last executing test programs: 22.56105397s ago: executing program 1 (id=2069): r0 = socket(0x1d, 0x2, 0x6) accept$inet(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000240)="810fe052") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 22.319735514s ago: executing program 1 (id=2071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r2, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x21c, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff03"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r9, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x20008004}, 0x8085) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x103800, 0x0) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000440)=r1) 22.171660021s ago: executing program 1 (id=2075): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c8500005600088829bd7000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x200008c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r7], 0x50}}, 0x2) 21.82702442s ago: executing program 1 (id=2079): r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xffff, 0xf8, 0x4, 0x456}]}, 0x10) 21.647305885s ago: executing program 1 (id=2083): r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="28200000680001000300030057ae9b98570dc59a5fd73cfff00000008000000000000000000c0002000100"], 0x28}}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002580)={0x28, r2, 0x32b, 0x0, 0x25dfdbfc, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3c86dd6000004000383a00fe8000000000000000000000000000bbff02000000000000000000000000000103019078000000ffffffffc600002fff00000000000000000000000000000000fc0100000000000000000000000000003200000068000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), r6) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001a00)={0x18, r7, 0x802d21512708ad7b, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4040034) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x91}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000000)='hsr0\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xfe, 0x8b63, 0x2f, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x7800, 0x0, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8002200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv4_getaddr={0x30, 0x16, 0x400, 0x70bd2c, 0x9, {0x2, 0x3f, 0x82, 0xc8, r9}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x8, 0x2, @private=0xa010100}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x41814) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010002000"/20, @ANYRES32=0x0, @ANYBLOB="00000000100000000000180002800c0404000403ed0c000000258a62c30e9ce6226fb887522dc18c05fc60928dedf0601a4f85641c97a2268d77b8dffc61a4ca3fdf599018ea9d54c156f6975b9b265949b901fcc7173d8410888385d111b16b3e8cba3a435108161edbb707037bf0e841ce32cb"], 0x48}}, 0x0) 21.442133084s ago: executing program 1 (id=2088): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003140)=@newtaction={0x112c, 0x1e, 0x109, 0x0, 0x25dfdbfc, {}, [{0x1118, 0x1, [@m_connmark={0x1114, 0x1, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xc, 0x8, 0x8, 0xf}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x5, 0xffffffff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0xb5, 0x1, 0x3, 0x9}, 0xfa25}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5fc, 0xc0000000, 0x7, 0x3ff, 0xfff}, 0xc45a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x3, 0x10000, 0x598}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x31, 0x0, 0x2, 0x883b}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x8, 0x8, 0xffffffff, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x1, 0x2, 0x5}, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x60, 0x32, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff4c1}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x40048d1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bb9326bd7000ffdbdf25190000002bf135600100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10080}, 0xfffffffffffffe66, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="dc00f020", @ANYRES16=r3, @ANYRESOCT=r1], 0xdc}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000040) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01251c00000032bd39ec6ad3ef231bed0d0291b07e4b941a55e7f1ffc8395fa8aa16d4f6a147c80a80283ce3f9d644290177ac44407b9db94d3fe74151df099741ecd58e57b0c6782b49a04e3fd6ae3e3a2f2820246734b07f9ea6c929f34f5c7e72985e44192bbcbe6741ce0bc923be0fdce8264a60eb22a4c39404ffa180dc5b82d7592694de801d16549359df3a67e5928bafd86c392914028b1e73eed6f117bc6ae6aca74216a2043eef8070e3bcfc6e1daffb34deda629f575e4150c02c5070aa"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=r1, @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x48000) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf251500000008000100", @ANYRES32=r5, @ANYBLOB="0b001400706f6c69636500000600140029240000050014002a00000008000100", @ANYRES32=r9, @ANYBLOB="0d001400272f7d5c2af327282b00000008000100", @ANYRES32=r12, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x815}, 0x20008040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r13, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.247793153s ago: executing program 4 (id=2148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x200, 0x24, @empty, @local, 0x40, 0x7800, 0x22c, 0xa}}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000002c0)={@mcast1, r2}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="24090000000000000017b6978c40f800000500"], 0x24}}, 0x0) 17.150804561s ago: executing program 2 (id=2150): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x80000001, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r4, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) r7 = socket(0x10, 0x3, 0x0) sendto$isdn(r7, &(0x7f0000000100)={0x9, 0x50ee}, 0x8, 0xc044, &(0x7f0000000080)={0x22, 0x6, 0x7, 0x40, 0x7}, 0x6) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000800) 17.087512715s ago: executing program 4 (id=2151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="1300000008000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="3563e5dc37f6a997cd10ebd47b1746ec7c07631f67267af0d9c2d3a5cef80c0c817ed2c135f4dfc228f04c1abf8b4a3f43fe7f9a3861d2a7a9fe611bc2ab6bb8ee8f2312d768cddb1d6dbed19a777316dd28242943541225a7ab4978b773337cd675d69010a54dce0547ba9fceeda592075ce0b171e9c7dfef83e1f9cf3fb57d95e26d6d0f73375e15e6c15e9b61acbac9bc03e0da239141dd4b58febd2287332d419832340d6542597fced3a0ae426e2d75e8d792a33894221057750102629adeb9ec1e2e2fd70794b11c85cd4175bd92d0a16939aa2468b1a4764074c2ea2f0d", @ANYRES64=0x0], 0x20) (async) r4 = socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000340)=0x2, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000f02000000020000000000000e030000000000000000005f"], 0x0, 0x54}, 0x20) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000010c0)={0x0, 0x2, 0x4, "5b5157dc"}, 0xc) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r7], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=@delqdisc={0x1b8, 0x25, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xe, 0xffe0}, {0x1, 0xe}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x180, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x30}, @TCA_GRED_LIMIT={0x8, 0x5, 0x5}, @TCA_GRED_MAX_P={0x8, 0x4, 0xb}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0x4, 0x4, 0xf, 0x5, 0x1, 0x2, 0x7, 0x80, 0xa, 0xe, 0x11, 0x20, 0xcd, 0x3, 0x2}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7ab4}, @TCA_GRED_LIMIT={0x8, 0x5, 0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x300}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24008004}, 0x810) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@gettaction={0x1c, 0x32, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 17.026186213s ago: executing program 2 (id=2153): socket(0x2a, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffd}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="ba927afbc9b55400040000ea0732a85d86dd", 0x12, 0x24044085, &(0x7f0000000340)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @remote}, 0x14) getpeername$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x9}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x131986e985dac249}, 0x40010) 16.899551117s ago: executing program 4 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x190, 0x5802, 0x294, 0x0, 0x294, 0x2d8, 0x325, 0x378, 0x2d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'nicvf0\x00', 'ip6erspan0\x00', {}, {}, 0x32, 0xfd, 0x0, 0x59}, 0x0, 0x128, 0x190, 0x52020000, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x8, 0x3, 0x1, 0x5, 0x5, 0x0, 0x2513097a, 0x0, 0x18}, {0x8000}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) 16.855025092s ago: executing program 2 (id=2156): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010028bd7000fbdbdf250900020073797a320000000008003f10410072786500140033006970365f76746930ed473b000000"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 16.820296901s ago: executing program 4 (id=2157): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f0000000340)={@val={0xa, 0x88f5}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "7f00", 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d00000a000000000000000000000005000500000000010a0000000000000000000000000000000000000000000001000000000000000003000600000000000200"/80], 0x50}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "36314eb2859a9f60", "c3d79d83c17c2c3046b59e120d6cd64f", "ea99ef87", "e4f3f2ad6e068ddc"}, 0x28) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "445d6659b309163b", "2737d5fb6bbaa93b42ae5bdeb4d42a5f627b68444111e38a03c049618a0aa750", "32da252d", '\x00\x00\x00\x00\x00%\x00'}, 0x38) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}], 0x60}}], 0x1, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) socket$igmp(0x2, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) 16.49145807s ago: executing program 2 (id=2160): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x81, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2c, @broadcast, 0x4e24, 0x0, 'lblcr\x00', 0x34, 0xfffffffd, 0x56}, 0x2c) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x7, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e21, 0xb6, @loopback, 0x8}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xf0}], 0x74) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0xb, 0x5, 0x4, 0x20, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x20, 0x7, 0x2}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x4000000) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="cfefb2b975b1df562b01611120cc6933decc5c6950dbebb6679d0a6e1347d6bfb58c61845f2c", 0x26, 0x0, &(0x7f0000000400)={0xa, 0x4e22, 0x1, @loopback, 0xfffffffc}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0xf1, "7daddfd82431d43d995593bf0c3876a1319ca0b8c096ccabbf0114443f1956f52bf5ba1a3d217d895f0b75c5698106a46f949a6bd2c6c0c486aa125673173032e7598bdcb6d66aa587d8154c864c90504555feaa925857af1caf67f898b271584cb9376c3ce5b8bf1482296224a2fabc1b5ccb80a8f5bc5c425b2098913d3930152924b578810765257717aaa8dca73f3263165ae3ab1a174ef0530d26b6fcf0166eb632369cd57353326f640def03dc76526697eaab1ef6961bcadce49bead6df4911a6b67a574b38b621b46c5e4970cd82bf543cb8157a5728f9f99dbd20a7b69fd0988159c5bf0779566c4364385f2a"}, &(0x7f0000000540)=0xf9) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={r4, 0x7, 0x30}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}}, 0x40) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000700)={0x1f, @none}, 0x8) r7 = socket(0xf, 0x81bf32b2f1a32d0b, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x94, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x6802, 0x64}}}}, [@NL80211_ATTR_VENDOR_DATA={0x65, 0xc5, "eecae7c7934ae62972480e5efbeb83d7c191fc74957dc2f4ea4cc59d80e997c442a5e88634e6f7175e2e1ad4e2c232101420a3bdb5e1e3ea82176790a88f0d9db0bedba7cb3587871400b927119c471a903ee7c4399b8aef699c929703c4fd77a8"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x200040c5}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x20, 0x13, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000a40)='GPL\x00', 0x9, 0x1000, &(0x7f0000000a80)=""/4096, 0x41100, 0x0, '\x00', r2, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000001ac0)=[0x1, 0x1, 0x1], &(0x7f0000001b00)=[{0x4, 0x3, 0xf, 0x9}, {0x5, 0x2, 0xe, 0xc}, {0x5, 0x4, 0x8, 0x9}, {0x4, 0x1, 0x2, 0x3}, {0x5, 0x3, 0x4, 0x4}, {0x5, 0x3, 0xf, 0x2}], 0x10, 0x5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e80)={r10, 0x0, 0x55, 0x73, &(0x7f0000001c40)="5fed1185b35d940dfe522ab47c293cb0f3b4888d99cbb8a56ea88860c78477034f08316662997dcfbc628f0b7cf95463db5a09bb54bf445a98fc1358c117313225b5e367ae0685d424bd2e73dafa54f14063f6bcf9", &(0x7f0000001cc0)=""/115, 0x7f, 0x0, 0x7f, 0x9f, &(0x7f0000001d40)="6ba6ed15b020cc6267a85988bde0eaced0c76377058e92954b53e71480a096e25d84343b8f42a0ab40072b721336018666dc250453b60f07bfd0ca4e73aa4c228fb5f3ef32367072d074a64c9a4e8467eb1f2d245bee50774d7194486d53d1b146840d0a6a45d231696adb015a185d2d8fc1983ec46ce667026e334f52390f", &(0x7f0000001dc0)="bfee263e5f7b5b7db04042b1e617cbf851181f04bd1f7186bc885bab59b085677fb02e741332f67b776e5c78338aa3c1495131d0f14beb6876d4f5324fc4bfb7cd142003e5f5a923f68ef6c5ef47237247af8520f2629610cea4a61ba139aea60ad6b41c3d2e29eb89043cbd28c2b5557326562d0c3a06509ee3cc21b0c79fcc3863fe82c7263877c918d7d7f6ff8364790ad3bb384077b43c7c72916d9b63", 0x1, 0x0, 0x5}, 0x50) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000001f00)={'veth1\x00', 0x5}) r11 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r11, 0x0, 0x61, &(0x7f0000001f40)={'filter\x00', 0xcf, "96e6a9810e495c374ac53cf306b2fa57a93290a7f68aeee0c41241f7cd34bc8d44f2f8b557ef32d8372d6becd47eb6cad950bd54d672f25234b3f72fd4392f0ae0a97ff562b498c1838eca9b3b9dbf5dc33210619b10db04de03de4ca37cddf941f87fece2e753a2c7cbcd51653927a1439855d9568b039fee1a7309781001a0e18e56871171e6c921457b8c84e2ab283dcb9a9d79e77f921c15d33b08d1ba642b5e64bbccc7207d1565502c66031ba4f16faf983e4d8fdb27ff31eac71388a3779bd0823035d1d66dc8a51fd74635"}, &(0x7f0000002040)=0xf3) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000002080)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'lblc\x00', 0x0, 0xa, 0x29}, 0x2c) 16.488053076s ago: executing program 2 (id=2164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xdfffffff}, 0xff79) clock_gettime(0x7, &(0x7f0000000340)) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2d28"], 0xe0}], 0x1}, 0x20000085) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtclass={0x3c, 0x28, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x2, 0xfff1}, {0x10, 0x6}}, [@TCA_RATE={0x0, 0x5, {0xa, 0xe}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0xfffffeab, 0x5, {0x4, 0x71}}]}, 0x3c}}, 0x4000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="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", 0x10f, 0x840, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000580)=0x8) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x20}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7ff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000340)={r8, 0x1, 0xb}, 0x8) bind$phonet(r7, &(0x7f0000000000)={0x23, 0x20}, 0x10) sendto$inet(r5, &(0x7f0000000080)="5ed7f05f07b6695f379546a365eb740f73f9acc40439a8503b8b0a2a363b963fe7", 0x21, 0x0, &(0x7f0000004ff0)={0x2, 0x2f9e, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0x1002) r9 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16.371538491s ago: executing program 4 (id=2166): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000806}, 0x448d8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x90) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) bind$bt_hci(r3, &(0x7f0000000380)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$inet(r3, &(0x7f00000008c0)={&(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000400)="9f43ceadea2c4978945f8a7dcb0f86318ff090192141f49c4e5bfe27c4d3e6faea740d96a3769b2f77f31ccea56911431c4acc360ec7062f3b76a5b42fbb9e5ffaaeb0efc661f8a0f466b19e4137", 0x4e}, {&(0x7f0000000480)="3fb57393f4d0aafe3633302c0c4a7637d0659bb9fc051f9f91446b3b9268e00dd9ac190dc9f50cc4dcdd4b3b4cfb567880f57685e6a5acc6c588941ebafb45cbc3efbf861cf33db09b2498a54a09c227c7dc2f1b241e72129a572820bb70adc63e1562c0315b89e6a99dfeff9a5080217130471d8db9c6ba9304b1042c546d51766798324ef502e77dbb692367175be8dd7d1f2408e3ed4f58914fe051e6a5342d", 0xa1}, {&(0x7f0000000540)="3f9072555b93819dbdcd879fa62b73f61c46aca81a1688e031be7ec99e3e29645ecb3c037702", 0x26}, {&(0x7f0000000580)="6c8318bb8370593da032f83a20a3848f56cb1460a9cee7d6f5d1c0099ac31c3c413404bd3e330e8b4c3181b75d5c9b4bfd17bfeba13c49d155cfa5e7a9293026382dca2515869d73a8932d69074f35344e5a774c63aa905786eccb330e5c11af5a3a5b71e0f7feb58899a27933339d14e1e9c026a5cf27f3254ad1a5dcc1d860d41c723bbae45f54c211de06e9bc5f02ef4328bbedb4f2b0f77bde1c155a7c0a1df4dc70a0d3ce63c414cb6f2326d80504c29d53eb5c678b5483043feec5d8b40980d144c6645984ab34be9d", 0xcc}, {&(0x7f0000000680)="77ab57d61dd95c0a682e767a88650a430f5a61e3be84cce4c423257e96ea58eda2f86d375cfc4bf7b2c45e474fbf40f511498937ac9c712f06c678d912f90bf83b9092b6e619efc022bc125f0f0fdc22a0a7424abe2df7e76297ce496573ef966eccee6982116d0b8ee843f0f3c71f71e7999d5a8e988b699249e92f2f657438b658c81d5b3f36c8920ff6ef2b91cc221b2f39cf85e206202b87fedfe801b3c622f3768427a7efbe04e4c310472d63ee3c74db9870166b31209419b082441ef97494765c27af4ed830ffc0471136", 0xce}, {&(0x7f0000000780)="7927148d57a7b1f7d0970c238851ece4eb2bcd8989ad9cc47088f1a8ba5f73d45b7d4393c971430c371a488cd40d7fd3f9d543c1044c814cc15bd0e236b631d739d21eb24cf58129db4111d1b086c6b3bd219ff82045fe404e09cf1b95eaf23e2319df68a419d9b0787ef14b00c46d4a7f9a009e44cfc02508adf5947c1c721097796f34063df8a30f0c6af05ef02e0845db6f99b5543678d5ed2adde610ad63f66b9494f6078a513b", 0xa9}], 0x6}, 0x20000000) r5 = accept(r4, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000980)=0x80) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x11, r5, 0x180000000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r6) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x32}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8011}, 0x4008080) vmsplice(r1, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="6deff700c16ccbc50ba52d347cbde011d87876ca50dfc6039e536b59c64b057c4a931d676d96499011a626198a94d0faa1ff886a2999f46699185a9d53831435d3b2", 0x42}], 0x1, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000c40)={r6, 0x1, 0x8f, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r8) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000c80)={'wlan0\x00'}) socketpair(0x1a, 0x5, 0x10000, &(0x7f0000000cc0)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000dc0)={@dev, @empty, 0x0}, &(0x7f0000000e00)=0xc) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000e40)={0x0, @local, @multicast1}, &(0x7f0000000e80)=0xc) getpeername$packet(r8, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000f00)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000f40)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000000f80)={'tunl0\x00', 0x0, 0x8, 0x700, 0x4, 0x3, {{0x2d, 0x4, 0x3, 0x37, 0xb4, 0x67, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, {[@ssrr={0x89, 0x1b, 0x30, [@empty, @private=0xa010101, @loopback, @multicast1, @local, @multicast2]}, @lsrr={0x83, 0x1f, 0x1d, [@empty, @loopback, @rand_addr=0x64010102, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x9, 0x0, [{0x5, 0x3, 'e'}]}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x4, "b8a1"}, {0x2, 0x9, "567bb9a770787c"}, {0x1, 0x12, "7b98e908a76915a97e4196dd5653500d"}, {0x2, 0x8, "a52574831b42"}]}, @timestamp={0x44, 0x24, 0xe8, 0x0, 0x1, [0x9, 0x463, 0x4, 0xfffff096, 0x1, 0x800, 0x0, 0x9]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f00000016c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001680)={&(0x7f0000001440)={0x21c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) 16.286975177s ago: executing program 0 (id=2169): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) write$tun(r3, &(0x7f0000000800)={@void, @val={0x0, 0x3, 0xe97a, 0x200, 0x8, 0x7}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x3}}, {@llc={0x4, {@snap={0x1, 0xaa, '|p', "33cd47", 0xf7, "3e93c354ca15ca09ad7d5d7f7a148239f41419446ac01d4adcf06522a84bb39021d43bf2e8b6414e7bc0d98da4e848be5b11917dcc1b2daa4e32e1bd6bb169ac0436b1f01498a4d5"}}}}}}, 0x71) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffb, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x19, 0x0, 0xfffffffd, {0x4000800, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000800}, 0xc090) 16.237464695s ago: executing program 4 (id=2170): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getvlan={0x40, 0x72, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040044}, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xce, "b38799f1b4b06e56e18cf92f40f81b41f57ba083d5e1368bc4e93b450a09f3513464089b1732e0d23ea69cc3f0877fa524b1be794b333baf7eeb3a7d00d083a9f38a074a2f89e43e21f4b63ba869cd7d1c652b4717932f9ba08ce9c2c0722669807102a66c90fe904aee1dbee21da46a657750827de048b59a7deb9741811b52d83be5fe0c02aeb0bb96005762f5996f45d2a896ae73ef95d0765154a375bb6e6cde376adf3711af190aa8c083b0ee44f0728c1fa6b78c0bb7173189c22008880adb2c99a72a18e759eddf256e20"}, &(0x7f0000000240)=0xd6) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)={r2, 0x5, 0x5, [0x4, 0x2, 0x868, 0xa, 0x1]}, &(0x7f00000002c0)=0x12) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000340)) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380), 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x10, @multicast1}}, 0x3, 0x5, 0xa8f, 0x6, 0xc0, 0x1, 0x2}, &(0x7f0000000480)=0x9c) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000004c0)=0x7fffffff, 0x4) write$nci(r1, &(0x7f0000000500)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x66, 0x1}, 0x4) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000580)={0x6, &(0x7f0000000540)=[{0x3, 0x5, 0x7f, 0x8}, {0x101, 0x7, 0x4, 0x8}, {0x5, 0x3, 0x2, 0x7}, {0x8, 0x8, 0x8, 0x8}, {0x112a, 0x2, 0x8, 0x2}, {0x2, 0x9, 0x4d, 0x5}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0x3}, {0xf, 0xfff3}, {0xa, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40040000) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000780)={0xffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=r4, 0x10, 0x1, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@cgroup=r0, r1, 0x7, 0x14, 0x0, @void, @value=r1, @void, @void, r7}, 0x20) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000940)) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0xcd, &(0x7f0000000980)="24777738854e486e362c27a4b96ec3b1b0abb7dbebf77b585d23d72cabc6fa1bebe5721d6341204733de33ee95a4cb45cbaf16a5108c257d8f1d0698f23226a4a38284d1f8ee64fa3798240e41c13544928b9d919ffd2a954f779ed0f7b6fdc56afe6eeb781746d63275d9d16c0ebcfeb3979fcf3fb56c980639f5b06a635a74782ed70303551bb0e848254ef598bd02167131c2e3b8c23bdd821c728c46822601a2db985483414b3e69e16f06813e26163a224f231ad0aad3df5cd3cd0484fd58e57fee106cbaa8a703e3106c6b8b5f", 0xd0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000a80)={0x4, 0xab}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000ac0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x27133bbe, 0x2, 0x2, 0xb, 0xd, 0x58}, &(0x7f0000000b00)=0x20) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000b40)={0x88, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'fo\x00', 0x2, 0x2, 0x67}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r6, 0x0, 0xc2, 0xdd, &(0x7f0000000b80)="66ee112791139d4fd5943a7b6d9b313225563d24792f79bd6c7def7d700dd4a676ef437fa6fdc24e7546bbe1e1cd1f472263ab683a97d5249daf6e7d6e9641e09edb3ad002aeeb61d54831bb05dec41be2bf51155c7cf591e3a5b59106196bd92295141be25c729bd77ba2ee48a6f7347dae57af02dcc459a26f48cf9377a12a248e4132ffdb4c2b699505a5b81b092a9de66602a1f3230d91338b9e67099d6cb06ae966e4a3f15797144feac615ce0c53186fb08d19cbb1870c6aaa679fe8df902a", &(0x7f0000000c80)=""/221, 0x1d72, 0x0, 0x21, 