last executing test programs: 27.08979006s ago: executing program 4 (id=7333): socket$packet(0x11, 0x3, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7023994af51000000000000ae77f124", 0x10}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000140)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x200000000000006f, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r3, 0x0) write$nci(r3, &(0x7f0000000000)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x5, 0x1}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x8, 0x4) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e}, 0x48) 26.903423533s ago: executing program 4 (id=7336): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000100081044881f782db44b904021d080b01000000000000001800150006001500000000120800030043000000a800160037fcb659362e2e55e799aac5525ffa000400c020db2d47782a462c9c801f298225c506000d00036010fab94dcf1c0461c1d67f6f94007134cf66e08000a0e40852a9d7c7c0b7c4a700002a76549eae02ede8359f79d073d37af66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa27e8ddc64193071e9f8775730d16a4683f1aeb4edbb5", 0xd8}], 0x1}, 0x8040) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip_vti0\x00', r3, 0x40, 0x80, 0x0, 0x3ff, {{0x24, 0x4, 0x2, 0x3f, 0x90, 0x67, 0x0, 0x2, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x2c, 0xf9, 0x1, 0xb, [{@remote}, {@remote, 0x3}, {@remote, 0x9e6}, {@private=0xa010101, 0x4}, {@multicast2, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x35, 0x3, 0xb, [{@remote, 0x56ed26a4}]}, @timestamp_addr={0x44, 0x14, 0x30, 0x1, 0x7, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x50}]}, @rr={0x7, 0x17, 0x58, [@multicast1, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x13, 0x5f, [@remote, @loopback, @broadcast, @multicast2]}]}}}}}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) getsockopt$inet_int(r1, 0x0, 0x15, 0x0, &(0x7f0000000040)) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x0) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000240)=0x1c, &(0x7f0000000280)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd7000004000000201"], 0x1c}}, 0x4040080) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r9, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) connect$ax25(r9, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGSKNS(r7, 0x894c, &(0x7f0000000000)=0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x891d, 0x0) 26.660645752s ago: executing program 4 (id=7339): syz_80211_inject_frame(0x0, 0x0, 0xffffffffffffff54) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$packet(r1, &(0x7f0000000b80)="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", 0x180, 0x8001, 0x0, 0x0) recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) syz_80211_inject_frame(0x0, 0x0, 0xd444a9aa) 26.122807594s ago: executing program 0 (id=7345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 26.046431315s ago: executing program 3 (id=7347): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x2c, r3, 0x31, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x1a0}}, 0x0) 25.96258416s ago: executing program 0 (id=7348): r0 = socket$isdn(0x22, 0x2, 0x22) close(r0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local}, {0x0, 0x0, 0x8}}}}}}, 0x2e) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) (async) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000d40)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x20}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5) r5 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0x3, 0x8000}, &(0x7f0000000400)=0x90) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r7, 0x2ab, 0xa, 0x81, 0x8, 0x8000}, 0x14) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r8) 25.962001733s ago: executing program 4 (id=7349): syz_emit_ethernet(0x37, &(0x7f00000002c0)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7fa727", 0x1, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local, {[], '3'}}}}}, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) 25.890411048s ago: executing program 2 (id=7350): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x1, 0x0, &(0x7f00000003c0)) bind$x25(r0, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105f509600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32602d30015000304d44c68060e8bed", 0x3d}], 0x1, 0x0, 0xffffffffffffff41}, 0x20000080) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x38, r6, 0x100, 0x4, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x80}, 0x1, 0x7}, 0x0) (async) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 24.265606347s ago: executing program 3 (id=7353): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x81}, 0xc000) poll(&(0x7f0000000740)=[{r4, 0xa403}], 0x1, 0x1) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020104020a0000000000000000000000030006000000000002000000ffffffff00000000000000000300050000000000020000000000000000000000000000000200130006"], 0x50}, 0x1, 0x7}, 0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r5, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 24.255749511s ago: executing program 4 (id=7354): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) sendto$inet6(r1, &(0x7f00000001c0)="772e8cf7f8d20837636ba3e1a45f8f1be56ab7be33a94b8dd22feb23c130d6a7d6929ed65c5ea397a586dfe06b12ee02beea6bc99c9ec8fcc4cc0f022ce37ed22e212ad356946d4c65a3f936d4881bb19d8f0b5a379d0ee795d3df", 0x5b, 0x40, &(0x7f0000000240)={0xa, 0x4e24, 0x2e84, @local, 0x7}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@empty=0xe0}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 23.986926527s ago: executing program 2 (id=7355): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000140)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r4, @ANYRESOCT=r0, @ANYRES64=r1], 0x1c}}, 0x8004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r5], 0x4) 23.93366721s ago: executing program 0 (id=7357): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x3f, 0x9, 0x70bd29, 0x0, {0x3}, [@typed={0x4, 0xb7}, @typed={0x15, 0xb, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10000000) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x24, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 23.798756402s ago: executing program 3 (id=7359): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000800000000000000000009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r1, 0x6, 0x5, 0x9}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000140)={r0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r9 = openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x17, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044001}, 0x800) write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) close(r9) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x460, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x434, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x8d6, 0xfffffff5, 0x1, 0xa, 0x9, 0xb00, 0x8, 0xa, 0x6, 0x9, 0x5, 0x0, 0x4, 0x4, 0x4, 0x9, 0x10005, 0x1, 0x1, 0xe0ab, 0xd, 0x6, 0x6, 0x80, 0x3, 0xffffffff, 0xa0, 0x6, 0x9, 0x297, 0x7, 0x3da, 0x4ab9, 0xb, 0x10000, 0x5, 0xddaf, 0x5, 0x6, 0x7fff, 0x6, 0xb8b, 0x6, 0x7, 0xe, 0x4, 0x6, 0x7fff, 0x4, 0x1, 0x3, 0xfffffff8, 0x7, 0x2, 0x8, 0x8, 0x1, 0x80, 0xfffffff4, 0xf, 0x10, 0xff, 0x5, 0x5, 0xffff, 0x8, 0x4, 0x6, 0x507, 0x7f, 0x89, 0x6, 0xf36, 0x0, 0x8, 0x9, 0x6, 0x4, 0x4, 0x4, 0x0, 0x7, 0x2, 0x3, 0x5, 0x195, 0x4, 0x7, 0x3, 0x8, 0x47e, 0x3, 0x10001, 0x2, 0x7, 0x10000, 0x6, 0x9, 0x9, 0x7, 0x975b, 0x0, 0x1, 0x40, 0x4, 0x0, 0x8, 0x4, 0x6, 0x7ff, 0x8000, 0x6, 0x9, 0x0, 0x2, 0x3, 0x1, 0x0, 0xffffffff, 0x6, 0x4fd, 0x200, 0x8cc, 0x7, 0x9, 0x9, 0xffff, 0x401, 0xd4b, 0x9, 0xa, 0x68, 0x2, 0x8, 0x1, 0x5, 0x0, 0x6, 0x2, 0x35d26a00, 0x0, 0x6, 0x6, 0xd3, 0x140000, 0x8, 0x4, 0x187, 0x9aca, 0x2ef, 0x2, 0x4, 0x3, 0x2, 0x7, 0x0, 0xd6, 0x3ff, 0x2, 0x400, 0x7fffffff, 0x4, 0x2, 0x1, 0x4, 0x0, 0x3, 0xc, 0x0, 0x5, 0xffff, 0x40b, 0x0, 0x7, 0xe, 0x7ffffffc, 0x3031ce6b, 0x8a, 0x0, 0x8001, 0x5, 0x8, 0x4, 0x5, 0x80000000, 0x9, 0xe, 0x6, 0x4, 0x78, 0x800, 0x1, 0x4, 0x0, 0xdc, 0x3, 0x0, 0x5, 0xd8c3, 0x6, 0x22096664, 0x7, 0xd00, 0x4, 0x7ff, 0x6, 0xfffffffe, 0x7, 0xfffff061, 0x2, 0x8, 0x3, 0x2, 0xffe, 0x5, 0x1, 0xac, 0x4, 0x3, 0x6, 0x2, 0x0, 0x8de3, 0x200, 0x0, 0xd7, 0x9, 0x4478, 0x1, 0x2, 0x6, 0x9, 0x80, 0x0, 0x0, 0x43, 0x10000, 0x1000, 0x2, 0x2, 0x4, 0x1b9e, 0x1ff, 0x9, 0x2, 0x4, 0x7, 0xfffffff8, 0x6, 0x80000000, 0x1, 0x8, 0x7, 0x9, 0x1]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x79f668d80977b7a4}, @TCA_TBF_PRATE64={0xc, 0x5, 0x61bbc84b4057e7c}, @TCA_TBF_PBURST={0x8, 0x7, 0xccd}, @TCA_TBF_RATE64={0xc, 0x4, 0x96ee176629ea8ddf}]}}]}, 0x460}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="84000000020601010000007e00000000010000002c0007800800fd40fffffffc080006400000000008001240000000070800124000000004050007000c0000003000078008060000000000000500070001c4be727d6106161c00000000080000000900020073796fecd0fd6fb5187a3200000000054c6ba3344c50bdcdbea45128cfacbd19e2e424a885d4af3f8cadfd34294789f7e2fc46c8f579970dcf98d9f47d90b2cdc4d4dcbe8347a5594afbc83922d5b00777aefe3526ed39f33c2423595b8865b9ca69c9c1bbc11cf99b64132d22b7d85fe0d7dace0b01366260afdf1b7bbd40efea4326f9d4a4d665192ad8c3cbb0fb7e21a07d158c1d30f0afb87f1c7257ccaabcde4ef7c8511a85620c9ab79af37ba9a6c5273c699e0ec76024b3d7ad417dda938a9a1bbc68eb03a93ea3ab0457d4f12676f04e5fda62c9b8"], 0x84}}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r5, 0x12, 0x0, 0x1ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)}, 0x40) 23.761925827s ago: executing program 2 (id=7360): socket$pppl2tp(0x18, 0x1, 0x1) socket(0xd3da6b0dbd1681ea, 0xa, 0xfff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01020000010000ecffff060026"], 0x4c}, 0x8, 0x3000000000002}, 0x0) r0 = socket(0x6, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 23.699038517s ago: executing program 0 (id=7361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x9, 0x5, {{0x10, 0x4, 0x0, 0x3f, 0x40, 0x66, 0x0, 0x7, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@rr={0x7, 0x2b, 0x7e, [@remote, @empty, @remote, @multicast2, @multicast1, @remote, @local, @local, @local, @loopback]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 23.610727931s ago: executing program 4 (id=7362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x1, 0x1, {0xa, 0x4e22, 0x2, @mcast1, 0xf928}}}, 0x3a) 23.576196141s ago: executing program 3 (id=7363): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10) sendmsg(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="ff32dd", 0x3}], 0x1}, 0x40) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x2, [@struct={0x3, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, @enum={0x3, 0x7, 0x0, 0x6, 0x4, [{0x10, 0x5}, {0xa, 0x2}, {0x6, 0x9da9}, {0x3, 0x7fff}, {0x0, 0xf2a}, {0xb, 0x2}, {0xb, 0x6}]}, @union={0xf, 0x2, 0x0, 0x5, 0x1, 0x4, [{0xb, 0x1, 0x8}, {0x7, 0x4, 0x1b}]}]}}, 0x0, 0x8e, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x20, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x168, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x52}}, {0x8, 0xb, 0x800}}, {@pci={{0x2}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40e}}]}, 0x168}, 0x1, 0x0, 0x0, 0xc080}, 0x400d0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28010000000000000100c39779aa32773e32e716acedf2000001", @ANYRESOCT=0x0], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r12 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r12, 0x6a, 0x2, 0x0, &(0x7f0000000300)) r13 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) 23.543008816s ago: executing program 2 (id=7364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x110}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x401, @default, @netrom={'nr', 0x0}, 0x7, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="110000000400000004000000ff00000004000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000eafce8343ac08a0000000000bca2cc195d9e0c2c8699832d20e5d6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 23.292512602s ago: executing program 0 (id=7366): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x9, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) 23.226635072s ago: executing program 2 (id=7368): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x900, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x44000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23.062841378s ago: executing program 0 (id=7369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x8b) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, &(0x7f0000000040)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x7) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) 22.851366321s ago: executing program 2 (id=7370): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xfffffff9}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) 22.564553877s ago: executing program 3 (id=7371): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000005c0)={0xc73, 0x9, 0x5d0, 0x6, 0x400}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmmsg$inet(r1, &(0x7f0000004500)=[{{&(0x7f0000000480)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000500)="8ef14b", 