last executing test programs: 20.040525472s ago: executing program 1 (id=1589): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b704000000000e006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {0x20000, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x2, 0x4}, [@coaddr={0x14}]}, 0x104}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc093235457f25725b81019e5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bbfb5ef8312a53d79fe6e2e7aea4b93b8d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sendfile(r1, r1, &(0x7f0000000040)=0x80, 0x27c9) 19.786389888s ago: executing program 1 (id=1591): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) syz_init_net_socket$netrom(0x6, 0x5, 0x18) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000007740)={0xe, {{0xa, 0x4e22, 0x9, @mcast1, 0x40}}}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x38}}, 0x0) 19.652575614s ago: executing program 1 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="080000000000000024bd7002fad6df2501", @ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) socketpair(0x11, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 19.457837453s ago: executing program 1 (id=1597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) (async) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32=r1, @ANYRES16=r0, @ANYRESOCT=r4, @ANYRES64=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32=r1, @ANYRES16=r0, @ANYRESOCT=r4, @ANYRES64=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4000004, 0x0, 0x0, 0x40f00}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4000004, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="e00cbd73001a000000000000a9a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002800048024000180090001006d65746100000000140002800800024000000032080001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002800048024000180090001006d65746100000000140002800800024000000032080001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0020df255d0000c1ea11cb0b", @ANYRES32=r4, @ANYBLOB="0c009900040000001e0000001c00a6800a00060008021100000100000a00060008021100000000000800a50001000000"], 0x4c}}, 0x8000) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) close(r1) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r8, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000001a80)=""/102, 0x66}], 0x4}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x40000020, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000010000000000000300000014000180060001"], 0x28}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000010000000000000300000014000180060001"], 0x28}}, 0x0) 19.063539677s ago: executing program 1 (id=1602): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000006986c55bc56679b242b4de1d5368217710d1569627cc94ea64d", @ANYRES16=r0, @ANYBLOB="0100000000010000000001000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) 18.901798884s ago: executing program 1 (id=1605): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="f78c00000000000000000100000008000200030000000100010076657468305f6d616376746170000000"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x990d1af6fd753464}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x20000080) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000001000005ff000000000000000000007fd72b004a880a527eb371", @ANYRES32=0x0, @ANYBLOB="1922000000000000140012800b0001ff0f00000000000000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) 17.774430365s ago: executing program 4 (id=1614): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) socket$packet(0x11, 0xa, 0x300) (async) socket$packet(0x11, 0xa, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0) unshare(0x26020480) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x84}}, 0x0) r7 = socket(0x22, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r9, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r9, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bind$vsock_stream(r7, &(0x7f0000000740), 0x10) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r10, 0x118, 0x1, 0x0, 0x0) 17.720602822s ago: executing program 2 (id=1615): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000080000008500100083000b0000000000000000cb90cba4e2ad9311188d66d4a589bf1f26ab9fff8ee8680064eeccfc39036f4159522a412214ff89e0ecc027d59ce540b41858cd3093c9eb8d13111f8291ea19778bba07c5b89a5b962b19f34064724761c67c86"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_sctp(0x2, 0xb, 0x84) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011900000000000ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f29bc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r1, &(0x7f0000000300)=""/212, 0xd4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="bb008100660008005019001c00e4000200000078ac141426ac1414bbb7f9445df6dde2b3e6ea4b9e5e716b51e62f274482efe27b34354bfaec2b7b45c5d023b544106eeffba0243793344135ebb2f58b0556e9887837c4742702959d697b285159d4a513d4061a19cb6c5f963f4e2c8ad8407d414ab3b3a00bafa8392aca63a06dbaacb69fbe954f017a694d0945ddcca808bed4554e30475d6b66e4337d9ceaf025af83c03ffc812749d8fc19dd1f3cda0cd6e3a2041a5492a6da875c3414d9b26868e6f8c85f8bd1496d0b00fc"], 0x32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=@gettaction={0xd8, 0x32, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7de1}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd8}}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x4000000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="09fa6c9300"/20], 0x14}], 0x1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001200)={0x60000010}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000280)={0x1000}) 17.412471923s ago: executing program 4 (id=1618): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) (async) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000100), &(0x7f0000000140)) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x1ff) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r3, &(0x7f00000001c0)=""/171, 0xab, 0x10000, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000280)) (async) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000002c0)={'wg0\x00'}) (async) connect$l2tp6(r3, &(0x7f0000000300)={0xa, 0x0, 0x3, @mcast1, 0x800, 0x4}, 0x20) (async) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) (async) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000440)={r5, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) (async) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000500)={r6, 0x3c, "9790223ddffbc254b7b9d9a5e5c559649e22ae6c687cad7457b272a2326100ab377ca18c5989ea5778d601da15935ef42b59488fce372ff1770721d9"}, &(0x7f0000000580)=0x44) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000005c0)={r7, 0xb1, "d438df1891d1410ed39f7f3df9adf95a1a68f6ce162beb787b7a14d8d556583dd0958437d4a11ac356ae19215ac16d38619e15a27b65871b443b99b944aa2f0a164beece7c739bd565bac3013412ca2d43dcc82e5139bfd2373f9286487a6b57903c068bf29d473a192e45b85051554d7eb67d36b0c044a4bbcd29b5ce91d166fec4a5ed8f4e756ac9102e564f15f9ea61d1a98abb61ad4865fbc69aa125714997922b7f5a18898aaa0c2adc8d48bcf88f"}, &(0x7f0000000680)=0xb9) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000700)=r8, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@dellink={0x70, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x400, 0x41400}, [@IFLA_CARRIER={0x5, 0x21, 0xb}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac8d}, @IFLA_PHYS_SWITCH_ID={0x13, 0x24, "3fac01aff9dee9693ea354c0769c70"}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_OPERSTATE={0x5, 0x10, 0x30}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008001}, 0x880) (async) socketpair(0x27, 0x1, 0x3ffb, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$netlink(r10, &(0x7f0000000900)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r10) sendmsg$MPTCP_PM_CMD_REMOVE(r11, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r12, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r11) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, r13, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000c00)) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, &(0x7f0000000c40)=""/203, &(0x7f0000000d40)=0xcb) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000e80)={0x0, 0xfffffffe}, &(0x7f0000000ec0)=0x8) 17.212575636s ago: executing program 4 (id=1621): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x18}, 0x8801) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00825598c364413f117329631ec22bf02453ffff"], 0x28}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) 17.154700798s ago: executing program 4 (id=1622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1b, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x842}, 0x44000) write$tcp_congestion(r3, 0x0, 0xeffd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0xb0, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x47a7}, [@IFLA_LINKINFO={0x88, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x78, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0x1e, 0x1, {0x10000, 0x5f5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3e9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 17.020399665s ago: executing program 4 (id=1624): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300), 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x2, 0x10}, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={&(0x7f0000000780)="2f435b1eaa2ad9bc7971cf97d1ec88c2fcbf28d48a8661b1a89890c15a9b4c3b86771322e7e7d7ae26544271821ef06a350a8aeb49077c30401a4c657c6707ddc0495d09e482abfc33a9af16926353434be207c30c4ab2f2dec2c0806194e600159007963c5ef4fbec34a8e4f9b773304a6f6e8b9841114c58d3523d0e60833a9bcfa777a32121db484273fbfac1c5ca7b783828fffd77b5dc3c8fe4d674aa3a97993161e4aadaadde437a13b8242d39e7c72b8322e4b288a3d6ec714f4932c30058a4dd769fc774d2a8aff7d7a609ea360afc0ea263549f5a9c4f0457dda6bea428e47d57e0fb6b693c55eb06153b89", &(0x7f0000000880)=""/152, &(0x7f00000006c0)="eeae", &(0x7f0000000700)="65b7fae0d2b236f287e28a58ca6ae527bcbabe393c56fedbb63e0a59b05b30962aa4f2a5170ed1a2f5ff6c18de267290c48aac17eedce90f7ae49ee4f8", 0x20, r5}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x11, &(0x7f00000002c0)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000080)='GPL\x00', 0x81, 0xa0, &(0x7f0000000400)=""/160, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x25, r2, 0x8, &(0x7f00000000c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x9, 0x0, 0x1}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000005c0)=[r8, r9], 0x0, 0x10, 0x7}, 0x94) close(0x3) r10 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 16.716584507s ago: executing program 3 (id=1627): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="fdaf24ffff768000000000ebd9ea00"/24], 0x14}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40800000000000073116c00000000008510000002000000b7000000000000009500c2006a2000009500bc4dca72c25060cf59a47ba0c5b5f70dd6f3e4"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) 16.716156622s ago: executing program 4 (id=1628): r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7109016802"], 0x5) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f00000003c0)=0x4, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x4, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @mcast2}, 0x1c) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fedbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="14002c"], 0x30}, 0x1, 0x0, 0x0, 0x30000080}, 0x10) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) socket$kcm(0x29, 0x2, 0x0) r12 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r12, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="e0000000150000042cbd7000fcdbdf25736861332d3531322d67656e65726963000000000000000000000000000000000000000000000000830005ca0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400"/224], 0xe0}}, 0x44001) 16.702071535s ago: executing program 2 (id=1629): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x6, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110af000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x2, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.580747641s ago: executing program 3 (id=1631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000400000200000000000000000000009500000011000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 16.537312502s ago: executing program 3 (id=1632): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r0, r2, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 16.252497601s ago: executing program 3 (id=1634): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8) (async) r2 = socket(0x11, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES8=r4, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aab4"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r6, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000040)={r0, r5, 0x4, 0xd7, &(0x7f0000000200)="921d09bd4cdc6d22e4410337f536fdb077b9d85e3c38adb4eddc8e4792464d29e3deed4a0cd3395b5f974b637295b096341277ed91c232743171a6dea8137420d6d5b9022f29c4f7a318586aab0a9ac7747b5a28e49e14efa27e7012e678af6d090f273ba394120af8d80f43ba28b7cb3cd4841f24308041ddceb784e6999d8e83e46344a6a2a3723b3bd8e0669d84c0e68f12722a7b7eaa9a98bdf3bd5201d967cb3d1a7f3de341a75e1e3f5c8bbce8961d9c62d6b3cb33d4953fe39b8f8087ef87a61fa32b0cc99203ca8b8734b506d791893d0457f3", 0x5, 0x1b, 0x88c, 0xf379, 0x0, 0x1, 0x38000000, 'syz1\x00'}) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 16.246839543s ago: executing program 2 (id=1635): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000000070104000000000000000001000006040007801400078008000240000000010900010073797a30000000000000004000000000f488382a08c5c2edd80647f02fa603efcd15a988260266d92b208136f29ae78f5128829a68140cd374e8d7fbec7df5cf54bead340d0000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, '\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000200200700000000001a00"/28], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 16.158362953s ago: executing program 3 (id=1636): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000c40)={r1, 0x139, 0xfffa}) 16.126957693s ago: executing program 2 (id=1637): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000880)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}, 0x1, "f3d6a06e0cdd4b0bacdfb7ccb7d040b1debcb0b17f2d06f2b9cbcb269549fb47", 0x8, 0x9, 0x9}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000cceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fda4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1a5e1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9cdf99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0010067fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e800fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700000000000011b64b378ee96af15cbbc65d72ae980b6df22b5ca3ea377f36beb44b45c6f84b3f4d2c62ca91b4df16fc8cc5d18b35213e5f67ec200e768ab28feaff2195724b2965ebca822af6c0a4e598d34f9b5f1eb43de209cd5541fe72d89d5f9819c1529c242b72ccdb9541e54fcccf12457df695126458ebffaaebe98748dea4f0a0b0a1683ff327ca05070000000000000088a571761be31e4fdd530604d32149c22f81adc983adc81b335d0579f47763a97af46500c91d5b2640242661beca1b4e695f7aac5ae46a72ac99ec395bdf16e3fc75e7acbb2d10060bef6a793082f8cfd4721588787c8a8c6257a8a11d49f7f7ed9de6efb7dd8058fb0c8125ee9c1691afa39b5a70d489efcd3e95a483c59f8fa7443e795eac454a68ab647e0d5381df6528858895d57274e97046659ac9488c85e5728987fa9d43660eb28b7befbb981f8fde8754d792146e49ee14bff102540e247a8780c80e3ff0688e8cb5c500446756d0b76244766deecc69c4c3435c125f0f06c772a051b690113e59485586e0ff"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="428758e2"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r6 = accept$netrom(0xffffffffffffffff, &(0x7f00000007c0)={{0x3, @bcast}, [@remote, @default, @netrom, @rose, @netrom, @bcast, @null, @netrom]}, &(0x7f0000000840)=0x48) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000008c0)={@broadcast, @local, 0x0, 0x1, [@loopback]}, 0x14) r7 = accept4$netrom(r6, 0x0, &(0x7f0000000140)=0xffffffffffffff0c, 0x800) recvmsg(r7, &(0x7f0000000400)={&(0x7f00000001c0)=@rc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000600)=""/133, 0x85}], 0x3, &(0x7f00000006c0)=""/215, 0xd7}, 0x8000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback, r4, 0x37, 0x8, r4, @void, @value=r4}, 0x20) 16.040666757s ago: executing program 0 (id=1638): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xc, 0x1, @multicast}]}, 0x40}}, 0x0) 16.039953704s ago: executing program 3 (id=1639): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$inet6(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r6], 0x4) 15.97561831s ago: executing program 0 (id=1640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffeb2, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x20, 0x13, 0x5, 0x0, 0x300, {0x7, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000044) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) 15.949005435s ago: executing program 2 (id=1641): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async, rerun: 64) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (rerun: 64) 15.843738097s ago: executing program 0 (id=1642): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000300)=0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x0, 0xffff}}) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0503000000000000f6ff0700000008000300", @ANYRES32=r9], 0x1c}}, 0x24044080) r10 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="0e6a8fecc8dfe7cde54bc02e7ac4a8c6e2676f7323491944667ded1d3e119fb20cb5e07f883297", 0x27}, {&(0x7f0000000100)="c15544b042ba4131e2674d6e4c7ce7bf0a13b0f95e80e28280553d8a2ed9e581dc48b53c708bb0cee7ee04b9d7fbfaf723cd1a63e9453d32615f6816a5252c7bdf4a62129ce7e11514e17ae881f2e24d64106b9ae7272fcd360050a49e1ac229c4860f6ec3cad0db67f5195edd435945ecaa452798be160f9c33e3ca0b58f4d85bd8bd14eca6fdc1cd6bef517aac3ee4382e3eaddfd43afb9d6a", 