0xbc, &(0x7f0000000d80)="8f208b80c29d3cccbe609f4edda2d397b66d10dc993fbacb049fc82c5436420c1e", &(0x7f0000000dc0)="f28e93676be7767a34337488c0cc8d32d211d991aa196ca4b25fe25fe90a9193ac630c8bb3cfccd3a07cddf2676ae8c8c20ace76e702cd671c41058ba43c5941ed9276da944b7830bab2392e032116420709d68b9035b6a7731e00a43b135469a806b1417c853079e054d45dd8e5d5c2471f60ad531e8237ad79a5b15b4896b6f67bb1f5dd23b90cd0b7ac7973a3c491d25100de2a4d42282c6644a6af21e727b2edecb8e5113c0989c98874b6fc685f1123b657c4f7a3bf8064a06b", 0x0, 0x0, 0x8}, 0x50) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000f40)={{r1}, 0x5, &(0x7f0000000f00)=[0xffffffffffffff2e, 0x2, 0x1b, 0x100000000, 0x7fffffff], 0x2, 0x2, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000fc0)={0xffffffffffffffff, 0x3, 0x5, 0x6}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001040), r1) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004080}, 0x20001880) 16.183853533s ago: executing program 0 (id=2171): r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400080, 0x0) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x98}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) unshare(0x26020480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'pim6reg\x00'}) connect$802154_dgram(r6, 0x0, 0x0) 16.130861224s ago: executing program 0 (id=2172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x201004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x44000) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x0) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000200)=""/47, &(0x7f0000000240)=0x2f) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$sock(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="f4abfd42c291e8f4ee19fa4dbfe2873d22cb96f294e022ace1879f30fa68816faa46d0378674b620070f0f552a7c73f55c8ab288588aacb9d04eee4ef19209ebf3c0d8c4af0f22f21b74462ac54523351e30031d84045c08e6e83439d39dcf4a1d4824de49cf6289136417c183e234e964", 0x71}, {&(0x7f0000000300)="fc59fbe38023e0903f58ccb586749e36941e663e6c958ab2c5b65bdc77dfe31363a186a45cf0768c1f3d5d46e8d184ab7a4af7fef55e59cb58b965f8e00a10413a55be7d88af62229dc982fb3bce8285a6b732704989d74c2152f2f397c6b0cc39bc041a308cb21813170548ab5f99b53b1b1294cb37d60de0799af8cf11d67e8a569fac2b36b1d7c9435123135c3f989618a4b21d", 0x95}, {&(0x7f00000003c0)="1767ee6fd6e4614b89c9c00fea683b76e6848fedb3e265713a68d5ff7ab38fbd471391d1e371078db904c68b6ffc6ccbead0cd70ecfcd285c1936146f1c174893465ef5977e9fb4d7ec698857eb43c75bc5c3affef5161a71366ce55068764f77538f8dce115244ac6364749ee7eed1f58debeaff5ce034b149e3f3caf3c012017310a08b7a25ab026a7eafbde7e92c3", 0x90}, {&(0x7f0000000480)="31707131a11307", 0x7}], 0x4, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x63000000000000}}, @mark={{0x14, 0x1, 0x24, 0xac9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xf0}, 0x10850) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000640)=0xd, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000019c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001980)={&(0x7f00000006c0)=@newtaction={0x12b8, 0x30, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{0x12a4, 0x1, [@m_xt={0x10e8, 0x16, 0x0, 0x0, {{0x7}, {0x1068, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0x102a, 0x6, {0x2000, 'security\x00', 0x7, 0x6, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0xa9d26e38470df43c}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8}]}, {0x5c, 0x6, "28bf50d8bfc0af255a6a80501482b7bc171512ea405c1bfb18f48bb856b3101edec7b39e78aa0abf6ea40d0c412ca39e79290f19f599779ceaeee50ffc9b13e603d5c8b8f87d7dadc4978a8836136e47e569484be5a331db"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x98, 0x7, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0x4a, 0x6, "6841dbbfbdd3269fb3a1236e339e645d95f425d28e613ec770a0840d00f7d08448184a5ef6fe54cec10e8a98d51985fe5079958beb1c2b3ff981bae21eca4d961532e65a84d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x120, 0x17, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x2}}]}, {0xe4, 0x6, "6b2b3ca838c087c08d8e5c020feef2889b7c0256f279f20067fdb75045643d9ece5e4e014a3c853f7b1715df27d094a1925525bbe8d4b81be50d2336f3fcddf42ece2c6b0a193121d2a354bcb832f3d558804efb835fedb9a3a06db1afbe5b70de88cd60fdc28e38cb1dc91aa58c6a5767e2fc8bed0728a4a3edebeab23e1129b4c2cc86453f7dc03078de8793394c1011f949728ec2f03ad136bbc3c5c897124e092a5a1b14841e3d8ebd43d6b15af9662b21d9c8e2ba3cdf5e4877547117e67a1d18deede36cf2709525c261b227a5067286f92f535e09c41dbb4e82a616da"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x12b8}, 0x1, 0x0, 0x0, 0x4}, 0x8040) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000001a00)=""/182, &(0x7f0000001ac0)=0xb6) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x54, 0x0, 0x7, 0x801, 0x0, 0x0, {0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x20008000) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000001d00)={&(0x7f0000001c40), 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x28, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4001) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r5, 0x1, 0xd2, &(0x7f0000001d40), &(0x7f0000001d80)=0x10) getpeername(r4, &(0x7f0000001dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000001e40)=0x80) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000001e80)=0x7, 0x4) connect(r3, &(0x7f0000001ec0)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80) ioctl$sock_ifreq(r5, 0x0, &(0x7f0000001f40)={'team_slave_0\x00', @ifru_mtu=0x101}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001f80)) syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r6) bind$inet(r6, &(0x7f00000021c0)={0x2, 0x4e21, @multicast1}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000002300)={&(0x7f0000002200), 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x2c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000002340)={0x0, 0x81, "16faac11c53bb80a6db14f0c94e0c8ef5e74c5a3f150520fd68af0c091f4a16b85644364e7d21097ac5d6e6b0ce64c831a86b84a3a71602904d1ecf8fba7b2257bc1dfe4fe3aba6d42fa5df4ed2958717f5b72916fe7d6de5403e98993f3b1a6fbc992d5ee56a39fc267d42b598fbc3d4ee6de2ec65c16939ed9353b89f5563500"}, &(0x7f0000002400)=0x89) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000002440)={r8, 0xa2, "49466558a621125d77b05064f7fd22ee11775d873bda29febc989aa7c6128148046ad9ceacc1a4aa37552c94c3c476878db858a330fb1c5970db869a18318097b7bff06a6b5bf3ab7fe36879df76be1a6fdfe2e861d612ed0ea1117c0237c4efeaba36bcc2eaa6a731fb89e55c7836b9855c40feaca900954fe7b2d54908a633157aafae9648ec0a9d7321e4902d1ad043d766a8439864c1bf81d2bdceeda4b043a7"}, &(0x7f0000002500)=0xaa) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x17d80c619f2f4212}]}, 0x24}, 0x1, 0x0, 0x0, 0x4019}, 0x804) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000002640)={0x0, 'pim6reg0\x00', {0x3}, 0x5}) 16.087559984s ago: executing program 0 (id=2173): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.983898676s ago: executing program 0 (id=2174): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0xfffffffffffffecd}, 0xfffffffc}, {{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0x20}], 0x2, 0x1a143, 0x0) r1 = epoll_create(0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r3, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xd50b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x54) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x84, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, r7, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r9, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0xb0000000}) 15.973384718s ago: executing program 0 (id=2175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRES16=r0], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400009a}, 0x4008800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000000)="448b7cff030000000000008a15df09", 0xf}, {&(0x7f0000000100)="36d1ce1e6d25a81a70", 0x9}], 0x3) 15.594306773s ago: executing program 2 (id=2176): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000000950023bb9a2f0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@getqdisc={0x28, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x9}, {0xfff3, 0xfff1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@delchain={0x98, 0x65, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0xf}, {0xe, 0x7}, {0xe, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x7ec}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_cgroup={{0xb}, {0x58, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x5, 0x3, 0x400, {0x0, 0x0, 0x9, 0x1, 0x9, 0xffffffff}, {0x9, 0x1, 0x7, 0x1000, 0x10, 0xffffffff}, 0x4, 0x7f, 0xfffffff8}}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}]}, 0x98}}, 0x40004) (async) close(r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r10, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)="27030200590214000600002fb96dbe7c0fe030b5446c96fb8f374d4363c33e9fa06d56", 0x23}], 0x1}, 0x4040080) (async, rerun: 64) socket$unix(0x1, 0x3, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) 15.380055487s ago: executing program 3 (id=2178): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x7b, 'rdma'}, {0x2b, 'freezer'}, {0x6, 'net_prio'}]}, 0x19) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xf11, '\x00', 0x0, r0, 0x5, 0x4, 0xed86}, 0x50) poll(&(0x7f0000000140)=[{r1, 0x8000}, {0xffffffffffffffff, 0x8394}, {r2, 0xa0}], 0x3, 0x6) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = socket(0x22, 0x800, 0xb) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x5, 0xb7, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000, 0xc5c00000}}) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000002c0)={0x484, 0x13, 0x2, 0x70bd28, 0x25dfdbfb, {0xb, 0x2, 0x5e, 0x2, {0x4e24, 0x4e20, [0x7fff, 0x8, 0xfffffff8, 0xd3], [0x4, 0x0, 0x9, 0x4], r5, [0x40, 0x9]}, 0x2f, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "aa62d53b859971412d1b40d5674f04b9c43bc0bc8eaca29fd956dd317617293aeeb1f37cd292a8b3b3a2932304f7d75ef0ceefd1d014dde3cb897918d332bcfff19e62c958493ec800b24807703f464aa3dce73b198384f5c23fd232e8f61296368dd8a3f6419c0a5a5c828ec8f46d57dc59ab005075d3030cee30"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "4aad01a9d01be4aa187304f587bf3f4d87419696902ca321eaa8d2aa6d673a56126cff2c4001d4e67ae20a5c8fe990dfd0139fa5a676b3ef4de5c3922e936de9cc85e72cc401d2b1ae657db6a28316df8cb4d6983b50965f9cd69433dd67fe21273d92460e6bb9d1be89aa0ac1531eb5f95fa83dc51e6f6b92417010bfac6c98469ab2c4e8e9050a93c0e4533e36404e5cecabaa39330adbff6b1d30446c1b166395a3c42b0bc693224ac5e146e9ff12b7150de256eff9d084900c3341aeec1f65fb4b08d1382986b8c5ce8e433be8e5d162e6"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "94249b4d8e2b55909c09fe35619dd03d65c1bd49179bdd1e7ef700fbf58779ee98e61394218048633b0b47babe09f2dc47b242e4c4529dcd740d684dff0ad288478227382f5c96f4cea29a7301b94363ce555eca68d222809c686bbe7ed9f98a61953b49032932f4f7f18dbcd2f467aadef8e194a94271298e698345b6186d6bd3bf09f5d80f4d669b9f8f1827ed16cef63fce5295344703a48a1e574b77265b3c3cbbb4e51d13ac91e23abb0b1d343e24a6f3a065f32c5b45a7b90cfbc969d642e4e7b0876ec896040f49c1f0e0d53312088b2a6cb63724759cffdc3a97b81f849630a242bab5d0847d23e672e543516ef0e422"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "7729e52f255c6f2874c6bee54abb0de780a066300c1fc9fb73a0065266154d2bb5a1d53af3ad6fdbd9e784064dd09b508aa8afa92a0d129cdeebf3124f37340c20249d8a926bf51be4ffe4b5f00096cc56a716ffbd1b90b8c16d82d3387e2fe7261f68c4f81696b64b71619e60fb2493a907c9d9367c192a8aa8a1e083def5486660bfdee297"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "8c1e2b383a9e296031e06fc946c93526968efc312fbcbb48d7bea0a0ad358deb46b402d1ca1f2c31f1096599cba444c4ed264c3689b16efb6a1a02b7d5860d4ebfb243716bbadfad77cf53f9866ac767fa7d6d9d4a9a58507cabc745e6f2288ddd74b7bcab6a960c5542ca8e5884c1f7b41479c2424155de7884c17e"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "679d6f602eefc3e540c266aa060d423666b720b3aa4130773dfa3fdfbc1cb5fcb91156c168695d3e735022c2e696bd62de7ea77aa17f2dba1946de8dd812784b823cdd584e24425839835f1fe8c98752e7c5f05999f5f4513f2b055098d764d5882e1d87bc39015ed85400620d3ebddef2248e9f8f43c7ce622cbfac28e943bfea3d022469b2ba2a4aca22070d324a012c94853aa9fbe9786397017625cb"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "76ffaba613ff6b1508af6ce31c6e8f49f926bc539ea0e3cece77b9e517d9f35ba5d6a54912e34c7ec87f774e1cc6b622d3"}]}, 0x484}, 0x1, 0x0, 0x0, 0xc880}, 0x810) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000800)={0xff, 0x7, 0x1, 0x0, 0x6, 0x0, [{0x7, 0x400, 0xffff, '\x00', 0x2000}, {0x3, 0xb453, 0x0, '\x00', 0x808}, {0x4, 0x0, 0x8, '\x00', 0x108}, {0x9, 0x401, 0x9, '\x00', 0x900}, {0x4, 0x6}, {0x91c, 0x6, 0x0, '\x00', 0x80}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000980)=0xffff) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r0}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000a00)) r9 = socket$nl_route(0x10, 0x3, 0x0) connect$can_j1939(r4, &(0x7f0000000c00)={0x1d, r5, 0x1, {0x1}, 0xff}, 0x18) openat$cgroup_int(r3, &(0x7f0000000c40)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) close(r3) sendmsg$nl_route_sched(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@delchain={0x3c, 0x65, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xb}, {0xfffc, 0x6}, {0xfff3, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x20004880) socket$netlink(0x10, 0x3, 0x9) close(r6) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000d80)) ioctl$sock_ifreq(r9, 0x8921, &(0x7f0000001180)={'caif0\x00', @ifru_hwaddr=@broadcast}) ioctl$FIBMAP(r3, 0x1, &(0x7f00000011c0)=0x8000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001200), &(0x7f0000001240)=0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000001280)={0x800, {{0xa, 0x4e23, 0x8, @private0, 0x4}}}, 0x88) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001340)={'netdevsim0\x00', @remote}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@delqdisc={0x3c, 0x25, 0x0, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9, 0x3}, {0xf, 0x7}, {0x4, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffeff}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc044000}, 0x804) 15.341065568s ago: executing program 3 (id=2179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bind$x25(r0, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONE(r1, 0x40049409, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.267719032s ago: executing program 3 (id=2180): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0xf00, 0x2c000011) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh={0x2e, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='pimreg1\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 15.237168238s ago: executing program 3 (id=2181): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffb}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c09000056"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 15.192949194s ago: executing program 3 (id=2182): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x800) (async, rerun: 32) r2 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4000000) (async, rerun: 64) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x11, 0xa, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x88) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)={0x4, {{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x9}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x8, @empty, 0x80000000}}, {{0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0xdb}}, {{0xa, 0x4e23, 0xaf, @remote, 0x400}}]}, 0x210) (rerun: 64) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000000000000290000003200009bcb0f1651f500ff01000000fe01000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x20}}], 0x1, 0x8000) 15.131851484s ago: executing program 3 (id=2183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x3e1, 0x2, 0x4, 0x200, 0x8, 0x282}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 6.108451385s ago: executing program 32 (id=2088): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003140)=@newtaction={0x112c, 0x1e, 0x109, 0x0, 0x25dfdbfc, {}, [{0x1118, 0x1, [@m_connmark={0x1114, 0x1, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xc, 0x8, 0x8, 0xf}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x5, 0xffffffff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0xb5, 0x1, 0x3, 0x9}, 0xfa25}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5fc, 0xc0000000, 0x7, 0x3ff, 0xfff}, 0xc45a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x3, 0x10000, 0x598}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x31, 0x0, 0x2, 0x883b}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x8, 0x8, 0xffffffff, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x1, 0x2, 0x5}, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x60, 0x32, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff4c1}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x40048d1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bb9326bd7000ffdbdf25190000002bf135600100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10080}, 0xfffffffffffffe66, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="dc00f020", @ANYRES16=r3, @ANYRESOCT=r1], 0xdc}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000040) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01251c00000032bd39ec6ad3ef231bed0d0291b07e4b941a55e7f1ffc8395fa8aa16d4f6a147c80a80283ce3f9d644290177ac44407b9db94d3fe74151df099741ecd58e57b0c6782b49a04e3fd6ae3e3a2f2820246734b07f9ea6c929f34f5c7e72985e44192bbcbe6741ce0bc923be0fdce8264a60eb22a4c39404ffa180dc5b82d7592694de801d16549359df3a67e5928bafd86c392914028b1e73eed6f117bc6ae6aca74216a2043eef8070e3bcfc6e1daffb34deda629f575e4150c02c5070aa"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=r1, @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x48000) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf251500000008000100", @ANYRES32=r5, @ANYBLOB="0b001400706f6c69636500000600140029240000050014002a00000008000100", @ANYRES32=r9, @ANYBLOB="0d001400272f7d5c2af327282b00000008000100", @ANYRES32=r12, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x815}, 0x20008040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r13, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.084096582s ago: executing program 33 (id=2170): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getvlan={0x40, 0x72, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040044}, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xce, "b38799f1b4b06e56e18cf92f40f81b41f57ba083d5e1368bc4e93b450a09f3513464089b1732e0d23ea69cc3f0877fa524b1be794b333baf7eeb3a7d00d083a9f38a074a2f89e43e21f4b63ba869cd7d1c652b4717932f9ba08ce9c2c0722669807102a66c90fe904aee1dbee21da46a657750827de048b59a7deb9741811b52d83be5fe0c02aeb0bb96005762f5996f45d2a896ae73ef95d0765154a375bb6e6cde376adf3711af190aa8c083b0ee44f0728c1fa6b78c0bb7173189c22008880adb2c99a72a18e759eddf256e20"}, &(0x7f0000000240)=0xd6) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)={r2, 0x5, 0x5, [0x4, 0x2, 0x868, 0xa, 0x1]}, &(0x7f00000002c0)=0x12) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000340)) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380), 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x10, @multicast1}}, 0x3, 0x5, 0xa8f, 0x6, 0xc0, 0x1, 0x2}, &(0x7f0000000480)=0x9c) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000004c0)=0x7fffffff, 0x4) write$nci(r1, &(0x7f0000000500)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x66, 0x1}, 0x4) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000580)={0x6, &(0x7f0000000540)=[{0x3, 0x5, 0x7f, 0x8}, {0x101, 0x7, 0x4, 0x8}, {0x5, 0x3, 0x2, 0x7}, {0x8, 0x8, 0x8, 0x8}, {0x112a, 0x2, 0x8, 0x2}, {0x2, 0x9, 0x4d, 0x5}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0x3}, {0xf, 0xfff3}, {0xa, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40040000) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000780)={0xffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=r4, 0x10, 0x1, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@cgroup=r0, r1, 0x7, 0x14, 0x0, @void, @value=r1, @void, @void, r7}, 0x20) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000940)) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0xcd, &(0x7f0000000980)="24777738854e486e362c27a4b96ec3b1b0abb7dbebf77b585d23d72cabc6fa1bebe5721d6341204733de33ee95a4cb45cbaf16a5108c257d8f1d0698f23226a4a38284d1f8ee64fa3798240e41c13544928b9d919ffd2a954f779ed0f7b6fdc56afe6eeb781746d63275d9d16c0ebcfeb3979fcf3fb56c980639f5b06a635a74782ed70303551bb0e848254ef598bd02167131c2e3b8c23bdd821c728c46822601a2db985483414b3e69e16f06813e26163a224f231ad0aad3df5cd3cd0484fd58e57fee106cbaa8a703e3106c6b8b5f", 0xd0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000a80)={0x4, 0xab}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000ac0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x27133bbe, 0x2, 0x2, 0xb, 0xd, 0x58}, &(0x7f0000000b00)=0x20) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000b40)={0x88, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'fo\x00', 0x2, 0x2, 0x67}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r6, 0x0, 0xc2, 0xdd, &(0x7f0000000b80)="66ee112791139d4fd5943a7b6d9b313225563d24792f79bd6c7def7d700dd4a676ef437fa6fdc24e7546bbe1e1cd1f472263ab683a97d5249daf6e7d6e9641e09edb3ad002aeeb61d54831bb05dec41be2bf51155c7cf591e3a5b59106196bd92295141be25c729bd77ba2ee48a6f7347dae57af02dcc459a26f48cf9377a12a248e4132ffdb4c2b699505a5b81b092a9de66602a1f3230d91338b9e67099d6cb06ae966e4a3f15797144feac615ce0c53186fb08d19cbb1870c6aaa679fe8df902a", &(0x7f0000000c80)=""/221, 0x1d72, 0x0, 0x21, 0xbc, &(0x7f0000000d80)="8f208b80c29d3cccbe609f4edda2d397b66d10dc993fbacb049fc82c5436420c1e", &(0x7f0000000dc0)="f28e93676be7767a34337488c0cc8d32d211d991aa196ca4b25fe25fe90a9193ac630c8bb3cfccd3a07cddf2676ae8c8c20ace76e702cd671c41058ba43c5941ed9276da944b7830bab2392e032116420709d68b9035b6a7731e00a43b135469a806b1417c853079e054d45dd8e5d5c2471f60ad531e8237ad79a5b15b4896b6f67bb1f5dd23b90cd0b7ac7973a3c491d25100de2a4d42282c6644a6af21e727b2edecb8e5113c0989c98874b6fc685f1123b657c4f7a3bf8064a06b", 0x0, 0x0, 0x8}, 0x50) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000f40)={{r1}, 0x5, &(0x7f0000000f00)=[0xffffffffffffff2e, 0x2, 0x1b, 0x100000000, 0x7fffffff], 0x2, 0x2, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000fc0)={0xffffffffffffffff, 0x3, 0x5, 0x6}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001040), r1) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004080}, 0x20001880) 64.83626ms ago: executing program 34 (id=2175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRES16=r0], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400009a}, 0x4008800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000000)="448b7cff030000000000008a15df09", 0xf}, {&(0x7f0000000100)="36d1ce1e6d25a81a70", 0x9}], 0x3) 37.893386ms ago: executing program 35 (id=2176): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000000950023bb9a2f0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@getqdisc={0x28, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x9}, {0xfff3, 0xfff1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@delchain={0x98, 0x65, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0xf}, {0xe, 0x7}, {0xe, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x7ec}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_cgroup={{0xb}, {0x58, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x5, 0x3, 0x400, {0x0, 0x0, 0x9, 0x1, 0x9, 0xffffffff}, {0x9, 0x1, 0x7, 0x1000, 0x10, 0xffffffff}, 0x4, 0x7f, 0xfffffff8}}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}]}, 0x98}}, 0x40004) (async) close(r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r10, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)="27030200590214000600002fb96dbe7c0fe030b5446c96fb8f374d4363c33e9fa06d56", 0x23}], 0x1}, 0x4040080) (async, rerun: 64) socket$unix(0x1, 0x3, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) 0s ago: executing program 36 (id=2183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x3e1, 0x2, 0x4, 0x200, 0x8, 0x282}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) kernel console output (not intermixed with test programs): [ 