0x3}, {&(0x7f0000000600)="d1910b8c649ed4b8579c6284995f2e54ff6d95ffd6de286fa6fedbdcf0193b02cc4b51cccfc22fa20933030b482593ce59ae8ca7552ca2d68bb87178bcae88be90630cbca1edc6af98f544bde836b85e1691777375b0c8861355f20ebfdd81b8efdd8683e48f336c14b2f5418c664661e62041f4fce5e5e311ea2b406e2cd8063abb1ed253466b50f8621083c242c30075b40d75d211273de86250b3fb88bce6327e3eb3f06df9b5c8e65a7a9b1c8da91b1d65dd87a7e543eaa850ea6a767a150fedc78ac513e3b03aadd8dee4d6d73fdc84f9fdbeaf48f45266b565546582", 0xdf}, {&(0x7f0000000540)="88734a39d79a32a6e68f91700a102b26cc5aaf03dbcef08643631c5ba2d2da4551caf36b7a010b415d5bb3813c29568c3db65ec3237f4f48fcb8a9c4bc1096a58e4f5f4f91f9ab58bf75cb3218a8f1d1eaed1f7d71cc6777af8692853b3f9d53458bdce1d1b6b6888d09e7e70ac2672c", 0x70}, {&(0x7f0000000700)="a01293298bc2de986561761b88dcb8cb360ea00a78ac435530a2b3", 0x1b}], 0x4, &(0x7f0000000780)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x15, 0x1, 0x6, [{@local, 0xb226b3ea}, {@multicast2, 0x2a2a}, {@multicast1, 0x8}, {@rand_addr=0x64010102}, {@empty, 0x2}, {@empty, 0x9}]}, @ssrr={0x89, 0x17, 0x28, [@broadcast, @private=0xa010101, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x37}]}, @end, @lsrr={0x83, 0x7, 0xfe, [@empty]}, @lsrr={0x83, 0x2b, 0xaa, [@loopback, @remote, @multicast2, @multicast2, @remote, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast]}, @lsrr={0x83, 0x13, 0x22, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000840)="07c1078c33589d0d5d544e56ba447ad8e228c6dc5372b805efef596a308c0f5c3dc6b960e4b087b296f4a6b49fe5559d5c90336efe90287378dd1ebf1e9ca3ed56d6599a72e1ded04f1c63fc069100005a01aadabc4df96e672e25bdb6209c5781b7e27370eaf09bf8ab69d1c4a6654320070e825b0bb7fc4215edbd54321467253c506c525aaa1029163f", 0x8b}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="e2ba919b15b9e16c7b4371ed7f69c4fed4368717c19ae0b5806d19e9ec179d1339316e2910f0c01f18274bc1369c6b3ff48979b8118d1eb173a4d719fdd81ae2d959a85ec1067e5af277fcd5e46a8ed557868ef51a7d449facbf8cbf3248b190b5ef6e454002ba5d27a88fd3f5ac5f745763b27eeb7750ca4462e40dee94165960116802e134a6c30838ac3db0158d9ff2", 0x91}, {&(0x7f00000019c0)="b4f4b82b60ab55a638bd21370dc0f9d7f8061f196af04f620e16b9ae1d230e03668f45de53b79cc56b766ecd73e147a962bd7118a9b494289638dc20c828374fb7e6ac09bd03409bb0d8f56e35", 0x4d}], 0x4, &(0x7f0000001b80)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xb4, 0x3, 0xb, [{@multicast1, 0x7}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0xa0}}, {{&(0x7f0000001c40)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000001c80)="3695cc50779c715a7b151762d1c6c212e6afd55eb42562a7cd61ef771803fff01cc705c58f1f85a5ac20dfe2cef07c7fc493113fa471219e7e71d200206cd4861f7a122a59420302c3fddf77057b86c95985724cc5d94ff24c1b1530c80ffec41d46cf3d39f01464f67b92d5ddfe23f8482443b7620be05278b84902eb9ab0381e5b9711c78c941752086c30945c3e8cea140f452707d8873b9fb92303c8e8dddbd4294528f7befd8c2729095e64fb31549f03e37e294a5be35a25a0ac54e5045f21a0f85066e2c9ff9efb20acdb4daf0d71c3eb49ae7e4e5b51420142c79ae71759e67474a8901ac88a9728e2a3b4741b994664513f4d9a165ac880a7d8a32c46532aa75e18d5adde53eb2c5409ae80580e8b3a850e6c410fbf95fbe24f979aca0cf665bb212cd128ddd1676874de493e60b3c4018363b9cac0d9aa9994875fc76259a3b6491ce4ba35ad81e70a99a919d151185a01329caa09db6008a7b3ccddd2a400e4f5238f43f12094941b333a38357288cf54bd9f29a7c7da7be0487d49f6e6f946657499430d5d72648439c1864ae0a38eb38df716148d7a9d73c9ad6122a0b626ef4404db4c4fa1d706af9240d91990e0d4ddac72af9182553daf465a2a28b51c72e0fb268b5348550e8dd60c9b92a5fe729e6df1908698d37992180dc2e2da558ba91b4d212d625a4cadc2b1e72a7a80f44940f207a4993f060abf61a5b75f46aa417318f4fee4ba6d87b03f9fb22c58d9637ff1d49f1c245dde62220b4a79bffc71b764f6966b466758dac690637be7d3822823726dbd7e17240121d53e11caf237001031befeb99d43a2ad4ef7484015718923ddccb3efccb2d03ee521c9b4cb5baeb2c26cad26cbba997cb3315825479df0f033693997940b4f023efa01a855fa6abf088995cbf8600c105b358a6b6704f30b150d7ddf380a593b997439e692b551f5f68b93f5243c2233d36e658f75e1901ff07d18b1d5cbccd90f165380f539d32805846e817935f86b9de18ac1fdc559b36f8d3ee20646ab31a3ad59329389f1765dc01bf512057c2c1c080ae22d12e4ba0745312b43298897da2d53713ff2d5671c1103fe3b385f5f65893688900625ce3e94aa399f72e7d2df9803933aa3631dedf54cf7710decd3e5f694273d4acd08a7f8d933e04f6f34ad05d82377ed4ab2bb9a5061338c3f9a68398f51178c4d5bd9b265d75dc989f5d8f6556116c350dd0f0a20bc9e4c0bdec91fa7d7210c6b6d48be4efdbe6584a57218ed795218c5cec29bd2ad76dd4ab0b603fb840b0ec42a99b223295258276e69feecd4874cbf28b897f58879e2242a8db1cf3b182f605bd156943aa8f01af5d7d4525ab204258240851133e41004014b98e6a83e94627bf0e0004fcaf67fee519728f03696086610e1f2c21cc7cdf511473c0cbf8ba00604d75d8fbebf679ecdd32efa2631ee310aa81c38dad66a61b06b0d284fec6485f89e6740ad82928a871ba5a8698b2cb12287eab9c6767e836585977531a894f3a485c8c58a8a1aafb6bf4b1fd15898ee360a5226e0a300575e2786cc6cb7e0525755d9566bf2eee552c77f39928ba54159bd6cd35f0e0829a8044e2fc495b4247c2b2e7d9b006e162943dea348d8716104b305b555982c1509ed00c0fc7a3c383c7f1aead277ff1feec7cdedbc0b1ef6e9986cc06df4067666b23f0145106f9cf56b86c13b4920094b56669a96c7e222c77f7d5ff4426ccd272ff99af7a3f559ec791da63f341242fc4d413ba3a8546a0486abf8b0d606db23db0290f42aa11e748ec02bcd7503676a4b2dcec21181979297cd82cbe1f33b0d3262a3dcb751dfae225af204a7af7a7804eb036123146a0a6720e076a6ed306b12dca36ec33f9b3f6169f0ff72a72231beb72bff231ef1b3c07bdacb06b736b7c0a27932b6139f3468359650693adb84b298c5be421ffc635a53148ecb51536e88500f3fb85ae3d604f70c4547e0e8c1ab9789d227b3a11ac822a08b88d4530dbd6b1cee15e1195adde6e504c5ccd91ae11178ae472df8d28ce04d76121267597d19e57a0966f7a94f6fc98af7eade6cbc1355c495ed7ea61528250d4627ea28f22d87a702342ae1157c3bc579e7dee614a94cb3bd72b8f5bf27948389e5c946f7d24c4968d3ee1d27b0fd50d84570d90faf89dcb3535ab56917390df1a09018398646fd236c53ed26d17672e6d7ca0f608d15a8023a9265c0563f0308a9fb135ead2a98c39e054a0ab7ead6f6943ec794021239772a4f7c312486b7cd68b9696dcb77b69f2a23c9114f3a9a33a58409e6bbc9ab21e71d4851a0106cbacaeb4692dae8b123c8179bca9a01962155d96e1431ba9b6c697c6ac0bdbd82c4ca456d5921c932661b5827e28ead2aa5378a1359dc3c7587041724ad04c789051c2b00a1ad7d308e99844dabe34c4064f7652fd8b7ab701f4bc0b51622cfd7922092e2baecd8ea78ba6aaad593c3267c5d502d07967660196438dee6cad2d4f18ef0cce7d5a5c7eff5ae370fa9f90b82a9d39113e58e58685fbc8689e81df2564eac221811f49a4c5048c63c2b52832efbebe77fd41d0ddf4633d26b86c6b8deb4fffa09fa85b99e5b260b83669573164ba549549950d2ec2ea28bf60368c1ddd1b819ca24f73cdb959ede3d5df1fbba34d204973b8e883836bcba96931b1b8d6eb3b76c899780fd009540a344a5b81c3543f032953c0bc68dd27fbcab11a78351c1eb4bb7a07ddb07a8ded4b0bd302ae6fc04248420ed5158ce18a2bc5ab3e1dcef4bb6d30ff38827397f59435430c4e0a1de99666cc04f8bfddea0c0721791b866ed7fe8f763cb0322c4ac226816b87ae23e7a44be009e19d433cd751e4bfad06a0d9923858c4133be16c5cccf97a0caa9d2dd6083ecf4e7c83a185c1f0b1dea0250aaf95f98be60080bf5537215dd34ba68366ed58a88caf75dee613999ab1924de15067c1f410927484ea64b3fa0bd9b14a456ad432b5650e53217e91f58df919d1ba0e3b8a5da4bca3bf35340074dabc7c85400aa90364b08f5776be39c4b4d0c8bde39b1f48b24e28c0d0602f3587e1344823199ba8f665696e247ad611848a19d5c2d00a9cbd8dd36a681073bc11955ee5ef117a72b84da025a688b98e35069d09b3ac0177421e068dc568d5966e5d5067f7e31dba6708b206ab00efbaf2734b981188f886727c879a256936d6b267a1f3a8463cd486ee3826aa52de1fee83b5f4476251bf641b7c17aa0c38385e4c3ead5980c9159576b1a8c55d4b4cccb4a805b9012867935741e649c83038219db07556a7fe37f161e2ec52b05356f1775540f584e45f275ccf1b188b5f6fb462c748c6695837ae80d13217a3cce918983e9491d9d39d98e608f2c226cc82c70a582aaf84c186161d5b359e6aa8eb36fc4d8bdef4cfbd8fc873448fa99df8733cce0a9ec19f7275d8f6953c5e4b6f252880eca3bd0f5e19be9bc2c555ef907619c3bee2f1a2f4c56cee09f685ed9f3dbe379e59bcdad4609c237f35623bf6be8e8a55e2372f7d32fb77483f8e4fc0d1d525f9eff7c3171e713cfc522cc443ea05acaf58cde1d5be6e3738b49dae42e567232c0b75f6a75264293409bcf13dd030cbf7f31c87dea0fe4741c2e819f73d19a96fac92134cbd9b1ae6ebc1ab556aa64b1ec1be09e8358d634907c2e3b697099c4ffb935830644c34197dbe38017ae92ba130ff6671a2642420ffc83866009df4ff919a8c94290addae2b91b07786467e36d3511850114a6bdae384057cb7c1a9ee242b7ac206c5728256ec3de491ba632ae487717f236eae96de1a5b2036548d25cc92e221e70ac36b59366a25206f6debb0d672646c7ce00a64bae3d8ba47d3d1ea7d4f57a1792c233df6fab84bba4377a902b03f84fff39a2d7f26f0c7774c6de1017fe1cb6bcc47a86ec3c7b2061d49137ba0c98c77df5177384e48cdf3db6f7f636a9f5381d8af593859bfe8444d023d75e8aef4f289dfccb33b36446d3a7fa40493c9fca77c0caaa88e78548d819152ba4c8a456f91b5e7db8c9dc8a64e6c97ca447c54bd2788b23ea9962e390d34862867df1e9c72ee6c4bce268530dd631392aeda9d1e7bce2d380096a23f4b5e806aa0120adaa3930b66de8d2c3e4c2737fbb8bba75320b59323bc370a7847008622637c33f9b1c532ba433f6bf70b58bfc8d6a8cbf279b7123d7a1f92fdad439f24da80b2c83cdb0f161f72cd5f040fb584640b5a656fa231214daae302727366bbf365650caeba8dd6e221b48946227c78b03ff7f8347343cb67aa2d8571db2f7073f5bab200f8a5f3ddf8e032e2b10612d9ca78183a94b756c8b46291b2ce512258200c418bcf2536c7977e1fd2a6bf084a594b1871cf3208b9f9b4cec32ca6d371c6b563efbb9aea69504d8a87618915d15afb725be3e2bc1f66a37555a72a899002ea9bf5dc1650819f0d415508aa8cdfca3347d07c9b5d799e574138d08f9b714fc8d4504ea6473f3da04baef7f0a3a76dad15c18f64a6bc4933774d1de531d3fe390aac388886ea5330a6b83293ee52c7b868032f737abbce1887984c48264a790cf023698f4a937abd97fd4ede1bb8f38b8076686ccf9da5b93b85d760ddd48555b630533646ae057c8cf0969ed18dfa3ad78f05a6cbcb83ec17b42aa9edf7e39e968f028daeebae0eaabb4e7e01a26b007e2d5a2f0018fe685e1ea3977887363758229f5fab3f72fc3663ad3ba07a09a92864c9c61fff0341b1978ba96f37df493eb2af3e68f97161012ca42e26b53d3271bb881a5ea21b566ad39aed39ef6dc2dad3c32c3104dd6a8ee4c50a9518f384c33b4f04601069d35a53928e933bc4bcbd179d3fd683ce0b91b0ecd513556df744e10ae724cf93cb21ecf1b23d2deccd4edbb96ae14484ff71d3e4e839be38bb50835e77222d189c4ddb4e6b0bbd71542b466f6b419140fef5faabdef6f0d78788be40a18fd145ba08f68da98e3dc3ce2f2371df4b4cc9d40562cdd329898be8867bd376f27db87dc39d86c9024db1f3ec9cc1bfe9fb277ae77063f38086c3e6085da14007ce8e9babfe5a63488255334d492c704e82e65d6c5dd4380b83d19ba70a63c0ad4612856ea9ca592f05df0647e2f2a0a831b39c97d403f469af2fc77da2066aa6032706d2ec5c24a22c7fff337a617be857925e492bd9bdb6f457860d7f9b29e4e5676f1d4d45f752c5253510925085cbf78e89b601029ad8fc76ed3e7c59a5e9c0488ccebe67b046ea1ad1e6f07be550851d1e428376179398296f2922ce657a57e80a45190e6e783c98c4a13ca9bef8b13a69f15685cb3ac5f0b924a7e1cce4eff88227c68a475046c9abe7c76497d0cd819168f0e72140fbead98fbe88189b9470411113480fb717b28684bef46a6145ae5f260621651bca0619f70c104c7ba813bf1333c88a3e0993b40971dcfbd3827c1698eadc762c3c1dd5a9a5b5fc0de43c21d343cea21c80e997dbfa40aa7ea2c2af860548abd72930b6955d89ce6c2c1ddb40b27df1ec5d4dc656803fb5464401c1c2115a6dc71d2cee1c8da96194e6bff07cecb35234ed2bbfa8accf365967e1add2ca78e6616c6e4da9da586074df49402131ba71d2a835b5afddbac29f6b2159b972ec9e75842c9c9d6f1ada977bdb77e1ed60aff6f15af442ec4eff7a57b266ef1a13a3877bb15bffe03109cf628484bd83d529070f82adc0c1d7c850a2fb8a43149badacbe3e0e9ce2be99577488a37e5ab3145f3db929b54919795d2083e214f5fb81bdefc31319e326268779d1f", 0x1000}, {&(0x7f0000002c80)="13d228d1e3160666751edbca709b9cf12bf8b05911c725a236cdd293c850d16946ab3e00a3d091b74f138d7c83184a116e82b98696003af7133182710864d0cde4af9891d1d4", 0x46}, {&(0x7f0000002d00)="3b993a7054ba4a60e88b0435613f7c04773c4efbdc02c8492e02c507a3748fdf7f47b341c5e4124bee60688d2ca1c6d6c7c7bfd50579d1397fc4072b630ac7b00a2386bd11425361411027fb357b63860c5b672043615979ebae5735016feeb032239ca24a3cb9b17945e776873de1633e4e1c6dfa425017668acb0d1ee50660d015dfc4a95c02ebe258dfcb12a2a67c188a93fba38bac4e287b780150f08d80f1e6482db26e47246ac88acd25c73be93c1452ac8fb236473be56b4644fb3922ee7b1d3c342c03fabf3134642d952334c31d63edec0340", 0xd7}], 0x3, &(0x7f0000002f00)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x3e, 0x3, 0x7, [{@empty, 0x6}]}, @lsrr={0x83, 0x17, 0xa3, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x14dc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010101}}}], 0xc8}}, {{&(0x7f0000003000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000004140)=[{&(0x7f0000003040)="bf3bbbf02f190061e1bcfb816f26292ebcb5b3148960ec831b96441ca6438967aba434eb69f6e4da103f40f8d6af80b75380e654c92dded5a2a9bdc45f4949253845485650c72415ac87aab9c9a62a6fa821bb1b4876e2555aa91bcdf2306d19f2e560", 0x63}, {&(0x7f00000030c0)="aefec74f868d6df0818d3dc63663421518ebf0691f39d71e1c5768c992d8352d44aeb037d9878f0b20c00f695376e6a2c317b68318d76030b349b7539c8a528258795ac976da65dd7d1684cd57b2b1e434fabdf94f7f19ce8c46f435", 0x5c}, {&(0x7f0000003140)="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", 0x1000}], 0x3, &(0x7f0000004600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf1}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@generic={0x89, 0x12, "4ebe7b95b6aef45ae7a81f050f0cca3e"}, @ssrr={0x89, 0xb, 0x59, [@private=0xa010102, @empty]}, @cipso={0x86, 0xa, 0x3, [{0x5, 0x4, "aec7"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0xb, [{@multicast1, 0x8001}, {@broadcast, 0x5}, {@multicast2, 0x6}, {@empty, 0x7f}, {@empty, 0x1}, {@broadcast, 0x101}, {@multicast2, 0x80}]}, @rr={0x7, 0x23, 0x4, [@multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3c}, @local, @rand_addr=0x64010100, @private=0xa010102, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @generic={0x0, 0xd, "4145db9e343555489cf697"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd71}}, @ip_retopts={{0xac, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0x69, [@private=0xa010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100, @local, @remote]}, @rr={0x7, 