0x9a}, {&(0x7f0000000200)="f59e731c14de2f75d5f857b2a31b5b6d191737dfd987a26d726f880009f9854f37c097f1ca58280f32431c98654428cc96ee4b9f9670c00b3f09d4229ff6b22a8e", 0x41}], 0x3, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x1030, 0x880}, 0x44840) r11 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r11, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)="823a322ea7547267826b2d8a2f1318aa541bbb8d37b4a08364a90217d2fdc3c1978ab2d8bef0013f7a4b6cbae14eff35fb721af59a022237b707d9cbd8e31a726a77f3e55d14f0facb84a9fd1521b0c1696c11029f30344886092cef34c8244b4cff3386d269fb12a4eeda81939850ef5f17c40dbb3fe54667b8460ca5c0c547108f061b3ef790b5df29c96a9885ef9187e7781d6f1c351575167919afdb6c2c937799f05d340e856b2c266935f42d84f445b89881b57260f16864b24715fd4163606c3c35e4c2db687febb3cc57495a", 0xd0}], 0x1}}], 0x1, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="20000000100000001c0012800900010069706970000000000c0002800800140001000000"], 0x3c}}, 0x20000000) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="63e84055665fca1ee9c052cfc1faeaef73d31e33f18ce19bb404be467c063ecc5826f0bbe4ff0a79a14eb3800eaac56c937fb620901c22b1f0c279f9119c69220fa0c048d4898cbc0374fa66180d96f926178e2f347baded0aa656cf087dbc7e4f80543e618ba430ec290d122bd8fa35873f9317520f2a0b4796bb0896a420711aa698f5aebdc485612e3350516d05d8e2db", 0x92, 0xc001, &(0x7f0000000340)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) 15.837799321s ago: executing program 2 (id=1643): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x122}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0x122}}, 0x0) 15.721790991s ago: executing program 0 (id=1644): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000380)={0x4, [0x14, 0x6, 0xfffa, 0x6]}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x480) r6 = socket(0x22, 0x2, 0x4) bind$bt_hci(r6, &(0x7f00000001c0)={0x22, 0x4, 0x4}, 0x6) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, 0x0) (async) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@local}, &(0x7f00000001c0)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@local, 0x0}, &(0x7f00000001c0)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r7, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYRESDEC=r10, @ANYRES32=0x0, @ANYBLOB="000000ce0f"], 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYRESDEC=r10, @ANYRES32=0x0, @ANYBLOB="000000ce0f"], 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getlink={0x30, 0x12, 0x400, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x5020, 0x5001}, [@IFLA_EVENT={0x8, 0x2c, 0x1000}, @IFLA_TXQLEN={0x8, 0xd, 0x1bbf708e}]}, 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x40040) (async) sendmsg$nl_route(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getlink={0x30, 0x12, 0x400, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x5020, 0x5001}, [@IFLA_EVENT={0x8, 0x2c, 0x1000}, @IFLA_TXQLEN={0x8, 0xd, 0x1bbf708e}]}, 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x40040) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000300), &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) socket(0x25, 0x2, 0x4) (async) r12 = socket(0x25, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r12, 0x618f, 0x0) 15.342443134s ago: executing program 0 (id=1645): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket(0x15, 0x5, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000192c0)={0xc8, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @generic="6115b6cbc1242d722cc6214f3aec2de41706bfbbae444fd3ff95a6304e0e6390b4b58a8c2371a8e5bc3148620861d1ced308d7c90aaff099ff0e2f6b14c94dce1a33547310488f2cb11ed52248edaf2c36ec037b85684b798180d5d4edcb141136850396633a16cfc9015558e1578b16c20c1247bf1340ddd028f17594293fc17b154855a0b39dbebc1342998c572045c9257f92b55fdb6d7d89f3778a5346e3137b03763c204d7b0d"]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000000)={0x80000000, {{0xa, 0x4e24, 0x6, @loopback, 0x1}}}, 0x88) 15.17659527s ago: executing program 0 (id=1646): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.143943853s ago: executing program 32 (id=1605): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="f78c00000000000000000100000008000200030000000100010076657468305f6d616376746170000000"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x990d1af6fd753464}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x20000080) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000001000005ff000000000000000000007fd72b004a880a527eb371", @ANYRES32=0x0, @ANYBLOB="1922000000000000140012800b0001ff0f00000000000000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) 1.115991819s ago: executing program 33 (id=1628): r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7109016802"], 0x5) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f00000003c0)=0x4, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x4, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @mcast2}, 0x1c) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fedbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="14002c"], 0x30}, 0x1, 0x0, 0x0, 0x30000080}, 0x10) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) socket$kcm(0x29, 0x2, 0x0) r12 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r12, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="e0000000150000042cbd7000fcdbdf25736861332d3531322d67656e65726963000000000000000000000000000000000000000000000000830005ca0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400"/224], 0xe0}}, 0x44001) 89.698902ms ago: executing program 34 (id=1646): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 53.146571ms ago: executing program 35 (id=1643): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x122}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0x122}}, 0x0) 0s ago: executing program 36 (id=1639): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$inet6(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r6], 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 82.670862][ T5851] cgroup: Unknown subsys name 'net' [ 82.820271][ T5851] cgroup: Unknown subsys name 'cpuset' [ 82.829419][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.461482][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.835644][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.843591][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.852101][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.860100][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.867752][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.875042][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.885185][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.897079][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.945719][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.976643][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.127611][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.135495][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.143094][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.151614][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.159342][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.294777][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.302825][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.310421][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.318844][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.326672][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.412459][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.423784][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.432339][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.444682][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.453356][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.787351][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 88.010353][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 88.053529][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.061534][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.069047][ T5862] bridge_slave_0: entered allmulticast mode [ 88.076494][ T5862] bridge_slave_0: entered promiscuous mode [ 88.117500][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.124691][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.132558][ T5862] bridge_slave_1: entered allmulticast mode [ 88.141559][ T5862] bridge_slave_1: entered promiscuous mode [ 88.248445][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.281673][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 88.292832][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 88.306880][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.435781][ T5862] team0: Port device team_slave_0 added [ 88.491027][ T5862] team0: Port device team_slave_1 added [ 88.515786][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.523150][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.530378][ T5861] bridge_slave_0: entered allmulticast mode [ 88.538000][ T5861] bridge_slave_0: entered promiscuous mode [ 88.568432][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 88.581179][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.588575][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.595709][ T5861] bridge_slave_1: entered allmulticast mode [ 88.603269][ T5861] bridge_slave_1: entered promiscuous mode [ 88.681748][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.743793][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.751232][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.777248][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.791401][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.800087][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.826019][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.855611][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.865133][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.872718][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.880412][ T5877] bridge_slave_0: entered allmulticast mode [ 88.888191][ T5877] bridge_slave_0: entered promiscuous mode [ 88.912876][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.921074][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.928850][ T5871] bridge_slave_0: entered allmulticast mode [ 88.936062][ T5871] bridge_slave_0: entered promiscuous mode [ 88.962093][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.969699][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.976925][ T5877] bridge_slave_1: entered allmulticast mode [ 88.984061][ T5877] bridge_slave_1: entered promiscuous mode [ 88.997966][ T51] Bluetooth: hci1: command tx timeout [ 89.023180][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.032822][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.040110][ T5871] bridge_slave_1: entered allmulticast mode [ 89.048223][ T5871] bridge_slave_1: entered promiscuous mode [ 89.076645][ T51] Bluetooth: hci0: command tx timeout [ 89.092003][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.137290][ T5861] team0: Port device team_slave_0 added [ 89.145524][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.174232][ T5862] hsr_slave_0: entered promiscuous mode [ 89.180736][ T5862] hsr_slave_1: entered promiscuous mode [ 89.215180][ T5861] team0: Port device team_slave_1 added [ 89.237220][ T51] Bluetooth: hci2: command tx timeout [ 89.244717][ T5877] team0: Port device team_slave_0 added [ 89.254246][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.291739][ T5877] team0: Port device team_slave_1 added [ 89.315584][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.325044][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.332868][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.340885][ T5874] bridge_slave_0: entered allmulticast mode [ 89.348385][ T5874] bridge_slave_0: entered promiscuous mode [ 89.396883][ T51] Bluetooth: hci3: command tx timeout [ 89.413980][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.421245][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.428448][ T5874] bridge_slave_1: entered allmulticast mode [ 89.435624][ T5874] bridge_slave_1: entered promiscuous mode [ 89.442985][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.450033][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.476023][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.486758][ T51] Bluetooth: hci4: command tx timeout [ 89.500687][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.507892][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.534290][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.551436][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.559178][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.585925][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.623410][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.631101][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.657890][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.700134][ T5871] team0: Port device team_slave_0 added [ 89.751744][ T5871] team0: Port device team_slave_1 added [ 89.774786][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.833384][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.850380][ T5877] hsr_slave_0: entered promiscuous mode [ 89.857134][ T5877] hsr_slave_1: entered promiscuous mode [ 89.863321][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 89.869582][ T5877] Cannot create hsr debugfs directory [ 89.906278][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.913629][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.939639][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.952432][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.959798][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.990047][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.049090][ T5861] hsr_slave_0: entered promiscuous mode [ 90.055524][ T5861] hsr_slave_1: entered promiscuous mode [ 90.061980][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 90.067772][ T5861] Cannot create hsr debugfs directory [ 90.083899][ T5874] team0: Port device team_slave_0 added [ 90.093250][ T5874] team0: Port device team_slave_1 added [ 90.251570][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.259721][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.285725][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.298725][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.305678][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.332359][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.395166][ T5871] hsr_slave_0: entered promiscuous mode [ 90.401734][ T5871] hsr_slave_1: entered promiscuous mode [ 90.408411][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 90.414156][ T5871] Cannot create hsr debugfs directory [ 90.548289][ T5874] hsr_slave_0: entered promiscuous mode [ 90.554845][ T5874] hsr_slave_1: entered promiscuous mode [ 90.561417][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 90.567477][ T5874] Cannot create hsr debugfs directory [ 90.689499][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.703489][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.733780][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.784209][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.939439][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.951119][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.985653][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.999885][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.080436][ T51] Bluetooth: hci1: command tx timeout [ 91.102156][ T5877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.122091][ T5877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.156891][ T51] Bluetooth: hci0: command tx timeout [ 91.162994][ T5877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.174307][ T5877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.232564][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.252499][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.264824][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.298944][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.317274][ T51] Bluetooth: hci2: command tx timeout [ 91.420644][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.438905][ T5874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.452834][ T5874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.477012][ T51] Bluetooth: hci3: command tx timeout [ 91.490977][ T5874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.503123][ T5874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.532074][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.557698][ T51] Bluetooth: hci4: command tx timeout [ 91.593283][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.635927][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.643286][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.660372][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.675035][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.704875][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.712067][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.750017][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.757214][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.783854][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.799154][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.806284][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.815103][ T43] cfg80211: failed to load regulatory.db [ 