85.374186][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.389722][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.565885][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.567773][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.575329][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.622715][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.649015][ T5967] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9'. [ 85.714940][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.754757][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.132746][ T5984] syzkaller0: entered promiscuous mode [ 86.173460][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 86.198043][ T5984] syzkaller0: entered allmulticast mode [ 86.231667][ T5992] pim6reg1: entered promiscuous mode [ 86.245731][ T5992] pim6reg1: entered allmulticast mode [ 86.491635][ T6004] Zero length message leads to an empty skb [ 86.540263][ T5843] Bluetooth: hci3: command tx timeout [ 86.543913][ T5151] Bluetooth: hci2: command tx timeout [ 86.549938][ T5834] Bluetooth: hci1: command tx timeout [ 86.615994][ T5834] Bluetooth: hci4: command tx timeout [ 86.621484][ T5834] Bluetooth: hci0: command tx timeout [ 86.690400][ T6006] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 86.767159][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.798974][ T1838] cfg80211: failed to load regulatory.db [ 86.801259][ T6006] bridge_slave_1: left allmulticast mode [ 86.837114][ T6006] bridge_slave_1: left promiscuous mode [ 86.843183][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.858083][ T5887] IPVS: starting estimator thread 0... [ 86.871455][ T6014] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 86.884545][ T6006] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 86.975994][ T6016] IPVS: using max 36 ests per chain, 86400 per kthread [ 86.992063][ T6019] tipc: Failed to obtain node identity [ 87.006033][ T6019] tipc: Enabling of bearer rejected, failed to enable media [ 87.343265][ T6034] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 87.639505][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.748329][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 87.786743][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 87.831385][ T6044] nftables ruleset with unbound chain [ 87.844073][ T6053] netlink: 'syz.3.29': attribute type 12 has an invalid length. [ 87.862067][ T6057] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 87.912716][ T6053] netlink: 'syz.3.29': attribute type 11 has an invalid length. [ 88.310748][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 88.518631][ T6080] netlink: 13 bytes leftover after parsing attributes in process `syz.0.39'. [ 88.546593][ T6080] sctp: [Deprecated]: syz.0.39 (pid 6080) Use of int in maxseg socket option. [ 88.546593][ T6080] Use struct sctp_assoc_value instead [ 89.063321][ T6094] netlink: 'syz.2.43': attribute type 1 has an invalid length. [ 89.098628][ T6094] netlink: 'syz.2.43': attribute type 4 has an invalid length. [ 89.111284][ T6094] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.43'. [ 89.179940][ T6097] netlink: 'syz.0.44': attribute type 9 has an invalid length. [ 89.254627][ T6108] netlink: 'syz.4.48': attribute type 2 has an invalid length. [ 89.262789][ T6108] netlink: 44 bytes leftover after parsing attributes in process `syz.4.48'. [ 89.300912][ T6108] netlink: 'syz.4.48': attribute type 4 has an invalid length. [ 89.376746][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 89.405764][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 89.429899][ T6113] netlink: 'syz.2.50': attribute type 3 has an invalid length. [ 89.470510][ T6119] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 89.555946][ T6122] netlink: 'syz.1.54': attribute type 10 has an invalid length. [ 90.114897][ T6155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.199613][ T6155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.284233][ T6155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.353462][ T6155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.497887][ T3499] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.557738][ T6166] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.568489][ T6166] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.577801][ T3499] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.610437][ T3499] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.636383][ T3499] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.976776][ T6184] __nla_validate_parse: 2 callbacks suppressed [ 90.976796][ T6184] netlink: 156 bytes leftover after parsing attributes in process `syz.4.76'. [ 91.086916][ T6188] warning: `syz.1.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.494891][ T6219] netlink: 596 bytes leftover after parsing attributes in process `syz.2.86'. [ 91.737627][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 91.753378][ T6238] netlink: 404 bytes leftover after parsing attributes in process `syz.0.90'. [ 91.762604][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 91.784090][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 91.838089][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 91.885610][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.90'. [ 91.940003][ T6240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.966813][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 91.997114][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 92.276544][ T6258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.542455][ T6264] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 92.582025][ T6264] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 92.809046][ T6274] No such timeout policy "syz0" [ 92.827121][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.835401][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.069582][ T6284] Bluetooth: MGMT ver 1.23 [ 93.512419][ T6309] Illegal XDP return value 82108430 on prog (id 39) dev N/A, expect packet loss! [ 93.574936][ T6298] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 93.857011][ T6326] validate_nla: 1 callbacks suppressed [ 93.857030][ T6326] netlink: 'syz.2.117': attribute type 7 has an invalid length. [ 93.898840][ T6326] netlink: 'syz.2.117': attribute type 8 has an invalid length. [ 93.927047][ T6328] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 93.959409][ T6328] team1: entered promiscuous mode [ 93.964569][ T6328] team1: entered allmulticast mode [ 94.164112][ T6341] syzkaller0: entered allmulticast mode [ 94.179147][ T6342] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 94.198562][ T6342] netlink: 'syz.3.123': attribute type 21 has an invalid length. [ 94.228013][ T6342] netlink: 'syz.3.123': attribute type 5 has an invalid length. [ 94.380739][ T6354] openvswitch: netlink: Message has 2688 unknown bytes. [ 94.566766][ T6381] Bluetooth: MGMT ver 1.23 [ 94.970037][ T6412] veth1_macvtap: left promiscuous mode [ 94.975863][ T6412] macsec0: entered promiscuous mode [ 94.981282][ T6412] macsec0: entered allmulticast mode [ 94.993211][ T6412] veth1_macvtap: entered promiscuous mode [ 95.002650][ T6412] veth1_macvtap: entered allmulticast mode [ 95.035681][ T6412] macsec0: left promiscuous mode [ 95.040856][ T6412] macsec0: left allmulticast mode [ 95.063692][ T6412] veth1_macvtap: left allmulticast mode [ 95.429570][ T6430] netlink: 'syz.1.145': attribute type 13 has an invalid length. [ 95.446890][ T6429] syzkaller0: entered promiscuous mode [ 95.449381][ T6432] x_tables: duplicate underflow at hook 3 [ 95.452591][ T6429] syzkaller0: entered allmulticast mode [ 95.485719][ T6430] netlink: 'syz.1.145': attribute type 13 has an invalid length. [ 95.523959][ T6367] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.544077][ T6367] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.748256][ T6367] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.781286][ T6367] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.999092][ T6452] netlink: 'syz.1.151': attribute type 4 has an invalid length. [ 96.010659][ T6452] netlink: 'syz.1.151': attribute type 1 has an invalid length. [ 96.019879][ T6452] __nla_validate_parse: 26 callbacks suppressed [ 96.019897][ T6452] netlink: 228 bytes leftover after parsing attributes in process `syz.1.151'. [ 96.136451][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 96.145549][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 96.325030][ T6469] netlink: 'syz.1.158': attribute type 3 has an invalid length. [ 96.333086][ T6469] netlink: 224 bytes leftover after parsing attributes in process `syz.1.158'. [ 96.380531][ T6469] netlink: 192 bytes leftover after parsing attributes in process `syz.1.158'. [ 96.478843][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 96.589053][ T6484] 8021q: VLANs not supported on vcan0 [ 96.610829][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 96.650637][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 96.703203][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 96.929536][ T6503] netlink: 'syz.3.171': attribute type 2 has an invalid length. [ 97.007958][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 97.398743][ T6523] geneve2: entered promiscuous mode [ 97.425815][ T6523] geneve2: entered allmulticast mode [ 97.444809][ T6351] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 97.457842][ T6351] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 97.483311][ T6532] ip6gre1: entered promiscuous mode [ 97.488806][ T6532] ip6gre1: entered allmulticast mode [ 97.499743][ T6526] lo speed is unknown, defaulting to 1000 [ 97.502422][ T6351] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 97.583640][ T6351] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 97.638530][ T6526] lo speed is unknown, defaulting to 1000 [ 97.647937][ T6526] lo speed is unknown, defaulting to 1000 [ 98.137328][ T5920] lo speed is unknown, defaulting to 1000 [ 98.155022][ T6526] infiniband sz1: set active [ 98.178052][ T6526] infiniband sz1: added lo [ 98.250075][ T6526] RDS/IB: sz1: added [ 98.256305][ T6526] smc: adding ib device sz1 with port count 1 [ 98.262836][ T6526] smc: ib device sz1 port 1 has no pnetid [ 98.427059][ T5920] lo speed is unknown, defaulting to 1000 [ 98.440678][ T6526] lo speed is unknown, defaulting to 1000 [ 99.200289][ T6526] lo speed is unknown, defaulting to 1000 [ 99.371573][ T6608] bridge_slave_0: left allmulticast mode [ 99.399780][ T6608] bridge_slave_0: left promiscuous mode [ 99.423361][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.478804][ T6608] bridge_slave_1: left allmulticast mode [ 99.484687][ T6608] bridge_slave_1: left promiscuous mode [ 99.493304][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.543275][ T6608] bond0: (slave bond_slave_0): Releasing backup interface [ 99.574034][ T6608] bond0: (slave bond_slave_1): Releasing backup interface [ 99.713929][ T6608] team0: Port device team_slave_0 removed [ 99.800567][ T6608] team0: Port device team_slave_1 removed [ 99.808418][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.825829][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.863733][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.878781][ T6616] validate_nla: 3 callbacks suppressed [ 99.878798][ T6616] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 99.886253][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.902451][ T6608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.944098][ T6526] lo speed is unknown, defaulting to 1000 [ 100.047315][ T6617] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 100.142874][ T6617] bond2: (slave lo): Enslaving as a backup interface with an up link [ 100.186290][ T6617] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 100.261441][ T6625] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 100.529438][ T6631] bond1: option lp_interval: invalid value (0) [ 100.537088][ T6631] bond1: option lp_interval: allowed values 1 - 2147483647 [ 100.556369][ T6639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.590861][ T6631] bond1 (unregistering): Released all slaves [ 100.917144][ T6526] lo speed is unknown, defaulting to 1000 [ 101.078960][ T6653] xt_ecn: cannot match TCP bits for non-tcp packets [ 101.267680][ T6526] lo speed is unknown, defaulting to 1000 [ 101.930759][ T6664] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 102.081877][ T6671] __nla_validate_parse: 10 callbacks suppressed [ 102.081897][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 102.108972][ T6670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.223'. [ 102.120457][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 102.183665][ T6676] bridge0: Caught tx_queue_len zero misconfig [ 102.270484][ T5969] block nbd64: NBD_DISCONNECT [ 102.449448][ T5900] udevd[5900]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 102.462274][ T6686] vlan2: entered allmulticast mode [ 102.478971][ T6686] hsr0: entered allmulticast mode [ 102.508864][ T6686] hsr_slave_0: entered allmulticast mode [ 102.528462][ T6686] hsr_slave_1: entered allmulticast mode [ 102.734753][ T6691] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 103.464201][ T6726] netlink: 'syz.0.238': attribute type 4 has an invalid length. [ 103.481622][ T5977] lo speed is unknown, defaulting to 1000 [ 103.488957][ T5977] sz1: Port: 1 Link DOWN [ 103.592662][ T5977] lo speed is unknown, defaulting to 1000 [ 103.908540][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 103.935323][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 103.966128][ T6737] lo: Caught tx_queue_len zero misconfig [ 103.973155][ T6744] openvswitch: netlink: nsh attr 0 has unexpected len 16 expected 0 [ 103.994753][ T6744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.356930][ T6764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.700745][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 104.721424][ T6779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.729037][ T6779] IPv6: NLM_F_CREATE should be set when creating new route [ 104.736409][ T6779] IPv6: NLM_F_CREATE should be set when creating new route [ 104.743734][ T6779] IPv6: NLM_F_CREATE should be set when creating new route [ 104.752616][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 104.860569][ T6782] xt_hashlimit: size too large, truncated to 1048576 [ 105.680808][ T6598] Set syz1 is full, maxelem 65536 reached [ 105.694125][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 105.812723][ T6814] netlink: 'syz.2.266': attribute type 9 has an invalid length. [ 105.821011][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 105.861873][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'. [ 105.972451][ T6824] unsupported nla_type 33542 [ 106.625386][ T6860] tipc: Started in network mode [ 106.635922][ T6860] tipc: Node identity 6e6a7eba39db, cluster identity 4711 [ 106.694067][ T6860] tipc: Enabled bearer , priority 0 [ 106.706320][ T6861] syzkaller0: entered promiscuous mode [ 106.711831][ T6861] syzkaller0: entered allmulticast mode [ 106.739461][ T6860] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 106.808030][ T6860] tipc: Resetting bearer [ 106.846809][ T6860] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 106.909390][ T6860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.031763][ T6859] tipc: Resetting bearer [ 107.077152][ T6859] tipc: Disabling bearer [ 108.017361][ T6890] netlink: 'syz.2.290': attribute type 12 has an invalid length. [ 108.906843][ T6908] __nla_validate_parse: 12 callbacks suppressed [ 108.906860][ T6908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.292'. [ 109.438754][ T6913] bond3: entered allmulticast mode [ 109.458849][ T6913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.476923][ T6913] bridge0: port 3(bond3) entered blocking state [ 109.483709][ T6913] bridge0: port 3(bond3) entered disabled state [ 109.517902][ T6913] bond3: entered promiscuous mode [ 109.523896][ T6913] bridge0: port 3(bond3) entered blocking state [ 109.530470][ T6913] bridge0: port 3(bond3) entered forwarding state [ 109.576146][ T6913] bond4: entered allmulticast mode [ 109.581921][ T6913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.592731][ T6913] bridge0: port 4(bond4) entered blocking state [ 109.599560][ T6913] bridge0: port 4(bond4) entered disabled state [ 109.610787][ T6913] bond4: entered promiscuous mode [ 109.616897][ T6913] bridge0: port 4(bond4) entered blocking state [ 109.623338][ T6913] bridge0: port 4(bond4) entered forwarding state [ 109.767707][ T6941] netlink: 144 bytes leftover after parsing attributes in process `syz.0.301'. [ 109.859080][ T6913] bond5: entered allmulticast mode [ 109.864830][ T6913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 109.872574][ T6913] bridge0: port 5(bond5) entered blocking state [ 109.879224][ T6913] bridge0: port 5(bond5) entered disabled state [ 109.888655][ T6913] bond5: entered promiscuous mode [ 109.896864][ T6913] bridge0: port 5(bond5) entered blocking state [ 109.903259][ T6913] bridge0: port 5(bond5) entered forwarding state [ 109.945395][ T6913] bond6: entered allmulticast mode [ 109.960323][ T6913] 8021q: adding VLAN 0 to HW filter on device bond6 [ 109.967839][ T6913] bridge0: port 6(bond6) entered blocking state [ 109.974594][ T6913] bridge0: port 6(bond6) entered disabled state [ 109.983015][ T6913] bond6: entered promiscuous mode [ 109.989177][ T6913] bridge0: port 6(bond6) entered blocking state [ 109.995634][ T6913] bridge0: port 6(bond6) entered forwarding state [ 110.038168][ T6913] bond7: entered allmulticast mode [ 110.043776][ T6913] 8021q: adding VLAN 0 to HW filter on device bond7 [ 110.051500][ T6913] bridge0: port 7(bond7) entered blocking state [ 110.058002][ T6913] bridge0: port 7(bond7) entered disabled state [ 110.066872][ T6913] bond7: entered promiscuous mode [ 110.072645][ T6913] bridge0: port 7(bond7) entered blocking state [ 110.079056][ T6913] bridge0: port 7(bond7) entered forwarding state [ 110.101327][ T6946] netlink: 2 bytes leftover after parsing attributes in process `syz.0.302'. [ 110.157857][ T6359] bridge0: port 3(bond3) entered disabled state [ 110.307178][ T6359] bridge0: port 4(bond4) entered disabled state [ 110.317177][ T6952] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 110.355903][ T6952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.389227][ T6359] bridge0: port 5(bond5) entered disabled state [ 110.417470][ T6962] netlink: 'syz.1.305': attribute type 9 has an invalid length. [ 110.418624][ T6359] bridge0: port 6(bond6) entered disabled state [ 110.438986][ T6359] bridge0: port 7(bond7) entered disabled state [ 110.485285][ T6958] bond2: Unable to set up delay as MII monitoring is disabled [ 110.501466][ T6958] bond2 (unregistering): Released all slaves [ 111.007621][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 111.279130][ T7001] syzkaller1: entered promiscuous mode [ 111.284643][ T7001] syzkaller1: entered allmulticast mode [ 111.552527][ T7024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.161933][ T7059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'. [ 112.242358][ T7064] netlink: 'syz.4.329': attribute type 39 has an invalid length. [ 112.303016][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'. [ 112.310808][ T7071] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 112.322722][ T7071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.639375][ T7155] xt_ecn: cannot match TCP bits for non-tcp packets [ 113.968196][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 113.981410][ T7167] openvswitch: netlink: Missing key (keys=40, expected=80) [ 114.020930][ T7169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.360'. [ 114.161422][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 114.184767][ T7180] netlink: 'syz.0.363': attribute type 16 has an invalid length. [ 114.215836][ T7180] netlink: 'syz.0.363': attribute type 3 has an invalid length. [ 114.223521][ T7180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.363'. [ 114.358929][ T7196] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 114.396678][ T7189] sctp: [Deprecated]: syz.2.367 (pid 7189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.396678][ T7189] Use struct sctp_sack_info instead [ 114.497538][ T7202] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.370'. [ 114.514123][ T7200] vxlan0: entered promiscuous mode [ 114.565225][ T7200] vxlan0: entered allmulticast mode [ 114.575239][ T6349] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.622243][ T6349] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.633705][ T6349] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.664904][ T6349] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.686663][ T7210] netlink: 189580 bytes leftover after parsing attributes in process `syz.2.373'. [ 114.979049][ T7233] block nbd3: not configured, cannot reconfigure [ 115.005366][ T7231] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.032609][ T7231] bond2: (slave lo): Enslaving as a backup interface with an up link [ 115.043830][ T7231] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 115.056089][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 115.069054][ T5958] lo speed is unknown, defaulting to 1000 [ 115.074930][ T5958] sz1: Port: 1 Link ACTIVE [ 115.091135][ T5961] lo speed is unknown, defaulting to 1000 [ 115.091282][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 115.134819][ T7240] netlink: 108 bytes leftover after parsing attributes in process `syz.2.381'. [ 115.195807][ T7246] x_tables: duplicate underflow at hook 3 [ 115.230713][ T7250] openvswitch: netlink: Key type 31 is not supported [ 115.249261][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 116.135285][ T7296] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 116.283528][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.292288][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.358198][ T7302] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 116.398631][ T7302] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 116.428451][ T7302] bond1: (slave xfrm1): making interface the new active one [ 116.452380][ T7302] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 116.501857][ T7316] netlink: 'syz.0.402': attribute type 12 has an invalid length. [ 116.796165][ T7331] netlink: 'syz.4.409': attribute type 142 has an invalid length. [ 116.807721][ T7332] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 116.828569][ T7332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.952685][ T7331] bond1: Removing last ns target with arp_interval on [ 117.148974][ T7346] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.221012][ T7346] bond2: (slave lo): Enslaving as a backup interface with an up link [ 117.254924][ T7346] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 117.422903][ T7376] netlink: 'syz.3.419': attribute type 8 has an invalid length. [ 117.701193][ T7384] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 118.426732][ T7422] nbd0: detected capacity change from 0 to 127 [ 118.630560][ T7445] delete_channel: no stack [ 118.733290][ T7449] netlink: 'syz.3.438': attribute type 39 has an invalid length. [ 119.180931][ T5834] block nbd0: Receive control failed (result -104) [ 119.245194][ T7468] __nla_validate_parse: 9 callbacks suppressed [ 119.245211][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 119.641275][ T7493] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 119.824234][ T7502] netlink: 'syz.4.453': attribute type 13 has an invalid length. [ 119.870347][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'. [ 119.911811][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.919082][ T7502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.926646][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.933829][ T7502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.982229][ T7502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.292111][ T7531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.462'. [ 