last executing test programs: 17.915348384s ago: executing program 1 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x7b73, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000200000000000000000000000a00050b0000000000000000480002006563622d73657270656e742d61767800"/240], 0x138}}, 0x0) 17.087028974s ago: executing program 1 (id=840): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa2f1}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x22, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd2e3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x93}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x35df, 0x23, &(0x7f0000000500)=""/35, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x1, 0x2, 0xb5e}, 0x10, 0x190ee, 0xffffffffffffffff, 0x4, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x4, 0x4, 0x2, 0xc}, {0x4, 0x3, 0x7, 0x6}, {0x2, 0x2, 0x9, 0x4}, {0x1, 0x4, 0x6, 0x5}], 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000700)=@generic={&(0x7f00000002c0)='./file0\x00', r5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00"], 0x80}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000180c2000003080501d30975a8046864ca2b9cc650004db80d5fa81436bd4d4ee807e5625bae659f2929"], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r4}, &(0x7f0000000300)=0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x650, 0xf5}, 0x90) r6 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.min\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200", 0x5e, 0x0, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800, 0x0, 0x7}, 0x20) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='\n'], 0x1) 16.999353075s ago: executing program 1 (id=843): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010008000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES16=r0], 0x50}}, 0x22048081) 16.982851646s ago: executing program 1 (id=845): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 16.841330994s ago: executing program 1 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080"], 0x24}}, 0x0) 16.814726616s ago: executing program 1 (id=849): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r6, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4020}, 0x4050) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r7, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) sendto$inet6(r0, &(0x7f0000000780)="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", 0x1000, 0x24000891, &(0x7f0000001780)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000017c0)) connect(r0, &(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x3, {0xa, 0x4e23, 0x7df, @private2={0xfc, 0x2, '\x00', 0x1}, 0xcf}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001980)={&(0x7f0000001880), 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}}, 0x24040040) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4800) connect$nfc_llcp(r0, &(0x7f0000001ac0)={0x27, r3, 0xffffffffffffffff, 0x7, 0x8, 0x92, "622d370ef2948a236a13f4e03f18a571c73f90d5e0076880ffa63356331b49d43b5321f82febacc5cf5add1c5ce888d8e349c5cffda65d85b564f40ee975d8", 0x6}, 0x60) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b40)={0x4834}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001b80), r0) r10 = accept4$inet6(r0, &(0x7f0000001bc0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001c00)=0x1c, 0x80000) getpeername$packet(r0, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001c80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001d40)={'syztnl1\x00', &(0x7f0000001cc0)={'syztnl2\x00', r11, 0x4, 0x7, 0x7, 0x5, 0x1, @loopback, @local, 0x8000, 0x8, 0x5e02, 0x5}}) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000001dc0)) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001e00), 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 16.578337386s ago: executing program 0 (id=857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="050200000000000020001280080101006873720014000280b8a73e00", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 16.495407797s ago: executing program 4 (id=858): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0xd) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0xd) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (async) 16.49094715s ago: executing program 0 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0xb635773f04ebbeec, 0x11171, 0xffffffffffffffff, 0xa1679000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x1d, 0x2, 0x6) recvfrom$packet(r2, 0x0, 0x0, 0x4001, 0x0, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000616486cfc51d23bebd40db706b3590dbc9a832e7aa6eac312ab2eab4300f4d9554e9839cc5e550656ea4df606ebe9ab7a97bba81ec14f06e229062d21148472c2524417cf0c278be95ee10e055b5f008cc9f08592c7e1c778b1020a843b2863b29b2f1311970a6eda3f3fe18807ae6a844690f2f6f3a7c5cf20000000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000005000500010000000400040005000600000000000800030001000000"], 0x30}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r5, 0xf6cd, 0xff, 0x6}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8", 0x20}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x3, 0x8001, 0x9, 0x12004, r6, 0x84e3, '\x00', r8, r9, 0x4, 0x0, 0x2, 0x0, @void, @value, @value=r10}, 0x50) syz_emit_ethernet(0x18a, &(0x7f0000000200)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @udp={{0x2d, 0x4, 0x0, 0x3b, 0x17c, 0x64, 0x0, 0x9, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @rr={0x7, 0x23, 0xd3, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010101, @multicast1, @private, @multicast1, @broadcast, @loopback]}, @cipso={0x86, 0x36, 0x3, [{0x0, 0x10, "4d064a0d2a6ac967edd2b7dee3b5"}, {0x0, 0x11, "2768f01f7355e5ffe89e0a7d1e1b6e"}, {0x6, 0x2}, {0x5, 0x5, "6de2e5"}, {0x6e45343888555ecf, 0x8, "10e58e8ef57c"}]}, @generic={0x89, 0xd, "4ab030733c83b444360c08"}, @timestamp_prespec={0x44, 0x34, 0x9d, 0x3, 0xd, [{@multicast1, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@local, 0x6}, {@rand_addr=0x64010101, 0x7}, {@local, 0x5}, {@remote, 0x2}]}, @generic={0x0, 0x5, "8ecee4"}]}}, {0x4e23, 0x4e1f, 0xc8, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x0, @val=0x80}, "1a924c319f3803f6169f4fbb768b49d294a76260d9edeae4707749526517a753e11f523053792559fb3ef84a48c804e141d818a145fa5eaf1863dd7d945ba07b37daca358ece9749a7c6d23bee9b522042df2c1551cd727ad296d1ac020000000000000091c29c8f4a12123c28f9747b7ab51da9853c8610f4799e32f112f8987f48ba832bdb9b16f64529682b2ef7ef6e961f0393f563877586c16f215352317ae4d818e989c6b628fd167e55b661d18d9a4207c2b4cd52"}}}}}}, 0x0) 16.456855003s ago: executing program 0 (id=861): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x13) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x64}}, 0x4000080) 16.449302328s ago: executing program 4 (id=862): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x62ea, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000000)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x3c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x2, 0x2, 0x0) getsockopt$nfc_llcp(r6, 0x88, 0x68, 0x0, 0x20000000) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000000)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) sendto$inet6(r0, 0x0, 0x97, 0x24000800, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xdd, "642ceadb9b27ea8ae50ada63e2a91da85b425beeaa8c430d7800938a4c63f98f9d6f05aa86f8243e8e20c393aa3814277f02134637efdaf2382b10e0e60cdb5f26597a2df18aabe7fcde649aca109bdc1a4a56b27ed99ce5c7a9d2eaf5e913ab4a6e396c112792e4054691642c65ed9ae7b851a526872932cd263ccd4230d5896af76a5e572d57ec2e5c1fc77a8cedbde0d5d203b85caad8123061d757300f86c9357c9ca2b7be60de0416d286c29435c717aef0cc33be9652365e6918b09b806dc045320f03910d32d64b2117662b064c768360ef34c2aa38ce65e9ba"}, &(0x7f0000000140)=0xe5) 16.279389217s ago: executing program 3 (id=863): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.278279079s ago: executing program 4 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 16.222419386s ago: executing program 3 (id=866): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000007c0)={r4, 0x5}, &(0x7f0000001800)=0x8) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xc, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 16.171025001s ago: executing program 4 (id=867): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000329bd7000ffdbdf25160000000500030000000000070002000100000005000300010000000500040001000000050004000400008406000200"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20008010) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x2c, 0x1c, 0x114236db3b607435, 0x70bd25, 0x25dfd3fe, {0x2, 0x0, 0x0, r3, 0x80, 0xa2, 0x4}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000380)=0x5, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x25a5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000081c140000fe000001000000000300dbd0"], 0xa0}}, 0x0) 16.068041343s ago: executing program 4 (id=869): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000080000000500000001000013020000000e0000000500000009c63c75000000612e2e5f"], 0x0, 0x38}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={r1, 0x0, 0x80000001, 0xfffb, 0x8, 0x3, 0x401, 0x8, {r1, @in={{0x2, 0x4e20, @multicast1}}, 0x8, 0xff, 0x1, 0x8, 0x5}}, &(0x7f00000002c0)=0xb0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b9d1907c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) 16.007133321s ago: executing program 0 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000000000000000, 0x7, 0xffffffffffffff8b, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32) r2 = socket$inet(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='dummy0\x00', 0x10) (rerun: 32) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 16.004639225s ago: executing program 3 (id=871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x34, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x34}}, 0x4000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 15.899659314s ago: executing program 3 (id=873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x27) socket(0x2, 0x80805, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)={[{0x2b, 'perf_event'}, {0x2b, 'rlimit'}, {0x2d, 'cpuacct'}]}, 0x1d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x54}}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) 15.777796158s ago: executing program 0 (id=875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x7, 0xb3, 0x7f}, 0x50) r1 = socket$isdn(0x22, 0x2, 0x24) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 15.762794027s ago: executing program 3 (id=876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020040}, 0x4000840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r2, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) 15.701793977s ago: executing program 4 (id=877): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffffaa}}, 0x7c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000140)={0x40, 0x4, 0x4, 0x9}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r4, &(0x7f0000000280)=@abs, &(0x7f0000000000)=0x6e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x7, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x5, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x807fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0xfffe, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x5, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) sendmsg$sock(r3, &(0x7f0000000440)={&(0x7f0000000500)=@rc={0x1f, @none, 0x3}, 0x80, &(0x7f0000001e00)=[{&(0x7f00000003c0)="065ea2cdd6d8855389aa47a0339e6d4595ae4bf16caf5392e6b0ebb491f9af1194934932a749f48ceb2051dce9ad108faad4d46fcfd2ad455d688feaa704", 0x3e}, {&(0x7f0000001a40)="a3fae6e4a33788bf322883e61408a76cf61ae8188016cfb1ddf68249f894b49eaedf96e5a773eb23f9f22bf99b84cf3d1f38ad9af65a5e179c5d28504a8ac1d4b762ac30fb8fe2044a0a0aae41cb51a94be97846da3efd1af93752f83d95b57b9324eae900a157b677bcaecff09b59fa16c57fdadbc3b231c6c9ba817d11df98d5f062ec", 0x84}, {&(0x7f0000001b00)="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", 0xfd}, {&(0x7f0000001c00)="5303577f61aaba4ffe3800883ddcd415cc1935ffe36146b3e7ff4c73ede815f989f5678e5ed5d0d9ab9640212c5ae29e2774b4e01b997377f260f42ab250b559a7c22136bd8db665e42036a043a3247fc83520bef9dedbbe3fa6774a99e8f23d663c72403d32bf162307824727d8375d4de167b868e34cfd5b24edbbedbb9cdd19a8cbb9719fae8e498020fc223659719fcff3fdf716cdc172e13a0cc8764d6630a87edc7772a6f1c9a5a26a574cff9d10aa2676d32fc4efa812325947bb5b4659e4c2", 0xc3}, {&(0x7f0000001d00)="0177be02ed6f76a103b6c50bc82ca4dc60778fdfd97ed806b4f80fe723f8810eaaa19950f633e36c0c663d35cc9eb9537a6d3c90df45bf9dcba4fbab72c7a8242ff64194acb2acea1c8960b02ba8caeb6b8e0760e53184ccbfd860d624e441aeb3effed178934e2ce62ff2c1475fcbf38b4c6dcf812921cdb29816e42283d0b7f26e8db8dfce067603e71f707da2b3ce6d4e3bd4832255e3a1ffa3e6f8b6d7ff5b0d14dcd7498959d9e254164559c89463ae5fe1de8e820c20025ca6bad5f85c252e799aaf0cb9cf2bc6fca5eacf549da4bfdcc38cc0bb7e06ad41971227d10967", 0xe1}, {&(0x7f0000001f00)="087d6e1d9b63421f41e95d1ce44447dfa6ec0c1256fe87114c4870e871d8945c1bd2d97d2672595d9a20218a3e6fd56b7780445eb261b8eb8584bb5fef9ee4c5cfca77b68d15d6b8c12859dd2a045298f8f0a09acccbd9220f4c511469436eee8ea51519d65e8abd324339740e5d73e038a07104479867e5502e79bdd75081a195b45dbdaa7d7872432ae77651e9fd1934ced0038c2579478206249a813b95cde8ab0aa2cf6be0e4f0c2e389d84f6da56e6f8c783956ea77f0de4d6d1e6b873b5dc0ff29f96d19d9e6dc171eb2430c6150", 0xd1}], 0x6, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7d}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}], 0xd8}, 0x8010) socket(0x2, 0x5, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r13, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 15.610304365s ago: executing program 3 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x2, 0x1}, 0x0, 0x2, 0x0, 0x0, "895a824b22e86d12"}}, 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x9, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x2) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 15.590022215s ago: executing program 0 (id=880): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@mcast2}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x0, &(0x7f0000000280)=""/265, &(0x7f0000000100)=0xfffffe20) (async) getsockopt$netlink(r5, 