91.861223][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.888127][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.895258][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.928608][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.935726][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.969380][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.026402][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.064859][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.072097][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.124912][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.132163][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.171316][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.283191][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.364711][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.371963][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.400050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.407328][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.632596][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.672361][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.785606][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.842853][ T5877] veth0_vlan: entered promiscuous mode [ 92.908618][ T5877] veth1_vlan: entered promiscuous mode [ 92.947640][ T5861] veth0_vlan: entered promiscuous mode [ 92.985680][ T5861] veth1_vlan: entered promiscuous mode [ 93.036112][ T5862] veth0_vlan: entered promiscuous mode [ 93.058921][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.082316][ T5877] veth0_macvtap: entered promiscuous mode [ 93.094301][ T5877] veth1_macvtap: entered promiscuous mode [ 93.104813][ T5862] veth1_vlan: entered promiscuous mode [ 93.123637][ T5861] veth0_macvtap: entered promiscuous mode [ 93.134535][ T5861] veth1_macvtap: entered promiscuous mode [ 93.168102][ T51] Bluetooth: hci1: command tx timeout [ 93.188544][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.220536][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.238738][ T51] Bluetooth: hci0: command tx timeout [ 93.249814][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.264724][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.276040][ T5862] veth0_macvtap: entered promiscuous mode [ 93.322368][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.340714][ T3006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.354834][ T5862] veth1_macvtap: entered promiscuous mode [ 93.376795][ T3006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.385566][ T3006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.396839][ T51] Bluetooth: hci2: command tx timeout [ 93.410918][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.423487][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.454240][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.465147][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.482269][ T2967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.534043][ T5871] veth0_vlan: entered promiscuous mode [ 93.557288][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.573440][ T51] Bluetooth: hci3: command tx timeout [ 93.624586][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.637388][ T51] Bluetooth: hci4: command tx timeout [ 93.697951][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.709281][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.716253][ T5871] veth1_vlan: entered promiscuous mode [ 93.721643][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.753690][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.764397][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.788684][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.798545][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.803832][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.872817][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.882971][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.912379][ T5871] veth0_macvtap: entered promiscuous mode [ 93.950655][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.951433][ T5874] veth0_vlan: entered promiscuous mode [ 93.978791][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.992053][ T5871] veth1_macvtap: entered promiscuous mode [ 94.025244][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.048204][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.055221][ T5877] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.061031][ T5874] veth1_vlan: entered promiscuous mode [ 94.139311][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.227981][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.228405][ T5979] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.240350][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.251112][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.259641][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.267496][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.293267][ T5874] veth0_macvtap: entered promiscuous mode [ 94.313029][ T139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.324002][ T139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.367958][ T5979] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.403650][ T139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.450456][ T5874] veth1_macvtap: entered promiscuous mode [ 94.493663][ T139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.629289][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.662463][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.670945][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.691929][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.727040][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.761976][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.778435][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.834362][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.863169][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.886103][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 94.896430][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.896452][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.034332][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 95.153703][ T6005] warning: `syz.1.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.190406][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.211674][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.250211][ T51] Bluetooth: hci1: command tx timeout [ 95.318597][ T51] Bluetooth: hci0: command tx timeout [ 95.453194][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.479494][ T51] Bluetooth: hci2: command tx timeout [ 95.490180][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.558969][ T6015] netlink: 'syz.3.13': attribute type 4 has an invalid length. [ 95.615322][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13'. [ 95.640919][ T51] Bluetooth: hci3: command tx timeout [ 95.713023][ T6031] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 95.721460][ T51] Bluetooth: hci4: command tx timeout [ 95.732985][ T6031] netlink: 'syz.2.17': attribute type 2 has an invalid length. [ 95.941200][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.952242][ T6039] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 95.965858][ T6039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.991246][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 96.042899][ T6047] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21'. [ 96.147211][ T6046] sctp: failed to load transform for md5: -2 [ 96.521788][ T6071] netlink: 'syz.2.26': attribute type 2 has an invalid length. [ 96.549956][ T6071] netlink: 244 bytes leftover after parsing attributes in process `syz.2.26'. [ 96.596518][ T6063] sctp: failed to load transform for md5: -2 [ 96.729243][ T6081] tipc: Enabling of bearer rejected, failed to enable media [ 97.076211][ T6095] GUP no longer grows the stack in syz.2.33 (6095): 200000006000-200000008000 (200000005000) [ 97.131952][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT(full) [ 97.131976][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.131994][ T6095] Call Trace: [ 97.132001][ T6095] [ 97.132009][ T6095] dump_stack_lvl+0x189/0x250 [ 97.132041][ T6095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.132063][ T6095] ? __pfx__printk+0x10/0x10 [ 97.132086][ T6095] ? find_vma+0xe7/0x160 [ 97.132124][ T6095] __get_user_pages+0x24d0/0x2ce0 [ 97.132145][ T6095] ? __lock_acquire+0xab9/0xd20 [ 97.132195][ T6095] ? __gup_longterm_locked+0xc68/0x1660 [ 97.132225][ T6095] __gup_longterm_locked+0xde9/0x1660 [ 97.132261][ T6095] ? sanity_check_pinned_pages+0x123a/0x1300 [ 97.132291][ T6095] gup_fast_fallback+0x1e6a/0x2010 [ 97.132352][ T6095] ? __pfx_gup_fast_fallback+0x10/0x10 [ 97.132380][ T6095] ? __lock_acquire+0xab9/0xd20 [ 97.132412][ T6095] ? pin_user_pages_fast+0x4d/0xb0 [ 97.132437][ T6095] iov_iter_extract_pages+0x35a/0x5e0 [ 97.132470][ T6095] extract_iter_to_sg+0xe46/0x24e0 [ 97.132505][ T6095] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 97.132526][ T6095] ? __local_bh_enable_ip+0x12d/0x1c0 [ 97.132544][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.132564][ T6095] ? __local_bh_enable_ip+0x12d/0x1c0 [ 97.132581][ T6095] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 97.132604][ T6095] ? __asan_memset+0x22/0x50 [ 97.132627][ T6095] hash_sendmsg+0x4f4/0x11d0 [ 97.132674][ T6095] ? __pfx_hash_sendmsg+0x10/0x10 [ 97.132699][ T6095] __sock_sendmsg+0x219/0x270 [ 97.132747][ T6095] ____sys_sendmsg+0x52d/0x830 [ 97.132777][ T6095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.132811][ T6095] ? import_iovec+0x74/0xa0 [ 97.132839][ T6095] ___sys_sendmsg+0x21f/0x2a0 [ 97.132866][ T6095] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.132927][ T6095] ? __fget_files+0x2a/0x420 [ 97.132947][ T6095] ? __fget_files+0x3a0/0x420 [ 97.132974][ T6095] __sys_sendmmsg+0x227/0x430 [ 97.133004][ T6095] ? __pfx___sys_sendmmsg+0x10/0x10 [ 97.133026][ T6095] ? do_futex+0x395/0x420 [ 97.133059][ T6095] ? fd_install+0x97/0x540 [ 97.133107][ T6095] ? rcu_is_watching+0x15/0xb0 [ 97.133133][ T6095] __x64_sys_sendmmsg+0xa0/0xc0 [ 97.133159][ T6095] do_syscall_64+0xfa/0x3b0 [ 97.133178][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.133197][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.133216][ T6095] ? clear_bhb_loop+0x60/0xb0 [ 97.133239][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.133257][ T6095] RIP: 0033:0x7f9bf798eec9 [ 97.133280][ T6095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.133295][ T6095] RSP: 002b:00007f9bf881f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 97.133316][ T6095] RAX: ffffffffffffffda RBX: 00007f9bf7be5fa0 RCX: 00007f9bf798eec9 [ 97.133329][ T6095] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 97.133351][ T6095] RBP: 00007f9bf7a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.133362][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.133373][ T6095] R13: 00007f9bf7be6038 R14: 00007f9bf7be5fa0 R15: 00007fff769e7028 [ 97.133404][ T6095] [ 97.653344][ T6111] delete_channel: no stack [ 97.952693][ T6123] syzkaller0: entered promiscuous mode [ 97.959552][ T6123] syzkaller0: entered allmulticast mode [ 97.971117][ T6128] netlink: 'syz.1.44': attribute type 29 has an invalid length. [ 98.716368][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.292779][ T6130] netlink: 'syz.1.44': attribute type 29 has an invalid length. [ 99.304167][ T6134] veth0: entered promiscuous mode [ 99.309958][ T6135] veth0: left promiscuous mode [ 99.310572][ T6128] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 99.459941][ T6161] __nla_validate_parse: 8 callbacks suppressed [ 99.459959][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.52'. [ 99.621054][ T6161] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 99.637835][ T6172] netlink: 'syz.0.54': attribute type 10 has an invalid length. [ 99.677621][ T6161] gretap1: entered promiscuous mode [ 99.688646][ T6161] gretap1: entered allmulticast mode [ 99.719552][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 99.766382][ T6172] team0: Device veth1_macvtap failed to register rx_handler [ 99.906761][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 99.938285][ T6185] netlink: 'syz.1.55': attribute type 3 has an invalid length. [ 99.979894][ T6189] netlink: 72 bytes leftover after parsing attributes in process `syz.3.57'. [ 100.257189][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 100.332827][ T6208] syz.1.64 uses obsolete (PF_INET,SOCK_PACKET) [ 100.361264][ T5872] IPVS: starting estimator thread 0... [ 100.369960][ T6205] netlink: 64 bytes leftover after parsing attributes in process `syz.4.62'. [ 100.486825][ T6211] IPVS: using max 26 ests per chain, 62400 per kthread [ 100.856787][ T6235] netlink: 'syz.1.72': attribute type 6 has an invalid length. [ 100.888735][ T6240] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.455357][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 101.479371][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 101.551165][ T6266] tipc: Started in network mode [ 101.553768][ T6263] trusted_key: syz.2.82 sent an empty control message without MSG_MORE. [ 101.566424][ T6266] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 101.596508][ T6266] tipc: Enabled bearer , priority 10 [ 102.206099][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 102.707625][ T5935] tipc: Node number set to 10136234 [ 102.747813][ T6338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.764610][ T6340] : renamed from bridge_slave_0 (while UP) [ 102.824805][ T6340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.054216][ T6360] Zero length message leads to an empty skb [ 103.144994][ T6360] netlink: 68 bytes leftover after parsing attributes in process `syz.2.105'. [ 103.211316][ T6366] delete_channel: no stack [ 103.304751][ T6372] !: renamed from bond_slave_0 (while UP) [ 103.330233][ T6371] openvswitch: netlink: Flow actions attr not present in new flow. [ 103.565518][ T6385] netlink: 'syz.2.114': attribute type 2 has an invalid length. [ 103.587980][ T5935] IPVS: starting estimator thread 0... [ 103.673918][ T6391] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 103.686816][ T6387] IPVS: using max 34 ests per chain, 81600 per kthread [ 104.140709][ T6420] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 104.415721][ T6434] team0: Device ip6gre1 is of different type [ 104.747338][ T6449] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 104.933778][ T6459] __nla_validate_parse: 5 callbacks suppressed [ 104.933803][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 105.829201][ T6489] netlink: 300 bytes leftover after parsing attributes in process `syz.4.147'. [ 105.842437][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 106.109645][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 106.487223][ T6527] netlink: 'syz.3.157': attribute type 3 has an invalid length. [ 106.495923][ T6527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.157'. [ 106.520349][ T6527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.157'. [ 106.604822][ T6528] netlink: 'syz.2.156': attribute type 12 has an invalid length. [ 106.947699][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 106.993182][ T6544] Bluetooth: MGMT ver 1.23 [ 107.005259][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.047601][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 107.059006][ T6548] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 107.093744][ T6548] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 107.456289][ T6576] netlink: 'syz.4.174': attribute type 1 has an invalid length. [ 107.478370][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 107.651052][ T6587] netlink: 'syz.3.176': attribute type 12 has an invalid length. [ 107.671328][ T6587] netlink: 'syz.3.176': attribute type 29 has an invalid length. [ 107.762409][ T6602] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 108.123631][ T6622] netlink: 'syz.4.183': attribute type 1 has an invalid length. [ 108.163981][ T6620] netlink: zone id is out of range [ 108.182757][ T6620] netlink: zone id is out of range [ 108.189139][ T6620] netlink: zone id is out of range [ 108.199379][ T6620] netlink: zone id is out of range [ 108.206069][ T6620] netlink: zone id is out of range [ 108.212689][ T6620] netlink: zone id is out of range [ 108.218118][ T6620] netlink: zone id is out of range [ 108.223795][ T6620] netlink: zone id is out of range [ 108.230177][ T6620] netlink: zone id is out of range [ 108.241457][ T6626] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 108.274528][ T6622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.429022][ T6626] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.349792][ T6697] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.402423][ T6697] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.455449][ T6698] syz.3.205 (6698) used greatest stack depth: 15608 bytes left [ 109.985816][ T6731] team0: No ports can be present during mode change [ 110.003870][ T6733] team0: No ports can be present during mode change [ 110.048099][ T6735] __nla_validate_parse: 19 callbacks suppressed [ 110.048117][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 110.418658][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 110.522627][ T6756] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 110.580559][ T6756] netlink: 76 bytes leftover after parsing attributes in process `syz.4.223'. [ 110.640555][ T6761] erspan0: entered promiscuous mode [ 110.646180][ T6761] erspan0: entered allmulticast mode [ 110.662927][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 110.675015][ T6770] 8021q: VLANs not supported on lo [ 110.882081][ T6778] netlink: 'syz.2.230': attribute type 39 has an invalid length. [ 111.151360][ T6796] netlink: 116 bytes leftover after parsing attributes in process `syz.1.238'. [ 111.265986][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 111.442029][ T6811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.244'. [ 