120.452856][ T7540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.483587][ T7527] bond2 (unregistering): Released all slaves [ 120.554353][ T7542] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 120.718376][ T7541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.731227][ T7541] bond3: (slave bond4): making interface the new active one [ 120.739502][ T7541] bond3: (slave bond4): Enslaving as an active interface with an up link [ 120.757158][ T7552] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 120.777291][ T7552] bond1: (slave lo): Enslaving as a backup interface with an up link [ 120.794990][ T7560] netlink: 'syz.4.469': attribute type 2 has an invalid length. [ 120.807308][ T7552] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 120.842285][ T7543] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 120.962099][ T7573] bond1: (slave lo): Releasing backup interface [ 120.987576][ T7573] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 121.009916][ T7573] bridge_slave_0: left allmulticast mode [ 121.016022][ T7573] bridge_slave_0: left promiscuous mode [ 121.021822][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.033968][ T7573] bond0: (slave bridge_slave_1): Releasing backup interface [ 121.046326][ T7573] bond0: (slave bond_slave_0): Releasing backup interface [ 121.058777][ T7573] bond0: (slave bond_slave_1): Releasing backup interface [ 121.075242][ T7573] team0: Port device team_slave_0 removed [ 121.086467][ T7573] team0: Port device team_slave_1 removed [ 121.092769][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.105367][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.118396][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.144572][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.161464][ T7573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.227614][ T6350] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.265567][ T6350] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.300259][ T6350] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.328622][ T6350] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.407605][ T7590] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.478'. [ 121.771886][ T7601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.802346][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 121.824557][ T7603] netlink: 764 bytes leftover after parsing attributes in process `syz.2.481'. [ 121.852143][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 121.969313][ T7614] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.987321][ T7614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.994648][ T7614] IPv6: NLM_F_CREATE should be set when creating new route [ 122.001964][ T7614] IPv6: NLM_F_CREATE should be set when creating new route [ 122.185199][ T7618] netlink: 104 bytes leftover after parsing attributes in process `syz.1.486'. [ 122.220977][ T7618] netlink: 'syz.1.486': attribute type 2 has an invalid length. [ 122.225170][ T7624] tipc: Can't bind to reserved service type 0 [ 122.256173][ T7621] team0: Device gtp0 is up. Set it down before adding it as a team port [ 122.283407][ T7625] IPVS: Error connecting to the multicast addr [ 122.422623][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 122.433718][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 122.826591][ T7656] netlink: 'syz.0.494': attribute type 2 has an invalid length. [ 122.908056][ T7661] xt_TCPMSS: Only works on TCP SYN packets [ 123.041653][ T7669] syzkaller0: entered promiscuous mode [ 123.055545][ T7669] syzkaller0: entered allmulticast mode [ 123.738093][ T7724] xt_l2tp: invalid flags combination: 8 [ 123.765930][ T7721] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 124.047644][ T7737] gre0: entered promiscuous mode [ 124.106147][ T7732] team0: Device ipvlan1 failed to register rx_handler [ 124.216017][ T7748] netlink: 'syz.2.522': attribute type 2 has an invalid length. [ 124.647595][ T7773] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 124.757390][ T7778] __nla_validate_parse: 11 callbacks suppressed [ 124.757406][ T7778] netlink: 40 bytes leftover after parsing attributes in process `syz.0.531'. [ 124.812141][ T7778] netlink: 40 bytes leftover after parsing attributes in process `syz.0.531'. [ 125.061199][ T7797] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 125.121322][ T7783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.312109][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 125.329399][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 125.360720][ T7811] netlink: 256 bytes leftover after parsing attributes in process `syz.3.536'. [ 125.501471][ T7800] bond5: (slave gretap2): making interface the new active one [ 125.512189][ T7800] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 125.521642][ T7805] syzkaller0: entered promiscuous mode [ 125.527792][ T7805] syzkaller0: entered allmulticast mode [ 125.537639][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 125.573698][ T7821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.539'. [ 125.815833][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.928263][ T7838] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 126.059146][ T7849] netlink: 'syz.3.545': attribute type 1 has an invalid length. [ 126.135280][ T7849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.230000][ T7861] netlink: 56 bytes leftover after parsing attributes in process `syz.2.550'. [ 126.239542][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 126.250671][ T7861] netlink: 31 bytes leftover after parsing attributes in process `syz.2.550'. [ 126.259955][ T7861] netlink: 'syz.2.550': attribute type 2 has an invalid length. [ 126.311476][ T7843] veth5: entered promiscuous mode [ 126.336595][ T7843] bond3: (slave veth5): Enslaving as an active interface with an up link [ 126.690358][ T7886] netlink: 'syz.3.555': attribute type 21 has an invalid length. [ 127.066841][ T7906] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 127.218181][ T7906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 127.225776][ T7912] ip6tnl0: Caught tx_queue_len zero misconfig [ 127.373960][ T7921] bond2: Removing last arp target with arp_interval on [ 128.088143][ T7963] bond9 (unregistering): Released all slaves [ 128.130939][ T7973] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 128.464582][ T7995] 8021q: VLANs not supported on ip_vti0 [ 128.733274][ T8008] netlink: 'syz.0.586': attribute type 5 has an invalid length. [ 128.809812][ T8015] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 129.765921][ T8075] __nla_validate_parse: 38 callbacks suppressed [ 129.765940][ T8075] netlink: 72 bytes leftover after parsing attributes in process `syz.0.607'. [ 129.818655][ T8074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.607'. [ 129.846194][ T8074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.607'. [ 129.866744][ T8074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.607'. [ 129.881700][ T8074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.607'. [ 129.892548][ T8074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.607'. [ 129.932204][ T8082] tipc: Started in network mode [ 129.967487][ T8082] tipc: Node identity ba3d695ff6f1, cluster identity 4711 [ 129.998064][ T8082] tipc: Enabled bearer , priority 0 [ 130.158110][ T8100] x_tables: duplicate entry at hook 2 [ 130.179830][ T8089] syzkaller0: entered promiscuous mode [ 130.185372][ T8089] syzkaller0: entered allmulticast mode [ 130.195628][ T8106] netlink: 80 bytes leftover after parsing attributes in process `syz.4.615'. [ 130.206301][ T8089] tipc: Resetting bearer [ 130.965953][ T6359] tipc: Resetting bearer [ 131.066654][ T8092] tipc: Resetting bearer [ 131.902374][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 131.924295][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 131.997228][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 132.864038][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.876018][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.195343][ T8092] tipc: Disabling bearer [ 133.204838][ T5920] tipc: Node number set to 1288464735 [ 133.228951][ T8168] : entered promiscuous mode [ 133.574993][ T8191] syzkaller0: entered promiscuous mode [ 133.595550][ T8191] syzkaller0: entered allmulticast mode [ 133.655588][ T8196] xt_TCPMSS: Only works on TCP SYN packets [ 133.920048][ T8205] netlink: 'syz.0.642': attribute type 5 has an invalid length. [ 134.287054][ T8234] netlink: 'syz.3.651': attribute type 142 has an invalid length. [ 134.304236][ T8235] netlink: 'syz.0.650': attribute type 12 has an invalid length. [ 134.337061][ T8235] bond7: option primary_reselect: invalid value (255) [ 134.357038][ T8235] bond7 (unregistering): Released all slaves [ 134.389761][ T8241] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 134.441559][ T8238] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 135.163359][ T8273] netlink: 'syz.0.659': attribute type 4 has an invalid length. [ 135.207165][ T8273] netlink: 'syz.0.659': attribute type 4 has an invalid length. [ 135.291672][ T8279] netlink: 'syz.4.663': attribute type 6 has an invalid length. [ 135.303905][ T8279] netlink: 'syz.4.663': attribute type 6 has an invalid length. [ 135.630292][ T8298] __nla_validate_parse: 2 callbacks suppressed [ 135.630309][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 135.675886][ T8302] bond9: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 135.891169][ T8316] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 135.924722][ T8316] bridge_slave_1: left allmulticast mode [ 135.945073][ T8316] bridge_slave_1: left promiscuous mode [ 135.962399][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.986869][ T8316] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 136.089822][ T8326] netlink: 'syz.1.680': attribute type 28 has an invalid length. [ 136.097844][ T8326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.680'. [ 136.163426][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 136.195861][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 136.459332][ T8337] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.681'. [ 136.561429][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 136.605968][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 136.665408][ T8356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.687'. [ 137.074655][ T8383] netlink: 312 bytes leftover after parsing attributes in process `syz.2.695'. [ 137.099201][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 138.003634][ T8401] bond0: entered promiscuous mode [ 138.010364][ T8401] bond_slave_0: entered promiscuous mode [ 138.016793][ T8401] bond_slave_1: entered promiscuous mode [ 138.025829][ T8401] bond0: left promiscuous mode [ 138.030641][ T8401] bond_slave_0: left promiscuous mode [ 138.055792][ T8401] bond_slave_1: left promiscuous mode [ 138.105392][ T8410] veth3: entered allmulticast mode [ 138.150275][ T8413] veth5: entered allmulticast mode [ 138.326996][ T8420] ip6gretap1: entered allmulticast mode [ 138.410323][ T8419] ip6gretap1: entered allmulticast mode [ 138.548672][ T8442] syzkaller0: entered promiscuous mode [ 138.556343][ T8442] syzkaller0: entered allmulticast mode [ 138.973486][ T8465] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20003 [ 139.041142][ T8465] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 139.051095][ T8471] validate_nla: 3 callbacks suppressed [ 139.051113][ T8471] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 139.055494][ T5958] IPVS: starting estimator thread 0... [ 139.056987][ T8471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.178323][ T8473] IPVS: using max 34 ests per chain, 81600 per kthread [ 139.490725][ T8494] netlink: 'syz.4.729': attribute type 23 has an invalid length. [ 139.661767][ T8509] netlink: 'syz.4.734': attribute type 7 has an invalid length. [ 139.673175][ T8509] netlink: 'syz.4.734': attribute type 8 has an invalid length. [ 139.689304][ T8509] erspan0: entered promiscuous mode [ 139.698798][ T8509] batadv_slave_1: entered promiscuous mode [ 139.704946][ T8509] batadv_slave_1: left promiscuous mode [ 139.720924][ T8509] erspan0: left promiscuous mode [ 139.793020][ T8514] syzkaller1: entered promiscuous mode [ 139.801316][ T8514] syzkaller1: entered allmulticast mode [ 140.609289][ T8565] netlink: 'syz.3.751': attribute type 2 has an invalid length. [ 140.711483][ T8567] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 140.723673][ T8567] bond5 (unregistering): Released all slaves [ 140.748052][ T8569] pimreg: entered allmulticast mode [ 140.810525][ T8571] pimreg: left allmulticast mode [ 140.912286][ T8577] __nla_validate_parse: 18 callbacks suppressed [ 140.912305][ T8577] netlink: 176 bytes leftover after parsing attributes in process `syz.3.755'. [ 140.965717][ T8579] macvlan2: entered promiscuous mode [ 141.060197][ T8585] macvlan3: entered promiscuous mode [ 141.130827][ T30] audit: type=1800 audit(1764524978.772:2): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.758" name="memory.events" dev="tmpfs" ino=729 res=0 errno=0 [ 141.158027][ T8588] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 141.191497][ T30] audit: type=1804 audit(1764524978.812:3): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.758" name="/newroot/141/memory.events" dev="tmpfs" ino=729 res=1 errno=0 [ 141.191735][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 141.295768][ T8594] bond7: (slave gretap3): making interface the new active one [ 141.323963][ T8594] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 141.335305][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 141.531471][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 141.555694][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.763'. [ 141.594840][ T8609] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.610007][ T8609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.617315][ T8609] IPv6: NLM_F_CREATE should be set when creating new route [ 141.631693][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 141.648073][ T6351] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.667618][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.763'. [ 141.691438][ T6351] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.701037][ T6351] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.765569][ T6351] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.123426][ T8644] trusted_key: syz.4.775 sent an empty control message without MSG_MORE. [ 142.198956][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.776'. [ 142.232941][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.776'. [ 142.294349][ T8654] syzkaller1: entered promiscuous mode [ 142.314691][ T8654] syzkaller1: entered allmulticast mode [ 142.567590][ T8665] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 142.581438][ T8662] bond10: option miimon: invalid value (18446744073709551585) [ 142.595855][ T8668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.782'. [ 142.614979][ T8662] bond10: option miimon: allowed values 0 - 2147483647 [ 142.645036][ T8662] bond10 (unregistering): Released all slaves [ 142.731863][ T8660] bond10: option miimon: invalid value (18446744073709551585) [ 142.739893][ T8660] bond10: option miimon: allowed values 0 - 2147483647 [ 142.751321][ T8660] bond10 (unregistering): Released all slaves [ 142.803886][ T8681] tipc: Enabling of bearer rejected, failed to enable media [ 143.029726][ T8695] xt_cgroup: path and classid specified [ 143.133735][ T8700] netlink: 'syz.1.792': attribute type 5 has an invalid length. [ 143.829742][ T8737] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 144.473682][ T8774] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 144.496989][ T8774] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 144.602803][ T8774] bond8 (unregistering): Released all slaves [ 144.664326][ T8785] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 144.730295][ T8790] netlink: 'syz.4.817': attribute type 13 has an invalid length. [ 144.772701][ T8780] ip6tnl3: entered promiscuous mode [ 144.782289][ T8792] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 144.796568][ T8780] ip6tnl3: entered allmulticast mode [ 144.813305][ T5920] IPVS: starting estimator thread 0... [ 144.838619][ T8790] gretap0: refused to change device tx_queue_len [ 144.848373][ T8790] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 144.936362][ T8794] IPVS: using max 30 ests per chain, 72000 per kthread [ 145.788689][ T8847] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.970752][ T8850] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 145.984578][ T8850] __nla_validate_parse: 14 callbacks suppressed [ 145.984595][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 146.034362][ T8852] team0: Caught tx_queue_len zero misconfig [ 146.091398][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 146.098965][ T8854] xt_TCPMSS: Only works on TCP SYN packets [ 146.101025][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 146.447996][ T8881] netlink: 168 bytes leftover after parsing attributes in process `syz.4.840'. [ 146.518166][ T8871] netlink: 68 bytes leftover after parsing attributes in process `syz.1.839'. [ 146.642236][ T8871] netlink: 'syz.1.839': attribute type 5 has an invalid length. [ 146.795954][ T8900] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 147.010756][ T8912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.849'. [ 147.327030][ T8928] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 147.336299][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 147.515536][ T8941] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 147.583779][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 147.678977][ T8946] netlink: 'syz.4.860': attribute type 33 has an invalid length. [ 147.687627][ T8946] netlink: 152 bytes leftover after parsing attributes in process `syz.4.860'. [ 147.702656][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 147.871233][ T8953] delete_channel: no stack [ 147.886556][ T8952] delete_channel: no stack [ 147.892696][ T8952] delete_channel: no stack [ 147.903502][ T8952] delete_channel: no stack [ 147.909306][ T8952] delete_channel: no stack [ 147.914494][ T8952] delete_channel: no stack [ 147.932576][ T8952] delete_channel: no stack [ 147.945145][ T8952] delete_channel: no stack [ 147.968130][ T8952] delete_channel: no stack [ 147.988178][ T8952] delete_channel: no stack [ 147.992887][ T8952] delete_channel: no stack [ 148.016439][ T8952] delete_channel: no stack [ 148.039909][ T8952] delete_channel: no stack [ 148.051806][ T8952] delete_channel: no stack [ 148.073821][ T8952] delete_channel: no stack [ 148.079074][ T8963] sctp: [Deprecated]: syz.0.868 (pid 8963) Use of int in max_burst socket option. [ 148.079074][ T8963] Use struct sctp_assoc_value instead [ 148.094139][ T8952] delete_channel: no stack [ 148.106405][ T8952] delete_channel: no stack [ 148.116241][ T8952] delete_channel: no stack [ 148.121055][ T8952] delete_channel: no stack [ 148.126483][ T8952] delete_channel: no stack [ 148.129401][ T8965] tipc: Started in network mode [ 148.131215][ T8952] delete_channel: no stack [ 148.141041][ T8952] delete_channel: no stack [ 148.147193][ T8952] delete_channel: no stack [ 148.152056][ T8952] delete_channel: no stack [ 148.152942][ T8965] tipc: Node identity f6470e1555cf, cluster identity 4711 [ 148.157603][ T8952] delete_channel: no stack [ 148.170721][ T8965] tipc: Enabled bearer , priority 0 [ 148.178842][ T8952] delete_channel: no stack [ 148.178991][ T8952] delete_channel: no stack [ 148.206330][ T8965] syzkaller0: entered promiscuous mode [ 148.222649][ T8952] delete_channel: no stack [ 148.225754][ T8965] syzkaller0: entered allmulticast mode [ 148.229732][ T8952] delete_channel: no stack [ 148.237477][ T8952] delete_channel: no stack [ 148.242799][ T8952] delete_channel: no stack [ 148.248340][ T8952] delete_channel: no stack [ 148.264636][ T8952] delete_channel: no stack [ 148.264828][ T8965] tipc: Resetting bearer [ 148.272854][ T8952] delete_channel: no stack [ 148.281655][ T8964] tipc: Resetting bearer [ 148.289214][ T8952] delete_channel: no stack [ 148.302173][ T8952] delete_channel: no stack [ 148.307415][ T8952] delete_channel: no stack [ 148.312293][ T8952] delete_channel: no stack [ 148.317395][ T8952] delete_channel: no stack [ 148.317530][ T8964] tipc: Disabling bearer [ 148.322053][ T8952] delete_channel: no stack [ 148.334203][ T8952] delete_channel: no stack [ 148.339040][ T8952] delete_channel: no stack [ 148.343919][ T8952] delete_channel: no stack [ 148.375972][ T8952] delete_channel: no stack [ 148.389911][ T8952] delete_channel: no stack [ 148.410789][ T8952] delete_channel: no stack [ 148.426854][ T8952] delete_channel: no stack [ 148.431504][ T8952] delete_channel: no stack [ 148.437565][ T8971] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 148.463938][ T8952] delete_channel: no stack [ 148.492656][ T8952] delete_channel: no stack [ 148.527151][ T8952] delete_channel: no stack [ 148.538754][ T8952] delete_channel: no stack [ 148.543394][ T8952] delete_channel: no stack [ 148.575299][ T8971] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.617322][ T8952] delete_channel: no stack [ 148.621973][ T8952] delete_channel: no stack [ 148.627833][ T8952] delete_channel: no stack [ 148.632462][ T8952] delete_channel: no stack [ 148.637474][ T8952] delete_channel: no stack [ 148.645925][ T8952] delete_channel: no stack [ 148.650558][ T8952] delete_channel: no stack [ 148.656552][ T8952] delete_channel: no stack [ 148.661165][ T8952] delete_channel: no stack [ 148.666303][ T8952] delete_channel: no stack [ 148.671213][ T8952] delete_channel: no stack [ 148.677445][ T8952] delete_channel: no stack [ 148.697496][ T8978] bond5: (slave veth7): Enslaving as an active interface with a down link [ 148.713282][ T8991] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 148.724326][ T8991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.759432][ T8971] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 148.817870][ T8984] bond5: entered promiscuous mode [ 148.835747][ T8984] bond5: entered allmulticast mode [ 148.863475][ T123] block nbd0: Possible stuck request ffff888024b1e000: control (read@0,1024B). Runtime 30 seconds [ 148.877465][ T123] block nbd0: Possible stuck request ffff888024b1e1c0: control (read@1024,1024B). Runtime 30 seconds [ 148.888831][ T123] block nbd0: Possible stuck request ffff888024b1e380: control (read@2048,1024B). Runtime 30 seconds [ 148.900699][ T123] block nbd0: Possible stuck request ffff888024b1e540: control (read@3072,1024B). Runtime 30 seconds [ 149.170669][ T9011] netlink: 'syz.2.885': attribute type 2 has an invalid length. [ 149.249509][ T9021] netlink: 'syz.3.886': attribute type 9 has an invalid length. [ 150.879217][ T9042] netlink: 'syz.1.894': attribute type 30 has an invalid length. [ 151.378480][ T9071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.023914][ T9095] netlink: 'syz.0.909': attribute type 7 has an invalid length. [ 152.052160][ T9095] __nla_validate_parse: 7 callbacks suppressed [ 152.052178][ T9095] netlink: 140 bytes leftover after parsing attributes in process `syz.0.909'. [ 152.436856][ T9102] netlink: 104 bytes leftover after parsing attributes in process `syz.3.912'. [ 152.511833][ T9102] openvswitch: netlink: Key type 31 is not supported [ 152.808777][ T9107] syzkaller0: entered promiscuous mode [ 152.829848][ T9107] syzkaller0: entered allmulticast mode [ 152.884136][ T9110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.915'. [ 152.958040][ T9113] openvswitch: netlink: EtherType 50a is less than min 600 [ 153.235967][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 153.287307][ T9127] erspan0: entered promiscuous mode [ 153.375910][ T9132] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 153.460704][ T9139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.923'. [ 153.490444][ T9132] 8021q: adding VLAN 0 to HW filter on device bond10 [ 153.541766][ T9132] Cannot find add_set index 0 as target [ 153.617680][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.926'. [ 153.620978][ T9148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.926'. [ 153.870457][ T9159] netlink: 64 bytes leftover after parsing attributes in process `syz.2.932'. [ 153.970970][ T9166] ksmbd: Unknown IPC event: 3, ignore. [ 154.002602][ T9165] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.024474][ T9165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 154.202123][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 154.269746][ T9183] netlink: 308 bytes leftover after parsing attributes in process `syz.4.940'. [ 154.285088][ T9185] netlink: 'syz.1.941': attribute type 10 has an invalid length. [ 154.306437][ T9185] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.342446][ T9185] bond0: (slave team0): Enslaving as an active interface with an up link [ 154.423188][ T9192] netlink: 'syz.3.943': attribute type 11 has an invalid length. [ 154.917900][ T9220] 8021q: VLANs not supported on ip6tnl0 [ 155.034275][ T9226] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 155.139667][ T9231] netlink: 'syz.3.957': attribute type 12 has an invalid length. [ 155.270143][ T9230] netlink: 'syz.3.957': attribute type 12 has an invalid length. [ 156.115731][ T9287] netlink: 'syz.2.973': attribute type 9 has an invalid length. [ 156.216408][ T9293] bond4: entered allmulticast mode [ 156.222012][ T9294] tipc: Enabling of bearer rejected, failed to enable media [ 156.258271][ T9293] syzkaller1: entered promiscuous mode [ 156.263804][ T9293] syzkaller1: entered allmulticast mode [ 156.313750][ T9293] ip6gretap1: entered allmulticast mode [ 156.352952][ T9293] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 156.375014][ T9306] bond0: entered allmulticast mode [ 156.395522][ T9306] bond_slave_0: entered allmulticast mode [ 156.401298][ T9306] bond_slave_1: entered allmulticast mode [ 156.549859][ T9321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.611930][ T9319] sctp: [Deprecated]: syz.3.981 (pid 9319) Use of int in max_burst socket option deprecated. [ 156.611930][ T9319] Use struct sctp_assoc_value instead [ 156.638328][ T9326] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 156.728713][ T9327] bond8: (slave geneve2): making interface the new active one [ 156.738535][ T9327] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 156.747875][ T6350] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 156.758377][ T6350] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 156.769586][ T6350] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 156.778454][ T6350] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 156.848756][ T9338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.859069][ T9339] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 156.892242][ T9340] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 156.950495][ T9339] team0: Port device dummy0 added [ 156.958719][ T9340] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 156.974580][ T9340] team0: Failed to send options change via netlink (err -105) [ 156.982624][ T9340] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 156.997116][ T9340] team0: Port device dummy0 removed [ 157.006671][ T9340] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 157.564631][ T9382] __nla_validate_parse: 4 callbacks suppressed [ 157.564641][ T9378] netlink: 'syz.1.997': attribute type 3 has an invalid length. [ 157.564647][ T9382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.998'. [ 157.626045][ T9378] netlink: 666 bytes leftover after parsing attributes in process `syz.1.997'. [ 157.652874][ T9394] syzkaller1: entered promiscuous mode [ 157.661591][ T9394] syzkaller1: entered allmulticast mode [ 158.087868][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 158.120030][ T9428] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1011'. [ 158.686596][ T9457] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 158.734546][ T9457] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1019'. [ 158.746771][ T9457] NCSI netlink: No device for ifindex 0 [ 158.793280][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 158.839342][ T9469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.845840][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 158.846647][ T9469] IPv6: NLM_F_CREATE should be set when creating new route [ 159.373441][ T9497] netlink: 'syz.4.1032': attribute type 3 has an invalid length. [ 159.381461][ T9497] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1032'. [ 159.517713][ T9504] syzkaller1: entered promiscuous mode [ 159.527710][ T9504] syzkaller1: entered allmulticast mode [ 159.681954][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1039'. [ 159.924599][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 160.101804][ T9539] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 160.233153][ T9557] ip6gre2: entered promiscuous mode [ 160.254470][ T9562] syzkaller1: entered promiscuous mode [ 160.283418][ T9562] syzkaller1: entered allmulticast mode [ 160.534188][ T9580] IPv6: sit1: Disabled Multicast RS [ 160.541882][ T9580] sit1: entered allmulticast mode [ 160.546035][ T9582] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 160.645692][ T9582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 160.681260][ T9591] netlink: 'syz.2.1057': attribute type 2 has an invalid length. [ 160.777597][ T9597] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 161.381500][ T9642] Bluetooth: MGMT ver 1.23 [ 161.398240][ T9641] ip6tnl0: Caught tx_queue_len zero misconfig [ 161.731594][ T9661] bridge3: entered promiscuous mode [ 161.750701][ T9661] bridge3: entered allmulticast mode [ 161.762346][ T9661] team0: Port device bridge3 added [ 161.789595][ T9661] bridge0: port 8(team0) entered blocking state [ 161.865734][ T9661] bridge0: port 8(team0) entered disabled state [ 161.885991][ T9661] team0: entered allmulticast mode [ 161.891167][ T9661] team_slave_0: entered allmulticast mode [ 161.955573][ T9661] team_slave_1: entered allmulticast mode [ 161.963756][ T9661] team0: entered promiscuous mode [ 161.986200][ T9661] team_slave_0: entered promiscuous mode [ 161.992068][ T9661] team_slave_1: entered promiscuous mode [ 162.002771][ T9661] bridge0: port 8(team0) entered blocking state [ 162.009547][ T9661] bridge0: port 8(team0) entered forwarding state [ 162.039356][ T9691] validate_nla: 2 callbacks suppressed [ 162.039373][ T9691] netlink: 'syz.3.1081': attribute type 8 has an invalid length. [ 162.361501][ T9710] netlink: 'syz.2.1087': attribute type 21 has an invalid length. [ 162.372597][ T9710] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.385769][ T9710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.393057][ T9710] IPv6: NLM_F_CREATE should be set when creating new route [ 162.400373][ T9710] IPv6: NLM_F_CREATE should be set when creating new route [ 162.407633][ T9710] IPv6: NLM_F_CREATE should be set when creating new route [ 162.477690][ T9703] syzkaller1: entered promiscuous mode [ 162.508472][ T9703] syzkaller1: entered allmulticast mode [ 162.529502][ T9715] nbd: must specify a device to reconfigure [ 162.559423][ T9703] dvmrp0: entered allmulticast mode [ 162.886496][ T9733] __nla_validate_parse: 46 callbacks suppressed [ 162.886515][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 162.982732][ T9743] tipc: Enabling of bearer rejected, failed to enable media [ 162.998258][ T9743] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 163.006629][ T9743] netlink: 'syz.2.1099': attribute type 4 has an invalid length. [ 163.014438][ T9743] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1099'. [ 163.126139][ T9747] syzkaller1: entered promiscuous mode [ 163.131779][ T9747] syzkaller1: entered allmulticast mode [ 163.144423][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 163.182781][ T9752] netlink: 'syz.0.1102': attribute type 2 has an invalid length. [ 163.240065][ T9752] : entered promiscuous mode [ 163.428283][ T9766] syzkaller0: entered promiscuous mode [ 163.450794][ T9766] syzkaller0: entered allmulticast mode [ 163.593291][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 163.603562][ T9781] netlink: 'syz.1.1114': attribute type 12 has an invalid length. [ 163.638884][ T9782] netlink: 'syz.1.1114': attribute type 12 has an invalid length. [ 163.839894][ T5834] Bluetooth: hci3: link tx timeout [ 163.846585][ T5834] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.981128][ T9800] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 164.001267][ T9800] netlink: 'syz.1.1118': attribute type 13 has an invalid length. [ 164.009443][ T9800] netlink: 'syz.1.1118': attribute type 17 has an invalid length. [ 164.215053][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.237059][ T9800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.261225][ T9812] tap0: tun_chr_ioctl cmd 1074025678 [ 164.270811][ T9812] tap0: group set to 0 [ 164.434590][ T5834] Bluetooth: hci3: link tx timeout [ 164.440036][ T5834] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.844496][ T9840] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1133'. [ 165.654268][ T9900] netlink: 'syz.2.1148': attribute type 32 has an invalid length. [ 165.662625][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1148'. [ 165.718400][ T9900] bond11: option coupled_control: invalid value (52) [ 165.769033][ T9900] bond11 (unregistering): Released all slaves [ 165.870179][ T9915] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1149'. [ 165.896165][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 166.278443][ T9936] xt_TCPMSS: Only works on TCP SYN packets [ 166.583349][ T9951] xt_CONNSECMARK: invalid mode: 0 [ 166.624685][ T5834] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 166.627405][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1156'. [ 166.632113][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 166.684700][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1156'. [ 167.035062][ T9974] sctp: [Deprecated]: syz.2.1161 (pid 9974) Use of int in max_burst socket option. [ 167.035062][ T9974] Use struct sctp_assoc_value instead [ 167.295854][ T9989] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 167.662801][T10010] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 167.684286][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1171'. [ 167.919315][T10022] netlink: 'syz.0.1174': attribute type 10 has an invalid length. [ 167.927338][T10022] __nla_validate_parse: 2 callbacks suppressed [ 167.927354][T10022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1174'. [ 167.999806][T10022] team0: Port device geneve0 added [ 168.012263][T10026] netlink: 'syz.2.1177': attribute type 8 has an invalid length. [ 168.216628][T10037] netlink: 'syz.4.1180': attribute type 3 has an invalid length. [ 168.224403][T10037] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1180'. [ 168.240330][T10041] Cannot find add_set index 1 as target [ 168.425895][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 168.762234][T10068] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 168.775047][T10068] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 168.795606][T10068] gretap1: entered promiscuous mode [ 168.806075][T10068] gretap1: entered allmulticast mode [ 168.819448][T10081] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.826763][T10082] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.203077][T10101] netlink: 'syz.0.1197': attribute type 21 has an invalid length. [ 169.215818][T10101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1197'. [ 169.484491][T10114] netlink: 'syz.1.1199': attribute type 10 has an invalid length. [ 169.629086][T10119] netlink: 'syz.0.1203': attribute type 4 has an invalid length. [ 169.742079][T10125] netlink: 'syz.1.1204': attribute type 12 has an invalid length. [ 169.771411][T10123] netlink: 'syz.1.1204': attribute type 12 has an invalid length. [ 169.962947][T10138] netlink: 592 bytes leftover after parsing attributes in process `syz.4.1209'. [ 169.990589][T10140] tipc: Failed to remove unknown binding: 66,1,1/0:4207377332/4207377334 [ 170.157245][T10149] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 170.187341][T10145] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1211'. [ 170.199838][T10145] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1211'. [ 170.224100][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'. [ 170.490115][T10160] syzkaller0: entered promiscuous mode [ 170.497636][T10160] syzkaller0: entered allmulticast mode [ 170.682100][T10166] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 170.841035][T10176] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1223'. [ 170.971500][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 171.722471][T10240] lo speed is unknown, defaulting to 1000 [ 171.890182][T10245] netlink: 'syz.0.1245': attribute type 12 has an invalid length. [ 172.286687][T10280] netlink: 'syz.3.1256': attribute type 6 has an invalid length. [ 172.959845][T10295] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 173.210087][T10304] syzkaller0: entered promiscuous mode [ 173.216376][T10304] syzkaller0: entered allmulticast mode [ 173.404894][T10315] __nla_validate_parse: 8 callbacks suppressed [ 173.404911][T10315] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1264'. [ 173.966855][T10348] rdma_op ffff88807da549f0 conn xmit_rdma 0000000000000000 [ 174.579017][T10372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1283'. [ 174.646078][T10371] tap0: tun_chr_ioctl cmd 1074025672 [ 174.653722][T10371] tap0: ignored: set checksum disabled [ 174.711247][T10377] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 174.719796][T10377] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 174.742024][T10377] tipc: Started in network mode [ 174.747006][T10377] tipc: Node identity 080211000001, cluster identity 4711 [ 174.754812][T10377] tipc: Enabled bearer , priority 0 [ 174.778038][T10377] xt_bpf: check failed: parse error [ 174.854729][T10381] syz.0.1287: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 174.894353][T10390] validate_nla: 2 callbacks suppressed [ 174.894371][T10390] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 174.895512][T10381] CPU: 0 UID: 0 PID: 10381 Comm: syz.0.1287 Not tainted syzkaller #0 PREEMPT(full) [ 174.895533][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.895550][T10381] Call Trace: [ 174.895557][T10381] [ 174.895565][T10381] dump_stack_lvl+0x189/0x250 [ 174.895596][T10381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.895618][T10381] ? __pfx__printk+0x10/0x10 [ 174.895635][T10381] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.895657][T10381] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.895680][T10381] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 174.895704][T10381] warn_alloc+0x214/0x310 [ 174.895734][T10381] ? __pfx_warn_alloc+0x10/0x10 [ 174.895766][T10381] ? __get_vm_area_node+0x28f/0x300 [ 174.895789][T10381] ? nf_tables_newset+0x1330/0x2540 [ 174.895814][T10381] __vmalloc_node_range_noprof+0x690/0x12d0 [ 174.895865][T10381] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.895887][T10381] ? nf_tables_newset+0x1330/0x2540 [ 174.895911][T10381] ? rcu_is_watching+0x15/0xb0 [ 174.895932][T10381] ? nf_tables_newset+0x1330/0x2540 [ 174.895952][T10381] __kvmalloc_node_noprof+0x674/0x910 [ 174.895977][T10381] ? nf_tables_newset+0x1330/0x2540 [ 174.896000][T10381] ? nft_set_lookup+0x128/0x150 [ 174.896027][T10381] ? nft_hash_privsize+0x2f/0xf0 [ 174.896052][T10381] nf_tables_newset+0x1330/0x2540 [ 174.896086][T10381] ? __pfx_nf_tables_newset+0x10/0x10 [ 174.896127][T10381] ? __nla_parse+0x40/0x60 [ 174.896150][T10381] nfnetlink_rcv+0x11d9/0x2590 [ 174.896209][T10381] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 174.896249][T10381] ? ref_tracker_free+0x63a/0x7d0 [ 174.896294][T10381] ? __netlink_deliver_tap+0x807/0x850 [ 174.896311][T10381] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.896345][T10381] netlink_unicast+0x82f/0x9e0 [ 174.896377][T10381] ? __pfx_netlink_unicast+0x10/0x10 [ 174.896402][T10381] ? netlink_sendmsg+0x642/0xb30 [ 174.896417][T10381] ? skb_put+0x11b/0x210 [ 174.896437][T10381] netlink_sendmsg+0x805/0xb30 [ 174.896464][T10381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.896485][T10381] ? aa_sock_msg_perm+0xf1/0x1d0 [ 174.896510][T10381] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.896526][T10381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.896544][T10381] __sock_sendmsg+0x21c/0x270 [ 174.896569][T10381] ____sys_sendmsg+0x505/0x830 [ 174.896594][T10381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.896622][T10381] ? import_iovec+0x74/0xa0 [ 174.896645][T10381] ___sys_sendmsg+0x21f/0x2a0 [ 174.896666][T10381] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.896721][T10381] ? __fget_files+0x2a/0x420 [ 174.896736][T10381] ? __fget_files+0x3a0/0x420 [ 174.896762][T10381] __x64_sys_sendmsg+0x19b/0x260 [ 174.896784][T10381] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.896819][T10381] ? do_syscall_64+0xbe/0xfa0 [ 174.896845][T10381] do_syscall_64+0xfa/0xfa0 [ 174.896866][T10381] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.896888][T10381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.896904][T10381] ? clear_bhb_loop+0x60/0xb0 [ 174.896924][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.896939][T10381] RIP: 0033:0x7f387f98f749 [ 174.896960][T10381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.896974][T10381] RSP: 002b:00007f38808ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.896991][T10381] RAX: ffffffffffffffda RBX: 00007f387fbe5fa0 RCX: 00007f387f98f749 [ 174.897009][T10381] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 174.897020][T10381] RBP: 00007f387fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.897030][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.897039][T10381] R13: 00007f387fbe6038 R14: 00007f387fbe5fa0 R15: 00007ffc1d795d48 [ 174.897070][T10381] [ 174.897080][T10381] Mem-Info: [ 175.035965][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 175.042991][T10381] active_anon:5967 inactive_anon:0 isolated_anon:0 [ 175.042991][T10381] active_file:2501 inactive_file:39917 isolated_file:0 [ 175.042991][T10381] unevictable:768 dirty:66 writeback:0 [ 175.042991][T10381] slab_reclaimable:10984 slab_unreclaimable:151812 [ 175.042991][T10381] mapped:29141 shmem:1357 pagetables:1243 [ 175.042991][T10381] sec_pagetables:0 bounce:0 [ 175.042991][T10381] kernel_misc_reclaimable:0 [ 175.042991][T10381] free:1269451 free_pcp:14486 free_cma:0 [ 175.072366][T10390] 8021q: adding VLAN 0 to HW filter on device bond11 [ 175.074940][T10381] Node 0 active_anon:23868kB inactive_anon:0kB active_file:10004kB inactive_file:159468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116564kB dirty:260kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14044kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.142589][T10398] vlan2: entered allmulticast mode [ 175.144381][T10381] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.200782][T10398] veth1: entered allmulticast mode [ 175.207099][T10381] Node 0 [ 175.293092][T10398] bond11: (slave vlan2): making interface the new active one [ 175.296597][T10381] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.353321][T10398] bond11: (slave vlan2): Enslaving as an active interface with an up link [ 175.464689][T10381] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 175.464744][T10381] Node 0 DMA32 free:1172132kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24268kB inactive_anon:0kB active_file:10004kB inactive_file:159468kB unevictable:1536kB writepending:260kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:37864kB local_pcp:17096kB free_cma:0kB [ 175.464802][T10381] lowmem_reserve[]: 0 0 0 0 0 [ 175.464842][T10381] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.464892][T10381] lowmem_reserve[]: 0 0 0 0 0 [ 175.464932][T10381] Node 1 Normal free:3893012kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:9728kB free_cma:0kB [ 175.464986][T10381] lowmem_reserve[]: 0 0 0 0 0 [ 175.465145][T10381] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.633596][T10381] Node 0 DMA32: 755*4kB (UME) 190*8kB (UM) 29*16kB (M) 371*32kB (UM) 82*64kB (UME) 79*128kB (UM) 50*256kB (UME) 21*512kB (UME) 8*1024kB (UME) 7*2048kB (UME) 267*4096kB (M) = 1171948kB [ 175.712215][T10381] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 175.752100][T10381] Node 1 Normal: 211*4kB (UME) 55*8kB (UME) 49*16kB (UME) 80*32kB (UME) 32*64kB (UME) 10*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3893012kB [ 175.774727][ T5887] tipc: Node number set to 134418688 [ 175.801610][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 175.817440][T10381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.864460][T10381] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.882739][T10430] netlink: 'syz.3.1297': attribute type 7 has an invalid length. [ 175.903182][T10426] netlink: 'syz.3.1297': attribute type 7 has an invalid length. [ 175.942624][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 175.945285][T10381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.989830][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 176.009447][T10381] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.056172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.065128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.085891][T10381] 43771 total pagecache pages [ 176.103990][T10381] 0 pages in swap cache [ 176.109232][T10381] Free swap = 124996kB [ 176.134116][T10381] Total swap = 124996kB [ 176.143795][T10381] 2097051 pages RAM [ 176.150757][T10381] 0 pages HighMem/MovableOnly [ 176.162977][T10381] 424124 pages reserved [ 176.185924][T10381] 0 pages cma reserved [ 176.250733][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'. [ 176.350219][T10450] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.1303'. [ 176.385861][T10450] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.1303'. [ 176.416949][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1304'. [ 176.652998][T10466] netlink: 'syz.2.1308': attribute type 20 has an invalid length. [ 176.670768][T10466] netlink: 'syz.2.1308': attribute type 20 has an invalid length. [ 176.830083][T10474] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 176.965058][T10480] syzkaller0: entered promiscuous mode [ 176.982286][T10480] syzkaller0: entered allmulticast mode [ 177.227388][T10509] netlink: 'syz.4.1321': attribute type 9 has an invalid length. [ 177.309812][T10512] netlink: 'syz.4.1322': attribute type 3 has an invalid length. [ 178.427090][T10518] openvswitch: netlink: Unknown nsh attribute 0 [ 178.452562][T10518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.486693][T10525] __nla_validate_parse: 5 callbacks suppressed [ 178.486710][T10525] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1326'. [ 178.507879][T10525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'. [ 178.516992][T10525] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1326'. [ 178.527563][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 178.535027][T10526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.543730][T10526] IPv6: NLM_F_CREATE should be set when creating new route [ 178.554305][T10525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'. [ 178.610853][T10533] lo: entered allmulticast mode [ 178.635329][T10533] lo: left allmulticast mode [ 178.836453][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1334'. [ 178.936940][ T123] block nbd0: Possible stuck request ffff888024b1e000: control (read@0,1024B). Runtime 60 seconds [ 178.947779][ T123] block nbd0: Possible stuck request ffff888024b1e1c0: control (read@1024,1024B). Runtime 60 seconds [ 178.957175][T10554] IPv6: Can't replace route, no match found [ 178.959262][ T123] block nbd0: Possible stuck request ffff888024b1e380: control (read@2048,1024B). Runtime 60 seconds [ 178.978041][ T123] block nbd0: Possible stuck request ffff888024b1e540: control (read@3072,1024B). Runtime 60 seconds [ 178.979542][T10556] netlink: 'syz.4.1336': attribute type 27 has an invalid length. [ 179.025128][T10556] netlink: 'syz.4.1336': attribute type 4 has an invalid length. [ 179.045077][T10556] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1336'. [ 179.502833][ T30] audit: type=1800 audit(1764525017.152:4): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1345" name="memory.events" dev="tmpfs" ino=1297 res=0 errno=0 [ 179.969487][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 180.079096][T10602] bond2: Invalid ad_actor_system MAC address. [ 180.105842][T10602] bond2: option ad_actor_system: invalid value (1) [ 180.132643][T10602] bond2 (unregistering): Released all slaves [ 180.173779][T10623] xt_ecn: cannot match TCP bits for non-tcp packets [ 180.249122][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1354'. [ 180.305649][T10616] openvswitch: netlink: Key 7 has unexpected len 4 expected 12 [ 180.368839][T10632] xt_TCPMSS: Only works on TCP SYN packets [ 180.398610][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1358'. [ 180.564919][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.601590][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.626118][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.645833][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.671191][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.686741][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.714972][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.736648][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.744491][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.767363][T10642] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 180.979195][T10670] tipc: Enabling of bearer rejected, failed to enable media [ 181.055289][T10672] syzkaller0: entered promiscuous mode [ 181.085840][T10672] syzkaller0: entered allmulticast mode [ 181.814778][T10717] sctp: [Deprecated]: syz.0.1378 (pid 10717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.814778][T10717] Use struct sctp_sack_info instead [ 182.430487][T10744] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 182.474870][T10744] bond6: option packets_per_slave: allowed values 0 - 65535 [ 182.508543][T10744] bond6 (unregistering): Released all slaves [ 183.134951][T10803] batman_adv: batadv0: Adding interface: dummy0 [ 183.160490][T10806] block nbd1: not configured, cannot reconfigure [ 183.175992][T10803] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.234593][T10803] batman_adv: batadv0: Interface activated: dummy0 [ 183.325842][T10799] batadv0: mtu less than device minimum [ 183.333040][T10799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.345195][T10799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.357079][T10799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.369133][T10799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.381088][T10799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.392970][T10799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.404893][T10799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.417080][T10799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.429012][T10799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.590426][T10834] lo: entered promiscuous mode [ 183.612207][T10834] tunl0: entered promiscuous mode [ 183.625252][T10834] gre0: entered promiscuous mode [ 183.680410][T10834] gretap0: entered promiscuous mode [ 183.700879][T10834] erspan0: entered promiscuous mode [ 183.738640][T10834] ip_vti0: entered promiscuous mode [ 183.957938][T10854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.121817][T10867] __nla_validate_parse: 9 callbacks suppressed [ 184.121834][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1417'. [ 184.570718][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 184.654765][T10893] 8021q: adding VLAN 0 to HW filter on device bond12 [ 184.684641][T10904] syzkaller0: entered promiscuous mode [ 184.692400][T10904] syzkaller0: entered allmulticast mode [ 184.820919][T10910] tipc: Enabling of bearer rejected, failed to enable media [ 184.830364][T10913] tipc: Enabling of bearer rejected, failed to enable media [ 184.842411][T10912] bond0: entered promiscuous mode [ 184.848533][T10912] bond_slave_0: entered promiscuous mode [ 184.857204][T10912] bond_slave_1: entered promiscuous mode [ 184.863058][T10912] bond0: left allmulticast mode [ 184.883857][T10912] bond_slave_0: left allmulticast mode [ 184.895768][T10912] bond_slave_1: left allmulticast mode [ 185.076889][T10925] ip6t_srh: unknown srh match flags 4000 [ 185.274302][T10933] syzkaller1: entered promiscuous mode [ 185.285127][T10933] syzkaller1: entered allmulticast mode [ 185.292862][T10937] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.302299][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1440'. [ 185.303574][T10933] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1437'. [ 185.649238][T10957] lo: entered promiscuous mode [ 185.657980][T10957] tunl0: entered promiscuous mode [ 185.664911][T10957] gretap0: entered promiscuous mode [ 185.677447][T10957] erspan0: entered promiscuous mode [ 185.692525][T10957] ip_vti0: entered promiscuous mode [ 185.910462][T10961] syz.2.1445 (10961) used greatest stack depth: 15832 bytes left [ 186.017707][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'. [ 186.064678][T10980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1452'. [ 186.093963][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'. [ 186.191605][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 186.249455][T10986] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1452'. [ 186.283715][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 186.674922][T11018] validate_nla: 43 callbacks suppressed [ 186.674940][T11018] netlink: 'syz.4.1462': attribute type 25 has an invalid length. [ 186.756997][T11019] netlink: 'syz.1.1461': attribute type 13 has an invalid length. [ 186.818769][T11019] gretap0: refused to change device tx_queue_len [ 187.227794][T11064] gre0: entered promiscuous mode [ 187.232985][T11064] gre0: entered allmulticast mode [ 187.656074][T11048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.821342][T11088] block nbd1: Unsupported socket: should be TCP or UNIX. [ 187.872654][T11092] syzkaller0: entered promiscuous mode [ 187.878470][T11092] syzkaller0: entered allmulticast mode [ 187.914893][T11094] netlink: 'syz.0.1483': attribute type 7 has an invalid length. [ 188.393914][T11120] bond9: option mode: invalid value (133) [ 188.404975][T11120] bond9 (unregistering): Released all slaves [ 188.747951][T11141] gretap4: entered promiscuous mode [ 188.753214][T11141] gretap4: entered allmulticast mode [ 188.926828][T11154] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 189.242976][T11167] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 189.390903][T11177] bridge5: entered promiscuous mode [ 189.397318][T11177] bridge5: entered allmulticast mode [ 189.522906][T11185] __nla_validate_parse: 20 callbacks suppressed [ 189.522923][T11185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1515'. [ 189.736812][T11189] nbd1: detected capacity change from 0 to 127 [ 189.785631][ T5834] block nbd1: Receive control failed (result -104) [ 189.825191][T11205] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 189.884663][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1520'. [ 189.893791][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 190.017094][T11211] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 190.065772][T11218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1523'. [ 190.146829][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 190.337169][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 190.484112][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 190.632739][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 190.655791][T11245] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.674502][T11245] bond6: (slave lo): Enslaving as a backup interface with an up link [ 190.704435][T11245] net_ratelimit: 14 callbacks suppressed [ 190.704452][T11245] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 190.732711][T11259] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 190.733265][T11243] bond9 (unregistering): Released all slaves [ 190.878791][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1536'. [ 190.878996][T11269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1538'. [ 191.028829][T11273] ip6gretap1: entered allmulticast mode [ 191.436956][T11300] netlink: 'syz.1.1548': attribute type 2 has an invalid length. [ 191.525717][T11309] xt_l2tp: missing protocol rule (udp|l2tpip) [ 191.603144][T11306] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 191.774267][T11324] nbd: must specify a size in bytes for the device [ 192.201898][T11361] netlink: 'syz.4.1567': attribute type 19 has an invalid length. [ 192.232643][T11364] Bluetooth: MGMT ver 1.23 [ 192.242531][T11365] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 192.322911][T11375] syzkaller1: entered promiscuous mode [ 192.331347][T11375] syzkaller1: entered allmulticast mode [ 192.350248][T11379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.352063][T11375] dvmrp0: entered allmulticast mode [ 193.379083][T11433] xfrm2: entered promiscuous mode [ 193.408951][T11433] xfrm2: entered allmulticast mode [ 194.181002][T11491] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 194.206918][T11491] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.302934][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.310633][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.475376][T11514] ip6erspan0: entered allmulticast mode [ 194.633225][T11522] Cannot find del_set index 49151 as target [ 194.659100][T11522] tipc: Enabled bearer , priority 0 [ 194.666830][T11522] syzkaller0: entered promiscuous mode [ 194.672337][T11522] syzkaller0: entered allmulticast mode [ 194.687956][T11522] tipc: Resetting bearer [ 194.698312][T11519] tipc: Resetting bearer [ 194.723058][T11519] tipc: Disabling bearer [ 194.907093][T11541] __nla_validate_parse: 22 callbacks suppressed [ 194.907286][T11541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'. [ 194.954385][T11538] netlink: 'syz.1.1620': attribute type 3 has an invalid length. [ 195.604958][T11581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.801686][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 196.042983][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 196.282923][T11597] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 196.310166][T11597] bond9 (unregistering): Released all slaves [ 196.928912][T11636] ip6erspan0: entered promiscuous mode [ 196.941123][T11636] ip6erspan0: entered allmulticast mode [ 197.018856][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1659'. [ 197.048289][T11646] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 197.072232][T11646] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1659'. [ 197.115740][T11655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1663'. [ 197.250936][T11657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.305799][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 197.453403][T11672] netlink: 'syz.4.1670': attribute type 10 has an invalid length. [ 197.467486][T11670] : entered promiscuous mode [ 197.481467][T11679] bond0: entered promiscuous mode [ 197.496431][T11679] batadv0: entered promiscuous mode [ 197.514650][T11679] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 197.539670][T11679] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 197.553895][T11679] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 197.600844][T11672] bond6: (slave lo): Releasing backup interface [ 197.670878][T11672] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 197.682824][T11692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1674'. [ 197.862720][T11672] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 197.872756][T11672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.040020][T11716] ip6tnl2: entered promiscuous mode [ 198.045884][T11716] ip6tnl2: entered allmulticast mode [ 198.144397][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 198.144533][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'. [ 198.168394][T11722] team_slave_0: entered promiscuous mode [ 198.174363][T11722] team_slave_1: entered promiscuous mode [ 198.180149][T11722] geneve0: entered promiscuous mode [ 198.197517][T11722] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 198.431975][T11739] Cannot find del_set index 4 as target [ 198.798555][T11763] netlink: 'syz.4.1694': attribute type 12 has an invalid length. [ 198.868058][T11763] bond7: option primary_reselect: invalid value (255) [ 198.919629][T11763] bond7 (unregistering): Released all slaves [ 198.974389][T11760] pimreg3: entered allmulticast mode [ 199.015913][T11766] netlink: 'syz.3.1695': attribute type 4 has an invalid length. [ 199.291537][T11787] x_tables: duplicate underflow at hook 1 [ 199.317226][T11786] tipc: Started in network mode [ 199.324629][T11786] tipc: Node identity aa5fd3f2c91f, cluster identity 4711 [ 199.334695][T11786] tipc: Enabled bearer , priority 0 [ 199.348856][T11786] syzkaller0: entered promiscuous mode [ 199.382181][T11786] syzkaller0: entered allmulticast mode [ 199.385221][T11783] netlink: 'syz.2.1699': attribute type 12 has an invalid length. [ 199.407631][T11786] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 199.499858][T11786] tipc: Resetting bearer [ 199.541878][T11784] tipc: Resetting bearer [ 199.588512][T11784] tipc: Disabling bearer [ 199.803335][T11825] netlink: 'syz.2.1710': attribute type 18 has an invalid length. [ 200.098941][T11847] bond9: entered allmulticast mode [ 200.124833][T11852] sctp: [Deprecated]: syz.4.1715 (pid 11852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.124833][T11852] Use struct sctp_sack_info instead [ 200.143414][T11852] x_tables: duplicate underflow at hook 1 [ 200.171053][T11847] ip6gretap1: entered allmulticast mode [ 200.196043][T11847] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 200.347252][T11868] __nla_validate_parse: 6 callbacks suppressed [ 200.347270][T11868] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1719'. [ 200.564845][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 200.665927][T11878] hsr_slave_1 (unregistering): left promiscuous mode [ 200.681927][T11884] sock: sock_timestamping_bind_phc: sock not bind to device [ 200.795278][T11894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1728'. [ 200.829489][T11894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1728'. [ 200.846318][T11896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.853852][T11896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.862793][T11896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.870405][T11896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.948873][T11912] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20001 [ 200.958771][T11894] º: renamed from veth1_vlan (while UP) [ 201.173879][T11928] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 201.293529][T11941] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1743'. [ 201.408536][T11952] xt_nat: multiple ranges no longer supported [ 201.422859][T11952] xt_nat: multiple ranges no longer supported [ 201.496555][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 201.503426][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 201.509528][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 201.597749][T11969] veth0: entered promiscuous mode [ 201.613093][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 201.634821][T11971] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1754'. [ 201.654576][T11971] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1754'. [ 201.656773][T11973] tipc: Enabling of bearer rejected, failed to enable media [ 201.689760][T11969] veth0 (unregistering): left promiscuous mode [ 201.713005][T11974] tipc: Enabling of bearer rejected, failed to enable media [ 202.062989][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 202.269657][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 203.120977][T12048] delete_channel: no stack [ 203.279475][T12060] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 203.651141][T12087] xt_limit: Overflow, try lower: 604147548/4200216962 [ 203.682686][T12090] netlink: 'syz.1.1793': attribute type 11 has an invalid length. [ 203.691441][T12090] netlink: 'syz.1.1793': attribute type 11 has an invalid length. [ 203.936686][T12109] pim6reg: entered allmulticast mode [ 203.942285][T12110] pim6reg: left allmulticast mode [ 204.183093][T12124] netlink: 'syz.1.1805': attribute type 1 has an invalid length. [ 204.270141][T12124] bond2: (slave veth1): Enslaving as an active interface with a down link [ 204.401222][T12140] netlink: 'syz.3.1808': attribute type 29 has an invalid length. [ 204.436442][T12140] netlink: 'syz.3.1808': attribute type 29 has an invalid length. [ 204.669232][T12156] syzkaller0: entered promiscuous mode [ 204.685222][T12156] syzkaller0: entered allmulticast mode [ 204.743263][T12156] tipc: Enabled bearer , priority 0 [ 204.773634][T12154] tipc: Resetting bearer [ 204.887072][T12154] tipc: Disabling bearer [ 205.397441][T12199] __nla_validate_parse: 8 callbacks suppressed [ 205.397461][T12199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1828'. [ 205.546244][T12207] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1831'. [ 205.747115][T12221] netlink: 'syz.2.1830': attribute type 5 has an invalid length. [ 205.844938][T12236] netlink: 'syz.3.1838': attribute type 1 has an invalid length. [ 205.857373][T12235] netlink: 'syz.3.1838': attribute type 1 has an invalid length. [ 205.886664][T12236] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.899388][T12236] vlan2: entered allmulticast mode [ 205.904524][T12236] bond7: entered allmulticast mode [ 205.927405][T12236] bond7: (slave gretap2): making interface the new active one [ 205.936814][T12236] gretap2: entered allmulticast mode [ 205.944824][T12236] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 206.076336][T12245] xt_l2tp: v2 doesn't support IP mode [ 206.394970][T12261] syzkaller1: entered promiscuous mode [ 206.403890][T12261] syzkaller1: entered allmulticast mode [ 206.603051][T12274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.625187][T12278] netlink: 'syz.1.1848': attribute type 21 has an invalid length. [ 206.633393][T12278] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1848'. [ 206.706466][T12278] netlink: 'syz.1.1848': attribute type 5 has an invalid length. [ 206.717483][T12278] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1848'. [ 206.918139][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1856'. [ 207.117217][T12312] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1858'. [ 207.126367][T12315] openvswitch: netlink: Tunnel attr 148 out of range max 16 [ 207.238427][T12328] xt_connbytes: Forcing CT accounting to be enabled [ 207.442815][T12342] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1864'. [ 207.533209][T12352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1864'. [ 207.579676][T12346] syzkaller0: entered promiscuous mode [ 207.580304][T12348] netlink: 'syz.2.1867': attribute type 13 has an invalid length. [ 207.593913][T12346] syzkaller0: entered allmulticast mode [ 207.607758][T12348] lo: left promiscuous mode [ 207.619888][T12348] tunl0: left promiscuous mode [ 207.629291][T12348] gre0: left promiscuous mode [ 207.648401][T12357] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1870'. [ 207.664613][T12348] gretap0: left promiscuous mode [ 207.672437][T12348] gretap0: refused to change device tx_queue_len [ 207.679580][T12348] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 207.731751][T12357] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 207.744182][T12357] bond8 (unregistering): Released all slaves [ 207.762450][T12359] syzkaller0: entered promiscuous mode [ 207.768282][T12359] syzkaller0: entered allmulticast mode [ 207.904599][T12369] bond0: (slave wg1): Error: Device can not be enslaved while up [ 207.998488][T12373] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 208.012971][T12373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.017538][T12379] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 208.064958][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'. [ 208.099765][T12378] netlink: 'syz.4.1876': attribute type 39 has an invalid length. [ 208.148629][T12382] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 208.160328][T12382] bond3 (unregistering): Released all slaves [ 208.447937][T12396] bond11: (slave gretap5): making interface the new active one [ 208.456854][T12396] bond11: (slave gretap5): Enslaving as an active interface with an up link [ 208.638067][T12416] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.894611][T12432] syzkaller0: entered promiscuous mode [ 208.901239][T12432] syzkaller0: entered allmulticast mode [ 209.024904][ T123] block nbd0: Possible stuck request ffff888024b1e000: control (read@0,1024B). Runtime 90 seconds [ 209.036236][ T123] block nbd0: Possible stuck request ffff888024b1e1c0: control (read@1024,1024B). Runtime 90 seconds [ 209.047266][ T123] block nbd0: Possible stuck request ffff888024b1e380: control (read@2048,1024B). Runtime 90 seconds [ 209.058354][ T123] block nbd0: Possible stuck request ffff888024b1e540: control (read@3072,1024B). Runtime 90 seconds [ 209.070223][T12455] sctp: [Deprecated]: syz.1.1900 (pid 12455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.070223][T12455] Use struct sctp_sack_info instead [ 209.173282][T12461] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 209.370529][T12477] validate_nla: 71 callbacks suppressed [ 209.370547][T12477] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 209.388745][T12474] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 209.599809][T12494] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 209.612604][T12494] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 209.844579][T12512] veth0: entered promiscuous mode [ 209.860592][T12511] veth0: left promiscuous mode [ 210.264985][T12542] tc_dump_action: action bad kind [ 210.462842][T12551] sch_fq: defrate 0 ignored. [ 210.503635][T12556] __nla_validate_parse: 22 callbacks suppressed [ 210.503656][T12556] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1933'. [ 210.613312][T12563] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1933'. [ 210.623818][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 210.641693][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 210.747886][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 210.801848][T12575] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1938'. [ 210.955655][ T9675] wlan0: Trigger new scan to find an IBSS to join [ 211.119556][T12589] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1941'. [ 211.177957][T12586] erspan1: entered promiscuous mode [ 211.183471][T12588] veth0: entered promiscuous mode [ 211.196166][T12592] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1943'. [ 211.445174][T12610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1945'. [ 211.478719][T12609] syzkaller1: entered promiscuous mode [ 211.487506][T12609] syzkaller1: entered allmulticast mode [ 211.490077][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 