0x10e, 0x0, &(0x7f0000000280)=""/265, &(0x7f0000000100)=0xfffffe20) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x3f, &(0x7f0000000080), 0x4) (async) setsockopt$RDS_RECVERR(r8, 0x114, 0x3f, &(0x7f0000000080), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) 15.540435104s ago: executing program 2 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000040000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @private}, &(0x7f0000000040)=0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000000c0)='target_cmd_complete\x00', r1, 0x0, 0x1000203}, 0x18) 15.459180081s ago: executing program 2 (id=882): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x58, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x44, 0x1, [@m_ctinfo={0x40, 0x402, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x200}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r2, 0x303, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd021}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}}, 0x800) 15.432741289s ago: executing program 2 (id=883): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x8, 0x80000001, 0x0, 0x0) getsockopt(r0, 0x2, 0xfffffffd, &(0x7f0000000000)=""/63, &(0x7f0000000040)=0x3f) 15.397643613s ago: executing program 2 (id=884): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766d616e0000001c0012800b000100bc2f994a4588165e9e6970766c616e00000c00028006000200"/65], 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r2 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000003c0)) sendmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x2, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "a2cc704a4c3b83f4"}, 0x10}, 0x1, 0x0, 0x0, 0x24004081}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) accept4$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) 15.319272138s ago: executing program 2 (id=885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r3 = socket(0xa, 0x1, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000100)={'hsr0\x00', 0xe0}) 15.273621794s ago: executing program 2 (id=886): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}]}, 0x1c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffff9, 0x1, 0x7ff, 0x0, 0x0, 0xbd2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.148720736s ago: executing program 32 (id=849): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r6, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4020}, 0x4050) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r7, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) sendto$inet6(r0, &(0x7f0000000780)="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", 0x1000, 0x24000891, &(0x7f0000001780)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000017c0)) connect(r0, &(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x3, {0xa, 0x4e23, 0x7df, @private2={0xfc, 0x2, '\x00', 0x1}, 0xcf}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001980)={&(0x7f0000001880), 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}}, 0x24040040) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4800) connect$nfc_llcp(r0, &(0x7f0000001ac0)={0x27, r3, 0xffffffffffffffff, 0x7, 0x8, 0x92, "622d370ef2948a236a13f4e03f18a571c73f90d5e0076880ffa63356331b49d43b5321f82febacc5cf5add1c5ce888d8e349c5cffda65d85b564f40ee975d8", 0x6}, 0x60) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b40)={0x4834}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001b80), r0) r10 = accept4$inet6(r0, &(0x7f0000001bc0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001c00)=0x1c, 0x80000) getpeername$packet(r0, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001c80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001d40)={'syztnl1\x00', &(0x7f0000001cc0)={'syztnl2\x00', r11, 0x4, 0x7, 0x7, 0x5, 0x1, @loopback, @local, 0x8000, 0x8, 0x5e02, 0x5}}) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000001dc0)) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001e00), 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 126.654192ms ago: executing program 33 (id=880): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@mcast2}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x0, &(0x7f0000000280)=""/265, &(0x7f0000000100)=0xfffffe20) (async) getsockopt$netlink(r5, 0x10e, 0x0, &(0x7f0000000280)=""/265, &(0x7f0000000100)=0xfffffe20) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x3f, &(0x7f0000000080), 0x4) (async) setsockopt$RDS_RECVERR(r8, 0x114, 0x3f, &(0x7f0000000080), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) 91.98892ms ago: executing program 34 (id=886): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}]}, 0x1c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffff9, 0x1, 0x7ff, 0x0, 0x0, 0xbd2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 40.735421ms ago: executing program 35 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x2, 0x1}, 0x0, 0x2, 0x0, 0x0, "895a824b22e86d12"}}, 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x9, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r3}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x2) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 0s ago: executing program 36 (id=877): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffffaa}}, 0x7c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000140)={0x40, 0x4, 0x4, 0x9}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r4, &(0x7f0000000280)=@abs, &(0x7f0000000000)=0x6e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x7, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x5, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x807fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0xfffe, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x5, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) sendmsg$sock(r3, &(0x7f0000000440)={&(0x7f0000000500)=@rc={0x1f, @none, 0x3}, 0x80, &(0x7f0000001e00)=[{&(0x7f00000003c0)="065ea2cdd6d8855389aa47a0339e6d4595ae4bf16caf5392e6b0ebb491f9af1194934932a749f48ceb2051dce9ad108faad4d46fcfd2ad455d688feaa704", 0x3e}, {&(0x7f0000001a40)="a3fae6e4a33788bf322883e61408a76cf61ae8188016cfb1ddf68249f894b49eaedf96e5a773eb23f9f22bf99b84cf3d1f38ad9af65a5e179c5d28504a8ac1d4b762ac30fb8fe2044a0a0aae41cb51a94be97846da3efd1af93752f83d95b57b9324eae900a157b677bcaecff09b59fa16c57fdadbc3b231c6c9ba817d11df98d5f062ec", 0x84}, {&(0x7f0000001b00)="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", 0xfd}, {&(0x7f0000001c00)="5303577f61aaba4ffe3800883ddcd415cc1935ffe36146b3e7ff4c73ede815f989f5678e5ed5d0d9ab9640212c5ae29e2774b4e01b997377f260f42ab250b559a7c22136bd8db665e42036a043a3247fc83520bef9dedbbe3fa6774a99e8f23d663c72403d32bf162307824727d8375d4de167b868e34cfd5b24edbbedbb9cdd19a8cbb9719fae8e498020fc223659719fcff3fdf716cdc172e13a0cc8764d6630a87edc7772a6f1c9a5a26a574cff9d10aa2676d32fc4efa812325947bb5b4659e4c2", 0xc3}, {&(0x7f0000001d00)="0177be02ed6f76a103b6c50bc82ca4dc60778fdfd97ed806b4f80fe723f8810eaaa19950f633e36c0c663d35cc9eb9537a6d3c90df45bf9dcba4fbab72c7a8242ff64194acb2acea1c8960b02ba8caeb6b8e0760e53184ccbfd860d624e441aeb3effed178934e2ce62ff2c1475fcbf38b4c6dcf812921cdb29816e42283d0b7f26e8db8dfce067603e71f707da2b3ce6d4e3bd4832255e3a1ffa3e6f8b6d7ff5b0d14dcd7498959d9e254164559c89463ae5fe1de8e820c20025ca6bad5f85c252e799aaf0cb9cf2bc6fca5eacf549da4bfdcc38cc0bb7e06ad41971227d10967", 0xe1}, {&(0x7f0000001f00)="087d6e1d9b63421f41e95d1ce44447dfa6ec0c1256fe87114c4870e871d8945c1bd2d97d2672595d9a20218a3e6fd56b7780445eb261b8eb8584bb5fef9ee4c5cfca77b68d15d6b8c12859dd2a045298f8f0a09acccbd9220f4c511469436eee8ea51519d65e8abd324339740e5d73e038a07104479867e5502e79bdd75081a195b45dbdaa7d7872432ae77651e9fd1934ced0038c2579478206249a813b95cde8ab0aa2cf6be0e4f0c2e389d84f6da56e6f8c783956ea77f0de4d6d1e6b873b5dc0ff29f96d19d9e6dc171eb2430c6150", 0xd1}], 0x6, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7d}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}], 0xd8}, 0x8010) socket(0x2, 0x5, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r13, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 69.457680][ T5815] cgroup: Unknown subsys name 'net' [ 69.587150][ T5815] cgroup: Unknown subsys name 'cpuset' [ 69.595650][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.085671][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.108155][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.114612][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.747492][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.764298][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.771851][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.780540][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.788577][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.883894][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.894022][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.901719][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.910379][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.918130][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.949118][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.959282][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.966941][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.001868][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.010155][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.104878][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.111955][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.119730][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.123993][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.128962][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.141258][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.142018][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.169383][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.183275][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.192339][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.356840][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 75.582957][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.590434][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.598724][ T5825] bridge_slave_0: entered allmulticast mode [ 75.606594][ T5825] bridge_slave_0: entered promiscuous mode [ 75.634641][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.641752][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.649499][ T5825] bridge_slave_1: entered allmulticast mode [ 75.656603][ T5825] bridge_slave_1: entered promiscuous mode [ 75.664230][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 75.761716][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.803281][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.865118][ T5825] team0: Port device team_slave_0 added [ 75.906912][ T5825] team0: Port device team_slave_1 added [ 75.992652][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.999973][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.008025][ T5830] bridge_slave_0: entered allmulticast mode [ 76.016524][ T5830] bridge_slave_0: entered promiscuous mode [ 76.040745][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.047733][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.073728][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.090078][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.097212][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.123193][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.148131][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.155391][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.162534][ T5830] bridge_slave_1: entered allmulticast mode [ 76.170426][ T5830] bridge_slave_1: entered promiscuous mode [ 76.177743][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 76.188603][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 76.251374][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.279207][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.348629][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 76.405125][ T5825] hsr_slave_0: entered promiscuous mode [ 76.411438][ T5825] hsr_slave_1: entered promiscuous mode [ 76.425579][ T5830] team0: Port device team_slave_0 added [ 76.452656][ T5830] team0: Port device team_slave_1 added [ 76.551023][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.558379][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.565573][ T5834] bridge_slave_0: entered allmulticast mode [ 76.572594][ T5834] bridge_slave_0: entered promiscuous mode [ 76.613032][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.620483][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.628038][ T5834] bridge_slave_1: entered allmulticast mode [ 76.635482][ T5834] bridge_slave_1: entered promiscuous mode [ 76.642392][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.649374][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.675300][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.686354][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.693479][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.701270][ T5832] bridge_slave_0: entered allmulticast mode [ 76.708747][ T5832] bridge_slave_0: entered promiscuous mode [ 76.749371][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.756720][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.782898][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.794543][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.801697][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.808920][ T5832] bridge_slave_1: entered allmulticast mode [ 76.816143][ T5832] bridge_slave_1: entered promiscuous mode [ 76.864957][ T53] Bluetooth: hci0: command tx timeout [ 76.872025][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.879809][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.887220][ T5833] bridge_slave_0: entered allmulticast mode [ 76.894418][ T5833] bridge_slave_0: entered promiscuous mode [ 76.910819][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.932437][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.939658][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.946851][ T5833] bridge_slave_1: entered allmulticast mode [ 76.953993][ T5833] bridge_slave_1: entered promiscuous mode [ 76.968121][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.004489][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.024131][ T53] Bluetooth: hci1: command tx timeout [ 77.054283][ T5834] team0: Port device team_slave_0 added [ 77.074621][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.086430][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.098803][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.114972][ T5834] team0: Port device team_slave_1 added [ 77.129540][ T5830] hsr_slave_0: entered promiscuous mode [ 77.136128][ T5830] hsr_slave_1: entered promiscuous mode [ 77.142116][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 77.147953][ T5830] Cannot create hsr debugfs directory [ 77.184063][ T5840] Bluetooth: hci2: command tx timeout [ 77.186347][ T53] Bluetooth: hci3: command tx timeout [ 77.225226][ T5832] team0: Port device team_slave_0 added [ 77.272343][ T5832] team0: Port device team_slave_1 added [ 77.278225][ T53] Bluetooth: hci4: command tx timeout [ 77.290645][ T5833] team0: Port device team_slave_0 added [ 77.297167][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.304515][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.330643][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.375193][ T5833] team0: Port device team_slave_1 added [ 77.381713][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.389295][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.415254][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.439590][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.446675][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.473166][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.486272][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.493216][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.519250][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.627842][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.635019][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.661451][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.714052][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.721013][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.747462][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.770942][ T5832] hsr_slave_0: entered promiscuous mode [ 77.777909][ T5832] hsr_slave_1: entered promiscuous mode [ 77.784943][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 77.790699][ T5832] Cannot create hsr debugfs directory [ 77.805694][ T5834] hsr_slave_0: entered promiscuous mode [ 77.812169][ T5834] hsr_slave_1: entered promiscuous mode [ 77.818547][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 77.824424][ T5834] Cannot create hsr debugfs directory [ 77.914635][ T5833] hsr_slave_0: entered promiscuous mode [ 77.920831][ T5833] hsr_slave_1: entered promiscuous mode [ 77.927606][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 77.933351][ T5833] Cannot create hsr debugfs directory [ 77.979378][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.033312][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.070691][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.081075][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.311867][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.340980][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.352022][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.363441][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.456952][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.469004][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.480526][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.491591][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.547271][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.602374][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.616163][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.628795][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.639118][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.658878][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.700220][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.707650][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.749051][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.756342][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.810942][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.825268][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.842642][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.853257][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.863179][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.905828][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.944892][ T53] Bluetooth: hci0: command tx timeout [ 78.953438][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.960585][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.996211][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.011146][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.018264][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.074984][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.104997][ T53] Bluetooth: hci1: command tx timeout [ 79.118193][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.146979][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.170427][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.177612][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.234715][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.241897][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.253844][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.261014][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.268775][ T53] Bluetooth: hci2: command tx timeout [ 79.276267][ T53] Bluetooth: hci3: command tx timeout [ 79.284928][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.292065][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.345150][ T5840] Bluetooth: hci4: command tx timeout [ 79.359079][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.449389][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.548806][ T5825] veth0_vlan: entered promiscuous mode [ 79.557913][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.583136][ T5825] veth1_vlan: entered promiscuous mode [ 79.603143][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.610293][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.625789][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.632924][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.702774][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.747984][ T5825] veth0_macvtap: entered promiscuous mode [ 79.800206][ T5825] veth1_macvtap: entered promiscuous mode [ 79.843014][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.899277][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.935346][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.954870][ T5830] veth0_vlan: entered promiscuous mode [ 80.003117][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.056163][ T5830] veth1_vlan: entered promiscuous mode [ 80.069456][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.082082][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.106915][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.149409][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.229864][ T5830] veth0_macvtap: entered promiscuous mode [ 80.271809][ T5830] veth1_macvtap: entered promiscuous mode [ 80.326336][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.345925][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.360039][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.400615][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.413746][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.438411][ T5834] veth0_vlan: entered promiscuous mode [ 80.449001][ T144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.458284][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.466734][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.498296][ T1107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.509082][ T1107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.531484][ T1107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.557877][ T5834] veth1_vlan: entered promiscuous mode [ 80.560659][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.653509][ T5833] veth0_vlan: entered promiscuous mode [ 80.699804][ T5832] veth0_vlan: entered promiscuous mode [ 80.718272][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.728161][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.738173][ T5833] veth1_vlan: entered promiscuous mode [ 80.757027][ T5834] veth0_macvtap: entered promiscuous mode [ 80.765458][ T5832] veth1_vlan: entered promiscuous mode [ 80.783375][ T5834] veth1_macvtap: entered promiscuous mode [ 80.875640][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.881806][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.883483][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.901321][ T5833] veth0_macvtap: entered promiscuous mode [ 80.902804][ T5949] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 80.919982][ T5949] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6'. [ 80.925869][ T5832] veth0_macvtap: entered promiscuous mode [ 80.934911][ T5949] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6'. [ 80.948552][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.975098][ T5833] veth1_macvtap: entered promiscuous mode [ 80.990671][ T5832] veth1_macvtap: entered promiscuous mode [ 81.011586][ T144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.024601][ T5840] Bluetooth: hci0: command tx timeout [ 81.051749][ T144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.055225][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 81.060935][ T144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.078152][ T5951] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7'. [ 81.103334][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.122435][ T144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.162583][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.184522][ T5840] Bluetooth: hci1: command tx timeout [ 81.211819][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.241240][ T1154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.255501][ T1154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.284843][ T5955] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 81.293526][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.302237][ T5958] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.320798][ T1154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.334983][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.344843][ T5840] Bluetooth: hci3: command tx timeout [ 81.346505][ T53] Bluetooth: hci2: command tx timeout [ 81.360535][ T5955] : entered promiscuous mode [ 81.388252][ T1154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.423925][ T53] Bluetooth: hci4: command tx timeout [ 81.451456][ T5957] macvtap1: entered promiscuous mode [ 81.456904][ T5957] vlan0: entered promiscuous mode [ 81.462417][ T5957] macvtap1: entered allmulticast mode [ 81.468336][ T5957] vlan0: entered allmulticast mode [ 81.473586][ T5957] veth0_vlan: entered allmulticast mode [ 81.497506][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.544077][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.579758][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.612514][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.634859][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.646421][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.795837][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.803670][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.858664][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.874465][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.065827][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.076949][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.093851][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.093917][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.170615][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 82.202914][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 82.241223][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.261120][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.458725][ T5991] team0: Device gtp0 is of different type [ 82.556053][ T6001] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15'. [ 82.631736][ T5992] Zero length message leads to an empty skb [ 82.656770][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 82.737730][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.106383][ T53] Bluetooth: hci0: command tx timeout [ 83.117046][ T6024] Bluetooth: MGMT ver 1.23 [ 83.133631][ T6024] syz.1.24: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 83.157708][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.1.24 Not tainted syzkaller #0 PREEMPT(full) [ 83.157736][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.157754][ T6024] Call Trace: [ 83.157763][ T6024] [ 83.157771][ T6024] dump_stack_lvl+0x189/0x250 [ 83.157809][ T6024] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 83.157839][ T6024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.157864][ T6024] ? __pfx__printk+0x10/0x10 [ 83.157883][ T6024] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 83.157908][ T6024] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 83.157941][ T6024] warn_alloc+0x214/0x310 [ 83.157969][ T6024] ? stack_depot_save_flags+0x41b/0x860 [ 83.158002][ T6024] ? __pfx_warn_alloc+0x10/0x10 [ 83.158031][ T6024] ? kasan_save_track+0x3e/0x80 [ 83.158055][ T6024] ? __kasan_kmalloc+0x93/0xb0 [ 83.158083][ T6024] ? xsk_setsockopt+0x4dc/0x8d0 [ 83.158104][ T6024] ? do_sock_setsockopt+0x17c/0x1b0 [ 83.158121][ T6024] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 83.158138][ T6024] ? do_syscall_64+0xfa/0xfa0 [ 83.158164][ T6024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.158192][ T6024] __vmalloc_node_range_noprof+0x125/0x12d0 [ 83.158248][ T6024] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 83.158279][ T6024] ? __kasan_kmalloc+0x93/0xb0 [ 83.158312][ T6024] vmalloc_user_noprof+0xad/0xf0 [ 83.158339][ T6024] ? xskq_create+0xbf/0x170 [ 83.158364][ T6024] xskq_create+0xbf/0x170 [ 83.158391][ T6024] xsk_init_queue+0xb0/0x110 [ 83.158418][ T6024] xsk_setsockopt+0x4dc/0x8d0 [ 83.158444][ T6024] ? __pfx_xsk_setsockopt+0x10/0x10 [ 83.158470][ T6024] ? __pfx_aa_sk_perm+0x10/0x10 [ 83.158498][ T6024] ? aa_sock_opt_perm+0xff/0x1b0 [ 83.158530][ T6024] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 83.158549][ T6024] ? __pfx_xsk_setsockopt+0x10/0x10 [ 83.158572][ T6024] do_sock_setsockopt+0x17c/0x1b0 [ 83.158596][ T6024] __x64_sys_setsockopt+0x13f/0x1b0 [ 83.158630][ T6024] do_syscall_64+0xfa/0xfa0 [ 83.158656][ T6024] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.158683][ T6024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.158701][ T6024] ? clear_bhb_loop+0x60/0xb0 [ 83.158723][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.158742][ T6024] RIP: 0033:0x7f329658f6c9 [ 83.158769][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.158784][ T6024] RSP: 002b:00007f3297512038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.158804][ T6024] RAX: ffffffffffffffda RBX: 00007f32967e5fa0 RCX: 00007f329658f6c9 [ 83.158818][ T6024] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 83.158834][ T6024] RBP: 00007f3296611f91 R08: 0000000000000004 R09: 0000000000000000 [ 83.158845][ T6024] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.158857][ T6024] R13: 00007f32967e6038 R14: 00007f32967e5fa0 R15: 00007ffc40779e58 [ 83.158887][ T6024] [ 83.158900][ T6024] Mem-Info: [ 83.299850][ T6029] smc: net device gre0 applied user defined pnetid SYZ1 [ 83.303143][ T53] Bluetooth: hci1: command tx timeout [ 83.306295][ T6024] active_anon:5134 inactive_anon:0 isolated_anon:0 [ 83.306295][ T6024] active_file:2558 inactive_file:39872 isolated_file:0 [ 83.306295][ T6024] unevictable:768 dirty:1459 writeback:0 [ 83.306295][ T6024] slab_reclaimable:10441 slab_unreclaimable:94208 [ 83.306295][ T6024] mapped:29025 shmem:1356 pagetables:1100 [ 83.306295][ T6024] sec_pagetables:0 bounce:0 [ 83.306295][ T6024] kernel_misc_reclaimable:0 [ 83.306295][ T6024] free:1336819 free_pcp:15871 free_cma:0 [ 83.422112][ T6029] smc: net device gre0 erased user defined pnetid SYZ1 [ 83.454558][ T53] Bluetooth: hci3: command tx timeout [ 83.525952][ T5840] Bluetooth: hci2: command tx timeout [ 83.527586][ T5828] Bluetooth: hci4: command tx timeout [ 83.589379][ T6024] Node 0 active_anon:21176kB inactive_anon:0kB active_file:10276kB inactive_file:159280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116132kB dirty:5844kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11836kB pagetables:4580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 83.654044][ T6024] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 83.813881][ T6024] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 83.884774][ T6024] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 83.890714][ T6024] Node 0 DMA32 free:1435008kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20776kB inactive_anon:0kB active_file:10276kB inactive_file:159280kB unevictable:1536kB writepending:5844kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:48692kB local_pcp:33720kB free_cma:0kB [ 83.963033][ T6024] lowmem_reserve[]: 0 0 0 0 0 [ 83.970057][ T6024] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.009558][ T6024] lowmem_reserve[]: 0 0 0 0 0 [ 84.015147][ T6052] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 84.016417][ T6024] Node 1 Normal free:3893860kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:20kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17692kB local_pcp:10568kB free_cma:0kB [ 84.022258][ T5883] IPVS: starting estimator thread 0... [ 84.057059][ T6024] lowmem_reserve[]: 0 0 0 0 0 [ 84.082458][ T6024] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.138543][ T6024] Node 0 DMA32: 0*4kB 2*8kB (UM) 2*16kB (ME) 3*32kB (UME) 0*64kB 6*128kB (M) 9*256kB (ME) 10*512kB (ME) 4*1024kB (UM) 4*2048kB (UME) 345*4096kB (M) = 1433744kB [ 84.205301][ T6024] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 84.223592][ T6024] Node 1 Normal: 38*4kB (UM) 29*8kB (UME) 28*16kB (UME) 46*32kB (UME) 13*64kB (UME) 4*128kB (UME) 2*256kB (M) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3893824kB [ 84.263657][ T6024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.275573][ T6062] IPVS: using max 37 ests per chain, 88800 per kthread [ 84.283119][ T6024] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.292766][ T6024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.307487][ T6024] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.318933][ T6024] 43793 total pagecache pages [ 84.323751][ T6024] 0 pages in swap cache [ 84.328321][ T6024] Free swap = 124996kB [ 84.332693][ T6024] Total swap = 124996kB [ 84.337116][ T6024] 2097051 pages RAM [ 84.341077][ T6024] 0 pages HighMem/MovableOnly [ 84.346000][ T6024] 424119 pages reserved [ 84.350272][ T6024] 0 pages cma reserved [ 84.918376][ T6088] syz.4.41 uses obsolete (PF_INET,SOCK_PACKET) [ 85.853268][ T6154] ip6erspan0: entered promiscuous mode [ 85.870666][ T6154] ip6erspan0: entered allmulticast mode [ 85.956402][ T6163] __nla_validate_parse: 2 callbacks suppressed [ 85.956420][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.58'. [ 86.142331][ T6171] x_tables: duplicate underflow at hook 1 [ 86.169788][ T6169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.228964][ T6176] netlink: 'syz.1.64': attribute type 8 has an invalid length. [ 86.242408][ T6177] netlink: 'syz.2.61': attribute type 5 has an invalid length. [ 86.275978][ T6177] netlink: 140 bytes leftover after parsing attributes in process `syz.2.61'. [ 86.283719][ T6179] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 86.345686][ T6179] vlan2: entered promiscuous mode [ 86.370017][ T6179] batadv_slave_0: entered promiscuous mode [ 86.394154][ T6179] vlan2: entered allmulticast mode [ 86.409558][ T6179] batadv_slave_0: entered allmulticast mode [ 86.430799][ T6186] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 86.486045][ T9] cfg80211: failed to load regulatory.db [ 86.700195][ T6202] syzkaller1: entered promiscuous mode [ 86.711684][ T6202] syzkaller1: entered allmulticast mode [ 86.821006][ T6214] wg2: entered promiscuous mode [ 86.833970][ T6214] wg2: entered allmulticast mode [ 86.975993][ T6223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.042763][ T6227] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 87.097310][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.82'. [ 87.118090][ T6228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.173201][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.83'. [ 87.248509][ T6237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.84'. [ 87.789265][ T6257] Bluetooth: MGMT ver 1.23 [ 87.978805][ T6269] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 88.501032][ T6305] bond2: option lp_interval: invalid value (0) [ 88.522371][ T6305] bond2: option lp_interval: allowed values 1 - 2147483647 [ 88.531697][ T6305] bond2 (unregistering): Released all slaves [ 88.560134][ T6312] netlink: 'syz.3.109': attribute type 21 has an invalid length. [ 88.568257][ T6312] netlink: 128 bytes leftover after parsing attributes in process `syz.3.109'. [ 88.577376][ T6312] netlink: 3 bytes leftover after parsing attributes in process `syz.3.109'. [ 88.768433][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 88.789889][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 88.837554][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 88.983436][ T6327] netlink: 'syz.1.116': attribute type 64 has an invalid length. [ 89.373008][ T6356] pimreg: entered allmulticast mode [ 89.387973][ T5855] IPVS: starting estimator thread 0... [ 89.399103][ T6349] veth1_macvtap: left promiscuous mode [ 89.483961][ T6357] IPVS: using max 38 ests per chain, 91200 per kthread [ 89.556221][ T6365] syzkaller0: entered promiscuous mode [ 89.565621][ T6365] syzkaller0: entered allmulticast mode [ 89.671944][ T6375] tipc: Started in network mode [ 89.677110][ T6375] tipc: Node identity 92ee1aa4a673, cluster identity 4711 [ 89.684704][ T6375] tipc: Enabled bearer , priority 0 [ 89.921347][ T6394] Bluetooth: MGMT ver 1.23 [ 89.990175][ T6394] geneve2: entered promiscuous mode [ 90.028732][ T6407] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 90.064527][ T6394] geneve2: entered allmulticast mode [ 90.089786][ T6407] team0: Device ipvlan1 failed to register rx_handler [ 90.121519][ T6389] netlink: 'syz.2.135': attribute type 16 has an invalid length. [ 90.158261][ T6389] netlink: 'syz.2.135': attribute type 17 has an invalid length. [ 90.264351][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.297549][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.358260][ T6361] tipc: Resetting bearer [ 90.374745][ T6417] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 90.394436][ T6361] tipc: Disabling bearer [ 90.435933][ T6417] dummy0: entered promiscuous mode [ 90.462473][ T6417] bridge0: port 3(dummy0) entered blocking state [ 90.500254][ T6417] bridge0: port 3(dummy0) entered disabled state [ 90.545458][ T6417] dummy0: entered allmulticast mode [ 90.562632][ T6417] bridge0: port 3(dummy0) entered blocking state [ 90.569159][ T6417] bridge0: port 3(dummy0) entered forwarding state [ 91.212167][ T6461] __nla_validate_parse: 11 callbacks suppressed [ 91.212186][ T6461] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.155'. [ 91.245593][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 91.451087][ T6477] netlink: 44 bytes leftover after parsing attributes in process `syz.4.159'. [ 91.597779][ T6480] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.621941][ T6480] netlink: 68 bytes leftover after parsing attributes in process `syz.0.160'. [ 91.728245][ T5883] IPVS: starting estimator thread 0... [ 91.836335][ T6491] IPVS: using max 32 ests per chain, 76800 per kthread [ 92.055873][ T6505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.219536][ T6515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'. [ 92.345014][ T6515] validate_nla: 1 callbacks suppressed [ 92.345038][ T6515] netlink: 'syz.2.171': attribute type 26 has an invalid length. [ 92.431746][ T6522] netlink: 'syz.2.171': attribute type 26 has an invalid length. [ 92.567310][ T6528] raw_sendmsg: syz.2.171 forgot to set AF_INET. Fix it! [ 92.790545][ T6549] netlink: 'syz.3.179': attribute type 1 has an invalid length. [ 92.801758][ T6549] netlink: 228 bytes leftover after parsing attributes in process `syz.3.179'. [ 92.819605][ T6549] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.179'. [ 93.009507][ T6552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.180'. [ 93.051618][ T6554] netlink: 68 bytes leftover after parsing attributes in process `syz.4.182'. [ 93.136981][ T6559] netlink: 'syz.2.183': attribute type 10 has an invalid length. [ 93.145841][ T6559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.183'. [ 93.156193][ T6559] batadv0: entered promiscuous mode [ 93.161502][ T6559] batadv0: entered allmulticast mode [ 93.178281][ T6559] bridge0: port 3(batadv0) entered blocking state [ 93.183245][ T6563] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 93.206373][ T6559] bridge0: port 3(batadv0) entered disabled state [ 93.246743][ T6563] team0: Device veth1_macvtap failed to register rx_handler [ 93.316760][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 93.326868][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 93.495350][ T6577] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 93.848158][ T6591] Cannot find add_set index 0 as target [ 94.279069][ T6610] Illegal XDP return value 3247385701 on prog (id 53) dev N/A, expect packet loss! [ 94.348531][ T6613] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 94.407864][ T6602] delete_channel: no stack [ 94.641704][ T6633] tls_set_device_offload: netdev not found [ 94.656003][ T6636] wg2: entered promiscuous mode [ 94.680772][ T6636] wg2: entered allmulticast mode [ 94.771921][ T6636] team_slave_0: entered promiscuous mode [ 94.777795][ T6636] team_slave_1: entered promiscuous mode [ 94.796030][ T6636] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 94.821159][ T6645] xt_TCPMSS: Only works on TCP SYN packets [ 95.069715][ T6651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.248562][ T6651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.259659][ T6655] nbd0: detected capacity change from 0 to 127 [ 95.273713][ T5839] block nbd0: Send control failed (result -32) [ 95.275254][ T5828] block nbd0: Receive control failed (result -32) [ 95.286136][ T5839] block nbd0: Request send failed, requeueing [ 95.339233][ T6669] erspan0: entered allmulticast mode [ 95.342579][ T98] block nbd0: Dead connection, failed to find a fallback [ 95.352474][ T98] block nbd0: shutting down sockets [ 95.358417][ T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.367962][ T98] Buffer I/O error on dev nbd0, logical block 0, async page read [ 95.380699][ T5839] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.390016][ T5839] Buffer I/O error on dev nbd0, logical block 1, async page read [ 95.402023][ T5839] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.439904][ T5839] Buffer I/O error on dev nbd0, logical block 2, async page read [ 95.458149][ T5839] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.478253][ T5839] Buffer I/O error on dev nbd0, logical block 3, async page read [ 95.487348][ T5839] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.497001][ T5839] Buffer I/O error on dev nbd0, logical block 0, async page read [ 95.502400][ T6651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.508936][ T5839] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.533481][ T5839] Buffer I/O error on dev nbd0, logical block 1, async page read [ 