111.904755][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 112.043289][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 112.337963][ T6859] tipc: Started in network mode [ 112.342902][ T6859] tipc: Node identity 6a0d0079ed05, cluster identity 4711 [ 112.380819][ T6859] tipc: Enabled bearer , priority 0 [ 112.420947][ T6860] syzkaller0: entered promiscuous mode [ 112.431420][ T6860] syzkaller0: entered allmulticast mode [ 112.463674][ T6863] tipc: Started in network mode [ 112.471474][ T6863] tipc: Node identity 9e818bfe82d2, cluster identity 4711 [ 112.478907][ T6863] tipc: Enabled bearer , priority 0 [ 112.485917][ T6867] syzkaller0: entered promiscuous mode [ 112.494287][ T6867] syzkaller0: entered allmulticast mode [ 112.579754][ T6867] tipc: Resetting bearer [ 112.630845][ T6867] tipc: Disabling bearer [ 112.673599][ T6860] tipc: Resetting bearer [ 112.750017][ T6883] netlink: 'syz.2.264': attribute type 2 has an invalid length. [ 112.775558][ T6860] tipc: Disabling bearer [ 112.834768][ T6887] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 112.857019][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 113.017205][ T6897] netlink: 'syz.3.270': attribute type 21 has an invalid length. [ 113.217917][ T6910] tipc: Started in network mode [ 113.225031][ T6910] tipc: Node identity , cluster identity 4711 [ 113.237875][ T6910] tipc: Failed to obtain node identity [ 113.243392][ T6910] tipc: Enabling of bearer rejected, failed to enable media [ 113.382008][ T6905] syzkaller0: entered promiscuous mode [ 113.388760][ T6905] syzkaller0: entered allmulticast mode [ 114.421295][ T6923] syzkaller1: entered promiscuous mode [ 114.439585][ T6923] syzkaller1: entered allmulticast mode [ 114.651853][ T6947] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 114.665851][ T6943] tipc: Started in network mode [ 114.687141][ T6943] tipc: Node identity ac14140f, cluster identity 4711 [ 114.694423][ T6943] tipc: New replicast peer: 255.255.255.255 [ 114.745029][ T6943] tipc: Enabled bearer , priority 10 [ 114.923109][ T6952] pim6reg1: entered promiscuous mode [ 114.952468][ T6952] pim6reg1: entered allmulticast mode [ 115.276784][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.327434][ T6987] net_ratelimit: 460 callbacks suppressed [ 115.327454][ T6987] openvswitch: netlink: IPv4 tunnel dst address is zero [ 115.345972][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.770853][ T7008] __nla_validate_parse: 9 callbacks suppressed [ 115.770870][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 115.858797][ T5872] tipc: Node number set to 2886997007 [ 116.238232][ T7034] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 116.605612][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.306'. [ 116.882808][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 117.017036][ T7072] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 117.024824][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 117.094780][ T7062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.255954][ T7071] syzkaller0: entered promiscuous mode [ 117.261711][ T7071] syzkaller0: entered allmulticast mode [ 117.428006][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 117.597718][ T7084] tipc: Enabled bearer , priority 0 [ 117.636952][ T7084] syzkaller0: entered promiscuous mode [ 117.643122][ T7084] syzkaller0: entered allmulticast mode [ 117.667388][ T7084] tipc: Resetting bearer [ 117.685855][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 117.705479][ T7082] tipc: Resetting bearer [ 117.706209][ T7090] netlink: 'syz.3.316': attribute type 42 has an invalid length. [ 117.757945][ T7082] tipc: Disabling bearer [ 117.825148][ T7095] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 117.850294][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.316'. [ 117.877126][ T7095] netlink: 'syz.2.317': attribute type 2 has an invalid length. [ 117.887934][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 118.691708][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.736104][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 118.951163][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.959365][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.252059][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.275591][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.735786][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 119.842685][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.856936][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.865870][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.923197][ T7180] netlink: 'syz.2.335': attribute type 2 has an invalid length. [ 119.937637][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.160486][ T7193] netlink: 'syz.1.337': attribute type 19 has an invalid length. [ 120.201007][ T7195] pim6reg: entered allmulticast mode [ 120.236689][ T7197] pim6reg: left allmulticast mode [ 120.939358][ T7239] __nla_validate_parse: 5 callbacks suppressed [ 120.939378][ T7239] netlink: 15 bytes leftover after parsing attributes in process `syz.1.349'. [ 121.048965][ T7244] netlink: 84 bytes leftover after parsing attributes in process `syz.2.353'. [ 121.098987][ T7239] syz.1.349 uses old SIOCAX25GETINFO [ 121.388204][ T7265] netlink: 104 bytes leftover after parsing attributes in process `syz.0.358'. [ 121.430721][ T7273] netlink: 'syz.3.360': attribute type 29 has an invalid length. [ 121.441365][ T7269] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 121.452673][ T7275] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 121.512858][ T7261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.541177][ T7273] netlink: 'syz.3.360': attribute type 29 has an invalid length. [ 121.595032][ T7273] netlink: 500 bytes leftover after parsing attributes in process `syz.3.360'. [ 121.665854][ T7273] unsupported nla_type 58 [ 122.455740][ T7336] sch_fq: defrate 0 ignored. [ 122.562714][ T7339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 122.612293][ T7339] netlink: 104 bytes leftover after parsing attributes in process `syz.3.378'. [ 122.840462][ T3006] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.875400][ T3006] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.921415][ T3006] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.937465][ T3006] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.494200][ T7388] sctp: [Deprecated]: syz.1.394 (pid 7388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.494200][ T7388] Use struct sctp_sack_info instead [ 123.558175][ T7388] netlink: 'syz.1.394': attribute type 12 has an invalid length. [ 123.573980][ T7388] netlink: 'syz.1.394': attribute type 29 has an invalid length. [ 123.584241][ T7388] netlink: 148 bytes leftover after parsing attributes in process `syz.1.394'. [ 123.598650][ T7388] netlink: 43 bytes leftover after parsing attributes in process `syz.1.394'. [ 123.625247][ T7393] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 123.716091][ T7400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.397'. [ 123.747434][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 123.921346][ T7408] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 123.929479][ T51] block nbd0: Receive control failed (result -32) [ 124.212791][ T7429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.231226][ T7432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.297782][ T7438] syz_tun: entered allmulticast mode [ 124.464444][ T7442] xt_l2tp: missing protocol rule (udp|l2tpip) [ 124.516388][ T7452] xt_l2tp: missing protocol rule (udp|l2tpip) [ 124.955508][ T7424] syz_tun: left allmulticast mode [ 125.153843][ T7487] netlink: 'syz.1.423': attribute type 2 has an invalid length. [ 125.661395][ T7514] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 125.933136][ T7531] Bluetooth: MGMT ver 1.23 [ 127.086742][ T7576] 8021q: VLANs not supported on lo [ 127.144384][ T7581] netlink: 'syz.2.454': attribute type 3 has an invalid length. [ 127.162639][ T7581] __nla_validate_parse: 10 callbacks suppressed [ 127.162656][ T7581] netlink: 68 bytes leftover after parsing attributes in process `syz.2.454'. [ 127.349870][ T7597] netlink: 60 bytes leftover after parsing attributes in process `syz.4.457'. [ 127.380464][ T7597] netlink: 60 bytes leftover after parsing attributes in process `syz.4.457'. [ 127.477464][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 127.496837][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 127.700998][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 127.794070][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.806193][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.841468][ T7625] netlink: 14 bytes leftover after parsing attributes in process `syz.2.464'. [ 128.132707][ T7625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.250922][ T7625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.323900][ T7625] bond0 (unregistering): Released all slaves [ 128.657417][ T7663] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.473'. [ 128.718330][ T7667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.472'. [ 128.763330][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 129.127387][ T7678] bond0: entered allmulticast mode [ 129.132586][ T7678] bond_slave_0: entered allmulticast mode [ 129.167715][ T7678] bond_slave_1: entered allmulticast mode [ 129.323130][ T7690] netlink: 'syz.3.483': attribute type 21 has an invalid length. [ 129.636468][ T7697] tipc: Enabled bearer , priority 0 [ 129.645228][ T7697] syzkaller0: entered promiscuous mode [ 129.650967][ T7697] syzkaller0: entered allmulticast mode [ 129.667648][ T7695] tipc: Resetting bearer [ 129.730747][ T7695] tipc: Disabling bearer [ 129.989778][ T7720] netlink: 'syz.4.492': attribute type 6 has an invalid length. [ 130.026512][ T7720] netlink: 'syz.4.492': attribute type 6 has an invalid length. [ 130.658460][ T7742] netlink: 'syz.2.500': attribute type 2 has an invalid length. [ 130.914684][ T7769] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 130.969187][ T7769] bond0: (slave ): Enslaving as an active interface with an up link [ 131.504209][ T7798] bridge2: entered promiscuous mode [ 131.514309][ T7798] bridge2: entered allmulticast mode [ 131.602066][ T7804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.775290][ T7816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.815061][ T7816] bond0: (slave rose0): Enslaving as an active interface with an up link [ 131.872344][ T7814] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 132.128529][ T7834] netlink: 'syz.0.530': attribute type 10 has an invalid length. [ 132.169600][ T7837] netlink: 'syz.3.531': attribute type 3 has an invalid length. [ 132.235172][ T7834] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 132.490003][ T7842] __nla_validate_parse: 18 callbacks suppressed [ 132.490020][ T7842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.532'. [ 132.494893][ T7851] netlink: 68 bytes leftover after parsing attributes in process `syz.0.534'. [ 132.549844][ T7855] netlink: 'syz.3.536': attribute type 6 has an invalid length. [ 132.764433][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.771107][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.021985][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.541'. [ 133.042685][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.542'. [ 133.069294][ T7875] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 133.080293][ T5991] IPVS: starting estimator thread 0... [ 133.216728][ T7881] IPVS: using max 29 ests per chain, 69600 per kthread [ 133.228621][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 133.261832][ T7892] netlink: 'syz.3.545': attribute type 2 has an invalid length. [ 133.562842][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 133.565802][ T51] Bluetooth: hci4: command tx timeout [ 134.230189][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 134.261876][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 134.290027][ T7922] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.315362][ T7925] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.494839][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 134.610076][ T7937] netlink: 9 bytes leftover after parsing attributes in process `syz.2.559'. [ 134.657244][ T7937] gretap0: entered promiscuous mode [ 135.968932][ T8011] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 135.983875][ T8011] nbd: couldn't find device at index 1048576 [ 136.418350][ T8031] tipc: Enabled bearer , priority 0 [ 136.444041][ T8037] syzkaller0: entered promiscuous mode [ 136.458131][ T8037] syzkaller0: entered allmulticast mode [ 136.579509][ T8037] tipc: Resetting bearer [ 136.588842][ T8030] tipc: Resetting bearer [ 136.647372][ T8030] tipc: Disabling bearer [ 136.702881][ T8048] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.522951][ T9] IPVS: starting estimator thread 0... [ 137.541890][ T8098] __nla_validate_parse: 12 callbacks suppressed [ 137.541908][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 137.666688][ T8099] IPVS: using max 25 ests per chain, 60000 per kthread [ 137.767679][ T8111] netlink: 44 bytes leftover after parsing attributes in process `syz.1.612'. [ 137.769663][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.612'. [ 137.786899][ T8110] netlink: 'syz.1.612': attribute type 2 has an invalid length. [ 137.811215][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.612'. [ 137.959035][ T8119] netlink: 80 bytes leftover after parsing attributes in process `syz.2.616'. [ 138.004753][ T8122] af_packet: tpacket_rcv: packet too big, clamped from 84 to 4294967272. macoff=96 [ 138.322898][ T8143] tipc: Enabling of bearer rejected, media not registered [ 138.349118][ T8143] netlink: 'syz.1.620': attribute type 9 has an invalid length. [ 138.538137][ T8152] tipc: Enabled bearer , priority 0 [ 138.635380][ T8152] syzkaller0: entered promiscuous mode [ 138.635841][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.627'. [ 138.665047][ T8152] syzkaller0: entered allmulticast mode [ 138.673062][ T8152] tipc: Resetting bearer [ 138.749955][ T8150] tipc: Resetting bearer [ 138.805751][ T8167] netlink: 180 bytes leftover after parsing attributes in process `syz.2.631'. [ 138.835212][ T8167] unsupported nlmsg_type 40 [ 139.629215][ T5935] tipc: Node number set to 475237374 [ 139.856287][ T8182] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 139.941218][ T8150] tipc: Disabling bearer [ 139.952261][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 140.150119][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.638'. [ 140.843434][ T8230] netlink: 'syz.3.650': attribute type 64 has an invalid length. [ 140.862829][ T8230] netlink: 5 bytes leftover after parsing attributes in process `syz.3.650'. [ 141.259811][ T8253] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 141.454221][ T1155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.485119][ T1155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.493581][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.028167][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.437019][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.837839][ T8319] __nla_validate_parse: 6 callbacks suppressed [ 142.837860][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 143.059677][ T8327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.682'. [ 144.029840][ T8356] netlink: 'syz.4.692': attribute type 24 has an invalid length. [ 144.032320][ T8357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.691'. [ 144.552847][ T8384] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 144.933903][ T8408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.994110][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.2.705'. [ 145.465047][ T8430] veth3: entered promiscuous mode [ 145.471021][ T8430] veth3: entered allmulticast mode [ 145.672148][ T8441] tipc: Enabled bearer , priority 0 [ 145.716729][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.754993][ T8452] netlink: 'syz.2.716': attribute type 2 has an invalid length. [ 145.784633][ T8441] syzkaller0: entered promiscuous mode [ 145.791688][ T8452] netlink: 'syz.2.716': attribute type 4 has an invalid length. [ 145.809679][ T8441] syzkaller0: entered allmulticast mode [ 145.817933][ T8441] tipc: Resetting bearer [ 145.960605][ T1155] tipc: Resetting bearer [ 145.996380][ T8459] netlink: 108 bytes leftover after parsing attributes in process `syz.4.718'. [ 146.006016][ T8440] tipc: Resetting bearer [ 146.012083][ T8458] netlink: 108 bytes leftover after parsing attributes in process `syz.4.718'. [ 146.064572][ T8463] netlink: 'syz.3.719': attribute type 11 has an invalid length. [ 146.072756][ T8463] netlink: 'syz.3.719': attribute type 5 has an invalid length. [ 146.082953][ T8463] netlink: 4112 bytes leftover after parsing attributes in process `syz.3.719'. [ 146.307006][ T8466] netlink: 88 bytes leftover after parsing attributes in process `syz.3.720'. [ 146.638077][ T8470] netlink: 300 bytes leftover after parsing attributes in process `syz.2.722'. [ 147.305118][ T8440] tipc: Disabling bearer [ 147.327975][ T8465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.720'. [ 147.633468][ T8495] ieee802154 phy0 wpan0: encryption failed: -90 [ 147.775954][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.863703][ T8506] team_slave_0: entered allmulticast mode [ 148.224248][ T8533] __nla_validate_parse: 1 callbacks suppressed [ 148.224269][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 148.598556][ T8544] netlink: 112 bytes leftover after parsing attributes in process `syz.4.742'. [ 148.599271][ T8545] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.742'. [ 