0xb, 0xa7, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0xdd, [@empty, @multicast2, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @cipso={0x86, 0x33, 0x3, [{0x0, 0x2}, {0x2, 0xa, "56970b5bdc643588"}, {0x6, 0x3, '\a'}, {0x6, 0xe, "42482441dfc3f4692c41c307"}, {0x2, 0x10, "ab65756c5ab69d9cd341cbc18b13"}]}, @timestamp_addr={0x44, 0x4, 0xb9, 0x1, 0x4}, @lsrr={0x83, 0xf, 0xa8, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @local}}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x26, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ssrr={0x89, 0x1b, 0x1f, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x36}, @local, @loopback, @empty]}, @lsrr={0x83, 0x23, 0xf8, [@private=0xa010102, @rand_addr=0x64010101, @remote, @multicast1, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp_prespec={0x44, 0x4c, 0x14, 0x3, 0x0, [{@multicast2, 0x7ff}, {@rand_addr=0x64010100, 0xd}, {@multicast1, 0x4}, {@local, 0x9}, {@rand_addr=0x64010102, 0x7}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9cb}, {@broadcast, 0xff}]}, @generic={0x94, 0x5, "fbccd5"}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0xf, 0x3, [{0x2, 0x2}, {0x5, 0x7, "b49cc0e526"}]}, @noop, @end, @ssrr={0x89, 0xf, 0x55, [@private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @noop]}}}], 0x2e0}}], 0x4, 0x40001) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1c}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x30}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc8c4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x8850}, 0x48d0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r11, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) r12 = openat$cgroup_int(r10, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x9) socket$packet(0x11, 0x3, 0x300) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000018cb9c68000100a6bd7000fcffff7f00000000030000000b0000001800088014000500fc0200"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 21.28292163s ago: executing program 3 (id=7372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600000000000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x50) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x9, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x4}, @enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x34}, {0x4, 0x4}, {0x4, 0x4}]}, @struct={0x3, 0x9, 0x0, 0x4, 0x1, 0x1, [{0x6, 0x5, 0xffff}, {0x3, 0x1, 0xfffffffc}, {0xc, 0x1, 0x6}, {0xa, 0x4, 0x1}, {0x4, 0x3, 0x1}, {0x3, 0x5, 0x2}, {0x0, 0x4, 0x3}, {0x8, 0x2, 0xf0e}, {0x10, 0x0, 0x4}]}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x9}, {0xc}, {0xb, 0x93}, {0x1}]}]}, {0x0, [0x0, 0x30, 0x8731bdb347d150a0, 0x2e, 0x61, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/114, 0xf9, 0x72, 0x0, 0x7fff}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x92d, '\x00', r4, r5, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 16.61079175s ago: executing program 1 (id=7386): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000140)=@default_ibss_ssid, 0xffffffffffffff06, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)={0x1304, 0x2, 0x3, 0x3, 0x70bd2a, 0x25dfdbfb, {0x1}, [@generic="e438a401aadd3ebf0da8ce7b509930d93064eb100c6202392bae0b07ab0cce4bfa962d37c19ab34c0f1ce405d8ebf6e2a0aaed76ddb037f729945339ce15808b4b9559c1e74cc05587ce2c6db36158a5c3764d87b33d7dbe2187f6ff1380eb5f21055236f901822dd23624bcdbd5de9ee91b47345172d3d122345ae186a94d22e19072f55fdc27ceb29965ed33f3cf7c3b6072d75306f99a199b516a6da6d2aa721065a59dde3c19d29c82be7aee95f3a6f6f3cc45a4485c", @generic="958d75d9feca50480d0a09d067b748e7db76df125ff41b21d79934757271877bba7acd0845a5d4b64f53bf6f8e3eea6ce7783b19fc1d5b0885ecb4e552b5755e3de956de237aa2b30f5bd3b3ebb364d8908a0e3f4e6a00d22907c273930f28c56a06cef419bb0c3e6c9a7c11c874e37a161476b36fbb316afc576527e3ac7b7083e9cbda", @nested={0x18, 0xf2, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xb8, 0x0, 0x0, @u64=0x76}]}, @typed={0x4, 0x101}, @generic="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", @generic="cbb42e11b317aef051f26ddd83466ab0effea453ff36e370d2df0d0b8f87cff344613d0e90a5341a38b7bfcce616035189d9302290063cbf268040e78154a7b6c25c8aa078cb3de2a0beac7d85c928bb0c6cd572cfe0dca1c4678db7a12b72ce0b924af52bc59ec28e0d5e4a47f2b064c2e1581db4430ab9ccdfa50c71993a8d551b2c3658496005", @generic="efa2250f77013079ab570c4caba5d457d9c237506eee0f404309aefff33b848b48a89b9f44029600c89700d06ea2de4c51113b4068f47ca95fa42549132676c5ed780aa9c47d0f0dea5f7803e23db3bce1d34d3f7d6027c6b2ba83b022efdbdf750d6aa55cd861f80ead0eb34ffb0aa444b3991e141b8c4e2acd12a5e31e42ec2311ef582ebdd206083a671f4018a88eac085b033cd8b2d59ba028ce433c1ee9afca49e1888638ea627b7fdc91d62a845f8c92d6aa4cd759f944b71ec1abf9489ed89f0ab40b00cccd6abf86a1c845d6ba4f2c9c7522660edb297bd10549c56132e8c987633abf1a2194e39a275d3c18490f45cb941193eb53", @typed={0xc, 0x37, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xab, 0x0, 0x0, @ipv4=@loopback}]}, 0x1304}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="092e271782f31096c49962d8f18b76aa1ccd2c2f9744d524030f0f6cc11f074bb3ae6665d793593a80056ab113dfe005d5f563120737b07ba8eb15257c9759b849559bc36974bc3a15f01f44314d6ea19c0dec8295724750916296364b", 0x5d) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_80211_inject_frame(0x0, 0x0, 0x36) 16.086633337s ago: executing program 1 (id=7387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f000000ab00)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bind$pptp(r2, &(0x7f000000ae00)={0x18, 0x2, {0x1, @local}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) 16.044079049s ago: executing program 1 (id=7388): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x9, 0x1, 0x4}, 0x10) getsockopt$inet_buf(r2, 0x0, 0x50, 0x0, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x9, 0x1, 0x4}, 0x10) (async) getsockopt$inet_buf(r2, 0x0, 0x50, 0x0, &(0x7f0000000100)) (async) 15.938840867s ago: executing program 1 (id=7389): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x10, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc0000000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x885b}}, @ringbuf_query, @map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000200)='GPL\x00', 0xffffffff, 0xa4, &(0x7f0000000300)=""/164, 0x41000, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001540)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f00000010000000000000", @ANYRES32, @ANYBLOB="b446"], 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x4c}, {0x80000006}]}, 0x10) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e00010100000000000000000080"], 0x24}], 0x1}, 0x0) 15.937968851s ago: executing program 1 (id=7390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'virt_wifi0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@func={0x8, 0x0, 0x0, 0xc, 0x3}, @volatile={0xd}]}, {0x0, [0x2e, 0x61, 0x5f, 0x2e, 0x2e, 0x0, 0x61, 0x0, 0x5f, 0xa3]}}, &(0x7f00000009c0)=""/4096, 0x3c, 0x1000, 0x0, 0xffffffff, 0x10000}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x13, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0xb5baeec376745372, 0x4, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @cb_func={0x18, 0x9}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x94, &(0x7f0000000300)=""/148, 0x41100, 0x10, '\x00', r5, @fallback=0x25, r6, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x2c, 0x10, &(0x7f0000000580)={0x5, 0x0, 0x0, 0x3}, 0x10, r8, r0, 0x7, 0x0, &(0x7f00000005c0)=[{0x3, 0x4, 0x4, 0x1}, {0x4, 0x1, 0x8, 0x9}, {0x2, 0x5, 0x1, 0xe}, {0x0, 0x2, 0x6, 0x4}, {0x5, 0x5, 0x3, 0x5}, {0x5, 0x2, 0xc, 0x4}, {0x0, 0x3, 0x7, 0x5}], 0x10, 0x5}, 0x94) 15.064460217s ago: executing program 1 (id=7391): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6c1, 0x35, 0x10}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013"], 0x138}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r5, &(0x7f0000000780)='pW', 0x2, 0x24000011, 0x0, 0x0) (async) sendto(r5, &(0x7f0000000780)='pW', 0x2, 0x24000011, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r6, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) sendto$inet(r5, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800d70000000000200000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001809c40005020000fffd000880000002d58838068b91000000"], 0x4e) 8.123920476s ago: executing program 32 (id=7362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x1, 0x1, {0xa, 0x4e22, 0x2, @mcast1, 0xf928}}}, 0x3a) 7.099970777s ago: executing program 33 (id=7369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x8b) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, &(0x7f0000000040)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x7) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) 7.052487038s ago: executing program 34 (id=7370): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xfffffff9}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) 6.028416908s ago: executing program 35 (id=7372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600000000000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x50) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x9, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x4}, @enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x34}, {0x4, 0x4}, {0x4, 0x4}]}, @struct={0x3, 0x9, 0x0, 0x4, 0x1, 0x1, [{0x6, 0x5, 0xffff}, {0x3, 0x1, 0xfffffffc}, {0xc, 0x1, 0x6}, {0xa, 0x4, 0x1}, {0x4, 0x3, 0x1}, {0x3, 0x5, 0x2}, {0x0, 0x4, 0x3}, {0x8, 0x2, 0xf0e}, {0x10, 0x0, 0x4}]}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x9}, {0xc}, {0xb, 0x93}, {0x1}]}]}, {0x0, [0x0, 0x30, 0x8731bdb347d150a0, 0x2e, 0x61, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/114, 0xf9, 0x72, 0x0, 0x7fff}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x92d, '\x00', r4, r5, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 36 (id=7391): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6c1, 0x35, 0x10}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013"], 0x138}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r5, &(0x7f0000000780)='pW', 0x2, 0x24000011, 0x0, 0x0) (async) sendto(r5, &(0x7f0000000780)='pW', 0x2, 0x24000011, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r6, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) sendto$inet(r5, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800d70000000000200000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001809c40005020000fffd000880000002d58838068b91000000"], 0x4e) kernel console output (not intermixed with test programs): uous mode [ 655.529770][T26045] veth1_macvtap: entered promiscuous mode [ 655.556407][T26045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.573689][T26045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.618589][T26351] veth7: entered allmulticast mode [ 655.632002][ T7646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.664293][ T7646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.685926][ T7646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.733984][ T7646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.908509][T11516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.939162][T11516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.040766][T16287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.059394][T16287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.083177][T26365] sctp: [Deprecated]: syz.0.5875 (pid 26365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 656.083177][T26365] Use struct sctp_sack_info instead [ 656.240801][T26367] netlink: 'syz.3.5876': attribute type 4 has an invalid length. [ 656.505299][T26380] netlink: 'syz.4.5879': attribute type 1 has an invalid length. [ 656.556016][T26380] netlink: 'syz.4.5879': attribute type 3 has an invalid length. [ 656.563829][T26380] NCSI netlink: No device for ifindex 813332851 [ 656.677740][T26388] wg1: left allmulticast mode [ 657.280408][T26425] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 657.486882][ T5151] Bluetooth: hci1: command tx timeout [ 658.048087][T26457] tipc: Started in network mode [ 658.053028][T26457] tipc: Node identity ac14140f, cluster identity 4711 [ 658.061491][T26457] tipc: New replicast peer: 255.255.255.255 [ 658.070500][T26457] tipc: Enabled bearer , priority 10 [ 658.143062][T26457] __nla_validate_parse: 10 callbacks suppressed [ 658.143099][T26457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5905'. [ 658.160223][T26457] block nbd5: Unsupported socket: should be TCP or UNIX. [ 658.207096][T26461] nbd: must specify at least one socket [ 658.213523][T26465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5908'. [ 658.236841][T26463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5906'. [ 658.402316][T26470] openvswitch: netlink: EtherType 50a is less than min 600 [ 658.441494][T26470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5910'. [ 658.798497][T26483] atomic_op ffff888027f95998 conn xmit_atomic 0000000000000000 [ 