95.542737][ T5839] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.584438][ T5839] Buffer I/O error on dev nbd0, logical block 2, async page read [ 95.599466][ T5839] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.619385][ T5839] Buffer I/O error on dev nbd0, logical block 3, async page read [ 95.632270][ T5839] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.646280][ T5839] Buffer I/O error on dev nbd0, logical block 0, async page read [ 95.654415][ T5839] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.663527][ T5839] Buffer I/O error on dev nbd0, logical block 1, async page read [ 95.684688][ T6651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.712895][ T5839] ldm_validate_partition_table(): Disk read failed. [ 95.741770][ T6684] tipc: Enabling of bearer rejected, failed to enable media [ 95.742873][ T5839] Dev nbd0: unable to read RDB block 0 [ 95.806600][ T5839] nbd0: unable to read partition table [ 95.848159][ T5839] ldm_validate_partition_table(): Disk read failed. [ 95.858191][ T5839] Dev nbd0: unable to read RDB block 0 [ 95.868060][ T6692] tipc: Started in network mode [ 95.872945][ T6692] tipc: Node identity 72f244a1ceb1, cluster identity 4711 [ 95.883686][ T6692] tipc: Enabled bearer , priority 0 [ 95.892549][ T6691] syzkaller0: entered promiscuous mode [ 95.899520][ T6691] syzkaller0: entered allmulticast mode [ 95.908599][ T5839] nbd0: unable to read partition table [ 95.997952][ T1107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.006934][ T6693] tipc: Resetting bearer [ 96.031089][ T6693] tipc: Disabling bearer [ 96.119583][ T1107] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.214193][ T1107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.270650][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.358709][ T6712] syzkaller1: entered promiscuous mode [ 96.380511][ T6712] syzkaller1: entered allmulticast mode [ 96.440739][ T6718] __nla_validate_parse: 17 callbacks suppressed [ 96.440758][ T6718] netlink: 56 bytes leftover after parsing attributes in process `syz.0.231'. [ 96.482359][ T6724] vcan0: entered allmulticast mode [ 96.672171][ T6733] xt_limit: Overflow, try lower: 271964/0 [ 96.879557][ T6749] bridge0: port 3(dummy0) entered disabled state [ 96.898887][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.910942][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.985889][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 96.998478][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'. [ 97.282758][ T6770] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.392381][ T6775] tipc: Started in network mode [ 97.397584][ T6775] tipc: Node identity 1276f173b193, cluster identity 4711 [ 97.418494][ T6775] tipc: Enabled bearer , priority 0 [ 97.427398][ T6775] syzkaller0: entered promiscuous mode [ 97.433022][ T6775] syzkaller0: entered allmulticast mode [ 97.469093][ T6775] tipc: Resetting bearer [ 97.480430][ T6774] tipc: Resetting bearer [ 97.504405][ T6774] tipc: Disabling bearer [ 98.177744][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 98.201229][ T6810] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 98.209817][ T6810] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 98.715411][ T6838] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 99.045009][ T6855] netlink: 'syz.0.270': attribute type 4 has an invalid length. [ 99.099750][ T6857] dummy0: left allmulticast mode [ 99.124622][ T6857] bridge0: port 3(dummy0) entered disabled state [ 99.180769][ T6857] bridge_slave_0: left allmulticast mode [ 99.193525][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 99.202716][ T6857] bridge_slave_0: left promiscuous mode [ 99.217452][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.222250][ T6866] netlink: 'syz.4.272': attribute type 22 has an invalid length. [ 99.246506][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 99.255124][ T6857] bridge_slave_1: left allmulticast mode [ 99.304857][ T6857] bridge_slave_1: left promiscuous mode [ 99.321571][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.390858][ T6873] sctp: [Deprecated]: syz.0.276 (pid 6873) Use of int in maxseg socket option. [ 99.390858][ T6873] Use struct sctp_assoc_value instead [ 99.406628][ T6857] bond0: (slave bond_slave_0): Releasing backup interface [ 99.436393][ T6857] bond0: (slave bond_slave_1): Releasing backup interface [ 99.472355][ T6857] team_slave_0: left promiscuous mode [ 99.484921][ T6857] team0: Port device team_slave_0 removed [ 99.492766][ T6857] team_slave_1: left promiscuous mode [ 99.504866][ T6857] team0: Port device team_slave_1 removed [ 99.512071][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.520350][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.535652][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.543123][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.552496][ T6857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.593394][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 99.607757][ T6866] netlink: 'syz.4.272': attribute type 22 has an invalid length. [ 99.614592][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.624973][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.627700][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 99.633754][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.671886][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.805990][ T6883] : entered promiscuous mode [ 100.137410][ T6900] netlink: 'syz.2.282': attribute type 64 has an invalid length. [ 100.145773][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'. [ 100.197077][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 100.446748][ T6910] pim6reg: entered allmulticast mode [ 100.907763][ T6935] netlink: 'syz.1.296': attribute type 4 has an invalid length. [ 101.075189][ T6948] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.598460][ T6977] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 101.708538][ T6974] __nla_validate_parse: 4 callbacks suppressed [ 101.708554][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 102.055952][ T6987] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.311'. [ 102.118292][ T6991] syzkaller0: entered promiscuous mode [ 102.138024][ T6991] syzkaller0: entered allmulticast mode [ 102.189082][ T6991] netlink: 2 bytes leftover after parsing attributes in process `syz.2.314'. [ 102.429335][ T7003] netlink: 'syz.4.317': attribute type 2 has an invalid length. [ 102.450620][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 102.483925][ T7002] netlink: 80 bytes leftover after parsing attributes in process `syz.0.316'. [ 102.525454][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 102.668858][ T7011] netlink: 48 bytes leftover after parsing attributes in process `syz.0.321'. [ 103.909831][ T7065] netlink: 2 bytes leftover after parsing attributes in process `syz.2.336'. [ 104.603308][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 104.661990][ T7093] netlink: 'syz.4.343': attribute type 32 has an invalid length. [ 104.704182][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 104.792663][ T7093] bond2: option coupled_control: invalid value (52) [ 104.828737][ T7093] bond2 (unregistering): Released all slaves [ 105.271863][ T7121] xfrm1: entered allmulticast mode [ 105.535531][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.543229][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.701382][ T7126] wg2: left promiscuous mode [ 105.713995][ T7126] wg2: left allmulticast mode [ 105.782637][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.809198][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.005936][ T7126] ip6erspan0: left promiscuous mode [ 106.012550][ T7126] ip6erspan0: left allmulticast mode [ 106.032611][ T144] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.063637][ T144] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.077489][ T144] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.107927][ T144] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.618064][ T7182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.726576][ T7182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.866261][ T7191] x_tables: duplicate underflow at hook 2 [ 106.948342][ T7185] syzkaller0: entered promiscuous mode [ 106.957046][ T7185] syzkaller0: entered allmulticast mode [ 106.977693][ T7191] syzkaller0: entered promiscuous mode [ 106.983256][ T7191] syzkaller0: entered allmulticast mode [ 107.071437][ T7191] __nla_validate_parse: 7 callbacks suppressed [ 107.071455][ T7191] netlink: 360 bytes leftover after parsing attributes in process `syz.2.366'. [ 107.078257][ T7195] netlink: 144 bytes leftover after parsing attributes in process `syz.3.367'. [ 107.136734][ T7195] netlink: 210 bytes leftover after parsing attributes in process `syz.3.367'. [ 107.268090][ T7204] netlink: 'syz.3.367': attribute type 12 has an invalid length. [ 107.283100][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 107.388195][ T7210] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.371'. [ 107.471287][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 108.119859][ T7213] hsr_slave_0 (unregistering): left promiscuous mode [ 108.296300][ T7220] netlink: 44 bytes leftover after parsing attributes in process `syz.2.375'. [ 108.317391][ T7220] netlink: 43 bytes leftover after parsing attributes in process `syz.2.375'. [ 108.335441][ T7220] netlink: 'syz.2.375': attribute type 5 has an invalid length. [ 108.371722][ T7220] netlink: 43 bytes leftover after parsing attributes in process `syz.2.375'. [ 108.816863][ T7259] sctp: [Deprecated]: syz.0.385 (pid 7259) Use of int in max_burst socket option deprecated. [ 108.816863][ T7259] Use struct sctp_assoc_value instead [ 108.854126][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 109.118071][ T7275] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 109.191625][ T7275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.569269][ T7312] xt_hashlimit: max too large, truncated to 1048576 [ 109.728361][ T5899] hid-generic 0005:0007:5505.0001: item fetching failed at offset 4/5 [ 109.750429][ T5899] hid-generic 0005:0007:5505.0001: probe with driver hid-generic failed with error -22 [ 109.863564][ T7327] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 109.880902][ T7327] bond1 (unregistering): Released all slaves [ 109.941702][ T7328] veth3: entered allmulticast mode [ 110.166021][ T7297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.183098][ T7297] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 110.238144][ T7297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.251553][ T7297] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 110.252736][ T7346] tipc: Enabled bearer , priority 0 [ 110.283181][ T7297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.293565][ T7346] syzkaller0: entered promiscuous mode [ 110.314706][ T7346] syzkaller0: entered allmulticast mode [ 110.323406][ T7297] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 110.346284][ T7346] tipc: Resetting bearer [ 110.359591][ T7350] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 110.408001][ T7345] tipc: Resetting bearer [ 110.415607][ T7297] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 110.421533][ T7297] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 110.455489][ T7345] tipc: Disabling bearer [ 110.467025][ T7297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.489833][ T7297] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 111.471140][ T7425] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 111.508997][ T7425] netlink: 'syz.1.423': attribute type 7 has an invalid length. [ 111.517193][ T7425] netlink: 'syz.1.423': attribute type 8 has an invalid length. [ 111.540325][ T7425] NCSI netlink: No device for ifindex 65584 [ 111.563749][ T7434] warning: `syz.3.427' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.276593][ T7470] bond1: entered promiscuous mode [ 112.299663][ T7470] bond1: entered allmulticast mode [ 112.306329][ T7470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.373719][ T7485] veth0: entered promiscuous mode [ 112.389214][ T7483] veth0: left promiscuous mode [ 112.539665][ T7491] __nla_validate_parse: 9 callbacks suppressed [ 112.539682][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 112.551063][ T7494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.444'. [ 112.593580][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 112.686857][ T7494] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 112.715721][ T7494] bond3 (unregistering): Released all slaves [ 112.821419][ T7510] bridge3: entered promiscuous mode [ 112.833867][ T7510] bridge3: entered allmulticast mode [ 112.937442][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 113.487386][ T7563] netlink: 152 bytes leftover after parsing attributes in process `syz.3.460'. [ 113.541836][ T7566] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.460'. [ 113.828921][ T7578] netlink: 104 bytes leftover after parsing attributes in process `syz.0.464'. [ 113.861178][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 114.168110][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 114.215722][ T7602] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.470'. [ 114.772458][ T7647] netlink: 'syz.1.483': attribute type 1 has an invalid length. [ 114.920372][ T7647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.942981][ T7647] bond2: (slave bond3): making interface the new active one [ 114.969931][ T7647] bond2: (slave bond3): Enslaving as an active interface with an up link [ 115.141898][ T7672] vcan0: entered allmulticast mode [ 115.467487][ T7699] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 115.510330][ T7699] trusted_key: syz.0.498 sent an empty control message without MSG_MORE. [ 115.528143][ T7704] openvswitch: netlink: Flow key attr not present in new flow. [ 115.647645][ T7696] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 116.120605][ T7740] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 116.196609][ T7743] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 