 11 has an invalid length. [ 195.301077][T10405] lo: entered allmulticast mode [ 195.369970][T10389] infiniband syz2: set down [ 195.374825][T10389] infiniband syz2: added bond_slave_0 [ 195.417194][T10402] lo: left allmulticast mode [ 195.505394][T10389] RDS/IB: syz2: added [ 195.526113][T10389] smc: adding ib device syz2 with port count 1 [ 195.578030][T10389] smc: ib device syz2 port 1 has pnetid [ 196.347509][T10444] netlink: 'syz.3.1298': attribute type 3 has an invalid length. [ 196.611848][T10459] netlink: 'syz.2.1304': attribute type 11 has an invalid length. [ 197.205125][T10481] netlink: 'syz.2.1309': attribute type 23 has an invalid length. [ 197.985161][T10515] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 198.031184][T10515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.074382][T10515] __nla_validate_parse: 11 callbacks suppressed [ 198.074403][T10515] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1317'. [ 198.297019][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1322'. [ 198.320397][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1322'. [ 198.531915][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 199.097825][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1334'. [ 199.101641][T10566] tipc: Enabled bearer , priority 0 [ 199.140532][T10566] syzkaller0: entered promiscuous mode [ 199.153508][T10566] syzkaller0: entered allmulticast mode [ 199.216379][T10566] syzkaller0: mtu less than device minimum [ 199.256028][T10565] tipc: Resetting bearer [ 199.340616][T10565] tipc: Disabling bearer [ 199.454753][T10581] netem: change failed [ 199.466119][T10585] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1336'. [ 199.622343][T10594] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1339'. [ 199.665523][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.762602][T10581] team0 (unregistering): Port device team_slave_0 removed [ 199.786984][T10581] team0 (unregistering): Port device team_slave_1 removed [ 199.802106][T10599] netlink: 'syz.1.1342': attribute type 2 has an invalid length. [ 199.831186][T10589] veth7: entered allmulticast mode [ 199.868432][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 199.970269][T10603] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1344'. [ 200.018110][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 200.130091][T10612] IPVS: persistence engine module ip_vs_pe_À not found [ 200.343721][T10628] tipc: Enabled bearer , priority 0 [ 200.366550][T10628] syzkaller0: entered promiscuous mode [ 200.383271][T10628] syzkaller0: entered allmulticast mode [ 200.412752][T10628] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 200.453038][T10628] tipc: Resetting bearer [ 200.487151][T10626] tipc: Resetting bearer [ 200.557990][T10626] tipc: Disabling bearer [ 201.031249][T10659] netlink: 'syz.3.1363': attribute type 1 has an invalid length. [ 201.549312][T10694] netlink: 'syz.3.1373': attribute type 39 has an invalid length. [ 201.559537][T10694] veth0_macvtap: left promiscuous mode [ 202.259925][T10706] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 202.296047][T10705] xt_l2tp: invalid flags combination: 0 [ 202.622323][T10722] ve: renamed from ipvlan1 [ 202.665959][T10724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.031493][T10746] netlink: 'syz.0.1391': attribute type 23 has an invalid length. [ 203.268788][T10760] __nla_validate_parse: 13 callbacks suppressed [ 203.268809][T10760] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1392'. [ 203.737724][T10774] tipc: Enabled bearer , priority 0 [ 203.775886][T10774] syzkaller0: entered promiscuous mode [ 203.781438][T10774] syzkaller0: entered allmulticast mode [ 203.806192][T10778] netlink: 'syz.3.1400': attribute type 3 has an invalid length. [ 203.842108][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'. [ 203.885965][T10774] tipc: Resetting bearer [ 203.928057][T10772] tipc: Resetting bearer [ 203.989708][T10772] tipc: Disabling bearer [ 204.068826][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'. [ 204.650345][T10819] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1409'. [ 204.816160][T10786] v: renamed from veth0_macvtap [ 204.862011][T10817] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1409'. [ 211.979313][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 211.979328][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 211.979352][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 232.319279][T10828] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 232.332937][T10830] tipc: Can't bind to reserved service type 2 [ 232.425640][T10836] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1414'. [ 232.495020][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 232.514381][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 232.728701][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 232.807233][T10865] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.846696][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 233.211138][T10895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1430'. [ 233.241519][T10895] openvswitch: netlink: Flow key attr not present in new flow. [ 233.585639][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 233.634835][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 233.636122][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.680182][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.708140][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.729708][T10925] bond0: entered promiscuous mode [ 233.734817][T10925] bond_slave_0: entered promiscuous mode [ 233.745524][T10925] bond_slave_1: entered promiscuous mode [ 233.766438][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.801118][T10925] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 233.813622][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 233.984068][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 234.031184][T10940] bridge0: port 3(vlan3) entered blocking state [ 234.051611][T10940] bridge0: port 3(vlan3) entered disabled state [ 234.062512][T10940] vlan3: entered allmulticast mode [ 234.070398][T10940] bridge0: entered allmulticast mode [ 234.094204][T10940] vlan3: left allmulticast mode [ 234.101932][T10940] bridge0: left allmulticast mode [ 234.188154][T10946] netlink: 'syz.0.1446': attribute type 8 has an invalid length. [ 234.503017][T10964] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 234.846992][T10977] netlink: 'syz.1.1458': attribute type 8 has an invalid length. [ 234.866273][T10981] netlink: 'syz.2.1460': attribute type 1 has an invalid length. [ 234.874390][T10981] netlink: 'syz.2.1460': attribute type 2 has an invalid length. [ 235.017419][T10983] xt_socket: unknown flags 0xd0 [ 235.269138][T10995] syzkaller1: entered promiscuous mode [ 235.274683][T10995] syzkaller1: entered allmulticast mode [ 235.403851][T10979] netlink: 'syz.0.1459': attribute type 39 has an invalid length. [ 235.562654][T11006] netlink: 'syz.2.1470': attribute type 21 has an invalid length. [ 235.573263][T11007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.740937][T11013] tipc: Enabled bearer , priority 0 [ 235.776402][T11013] syzkaller0: entered promiscuous mode [ 235.793973][T11013] syzkaller0: entered allmulticast mode [ 235.818244][T11015] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 235.931846][T11021] sctp: [Deprecated]: syz.3.1473 (pid 11021) Use of int in max_burst socket option deprecated. [ 235.931846][T11021] Use struct sctp_assoc_value instead [ 236.100889][T11012] tipc: Resetting bearer [ 236.128766][T11037] netlink: 'syz.3.1478': attribute type 1 has an invalid length. [ 236.138386][T11037] netlink: 'syz.3.1478': attribute type 2 has an invalid length. [ 236.152869][T11012] tipc: Disabling bearer [ 236.218582][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 236.361257][T11045] tipc: Enabled bearer , priority 0 [ 236.369208][T11045] syzkaller0: entered promiscuous mode [ 236.379734][T11045] syzkaller0: entered allmulticast mode [ 236.482628][T11045] tipc: Resetting bearer [ 236.547883][T11044] tipc: Resetting bearer [ 236.660820][T11044] tipc: Disabling bearer [ 237.700892][T11105] __nla_validate_parse: 16 callbacks suppressed [ 237.700914][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 237.796356][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 238.099383][T11105] hsr_slave_1 (unregistering): left promiscuous mode [ 238.393266][T11142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1508'. [ 238.506110][T11148] openvswitch: netlink: Key type 262 is out of range max 32 [ 238.729821][T11163] validate_nla: 3 callbacks suppressed [ 238.729846][T11163] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 238.842544][T11168] veth1: entered promiscuous mode [ 238.867023][T11167] tipc: Enabled bearer , priority 0 [ 238.875632][T11163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1514'. [ 238.880958][T11167] syzkaller0: entered promiscuous mode [ 238.901672][T11167] syzkaller0: entered allmulticast mode [ 238.925754][T11167] tipc: Resetting bearer [ 238.938738][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'. [ 238.982733][T11165] tipc: Resetting bearer [ 239.040418][T11165] tipc: Disabling bearer [ 239.297815][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 239.307516][T11188] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20004 [ 239.433628][T11199] macsec1: entered promiscuous mode [ 239.444379][T11199] macsec1: entered allmulticast mode [ 239.689844][T11219] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 239.741462][T11219] netlink: 'syz.3.1530': attribute type 4 has an invalid length. [ 239.793900][T11219] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1530'. [ 240.005906][T11231] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1534'. [ 240.081441][T11231] gretap0: entered promiscuous mode [ 240.144621][T11240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.212266][T11246] pimreg3: entered allmulticast mode [ 240.381888][T11251] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 240.390496][T11251] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1541'. [ 240.735647][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 240.737307][T11271] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 240.811151][T11271] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 240.877954][T11277] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 241.070064][T11286] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 241.132729][T11300] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 241.198751][T11296] netlink: 'syz.2.1558': attribute type 4 has an invalid length. [ 241.221768][T11298] netlink: 'syz.2.1558': attribute type 4 has an invalid length. [ 241.829896][T11318] netem: unknown loss type 0 [ 241.835094][T11318] netem: change failed [ 242.005050][T11322] : entered promiscuous mode [ 242.160402][T11331] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ãÙdñ4QNªå¯¿$ûÌÌULÙv…D£øUDŒw [ 242.308257][T11336] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1536) ! [ 242.361683][T11341] netlink: 'syz.4.1573': attribute type 4 has an invalid length. [ 242.498165][T11345] netlink: 'syz.3.1577': attribute type 10 has an invalid length. [ 242.573290][T11349] netlink: 'syz.4.1578': attribute type 7 has an invalid length. [ 242.728541][T11319] delete_channel: no stack [ 242.770833][T11362] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.788754][T11362] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 242.801260][T11362] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 242.878182][T11368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.201277][T11383] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 243.285050][T11383] __nla_validate_parse: 14 callbacks suppressed [ 243.285073][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 243.459477][T11407] bond0: (slave team0): Releasing backup interface [ 243.518464][T11407] team0: Cannot enslave team device to itself [ 243.862462][T11431] validate_nla: 2 callbacks suppressed [ 243.862484][T11431] netlink: 'syz.4.1602': attribute type 15 has an invalid length. [ 243.890736][T11431] openvswitch: netlink: Tunnel attr 2 has unexpected len 12 expected 4 [ 244.157012][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 244.219135][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'. [ 244.260349][T11445] geneve2: entered promiscuous mode [ 244.372973][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1612'. [ 244.822072][T11482] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1621'. [ 245.270385][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'. [ 245.295500][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1629'. [ 245.514747][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 245.613391][T11531] tipc: Enabled bearer , priority 0 [ 245.702056][T11535] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1638'. [ 245.707251][T11531] syzkaller0: entered promiscuous mode [ 245.718129][T11531] syzkaller0: entered allmulticast mode [ 245.723252][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1639'. [ 245.726998][T11531] tipc: Resetting bearer [ 245.820654][T11530] tipc: Resetting bearer [ 246.007089][ T9] IPVS: starting estimator thread 0... [ 246.116103][T11553] IPVS: using max 32 ests per chain, 76800 per kthread [ 247.827749][T11530] tipc: Disabling bearer [ 247.853701][T11552] tipc: Enabling of bearer rejected, failed to enable media [ 248.006509][T11569] xfrm1: entered promiscuous mode [ 248.011624][T11569] xfrm1: entered allmulticast mode [ 248.063577][T11578] netlink: 'syz.3.1650': attribute type 1 has an invalid length. [ 248.076246][T11578] netlink: 'syz.3.1650': attribute type 1 has an invalid length. [ 248.094491][T11578] netlink: 'syz.3.1650': attribute type 2 has an invalid length. [ 248.391074][T11595] __nla_validate_parse: 5 callbacks suppressed [ 248.391094][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 248.446393][T11601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.567803][T11610] netlink: 'syz.2.1659': attribute type 23 has an invalid length. [ 248.823166][T11624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.854300][T11624] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 248.891003][T11624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.897312][T11624] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 248.911810][T11624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.938579][T11624] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 248.984718][T11624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 249.016327][T11624] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 249.421581][T11656] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 249.449372][T11656] team0: Port device dummy0 added [ 249.582161][T11661] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 410.225943][ T31] INFO: task syz-executor:5880 blocked for more than 143 seconds. [ 410.233940][ T31] Not tainted syzkaller #0 [ 410.239836][ T31] Blocked by coredump. [ 410.244552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.254065][ T31] task:syz-executor state:D stack:21192 pid:5880 tgid:5880 ppid:1 task_flags:0x40054c flags:0x00004006 [ 410.266364][ T31] Call Trace: [ 410.269696][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 410.272673][ T31] __schedule+0x1798/0x4cc0 [ 410.282563][ T31] ? __lock_acquire+0xab9/0xd20 [ 410.287755][ T31] ? __lock_acquire+0xab9/0xd20 [ 410.292690][ T31] ? __pfx___schedule+0x10/0x10 [ 410.303366][ T31] ? schedule+0x91/0x360 [ 410.315407][ T31] schedule+0x165/0x360 [ 410.319738][ T31] schedule_preempt_disabled+0x13/0x30 [ 410.350269][ T31] __mutex_lock+0x7e6/0x1350 [ 410.354959][ T31] ? __mutex_lock+0x5bb/0x1350 [ 410.377888][ T31] ? rfkill_unregister+0xc8/0x220 [ 410.383015][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 410.398663][ T31] ? __pfx_device_del+0x10/0x10 [ 410.403783][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 410.410584][ T31] rfkill_unregister+0xc8/0x220 [ 410.415958][ T31] hci_unregister_dev+0x374/0x510 [ 410.421105][ T31] vhci_release+0x152/0x1a0 [ 410.427258][ T31] ? __pfx_vhci_release+0x10/0x10 [ 410.432364][ T31] __fput+0x449/0xa70 [ 410.436649][ T31] task_work_run+0x1d1/0x260 [ 410.441478][ T31] ? __pfx_task_work_run+0x10/0x10 [ 410.446694][ T31] ? kmem_cache_free+0x18f/0x400 [ 410.451769][ T31] do_exit+0x6b5/0x2300 [ 410.456923][ T31] ? do_raw_spin_lock+0x121/0x290 [ 410.462145][ T31] ? __pfx_do_exit+0x10/0x10 [ 410.467148][ T31] do_group_exit+0x21c/0x2d0 [ 410.471811][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.477454][ T31] get_signal+0x1286/0x1340 [ 410.482264][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 410.488751][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 410.494472][ T31] ? fput_close_sync+0x119/0x200 [ 410.499835][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 410.506382][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 410.512004][ T31] exit_to_user_mode_loop+0x75/0x110 [ 410.517847][ T31] do_syscall_64+0x2bd/0x3b0 [ 410.522519][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.527814][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.533930][ T31] ? clear_bhb_loop+0x60/0xb0 [ 410.538815][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.544843][ T31] RIP: 0033:0x7f469eb84e17 [ 410.549653][ T31] RSP: 002b:00007ffd10951920 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 410.558296][ T31] RAX: fffffffffffffe00 RBX: 00000000000003c9 RCX: 00007f469eb84e17 [ 410.566440][ T31] RDX: 0000000040000000 RSI: 00007ffd1095198c RDI: 00000000ffffffff [ 410.574446][ T31] RBP: 00007ffd1095198c R08: 0000000000000000 R09: 0000000000000000 [ 410.583106][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000140 [ 410.591177][ T31] R13: 000055555c2f5590 R14: 000000000003cb49 R15: 00007ffd109519e0 [ 410.599420][ T31] [ 410.602531][ T31] INFO: task kworker/1:6:7649 blocked for more than 143 seconds. [ 410.610699][ T31] Not tainted syzkaller #0 [ 410.615908][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.624714][ T31] task:kworker/1:6 state:D stack:23304 pid:7649 tgid:7649 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 410.637427][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 410.644193][ T31] Call Trace: [ 410.647593][ T31] [ 410.650566][ T31] __schedule+0x1798/0x4cc0 [ 410.655340][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 410.660765][ T31] ? __pfx___schedule+0x10/0x10 [ 410.666026][ T31] ? schedule+0x91/0x360 [ 410.670407][ T31] schedule+0x165/0x360 [ 410.674574][ T31] schedule_preempt_disabled+0x13/0x30 [ 410.680222][ T31] __mutex_lock+0x7e6/0x1350 [ 410.684854][ T31] ? __mutex_lock+0x5bb/0x1350 [ 410.689905][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 410.696736][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 410.701803][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 410.707593][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 410.713345][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 410.719664][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 410.726029][ T31] process_scheduled_works+0xae1/0x17b0 [ 410.731783][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 410.738001][ T31] worker_thread+0x8a0/0xda0 [ 410.742647][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 410.749126][ T31] ? __kthread_parkme+0x7b/0x200 [ 410.754125][ T31] kthread+0x70e/0x8a0 [ 410.758748][ T31] ? __pfx_worker_thread+0x10/0x10 [ 410.763992][ T31] ? __pfx_kthread+0x10/0x10 [ 410.768686][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.773936][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.779538][ T31] ? __pfx_kthread+0x10/0x10 [ 410.784446][ T31] ret_from_fork+0x436/0x7d0 [ 410.789484][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 410.794638][ T31] ? __switch_to_asm+0x39/0x70 [ 410.799768][ T31] ? __switch_to_asm+0x33/0x70 [ 410.804578][ T31] ? __pfx_kthread+0x10/0x10 [ 410.809253][ T31] ret_from_fork_asm+0x1a/0x30 [ 410.814094][ T31] [ 410.817750][ T31] INFO: task syz.3.1660:11615 blocked for more than 143 seconds. [ 410.825668][ T31] Not tainted syzkaller #0 [ 410.830647][ T31] Blocked by coredump. [ 410.835451][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.844349][ T31] task:syz.3.1660 state:D stack:25544 pid:11615 tgid:11613 ppid:5880 task_flags:0x40054c flags:0x00004002 [ 410.857064][ T31] Call Trace: [ 410.860387][ T31] [ 410.863330][ T31] __schedule+0x1798/0x4cc0 [ 410.868090][ T31] ? __lock_acquire+0xab9/0xd20 [ 410.873023][ T31] ? __lock_acquire+0xab9/0xd20 [ 410.878809][ T31] ? __pfx___schedule+0x10/0x10 [ 410.883721][ T31] ? schedule+0x91/0x360 [ 410.888401][ T31] schedule+0x165/0x360 [ 410.892705][ T31] schedule_preempt_disabled+0x13/0x30 [ 410.898397][ T31] __mutex_lock+0x7e6/0x1350 [ 410.903068][ T31] ? __mutex_lock+0x5bb/0x1350 [ 410.908130][ T31] ? rfkill_unregister+0xc8/0x220 [ 410.913201][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 410.918900][ T31] ? __pfx_device_del+0x10/0x10 [ 410.924007][ T31] rfkill_unregister+0xc8/0x220 [ 410.929053][ T31] nfc_unregister_device+0x96/0x2a0 [ 410.934358][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 410.940512][ T31] virtual_ncidev_close+0x56/0x90 [ 410.946113][ T31] __fput+0x449/0xa70 [ 410.950143][ T31] task_work_run+0x1d1/0x260 [ 410.954747][ T31] ? __pfx_task_work_run+0x10/0x10 [ 410.960071][ T31] ? kmem_cache_free+0x18f/0x400 [ 410.965070][ T31] do_exit+0x6b5/0x2300 [ 410.969341][ T31] ? do_raw_spin_lock+0x121/0x290 [ 410.974403][ T31] ? __pfx_do_exit+0x10/0x10 [ 410.979495][ T31] do_group_exit+0x21c/0x2d0 [ 410.984115][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.989410][ T31] get_signal+0x1286/0x1340 [ 410.993963][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 410.999752][ T31] ? __x64_sys_sendmsg+0x230/0x260 [ 411.004981][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 411.011601][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 411.017473][ T31] exit_to_user_mode_loop+0x75/0x110 [ 411.022813][ T31] do_syscall_64+0x2bd/0x3b0 [ 411.027885][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.033159][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.039746][ T31] ? clear_bhb_loop+0x60/0xb0 [ 411.044473][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.050489][ T31] RIP: 0033:0x7f469eb8eba9 [ 411.054943][ T31] RSP: 002b:00007f469cdee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.063500][ T31] RAX: 0000000000000064 RBX: 00007f469edd5fa0 RCX: 00007f469eb8eba9 [ 411.071893][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 411.079970][ T31] RBP: 00007f469ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 411.088097][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.096491][ T31] R13: 00007f469edd6038 R14: 00007f469edd5fa0 R15: 00007ffd109515c8 [ 411.104511][ T31] [ 411.107718][ T31] INFO: task syz.4.1662:11624 blocked for more than 144 seconds. [ 411.122838][ T31] Not tainted syzkaller #0 [ 411.128434][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.137307][ T31] task:syz.4.1662 state:D stack:25208 pid:11624 tgid:11621 ppid:5863 task_flags:0x400040 flags:0x00004006 [ 411.149433][ T31] Call Trace: [ 411.152728][ T31] [ 411.156043][ T31] __schedule+0x1798/0x4cc0 [ 411.160606][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.165668][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.170567][ T31] ? __pfx___schedule+0x10/0x10 [ 411.175657][ T31] ? schedule+0x91/0x360 [ 411.179940][ T31] schedule+0x165/0x360 [ 411.184201][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.190185][ T31] __mutex_lock+0x7e6/0x1350 [ 411.194833][ T31] ? __mutex_lock+0x5bb/0x1350 [ 411.199715][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 411.205048][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.210381][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.216067][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 411.222104][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.228649][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 411.234459][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 411.239855][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 411.246132][ T31] rfkill_set_block+0x1d2/0x440 [ 411.251051][ T31] rfkill_fop_write+0x44b/0x570 [ 411.256112][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 411.261535][ T31] ? security_file_permission+0x40/0x290 [ 411.267387][ T31] ? rw_verify_area+0x255/0x4d0 [ 411.272283][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.277566][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 411.282980][ T31] vfs_write+0x27b/0xb30 [ 411.287634][ T31] ? __pfx_vfs_write+0x10/0x10 [ 411.292449][ T31] ? __fget_files+0x2a/0x420 [ 411.297269][ T31] ? __fget_files+0x2a/0x420 [ 411.301891][ T31] ? __fget_files+0x3a0/0x420 [ 411.307264][ T31] ? __fget_files+0x2a/0x420 [ 411.311943][ T31] ksys_write+0x145/0x250 [ 411.316401][ T31] ? __pfx_ksys_write+0x10/0x10 [ 411.321305][ T31] ? do_syscall_64+0xbe/0x3b0 [ 411.326472][ T31] do_syscall_64+0xfa/0x3b0 [ 411.331038][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.336835][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.342948][ T31] ? clear_bhb_loop+0x60/0xb0 [ 411.348060][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.354004][ T31] RIP: 0033:0x7f47ded8eba9 [ 411.358542][ T31] RSP: 002b:00007f47dfb5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 411.367526][ T31] RAX: ffffffffffffffda RBX: 00007f47defd6180 RCX: 00007f47ded8eba9 [ 411.375711][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 411.383721][ T31] RBP: 00007f47dee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 411.391940][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.402284][ T31] R13: 00007f47defd6218 R14: 00007f47defd6180 R15: 00007ffeb5ee03b8 [ 411.410502][ T31] [ 411.413581][ T31] INFO: task syz.2.1663:11632 blocked for more than 144 seconds. [ 411.421707][ T31] Not tainted syzkaller #0 [ 411.428616][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.437427][ T31] task:syz.2.1663 state:D stack:26664 pid:11632 tgid:11631 ppid:5866 task_flags:0x400140 flags:0x00004004 [ 411.449542][ T31] Call Trace: [ 411.452836][ T31] [ 411.456425][ T31] __schedule+0x1798/0x4cc0 [ 411.460977][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.466037][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.470935][ T31] ? __pfx___schedule+0x10/0x10 [ 411.475884][ T31] ? schedule+0x91/0x360 [ 411.480162][ T31] schedule+0x165/0x360 [ 411.484418][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.490427][ T31] __mutex_lock+0x7e6/0x1350 [ 411.495064][ T31] ? __mutex_lock+0x5bb/0x1350 [ 411.500735][ T31] ? genl_rcv_msg+0x10d/0x790 [ 411.505678][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.510997][ T31] ? stack_trace_save+0x9c/0xe0 [ 