658.811227][T26483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5914'. [ 658.839181][T26481] xt_ecn: cannot match TCP bits for non-tcp packets [ 658.901270][T26486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5911'. [ 659.048192][T26493] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5917'. [ 659.067581][T26497] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5916'. [ 659.083513][T26494] wg1 speed is unknown, defaulting to 1000 [ 659.104001][T26488] netlink: 'syz.3.5916': attribute type 21 has an invalid length. [ 659.114705][T26488] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5916'. [ 659.140208][T26493] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5917'. [ 659.186622][ T43] tipc: Node number set to 2886997007 [ 659.188478][T26493] TC_ACT_REPEAT abuse ? [ 659.532301][T26507] bond16: entered promiscuous mode [ 659.730371][T26521] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 659.770512][T26520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.247287][T26539] netlink: 'syz.3.5934': attribute type 4 has an invalid length. [ 660.482098][T26541] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.677667][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 660.698221][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 660.711719][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 660.721829][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 660.733139][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 660.813364][T26549] wg1 speed is unknown, defaulting to 1000 [ 660.999498][T26564] pim6reg1: entered promiscuous mode [ 661.009782][T26564] pim6reg1: entered allmulticast mode [ 661.220826][T26549] chnl_net:caif_netlink_parms(): no params data found [ 661.472153][T26549] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.495864][T26549] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.511569][T26549] bridge_slave_0: entered allmulticast mode [ 661.531541][T26549] bridge_slave_0: entered promiscuous mode [ 661.563556][T26587] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 661.594001][T26549] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.616578][T26549] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.631909][T26549] bridge_slave_1: entered allmulticast mode [ 661.642210][T26549] bridge_slave_1: entered promiscuous mode [ 661.851325][T26596] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 661.871290][T26549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.910191][T26549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.964935][ T36] wlan0: Trigger new scan to find an IBSS to join [ 662.056541][T26549] team0: Port device team_slave_0 added [ 662.068658][T26606] syzkaller0: entered promiscuous mode [ 662.074272][T26606] syzkaller0: entered allmulticast mode [ 662.107886][T26549] team0: Port device team_slave_1 added [ 662.390252][T26549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.403206][T26549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.439560][T26629] openvswitch: netlink: Flow key attribute not present in set flow. [ 662.456687][T26549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.493173][T26549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.511368][T26549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.550553][T26549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.672456][T26631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.728110][T26549] hsr_slave_0: entered promiscuous mode [ 662.745698][T26549] hsr_slave_1: entered promiscuous mode [ 662.762455][T26549] debugfs: 'hsr0' already exists in 'hsr' [ 662.767857][ T5151] Bluetooth: hci4: command tx timeout [ 662.775795][T26549] Cannot create hsr debugfs directory [ 662.879169][T26643] veth0: entered promiscuous mode [ 662.979226][T26643] veth0: left promiscuous mode [ 662.980563][T26651] openvswitch: netlink: Key type 31 is not supported [ 663.069140][T26657] netlink: 'syz.1.5963': attribute type 11 has an invalid length. [ 663.083058][T26659] netlink: 'syz.1.5963': attribute type 11 has an invalid length. [ 663.357184][T26664] __nla_validate_parse: 16 callbacks suppressed [ 663.357206][T26664] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5964'. [ 663.377770][T26664] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5964'. [ 663.388780][T26664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5964'. [ 663.440568][T26549] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.519008][T26549] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.577714][T26549] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.641748][T26549] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.773825][T26549] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 663.784128][T26549] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 663.796370][T26549] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 663.808490][T26549] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 663.884810][T26549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.907793][T26549] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.921096][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.928232][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.944171][T11516] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.951374][T11516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.158241][T26549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.208442][T26549] veth0_vlan: entered promiscuous mode [ 664.223320][T26549] veth1_vlan: entered promiscuous mode [ 664.257007][T26549] veth0_macvtap: entered promiscuous mode [ 664.268675][T26549] veth1_macvtap: entered promiscuous mode [ 664.290144][T26549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.307011][T26549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.323009][T11516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.333767][T11516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.357183][T11516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.382737][T11516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.434148][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.443464][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.472954][T16287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.482876][T16287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.550343][T26676] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:0 [ 664.847870][ T5151] Bluetooth: hci4: command tx timeout [ 666.925905][ T5151] Bluetooth: hci4: command tx timeout [ 666.936159][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.005904][ T5151] Bluetooth: hci4: command tx timeout [ 681.417439][T17935] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 682.045993][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.957447][T26689] syzkaller1: entered promiscuous mode [ 684.964135][T26689] syzkaller1: entered allmulticast mode [ 684.981499][T26686] netlink: 'syz.1.5966': attribute type 4 has an invalid length. [ 685.062371][T26691] lo: entered allmulticast mode [ 685.068826][T26690] lo: left allmulticast mode [ 685.079518][T26694] netlink: 'syz.4.5970': attribute type 4 has an invalid length. [ 685.106339][T26690] netlink: zone id is out of range [ 685.118119][T26694] netlink: 'syz.4.5970': attribute type 4 has an invalid length. [ 685.130069][T26690] netlink: zone id is out of range [ 685.136059][T26690] netlink: zone id is out of range [ 685.141458][T26690] netlink: zone id is out of range [ 685.146752][T26690] netlink: zone id is out of range [ 685.152092][T26690] netlink: zone id is out of range [ 685.157496][T26690] netlink: zone id is out of range [ 685.177334][T26690] netlink: zone id is out of range [ 685.193727][T26690] netlink: zone id is out of range [ 685.207276][T26690] netlink: zone id is out of range [ 685.238244][T26697] syzkaller0: entered promiscuous mode [ 685.243794][T26697] syzkaller0: entered allmulticast mode [ 686.020103][T26747] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5988'. [ 686.034076][T26745] netlink: 'syz.3.5987': attribute type 1 has an invalid length. [ 686.372415][T26765] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5995'. [ 686.520428][ T9376] hid-generic 0005:0002:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 686.970571][T26786] tipc: Enabled bearer , priority 0 [ 686.986387][T26786] syzkaller0: entered promiscuous mode [ 686.991933][T26786] syzkaller0: entered allmulticast mode [ 687.056266][T26786] tipc: Resetting bearer [ 687.076980][T26792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6006'. [ 687.097399][T26785] tipc: Resetting bearer [ 687.130353][T26785] tipc: Disabling bearer [ 687.137969][ T9388] IPVS: starting estimator thread 0... [ 687.237436][T26797] IPVS: using max 24 ests per chain, 57600 per kthread [ 687.450368][T26814] netlink: 'syz.0.6013': attribute type 23 has an invalid length. [ 687.466172][T26806] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.474109][T26806] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.476799][T26815] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6014'. [ 687.495486][T26815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6014'. [ 687.506558][T26815] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6014'. [ 687.516777][T26815] netlink: 'syz.1.6014': attribute type 2 has an invalid length. [ 687.524837][T26816] netlink: 'syz.0.6013': attribute type 4 has an invalid length. [ 687.534389][T26815] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6014'. [ 687.700695][T26806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.728419][T26806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.078952][T11516] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.090849][T11516] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.107852][T11516] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.126750][T11516] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.256550][T26829] netlink: 'syz.2.6019': attribute type 3 has an invalid length. [ 688.457010][T26842] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 688.516714][T26844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6023'. [ 688.576508][T26849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6026'. [ 688.627901][T26851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6026'. [ 689.191227][T26885] netlink: 'syz.3.6032': attribute type 5 has an invalid length. [ 689.409442][T26897] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 689.461635][T26899] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 689.488334][ T30] audit: type=1107 audit(1763756791.654:40): pid=26894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 689.667596][T26914] netlink: 'syz.2.6044': attribute type 4 has an invalid length. [ 689.741088][T26921] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 690.391451][T26961] validate_nla: 2 callbacks suppressed [ 690.391476][T26961] netlink: 'syz.4.6056': attribute type 12 has an invalid length. [ 690.661768][T26974] netlink: 'syz.1.6062': attribute type 29 has an invalid length. [ 690.695051][T26974] netlink: 'syz.1.6062': attribute type 29 has an invalid length. [ 690.769113][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 690.907676][T26989] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 690.967375][T26989] bond5 (unregistering): Released all slaves [ 691.021027][ T1304] net_ratelimit: 18 callbacks suppressed [ 691.021046][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 691.041803][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.172227][T26999] syzkaller0: entered promiscuous mode [ 691.178897][T26999] syzkaller0: entered allmulticast mode [ 692.437853][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 692.459442][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 692.472475][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 692.491168][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.506243][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 693.437092][T16097] syz_tun (unregistering): left allmulticast mode [ 693.551652][T27028] wg1 speed is unknown, defaulting to 1000 [ 693.571621][T27037] __nla_validate_parse: 19 callbacks suppressed [ 693.571642][T27037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6077'. [ 693.851785][T27051] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20000 [ 693.910041][T27057] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6083'. [ 693.944230][T27053] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 693.961901][T27053] bond5 (unregistering): Released all slaves [ 694.257403][T27076] : renamed from veth1_to_bridge [ 694.278527][T27028] chnl_net:caif_netlink_parms(): no params data found [ 694.353176][T27083] netlink: 'syz.0.6089': attribute type 1 has an invalid length. [ 694.364206][T27077] ip6gre1: entered promiscuous mode [ 694.371420][T27077] ip6gre1: entered allmulticast mode [ 694.402836][T11516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.407195][T27077] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.418032][T11516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.427503][ T9380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.464936][ T9386] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 694.544678][T27077] syzkaller0: entered promiscuous mode [ 694.550235][T27077] syzkaller0: entered allmulticast mode [ 694.581890][T27089] tipc: Enabled bearer , priority 0 [ 694.604954][ T5837] Bluetooth: hci5: command tx timeout [ 694.625693][T27093] netlink: 'syz.0.6093': attribute type 1 has an invalid length. [ 694.638755][T27093] netlink: 'syz.0.6093': attribute type 2 has an invalid length. [ 694.878343][T27103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6095'. [ 694.930509][ T5837] block nbd5: Receive control failed (result -107) [ 695.418407][ T9380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.540050][T27028] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.556751][T27028] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.564359][T27028] bridge_slave_0: entered allmulticast mode [ 696.599559][T27028] bridge_slave_0: entered promiscuous mode [ 696.611185][T27028] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.620117][T27028] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.630523][T27028] bridge_slave_1: entered allmulticast mode [ 696.644230][T27028] bridge_slave_1: entered promiscuous mode [ 696.696550][ T5837] Bluetooth: hci5: command tx timeout [ 696.740633][T27127] netlink: 'syz.1.6102': attribute type 3 has an invalid length. [ 696.763174][T27028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.765277][T27128] netlink: 'syz.1.6102': attribute type 3 has an invalid length. [ 696.800509][T27028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.873929][T27135] netlink: 'syz.4.6104': attribute type 83 has an invalid length. [ 696.905871][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6104'. [ 697.092116][T27028] team0: Port device team_slave_0 added [ 697.103317][T27028] team0: Port device team_slave_1 added [ 697.179317][T27145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6107'. [ 697.181257][T27028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.199886][T27028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.226962][T27028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.240356][T27028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.248038][T27028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.276912][T27028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.334003][T27147] netlink: 'syz.0.6108': attribute type 9 has an invalid length. [ 697.400920][T27028] hsr_slave_0: entered promiscuous mode [ 697.409652][T27028] hsr_slave_1: entered promiscuous mode [ 697.416460][T27028] debugfs: 'hsr0' already exists in 'hsr' [ 697.422321][T27028] Cannot create hsr debugfs directory [ 697.482746][T27154] netlink: 'syz.3.6109': attribute type 29 has an invalid length. [ 697.513274][T27154] netlink: 'syz.3.6109': attribute type 29 has an invalid length. [ 697.560817][T27161] netlink: 'syz.0.6112': attribute type 9 has an invalid length. [ 697.571286][T27154] netlink: 'syz.3.6109': attribute type 29 has an invalid length. [ 697.585226][T27154] netlink: 'syz.3.6109': attribute type 29 has an invalid length. [ 697.609520][T27161] syz_tun: entered allmulticast mode [ 697.615846][T27161] Cannot find set identified by id 1 to match [ 697.631546][T27161] dvmrp6: entered allmulticast mode [ 697.638892][T27161] netlink: 'syz.0.6112': attribute type 10 has an invalid length. [ 697.655751][T27161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6112'. [ 697.678836][T27161] dummy0: entered promiscuous mode [ 697.686899][T27161] bridge0: port 3(dummy0) entered blocking state [ 697.693611][T27161] bridge0: port 3(dummy0) entered disabled state [ 697.701695][T27161] dummy0: entered allmulticast mode [ 697.710162][T27161] bridge0: port 3(dummy0) entered blocking state [ 697.717191][T27161] bridge0: port 3(dummy0) entered forwarding state [ 697.738353][T27160] syz_tun: left allmulticast mode [ 697.871086][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6116'. [ 698.052484][T27176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6117'. [ 698.072533][T27028] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.115164][T27028] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.134681][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 698.212687][T27191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6121'. [ 698.254031][T27028] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.293715][T27028] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.460714][T27028] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.481604][T27028] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.662168][T27028] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.674319][T27028] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.765055][ T5837] Bluetooth: hci5: command tx timeout [ 699.326841][T11516] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 700.452262][T27209] syzkaller0: entered promiscuous mode [ 700.457975][T27209] syzkaller0: entered allmulticast mode [ 700.721500][T27233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6134'. [ 700.849428][ T5837] Bluetooth: hci5: command tx timeout [ 702.671210][T27252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6139'. [ 702.809557][T27028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 702.872237][T27257] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 702.886134][T27257] bond1: entered promiscuous mode [ 702.891566][T27257] bond1: entered allmulticast mode [ 702.898500][T27257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 702.910304][T27028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 703.037138][T27275] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 703.046873][T27276] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 703.075749][T27028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 703.095243][T27028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 703.368417][T27297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6149'. [ 703.450385][T27028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.537816][T27028] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.607831][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.615082][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.662370][T11515] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.669713][T11515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.798787][T27317] validate_nla: 1 callbacks suppressed [ 703.798807][T27317] netlink: 'syz.0.6155': attribute type 16 has an invalid length. [ 703.813999][T27317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6155'. [ 703.980815][T27331] netlink: 'syz.0.6159': attribute type 29 has an invalid length. [ 704.150031][T27337] tipc: Enabling of bearer rejected, failed to enable media [ 704.266356][T27343] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 704.387070][T27028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.404185][T27349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6164'. [ 704.498800][T27028] veth0_vlan: entered promiscuous mode [ 704.542781][T27028] veth1_vlan: entered promiscuous mode [ 704.553959][T27354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6165'. [ 704.587576][T27354] xt_hashlimit: max too large, truncated to 1048576 [ 704.632165][T27357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6167'. [ 704.687889][T27028] veth0_macvtap: entered promiscuous mode [ 704.718196][T27028] veth1_macvtap: entered promiscuous mode [ 704.785606][T27028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.818633][T27028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.897708][ T7646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.934318][ T7646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.952593][T27362] syzkaller0: entered promiscuous mode [ 704.959371][T27362] syzkaller0: entered allmulticast mode [ 705.019388][T27366] wg1 speed is unknown, defaulting to 1000 [ 705.050104][ T7646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.061404][T27370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6171'. [ 705.081924][ T7646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.637009][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.675495][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.724658][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 705.843854][T11515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.872286][T11515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.579796][T27438] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6184'. [ 706.646747][T27440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6185'. [ 706.688766][T27440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6185'. [ 707.030765][T27461] netlink: 'syz.3.6190': attribute type 29 has an invalid length. [ 707.039804][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 707.042735][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 707.050906][T27461] netlink: 'syz.3.6190': attribute type 29 has an invalid length. [ 707.077692][T27461] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6190'. [ 707.095458][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 707.103677][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 707.111899][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 707.128012][T27461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6190'. [ 707.216669][T27462] wg1 speed is unknown, defaulting to 1000 [ 707.377763][T27469] netlink: 'syz.4.6192': attribute type 3 has an invalid length. [ 707.441958][T27477] netlink: 'syz.2.6196': attribute type 1 has an invalid length. [ 707.450033][T27477] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6196'. [ 707.599028][T27482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6195'. [ 707.611017][T27483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.630029][T27482] netlink: 'syz.0.6195': attribute type 10 has an invalid length. [ 707.671246][T27483] netlink: 'syz.2.6198': attribute type 1 has an invalid length. [ 707.751410][T27482] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.766418][T27482] bond0: (slave team0): Enslaving as an active interface with an up link [ 708.192323][T27462] chnl_net:caif_netlink_parms(): no params data found [ 708.277512][T27512] openvswitch: netlink: IP tunnel dst address not specified [ 708.335803][T27513] bond5: entered allmulticast mode [ 708.341428][T27513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 708.441030][T27527] x_tables: duplicate underflow at hook 2 [ 708.478667][T27528] macvtap1: entered allmulticast mode [ 708.484118][T27528] veth0_macvtap: entered allmulticast mode [ 708.582382][T27533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6210'. [ 708.595930][T27462] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.621540][T27462] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.645763][T27462] bridge_slave_0: entered allmulticast mode [ 708.667792][T27462] bridge_slave_0: entered promiscuous mode [ 708.711852][T27462] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.721027][T27462] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.742334][T27462] bridge_slave_1: entered allmulticast mode [ 708.760900][T27462] bridge_slave_1: entered promiscuous mode [ 708.899463][T27547] bond1: entered allmulticast mode [ 708.907458][T27547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 708.920756][T27547] bridge0: port 3(bond1) entered blocking state [ 708.929862][T27547] bridge0: port 3(bond1) entered disabled state [ 708.942358][T27547] bond1: entered promiscuous mode [ 708.950351][T27547] bridge0: port 3(bond1) entered blocking state [ 708.956916][T27547] bridge0: port 3(bond1) entered forwarding state [ 708.970059][T27555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6213'. [ 708.983132][T27462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.997739][T27462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.071567][T27462] team0: Port device team_slave_0 added [ 709.079383][T27547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6213'. [ 709.100824][T27462] team0: Port device team_slave_1 added [ 709.169048][ T5151] Bluetooth: hci3: command tx timeout [ 709.190233][T27462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.197378][T27462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.225225][T27462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.260682][T27462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.268792][T27462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.296083][T27462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.342067][T27562] netlink: 'syz.2.6217': attribute type 1 has an invalid length. [ 709.466172][T27462] hsr_slave_0: entered promiscuous mode [ 709.489837][T27462] hsr_slave_1: entered promiscuous mode [ 709.507544][T27462] debugfs: 'hsr0' already exists in 'hsr' [ 709.513568][T27462] Cannot create hsr debugfs directory [ 709.558758][T27569] veth3: entered promiscuous mode [ 709.619467][T27562] vlan2: entered allmulticast mode [ 709.625304][T27562] veth0_to_batadv: entered allmulticast mode [ 709.838086][ T36] bridge0: port 3(bond1) entered disabled state [ 710.049750][T27603] netlink: 'syz.3.6229': attribute type 13 has an invalid length. [ 710.131669][T27604] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 710.139890][T27615] netlink: 'syz.0.6231': attribute type 32 has an invalid length. [ 710.161365][T27604] bond2 (unregistering): Released all slaves [ 710.249940][T27603] sit0: left promiscuous mode [ 710.259370][T27603] bond0: left promiscuous mode [ 710.267959][T27603] bond0: left allmulticast mode [ 710.279181][T27603] batadv0: left promiscuous mode [ 710.284350][T27603] batadv0: left allmulticast mode [ 710.331092][T27603] macvtap0: left allmulticast mode [ 710.342376][T27603] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 710.383375][T27603] xfrm1: left allmulticast mode [ 710.397471][T27603] macsec2: left promiscuous mode [ 710.402793][T27603] macsec2: left allmulticast mode [ 710.413603][T27603] team1: left promiscuous mode [ 710.421659][T27603] team1: left allmulticast mode [ 710.429633][T27603] gretap1: left promiscuous mode [ 710.434780][T27603] gretap1: left allmulticast mode [ 710.458112][T27603] veth7: left promiscuous mode [ 710.464339][T27603] geneve2: left promiscuous mode [ 710.478222][T27603] bond5: left allmulticast mode [ 710.495152][ T9380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.673553][T27462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.707022][T27462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.761439][T27632] tipc: Enabled bearer , priority 0 [ 710.774184][T27637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.787650][T27632] syzkaller0: entered promiscuous mode [ 710.793297][T27632] syzkaller0: entered allmulticast mode [ 710.849025][T27462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.876236][T27462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.900414][T27635] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 710.930191][T27632] tipc: Resetting bearer [ 710.983598][T27462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.996586][T27462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.039338][T27632] bridge8: entered promiscuous mode [ 711.046925][T27632] bridge8: entered allmulticast mode [ 711.064227][T27629] tipc: Resetting bearer [ 711.133935][T27653] netlink: 'syz.0.6242': attribute type 1 has an invalid length. [ 711.157165][T27629] tipc: Disabling bearer [ 711.241507][T27462] batman_adv: batadv0: Removing interface: netdevsim0 [ 711.250963][ T5151] Bluetooth: hci3: command tx timeout [ 711.265418][T27462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.278408][T27663] netlink: 'syz.0.6245': attribute type 11 has an invalid length. [ 711.289110][T27462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.307687][T27664] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 711.319018][T27664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.407830][ T9386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.714620][T27462] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 711.751833][T27675] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 711.794076][T27679] __nla_validate_parse: 5 callbacks suppressed [ 711.794100][T27679] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6252'. [ 711.839365][T27462] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 711.860850][T27462] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 711.916855][T27462] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 712.341446][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 712.387039][T27462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.458052][T27462] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.502455][T16287] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.509678][T16287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.550505][T16287] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.557725][T16287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.759695][T27711] netlink: 'syz.3.6263': attribute type 39 has an invalid length. [ 712.862332][T27719] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 713.223015][T27462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.328466][ T5151] Bluetooth: hci3: command tx timeout [ 713.367474][T27462] veth0_vlan: entered promiscuous mode [ 713.394846][T27462] veth1_vlan: entered promiscuous mode [ 713.603220][T27462] veth0_macvtap: entered promiscuous mode [ 713.616911][T27462] veth1_macvtap: entered promiscuous mode [ 713.706847][T27462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.745466][T27462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.760358][T27763] netlink: 'syz.2.6280': attribute type 2 has an invalid length. [ 713.789703][T11516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.806991][T11516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.823753][T27766] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6278'. [ 713.865777][T11516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.887980][T11516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.988740][T27771] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 714.009626][T27771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.038593][T27771] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6282'. [ 714.044935][T27772] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6283'. [ 714.073465][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6283'. [ 714.092980][T27776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6285'. [ 714.096008][T27772] netlink: 'syz.2.6283': attribute type 22 has an invalid length. [ 714.127042][T27777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6285'. [ 714.143692][T27772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6283'. [ 714.174402][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.201517][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.264045][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6283'. [ 714.267569][ T7646] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.274086][T27772] netlink: 'syz.2.6283': attribute type 22 has an invalid length. [ 714.293230][ T7646] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.302285][T27772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6283'. [ 714.317072][ T7646] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.347218][T27780] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 714.361172][ T7646] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.417268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.445146][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.310817][ T30] audit: type=1800 audit(1763756817.494:41): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6298" name="memory.events" dev="tmpfs" ino=496 res=0 errno=0 [ 715.407805][ T5151] Bluetooth: hci3: command tx timeout [ 715.468348][T27843] bridge2: entered allmulticast mode [ 716.290777][T27876] Cannot find add_set index 0 as target [ 716.827430][T27896] bond1 (unregistering): Released all slaves [ 716.918543][T27907] netlink: 'syz.4.6314': attribute type 1 has an invalid length. [ 716.966916][T27901] nbd: must specify at least one socket [ 716.982990][T27911] gretap1: entered promiscuous mode [ 717.298196][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.340636][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.351199][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.366771][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.377131][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.451469][T27921] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 717.463955][T27921] bond1: option packets_per_slave: allowed values 0 - 65535 [ 717.476955][T27921] bond1 (unregistering): Released all slaves [ 717.488958][T27930] __nla_validate_parse: 4 callbacks suppressed [ 717.488978][T27930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6318'. [ 717.505033][T27931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6317'. [ 717.514958][T27931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6317'. [ 717.554615][T27931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6317'. [ 717.629104][T27921] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 717.644870][T27921] bond1: option packets_per_slave: allowed values 0 - 65535 [ 717.669767][T27921] bond1 (unregistering): Released all slaves [ 717.716081][T27923] wg1 speed is unknown, defaulting to 1000 [ 717.738716][T27940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6320'. [ 717.779455][T27941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6321'. [ 717.795031][T27941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6321'. [ 717.809417][T27921] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 717.820043][T27921] bond1: option packets_per_slave: allowed values 0 - 65535 [ 717.837971][ T9380] IPVS: starting estimator thread 0... [ 717.838585][T27921] bond1 (unregistering): Released all slaves [ 717.936598][T27945] IPVS: using max 26 ests per chain, 62400 per kthread [ 717.953082][T27921] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 717.963431][T27921] bond1: option packets_per_slave: allowed values 0 - 65535 [ 717.983120][T27921] bond1 (unregistering): Released all slaves [ 718.129893][T27954] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 718.396175][T27963] syzkaller0: entered promiscuous mode [ 718.401713][T27963] syzkaller0: entered allmulticast mode [ 718.497700][T27974] tipc: Enabling of bearer rejected, failed to enable media [ 718.738172][T27923] chnl_net:caif_netlink_parms(): no params data found [ 718.747048][T27981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6334'. [ 718.773417][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6334'. [ 718.899586][T27992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6335'. [ 718.975597][T27993] bridge0: port 3(dummy0) entered disabled state [ 718.982196][T27993] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.989615][T27993] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.209483][T28004] netlink: 'syz.1.6339': attribute type 2 has an invalid length. [ 719.223196][T27923] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.242795][T27923] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.273781][T27923] bridge_slave_0: entered allmulticast mode [ 719.307610][T27923] bridge_slave_0: entered promiscuous mode [ 719.407571][ T5151] Bluetooth: hci0: command tx timeout [ 719.438948][T27923] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.476798][T28032] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 719.490058][T27923] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.500861][T27923] bridge_slave_1: entered allmulticast mode [ 719.512037][T27923] bridge_slave_1: entered promiscuous mode [ 719.608958][T27923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.641534][T27923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.848137][T27923] team0: Port device team_slave_0 added [ 719.858450][T28052] netlink: 'syz.0.6350': attribute type 22 has an invalid length. [ 719.879176][ T1155] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.891442][ T1155] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.900238][T28052] netlink: 'syz.0.6350': attribute type 22 has an invalid length. [ 719.944541][ T1155] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.953340][ T1155] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.993583][T28056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.000434][T27923] team0: Port device team_slave_1 added [ 720.141336][T28063] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 720.169359][T27923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.178041][T27923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.207268][T27923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.220639][T28064] veth0: entered promiscuous mode [ 720.255308][T28063] bond3: entered promiscuous mode [ 720.260680][T28063] bond3: entered allmulticast mode [ 720.266448][T28063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 720.282946][T27923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.292825][T27923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.321959][T27923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.445246][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 720.463888][T28062] veth0: left promiscuous mode [ 720.489495][T27923] hsr_slave_0: entered promiscuous mode [ 720.498366][T27923] hsr_slave_1: entered promiscuous mode [ 720.517037][T27923] debugfs: 'hsr0' already exists in 'hsr' [ 720.519034][T28074] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20002 [ 720.522801][T27923] Cannot create hsr debugfs directory [ 720.534332][T28075] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20002 [ 720.624341][T28083] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 720.896777][T27923] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 