116.473534][ T7759] tipc: Enabling of bearer rejected, failed to enable media [ 116.669194][ T7775] tipc: Enabled bearer , priority 0 [ 116.692916][ T7774] tipc: Disabling bearer [ 116.777783][ T7785] xt_hashlimit: invalid rate [ 116.893650][ T7788] syzkaller0: entered promiscuous mode [ 116.906303][ T7788] syzkaller0: entered allmulticast mode [ 118.422047][ T7845] __nla_validate_parse: 21 callbacks suppressed [ 118.422065][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 118.447041][ T7845] netlink: 'syz.1.546': attribute type 2 has an invalid length. [ 118.461943][ T7845] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 118.473540][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 118.479303][ T7851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.546'. [ 118.513416][ T7849] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 118.775566][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 118.890465][ T7877] netlink: 'syz.1.557': attribute type 33 has an invalid length. [ 118.937027][ T7880] syzkaller0: entered promiscuous mode [ 118.942702][ T7880] syzkaller0: entered allmulticast mode [ 118.971480][ T7877] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 118.983370][ T7877] bond5 (unregistering): Released all slaves [ 119.167059][ T7894] netlink: 'syz.1.561': attribute type 21 has an invalid length. [ 119.175264][ T7894] netlink: 128 bytes leftover after parsing attributes in process `syz.1.561'. [ 120.016311][ T7894] netlink: 'syz.1.561': attribute type 5 has an invalid length. [ 120.024427][ T7894] netlink: 3 bytes leftover after parsing attributes in process `syz.1.561'. [ 120.095331][ T7914] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 120.120708][ T7909] syzkaller0: entered promiscuous mode [ 120.126310][ T7909] syzkaller0: entered allmulticast mode [ 121.073492][ T7925] tipc: Enabled bearer , priority 0 [ 121.082620][ T7929] syzkaller0: entered promiscuous mode [ 121.093954][ T7929] syzkaller0: entered allmulticast mode [ 121.205376][ T7940] tipc: Resetting bearer [ 121.245643][ T7940] tipc: Disabling bearer [ 121.298632][ T7945] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.307901][ T7945] bond0: (slave bond5): Enslaving as an active interface with an up link [ 121.475520][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 121.491635][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 121.630483][ T7974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.652104][ T7979] ªªªªª»: renamed from bond_slave_0 [ 121.692094][ T7983] tipc: Started in network mode [ 121.714170][ T7983] tipc: Node identity 467859e41c2f, cluster identity 4711 [ 121.734136][ T7983] tipc: Enabled bearer , priority 0 [ 121.764508][ T7983] syzkaller0: entered promiscuous mode [ 121.770007][ T7983] syzkaller0: entered allmulticast mode [ 121.805605][ T7983] sch_tbf: burst 127 is lower than device xfrm0 mtu (1500) ! [ 121.888756][ T7983] tipc: Resetting bearer [ 121.895512][ T8000] netlink: 'syz.0.586': attribute type 13 has an invalid length. [ 121.917460][ T7982] tipc: Resetting bearer [ 121.945729][ T7982] tipc: Disabling bearer [ 122.030535][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.040544][ T8000] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.052283][ T8000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.181018][ T8015] vlan2: entered promiscuous mode [ 122.214628][ T8015] vlan2: entered allmulticast mode [ 122.220155][ T8015] hsr_slave_1: entered allmulticast mode [ 122.230917][ T8017] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 122.407246][ T8024] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 122.686917][ T8048] nft_compat: unsupported protocol 11 [ 122.775388][ T8054] xt_addrtype: ipv6 does not support BROADCAST matching [ 123.067185][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 123.292832][ T8083] netlink: 'syz.4.606': attribute type 1 has an invalid length. [ 123.362323][ T8083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.417952][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.606'. [ 123.470502][ T8094] bond3: (slave ip6gretap1): making interface the new active one [ 123.480378][ T8094] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 123.493150][ T8090] bond3: entered allmulticast mode [ 123.521397][ T8104] netlink: 'syz.0.608': attribute type 11 has an invalid length. [ 123.535796][ T8090] ip6gretap1: entered allmulticast mode [ 123.541055][ T8104] netlink: 224 bytes leftover after parsing attributes in process `syz.0.608'. [ 123.763428][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 123.889059][ T8120] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 124.120326][ T8144] netlink: 'syz.2.621': attribute type 4 has an invalid length. [ 124.146171][ T8146] netlink: 44 bytes leftover after parsing attributes in process `syz.0.622'. [ 124.158693][ T8146] netlink: 21 bytes leftover after parsing attributes in process `syz.0.622'. [ 124.168085][ T8146] netlink: 21 bytes leftover after parsing attributes in process `syz.0.622'. [ 124.280440][ T8158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.625'. [ 124.456180][ T8175] netlink: 68 bytes leftover after parsing attributes in process `syz.3.627'. [ 124.596843][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 124.614097][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 124.906374][ T8203] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 125.016321][ T8210] netlink: 348 bytes leftover after parsing attributes in process `syz.2.639'. [ 125.162048][ T8213] nbd: must specify a device to reconfigure [ 125.319107][ T8230] tc_dump_action: action bad kind [ 125.518177][ T8241] netlink: 'syz.2.650': attribute type 11 has an invalid length. [ 125.699551][ T8252] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 125.706896][ T7139] IPVS: starting estimator thread 0... [ 125.803858][ T8256] IPVS: using max 29 ests per chain, 69600 per kthread [ 126.371256][ T8298] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.110670][ T8332] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 127.123430][ T8332] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 127.359013][ T8358] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.558673][ T8371] netlink: 'syz.1.689': attribute type 5 has an invalid length. [ 127.921081][ T8402] netlink: 'syz.1.698': attribute type 30 has an invalid length. [ 128.052681][ T8418] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 128.069111][ T8423] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 128.362743][ T8453] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 128.436292][ T8456] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.553012][ T8470] xt_l2tp: invalid flags combination: 0 [ 128.587839][ T8470] __nla_validate_parse: 29 callbacks suppressed [ 128.587854][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 128.612468][ T8470] netlink: 'syz.4.720': attribute type 9 has an invalid length. [ 128.757687][ T8487] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.724'. [ 128.859701][ T8491] ip6t_srh: unknown srh invflags 4000 [ 128.872619][ T8499] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20002 [ 128.896103][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 129.078264][ T8506] sctp: [Deprecated]: syz.4.734 (pid 8506) Use of int in max_burst socket option. [ 129.078264][ T8506] Use struct sctp_assoc_value instead [ 129.232415][ T8522] veth0: entered promiscuous mode [ 129.260215][ T8522] veth0: left promiscuous mode [ 129.271005][ T8524] syzkaller0: entered promiscuous mode [ 129.294318][ T8524] syzkaller0: entered allmulticast mode [ 129.798661][ T8561] tipc: Enabled bearer , priority 2 [ 129.877179][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 130.001978][ T8583] sctp: [Deprecated]: syz.2.754 (pid 8583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.001978][ T8583] Use struct sctp_sack_info instead [ 130.255978][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.761'. [ 130.260225][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 130.277751][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 130.288533][ T8613] netlink: 260 bytes leftover after parsing attributes in process `syz.1.759'. [ 130.352833][ T8613] netlink: 14 bytes leftover after parsing attributes in process `syz.1.759'. [ 130.380444][ T8613] bond0 (unregistering): (slave bond5): Releasing backup interface [ 130.391208][ T8613] bond0 (unregistering): Released all slaves [ 130.664737][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 130.804832][ T8623] syzkaller0: entered allmulticast mode [ 130.914966][ T9] tipc: Node number set to 3158525089 [ 131.327565][ T8666] netlink: 'syz.2.775': attribute type 9 has an invalid length. [ 131.432292][ T8668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.432981][ T8676] sctp: [Deprecated]: syz.1.780 (pid 8676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.432981][ T8676] Use struct sctp_sack_info instead [ 131.464822][ T8668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.496873][ T8682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.509527][ T8676] sctp: [Deprecated]: syz.1.780 (pid 8676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.509527][ T8676] Use struct sctp_sack_info instead [ 131.589950][ T8668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.624938][ T8668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.808852][ T8668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.848552][ T8668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.988441][ T8668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.002172][ T8668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.201713][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.217295][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.269267][ T67] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.277738][ T67] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.444872][ T8738] syzkaller0: entered promiscuous mode [ 132.462949][ T8738] syzkaller0: entered allmulticast mode [ 132.497117][ T8762] lo: entered allmulticast mode [ 132.506836][ T144] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.516793][ T144] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.552027][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.558417][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.343439][ T8757] Unsupported xt match [ 133.343457][ T8757] unable to load match [ 133.384438][ T144] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.393956][ T144] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.605291][ T8786] __nla_validate_parse: 6 callbacks suppressed [ 133.605318][ T8786] netlink: 56 bytes leftover after parsing attributes in process `syz.0.799'. [ 133.637166][ T8787] netlink: 'syz.3.802': attribute type 4 has an invalid length. [ 133.916166][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 133.925352][ T8801] block nbd1: Unsupported socket: should be TCP or UNIX. [ 133.932272][ T8814] netlink: 56 bytes leftover after parsing attributes in process `syz.2.809'. [ 134.112864][ T8827] tipc: Started in network mode [ 134.127284][ T8827] tipc: Node identity c6e72ba27acd, cluster identity 4711 [ 134.135505][ T8827] tipc: Enabled bearer , priority 0 [ 134.143688][ T8827] syzkaller0: entered promiscuous mode [ 134.150726][ T8827] syzkaller0: entered allmulticast mode [ 134.171923][ T8827] tipc: Resetting bearer [ 134.182066][ T8825] tipc: Resetting bearer [ 134.196994][ T8825] tipc: Disabling bearer [ 134.211148][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 134.211982][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 134.378870][ T8848] netlink: 'syz.1.818': attribute type 3 has an invalid length. [ 134.570594][ T8855] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 134.800799][ T8874] tipc: Enabled bearer , priority 0 [ 134.808799][ T8874] syzkaller0: entered promiscuous mode [ 134.814693][ T8874] syzkaller0: entered allmulticast mode [ 134.904299][ T8874] tipc: Resetting bearer [ 134.929385][ T8873] tipc: Resetting bearer [ 134.962558][ T8873] tipc: Disabling bearer [ 134.986879][ T8886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.831'. [ 135.034520][ T8888] netlink: 72 bytes leftover after parsing attributes in process `syz.1.831'. [ 135.069051][ T8893] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.834'. [ 135.080312][ T8893] tipc: Enabling of bearer rejected, failed to enable media [ 135.404905][ T8898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.836'. [ 135.655938][ T8907] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 135.671199][ T8907] unsupported nla_type 52263 [ 135.749281][ T8913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'. [ 135.795101][ T8917] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 135.803425][ T8917] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 135.822519][ T8917] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 135.841237][ T8916] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 135.850100][ T8916] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 135.859544][ T8916] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 136.093522][ T8946] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 136.143350][ T8946] bond1: (slave bridge5): making interface the new active one [ 136.151633][ T8946] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 136.240591][ T8956] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 136.657274][ T8984] netlink: 'syz.2.868': attribute type 18 has an invalid length. [ 136.820352][ T8996] tipc: Enabling of bearer rejected, failed to enable media [ 136.948753][ T9006] netlink: 'syz.3.873': attribute type 2 has an invalid length. [ 137.056760][ T9010] delete_channel: no stack [ 137.075815][ T9010] tipc: Enabled bearer , priority 0 [ 137.084792][ T9010] syzkaller0: MTU too low for tipc bearer [ 137.091323][ T9010] tipc: Disabling bearer [ 137.147854][ T9016] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 137.240645][ T9026] netlink: 'syz.3.879': attribute type 83 has an invalid length. [ 137.295950][ T9031] : entered promiscuous mode [ 193.989021][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.426708][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.464045][ T31] INFO: task kworker/1:7:5972 blocked for more than 143 seconds. [ 294.471803][ T31] Not tainted syzkaller #0 [ 294.476999][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.485981][ T31] task:kworker/1:7 state:D stack:26032 pid:5972 tgid:5972 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 294.498121][ T31] Workqueue: events rfkill_sync_work [ 294.503431][ T31] Call Trace: [ 294.506751][ T31] [ 294.509692][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 294.514351][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.519874][ T31] ? __pfx___schedule+0x10/0x10 [ 294.525375][ T31] ? schedule+0x91/0x360 [ 294.529876][ T31] schedule+0x165/0x360 [ 294.534150][ T31] schedule_preempt_disabled+0x13/0x30 [ 294.539629][ T31] __mutex_lock+0x7e6/0x1350 [ 294.573857][ T31] ? __mutex_lock+0x5bb/0x1350 [ 294.578660][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 294.602275][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 294.607451][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.612680][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 294.618749][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 294.625197][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 294.631249][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 294.636465][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 294.642201][ T31] rfkill_set_block+0x1d2/0x440 [ 294.647165][ T31] rfkill_sync_work+0x114/0x200 [ 294.652034][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 294.657881][ T31] process_scheduled_works+0xae1/0x17b0 [ 294.663456][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.669588][ T31] worker_thread+0x8a0/0xda0 [ 294.674269][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 294.680596][ T31] ? __kthread_parkme+0x7b/0x200 [ 294.685620][ T31] kthread+0x711/0x8a0 [ 294.689709][ T31] ? __pfx_worker_thread+0x10/0x10 [ 294.695051][ T31] ? __pfx_kthread+0x10/0x10 [ 294.699664][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.705145][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.710366][ T31] ? __pfx_kthread+0x10/0x10 [ 294.715036][ T31] ret_from_fork+0x4bc/0x870 [ 294.719643][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 294.724820][ T31] ? __switch_to_asm+0x39/0x70 [ 294.729595][ T31] ? __switch_to_asm+0x33/0x70 [ 294.734432][ T31] ? __pfx_kthread+0x10/0x10 [ 294.739040][ T31] ret_from_fork_asm+0x1a/0x30 [ 294.743909][ T31] [ 294.746956][ T31] INFO: task kworker/1:12:7138 blocked for more than 143 seconds. [ 294.754901][ T31] Not tainted syzkaller #0 [ 294.759838][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.768600][ T31] task:kworker/1:12 state:D stack:26032 pid:7138 tgid:7138 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 294.780755][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 294.787556][ T31] Call Trace: [ 294.790839][ T31] [ 294.793878][ T31] __schedule+0x1798/0x4cc0 [ 294.798405][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.803817][ T31] ? __pfx___schedule+0x10/0x10 [ 294.808701][ T31] ? schedule+0x91/0x360 [ 294.812939][ T31] schedule+0x165/0x360 [ 294.817132][ T31] schedule_preempt_disabled+0x13/0x30 [ 294.822603][ T31] __mutex_lock+0x7e6/0x1350 [ 294.827265][ T31] ? __mutex_lock+0x5bb/0x1350 [ 294.832050][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 294.838334][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 294.843374][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 294.849140][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 294.854928][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 294.861011][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 294.866812][ T31] process_scheduled_works+0xae1/0x17b0 [ 294.872397][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.878446][ T31] worker_thread+0x8a0/0xda0 [ 294.883071][ T31] kthread+0x711/0x8a0 [ 294.887174][ T31] ? __pfx_worker_thread+0x10/0x10 [ 294.892291][ T31] ? __pfx_kthread+0x10/0x10 [ 294.896950][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.902162][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.907426][ T31] ? __pfx_kthread+0x10/0x10 [ 294.912034][ T31] ret_from_fork+0x4bc/0x870 [ 294.916660][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 294.921789][ T31] ? __switch_to_asm+0x39/0x70 [ 294.926579][ T31] ? __switch_to_asm+0x33/0x70 [ 294.931344][ T31] ? __pfx_kthread+0x10/0x10 [ 294.935973][ T31] ret_from_fork_asm+0x1a/0x30 [ 294.940756][ T31] [ 294.943940][ T31] INFO: task syz.1.849:8936 blocked for more than 143 seconds. [ 294.951486][ T31] Not tainted syzkaller #0 [ 294.956461][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.965142][ T31] task:syz.1.849 state:D stack:27560 pid:8936 tgid:8936 ppid:5830 task_flags:0x400040 flags:0x00080002 [ 294.977147][ T31] Call Trace: [ 294.980431][ T31] [ 294.983368][ T31] __schedule+0x1798/0x4cc0 [ 294.987968][ T31] ? validate_chain+0x897/0x2140 [ 294.992931][ T31] ? __lock_acquire+0xab9/0xd20 [ 294.997865][ T31] ? __pfx___schedule+0x10/0x10 [ 295.002740][ T31] ? schedule+0x91/0x360 [ 295.007024][ T31] schedule+0x165/0x360 [ 295.011191][ T31] schedule_timeout+0x9a/0x270 [ 295.016005][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 295.021394][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.026875][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.032088][ T31] ? wait_for_completion+0x267/0x5d0 [ 295.037418][ T31] wait_for_completion+0x2bf/0x5d0 [ 295.042548][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 295.048210][ T31] ? __flush_work+0xd2/0xbc0 [ 295.052811][ T31] ? __flush_work+0xd2/0xbc0 [ 295.057449][ T31] __flush_work+0x9b9/0xbc0 [ 295.062488][ T31] ? __flush_work+0xd2/0xbc0 [ 295.067136][ T31] ? __pfx___flush_work+0x10/0x10 [ 295.072172][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 295.077514][ T31] ? __pfx___cancel_work+0x10/0x10 [ 295.082640][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 295.088312][ T31] __cancel_work_sync+0xbe/0x110 [ 295.093265][ T31] rfkill_unregister+0x92/0x220 [ 295.098188][ T31] nfc_unregister_device+0x96/0x2a0 [ 295.103397][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 295.112261][ T31] virtual_ncidev_close+0x56/0x90 [ 295.117370][ T31] __fput+0x44c/0xa70 [ 295.121389][ T31] task_work_run+0x1d4/0x260 [ 295.126200][ T31] ? __pfx_task_work_run+0x10/0x10 [ 295.131333][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 295.136838][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 295.142129][ T31] do_syscall_64+0x2bd/0xfa0 [ 295.146790][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.152864][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.159072][ T31] ? clear_bhb_loop+0x60/0xb0 [ 295.163816][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.169717][ T31] RIP: 0033:0x7f329658f6c9 [ 295.174174][ T31] RSP: 002b:00007ffc40779fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 295.182596][ T31] RAX: 0000000000000000 RBX: 000000000002131f RCX: 00007f329658f6c9 [ 295.190641][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 295.198645][ T31] RBP: 00007f32967e7da0 R08: 0000000000000001 R09: 0000001e4077a2af [ 295.206646][ T31] R10: 0000001b2fd20000 R11: 0000000000000246 R12: 00007f32967e5fac [ 295.214677][ T31] R13: 00007f32967e5fa0 R14: ffffffffffffffff R15: 00007ffc4077a0d0 [ 295.222681][ T31] [ 295.225789][ T31] INFO: task syz.4.877:9016 blocked for more than 144 seconds. [ 295.233330][ T31] Not tainted syzkaller #0 [ 295.243981][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.252659][ T31] task:syz.4.877 state:D stack:23512 pid:9016 tgid:9015 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 295.264920][ T31] Call Trace: [ 295.268211][ T31] [ 295.271131][ T31] __schedule+0x1798/0x4cc0 [ 295.275784][ T31] ? security_file_open+0xb1/0x270 [ 295.280921][ T31] ? __lock_acquire+0xab9/0xd20 [ 295.285809][ T31] ? __lock_acquire+0xab9/0xd20 [ 295.290668][ T31] ? __pfx___schedule+0x10/0x10 [ 295.295554][ T31] ? schedule+0x91/0x360 [ 295.299813][ T31] schedule+0x165/0x360 [ 295.304126][ T31] schedule_preempt_disabled+0x13/0x30 [ 295.309595][ T31] __mutex_lock+0x7e6/0x1350 [ 295.314215][ T31] ? __mutex_lock+0x5bb/0x1350 [ 295.318997][ T31] ? misc_open+0x51/0x350 [ 295.323329][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 295.328423][ T31] misc_open+0x51/0x350 [ 295.332595][ T31] chrdev_open+0x4cc/0x5e0 [ 295.337070][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 295.342024][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 295.348463][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 295.353416][ T31] do_dentry_open+0x953/0x13f0 [ 295.358235][ T31] vfs_open+0x3b/0x340 [ 295.362313][ T31] ? path_openat+0x2ecd/0x3830 [ 295.367101][ T31] path_openat+0x2ee5/0x3830 [ 295.371726][ T31] ? __pfx_path_openat+0x10/0x10 [ 295.376712][ T31] do_filp_open+0x1fa/0x410 [ 295.381230][ T31] ? __lock_acquire+0xab9/0xd20 [ 295.386141][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 295.391194][ T31] ? _raw_spin_unlock+0x28/0x50 [ 295.396074][ T31] ? alloc_fd+0x64c/0x6c0 [ 295.400427][ T31] do_sys_openat2+0x121/0x1c0 [ 295.405131][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 295.410450][ T31] ? rcu_is_watching+0x15/0xb0 [ 295.415238][ T31] __x64_sys_openat+0x138/0x170 [ 295.420103][ T31] do_syscall_64+0xfa/0xfa0 [ 295.424790][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.430002][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.436099][ T31] ? clear_bhb_loop+0x60/0xb0 [ 295.440788][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.446720][ T31] RIP: 0033:0x7fd47db8f6c9 [ 295.451139][ T31] RSP: 002b:00007fd47ea5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.459590][ T31] RAX: ffffffffffffffda RBX: 00007fd47dde5fa0 RCX: 00007fd47db8f6c9 [ 295.467628][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 295.475646][ T31] RBP: 00007fd47dc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 295.483630][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.491650][ T31] R13: 00007fd47dde6038 R14: 00007fd47dde5fa0 R15: 00007ffdd09972f8 [ 295.499688][ T31] [ 295.502717][ T31] INFO: task syz.3.879:9020 blocked for more than 144 seconds. [ 295.510438][ T31] Not tainted syzkaller #0 [ 295.515398][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.524078][ T31] task:syz.3.879 state:D stack:26088 pid:9020 tgid:9019 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 295.536025][ T31] Call Trace: [ 295.539291][ T31] [ 295.542214][ T31] __schedule+0x1798/0x4cc0 [ 295.546790][ T31] ? __lock_acquire+0xab9/0xd20 [ 295.551654][ T31] ? __lock_acquire+0xab9/0xd20 [ 295.556547][ T31] ? __pfx___schedule+0x10/0x10 [ 295.561419][ T31] ? schedule+0x91/0x360 [ 295.565697][ T31] schedule+0x165/0x360 [ 295.569876][ T31] schedule_preempt_disabled+0x13/0x30 [ 295.575386][ T31] __mutex_lock+0x7e6/0x1350 [ 295.579997][ T31] ? __mutex_lock+0x5bb/0x1350 [ 295.584941][ T31] ? rfkill_fop_open+0x12d/0x820 [ 295.589892][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 295.594951][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 295.600279][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 295.605721][ T31] rfkill_fop_open+0x12d/0x820 [ 295.610509][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 295.615855][ T31] misc_open+0x2d5/0x350 [ 295.620117][ T31] chrdev_open+0x4cc/0x5e0 [ 295.624617][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 295.629563][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 295.635928][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 295.640874][ T31] do_dentry_open+0x953/0x13f0 [ 295.645688][ T31] vfs_open+0x3b/0x340 [ 295.649764][ T31] ? path_openat+0x2ecd/0x3830 [ 295.654578][ T31] path_openat+0x2ee5/0x3830 [ 295.659210][ T31] ? __pfx_path_openat+0x10/0x10 [ 295.664293][ T31] do_filp_open+0x1fa/0x410 [ 295.668807][ T31] ? __lock_acquire+0xab9/0xd20 [ 295.673649][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 295.678750][ T31] ? _raw_spin_unlock+0x28/0x50 [ 295.683615][ T31] ? alloc_fd+0x64c/0x6c0 [ 295.687988][ T31] do_sys_openat2+0x121/0x1c0 [ 295.692678][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 295.697911][ T31] ? rcu_is_watching+0x15/0xb0 [ 295.702693][ T31] __x64_sys_openat+0x138/0x170 [ 295.707623][ T31] do_syscall_64+0xfa/0xfa0 [ 295.712140][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.717387][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.723473][ T31] ? clear_bhb_loop+0x60/0xb0 [ 295.728194][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.734137][ T31] RIP: 0033:0x7fc270f8f6c9 [ 295.738559][ T31] RSP: 002b:00007fc271ee5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.747238][ T31] RAX: ffffffffffffffda RBX: 00007fc2711e5fa0 RCX: 00007fc270f8f6c9 [ 295.755484][ T31] RDX: 0000000000080080 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 295.763510][ T31] RBP: 00007fc271011f91 R08: 0000000000000000 R09: 0000000000000000 [ 295.771620][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.779827][ T31] R13: 00007fc2711e6038 R14: 00007fc2711e5fa0 R15: 00007ffd94f1b3c8 [ 295.787946][ T31] [ 295.790980][ T31] INFO: task syz.0.880:9023 blocked for more than 144 seconds. [ 295.798805][ T31] Not tainted syzkaller #0 [ 295.803791][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.812444][ T31] task:syz.0.880 state:D stack:26920 pid:9023 tgid:9022 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 295.824701][ T31] Call Trace: [ 295.827994][ T31] [ 295.830919][ T31] __schedule+0x1798/0x4cc0 [ 295.835480][ T31] ? security_file_open+0xb1/0x270 [ 295.840611][ T31] ? __lock_acquire+0xab9/0xd20 [ 295.845572][ T31] ? __lock_acquire+0xab9/0xd20 [ 295.850441][ T31] ? __pfx___schedule+0x10/0x10 [ 295.855398][ T31] ? schedule+0x91/0x360 [ 295.859655][ T31] schedule+0x165/0x360 [ 295.864002][ T31] schedule_preempt_disabled+0x13/0x30 [ 295.869481][ T31] __mutex_lock+0x7e6/0x1350 [ 295.874155][ T31] ? __mutex_lock+0x5bb/0x1350 [ 295.878942][ T31] ? misc_open+0x51/0x350 [ 