148.913260][ T8556] netlink: 252 bytes leftover after parsing attributes in process `syz.1.748'. [ 149.175109][ T8564] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 149.201049][ T8564] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 149.222255][ T8564] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 149.232189][ T8564] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 149.473226][ T8584] geneve2: entered promiscuous mode [ 149.480210][ T8584] geneve2: entered allmulticast mode [ 149.490559][ T1155] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 149.505973][ T8584] batadv_slave_0: entered promiscuous mode [ 149.514544][ T1155] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 149.535121][ T1155] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 149.550008][ T2990] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 149.783886][ T8583] batadv_slave_0: left promiscuous mode [ 149.798652][ T8597] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 149.800392][ T8598] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 149.842682][ T8597] dummy0: entered allmulticast mode [ 149.850199][ T8597] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.979930][ T8602] netlink: 'syz.1.762': attribute type 33 has an invalid length. [ 149.989152][ T8602] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.762'. [ 150.383027][ T8623] openvswitch: netlink: Key 4 has unexpected len 4096 expected 12 [ 150.501504][ T8629] netlink: 'syz.3.773': attribute type 12 has an invalid length. [ 150.774982][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.833052][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.858193][ T1155] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.887519][ T1155] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.034822][ T8653] netlink: 200 bytes leftover after parsing attributes in process `syz.2.780'. [ 151.066501][ T8657] netlink: 48 bytes leftover after parsing attributes in process `syz.1.782'. [ 151.153029][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 151.199747][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 151.213292][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 151.222711][ T8662] netlink: 'syz.1.784': attribute type 12 has an invalid length. [ 151.236715][ T8662] netlink: 'syz.1.784': attribute type 11 has an invalid length. [ 151.343467][ T8667] gretap0: entered promiscuous mode [ 151.650173][ T8684] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 152.153159][ T8715] tipc: Invalid UDP bearer configuration [ 152.153210][ T8715] tipc: Enabling of bearer rejected, failed to enable media [ 152.170995][ T8711] tipc: Enabling of bearer rejected, failed to enable media [ 152.532908][ T8733] block nbd3: not configured, cannot reconfigure [ 152.559510][ T8732] nbd: nbd0 already in use [ 152.737816][ T8740] netlink: 'syz.2.809': attribute type 11 has an invalid length. [ 152.913381][ T8747] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 153.235747][ T8770] __nla_validate_parse: 11 callbacks suppressed [ 153.235765][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 153.337421][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 153.403415][ T8774] netlink: 48 bytes leftover after parsing attributes in process `syz.0.818'. [ 153.483133][ T8787] nbd: must specify a device to reconfigure [ 153.530653][ T8789] nbd: must specify a device to reconfigure [ 153.606279][ T8794] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 153.650071][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 153.665092][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 153.694950][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 153.912625][ T5867] udevd[5867]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 154.074105][ T8821] netlink: 'syz.2.829': attribute type 11 has an invalid length. [ 154.325023][ T8832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.833'. [ 154.347821][ T8832] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.833'. [ 154.494917][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 154.516682][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.659138][ T8846] netlink: 22 bytes leftover after parsing attributes in process `syz.3.839'. [ 154.971380][ T8864] netlink: 'syz.1.845': attribute type 21 has an invalid length. [ 155.122525][ T8870] netlink: 'syz.1.845': attribute type 7 has an invalid length. [ 155.301964][ T8884] dvmrp1: entered allmulticast mode [ 155.593242][ T8893] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 155.881690][ T8906] netlink: 'syz.3.857': attribute type 5 has an invalid length. [ 155.971967][ T8909] : renamed from bridge_slave_0 [ 156.617417][ T8948] netlink: 'syz.0.873': attribute type 2 has an invalid length. [ 157.149444][ T8974] netlink: 'syz.3.881': attribute type 5 has an invalid length. [ 157.877560][ T9004] IPVS: length: 157 != 24 [ 158.491894][ T9039] veth0: entered promiscuous mode [ 158.510842][ T9037] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.519080][ T9039] __nla_validate_parse: 11 callbacks suppressed [ 158.519099][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 158.709771][ T9039] veth0 (unregistering): left promiscuous mode [ 158.856466][ T9046] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 159.281338][ T9070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.913'. [ 159.424733][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 159.461369][ T9090] netlink: 48 bytes leftover after parsing attributes in process `syz.4.921'. [ 159.567770][ T9100] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 159.841577][ T9116] team_slave_0: mtu greater than device maximum [ 159.901931][ T9121] netlink: 'syz.0.930': attribute type 21 has an invalid length. [ 159.913654][ T9121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.930'. [ 159.925178][ T9121] netlink: 3 bytes leftover after parsing attributes in process `syz.0.930'. [ 160.092271][ T9135] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 160.452454][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.940'. [ 160.481045][ T9156] netlink: 'syz.3.940': attribute type 7 has an invalid length. [ 160.518519][ T9156] netlink: 'syz.3.940': attribute type 8 has an invalid length. [ 160.526218][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 160.648706][ T9156] bridge0: entered promiscuous mode [ 160.669890][ T9156] ip6gretap0: entered promiscuous mode [ 160.699076][ T9156] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 160.736373][ T9156] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 160.778741][ T9166] netlink: zone id is out of range [ 160.785406][ T9166] netlink: zone id is out of range [ 160.801628][ T9166] netlink: zone id is out of range [ 160.832289][ T9166] netlink: zone id is out of range [ 160.850327][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 160.857908][ T9166] netlink: zone id is out of range [ 160.864345][ T9166] netlink: zone id is out of range [ 160.900113][ T9166] netlink: zone id is out of range [ 161.255005][ T9203] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 161.311953][ T9203] IPVS: stopping backup sync thread 9206 ... [ 161.321368][ T9206] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 161.432375][ T9209] syzkaller1: entered promiscuous mode [ 161.441710][ T9209] syzkaller1: entered allmulticast mode [ 161.451892][ T9209] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 161.515317][ T9213] netlink: 52 bytes leftover after parsing attributes in process `syz.4.959'. [ 161.860491][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.868325][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.713363][ T9329] __nla_validate_parse: 8 callbacks suppressed [ 163.713382][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 163.791685][ T9329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.299731][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 164.366152][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'. [ 164.408208][ T9361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1002'. [ 164.426132][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1003'. [ 164.567224][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1003'. [ 164.764052][ T9375] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1005'. [ 165.099386][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1012'. [ 165.409168][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1017'. [ 165.435117][ T9405] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1017'. [ 165.466439][ T9407] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 166.267693][ T9473] net_ratelimit: 10 callbacks suppressed [ 166.267711][ T9473] openvswitch: netlink: Flow actions attr not present in new flow. [ 166.301526][ T9473] tipc: Enabled bearer , priority 0 [ 166.540158][ T9497] netlink: 'syz.2.1038': attribute type 3 has an invalid length. [ 166.689602][ T9506] netlink: 'syz.4.1043': attribute type 18 has an invalid length. [ 166.800864][ T9510] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 166.819320][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.828638][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.936780][ T9519] lo speed is unknown, defaulting to 1000 [ 167.002895][ T9519] lo speed is unknown, defaulting to 1000 [ 167.032862][ T9519] lo speed is unknown, defaulting to 1000 [ 167.144075][ T9519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 167.262882][ T9519] lo speed is unknown, defaulting to 1000 [ 167.296712][ T5872] tipc: Node number set to 2265448569 [ 167.304820][ T9519] lo speed is unknown, defaulting to 1000 [ 167.352615][ T9519] lo speed is unknown, defaulting to 1000 [ 167.409246][ T9519] lo speed is unknown, defaulting to 1000 [ 167.454807][ T9519] lo speed is unknown, defaulting to 1000 [ 167.549472][ T9550] lo speed is unknown, defaulting to 1000 [ 167.567973][ T9551] netlink: 'syz.0.1055': attribute type 11 has an invalid length. [ 167.736162][ T9563] netlink: 'syz.2.1060': attribute type 18 has an invalid length. [ 167.802327][ T9563] netlink: 'syz.2.1060': attribute type 18 has an invalid length. [ 167.885590][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.903383][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.938230][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.941205][ T9567] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 167.969254][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.040333][ T9572] vlan0: entered promiscuous mode [ 168.204988][ T9587] netlink: 'syz.0.1066': attribute type 3 has an invalid length. [ 168.527456][ T9610] openvswitch: netlink: IP tunnel dst address not specified [ 168.539088][ T9611] openvswitch: netlink: IP tunnel dst address not specified [ 168.717979][ T9625] tipc: Started in network mode [ 168.723160][ T9625] tipc: Node identity , cluster identity 4711 [ 168.730268][ T9625] tipc: Failed to obtain node identity [ 168.735779][ T9625] tipc: Enabling of bearer rejected, failed to enable media [ 168.841217][ T9631] __nla_validate_parse: 23 callbacks suppressed [ 168.841238][ T9631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1080'. [ 169.059411][ T9643] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.092443][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'. [ 169.143762][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'. [ 169.229597][ T9657] sctp: [Deprecated]: syz.1.1088 (pid 9657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.229597][ T9657] Use struct sctp_sack_info instead [ 169.495476][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 169.528234][ T9670] netlink: 'syz.2.1094': attribute type 4 has an invalid length. [ 169.536160][ T9670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 169.640478][ T9678] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1095'. [ 169.677314][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 169.690322][ T9678] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1095'. [ 169.715880][ T9678] netlink: 'syz.1.1095': attribute type 2 has an invalid length. [ 169.718393][ T9681] netlink: 'syz.3.1098': attribute type 5 has an invalid length. [ 169.730200][ T9678] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1095'. [ 169.807270][ T9674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1095'. [ 169.843211][ T9674] netlink: 'syz.1.1095': attribute type 6 has an invalid length. [ 169.884676][ T9674] netlink: 'syz.1.1095': attribute type 5 has an invalid length. [ 170.038924][ T9699] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.929464][ T9749] team0: Device gtp1 is of different type [ 171.450985][ T9740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.487820][ T9740] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 171.598157][ T9740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.604195][ T9740] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 171.696393][ T9790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.726069][ T9740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.744941][ T9740] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 171.796848][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.831153][ T9740] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.855912][ T9740] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 172.006679][ T9809] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 172.078862][ T9813] IPv6: NLM_F_REPLACE set, but no existing node found! [ 172.427166][ T9831] netlink: 'syz.4.1139': attribute type 1 has an invalid length. [ 172.456963][ T9827] netlink: 'syz.4.1139': attribute type 1 has an invalid length. [ 172.562801][ T9834] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 172.955884][ T9861] netlink: 'syz.0.1149': attribute type 12 has an invalid length. [ 172.984078][ T9864] netlink: 'syz.2.1150': attribute type 1 has an invalid length. [ 173.086402][ T9864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.168816][ T9865] bond0: (slave veth5): Enslaving as an active interface with a down link [ 173.209741][ T9874] bridge6: entered allmulticast mode [ 173.475280][ T9897] openvswitch: netlink: Flow key attr not present in new flow. [ 173.815273][ T9922] netlink: 'syz.1.1168': attribute type 11 has an invalid length. [ 173.852873][ T9922] __nla_validate_parse: 15 callbacks suppressed [ 173.852891][ T9922] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1168'. [ 173.988123][ T9932] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1171'. [ 174.040805][ T9936] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 174.333952][ T9953] batadv_slave_1: entered promiscuous mode [ 174.342906][ T9952] batadv_slave_1: left promiscuous mode [ 174.630363][ T9964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1181'. [ 174.733220][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 174.770344][ T9970] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1183'. [ 174.794226][ T9970] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1183'. [ 174.875529][ T9978] openvswitch: netlink: IP tunnel dst address not specified [ 175.208518][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 175.423111][T10010] openvswitch: netlink: IP tunnel dst address not specified [ 175.498428][T10014] : left allmulticast mode [ 175.512959][T10014] : left promiscuous mode [ 175.532582][T10014] bridge0: port 1() entered disabled state [ 175.593678][T10014] bridge_slave_1: left allmulticast mode [ 175.628362][T10014] bridge_slave_1: left promiscuous mode [ 175.657560][T10014] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.719696][T10026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1200'. [ 175.735943][T10014] bond0: (slave bond_slave_0): Releasing backup interface [ 175.741931][T10016] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1198'. [ 175.762977][T10016] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1198'. [ 175.781383][T10014] bond0: (slave bond_slave_1): Releasing backup interface [ 175.804085][T10014] team0: Port device team_slave_0 removed [ 175.814156][T10014] team0: Port device team_slave_1 removed [ 175.835329][T10014] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 175.854321][ T6314] syz0: Port: 1 Link DOWN [ 175.938925][T10035] netlink: 'syz.2.1204': attribute type 2 has an invalid length. [ 176.118638][ T51] Bluetooth: hci0: command tx timeout [ 176.529679][T10072] netlink: 'syz.4.1216': attribute type 1 has an invalid length. [ 176.595498][T10072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.698852][T10080] veth3: entered promiscuous mode [ 176.719950][T10080] bond2: (slave veth3): Enslaving as an active interface with a down link [ 176.747572][T10072] bond2: entered allmulticast mode [ 176.962132][T10099] netlink: 'syz.0.1222': attribute type 2 has an invalid length. [ 176.975570][T10098] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 177.048770][T10098] team0: Port device dummy0 added [ 177.151814][T10105] ip6gretap1: entered promiscuous mode [ 177.159240][T10105] ip6gretap1: entered allmulticast mode [ 177.211905][T10110] IPVS: stopping backup sync thread 10112 ... [ 177.218746][T10112] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 177.389512][T10120] syz.0.1228: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.436951][T10120] CPU: 0 UID: 0 PID: 10120 Comm: syz.0.1228 Not tainted syzkaller #0 PREEMPT(full) [ 177.436982][T10120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.436995][T10120] Call Trace: [ 177.437004][T10120] [ 177.437014][T10120] dump_stack_lvl+0x189/0x250 [ 177.437049][T10120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.437075][T10120] ? __pfx__printk+0x10/0x10 [ 177.437104][T10120] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 177.437128][T10120] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 