721.114259][T28094] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 721.188838][T27923] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 721.295750][T28090] team1: entered promiscuous mode [ 721.300851][T28090] team1: entered allmulticast mode [ 721.313436][T28105] veth1_macvtap: left promiscuous mode [ 721.323482][T28105] macsec0: entered promiscuous mode [ 721.345933][T28105] macsec0: entered allmulticast mode [ 721.443413][T28118] netlink: 'syz.0.6370': attribute type 2 has an invalid length. [ 721.448733][T27923] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 721.461007][T28118] netlink: 'syz.0.6370': attribute type 2 has an invalid length. [ 721.486509][ T5151] Bluetooth: hci0: command tx timeout [ 721.497640][T28111] veth1_macvtap: entered promiscuous mode [ 721.503427][T28111] veth1_macvtap: entered allmulticast mode [ 721.526562][T28111] macsec0: left promiscuous mode [ 721.533221][T28111] macsec0: left allmulticast mode [ 721.556650][T28111] veth1_macvtap: left allmulticast mode [ 721.667148][T27923] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 721.680452][T28119] netlink: 'syz.2.6369': attribute type 1 has an invalid length. [ 721.693078][T28124] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 721.869620][T28131] netlink: 'syz.4.6373': attribute type 11 has an invalid length. [ 722.117657][T27923] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 722.257709][T28150] team0 (unregistering): Port device team_slave_0 removed [ 722.295022][T28150] team0 (unregistering): Port device team_slave_1 removed [ 722.332468][T27923] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 722.417702][T27923] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 722.465205][T27923] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 722.569320][T28168] __nla_validate_parse: 17 callbacks suppressed [ 722.569341][T28168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6383'. [ 722.588755][T28168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6383'. [ 722.616633][T28181] netlink: 'syz.4.6386': attribute type 32 has an invalid length. [ 722.628134][T28181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6386'. [ 722.651162][T28179] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 722.663648][T28179] bond1 (unregistering): Released all slaves [ 722.742243][T28181] bond4: Setting coupled_control to off (0) [ 722.858081][T27923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.900327][T27923] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.926458][T28190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6387'. [ 722.979200][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.986456][ T7646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.006957][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.014193][ T7646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.030218][T28195] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6390'. [ 723.060395][T28196] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6388'. [ 723.148182][T27923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.230390][T28203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6391'. [ 723.243339][T28203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6391'. [ 723.329596][T28208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6394'. [ 723.427464][T28210] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6395'. [ 723.474788][T28216] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 723.566051][ T5151] Bluetooth: hci0: command tx timeout [ 725.646248][ T5151] Bluetooth: hci0: command tx timeout [ 725.662235][T27923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.760683][T28246] sctp: [Deprecated]: syz.4.6404 (pid 28246) Use of int in maxseg socket option. [ 725.760683][T28246] Use struct sctp_assoc_value instead [ 725.843247][T27923] veth0_vlan: entered promiscuous mode [ 725.874137][T27923] veth1_vlan: entered promiscuous mode [ 726.010717][T27923] veth0_macvtap: entered promiscuous mode [ 726.056560][T27923] veth1_macvtap: entered promiscuous mode [ 726.114786][T28271] netlink: 'syz.4.6410': attribute type 11 has an invalid length. [ 726.191836][T27923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.228484][T27923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.287637][T11515] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.334657][T11515] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.353971][T11515] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.390015][T11515] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.523320][T28286] xt_recent: Unsupported userspace flags (000000b1) [ 726.933134][T28300] syzkaller0: entered promiscuous mode [ 726.946095][T28300] syzkaller0: entered allmulticast mode [ 726.969588][T11515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.987100][T11515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.057066][T28307] veth1_macvtap: left promiscuous mode [ 727.062835][T28307] macsec0: entered promiscuous mode [ 727.071995][T28307] macsec0: entered allmulticast mode [ 727.090360][T28307] veth1_macvtap: entered promiscuous mode [ 727.098019][T28307] veth1_macvtap: entered allmulticast mode [ 727.104223][T28307] macsec0: left promiscuous mode [ 727.111242][T28307] macsec0: left allmulticast mode [ 727.117893][T28307] veth1_macvtap: left allmulticast mode [ 727.170159][ T7646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.179735][ T7646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.757372][T28346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6432'. [ 727.958731][T28357] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6434'. [ 729.957287][T28375] netlink: 'syz.3.6437': attribute type 4 has an invalid length. [ 730.000727][T28375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6437'. [ 730.036963][T28384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6441'. [ 730.049760][T28384] netlink: 'syz.1.6441': attribute type 11 has an invalid length. [ 730.079616][T11515] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.094295][T28384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6441'. [ 730.107869][T11515] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.117758][T28384] netlink: 'syz.1.6441': attribute type 11 has an invalid length. [ 730.132346][T11515] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.142157][T11515] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.182333][T28390] netlink: 'syz.3.6443': attribute type 2 has an invalid length. [ 730.191704][T28390] netlink: 'syz.3.6443': attribute type 11 has an invalid length. [ 730.200101][T28390] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6443'. [ 730.303670][T28398] macvtap1: entered allmulticast mode [ 730.319681][T28398] veth0_macvtap: entered allmulticast mode [ 730.414301][T28400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6446'. [ 730.550349][T28412] netlink: 'syz.1.6449': attribute type 1 has an invalid length. [ 730.590108][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6451'. [ 730.602486][T28418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6451'. [ 730.644273][T28413] netlink: 'syz.1.6449': attribute type 1 has an invalid length. [ 730.648764][T28412] bond1 (unregistering): Released all slaves [ 730.776337][T28412] netlink: 404 bytes leftover after parsing attributes in process `syz.1.6449'. [ 730.931808][T28433] netlink: 'syz.4.6452': attribute type 10 has an invalid length. [ 730.947903][T28433] batman_adv: batadv0: Adding interface: netdevsim0 [ 730.956532][T28433] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 730.987188][T28433] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 731.179036][T28440] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 731.233550][T28440] bridge0: port 4(batadv1) entered blocking state [ 731.251764][T28440] bridge0: port 4(batadv1) entered disabled state [ 731.260828][T28440] batadv1: entered allmulticast mode [ 731.271662][T28440] batadv1: entered promiscuous mode [ 731.513107][T28469] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 731.736582][T17935] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 731.747530][T17935] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 731.751070][T28488] SET target dimension over the limit! [ 733.250931][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 734.072293][T28520] __nla_validate_parse: 9 callbacks suppressed [ 734.072315][T28520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6478'. [ 734.309721][T28531] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 734.488987][T28540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6484'. [ 734.645132][T28556] dummy0: left allmulticast mode [ 734.651789][T28556] bridge0: port 3(dummy0) entered disabled state [ 734.687902][T28556] batman_adv: batadv0: Adding interface: dummy0 [ 734.700777][T28556] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.785901][T28556] batman_adv: batadv0: Interface activated: dummy0 [ 734.811391][T28557] batadv0: mtu less than device minimum [ 734.822038][T28557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.834566][T28557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.840645][T28566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6492'. [ 734.846560][T28557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.848222][T28557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.878820][T28557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.890749][T28557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.902537][T28557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.914137][T28557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.926085][T28557] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 735.022944][T28566] bond5 (unregistering): Released all slaves [ 735.196777][T28573] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 735.219626][T28573] bond1 (unregistering): Released all slaves [ 735.413134][T28590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6497'. [ 735.479092][T28593] IPv6: NLM_F_CREATE should be specified when creating new route [ 735.588241][T28599] netlink: 'syz.2.6501': attribute type 2 has an invalid length. [ 735.611000][T28599] netlink: 'syz.2.6501': attribute type 1 has an invalid length. [ 735.699595][T28599] netlink: 'syz.2.6501': attribute type 11 has an invalid length. [ 735.715063][T28599] atomic_op ffff888026eef998 conn xmit_atomic 0000000000000000 [ 735.729258][T28616] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6502'. [ 736.138710][T28640] netlink: 'syz.4.6511': attribute type 12 has an invalid length. [ 736.204155][T28635] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6510'. [ 736.229334][T28644] tipc: Started in network mode [ 736.235454][T28644] tipc: Node identity ca83228c65ec, cluster identity 4711 [ 736.242818][T28644] tipc: Enabled bearer , priority 0 [ 736.251405][T28644] syzkaller0: entered promiscuous mode [ 736.257597][T28644] syzkaller0: entered allmulticast mode [ 736.364177][T28644] tipc: Resetting bearer [ 736.671396][T28643] tipc: Resetting bearer [ 736.693263][T28643] tipc: Disabling bearer [ 736.830297][T28673] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6520'. [ 737.106856][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.124178][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.132554][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.146206][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.158534][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.169335][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.185446][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.210337][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.219487][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.237446][T28690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.613950][T28716] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6528'. [ 737.656892][T28716] block nbd0: reconnected socket [ 737.796678][ T5151] block nbd0: Receive control failed (result -32) [ 737.858245][T28726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6535'. [ 737.912122][T28726] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 738.288925][T28750] netlink: 'syz.0.6542': attribute type 6 has an invalid length. [ 738.637910][T28773] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6548'. [ 738.868378][T28779] wg1 speed is unknown, defaulting to 1000 [ 739.451992][T28812] netlink: 'syz.1.6561': attribute type 12 has an invalid length. [ 739.502711][T28817] netlink: 'syz.3.6562': attribute type 13 has an invalid length. [ 739.512880][T28817] netlink: 'syz.3.6562': attribute type 58 has an invalid length. [ 739.515479][T28812] bond1: option primary_reselect: invalid value (255) [ 739.530085][T28812] bond1 (unregistering): Released all slaves [ 739.533762][T28817] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6562'. [ 739.700732][T28812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6561'. [ 739.786274][T28823] delete_channel: no stack [ 