295.883289][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 295.888450][ T31] misc_open+0x51/0x350 [ 295.892624][ T31] chrdev_open+0x4cc/0x5e0 [ 295.897131][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 295.902079][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 295.908636][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 295.913581][ T31] do_dentry_open+0x953/0x13f0 [ 295.918503][ T31] vfs_open+0x3b/0x340 [ 295.922583][ T31] ? path_openat+0x2ecd/0x3830 [ 295.927439][ T31] path_openat+0x2ee5/0x3830 [ 295.932064][ T31] ? __pfx_path_openat+0x10/0x10 [ 295.937103][ T31] do_filp_open+0x1fa/0x410 [ 295.941617][ T31] ? __lock_acquire+0xab9/0xd20 [ 295.946583][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 295.951642][ T31] ? _raw_spin_unlock+0x28/0x50 [ 295.956516][ T31] ? alloc_fd+0x64c/0x6c0 [ 295.960867][ T31] do_sys_openat2+0x121/0x1c0 [ 295.965640][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 295.970853][ T31] ? rcu_is_watching+0x15/0xb0 [ 295.975722][ T31] __x64_sys_openat+0x138/0x170 [ 295.980598][ T31] do_syscall_64+0xfa/0xfa0 [ 295.985286][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.990502][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.996610][ T31] ? clear_bhb_loop+0x60/0xb0 [ 296.001304][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.007334][ T31] RIP: 0033:0x7fc7f338f6c9 [ 296.011761][ T31] RSP: 002b:00007fc7f4273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.020415][ T31] RAX: ffffffffffffffda RBX: 00007fc7f35e5fa0 RCX: 00007fc7f338f6c9 [ 296.028604][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 296.036677][ T31] RBP: 00007fc7f3411f91 R08: 0000000000000000 R09: 0000000000000000 [ 296.044755][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.052729][ T31] R13: 00007fc7f35e6038 R14: 00007fc7f35e5fa0 R15: 00007ffd26ab4e08 [ 296.060753][ T31] [ 296.063899][ T31] INFO: task syz.2.886:9043 blocked for more than 144 seconds. [ 296.071445][ T31] Not tainted syzkaller #0 [ 296.076680][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.085712][ T31] task:syz.2.886 state:D stack:28296 pid:9043 tgid:9042 ppid:5825 task_flags:0x400040 flags:0x00080002 [ 296.097693][ T31] Call Trace: [ 296.100977][ T31] [ 296.103986][ T31] __schedule+0x1798/0x4cc0 [ 296.108508][ T31] ? security_file_open+0xb1/0x270 [ 296.113614][ T31] ? __lock_acquire+0xab9/0xd20 [ 296.118611][ T31] ? __lock_acquire+0xab9/0xd20 [ 296.123480][ T31] ? __pfx___schedule+0x10/0x10 [ 296.128383][ T31] ? schedule+0x91/0x360 [ 296.132666][ T31] schedule+0x165/0x360 [ 296.136905][ T31] schedule_preempt_disabled+0x13/0x30 [ 296.142373][ T31] __mutex_lock+0x7e6/0x1350 [ 296.147182][ T31] ? __mutex_lock+0x5bb/0x1350 [ 296.151976][ T31] ? misc_open+0x51/0x350 [ 296.156407][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 296.161817][ T31] misc_open+0x51/0x350 [ 296.166128][ T31] chrdev_open+0x4cc/0x5e0 [ 296.170556][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 296.175605][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 296.181948][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 296.187021][ T31] do_dentry_open+0x953/0x13f0 [ 296.191808][ T31] vfs_open+0x3b/0x340 [ 296.195987][ T31] ? path_openat+0x2ecd/0x3830 [ 296.200763][ T31] path_openat+0x2ee5/0x3830 [ 296.205562][ T31] ? __pfx_path_openat+0x10/0x10 [ 296.210525][ T31] do_filp_open+0x1fa/0x410 [ 296.215113][ T31] ? __lock_acquire+0xab9/0xd20 [ 296.219969][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 296.225199][ T31] ? _raw_spin_unlock+0x28/0x50 [ 296.230064][ T31] ? alloc_fd+0x64c/0x6c0 [ 296.234731][ T31] do_sys_openat2+0x121/0x1c0 [ 296.239424][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.244798][ T31] ? rcu_is_watching+0x15/0xb0 [ 296.249595][ T31] __x64_sys_openat+0x138/0x170 [ 296.254556][ T31] do_syscall_64+0xfa/0xfa0 [ 296.259060][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.264425][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.270510][ T31] ? clear_bhb_loop+0x60/0xb0 [ 296.275217][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.281115][ T31] RIP: 0033:0x7f55d598f6c9 [ 296.285687][ T31] RSP: 002b:00007f55d6817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.294198][ T31] RAX: ffffffffffffffda RBX: 00007f55d5be5fa0 RCX: 00007f55d598f6c9 [ 296.302187][ T31] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 296.310325][ T31] RBP: 00007f55d5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 296.318359][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.326375][ T31] R13: 00007f55d5be6038 R14: 00007f55d5be5fa0 R15: 00007ffe8b222a38 [ 296.334443][ T31] [ 296.337474][ T31] INFO: task syz.2.886:9044 blocked for more than 145 seconds. [ 296.345369][ T31] Not tainted syzkaller #0 [ 296.350323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.359112][ T31] task:syz.2.886 state:D stack:27688 pid:9044 tgid:9042 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 296.371117][ T31] Call Trace: [ 296.374496][ T31] [ 296.377445][ T31] __schedule+0x1798/0x4cc0 [ 296.381974][ T31] ? security_file_open+0xb1/0x270 [ 296.387847][ T31] ? __lock_acquire+0xab9/0xd20 [ 296.392729][ T31] ? __lock_acquire+0xab9/0xd20 [ 296.397605][ T31] ? __pfx___schedule+0x10/0x10 [ 296.402476][ T31] ? schedule+0x91/0x360 [ 296.406747][ T31] schedule+0x165/0x360 [ 296.410918][ T31] schedule_preempt_disabled+0x13/0x30 [ 296.416398][ T31] __mutex_lock+0x7e6/0x1350 [ 296.421008][ T31] ? __mutex_lock+0x5bb/0x1350 [ 296.425840][ T31] ? misc_open+0x51/0x350 [ 296.430181][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 296.435273][ T31] misc_open+0x51/0x350 [ 296.439443][ T31] chrdev_open+0x4cc/0x5e0 [ 296.443896][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 296.448843][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 296.455241][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 296.460200][ T31] do_dentry_open+0x953/0x13f0 [ 296.465068][ T31] vfs_open+0x3b/0x340 [ 296.469147][ T31] ? path_openat+0x2ecd/0x3830 [ 296.473933][ T31] path_openat+0x2ee5/0x3830 [ 296.478559][ T31] ? __pfx_path_openat+0x10/0x10 [ 296.483502][ T31] do_filp_open+0x1fa/0x410 [ 296.488039][ T31] ? __lock_acquire+0xab9/0xd20 [ 296.492903][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 296.498012][ T31] ? _raw_spin_unlock+0x28/0x50 [ 296.502881][ T31] ? alloc_fd+0x64c/0x6c0 [ 296.507304][ T31] do_sys_openat2+0x121/0x1c0 [ 296.511996][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.517217][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 296.522433][ T31] __x64_sys_openat+0x138/0x170 [ 296.527310][ T31] do_syscall_64+0xfa/0xfa0 [ 296.531824][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.537089][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.543163][ T31] ? clear_bhb_loop+0x60/0xb0 [ 296.547905][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.553856][ T31] RIP: 0033:0x7f55d598f6c9 [ 296.558272][ T31] RSP: 002b:00007f55d67f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.566706][ T31] RAX: ffffffffffffffda RBX: 00007f55d5be6090 RCX: 00007f55d598f6c9 [ 296.574696][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 296.582656][ T31] RBP: 00007f55d5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 296.590678][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.598666][ T31] R13: 00007f55d5be6128 R14: 00007f55d5be6090 R15: 00007ffe8b222a38 [ 296.606724][ T31] [ 296.609786][ T31] [ 296.609786][ T31] Showing all locks held in the system: [ 296.617560][ T31] 5 locks held by kworker/u8:0/12: [ 296.622679][ T31] 1 lock held by khungtaskd/31: [ 296.627750][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 296.637737][ T31] 2 locks held by klogd/5188: [ 296.642417][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 296.652535][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 296.661520][ T31] 2 locks held by getty/5586: [ 296.666334][ T31] #0: ffff88814d6160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 296.676361][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 296.686583][ T31] 4 locks held by kworker/1:7/5972: [ 296.691777][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.702826][ T31] #1: ffffc9000556fba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.715380][ T31] #2: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 296.725458][ T31] #3: ffff88803338a100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 296.735267][ T31] 3 locks held by kworker/1:12/7138: [ 296.740546][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 296.751623][ T31] #1: ffffc9000412fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 296.765277][ T31] #2: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 296.776767][ T31] 1 lock held by syz.1.849/8936: [ 296.781715][ T31] #0: ffff88803338a100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 296.791710][ T31] 1 lock held by syz.4.877/9016: [ 296.796739][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.805292][ T31] 2 locks held by syz.3.879/9020: [ 296.810314][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.818814][ T31] #1: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 296.828906][ T31] 1 lock held by syz.0.880/9023: [ 296.833894][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.842364][ T31] 1 lock held by syz.2.886/9043: [ 296.847363][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.855864][ T31] 1 lock held by syz.2.886/9044: [ 296.860798][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.869368][ T31] 1 lock held by syz-executor/9052: [ 296.874626][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.883096][ T31] 1 lock held by syz-executor/9057: [ 296.888367][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.896847][ T31] 1 lock held by syz-executor/9058: [ 296.902047][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.910575][ T31] 1 lock held by syz-executor/9059: [ 296.915797][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.924301][ T31] 1 lock held by syz-executor/9060: [ 296.929494][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.937957][ T31] 1 lock held by syz-executor/9066: [ 296.943150][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.951625][ T31] 1 lock held by syz-executor/9069: [ 296.956856][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.965375][ T31] 1 lock held by syz-executor/9070: [ 296.970573][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.979046][ T31] 1 lock held by syz-executor/9073: [ 296.984264][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 296.992696][ T31] 1 lock held by syz-executor/9074: [ 296.997918][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 297.006450][ T31] 1 lock held by syz-executor/9080: [ 297.011658][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 297.020189][ T31] 1 lock held by syz-executor/9083: [ 297.025612][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 297.034112][ T31] 1 lock held by syz-executor/9084: [ 297.039307][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 297.047851][ T31] 1 lock held by syz-executor/9087: [ 297.053066][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 297.061535][ T31] 1 lock held by syz-executor/9088: [ 297.066745][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 297.075239][ T31] [ 297.077565][ T31] ============================================= [ 297.077565][ T31] [ 297.086028][ T31] NMI backtrace for cpu 0 [ 297.086045][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 297.086063][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.086073][ T31] Call Trace: [ 297.086079][ T31] [ 297.086086][ T31] dump_stack_lvl+0x189/0x250 [ 297.086115][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.086139][ T31] ? __pfx__printk+0x10/0x10 [ 297.086169][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 297.086193][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 297.086216][ T31] ? __pfx__printk+0x10/0x10 [ 297.086238][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 297.086268][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 297.086291][ T31] watchdog+0xf60/0xfa0 [ 297.086314][ T31] ? watchdog+0x1e2/0xfa0 [ 297.086336][ T31] kthread+0x711/0x8a0 [ 297.086363][ T31] ? __pfx_watchdog+0x10/0x10 [ 297.086380][ T31] ? __pfx_kthread+0x10/0x10 [ 297.086405][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.086428][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.086450][ T31] ? __pfx_kthread+0x10/0x10 [ 297.086474][ T31] ret_from_fork+0x4bc/0x870 [ 297.086494][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 297.086526][ T31] ? __switch_to_asm+0x39/0x70 [ 297.086540][ T31] ? __switch_to_asm+0x33/0x70 [ 297.086553][ T31] ? __pfx_kthread+0x10/0x10 [ 297.086575][ T31] ret_from_fork_asm+0x1a/0x30 [ 297.086607][ T31] [ 297.086614][ T31] Sending NMI from CPU 0 to CPUs 1: [ 297.231313][ C1] NMI backtrace for cpu 1 [ 297.231329][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 297.231345][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.231353][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 297.231378][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 297.231390][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 297.231403][ C1] RAX: 74b8fd75be2caa00 RBX: ffffffff81967bf7 RCX: 74b8fd75be2caa00 [ 297.231414][ C1] RDX: 0000000000000001 RSI: ffffffff8d70dbaf RDI: ffffffff8bbf0760 [ 297.231424][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 297.231434][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce270 [ 297.231445][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395eb58 [ 297.231454][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 297.231466][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.231475][ C1] CR2: 000055af046ddf40 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 297.231489][ C1] Call Trace: [ 297.231495][ C1] [ 297.231500][ C1] default_idle+0x13/0x20 [ 297.231514][ C1] default_idle_call+0x73/0xb0 [ 297.231529][ C1] do_idle+0x1e7/0x510 [ 297.231547][ C1] ? __pfx_do_idle+0x10/0x10 [ 297.231571][ C1] cpu_startup_entry+0x44/0x60 [ 297.231586][ C1] start_secondary+0x101/0x110 [ 297.231608][ C1] common_startup_64+0x13e/0x147 [ 297.231635][ C1]