177.437155][T10120] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 177.437181][T10120] warn_alloc+0x214/0x310 [ 177.437241][T10120] ? stack_depot_save_flags+0x40/0x860 [ 177.437293][T10120] ? __pfx_warn_alloc+0x10/0x10 [ 177.437326][T10120] ? kasan_save_track+0x4f/0x80 [ 177.437353][T10120] ? xskq_create+0x56/0x170 [ 177.437378][T10120] ? xsk_init_queue+0xb0/0x110 [ 177.437395][T10120] ? xsk_setsockopt+0x4dc/0x8d0 [ 177.437423][T10120] ? do_sock_setsockopt+0x179/0x1b0 [ 177.437446][T10120] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 177.437467][T10120] ? do_syscall_64+0xfa/0x3b0 [ 177.437491][T10120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.437520][T10120] __vmalloc_node_range_noprof+0x125/0x12f0 [ 177.437584][T10120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.437621][T10120] ? __kasan_kmalloc+0x93/0xb0 [ 177.437652][T10120] vmalloc_user_noprof+0xad/0xf0 [ 177.437682][T10120] ? xskq_create+0xbf/0x170 [ 177.437703][T10120] xskq_create+0xbf/0x170 [ 177.437727][T10120] xsk_init_queue+0xb0/0x110 [ 177.437749][T10120] xsk_setsockopt+0x4dc/0x8d0 [ 177.437782][T10120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.437835][T10120] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.437871][T10120] ? aa_sock_opt_perm+0xff/0x1b0 [ 177.437896][T10120] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 177.437918][T10120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.437952][T10120] do_sock_setsockopt+0x179/0x1b0 [ 177.437982][T10120] __x64_sys_setsockopt+0x13f/0x1b0 [ 177.438014][T10120] do_syscall_64+0xfa/0x3b0 [ 177.438036][T10120] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.438057][T10120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.438077][T10120] ? clear_bhb_loop+0x60/0xb0 [ 177.438102][T10120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.438122][T10120] RIP: 0033:0x7f787618eec9 [ 177.438151][T10120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.438168][T10120] RSP: 002b:00007f7876fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.438190][T10120] RAX: ffffffffffffffda RBX: 00007f78763e5fa0 RCX: 00007f787618eec9 [ 177.438205][T10120] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 177.438217][T10120] RBP: 00007f7876211f91 R08: 0000000000000004 R09: 0000000000000000 [ 177.438229][T10120] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.438242][T10120] R13: 00007f78763e6038 R14: 00007f78763e5fa0 R15: 00007ffc1051e518 [ 177.438277][T10120] [ 177.438381][T10120] Mem-Info: [ 177.477366][T10124] openvswitch: netlink: Flow key attr not present in new flow. [ 177.498802][T10126] pim6reg: entered allmulticast mode [ 177.528225][T10120] active_anon:4948 inactive_anon:0 isolated_anon:0 [ 177.528225][T10120] active_file:2504 inactive_file:39911 isolated_file:0 [ 177.528225][T10120] unevictable:768 dirty:83 writeback:0 [ 177.528225][T10120] slab_reclaimable:11413 slab_unreclaimable:100274 [ 177.528225][T10120] mapped:30088 shmem:1407 pagetables:1024 [ 177.528225][T10120] sec_pagetables:0 bounce:0 [ 177.528225][T10120] kernel_misc_reclaimable:0 [ 177.528225][T10120] free:1334054 free_pcp:10964 free_cma:0 [ 177.537779][T10127] raw_sendmsg: syz.0.1228 forgot to set AF_INET. Fix it! [ 177.817477][T10126] netlink: 'syz.3.1232': attribute type 83 has an invalid length. [ 177.868774][T10134] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 177.876966][T10120] Node 0 active_anon:19668kB inactive_anon:0kB active_file:10016kB inactive_file:159444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116108kB dirty:332kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11728kB pagetables:3928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.952535][T10120] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.990877][T10120] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.027106][T10120] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 178.033302][T10120] Node 0 DMA32 free:1424608kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19524kB inactive_anon:0kB active_file:10016kB inactive_file:157876kB unevictable:1536kB writepending:332kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:29028kB local_pcp:21144kB free_cma:0kB [ 178.066986][T10120] lowmem_reserve[]: 0 0 1 1 1 [ 178.075225][T10120] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 178.111418][T10120] lowmem_reserve[]: 0 0 0 0 0 [ 178.128180][T10120] Node 1 Normal free:3896724kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14584kB local_pcp:8376kB free_cma:0kB [ 178.190319][T10120] lowmem_reserve[]: 0 0 0 0 0 [ 178.195249][T10120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.210287][T10120] Node 0 DMA32: 1075*4kB (UM) 341*8kB (UM) 95*16kB (UM) 398*32kB (UME) 73*64kB (UM) 43*128kB (UM) 26*256kB (UME) 4*512kB (ME) 4*1024kB (ME) 6*2048kB (M) 334*4096kB (M) = 1424612kB [ 178.231458][T10120] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 178.243951][T10120] Node 1 Normal: 205*4kB (UE) 48*8kB (UME) 38*16kB (UME) 82*32kB (UME) 19*64kB (UME) 11*128kB (UME) 6*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3896724kB [ 178.301024][T10120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.339273][T10120] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.398104][T10120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.429227][T10120] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.477161][T10120] 43770 total pagecache pages [ 178.491880][T10120] 0 pages in swap cache [ 178.506321][T10120] Free swap = 124996kB [ 178.524098][T10120] Total swap = 124996kB [ 178.536145][T10120] 2097051 pages RAM [ 178.557851][T10120] 0 pages HighMem/MovableOnly [ 178.562575][T10120] 425672 pages reserved [ 178.582073][T10120] 0 pages cma reserved [ 178.759048][T10172] netlink: 'syz.0.1244': attribute type 4 has an invalid length. [ 178.794711][T10174] netlink: 'syz.4.1247': attribute type 1 has an invalid length. [ 178.830021][T10176] ieee802154 phy1 wpan1: encryption failed: -22 [ 178.968287][T10174] bond3: entered promiscuous mode [ 178.973768][T10174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.074912][T10183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.113662][T10183] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 179.143994][T10183] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 179.168723][T10183] bond3: (slave wireguard0): making interface the new active one [ 179.178493][T10183] wireguard0: entered promiscuous mode [ 179.187160][T10183] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 179.199479][T10192] nbd: socks must be embedded in a SOCK_ITEM attr [ 179.258550][T10197] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.321417][T10205] __nla_validate_parse: 9 callbacks suppressed [ 179.321437][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 179.350490][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 179.373547][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1256'. [ 179.473032][T10206] can: request_module (can-proto-0) failed. [ 179.495187][T10209] can: request_module (can-proto-0) failed. [ 179.531630][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 179.636287][T10219] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 179.837584][T10237] netlink: 'syz.4.1264': attribute type 3 has an invalid length. [ 180.376889][T10270] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1271'. [ 180.883140][T10300] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1280'. [ 180.924425][T10298] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1280'. [ 181.073211][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1283'. [ 181.090344][T10305] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1281'. [ 181.103236][T10305] netlink: 'syz.4.1281': attribute type 2 has an invalid length. [ 181.111417][T10305] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1281'. [ 181.561730][T10347] veth0: entered promiscuous mode [ 181.608225][T10347] netlink: 'syz.4.1293': attribute type 7 has an invalid length. [ 181.684903][T10347] : entered promiscuous mode [ 181.804081][T10346] veth0: left promiscuous mode [ 183.852526][T10390] bond0: entered promiscuous mode [ 183.857691][T10390] bond_slave_0: entered promiscuous mode [ 183.863680][T10390] bond_slave_1: entered promiscuous mode [ 183.870229][T10390] netdevsim netdevsim0 : entered promiscuous mode [ 183.877979][T10390] geneve1: entered promiscuous mode [ 183.915205][T10410] geneve2: entered promiscuous mode [ 183.926601][T10410] geneve2: entered allmulticast mode [ 183.995701][T10411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.010501][T10411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.038237][T10423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.091015][ T49] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 184.114553][ T49] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 184.151694][ T49] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 184.206988][T10430] lo speed is unknown, defaulting to 1000 [ 184.256903][T10433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.416663][T10442] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 184.791304][T10461] netlink: 'syz.2.1329': attribute type 1 has an invalid length. [ 184.824772][T10461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.869964][T10467] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.876627][T10467] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.883202][T10466] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.889666][T10466] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.918018][T10469] __nla_validate_parse: 8 callbacks suppressed [ 184.918035][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 184.935901][T10465] macvtap1: entered allmulticast mode [ 184.937354][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 184.951511][T10465] veth0_macvtap: entered allmulticast mode [ 185.382157][T10470] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1328'. [ 185.635408][T10495] netlink: 'syz.4.1338': attribute type 26 has an invalid length. [ 185.643523][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 185.659104][T10411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.675082][T10411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.688057][T10498] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1338'. [ 185.720274][T10411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 185.763304][T10500] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 185.783445][T10499] delete_channel: no stack [ 185.917763][T10411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.929250][T10411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.941095][T10411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 186.016177][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1344'. [ 186.056418][T10508] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1344'. [ 186.139605][T10411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.170935][T10411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.194064][T10411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 186.212799][T10508] 0{X: renamed from gretap0 (while UP) [ 186.223065][T10508] 0{X: entered allmulticast mode [ 186.229135][T10508] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 186.324902][T10524] lo speed is unknown, defaulting to 1000 [ 186.469618][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.482391][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.492132][ T36] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.522147][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.531647][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.545780][ T36] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.563762][T10542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.639158][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'. [ 186.697126][ T1155] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.711817][ T1155] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.730850][ T1155] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.798307][ T1155] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.825636][ T1155] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.840954][T10552] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 186.845637][ T1155] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.873831][T10553] netlink: 'syz.0.1356': attribute type 3 has an invalid length. [ 186.888647][T10553] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1356'. [ 187.296750][T10574] netlink: 'syz.4.1366': attribute type 7 has an invalid length. [ 187.304724][T10574] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1366'. [ 187.719062][T10602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.769345][T10602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.201536][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.076793][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.271543][T10626] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 214.417364][T10636] __nla_validate_parse: 4 callbacks suppressed [ 214.417379][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'. [ 214.537067][T10645] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1386'. [ 214.723946][T10648] netlink: 'syz.3.1390': attribute type 3 has an invalid length. [ 214.744687][T10648] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1390'. [ 214.748839][T10655] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 214.773918][T10655] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 214.793971][T10654] tipc: Enabled bearer , priority 0 [ 214.849449][T10655] tipc: Resetting bearer [ 214.961213][T10663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'. [ 215.002570][T10665] netlink: 'syz.0.1395': attribute type 1 has an invalid length. [ 215.003645][T10663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1394'. [ 215.023834][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 215.284505][T10689] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1402'. [ 215.575481][T10701] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1408'. [ 215.596643][T10701] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1408'. [ 215.618990][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 215.937621][T10723] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 215.945791][T10729] netlink: 'syz.4.1415': attribute type 29 has an invalid length. [ 215.976040][T10723] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 215.993265][T10723] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 216.383010][T10735] lo speed is unknown, defaulting to 1000 [ 217.103339][T10785] sctp: [Deprecated]: syz.1.1430 (pid 10785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.103339][T10785] Use struct sctp_sack_info instead [ 217.152244][T10777] ip6gre1: entered allmulticast mode [ 217.690939][T10807] netlink: 'syz.3.1436': attribute type 4 has an invalid length. [ 217.936075][T10815] tipc: Enabled bearer , priority 0 [ 217.944389][T10815] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 217.953147][T10815] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 218.512175][T10846] tipc: Enabling of bearer rejected, already enabled [ 218.719997][T10854] netlink: 'syz.1.1454': attribute type 3 has an invalid length. [ 218.750242][T10854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.141418][T10877] netlink: 'syz.0.1460': attribute type 3 has an invalid length. [ 219.281493][T10884] netlink: 'syz.2.1466': attribute type 8 has an invalid length. [ 219.334729][T10886] netlink: 'syz.3.1465': attribute type 13 has an invalid length. [ 219.363564][T10886] veth0_macvtap: left promiscuous mode [ 219.389911][T10886] macvtap0: entered allmulticast mode [ 219.434157][T10886] macvtap0: refused to change device tx_queue_len [ 219.608495][T10901] __nla_validate_parse: 8 callbacks suppressed [ 219.608515][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1468'. [ 219.755076][T10905] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1470'. [ 219.794121][T10901] bond0: left allmulticast mode [ 219.840677][T10901] bond_slave_0: left allmulticast mode [ 219.846258][T10901] bond_slave_1: left allmulticast mode [ 219.885410][T10901] dummy0: left allmulticast mode [ 220.105587][T10901] tipc: Resetting bearer [ 220.169807][T10901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.332240][T10901] macvtap0: left allmulticast mode [ 220.376204][T10901] bridge2: left promiscuous mode [ 220.387163][T10901] bridge2: left allmulticast mode [ 220.435827][T10901] geneve2: left promiscuous mode [ 220.445476][T10901] geneve2: left allmulticast mode [ 220.454982][ T6314] lo speed is unknown, defaulting to 1000 [ 220.472427][ T6314] syz2: Port: 1 Link DOWN [ 220.477601][ T49] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.485968][ T49] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.530993][ T49] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.567482][ T49] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.585752][ T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.614960][ T49] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.624945][T10928] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 220.668218][ T49] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.694721][ T49] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.744213][ T49] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.751326][T10932] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1481'. [ 220.797964][ T49] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.820991][ T49] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.843082][ T49] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.845964][T10934] openvswitch: netlink: IP tunnel dst address not specified [ 