411.516773][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 411.522371][ T31] ? radix_tree_lookup+0x240/0x290 [ 411.527710][ T31] genl_rcv_msg+0x10d/0x790 [ 411.532304][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.538054][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.543150][ T31] netlink_rcv_skb+0x208/0x470 [ 411.548631][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.553535][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.558701][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.564074][ T31] ? down_read+0x1ad/0x2e0 [ 411.568837][ T31] genl_rcv+0x28/0x40 [ 411.572957][ T31] netlink_unicast+0x82f/0x9e0 [ 411.578230][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 411.583563][ T31] ? netlink_sendmsg+0x642/0xb30 [ 411.588673][ T31] ? skb_put+0x11b/0x210 [ 411.592960][ T31] netlink_sendmsg+0x805/0xb30 [ 411.597841][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.603182][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 411.608639][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.613971][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.619362][ T31] __sock_sendmsg+0x21c/0x270 [ 411.624086][ T31] ____sys_sendmsg+0x505/0x830 [ 411.629064][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.634400][ T31] ? import_iovec+0x74/0xa0 [ 411.639392][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 411.644125][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.649649][ T31] ? __fget_files+0x2a/0x420 [ 411.654319][ T31] ? __fget_files+0x3a0/0x420 [ 411.659324][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 411.664762][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.670902][ T31] ? rcu_is_watching+0x15/0xb0 [ 411.676092][ T31] ? do_syscall_64+0xbe/0x3b0 [ 411.680822][ T31] do_syscall_64+0xfa/0x3b0 [ 411.685553][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.690791][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.697322][ T31] ? clear_bhb_loop+0x60/0xb0 [ 411.702035][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.708104][ T31] RIP: 0033:0x7f96a858eba9 [ 411.712549][ T31] RSP: 002b:00007f96a942f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.721245][ T31] RAX: ffffffffffffffda RBX: 00007f96a87d5fa0 RCX: 00007f96a858eba9 [ 411.729770][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 411.737876][ T31] RBP: 00007f96a8611e19 R08: 0000000000000000 R09: 0000000000000000 [ 411.746063][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.754088][ T31] R13: 00007f96a87d6038 R14: 00007f96a87d5fa0 R15: 00007fff91f7acf8 [ 411.762561][ T31] [ 411.765849][ T31] INFO: task syz.2.1663:11634 blocked for more than 144 seconds. [ 411.773595][ T31] Not tainted syzkaller #0 [ 411.778841][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.787996][ T31] task:syz.2.1663 state:D stack:23912 pid:11634 tgid:11631 ppid:5866 task_flags:0x400140 flags:0x00004006 [ 411.800283][ T31] Call Trace: [ 411.803601][ T31] [ 411.806817][ T31] __schedule+0x1798/0x4cc0 [ 411.811363][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.816717][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.821688][ T31] ? __pfx___schedule+0x10/0x10 [ 411.826752][ T31] ? schedule+0x91/0x360 [ 411.831031][ T31] schedule+0x165/0x360 [ 411.835276][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.840857][ T31] __mutex_lock+0x7e6/0x1350 [ 411.846099][ T31] ? __mutex_lock+0x5bb/0x1350 [ 411.850894][ T31] ? rfkill_register+0x37/0x8e0 [ 411.855837][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.860895][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 411.866032][ T31] ? nl80211_common_reg_change_event+0x55d/0x6b0 [ 411.872428][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 411.878177][ T31] ? __queue_delayed_work+0x212/0x2d0 [ 411.883590][ T31] rfkill_register+0x37/0x8e0 [ 411.888458][ T31] wiphy_register+0x214c/0x28d0 [ 411.893449][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 411.898856][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 411.904981][ T31] ieee80211_register_hw+0x3484/0x4100 [ 411.911208][ T31] ? ieee80211_register_hw+0x13e1/0x4100 [ 411.916999][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 411.922858][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 411.929445][ T31] ? __hrtimer_setup+0x187/0x210 [ 411.934449][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 411.940656][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 411.946637][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 411.952747][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 411.958414][ T31] ? __sock_sendmsg+0x21c/0x270 [ 411.963311][ T31] ? ____sys_sendmsg+0x505/0x830 [ 411.968724][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 411.973870][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 411.979717][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 411.985493][ T31] ? __nla_parse+0x40/0x60 [ 411.989962][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 411.996720][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 412.002324][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 412.008582][ T31] ? bpf_lsm_capable+0x9/0x20 [ 412.013313][ T31] ? security_capable+0x7e/0x2e0 [ 412.018573][ T31] genl_rcv_msg+0x60e/0x790 [ 412.023137][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.028683][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 412.034312][ T31] netlink_rcv_skb+0x208/0x470 [ 412.039166][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.044089][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.049396][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.054751][ T31] ? down_read+0x1ad/0x2e0 [ 412.059729][ T31] genl_rcv+0x28/0x40 [ 412.063757][ T31] netlink_unicast+0x82f/0x9e0 [ 412.068720][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 412.074137][ T31] ? netlink_sendmsg+0x642/0xb30 [ 412.079179][ T31] ? skb_put+0x11b/0x210 [ 412.083472][ T31] netlink_sendmsg+0x805/0xb30 [ 412.088739][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.094151][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 412.099174][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.104538][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.110025][ T31] __sock_sendmsg+0x21c/0x270 [ 412.114870][ T31] ____sys_sendmsg+0x505/0x830 [ 412.120166][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.125834][ T31] ? import_iovec+0x74/0xa0 [ 412.130383][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 412.135477][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.141062][ T31] ? __fget_files+0x2a/0x420 [ 412.146136][ T31] ? __fget_files+0x3a0/0x420 [ 412.150857][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 412.155933][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.161442][ T31] ? rcu_is_watching+0x15/0xb0 [ 412.166524][ T31] ? do_syscall_64+0xbe/0x3b0 [ 412.171339][ T31] do_syscall_64+0xfa/0x3b0 [ 412.176272][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.181517][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.187889][ T31] ? clear_bhb_loop+0x60/0xb0 [ 412.192660][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.198699][ T31] RIP: 0033:0x7f96a858eba9 [ 412.203144][ T31] RSP: 002b:00007f96a940e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.212031][ T31] RAX: ffffffffffffffda RBX: 00007f96a87d6090 RCX: 00007f96a858eba9 [ 412.220274][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 412.228402][ T31] RBP: 00007f96a8611e19 R08: 0000000000000000 R09: 0000000000000000 [ 412.237020][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.245030][ T31] R13: 00007f96a87d6128 R14: 00007f96a87d6090 R15: 00007fff91f7acf8 [ 412.253473][ T31] [ 412.256581][ T31] INFO: task syz.0.1668:11653 blocked for more than 145 seconds. [ 412.264344][ T31] Not tainted syzkaller #0 [ 412.270350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.279198][ T31] task:syz.0.1668 state:D stack:27592 pid:11653 tgid:11652 ppid:5861 task_flags:0x400040 flags:0x00004004 [ 412.291523][ T31] Call Trace: [ 412.294812][ T31] [ 412.298293][ T31] __schedule+0x1798/0x4cc0 [ 412.302855][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.311707][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.316727][ T31] ? __pfx___schedule+0x10/0x10 [ 412.321626][ T31] ? schedule+0x91/0x360 [ 412.326425][ T31] schedule+0x165/0x360 [ 412.330641][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.336267][ T31] __mutex_lock+0x7e6/0x1350 [ 412.340899][ T31] ? __mutex_lock+0x5bb/0x1350 [ 412.345973][ T31] ? genl_rcv_msg+0x10d/0x790 [ 412.350695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.356241][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 412.361422][ T31] ? radix_tree_lookup+0x240/0x290 [ 412.366648][ T31] genl_rcv_msg+0x10d/0x790 [ 412.371211][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.376622][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 412.381692][ T31] ? __asan_memcpy+0x40/0x70 [ 