211.512961][T12610] netlink: 'syz.2.1945': attribute type 1 has an invalid length. [ 211.568847][T12587] veth0: left promiscuous mode [ 211.601083][T12617] openvswitch: netlink: Key type 31 is not supported [ 212.084581][T12637] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.227830][T12637] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.340079][T12656] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 212.418181][T12637] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.779958][T12637] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.854782][T12683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.896920][ T9675] wlan0: Trigger new scan to find an IBSS to join [ 213.914622][T12683] ipvlan2: entered promiscuous mode [ 214.060287][ T6355] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.096858][ T9676] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.153788][ T9676] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.154265][T12703] netlink: 'syz.2.1974': attribute type 8 has an invalid length. [ 214.202567][ T6355] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.292341][T12714] netlink: 'syz.1.1976': attribute type 10 has an invalid length. [ 214.542391][T12731] netlink: 'syz.1.1983': attribute type 21 has an invalid length. [ 214.564139][T12728] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.651172][T12734] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.658523][T12734] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 214.670159][T12734] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 214.720057][T12731] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 214.787575][T12731] bond5 (unregistering): Released all slaves [ 214.868640][T12737] netlink: 'syz.0.1985': attribute type 27 has an invalid length. [ 214.920834][T12756] netlink: 'syz.2.1990': attribute type 13 has an invalid length. [ 214.958264][T12759] team_slave_1: entered allmulticast mode [ 214.968340][T12759] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 215.004569][T12760] netlink: 'syz.3.1991': attribute type 83 has an invalid length. [ 215.324578][T12786] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 215.353635][T12786] netlink: 'syz.2.2000': attribute type 11 has an invalid length. [ 215.404498][T12790] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 215.416029][T12790] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 215.431412][T12792] bond13: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 215.741993][T12812] __nla_validate_parse: 8 callbacks suppressed [ 215.742011][T12812] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2006'. [ 216.132272][T12787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.141952][T12787] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 216.162449][T12787] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.175875][T12787] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 216.196281][T12787] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.202226][T12787] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 216.218403][T12787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.224585][T12787] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 216.455402][T12787] tipc: Resetting bearer [ 216.641297][T12844] sctp: [Deprecated]: syz.2.2012 (pid 12844) Use of int in maxseg socket option. [ 216.641297][T12844] Use struct sctp_assoc_value instead [ 216.759967][T12851] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 216.866942][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 216.958392][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 216.967619][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 217.005854][T12862] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.069789][T12862] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 217.094685][T12862] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 217.143004][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 217.234785][T12880] macvlan2: entered promiscuous mode [ 217.240626][T12880] macvlan2: entered allmulticast mode [ 217.317445][T12888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.375713][ T10] IPVS: starting estimator thread 0... [ 217.394690][T12894] veth0_virt_wifi: entered allmulticast mode [ 217.452468][T12894] team0: Port device veth0_virt_wifi added [ 217.465860][T12896] IPVS: using max 30 ests per chain, 72000 per kthread [ 217.905351][T12932] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 217.913371][T12932] team0: Device macvtap1 is already an upper device of the team interface [ 218.077508][T12942] syzkaller0: entered promiscuous mode [ 218.083036][T12942] syzkaller0: entered allmulticast mode [ 218.119550][T12940] syzkaller0: entered promiscuous mode [ 218.125072][T12940] syzkaller0: entered allmulticast mode [ 218.338969][T12959] bond2: option mode: unable to set because the bond device has slaves [ 218.537119][T12975] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.569706][T12975] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.830771][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2052'. [ 218.882608][T13001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2052'. [ 219.118142][T12988] team_slave_0: left promiscuous mode [ 219.123821][T12988] team_slave_1: left promiscuous mode [ 219.141889][T12988] geneve0: left promiscuous mode [ 219.234109][T12988] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 219.276183][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 219.319781][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 219.770222][T13046] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 219.898506][ C1] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 96:60:9c:02:5a:5e [ 219.903242][ T56] block nbd1: Possible stuck request ffff888024b40000: control (read@0,1024B). Runtime 30 seconds [ 219.927399][ T56] block nbd1: Possible stuck request ffff888024b401c0: control (read@1024,1024B). Runtime 30 seconds [ 219.938967][ T56] block nbd1: Possible stuck request ffff888024b40380: control (read@2048,1024B). Runtime 30 seconds [ 219.950203][ T56] block nbd1: Possible stuck request ffff888024b40540: control (read@3072,1024B). Runtime 30 seconds [ 220.028649][T13066] syzkaller0: entered promiscuous mode [ 220.062012][T13066] syzkaller0: entered allmulticast mode [ 220.354864][T13092] tipc: Enabling of bearer rejected, already enabled [ 220.404890][T13092] tipc: Resetting bearer [ 220.432645][T13096] syzkaller0: entered promiscuous mode [ 220.442926][T13096] syzkaller0: entered allmulticast mode [ 220.487197][T13107] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2073'. [ 220.502565][T13101] delete_channel: no stack [ 220.926294][T13131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.040585][T13144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2084'. [ 221.200859][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'. [ 221.358838][T13174] IPVS: set_ctl: invalid protocol: 24946 0.0.0.0:0 [ 221.581374][T13187] validate_nla: 13 callbacks suppressed [ 221.581394][T13187] netlink: 'syz.2.2094': attribute type 39 has an invalid length. [ 221.603722][T13191] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 221.623327][T13189] netlink: 'syz.4.2095': attribute type 11 has an invalid length. [ 221.652664][T13191] bond8: entered promiscuous mode [ 221.659235][T13191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 221.686872][T13191] bond8: (slave bridge6): making interface the new active one [ 221.703322][T13191] bridge6: entered promiscuous mode [ 221.720679][T13191] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 221.766799][T13199] netlink: 81 bytes leftover after parsing attributes in process `syz.0.2099'. [ 221.887412][T13207] netlink: 'syz.2.2102': attribute type 1 has an invalid length. [ 221.924082][T13207] 8021q: adding VLAN 0 to HW filter on device bond14 [ 221.950111][T13207] bond14: (slave veth5): Enslaving as an active interface with a down link [ 221.970385][T13207] bond14: (slave veth0_to_bond): making interface the new active one [ 221.980563][T13207] veth0_to_bond: entered promiscuous mode [ 221.986785][T13207] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 222.004640][T13207] bond14: entered promiscuous mode [ 222.010205][T13207] bond14: entered allmulticast mode [ 222.017001][T13207] veth0_to_bond: entered allmulticast mode [ 222.030811][T13217] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2100'. [ 222.081149][T13219] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2105'. [ 222.360906][T13241] x_tables: duplicate entry at hook 2 [ 222.422354][T13247] macvtap1: entered allmulticast mode [ 222.427893][T13247] veth0_macvtap: entered allmulticast mode [ 222.519565][T13253] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2117'. [ 222.682665][T13264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2120'. [ 222.738132][T13266] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2120'. [ 222.844412][T13274] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20002 [ 222.869122][T13276] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2123'. [ 222.981402][T13283] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2124'. [ 224.401728][T13302] netlink: 'syz.0.2130': attribute type 10 has an invalid length. [ 224.425890][T13302] veth0_virt_wifi: entered allmulticast mode [ 224.454443][T13302] team0: Port device veth0_virt_wifi added [ 224.635353][T13323] netlink: 'syz.2.2136': attribute type 2 has an invalid length. [ 224.949279][T13348] sctp: [Deprecated]: syz.3.2141 (pid 13348) Use of int in maxseg socket option. [ 224.949279][T13348] Use struct sctp_assoc_value instead [ 225.641975][T13390] ip6gre0: Caught tx_queue_len zero misconfig [ 225.809543][T13404] netlink: 'syz.0.2158': attribute type 1 has an invalid length. [ 225.826198][T13404] netlink: 'syz.0.2158': attribute type 1 has an invalid length. [ 225.873540][T13411] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 225.892333][T13414] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 226.009953][T13416] 8021q: adding VLAN 0 to HW filter on device bond10 [ 226.018625][T13416] bond9: (slave bond10): making interface the new active one [ 226.026804][T13416] bond9: (slave bond10): Enslaving as an active interface with an up link [ 226.483280][T13458] __nla_validate_parse: 3 callbacks suppressed [ 226.483313][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2173'. [ 226.500576][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2173'. [ 227.338348][T13486] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2181'. [ 227.380358][T13490] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 239.096168][ T123] block nbd0: Possible stuck request ffff888024b1e000: control (read@0,1024B). Runtime 120 seconds [ 239.106946][ T123] block nbd0: Possible stuck request ffff888024b1e1c0: control (read@1024,1024B). Runtime 120 seconds [ 239.118204][ T123] block nbd0: Possible stuck request ffff888024b1e380: control (read@2048,1024B). Runtime 120 seconds [ 239.130088][ T123] block nbd0: Possible stuck request ffff888024b1e540: control (read@3072,1024B). Runtime 120 seconds [ 249.978736][ T56] block nbd1: Possible stuck request ffff888024b40000: control (read@0,1024B). Runtime 60 seconds [ 249.989525][ T56] block nbd1: Possible stuck request ffff888024b401c0: control (read@1024,1024B). Runtime 60 seconds [ 250.000536][ T56] block nbd1: Possible stuck request ffff888024b40380: control (read@2048,1024B). Runtime 60 seconds [ 250.011474][ T56] block nbd1: Possible stuck request ffff888024b40540: control (read@3072,1024B). Runtime 60 seconds [ 255.739553][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.745954][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.176438][ T123] block nbd0: Possible stuck request ffff888024b1e000: control (read@0,1024B). Runtime 150 seconds [ 269.187238][ T123] block nbd0: Possible stuck request ffff888024b1e1c0: control (read@1024,1024B). Runtime 150 seconds [ 269.198453][ T123] block nbd0: Possible stuck request ffff888024b1e380: control (read@2048,1024B). Runtime 150 seconds [ 269.209683][ T123] block nbd0: Possible stuck request ffff888024b1e540: control (read@3072,1024B). Runtime 150 seconds [ 280.060179][ T56] block nbd1: Possible stuck request ffff888024b40000: control (read@0,1024B). Runtime 90 seconds [ 280.070896][ T56] block nbd1: Possible stuck request ffff888024b401c0: control (read@1024,1024B). Runtime 90 seconds [ 280.081892][ T56] block nbd1: Possible stuck request ffff888024b40380: control (read@2048,1024B). Runtime 90 seconds [ 280.092852][ T56] block nbd1: Possible stuck request ffff888024b40540: control (read@3072,1024B). Runtime 90 seconds [ 299.256807][ T123] block nbd0: Possible stuck request ffff888024b1e000: control (read@0,1024B). Runtime 180 seconds [ 299.267668][ T123] block nbd0: Possible stuck request ffff888024b1e1c0: control (read@1024,1024B). Runtime 180 seconds [ 299.278925][ T123] block nbd0: Possible stuck request ffff888024b1e380: control (read@2048,1024B). Runtime 180 seconds [ 299.290594][ T123] block nbd0: Possible stuck request ffff888024b1e540: control (read@3072,1024B). Runtime 180 seconds [ 310.146113][ T56] block nbd1: Possible stuck request ffff888024b40000: control (read@0,1024B). Runtime 120 seconds [ 310.157051][ T56] block nbd1: Possible stuck request ffff888024b401c0: control (read@1024,1024B). Runtime 120 seconds [ 310.168093][ T56] block nbd1: Possible stuck request ffff888024b40380: control (read@2048,1024B). Runtime 120 seconds [ 310.179198][ T56] block nbd1: Possible stuck request ffff888024b40540: control (read@3072,1024B). Runtime 120 seconds [ 317.179264][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.185725][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.336382][ T123] block nbd0: Possible stuck request ffff888024b1e000: control (read@0,1024B). Runtime 210 seconds [ 329.347375][ T123] block nbd0: Possible stuck request ffff888024b1e1c0: control (read@1024,1024B). Runtime 210 seconds [ 329.358413][ T123] block nbd0: Possible stuck request ffff888024b1e380: control (read@2048,1024B). Runtime 210 seconds [ 329.369425][ T123] block nbd0: Possible stuck request ffff888024b1e540: control (read@3072,1024B). Runtime 210 seconds [ 340.216180][ T56] block nbd1: Possible stuck request ffff888024b40000: control (read@0,1024B). Runtime 150 seconds [ 340.227017][ T56] block nbd1: Possible stuck request ffff888024b401c0: control (read@1024,1024B). Runtime 150 seconds [ 340.238096][ T56] block nbd1: Possible stuck request ffff888024b40380: control (read@2048,1024B). Runtime 150 seconds [ 340.249126][ T56] block nbd1: Possible stuck request ffff888024b40540: control (read@3072,1024B). Runtime 150 seconds [ 358.137611][ C1] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 96:60:9c:02:5a:5e [ 359.435836][ T123] block nbd0: Possible stuck request ffff888024b1e000: control (read@0,1024B). Runtime 240 seconds [ 359.446615][ T123] block nbd0: Possible stuck request ffff888024b1e1c0: control (read@1024,1024B). Runtime 240 seconds [ 359.457833][ T123] block nbd0: Possible stuck request ffff888024b1e380: control (read@2048,1024B). Runtime 240 seconds [ 359.469034][ T123] block nbd0: Possible stuck request ffff888024b1e540: control (read@3072,1024B). Runtime 240 seconds [ 370.295827][ T56] block nbd1: Possible stuck request ffff888024b40000: control (read@0,1024B). Runtime 180 seconds [ 370.306686][ T56] block nbd1: Possible stuck request ffff888024b401c0: control (read@1024,1024B). Runtime 180 seconds [ 370.317750][ T56] block nbd1: Possible stuck request ffff888024b40380: control (read@2048,1024B). Runtime 180 seconds [ 370.329110][ T56] block nbd1: Possible stuck request ffff888024b40540: control (read@3072,1024B). Runtime 180 seconds [ 378.628413][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.634769][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.255751][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 379.263359][ T31] Not tainted syzkaller #0 [ 379.268543][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.277284][ T31] task:kworker/1:1 state:D stack:24776 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 379.289463][ T31] Workqueue: events rfkill_sync_work [ 379.294812][ T31] Call Trace: [ 379.298165][ T31] [ 379.301107][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 379.305809][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 379.311214][ T31] ? __pfx___schedule+0x10/0x10 [ 379.316385][ T31] ? schedule+0x91/0x360 [ 379.320899][ T31] schedule+0x165/0x360 [ 379.325076][ T31] schedule_preempt_disabled+0x13/0x30 [ 379.365772][ T31] __mutex_lock+0x7e6/0x1350 [ 379.370432][ T31] ? __mutex_lock+0x5bb/0x1350 [ 379.375216][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 379.396794][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 379.401889][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.407989][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 379.413914][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.420437][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 379.426218][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 379.431318][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 379.437075][ T31] rfkill_set_block+0x1d2/0x440 [ 379.441942][ T31] rfkill_sync_work+0x114/0x200 [ 379.446843][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 379.452577][ T31] process_scheduled_works+0xae1/0x17b0 [ 379.458185][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.464176][ T31] worker_thread+0x8a0/0xda0 [ 379.468841][ T31] kthread+0x711/0x8a0 [ 379.472927][ T31] ? __pfx_worker_thread+0x10/0x10 [ 379.478066][ T31] ? __pfx_kthread+0x10/0x10 [ 379.482826][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.488086][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.493291][ T31] ? __pfx_kthread+0x10/0x10 [ 379.497921][ T31] ret_from_fork+0x4bc/0x870 [ 379.502519][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 379.507703][ T31] ? __switch_to_asm+0x39/0x70 [ 379.512474][ T31] ? __switch_to_asm+0x33/0x70 [ 379.517288][ T31] ? __pfx_kthread+0x10/0x10 [ 379.521906][ T31] ret_from_fork_asm+0x1a/0x30 [ 379.526734][ T31] [ 379.529824][ T31] INFO: task kworker/1:3:1838 blocked for more than 143 seconds. [ 379.537599][ T31] Not tainted syzkaller #0 [ 379.542530][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.551234][ T31] task:kworker/1:3 state:D stack:24344 pid:1838 tgid:1838 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 379.563282][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 379.570058][ T31] Call Trace: [ 379.573369][ T31] [ 379.576428][ T31] __schedule+0x1798/0x4cc0 [ 379.580955][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.587342][ T31] ? __pfx___schedule+0x10/0x10 [ 379.592207][ T31] ? schedule+0x91/0x360 [ 379.596493][ T31] schedule+0x165/0x360 [ 379.600654][ T31] schedule_preempt_disabled+0x13/0x30 [ 379.606157][ T31] __mutex_lock+0x7e6/0x1350 [ 379.610749][ T31] ? __mutex_lock+0x5bb/0x1350 [ 379.615546][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 379.621793][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 379.626919][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 379.632647][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 379.638403][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 379.644481][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 379.650271][ T31] process_scheduled_works+0xae1/0x17b0 [ 379.656063][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.662086][ T31] worker_thread+0x8a0/0xda0 [ 379.666757][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.673109][ T31] ? __kthread_parkme+0x7b/0x200 [ 379.678128][ T31] kthread+0x711/0x8a0 [ 379.682207][ T31] ? __pfx_worker_thread+0x10/0x10 [ 379.687442][ T31] ? __pfx_kthread+0x10/0x10 [ 379.692044][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.697333][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.702551][ T31] ? __pfx_kthread+0x10/0x10 [ 379.707169][ T31] ret_from_fork+0x4bc/0x870 [ 379.711769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 379.716928][ T31] ? __switch_to_asm+0x39/0x70 [ 379.721693][ T31] ? __switch_to_asm+0x33/0x70 [ 379.726524][ T31] ? __pfx_kthread+0x10/0x10 [ 379.731130][ T31] ret_from_fork_asm+0x1a/0x30 [ 379.736002][ T31] [ 379.739139][ T31] INFO: task syz.1.2088:13158 blocked for more than 143 seconds. [ 379.746892][ T31] Not tainted syzkaller #0 [ 379.751827][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.760547][ T31] task:syz.1.2088 state:D stack:27904 pid:13158 tgid:13158 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 379.772513][ T31] Call Trace: [ 379.775858][ T31] [ 379.778799][ T31] __schedule+0x1798/0x4cc0 [ 379.783329][ T31] ? validate_chain+0x897/0x2140 [ 379.788331][ T31] ? __lock_acquire+0xab9/0xd20 [ 379.793169][ T31] ? __pfx___schedule+0x10/0x10 [ 379.798075][ T31] ? schedule+0x91/0x360 [ 379.802323][ T31] schedule+0x165/0x360 [ 379.806505][ T31] schedule_timeout+0x9a/0x270 [ 379.811278][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 379.816772][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.821980][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.827228][ T31] ? wait_for_completion+0x267/0x5d0 [ 379.832525][ T31] wait_for_completion+0x2bf/0x5d0 [ 379.837703][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 379.843346][ T31] ? __flush_work+0xd2/0xbc0 [ 379.847988][ T31] ? __flush_work+0xd2/0xbc0 [ 379.852585][ T31] __flush_work+0x9b9/0xbc0 [ 379.857148][ T31] ? __flush_work+0xd2/0xbc0 [ 379.861745][ T31] ? __pfx___flush_work+0x10/0x10 [ 379.866807][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 379.872102][ T31] ? __pfx___cancel_work+0x10/0x10 [ 379.877267][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 379.882950][ T31] __cancel_work_sync+0xbe/0x110 [ 379.887952][ T31] rfkill_unregister+0x92/0x220 [ 379.892825][ T31] nfc_unregister_device+0x96/0x2a0 [ 379.899142][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 379.904892][ T31] virtual_ncidev_close+0x56/0x90 [ 379.910037][ T31] __fput+0x44c/0xa70 [ 379.914041][ T31] task_work_run+0x1d4/0x260 [ 379.919077][ T31] ? __pfx_task_work_run+0x10/0x10 [ 379.924192][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 379.929867][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 379.935158][ T31] do_syscall_64+0x2bd/0xfa0 [ 379.939932][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.945145][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.951684][ T31] ? clear_bhb_loop+0x60/0xb0 [ 379.956484][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.962402][ T31] RIP: 0033:0x7fb4e958f749 [ 379.967013][ T31] RSP: 002b:00007ffd9d7dca98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 379.975854][ T31] RAX: 0000000000000000 RBX: 0000000000035fdc RCX: 00007fb4e958f749 [ 379.983846][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 379.991866][ T31] RBP: 00007fb4e97e7da0 R08: 0000000000000001 R09: 0000001d9d7dcd8f [ 379.999908][ T31] R10: 0000001b2ff20000 R11: 0000000000000246 R12: 00007fb4e97e5fac [ 380.007969][ T31] R13: 00007fb4e97e5fa0 R14: ffffffffffffffff R15: 00007ffd9d7dcbb0 [ 380.016125][ T31] [ 380.019176][ T31] INFO: task syz.4.2170:13447 blocked for more than 144 seconds. [ 380.029095][ T31] Not tainted syzkaller #0 [ 380.034023][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.043131][ T31] task:syz.4.2170 state:D stack:25160 pid:13447 tgid:13445 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 380.055093][ T31] Call Trace: [ 380.058653][ T31] [ 380.061597][ T31] __schedule+0x1798/0x4cc0 [ 380.066172][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.071030][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.076025][ T31] ? __pfx___schedule+0x10/0x10 [ 380.080895][ T31] ? schedule+0x91/0x360 [ 380.085131][ T31] schedule+0x165/0x360 [ 380.089371][ T31] schedule_preempt_disabled+0x13/0x30 [ 380.094837][ T31] __mutex_lock+0x7e6/0x1350 [ 380.099548][ T31] ? __mutex_lock+0x5bb/0x1350 [ 380.104322][ T31] ? rfkill_register+0x37/0x8e0 [ 380.109245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 380.114284][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 380.119716][ T31] ? device_initialize+0x24b/0x440 [ 380.124835][ T31] rfkill_register+0x37/0x8e0 [ 380.129605][ T31] nfc_register_device+0x14a/0x320 [ 380.134726][ T31] nci_register_device+0x87f/0x9d0 [ 380.140004][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 380.145697][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 380.150998][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 380.156428][ T31] virtual_ncidev_open+0x129/0x1a0 [ 380.161554][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 380.167357][ T31] misc_open+0x2d5/0x350 [ 380.171648][ T31] chrdev_open+0x4cc/0x5e0 [ 380.176180][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 380.181126][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 380.187513][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 380.192457][ T31] do_dentry_open+0x953/0x13f0 [ 380.197260][ T31] vfs_open+0x3b/0x340 [ 380.201339][ T31] ? path_openat+0x2ecd/0x3830 [ 380.206151][ T31] path_openat+0x2ee5/0x3830 [ 380.210769][ T31] ? __pfx_path_openat+0x10/0x10 [ 380.215901][ T31] do_filp_open+0x1fa/0x410 [ 380.220413][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.225250][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 380.230355][ T31] ? _raw_spin_unlock+0x28/0x50 [ 380.235213][ T31] ? alloc_fd+0x64c/0x6c0 [ 380.239602][ T31] do_sys_openat2+0x121/0x1c0 [ 380.244292][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.249536][ T31] ? rcu_is_watching+0x15/0xb0 [ 380.254312][ T31] __x64_sys_openat+0x138/0x170 [ 380.259260][ T31] do_syscall_64+0xfa/0xfa0 [ 380.263841][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.269099][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.275171][ T31] ? clear_bhb_loop+0x60/0xb0 [ 380.279901][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.285835][ T31] RIP: 0033:0x7fd61d58f749 [ 380.290261][ T31] RSP: 002b:00007fd61e485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.298874][ T31] RAX: ffffffffffffffda RBX: 00007fd61d7e5fa0 RCX: 00007fd61d58f749 [ 380.306894][ T31] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 380.314853][ T31] RBP: 00007fd61d613f91 R08: 0000000000000000 R09: 0000000000000000 [ 380.322849][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.330865][ T31] R13: 00007fd61d7e6038 R14: 00007fd61d7e5fa0 R15: 00007ffe701efc28 [ 380.338986][ T31] [ 380.342034][ T31] INFO: task syz.0.2175:13464 blocked for more than 144 seconds. [ 380.349795][ T31] Not tainted syzkaller #0 [ 380.354728][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.363440][ T31] task:syz.0.2175 state:D stack:28296 pid:13464 tgid:13463 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 380.375401][ T31] Call Trace: [ 380.378716][ T31] [ 380.381633][ T31] __schedule+0x1798/0x4cc0 [ 380.386335][ T31] ? security_file_open+0xb1/0x270 [ 380.391469][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.396408][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.401270][ T31] ? __pfx___schedule+0x10/0x10 [ 380.406186][ T31] ? schedule+0x91/0x360 [ 380.410452][ T31] schedule+0x165/0x360 [ 380.414615][ T31] schedule_preempt_disabled+0x13/0x30 [ 380.420173][ T31] __mutex_lock+0x7e6/0x1350 [ 380.424771][ T31] ? __mutex_lock+0x5bb/0x1350 [ 380.429629][ T31] ? misc_open+0x51/0x350 [ 380.433979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 380.439087][ T31] misc_open+0x51/0x350 [ 380.443276][ T31] chrdev_open+0x4cc/0x5e0 [ 380.447767][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 380.452713][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 380.459173][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 380.464137][ T31] do_dentry_open+0x953/0x13f0 [ 380.468975][ T31] vfs_open+0x3b/0x340 [ 380.473057][ T31] ? path_openat+0x2ecd/0x3830 [ 380.477869][ T31] path_openat+0x2ee5/0x3830 [ 380.482680][ T31] ? __pfx_path_openat+0x10/0x10 [ 380.487680][ T31] do_filp_open+0x1fa/0x410 [ 380.492191][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.497154][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 380.502205][ T31] ? _raw_spin_unlock+0x28/0x50 [ 380.507094][ T31] ? alloc_fd+0x64c/0x6c0 [ 380.511435][ T31] do_sys_openat2+0x121/0x1c0 [ 380.516184][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.521404][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.526663][ T31] __x64_sys_openat+0x138/0x170 [ 380.531521][ T31] do_syscall_64+0xfa/0xfa0 [ 380.536271][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.541488][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.547608][ T31] ? clear_bhb_loop+0x60/0xb0 [ 380.552294][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.558239][ T31] RIP: 0033:0x7f387f98f749 [ 380.562671][ T31] RSP: 002b:00007f38808ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.571143][ T31] RAX: ffffffffffffffda RBX: 00007f387fbe5fa0 RCX: 00007f387f98f749 [ 380.579232][ T31] RDX: 00000000001c1342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 380.587560][ T31] RBP: 00007f387fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 380.595612][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.603593][ T31] R13: 00007f387fbe6038 R14: 00007f387fbe5fa0 R15: 00007ffc1d795d48 [ 380.611675][ T31] [ 380.614718][ T31] INFO: task syz.0.2175:13466 blocked for more than 144 seconds. [ 380.622551][ T31] Not tainted syzkaller #0 [ 380.627542][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.636265][ T31] task:syz.0.2175 state:D stack:28296 pid:13466 tgid:13463 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 380.648267][ T31] Call Trace: [ 380.651554][ T31] [ 380.654492][ T31] __schedule+0x1798/0x4cc0 [ 380.659065][ T31] ? security_file_open+0xb1/0x270 [ 380.664192][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.669100][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.673954][ T31] ? __pfx___schedule+0x10/0x10 [ 380.678840][ T31] ? schedule+0x91/0x360 [ 380.683091][ T31] schedule+0x165/0x360 [ 380.687295][ T31] schedule_preempt_disabled+0x13/0x30 [ 380.692764][ T31] __mutex_lock+0x7e6/0x1350 [ 380.697479][ T31] ? __mutex_lock+0x5bb/0x1350 [ 380.702256][ T31] ? misc_open+0x51/0x350 [ 380.706611][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 380.711650][ T31] misc_open+0x51/0x350 [ 380.715853][ T31] chrdev_open+0x4cc/0x5e0 [ 380.720275][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 380.725197][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 380.731593][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 380.736567][ T31] do_dentry_open+0x953/0x13f0 [ 380.741326][ T31] vfs_open+0x3b/0x340 [ 380.745374][ T31] ? path_openat+0x2ecd/0x3830 [ 380.750181][ T31] path_openat+0x2ee5/0x3830 [ 380.754804][ T31] ? __pfx_path_openat+0x10/0x10 [ 380.759807][ T31] do_filp_open+0x1fa/0x410 [ 380.764319][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.769223][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 380.774286][ T31] ? _raw_spin_unlock+0x28/0x50 [ 380.779194][ T31] ? alloc_fd+0x64c/0x6c0 [ 380.783541][ T31] do_sys_openat2+0x121/0x1c0 [ 380.788312][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.793520][ T31] ? exc_page_fault+0x82/0x100 [ 380.798332][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 380.803619][ T31] __x64_sys_openat+0x138/0x170 [ 380.808541][ T31] do_syscall_64+0xfa/0xfa0 [ 380.813055][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.818278][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.824348][ T31] ? clear_bhb_loop+0x60/0xb0 [ 380.829055][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.834954][ T31] RIP: 0033:0x7f387f98f749 [ 380.839415][ T31] RSP: 002b:00007f3880888038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.847883][ T31] RAX: ffffffffffffffda RBX: 00007f387fbe6180 RCX: 00007f387f98f749 [ 380.855898][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 380.863876][ T31] RBP: 00007f387fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 380.871897][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.879936][ T31] R13: 00007f387fbe6218 R14: 00007f387fbe6180 R15: 00007ffc1d795d48 [ 380.888001][ T31] [ 380.891049][ T31] INFO: task syz.2.2176:13470 blocked for more than 144 seconds. [ 380.898827][ T31] Not tainted syzkaller #0 [ 380.903763][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.912487][ T31] task:syz.2.2176 state:D stack:28296 pid:13470 tgid:13468 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 380.924454][ T31] Call Trace: [ 380.927754][ T31] [ 380.930687][ T31] __schedule+0x1798/0x4cc0 [ 380.935184][ T31] ? security_file_open+0xb1/0x270 [ 380.940722][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.945706][ T31] ? __lock_acquire+0xab9/0xd20 [ 380.950563][ T31] ? __pfx___schedule+0x10/0x10 [ 380.955711][ T31] ? schedule+0x91/0x360 [ 380.959962][ T31] schedule+0x165/0x360 [ 380.964106][ T31] schedule_preempt_disabled+0x13/0x30 [ 380.969973][ T31] __mutex_lock+0x7e6/0x1350 [ 380.974583][ T31] ? __mutex_lock+0x5bb/0x1350 [ 380.979623][ T31] ? misc_open+0x51/0x350 [ 380.983969][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 380.989065][ T31] misc_open+0x51/0x350 [ 380.993228][ T31] chrdev_open+0x4cc/0x5e0 [ 380.997689][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 381.002632][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 381.009014][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 381.013953][ T31] do_dentry_open+0x953/0x13f0 [ 381.019010][ T31] vfs_open+0x3b/0x340 [ 381.023107][ T31] ? path_openat+0x2ecd/0x3830 [ 381.027967][ T31] path_openat+0x2ee5/0x3830 [ 381.032614][ T31] ? __pfx_path_openat+0x10/0x10 [ 381.037611][ T31] do_filp_open+0x1fa/0x410 [ 381.042120][ T31] ? __lock_acquire+0xab9/0xd20 [ 381.047007][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 381.052063][ T31] ? _raw_spin_unlock+0x28/0x50 [ 381.056968][ T31] ? alloc_fd+0x64c/0x6c0 [ 381.061312][ T31] do_sys_openat2+0x121/0x1c0 [ 381.066069][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 381.071278][ T31] ? exc_page_fault+0x82/0x100 [ 381.076090][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 381.081383][ T31] __x64_sys_openat+0x138/0x170 [ 381.086310][ T31] do_syscall_64+0xfa/0xfa0 [ 381.090822][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.096065][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.102145][ T31] ? clear_bhb_loop+0x60/0xb0 [ 381.106918][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.112820][ T31] RIP: 0033:0x7f4b2278f749 [ 381.117285][ T31] RSP: 002b:00007f4b236ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 381.125756][ T31] RAX: ffffffffffffffda RBX: 00007f4b229e6090 RCX: 00007f4b2278f749 [ 381.133717][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 381.141732][ T31] RBP: 00007f4b22813f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.149765][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.157791][ T31] R13: 00007f4b229e6128 R14: 00007f4b229e6090 R15: 00007ffd634629b8 [ 381.165848][ T31] [ 381.168887][ T31] INFO: task syz.2.2176:13471 blocked for more than 145 seconds. [ 381.176757][ T31] Not tainted syzkaller #0 [ 381.181694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.190402][ T31] task:syz.2.2176 state:D stack:28296 pid:13471 tgid:13468 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 381.202365][ T31] Call Trace: [ 381.205685][ T31] [ 381.208623][ T31] __schedule+0x1798/0x4cc0 [ 381.213118][ T31] ? security_file_open+0xb1/0x270 [ 381.218275][ T31] ? __lock_acquire+0xab9/0xd20 [ 381.223138][ T31] ? __lock_acquire+0xab9/0xd20 [ 381.228085][ T31] ? __pfx___schedule+0x10/0x10 [ 381.232969][ T31] ? schedule+0x91/0x360 [ 381.237266][ T31] schedule+0x165/0x360 [ 381.241432][ T31] schedule_preempt_disabled+0x13/0x30 [ 381.246914][ T31] __mutex_lock+0x7e6/0x1350 [ 381.251510][ T31] ? __mutex_lock+0x5bb/0x1350 [ 381.256542][ T31] ? misc_open+0x51/0x350 [ 381.260884][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 381.265964][ T31] misc_open+0x51/0x350 [ 381.270128][ T31] chrdev_open+0x4cc/0x5e0 [ 381.274529][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 381.279521][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 381.285905][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 381.290855][ T31] do_dentry_open+0x953/0x13f0 [ 381.295724][ T31] vfs_open+0x3b/0x340 [ 381.299792][ T31] ? path_openat+0x2ecd/0x3830 [ 381.304543][ T31] path_openat+0x2ee5/0x3830 [ 381.309216][ T31] ? __pfx_path_openat+0x10/0x10 [ 381.314203][ T31] do_filp_open+0x1fa/0x410 [ 381.318753][ T31] ? __lock_acquire+0xab9/0xd20 [ 381.323608][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 381.328695][ T31] ? _raw_spin_unlock+0x28/0x50 [ 381.333554][ T31] ? alloc_fd+0x64c/0x6c0 [ 381.337927][ T31] do_sys_openat2+0x121/0x1c0 [ 381.342611][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 381.347835][ T31] ? exc_page_fault+0x82/0x100 [ 381.352609][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 381.357948][ T31] __x64_sys_openat+0x138/0x170 [ 381.362809][ T31] do_syscall_64+0xfa/0xfa0 [ 381.367337][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.372571][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.378666][ T31] ? clear_bhb_loop+0x60/0xb0 [ 381.383353][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.389299][ T31] RIP: 0033:0x7f4b2278f749 [ 381.393715][ T31] RSP: 002b:00007f4b23699038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 381.402168][ T31] RAX: ffffffffffffffda RBX: 00007f4b229e6180 RCX: 00007f4b2278f749 [ 381.410206][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 381.418293][ T31] RBP: 00007f4b22813f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.426352][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.434337][ T31] R13: 00007f4b229e6218 R14: 00007f4b229e6180 R15: 00007ffd634629b8 [ 381.442395][ T31] [ 381.445458][ T31] INFO: task syz.3.2183:13492 blocked for more than 145 seconds. [ 381.453170][ T31] Not tainted syzkaller #0 [ 381.458131][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.466834][ T31] task:syz.3.2183 state:D stack:24744 pid:13492 tgid:13491 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 381.478777][ T31] Call Trace: [ 381.482209][ T31] [ 381.485131][ T31] __schedule+0x1798/0x4cc0 [ 381.489696][ T31] ? security_file_open+0xb1/0x270 [ 381.494821][ T31] ? __lock_acquire+0xab9/0xd20 [ 381.499745][ T31] ? __lock_acquire+0xab9/0xd20 [ 381.504602][ T31] ? __pfx___schedule+0x10/0x10 [ 381.509513][ T31] ? schedule+0x91/0x360 [ 381.513766][ T31] schedule+0x165/0x360 [ 381.517964][ T31] schedule_preempt_disabled+0x13/0x30 [ 381.523428][ T31] __mutex_lock+0x7e6/0x1350 [ 381.528052][ T31] ? __mutex_lock+0x5bb/0x1350 [ 381.532844][ T31] ? misc_open+0x51/0x350 [ 381.537225][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 381.542264][ T31] misc_open+0x51/0x350 [ 381.546484][ T31] chrdev_open+0x4cc/0x5e0 [ 381.550913][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 381.555908][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 381.562244][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 381.567204][ T31] do_dentry_open+0x953/0x13f0 [ 381.571981][ T31] vfs_open+0x3b/0x340 [ 381.576190][ T31] ? path_openat+0x2ecd/0x3830 [ 381.580965][ T31] path_openat+0x2ee5/0x3830 [ 381.585623][ T31] ? __pfx_path_openat+0x10/0x10 [ 381.590575][ T31] do_filp_open+0x1fa/0x410 [ 381.595059][ T31] ? __lock_acquire+0xab9/0xd20 [ 381.599957][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 381.605001][ T31] ? _raw_spin_unlock+0x28/0x50 [ 381.609915][ T31] ? alloc_fd+0x64c/0x6c0 [ 381.614262][ T31] do_sys_openat2+0x121/0x1c0 [ 381.618978][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 381.624189][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 381.629442][ T31] __x64_sys_openat+0x138/0x170 [ 381.634305][ T31] do_syscall_64+0xfa/0xfa0 [ 381.638829][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.644035][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.650150][ T31] ? clear_bhb_loop+0x60/0xb0 [ 381.654833][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.660790][ T31] RIP: 0033:0x7fc32d98f749 [ 381.665215][ T31] RSP: 002b:00007fc32e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 381.673667][ T31] RAX: ffffffffffffffda RBX: 00007fc32dbe5fa0 RCX: 00007fc32d98f749 [ 381.681681][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 381.689728][ T31] RBP: 00007fc32da13f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.697732][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.705741][ T31] R13: 00007fc32dbe6038 R14: 00007fc32dbe5fa0 R15: 00007ffc57f9c288 [ 381.713739][ T31] [ 381.716844][ T31] [ 381.716844][ T31] Showing all locks held in the system: [ 381.724556][ T31] 1 lock held by khungtaskd/31: [ 381.729451][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 381.739470][ T31] 4 locks held by kworker/1:1/43: [ 381.744494][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.755496][ T31] #1: ffffc90000b37ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.767899][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 381.777958][ T31] #3: ffff8880553fb100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 381.787672][ T31] 3 locks held by kworker/1:3/1838: [ 381.792852][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.803844][ T31] #1: ffffc90004fcfba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.817521][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 381.828956][ T31] 2 locks held by kworker/u8:8/3499: [ 381.834252][ T31] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 381.844261][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 381.853186][ T31] 2 locks held by getty/5592: [ 381.857875][ T31] #0: ffff8880338d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 381.867686][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 381.877820][ T31] 1 lock held by udevd/5900: [ 381.882408][ T31] #0: ffff888143be1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 381.891693][ T31] 1 lock held by udevd/9175: [ 381.896438][ T31] #0: ffff888024564358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 381.905758][ T31] 1 lock held by syz.1.2088/13158: [ 381.910866][ T31] #0: ffff8880553fb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 381.920649][ T31] 3 locks held by syz.4.2170/13447: [ 381.925896][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 381.934365][ T31] #1: ffff888025f0d100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 381.944008][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 381.953986][ T31] 1 lock held by syz.0.2175/13464: [ 381.959400][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 381.967918][ T31] 1 lock held by syz.0.2175/13466: [ 381.973025][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 381.981764][ T31] 1 lock held by syz.2.2176/13470: [ 381.987196][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 381.995829][ T31] 1 lock held by syz.2.2176/13471: [ 382.000934][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.009638][ T31] 1 lock held by syz.3.2183/13492: [ 382.014750][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.023253][ T31] 1 lock held by syz-executor/13497: [ 382.028574][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.037074][ T31] 1 lock held by syz-executor/13503: [ 382.042362][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.050851][ T31] 1 lock held by syz-executor/13507: [ 382.056187][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.064684][ T31] 1 lock held by syz-executor/13508: [ 382.070019][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.078533][ T31] 1 lock held by syz-executor/13509: [ 382.083821][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.092426][ T31] 1 lock held by syz-executor/13511: [ 382.097744][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.106262][ T31] 1 lock held by syz-executor/13514: [ 382.111541][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.120023][ T31] 1 lock held by syz-executor/13519: [ 382.125306][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.133818][ T31] 1 lock held by syz-executor/13520: [ 382.139137][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.147615][ T31] 1 lock held by syz-executor/13521: [ 382.152896][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.161367][ T31] 1 lock held by syz-executor/13525: [ 382.166684][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.175133][ T31] 1 lock held by syz-executor/13527: [ 382.180444][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.188932][ T31] 1 lock held by syz-executor/13531: [ 382.194196][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.202709][ T31] 1 lock held by syz-executor/13532: [ 382.208071][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.216616][ T31] 1 lock held by syz-executor/13533: [ 382.221904][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 382.230439][ T31] [ 382.232760][ T31] ============================================= [ 382.232760][ T31] [ 382.241213][ T31] NMI backtrace for cpu 0 [ 382.241236][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 382.241253][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.241263][ T31] Call Trace: [ 382.241271][ T31] [ 382.241278][ T31] dump_stack_lvl+0x189/0x250 [ 382.241305][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.241326][ T31] ? __pfx__printk+0x10/0x10 [ 382.241353][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 382.241375][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 382.241396][ T31] ? __pfx__printk+0x10/0x10 [ 382.241417][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.241444][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 382.241467][ T31] watchdog+0xf60/0xfa0 [ 382.241490][ T31] ? watchdog+0x1e2/0xfa0 [ 382.241512][ T31] kthread+0x711/0x8a0 [ 382.241538][ T31] ? __pfx_watchdog+0x10/0x10 [ 382.241555][ T31] ? __pfx_kthread+0x10/0x10 [ 382.241579][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.241601][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.241622][ T31] ? __pfx_kthread+0x10/0x10 [ 382.241645][ T31] ret_from_fork+0x4bc/0x870 [ 382.241665][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 382.241690][ T31] ? __switch_to_asm+0x39/0x70 [ 382.241703][ T31] ? __switch_to_asm+0x33/0x70 [ 382.241716][ T31] ? __pfx_kthread+0x10/0x10 [ 382.241738][ T31] ret_from_fork_asm+0x1a/0x30 [ 382.241769][ T31] [ 382.241776][ T31] Sending NMI from CPU 0 to CPUs 1: [ 382.386309][ C1] NMI backtrace for cpu 1 [ 382.386343][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 382.386360][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.386370][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 382.386393][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 81 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 382.386407][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 382.386421][ C1] RAX: b44189be9fa32800 RBX: ffffffff81967b47 RCX: b44189be9fa32800 [ 382.386433][ C1] RDX: 0000000000000001 RSI: ffffffff8d70ed5a RDI: ffffffff8bbf08e0 [ 382.386444][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 382.386455][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cf470 [ 382.386466][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 382.386476][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 382.386488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.386499][ C1] CR2: 00005607ffb7f000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 382.386512][ C1] Call Trace: [ 382.386519][ C1] [ 382.386525][ C1] default_idle+0x13/0x20 [ 382.386540][ C1] default_idle_call+0x73/0xb0 [ 382.386556][ C1] do_idle+0x1e7/0x510 [ 382.386575][ C1] ? __pfx_do_idle+0x10/0x10 [ 382.386598][ C1] cpu_startup_entry+0x44/0x60 [ 382.386613][ C1] start_secondary+0x101/0x110 [ 382.386632][ C1] common_startup_64+0x13e/0x147 [ 382.386659][ C1]