220.893732][T10934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1480'. [ 220.925871][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 220.940115][T10934] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1480'. [ 220.963762][T10934] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1480'. [ 221.260383][T10955] veth0_to_bond: entered allmulticast mode [ 221.347542][T10957] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1489'. [ 221.746185][T10957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.772175][T10957] bond_slave_0: left promiscuous mode [ 221.803001][T10957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.853139][T10957] bond_slave_1: left promiscuous mode [ 221.887563][T10957] bond0 (unregistering): (slave ): Releasing backup interface [ 221.907165][T10957] netdevsim netdevsim0 : left promiscuous mode [ 221.937199][T10957] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 221.957604][T10957] geneve1: left promiscuous mode [ 221.993777][T10957] bond0 (unregistering): Released all slaves [ 222.030837][T10959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1490'. [ 223.014234][T11021] tipc: Enabled bearer , priority 0 [ 223.033737][T11021] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 223.052367][T11021] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 223.083271][T11021] tipc: Resetting bearer [ 223.460675][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 224.675315][T11076] __nla_validate_parse: 1 callbacks suppressed [ 224.675335][T11076] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1525'. [ 224.725981][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 224.842344][T11080] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1525'. [ 224.860794][T11080] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1525'. [ 224.949107][T11081] 8021q: VLANs not supported on sit0 [ 224.961963][T11081] netlink: 'syz.1.1526': attribute type 1 has an invalid length. [ 224.971020][T11081] netlink: 'syz.1.1526': attribute type 1 has an invalid length. [ 225.233672][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 225.522150][T11105] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 225.544320][T11106] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 225.768575][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'. [ 226.024264][T11129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.081615][T11133] veth1_macvtap: left promiscuous mode [ 226.089146][T11133] macsec0: entered promiscuous mode [ 226.095081][T11133] macsec0: entered allmulticast mode [ 226.110752][T11134] veth1_macvtap: entered promiscuous mode [ 226.121177][T11134] veth1_macvtap: entered allmulticast mode [ 226.127760][T11134] macsec0: left promiscuous mode [ 226.133231][T11134] macsec0: left allmulticast mode [ 226.144400][T11134] veth1_macvtap: left allmulticast mode [ 226.278261][T11146] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 226.959165][T11167] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 227.163869][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 227.298515][T11182] netlink: 7110 bytes leftover after parsing attributes in process `syz.4.1558'. [ 227.342682][T11188] netlink: 'syz.3.1559': attribute type 11 has an invalid length. [ 227.392856][T11188] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1559'. [ 227.428943][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 227.906353][T11202] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.380106][T11229] tipc: Enabling of bearer rejected, already enabled [ 228.414257][T11229] netlink: 'syz.1.1573': attribute type 25 has an invalid length. [ 228.443122][T11236] C: renamed from team_slave_0 (while UP) [ 228.474790][T11236] netlink: 'syz.0.1576': attribute type 1 has an invalid length. [ 228.507786][T11236] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 228.696956][T11243] netlink: 'syz.3.1578': attribute type 30 has an invalid length. [ 228.807975][T11249] veth1_to_bond: entered allmulticast mode [ 228.890644][T11257] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 229.007114][T11248] veth1_to_bond: left allmulticast mode [ 229.411260][T11287] macvtap1: entered promiscuous mode [ 229.442829][T11287] vlan0: entered promiscuous mode [ 229.460790][T11287] macvtap1: entered allmulticast mode [ 229.475003][T11287] vlan0: entered allmulticast mode [ 229.490609][T11287] veth0_vlan: entered allmulticast mode [ 229.552387][T11288] macvtap2: entered promiscuous mode [ 229.572786][T11288] macvtap2: entered allmulticast mode [ 229.592434][T11293] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 229.853453][T11307] __nla_validate_parse: 7 callbacks suppressed [ 229.853471][T11307] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1592'. [ 230.104955][T11324] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 230.119627][T11324] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 230.131007][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1599'. [ 230.143066][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 230.147159][T11324] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 230.160000][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1599'. [ 230.171892][T11324] netlink: 'syz.2.1598': attribute type 2 has an invalid length. [ 230.183992][T11324] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1598'. [ 230.193305][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 230.227793][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 230.244895][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 230.267902][T11327] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1598'. [ 230.290729][T11327] nbd: must specify at least one socket [ 230.538079][T11346] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1604'. [ 230.571413][T11347] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 230.666613][T11347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.723663][T11357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.731005][T11357] IPv6: NLM_F_CREATE should be set when creating new route [ 230.963353][T11368] bridge7: entered allmulticast mode [ 231.097363][T11373] gtp1: entered promiscuous mode [ 231.102365][T11373] gtp1: entered allmulticast mode [ 231.483284][T11368] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 231.495872][T11368] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 231.505220][T11368] netlink: 'syz.0.1610': attribute type 2 has an invalid length. [ 231.529816][T11368] netlink: 'syz.0.1610': attribute type 2 has an invalid length. [ 232.203273][T11417] netlink: 'syz.4.1621': attribute type 1 has an invalid length. [ 232.218530][T11417] nbd: illegal input index 1048576 [ 232.392139][T11427] netlink: 'syz.4.1624': attribute type 4 has an invalid length. [ 232.891319][T11453] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 232.926413][T11453] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 234.159403][T11507] openvswitch: netlink: Flow actions attr not present in new flow. [ 255.640128][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.996742][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.080412][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.521395][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.396886][ T31] INFO: task kworker/1:2:3097 blocked for more than 143 seconds. [ 389.404743][ T31] Not tainted syzkaller #0 [ 389.409828][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.418566][ T31] task:kworker/1:2 state:D stack:25032 pid:3097 tgid:3097 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 389.430650][ T31] Workqueue: events rfkill_sync_work [ 389.435973][ T31] Call Trace: [ 389.439418][ T31] [ 389.442373][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 389.447022][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.452765][ T31] ? __pfx___schedule+0x10/0x10 [ 389.457943][ T31] ? schedule+0x91/0x360 [ 389.462219][ T31] schedule+0x165/0x360 [ 389.466523][ T31] schedule_preempt_disabled+0x13/0x30 [ 389.471999][ T31] __mutex_lock+0x7e6/0x1350 [ 389.476696][ T31] ? __mutex_lock+0x5bb/0x1350 [ 389.481503][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 389.487151][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 389.492219][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.497838][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 389.507585][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 389.546521][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 389.552304][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 389.577666][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 389.583612][ T31] rfkill_set_block+0x1d2/0x440 [ 389.588599][ T31] rfkill_sync_work+0x114/0x200 [ 389.593826][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 389.599652][ T31] process_scheduled_works+0xae1/0x17b0 [ 389.605244][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.611320][ T31] worker_thread+0x8a0/0xda0 [ 389.615960][ T31] kthread+0x70e/0x8a0 [ 389.620120][ T31] ? __pfx_worker_thread+0x10/0x10 [ 389.625258][ T31] ? __pfx_kthread+0x10/0x10 [ 389.629999][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.635212][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.640559][ T31] ? __pfx_kthread+0x10/0x10 [ 389.645164][ T31] ret_from_fork+0x439/0x7d0 [ 389.649808][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.654934][ T31] ? __switch_to_asm+0x39/0x70 [ 389.659762][ T31] ? __switch_to_asm+0x33/0x70 [ 389.664541][ T31] ? __pfx_kthread+0x10/0x10 [ 389.669248][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.674134][ T31] [ 389.677270][ T31] INFO: task kworker/1:6:5991 blocked for more than 143 seconds. [ 389.685010][ T31] Not tainted syzkaller #0 [ 389.690009][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.698718][ T31] task:kworker/1:6 state:D stack:23496 pid:5991 tgid:5991 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 389.710842][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 389.717631][ T31] Call Trace: [ 389.720931][ T31] [ 389.723868][ T31] __schedule+0x1798/0x4cc0 [ 389.728487][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.733917][ T31] ? __pfx___schedule+0x10/0x10 [ 389.738876][ T31] ? schedule+0x91/0x360 [ 389.743152][ T31] schedule+0x165/0x360 [ 389.747446][ T31] schedule_preempt_disabled+0x13/0x30 [ 389.752924][ T31] __mutex_lock+0x7e6/0x1350 [ 389.757637][ T31] ? __mutex_lock+0x5bb/0x1350 [ 389.762431][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 389.768805][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 389.773861][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 389.779704][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 389.785474][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 389.791667][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 389.797701][ T31] process_scheduled_works+0xae1/0x17b0 [ 389.803272][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.809352][ T31] worker_thread+0x8a0/0xda0 [ 389.814103][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 389.820535][ T31] ? __kthread_parkme+0x7b/0x200 [ 389.825507][ T31] kthread+0x70e/0x8a0 [ 389.829671][ T31] ? __pfx_worker_thread+0x10/0x10 [ 389.834798][ T31] ? __pfx_kthread+0x10/0x10 [ 389.839464][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.844687][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.849956][ T31] ? __pfx_kthread+0x10/0x10 [ 389.854566][ T31] ret_from_fork+0x439/0x7d0 [ 389.859217][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.864353][ T31] ? __switch_to_asm+0x39/0x70 [ 389.869258][ T31] ? __switch_to_asm+0x33/0x70 [ 389.874101][ T31] ? __pfx_kthread+0x10/0x10 [ 389.878784][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.883576][ T31] [ 389.886662][ T31] INFO: task syz.1.1605:11349 blocked for more than 143 seconds. [ 389.894406][ T31] Not tainted syzkaller #0 [ 389.899404][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.908496][ T31] task:syz.1.1605 state:D stack:25096 pid:11349 tgid:11349 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 389.920712][ T31] Call Trace: [ 389.924005][ T31] [ 389.927314][ T31] __schedule+0x1798/0x4cc0 [ 389.931840][ T31] ? validate_chain+0x897/0x2140 [ 389.937224][ T31] ? __lock_acquire+0xab9/0xd20 [ 389.942116][ T31] ? __pfx___schedule+0x10/0x10 [ 389.947161][ T31] ? schedule+0x91/0x360 [ 389.951452][ T31] schedule+0x165/0x360 [ 389.955610][ T31] schedule_timeout+0x9a/0x270 [ 389.960911][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 389.966368][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.972405][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.977677][ T31] ? wait_for_completion+0x267/0x5d0 [ 389.982984][ T31] wait_for_completion+0x2bf/0x5d0 [ 389.988201][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 389.993862][ T31] ? __flush_work+0xd2/0xbc0 [ 389.998809][ T31] ? __flush_work+0xd2/0xbc0 [ 390.003421][ T31] __flush_work+0x9b9/0xbc0 [ 390.008017][ T31] ? __flush_work+0xd2/0xbc0 [ 390.012635][ T31] ? __pfx___flush_work+0x10/0x10 [ 390.017744][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 390.023072][ T31] ? __pfx___cancel_work+0x10/0x10 [ 390.028730][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 390.034402][ T31] __cancel_work_sync+0xbe/0x110 [ 390.041101][ T31] rfkill_unregister+0x92/0x220 [ 390.045992][ T31] nfc_unregister_device+0x96/0x2a0 [ 390.051333][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 390.057426][ T31] virtual_ncidev_close+0x56/0x90 [ 390.062481][ T31] __fput+0x44c/0xa70 [ 390.066533][ T31] task_work_run+0x1d1/0x260 [ 390.071145][ T31] ? __pfx_task_work_run+0x10/0x10 [ 390.076259][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 390.081816][ T31] exit_to_user_mode_loop+0xec/0x110 [ 390.087493][ T31] do_syscall_64+0x2bd/0x3b0 [ 390.092103][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.098212][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 390.104374][ T31] ? clear_bhb_loop+0x60/0xb0 [ 390.109142][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.115084][ T31] RIP: 0033:0x7f326b78eec9 [ 390.119897][ T31] RSP: 002b:00007ffc5909d508 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 390.128402][ T31] RAX: 0000000000000000 RBX: 00007f326b9e7da0 RCX: 00007f326b78eec9 [ 390.136489][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 390.144489][ T31] RBP: 00007f326b9e7da0 R08: 0000000000000174 R09: 000000145909d7ff [ 390.153094][ T31] R10: 00007f326b9e7cb0 R11: 0000000000000246 R12: 00000000000387ee [ 390.161129][ T31] R13: 00007f326b9e6090 R14: ffffffffffffffff R15: 00007ffc5909d620 [ 390.169208][ T31] [ 390.172276][ T31] INFO: task syz.4.1628:11444 blocked for more than 144 seconds. [ 390.180604][ T31] Not tainted syzkaller #0 [ 390.185560][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.194325][ T31] task:syz.4.1628 state:D stack:26792 pid:11444 tgid:11442 ppid:5874 task_flags:0x400040 flags:0x00004004 [ 390.206996][ T31] Call Trace: [ 390.210307][ T31] [ 390.213254][ T31] __schedule+0x1798/0x4cc0 [ 390.217837][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.222734][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.227653][ T31] ? __pfx___schedule+0x10/0x10 [ 390.232525][ T31] ? schedule+0x91/0x360 [ 390.237129][ T31] schedule+0x165/0x360 [ 390.241301][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.246828][ T31] __mutex_lock+0x7e6/0x1350 [ 390.251449][ T31] ? __mutex_lock+0x5bb/0x1350 [ 390.256220][ T31] ? rfkill_register+0x37/0x8e0 [ 390.261316][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.266368][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 390.271813][ T31] ? device_initialize+0x24b/0x440 [ 390.277363][ T31] rfkill_register+0x37/0x8e0 [ 390.282064][ T31] nfc_register_device+0x14a/0x320 [ 390.287327][ T31] nci_register_device+0x87f/0x9d0 [ 390.292458][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 390.298154][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 390.303460][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 390.309212][ T31] virtual_ncidev_open+0x129/0x1a0 [ 390.314353][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 390.320165][ T31] misc_open+0x2b9/0x330 [ 390.324435][ T31] chrdev_open+0x4c9/0x5e0 [ 390.328903][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 390.333857][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 390.340496][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 390.345459][ T31] do_dentry_open+0x950/0x13f0 [ 390.350268][ T31] vfs_open+0x3b/0x340 [ 390.354371][ T31] ? path_openat+0x2ecd/0x3830 [ 390.359300][ T31] path_openat+0x2ee5/0x3830 [ 390.363918][ T31] ? arch_stack_walk+0xfc/0x150 [ 390.369227][ T31] ? stack_depot_save_flags+0x40/0x860 [ 390.374744][ T31] ? __pfx_path_openat+0x10/0x10 [ 390.379755][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.385851][ T31] do_filp_open+0x1fa/0x410 [ 390.390420][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.395326][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 390.400690][ T31] ? _raw_spin_unlock+0x28/0x50 [ 390.405567][ T31] ? alloc_fd+0x64c/0x6c0 [ 390.409958][ T31] do_sys_openat2+0x121/0x1c0 [ 390.414664][ T31] ? __se_sys_futex+0x36f/0x400 [ 390.419628][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 390.424861][ T31] ? rcu_is_watching+0x15/0xb0 [ 390.430037][ T31] __x64_sys_openat+0x138/0x170 [ 390.434974][ T31] do_syscall_64+0xfa/0x3b0 [ 390.439987][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.445398][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.451527][ T31] ? clear_bhb_loop+0x60/0xb0 [ 390.456225][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.462452][ T31] RIP: 0033:0x7ff555b8eec9 [ 390.466924][ T31] RSP: 002b:00007ff556940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 390.475379][ T31] RAX: ffffffffffffffda RBX: 00007ff555de5fa0 