412.386735][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.392154][ T31] netlink_rcv_skb+0x208/0x470 [ 412.397144][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.402047][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.407178][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.412554][ T31] ? down_read+0x1ad/0x2e0 [ 412.417562][ T31] genl_rcv+0x28/0x40 [ 412.421590][ T31] netlink_unicast+0x82f/0x9e0 [ 412.426469][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 412.431859][ T31] ? netlink_sendmsg+0x642/0xb30 [ 412.437556][ T31] ? skb_put+0x11b/0x210 [ 412.441877][ T31] netlink_sendmsg+0x805/0xb30 [ 412.446934][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.452282][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 412.457727][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.463153][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.468664][ T31] __sock_sendmsg+0x21c/0x270 [ 412.473400][ T31] __sys_sendto+0x3bd/0x520 [ 412.478049][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 412.483145][ T31] ? count_memcg_event_mm+0x21/0x260 [ 412.488583][ T31] ? exc_page_fault+0x76/0xf0 [ 412.493291][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 412.499019][ T31] __x64_sys_sendto+0xde/0x100 [ 412.503826][ T31] do_syscall_64+0xfa/0x3b0 [ 412.508503][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.513909][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.520124][ T31] ? clear_bhb_loop+0x60/0xb0 [ 412.524848][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.531054][ T31] RIP: 0033:0x7f76f4190a3c [ 412.535773][ T31] RSP: 002b:00007f76f4f66ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 412.544319][ T31] RAX: ffffffffffffffda RBX: 00007f76f4f66fc0 RCX: 00007f76f4190a3c [ 412.552519][ T31] RDX: 0000000000000020 RSI: 00007f76f4f67010 RDI: 0000000000000006 [ 412.560621][ T31] RBP: 0000000000000000 R08: 00007f76f4f66f14 R09: 000000000000000c [ 412.568795][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 412.577255][ T31] R13: 00007f76f4f66f68 R14: 00007f76f4f67010 R15: 0000000000000000 [ 412.585789][ T31] [ 412.588902][ T31] INFO: task syz.1.1670:11661 blocked for more than 145 seconds. [ 412.597241][ T31] Not tainted syzkaller #0 [ 412.602197][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.611065][ T31] task:syz.1.1670 state:D stack:25680 pid:11661 tgid:11660 ppid:5872 task_flags:0x400040 flags:0x00004004 [ 412.623237][ T31] Call Trace: [ 412.627039][ T31] [ 412.630040][ T31] __schedule+0x1798/0x4cc0 [ 412.634580][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.642210][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.647387][ T31] ? __pfx___schedule+0x10/0x10 [ 412.652292][ T31] ? schedule+0x91/0x360 [ 412.657194][ T31] schedule+0x165/0x360 [ 412.661384][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.668050][ T31] __mutex_lock+0x7e6/0x1350 [ 412.672711][ T31] ? __mutex_lock+0x5bb/0x1350 [ 412.677765][ T31] ? genl_rcv_msg+0x10d/0x790 [ 412.682510][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.687683][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 412.692848][ T31] ? radix_tree_lookup+0x240/0x290 [ 412.698164][ T31] genl_rcv_msg+0x10d/0x790 [ 412.702730][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.707895][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 412.712969][ T31] ? __asan_memcpy+0x40/0x70 [ 412.717671][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.723076][ T31] netlink_rcv_skb+0x208/0x470 [ 412.727987][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.732889][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.738186][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.743522][ T31] ? down_read+0x1ad/0x2e0 [ 412.748039][ T31] genl_rcv+0x28/0x40 [ 412.752152][ T31] netlink_unicast+0x82f/0x9e0 [ 412.757020][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 412.762351][ T31] ? netlink_sendmsg+0x642/0xb30 [ 412.767365][ T31] ? skb_put+0x11b/0x210 [ 412.771643][ T31] netlink_sendmsg+0x805/0xb30 [ 412.776790][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.782148][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 412.787206][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.792533][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.797917][ T31] __sock_sendmsg+0x21c/0x270 [ 412.802640][ T31] ____sys_sendmsg+0x505/0x830 [ 412.807489][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.812952][ T31] ? import_iovec+0x74/0xa0 [ 412.817686][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 412.822425][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.827783][ T31] ? __fget_files+0x2a/0x420 [ 412.832416][ T31] ? __fget_files+0x3a0/0x420 [ 412.837206][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 412.842186][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.847737][ T31] ? rcu_is_watching+0x15/0xb0 [ 412.852535][ T31] ? do_syscall_64+0xbe/0x3b0 [ 412.858310][ T31] do_syscall_64+0xfa/0x3b0 [ 412.862979][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.869107][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.875509][ T31] ? clear_bhb_loop+0x60/0xb0 [ 412.880244][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.886454][ T31] RIP: 0033:0x7f713ab8eba9 [ 412.892207][ T31] RSP: 002b:00007f713bb00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.901097][ T31] RAX: ffffffffffffffda RBX: 00007f713add5fa0 RCX: 00007f713ab8eba9 [ 412.909173][ T31] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 412.917229][ T31] RBP: 00007f713ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 412.925312][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.933324][ T31] R13: 00007f713add6038 R14: 00007f713add5fa0 R15: 00007fff095738b8 [ 412.941581][ T31] [ 412.944749][ T31] INFO: task syz.1.1670:11664 blocked for more than 146 seconds. [ 412.952970][ T31] Not tainted syzkaller #0 [ 412.958013][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.966874][ T31] task:syz.1.1670 state:D stack:27200 pid:11664 tgid:11660 ppid:5872 task_flags:0x400040 flags:0x00004004 [ 412.979009][ T31] Call Trace: [ 412.982327][ T31] [ 412.985335][ T31] __schedule+0x1798/0x4cc0 [ 412.989882][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.994847][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.000004][ T31] ? __pfx___schedule+0x10/0x10 [ 413.005249][ T31] ? schedule+0x91/0x360 [ 413.009631][ T31] schedule+0x165/0x360 [ 413.013806][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.019372][ T31] __mutex_lock+0x7e6/0x1350 [ 413.024001][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.028857][ T31] ? genl_rcv_msg+0x10d/0x790 [ 413.033580][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.038757][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 413.043956][ T31] ? radix_tree_lookup+0x240/0x290 [ 413.049289][ T31] genl_rcv_msg+0x10d/0x790 [ 413.053918][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.059050][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 413.064125][ T31] ? __asan_memcpy+0x40/0x70 [ 413.068826][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 413.074257][ T31] netlink_rcv_skb+0x208/0x470 [ 413.079154][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.084139][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.089287][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.094629][ T31] ? down_read+0x1ad/0x2e0 [ 413.099268][ T31] genl_rcv+0x28/0x40 [ 413.103301][ T31] netlink_unicast+0x82f/0x9e0 [ 413.108181][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 413.113530][ T31] ? netlink_sendmsg+0x642/0xb30 [ 413.118629][ T31] ? skb_put+0x11b/0x210 [ 413.123029][ T31] netlink_sendmsg+0x805/0xb30 [ 413.127936][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.133262][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 413.138295][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.143653][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.149072][ T31] __sock_sendmsg+0x21c/0x270 [ 413.153892][ T31] ____sys_sendmsg+0x505/0x830 [ 413.158778][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.164201][ T31] ? import_iovec+0x74/0xa0 [ 413.168793][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 413.173512][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.178885][ T31] ? __fget_files+0x2a/0x420 [ 413.183526][ T31] ? __fget_files+0x3a0/0x420 [ 413.188391][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 413.193381][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.199008][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 413.204352][ T31] ? do_syscall_64+0xbe/0x3b0 [ 413.209122][ T31] do_syscall_64+0xfa/0x3b0 [ 413.213663][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.218990][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.225136][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.230022][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.236039][ T31] RIP: 0033:0x7f713ab8eba9 [ 413.240479][ T31] RSP: 002b:00007f713badf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.249093][ T31] RAX: ffffffffffffffda RBX: 00007f713add6090 RCX: 00007f713ab8eba9 [ 413.257298][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 413.265377][ T31] RBP: 00007f713ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 413.273570][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.281624][ T31] R13: 00007f713add6128 R14: 00007f713add6090 R15: 00007fff095738b8 [ 413.289725][ T31] [ 413.292875][ T31] INFO: task syz.1.1670:11666 blocked for more than 146 seconds. [ 413.300714][ T31] Not tainted syzkaller #0 [ 413.305837][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.314669][ T31] task:syz.1.1670 state:D stack:28360 pid:11666 tgid:11660 ppid:5872 task_flags:0x400040 flags:0x00004004 [ 413.326731][ T31] Call Trace: [ 413.330086][ T31] [ 413.333093][ T31] __schedule+0x1798/0x4cc0 [ 413.338120][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.343119][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.348099][ T31] ? __pfx___schedule+0x10/0x10 [ 413.353039][ T31] ? schedule+0x91/0x360 [ 413.357352][ T31] schedule+0x165/0x360 [ 413.361541][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.367122][ T31] __mutex_lock+0x7e6/0x1350 [ 413.371752][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.376597][ T31] ? genl_rcv_msg+0x10d/0x790 [ 413.381315][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.386430][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 413.391626][ T31] ? radix_tree_lookup+0x240/0x290 [ 413.396853][ T31] genl_rcv_msg+0x10d/0x790 [ 413.401418][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.406560][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 413.411619][ T31] ? __asan_memcpy+0x40/0x70 [ 413.417668][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 413.423121][ T31] netlink_rcv_skb+0x208/0x470 [ 413.427992][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.432893][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.437991][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.443306][ T31] ? down_read+0x1ad/0x2e0 [ 413.447915][ T31] genl_rcv+0x28/0x40 [ 413.451986][ T31] netlink_unicast+0x82f/0x9e0 [ 413.456862][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 413.462213][ T31] ? netlink_sendmsg+0x642/0xb30 [ 413.467278][ T31] ? skb_put+0x11b/0x210 [ 413.471570][ T31] netlink_sendmsg+0x805/0xb30 [ 413.476408][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.481730][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 413.486963][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.492298][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.497934][ T31] __sock_sendmsg+0x21c/0x270 [ 413.502690][ T31] __sys_sendto+0x3bd/0x520 [ 413.507761][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 413.512852][ T31] ? count_memcg_event_mm+0x21/0x260 [ 413.518261][ T31] ? exc_page_fault+0x76/0xf0 [ 413.522972][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 413.528391][ T31] __x64_sys_sendto+0xde/0x100 [ 413.533204][ T31] do_syscall_64+0xfa/0x3b0 [ 413.537802][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.543051][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.549254][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.553979][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.559978][ T31] RIP: 0033:0x7f713ab90a3c [ 413.564425][ T31] RSP: 002b:00007f713babcec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 413.572941][ T31] RAX: ffffffffffffffda RBX: 00007f713babcfc0 RCX: 00007f713ab90a3c [ 413.581012][ T31] RDX: 0000000000000020 RSI: 00007f713babd010 RDI: 0000000000000004 [ 413.589142][ T31] RBP: 0000000000000000 R08: 00007f713babcf14 R09: 000000000000000c [ 413.597213][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 413.605276][ T31] R13: 00007f713babcf68 R14: 00007f713babd010 R15: 0000000000000000 [ 413.613296][ T31] [ 413.616388][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 413.625499][ T31] INFO: task syz-executor:11738 blocked for more than 146 seconds. [ 413.633506][ T31] Not tainted syzkaller #0 [ 413.638793][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.647543][ T31] task:syz-executor state:D stack:28040 pid:11738 tgid:11738 ppid:1 task_flags:0x400040 flags:0x00004000 [ 413.659644][ T31] Call Trace: [ 413.662960][ T31] [ 413.666043][ T31] __schedule+0x1798/0x4cc0 [ 413.670602][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.675554][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.680624][ T31] ? __pfx___schedule+0x10/0x10 [ 413.685596][ T31] ? schedule+0x91/0x360 [ 413.689881][ T31] schedule+0x165/0x360 [ 413.694083][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.699699][ T31] __mutex_lock+0x7e6/0x1350 [ 413.704360][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.709232][ T31] ? rfkill_register+0x37/0x8e0 [ 413.714128][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.719430][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 413.724930][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 413.730391][ T31] ? device_initialize+0x24b/0x440 [ 413.735632][ T31] rfkill_register+0x37/0x8e0 [ 413.740364][ T31] hci_register_dev+0x3f5/0x890 [ 413.745361][ T31] vhci_create_device+0x39c/0x650 [ 413.750438][ T31] vhci_write+0x3ce/0x4a0 [ 413.754791][ T31] vfs_write+0x5c6/0xb30 [ 413.759143][ T31] ? __pfx_vhci_write+0x10/0x10 [ 413.764075][ T31] ? __pfx_vfs_write+0x10/0x10 [ 413.768945][ T31] ? count_memcg_event_mm+0x21/0x260 [ 413.774278][ T31] ksys_write+0x145/0x250 [ 413.778712][ T31] ? __pfx_ksys_write+0x10/0x10 [ 413.783606][ T31] ? do_syscall_64+0xbe/0x3b0 [ 413.788362][ T31] do_syscall_64+0xfa/0x3b0 [ 413.792930][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.798238][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.805357][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.810092][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.816104][ T31] RIP: 0033:0x7fb0a198d620 [ 413.820553][ T31] RSP: 002b:00007ffe0c1aecc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 413.829060][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb0a198d620 [ 413.837213][ T31] RDX: 0000000000000002 RSI: 00007ffe0c1aecda RDI: 00000000000000ca [ 413.845447][ T31] RBP: 00007fb0a1bd67b8 R08: 0000000000000000 R09: 00007fb0a270d6c0 [ 413.853898][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 413.861980][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 413.870039][ T31] [ 413.873079][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 413.882202][ T31] INFO: task syz-executor:11739 blocked for more than 147 seconds. [ 413.890173][ T31] Not tainted syzkaller #0 [ 413.895219][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.903909][ T31] task:syz-executor state:D stack:28040 pid:11739 tgid:11739 ppid:1 task_flags:0x400040 flags:0x00004000 [ 413.920765][ T31] Call Trace: [ 413.924186][ T31] [ 413.927641][ T31] __schedule+0x1798/0x4cc0 [ 413.932190][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.937547][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.942467][ T31] ? __pfx___schedule+0x10/0x10 [ 413.947420][ T31] ? schedule+0x91/0x360 [ 413.951695][ T31] schedule+0x165/0x360 [ 413.955976][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.961463][ T31] __mutex_lock+0x7e6/0x1350 [ 413.966243][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.971053][ T31] ? rfkill_register+0x37/0x8e0 [ 413.976103][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.981216][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 413.986882][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 413.992315][ T31] ? device_initialize+0x24b/0x440 [ 413.997515][ T31] rfkill_register+0x37/0x8e0 [ 414.002242][ T31] hci_register_dev+0x3f5/0x890 [ 414.007200][ T31] vhci_create_device+0x39c/0x650 [ 414.012299][ T31] vhci_write+0x3ce/0x4a0 [ 414.016749][ T31] vfs_write+0x5c6/0xb30 [ 414.021087][ T31] ? __pfx_vhci_write+0x10/0x10 [ 414.026049][ T31] ? __pfx_vfs_write+0x10/0x10 [ 414.030868][ T31] ? count_memcg_event_mm+0x21/0x260 [ 414.036260][ T31] ksys_write+0x145/0x250 [ 414.040638][ T31] ? __pfx_ksys_write+0x10/0x10 [ 414.045574][ T31] ? do_syscall_64+0xbe/0x3b0 [ 414.050298][ T31] do_syscall_64+0xfa/0x3b0 [ 414.054840][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.060339][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.066521][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.071443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.077746][ T31] RIP: 0033:0x7fbd1b58d620 [ 414.082201][ T31] RSP: 002b:00007ffd60a39ae8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 414.090724][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbd1b58d620 [ 414.098807][ T31] RDX: 0000000000000002 RSI: 00007ffd60a39afa RDI: 00000000000000ca [ 414.106906][ T31] RBP: 00007fbd1b7d67b8 R08: 0000000000000000 R09: 00007fbd1c30d6c0 [ 414.114916][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 414.123072][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 414.131127][ T31] [ 414.134155][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 414.143650][ T31] INFO: task syz-executor:11740 blocked for more than 147 seconds. [ 414.151607][ T31] Not tainted syzkaller #0 [ 414.156610][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.165343][ T31] task:syz-executor state:D stack:28040 pid:11740 tgid:11740 ppid:1 task_flags:0x400040 flags:0x00004000 [ 414.177388][ T31] Call Trace: [ 414.180692][ T31] [ 414.183658][ T31] __schedule+0x1798/0x4cc0 [ 414.188279][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.193189][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.198245][ T31] ? __pfx___schedule+0x10/0x10 [ 414.203186][ T31] ? schedule+0x91/0x360 [ 414.207552][ T31] schedule+0x165/0x360 [ 414.211742][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.217401][ T31] __mutex_lock+0x7e6/0x1350 [ 414.222031][ T31] ? __mutex_lock+0x5bb/0x1350 [ 414.226946][ T31] ? rfkill_register+0x37/0x8e0 [ 414.231828][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.236929][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 414.242259][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 414.247696][ T31] ? device_initialize+0x24b/0x440 [ 414.252859][ T31] rfkill_register+0x37/0x8e0 [ 414.257648][ T31] hci_register_dev+0x3f5/0x890 [ 414.262551][ T31] vhci_create_device+0x39c/0x650 [ 414.267660][ T31] vhci_write+0x3ce/0x4a0 [ 414.272044][ T31] vfs_write+0x5c6/0xb30 [ 414.276402][ T31] ? __pfx_vhci_write+0x10/0x10 [ 414.281310][ T31] ? __pfx_vfs_write+0x10/0x10 [ 414.286182][ T31] ? count_memcg_event_mm+0x21/0x260 [ 414.291520][ T31] ksys_write+0x145/0x250 [ 414.295979][ T31] ? __pfx_ksys_write+0x10/0x10 [ 414.300889][ T31] ? do_syscall_64+0xbe/0x3b0 [ 414.305650][ T31] do_syscall_64+0xfa/0x3b0 [ 414.310275][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.315892][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.322008][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.327172][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.333141][ T31] RIP: 0033:0x7fb65158d620 [ 414.337652][ T31] RSP: 002b:00007ffc4a1dea18 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 414.346155][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb65158d620 [ 414.354162][ T31] RDX: 0000000000000002 RSI: 00007ffc4a1dea2a RDI: 00000000000000ca [ 414.362217][ T31] RBP: 00007fb6517d67b8 R08: 0000000000000000 R09: 00007fb65230d6c0 [ 414.370298][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 414.378843][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 414.386914][ T31] [ 414.390050][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 414.399149][ T31] INFO: task syz-executor:11741 blocked for more than 147 seconds. [ 414.407177][ T31] Not tainted syzkaller #0 [ 414.412135][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.420879][ T31] task:syz-executor state:D stack:28040 pid:11741 tgid:11741 ppid:1 task_flags:0x400040 flags:0x00004000 [ 414.432943][ T31] Call Trace: [ 414.437262][ T31] [ 414.440252][ T31] __schedule+0x1798/0x4cc0 [ 414.444841][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.450312][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.455357][ T31] ? __pfx___schedule+0x10/0x10 [ 414.460418][ T31] ? schedule+0x91/0x360 [ 414.464704][ T31] schedule+0x165/0x360 [ 414.468988][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.474628][ T31] __mutex_lock+0x7e6/0x1350 [ 414.479609][ T31] ? __mutex_lock+0x5bb/0x1350 [ 414.484438][ T31] ? rfkill_register+0x37/0x8e0 [ 414.489378][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.494525][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 414.499905][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 414.505378][ T31] ? device_initialize+0x24b/0x440 [ 414.510620][ T31] rfkill_register+0x37/0x8e0 [ 414.515421][ T31] hci_register_dev+0x3f5/0x890 [ 414.520332][ T31] vhci_create_device+0x39c/0x650 [ 414.525464][ T31] vhci_write+0x3ce/0x4a0 [ 414.529841][ T31] vfs_write+0x5c6/0xb30 [ 414.534105][ T31] ? __pfx_vhci_write+0x10/0x10 [ 414.539155][ T31] ? __pfx_vfs_write+0x10/0x10 [ 414.544107][ T31] ? count_memcg_event_mm+0x21/0x260 [ 414.549521][ T31] ksys_write+0x145/0x250 [ 414.553904][ T31] ? __pfx_ksys_write+0x10/0x10 [ 414.558861][ T31] ? do_syscall_64+0xbe/0x3b0 [ 414.563592][ T31] do_syscall_64+0xfa/0x3b0 [ 414.568297][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.573550][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.579737][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.584498][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.590540][ T31] RIP: 0033:0x7f20b618d620 [ 414.594995][ T31] RSP: 002b:00007fffcfc71248 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 414.603552][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f20b618d620 [ 414.611891][ T31] RDX: 0000000000000002 RSI: 00007fffcfc7125a RDI: 00000000000000ca [ 414.620047][ T31] RBP: 00007f20b63d67b8 R08: 0000000000000000 R09: 00007f20b6f0d6c0 [ 414.628136][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 414.636180][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 414.644219][ T31] [ 414.647359][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 414.656462][ T31] INFO: task syz-executor:11743 blocked for more than 147 seconds. [ 414.664378][ T31] Not tainted syzkaller #0 [ 414.669497][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.678261][ T31] task:syz-executor state:D stack:28040 pid:11743 tgid:11743 ppid:1 task_flags:0x400040 flags:0x00004000 [ 414.690312][ T31] Call Trace: [ 414.693628][ T31] [ 414.697315][ T31] __schedule+0x1798/0x4cc0 [ 414.701887][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.707003][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.711916][ T31] ? __pfx___schedule+0x10/0x10 [ 414.716850][ T31] ? schedule+0x91/0x360 [ 414.721124][ T31] schedule+0x165/0x360 [ 414.725378][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.730963][ T31] __mutex_lock+0x7e6/0x1350 [ 414.735624][ T31] ? __mutex_lock+0x5bb/0x1350 [ 414.740423][ T31] ? rfkill_register+0x37/0x8e0 [ 414.745499][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.750560][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 414.756030][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 414.761457][ T31] ? device_initialize+0x24b/0x440 [ 414.766686][ T31] rfkill_register+0x37/0x8e0 [ 414.771398][ T31] hci_register_dev+0x3f5/0x890 [ 414.776367][ T31] vhci_create_device+0x39c/0x650 [ 414.781617][ T31] vhci_write+0x3ce/0x4a0 [ 414.786117][ T31] vfs_write+0x5c6/0xb30 [ 414.790417][ T31] ? __pfx_vhci_write+0x10/0x10 [ 414.795422][ T31] ? __pfx_vfs_write+0x10/0x10 [ 414.800330][ T31] ? count_memcg_event_mm+0x21/0x260 [ 414.805742][ T31] ksys_write+0x145/0x250 [ 414.810184][ T31] ? __pfx_ksys_write+0x10/0x10 [ 414.815056][ T31] ? do_syscall_64+0xbe/0x3b0 [ 414.819943][ T31] do_syscall_64+0xfa/0x3b0 [ 414.824500][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.829886][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.836066][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.840796][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.846804][ T31] RIP: 0033:0x7fc03758d620 [ 414.851251][ T31] RSP: 002b:00007fff8af15588 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 414.859790][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc03758d620 [ 414.867958][ T31] RDX: 0000000000000002 RSI: 00007fff8af1559a RDI: 00000000000000ca [ 414.876050][ T31] RBP: 00007fc0377d67b8 R08: 0000000000000000 R09: 00007fc03830d6c0 [ 414.884062][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 414.892118][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 414.900164][ T31] [ 414.903279][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 414.912403][ T31] [ 414.912403][ T31] Showing all locks held in the system: [ 414.920172][ T31] 1 lock held by khungtaskd/31: [ 414.925155][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 414.935170][ T31] 2 locks held by getty/5624: [ 414.940069][ T31] #0: ffff88814e1850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 414.950849][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 414.961708][ T31] 1 lock held by syz-executor/5880: [ 414.967925][ T31] #0: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 414.978421][ T31] 3 locks held by kworker/1:6/7649: [ 414.983640][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.994858][ T31] #1: ffffc90004607bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 415.008484][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 415.020042][ T31] 2 locks held by syz.3.1660/11615: [ 415.025627][ T31] #0: ffff88803322b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 415.035497][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 415.045672][ T31] 2 locks held by syz.4.1662/11624: [ 415.050870][ T31] #0: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 415.061057][ T31] #1: ffff88803322b100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 415.070839][ T31] 2 locks held by syz.2.1663/11632: [ 415.076195][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.084459][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 415.093581][ T31] 3 locks held by syz.2.1663/11634: [ 415.100381][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.108823][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 415.118127][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.128195][ T31] 2 locks held by syz.0.1668/11653: [ 415.133417][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.141863][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 415.150953][ T31] 2 locks held by syz.1.1670/11661: [ 415.156261][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.164508][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 415.173547][ T31] 2 locks held by syz.1.1670/11664: [ 415.178984][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.187433][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 415.196587][ T31] 2 locks held by syz.1.1670/11666: [ 415.201821][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.210107][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 415.219332][ T31] 2 locks held by syz-executor/11738: [ 415.225033][ T31] #0: ffff8880277d5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.235271][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.245351][ T31] 2 locks held by syz-executor/11739: [ 415.250749][ T31] #0: ffff8880327f0118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.261192][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.271351][ T31] 2 locks held by syz-executor/11740: [ 415.276889][ T31] #0: ffff88806d2a7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.287052][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.297149][ T31] 2 locks held by syz-executor/11741: [ 415.302557][ T31] #0: ffff88806d2a1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.313114][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.323416][ T31] 2 locks held by syz-executor/11743: [ 415.329083][ T31] #0: ffff888059332918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.339642][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.349803][ T31] 2 locks held by syz-executor/11749: [ 415.355256][ T31] #0: ffff88805829a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.365481][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.375542][ T31] 2 locks held by syz-executor/11750: [ 415.381025][ T31] #0: ffff88802f541918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.391246][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.401361][ T31] 2 locks held by syz-executor/11753: [ 415.408805][ T31] #0: ffff8880242db118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.421064][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.431612][ T31] 2 locks held by syz-executor/11754: [ 415.437341][ T31] #0: ffff888057f82118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.448954][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.459242][ T31] 2 locks held by syz-executor/11756: [ 415.464656][ T31] #0: ffff888057127118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.474842][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.485376][ T31] 2 locks held by syz-executor/11762: [ 415.490781][ T31] #0: ffff88805798f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.501267][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.511541][ T31] 2 locks held by syz-executor/11763: [ 415.520187][ T31] #0: ffff88805798b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.530555][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.540914][ T31] 2 locks held by syz-executor/11767: [ 415.546896][ T31] #0: ffff88807ca11118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.557114][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.567234][ T31] 2 locks held by syz-executor/11768: [ 415.572612][ T31] #0: ffff88804c23f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.584272][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.594463][ T31] 2 locks held by syz-executor/11769: [ 415.599982][ T31] #0: ffff88804c376118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 415.610529][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 415.620770][ T31] [ 415.623126][ T31] ============================================= [ 415.623126][ T31] [ 415.631803][ T31] NMI backtrace for cpu 0 [ 415.631828][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 415.631852][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.631865][ T31] Call Trace: [ 415.631874][ T31] [ 415.631882][ T31] dump_stack_lvl+0x189/0x250 [ 415.631918][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.631945][ T31] ? __pfx__printk+0x10/0x10 [ 415.631986][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 415.632030][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 415.632065][ T31] ? __pfx__printk+0x10/0x10 [ 415.632101][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 415.632139][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 415.632175][ T31] watchdog+0xf93/0xfe0 [ 415.632212][ T31] ? watchdog+0x1de/0xfe0 [ 415.632249][ T31] kthread+0x70e/0x8a0 [ 415.632281][ T31] ? __pfx_watchdog+0x10/0x10 [ 415.632310][ T31] ? __pfx_kthread+0x10/0x10 [ 415.632340][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.632374][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.632394][ T31] ? __pfx_kthread+0x10/0x10 [ 415.632423][ T31] ret_from_fork+0x436/0x7d0 [ 415.632449][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 415.632479][ T31] ? __switch_to_asm+0x39/0x70 [ 415.632505][ T31] ? __switch_to_asm+0x33/0x70 [ 415.632532][ T31] ? __pfx_kthread+0x10/0x10 [ 415.632561][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.632608][ T31] [ 415.632616][ T31] Sending NMI from CPU 0 to CPUs 1: [ 415.782500][ C1] NMI backtrace for cpu 1 [ 415.782519][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 415.782540][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.782552][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 415.782576][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 09 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 415.782593][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 415.782610][ C1] RAX: 618e5ee7629a5f00 RBX: ffffffff819693f8 RCX: 618e5ee7629a5f00 [ 415.782624][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b9d0e RDI: ffffffff8be33c00 [ 415.782637][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 415.782651][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a730 [ 415.782665][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 415.782678][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 415.782693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.782714][ C1] CR2: 0000561d74498000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 415.782730][ C1] Call Trace: [ 415.782738][ C1] [ 415.782745][ C1] default_idle+0x13/0x20 [ 415.782767][ C1] default_idle_call+0x74/0xb0 [ 415.782791][ C1] do_idle+0x1e8/0x510 [ 415.782813][ C1] ? __pfx_do_idle+0x10/0x10 [ 415.782841][ C1] cpu_startup_entry+0x44/0x60 [ 415.782859][ C1] start_secondary+0x101/0x110 [ 415.782889][ C1] common_startup_64+0x13e/0x147 [ 415.782929][ C1] [ 415.783586][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 415.950839][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 415.959980][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.970056][ T31] Call Trace: [ 415.973350][ T31] [ 415.976384][ T31] dump_stack_lvl+0x99/0x250 [ 415.981105][ T31] ? __asan_memcpy+0x40/0x70 [ 415.985717][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.991017][ T31] ? __pfx__printk+0x10/0x10 [ 415.995638][ T31] vpanic+0x281/0x750 [ 415.999672][ T31] ? __pfx_vpanic+0x10/0x10 [ 416.004184][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 416.009762][ T31] ? preempt_schedule+0xae/0xc0 [ 416.014677][ T31] ? preempt_schedule_common+0x83/0xd0 [ 416.020171][ T31] panic+0xb9/0xc0 [ 416.023921][ T31] ? __pfx_panic+0x10/0x10 [ 416.028353][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 416.033756][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 416.039942][ T31] watchdog+0xfd2/0xfe0 [ 416.044134][ T31] ? watchdog+0x1de/0xfe0 [ 416.048486][ T31] kthread+0x70e/0x8a0 [ 416.052604][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.057301][ T31] ? __pfx_kthread+0x10/0x10 [ 416.061998][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.067219][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.072426][ T31] ? __pfx_kthread+0x10/0x10 [ 416.077032][ T31] ret_from_fork+0x436/0x7d0 [ 416.081634][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 416.086854][ T31] ? __switch_to_asm+0x39/0x70 [ 416.092330][ T31] ? __switch_to_asm+0x33/0x70 [ 416.097370][ T31] ? __pfx_kthread+0x10/0x10 [ 416.101997][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.106873][ T31] [ 416.110288][ T31] Kernel Offset: disabled [ 416.114621][ T31] Rebooting in 86400 seconds..