RCX: 00007ff555b8eec9 [ 390.483592][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 390.491827][ T31] RBP: 00007ff555c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 390.499852][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.507885][ T31] R13: 00007ff555de6038 R14: 00007ff555de5fa0 R15: 00007ffc866b7d38 [ 390.516234][ T31] [ 390.519704][ T31] INFO: task syz.3.1639:11482 blocked for more than 144 seconds. [ 390.527485][ T31] Not tainted syzkaller #0 [ 390.532438][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.541174][ T31] task:syz.3.1639 state:D stack:22296 pid:11482 tgid:11481 ppid:5877 task_flags:0x400140 flags:0x00004004 [ 390.553481][ T31] Call Trace: [ 390.557090][ T31] [ 390.560042][ T31] __schedule+0x1798/0x4cc0 [ 390.564701][ T31] ? kasan_save_free_info+0x46/0x50 [ 390.569948][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.574829][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.579964][ T31] ? __pfx___schedule+0x10/0x10 [ 390.584827][ T31] ? schedule+0x91/0x360 [ 390.589272][ T31] schedule+0x165/0x360 [ 390.593466][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.599066][ T31] __mutex_lock+0x7e6/0x1350 [ 390.603682][ T31] ? __mutex_lock+0x5bb/0x1350 [ 390.608711][ T31] ? misc_open+0x51/0x330 [ 390.613047][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.618166][ T31] misc_open+0x51/0x330 [ 390.622346][ T31] chrdev_open+0x4c9/0x5e0 [ 390.626800][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 390.631753][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 390.638458][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 390.643413][ T31] do_dentry_open+0x950/0x13f0 [ 390.648281][ T31] vfs_open+0x3b/0x340 [ 390.652367][ T31] ? path_openat+0x2ecd/0x3830 [ 390.657194][ T31] path_openat+0x2ee5/0x3830 [ 390.661807][ T31] ? arch_stack_walk+0xfc/0x150 [ 390.667194][ T31] ? stack_depot_save_flags+0x40/0x860 [ 390.672713][ T31] ? __pfx_path_openat+0x10/0x10 [ 390.677766][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.683991][ T31] do_filp_open+0x1fa/0x410 [ 390.688752][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.693623][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 390.699236][ T31] ? _raw_spin_unlock+0x28/0x50 [ 390.704103][ T31] ? alloc_fd+0x64c/0x6c0 [ 390.708548][ T31] do_sys_openat2+0x121/0x1c0 [ 390.713245][ T31] ? __se_sys_futex+0x36f/0x400 [ 390.718143][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 390.723384][ T31] ? rcu_is_watching+0x15/0xb0 [ 390.728506][ T31] __x64_sys_openat+0x138/0x170 [ 390.733388][ T31] do_syscall_64+0xfa/0x3b0 [ 390.737947][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.743186][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.749362][ T31] ? clear_bhb_loop+0x60/0xb0 [ 390.754066][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.760365][ T31] RIP: 0033:0x7fc782d8eec9 [ 390.764792][ T31] RSP: 002b:00007fc783ce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 390.773258][ T31] RAX: ffffffffffffffda RBX: 00007fc782fe5fa0 RCX: 00007fc782d8eec9 [ 390.781273][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 390.789618][ T31] RBP: 00007fc782e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 390.797664][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.805651][ T31] R13: 00007fc782fe6038 R14: 00007fc782fe5fa0 R15: 00007ffe8f28c888 [ 390.814225][ T31] [ 390.817786][ T31] INFO: task syz.2.1643:11494 blocked for more than 144 seconds. [ 390.825516][ T31] Not tainted syzkaller #0 [ 390.831059][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.839852][ T31] task:syz.2.1643 state:D stack:26856 pid:11494 tgid:11493 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 390.852079][ T31] Call Trace: [ 390.855364][ T31] [ 390.858577][ T31] __schedule+0x1798/0x4cc0 [ 390.863123][ T31] ? kasan_save_free_info+0x46/0x50 [ 390.868415][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.873288][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.878447][ T31] ? __pfx___schedule+0x10/0x10 [ 390.883315][ T31] ? schedule+0x91/0x360 [ 390.887612][ T31] schedule+0x165/0x360 [ 390.891780][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.897301][ T31] __mutex_lock+0x7e6/0x1350 [ 390.902007][ T31] ? __mutex_lock+0x5bb/0x1350 [ 390.907176][ T31] ? misc_open+0x51/0x330 [ 390.911560][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.916824][ T31] misc_open+0x51/0x330 [ 390.921054][ T31] chrdev_open+0x4c9/0x5e0 [ 390.925467][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 390.930450][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 390.937291][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 390.942253][ T31] do_dentry_open+0x950/0x13f0 [ 390.947192][ T31] vfs_open+0x3b/0x340 [ 390.951293][ T31] ? path_openat+0x2ecd/0x3830 [ 390.956085][ T31] path_openat+0x2ee5/0x3830 [ 390.960965][ T31] ? arch_stack_walk+0xfc/0x150 [ 390.965870][ T31] ? stack_depot_save_flags+0x40/0x860 [ 390.971634][ T31] ? __pfx_path_openat+0x10/0x10 [ 390.976632][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.982729][ T31] do_filp_open+0x1fa/0x410 [ 390.987347][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.992258][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 390.997624][ T31] ? _raw_spin_unlock+0x28/0x50 [ 391.002547][ T31] ? alloc_fd+0x64c/0x6c0 [ 391.006965][ T31] do_sys_openat2+0x121/0x1c0 [ 391.011663][ T31] ? __se_sys_futex+0x36f/0x400 [ 391.016569][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 391.021790][ T31] ? rcu_is_watching+0x15/0xb0 [ 391.027102][ T31] __x64_sys_openat+0x138/0x170 [ 391.031977][ T31] do_syscall_64+0xfa/0x3b0 [ 391.036543][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.041765][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.047915][ T31] ? clear_bhb_loop+0x60/0xb0 [ 391.052615][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.058820][ T31] RIP: 0033:0x7f9bf798eec9 [ 391.063249][ T31] RSP: 002b:00007f9bf881f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 391.071769][ T31] RAX: ffffffffffffffda RBX: 00007f9bf7be5fa0 RCX: 00007f9bf798eec9 [ 391.079805][ T31] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 391.088415][ T31] RBP: 00007f9bf7a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.096750][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.104781][ T31] R13: 00007f9bf7be6038 R14: 00007f9bf7be5fa0 R15: 00007fff769e7028 [ 391.113183][ T31] [ 391.116261][ T31] INFO: task syz.0.1646:11510 blocked for more than 145 seconds. [ 391.124369][ T31] Not tainted syzkaller #0 [ 391.129378][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.138311][ T31] task:syz.0.1646 state:D stack:28328 pid:11510 tgid:11509 ppid:5861 task_flags:0x400040 flags:0x00004004 [ 391.150506][ T31] Call Trace: [ 391.153796][ T31] [ 391.156797][ T31] __schedule+0x1798/0x4cc0 [ 391.161324][ T31] ? kasan_save_free_info+0x46/0x50 [ 391.166576][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.171476][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.176340][ T31] ? __pfx___schedule+0x10/0x10 [ 391.181551][ T31] ? schedule+0x91/0x360 [ 391.185819][ T31] schedule+0x165/0x360 [ 391.190031][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.195515][ T31] __mutex_lock+0x7e6/0x1350 [ 391.200173][ T31] ? __mutex_lock+0x5bb/0x1350 [ 391.204974][ T31] ? misc_open+0x51/0x330 [ 391.209647][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.214714][ T31] misc_open+0x51/0x330 [ 391.219130][ T31] chrdev_open+0x4c9/0x5e0 [ 391.223597][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 391.228633][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 391.235010][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 391.240437][ T31] do_dentry_open+0x950/0x13f0 [ 391.245247][ T31] vfs_open+0x3b/0x340 [ 391.249600][ T31] ? path_openat+0x2ecd/0x3830 [ 391.254414][ T31] path_openat+0x2ee5/0x3830 [ 391.259102][ T31] ? arch_stack_walk+0xfc/0x150 [ 391.264015][ T31] ? stack_depot_save_flags+0x40/0x860 [ 391.269837][ T31] ? __pfx_path_openat+0x10/0x10 [ 391.274795][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.280949][ T31] do_filp_open+0x1fa/0x410 [ 391.285485][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.290440][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 391.295507][ T31] ? _raw_spin_unlock+0x28/0x50 [ 391.300716][ T31] ? alloc_fd+0x64c/0x6c0 [ 391.305115][ T31] do_sys_openat2+0x121/0x1c0 [ 391.309875][ T31] ? __se_sys_futex+0x36f/0x400 [ 391.314755][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 391.320161][ T31] ? rcu_is_watching+0x15/0xb0 [ 391.324971][ T31] __x64_sys_openat+0x138/0x170 [ 391.330205][ T31] do_syscall_64+0xfa/0x3b0 [ 391.334727][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.340019][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.346123][ T31] ? clear_bhb_loop+0x60/0xb0 [ 391.350930][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.357358][ T31] RIP: 0033:0x7f787618eec9 [ 391.361816][ T31] RSP: 002b:00007f7876fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 391.370323][ T31] RAX: ffffffffffffffda RBX: 00007f78763e5fa0 RCX: 00007f787618eec9 [ 391.378331][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 391.386300][ T31] RBP: 00007f7876211f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.394603][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.402674][ T31] R13: 00007f78763e6038 R14: 00007f78763e5fa0 R15: 00007ffc1051e518 [ 391.410713][ T31] [ 391.413778][ T31] [ 391.413778][ T31] Showing all locks held in the system: [ 391.422131][ T31] 1 lock held by khungtaskd/31: [ 391.427063][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 391.437091][ T31] 2 locks held by kworker/u8:9/3006: [ 391.442383][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 391.452659][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 391.461630][ T31] 4 locks held by kworker/1:2/3097: [ 391.467077][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 391.478657][ T31] #1: ffffc9000b5e7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 391.491155][ T31] #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 391.501250][ T31] #3: ffff888143ee3100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 391.511201][ T31] 2 locks held by getty/5624: [ 391.515866][ T31] #0: ffff88803395b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 391.525668][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 391.535820][ T31] 3 locks held by kworker/1:6/5991: [ 391.541304][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 391.552307][ T31] #1: ffffc9000473fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 391.566032][ T31] #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 391.577914][ T31] 1 lock held by syz.1.1605/11349: [ 391.583054][ T31] #0: ffff888143ee3100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 391.592875][ T31] 3 locks held by syz.4.1628/11444: [ 391.598128][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.607011][ T31] #1: ffff888030f2b100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 391.616684][ T31] #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 391.626717][ T31] 1 lock held by syz.3.1639/11482: [ 391.631852][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.640681][ T31] 1 lock held by syz.2.1643/11494: [ 391.645818][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.654312][ T31] 1 lock held by syz.0.1646/11510: [ 391.659477][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.668215][ T31] 1 lock held by syz-executor/11513: [ 391.673489][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.682000][ T31] 1 lock held by syz-executor/11515: [ 391.687458][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.695902][ T31] 1 lock held by syz-executor/11519: [ 391.701515][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.710032][ T31] 1 lock held by syz-executor/11520: [ 391.715321][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.723896][ T31] 1 lock held by syz-executor/11521: [ 391.729508][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.738197][ T31] 1 lock held by syz-executor/11523: [ 391.743490][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.751991][ T31] 1 lock held by syz-executor/11525: [ 391.757604][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.766106][ T31] 1 lock held by syz-executor/11529: [ 391.771408][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.779904][ T31] 1 lock held by syz-executor/11530: [ 391.785176][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.793917][ T31] 1 lock held by syz-executor/11531: [ 391.799529][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.808060][ T31] 1 lock held by syz-executor/11533: [ 391.813347][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.822099][ T31] 1 lock held by syz-executor/11535: [ 391.827422][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.835920][ T31] 1 lock held by syz-executor/11538: [ 391.841262][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.850051][ T31] 1 lock held by syz-executor/11539: [ 391.855356][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.863946][ T31] 1 lock held by syz-executor/11541: [ 391.869280][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 391.878146][ T31] [ 391.880486][ T31] ============================================= [ 391.880486][ T31] [ 391.888951][ T31] NMI backtrace for cpu 0 [ 391.888978][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.888996][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 391.889006][ T31] Call Trace: [ 391.889013][ T31] [ 391.889021][ T31] dump_stack_lvl+0x189/0x250 [ 391.889048][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.889069][ T31] ? __pfx__printk+0x10/0x10 [ 391.889105][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 391.889133][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 391.889160][ T31] ? __pfx__printk+0x10/0x10 [ 391.889188][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.889217][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 391.889245][ T31] watchdog+0xf93/0xfe0 [ 391.889274][ T31] ? watchdog+0x1de/0xfe0 [ 391.889303][ T31] kthread+0x70e/0x8a0 [ 391.889328][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.889350][ T31] ? __pfx_kthread+0x10/0x10 [ 391.889373][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.889390][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.889407][ T31] ? __pfx_kthread+0x10/0x10 [ 391.889430][ T31] ret_from_fork+0x439/0x7d0 [ 391.889451][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.889475][ T31] ? __switch_to_asm+0x39/0x70 [ 391.889495][ T31] ? __switch_to_asm+0x33/0x70 [ 391.889514][ T31] ? __pfx_kthread+0x10/0x10 [ 391.889536][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.889572][ T31] [ 391.889578][ T31] Sending NMI from CPU 0 to CPUs 1: [ 392.035916][ C1] NMI backtrace for cpu 1 [ 392.035931][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 392.035950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.035962][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 392.035994][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 392.036009][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 392.036022][ C1] RAX: b640728fb4fea000 RBX: ffffffff819683f8 RCX: b640728fb4fea000 [ 392.036035][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba42d RDI: ffffffff8be33f00 [ 392.036045][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 392.036057][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a630 [ 392.036086][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 392.036097][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 392.036110][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.036121][ C1] CR2: 00007f3692e57000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 392.036136][ C1] Call Trace: [ 392.036143][ C1] [ 392.036148][ C1] default_idle+0x13/0x20 [ 392.036179][ C1] default_idle_call+0x74/0xb0 [ 392.036199][ C1] do_idle+0x1e8/0x510 [ 392.036225][ C1] ? __pfx_do_idle+0x10/0x10 [ 392.036248][ C1] cpu_startup_entry+0x44/0x60 [ 392.036263][ C1] start_secondary+0x101/0x110 [ 392.036286][ C1] common_startup_64+0x13e/0x147 [ 392.036314][ C1] [ 392.037157][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 392.037176][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 392.037203][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.037217][ T31] Call Trace: [ 392.037226][ T31] [ 392.037239][ T31] dump_stack_lvl+0x99/0x250 [ 392.037269][ T31] ? __asan_memcpy+0x40/0x70 [ 392.037297][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.037326][ T31] ? __pfx__printk+0x10/0x10 [ 392.037373][ T31] vpanic+0x281/0x750 [ 392.037405][ T31] ? __pfx_vpanic+0x10/0x10 [ 392.037430][ T31] ? preempt_schedule+0xae/0xc0 [ 392.037456][ T31] ? preempt_schedule_common+0x83/0xd0 [ 392.037486][ T31] panic+0xb9/0xc0 [ 392.037512][ T31] ? __pfx_panic+0x10/0x10 [ 392.037540][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 392.037583][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 392.037621][ T31] watchdog+0xfd2/0xfe0 [ 392.037659][ T31] ? watchdog+0x1de/0xfe0 [ 392.037699][ T31] kthread+0x70e/0x8a0 [ 392.037731][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.037762][ T31] ? __pfx_kthread+0x10/0x10 [ 392.037794][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.037815][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.037838][ T31] ? __pfx_kthread+0x10/0x10 [ 392.037868][ T31] ret_from_fork+0x439/0x7d0 [ 392.037895][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.037928][ T31] ? __switch_to_asm+0x39/0x70 [ 392.037963][ T31] ? __switch_to_asm+0x33/0x70 [ 392.037992][ T31] ? __pfx_kthread+0x10/0x10 [ 392.038023][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.038073][ T31] [ 392.353110][ T31] Kernel Offset: disabled [ 392.357464][ T31] Rebooting in 86400 seconds..