739.800205][T28823] netlink: 'syz.4.6563': attribute type 1 has an invalid length. [ 739.916001][T28824] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6564'. [ 740.067815][T28839] netlink: 'syz.4.6569': attribute type 32 has an invalid length. [ 740.078475][T28835] net_ratelimit: 11 callbacks suppressed [ 740.078495][T28835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 740.106699][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6569'. [ 740.135926][T28841] netlink: 'syz.3.6570': attribute type 10 has an invalid length. [ 740.154196][T28841] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6570'. [ 740.187863][T28850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6570'. [ 740.204349][T28839] bond5: option coupled_control: invalid value (53) [ 740.222196][T28839] bond5 (unregistering): Released all slaves [ 740.273469][T28843] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 740.312952][T28843] bond4 (unregistering): Released all slaves [ 740.343851][T28835] tipc: New replicast peer: 0.0.0.0 [ 740.352120][T28835] tipc: Enabled bearer , priority 10 [ 740.361000][T28852] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 740.423864][T28844] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 740.442035][T28844] bond4 (unregistering): Released all slaves [ 740.476541][T28850] dummy0: entered promiscuous mode [ 740.482760][T28850] bridge0: port 3(dummy0) entered blocking state [ 740.491362][T28850] bridge0: port 3(dummy0) entered disabled state [ 740.501253][T28850] dummy0: entered allmulticast mode [ 740.514253][T28850] bridge0: port 3(dummy0) entered blocking state [ 740.520787][T28850] bridge0: port 3(dummy0) entered forwarding state [ 740.932588][T28884] pim6reg: entered allmulticast mode [ 740.947692][T28887] validate_nla: 1 callbacks suppressed [ 740.947713][T28887] netlink: 'syz.4.6579': attribute type 10 has an invalid length. [ 740.968281][T28887] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6579'. [ 741.110641][T28894] SET target dimension over the limit! [ 741.263072][T28889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6582'. [ 741.356774][T28900] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 741.470105][T28904] batadv_slave_1: entered promiscuous mode [ 741.487400][ T9376] tipc: Node number set to 2943296140 [ 741.542137][T11515] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.624575][T11515] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.676806][T11515] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.709485][T11515] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.830143][T28925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6592'. [ 741.872283][T28925] netlink: 'syz.0.6592': attribute type 7 has an invalid length. [ 741.892360][T28935] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6592'. [ 741.924318][T28925] netlink: 'syz.0.6592': attribute type 8 has an invalid length. [ 741.944293][T28934] pim6reg1: entered promiscuous mode [ 741.961542][T28934] pim6reg1: entered allmulticast mode [ 742.012359][T28940] openvswitch: netlink: Missing key (keys=40, expected=100) [ 742.082489][T28901] batadv_slave_1: left promiscuous mode [ 742.177471][T28937] netlink: 'syz.1.6594': attribute type 33 has an invalid length. [ 742.245931][T28932] syzkaller0: entered promiscuous mode [ 742.251526][T28932] syzkaller0: entered allmulticast mode [ 742.309982][T28937] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 742.338133][T28937] bond1 (unregistering): Released all slaves [ 742.569891][T28962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.927133][T28978] netlink: 'syz.0.6605': attribute type 10 has an invalid length. [ 743.373735][T17938] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 744.433057][T28978] batman_adv: batadv0: Adding interface: netdevsim0 [ 744.440154][T28978] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.466319][T28978] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 744.706348][T28993] tipc: Started in network mode [ 744.715519][T28993] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 744.756146][T28993] tipc: Enabling of bearer rejected, failed to enable media [ 744.784069][T28990] tipc: Enabled bearer , priority 2 [ 744.829066][T29001] __nla_validate_parse: 3 callbacks suppressed [ 744.829086][T29001] netlink: 207992 bytes leftover after parsing attributes in process `syz.2.6612'. [ 744.887610][T28999] syzkaller0: entered promiscuous mode [ 744.897286][T28999] syzkaller0: entered allmulticast mode [ 744.909950][T29003] netlink: 'syz.4.6614': attribute type 11 has an invalid length. [ 744.923007][T29003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6614'. [ 744.961137][T29007] netlink: 'syz.0.6615': attribute type 1 has an invalid length. [ 745.104254][T29013] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 745.120247][T29017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6617'. [ 745.130125][T29013] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 745.142729][T29013] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 745.250879][T29020] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6616'. [ 745.282051][T29023] pim6reg1: entered promiscuous mode [ 745.288051][T29023] pim6reg1: entered allmulticast mode [ 745.859816][T29052] bridge0: port 4(batadv1) entered blocking state [ 745.866984][T29052] bridge0: port 4(batadv1) entered disabled state [ 745.873951][T29052] batadv1: entered allmulticast mode [ 745.883423][T29052] batadv1: entered promiscuous mode [ 745.943218][T29057] netlink: 'syz.0.6631': attribute type 1 has an invalid length. [ 745.997068][T29059] netlink: 'syz.1.6632': attribute type 1 has an invalid length. [ 746.025605][T29059] netlink: 'syz.1.6632': attribute type 4 has an invalid length. [ 746.049199][T29059] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.6632'. [ 746.219663][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6637'. [ 746.288416][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.327737][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 746.337972][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 746.544188][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6644'. [ 746.823916][T29110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6649'. [ 746.880915][T29117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6649'. [ 747.114084][T29134] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 747.148472][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.175518][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.202585][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.228817][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.277420][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.303422][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.330321][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.338734][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.371794][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.382327][T29141] netlink: 'syz.0.6659': attribute type 10 has an invalid length. [ 747.450326][T29141] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6659'. [ 747.886246][T29152] netlink: 'syz.2.6661': attribute type 11 has an invalid length. [ 747.901806][T29152] netlink: 'syz.2.6661': attribute type 11 has an invalid length. [ 748.604969][ C1] ip6_tnl_xmit_ctl: 88 callbacks suppressed [ 748.604994][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 750.029439][T29174] sctp: [Deprecated]: syz.4.6668 (pid 29174) Use of int in max_burst socket option deprecated. [ 750.029439][T29174] Use struct sctp_assoc_value instead [ 750.058813][T29161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.098194][T29161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.113963][T29161] bond0 (unregistering): (slave team0): Releasing backup interface [ 750.129200][T29161] bond0 (unregistering): Released all slaves [ 750.147773][T17935] bond2: left promiscuous mode [ 750.152906][T17935] bridge0: port 4(bond2) entered disabled state [ 750.164341][T17935] batadv1: left allmulticast mode [ 750.169613][T17935] batadv1: left promiscuous mode [ 750.175034][T17935] bridge0: port 3(batadv1) entered disabled state [ 750.183510][T17935] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.211397][T17935] bridge_slave_0: left allmulticast mode [ 750.217223][T17935] bridge_slave_0: left promiscuous mode [ 750.223009][T17935] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.271444][T29180] __nla_validate_parse: 3 callbacks suppressed [ 750.271462][T29180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6670'. [ 750.470959][T17935] bond3 (unregistering): (slave gretap1): Releasing active interface [ 750.519595][T17935] dvmrp0 (unregistering): left allmulticast mode [ 751.041064][T17935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.053011][T17935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.062532][T17935] bond0 (unregistering): Released all slaves [ 751.163829][T17935] bond1 (unregistering): Released all slaves [ 751.264591][T17935] bond2 (unregistering): Released all slaves [ 751.279574][T17935] bond3 (unregistering): Released all slaves [ 751.294625][T17935] bond4 (unregistering): Released all slaves [ 751.309905][T17935] bond5 (unregistering): Released all slaves [ 751.441629][T17935] bond6 (unregistering): Released all slaves [ 751.503037][ T5900] net_ratelimit: 12285 callbacks suppressed [ 751.503059][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.586559][T17935] bond7 (unregistering): (slave veth5): Releasing backup interface [ 751.598749][T17935] bond7 (unregistering): Released all slaves [ 751.614141][T17935] bond8 (unregistering): Released all slaves [ 751.749011][T17935] bond9 (unregistering): (slave veth7): Releasing active interface [ 751.759328][T17935] bond9 (unregistering): Released all slaves [ 751.775720][T17935] bond10 (unregistering): Released all slaves [ 751.790714][T17935] bond11 (unregistering): Released all slaves [ 751.827911][T29170] bridge1: entered promiscuous mode [ 751.833418][T29170] bridge1: entered allmulticast mode [ 751.843717][T29170] team0: Port device bridge1 added [ 751.859524][T29172] bridge0: port 3(team0) entered blocking state [ 751.872278][T29172] bridge0: port 3(team0) entered disabled state [ 751.880801][T29172] team0: entered allmulticast mode [ 751.900456][T29172] team_slave_0: entered allmulticast mode [ 751.910569][T29172] team_slave_1: entered allmulticast mode [ 751.928487][T29172] team0: entered promiscuous mode [ 751.933581][T29172] team_slave_0: entered promiscuous mode [ 751.972725][T29172] team_slave_1: entered promiscuous mode [ 751.982047][T29172] bridge0: port 3(team0) entered blocking state [ 751.988486][T29172] bridge0: port 3(team0) entered forwarding state [ 752.000295][T29177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6669'. [ 752.135826][T17935] tipc: Disabling bearer [ 752.157043][T17935] tipc: Left network mode [ 752.229826][T29150] tipc: Resetting bearer [ 752.365033][T29201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6676'. [ 752.369053][T29150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 752.395328][T29150] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 752.446019][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.453868][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 752.469585][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.509239][T29150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 752.525677][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.544385][T29150] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 752.612158][T29150] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 752.620159][T29150] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 752.620258][T29217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6679'. [ 752.855357][T29150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 752.874554][T29150] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 753.573081][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.729521][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.026999][T17935] hsr_slave_0: left promiscuous mode [ 754.033303][T17935] hsr_slave_1: left promiscuous mode [ 754.040377][T17935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.066558][T17935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.607164][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.649239][T17935] team0 (unregistering): Port device team_slave_1 removed [ 754.692113][T17935] team0 (unregistering): Port device team_slave_0 removed [ 755.204264][T29283] veth5: entered promiscuous mode [ 755.338376][T29305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6708'. [ 755.409000][T29305] IPv6: sit1: Disabled Multicast RS [ 755.437099][T29311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6708'. [ 755.440562][T29305] sit1: entered allmulticast mode [ 755.648854][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.859473][T29330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6716'. [ 755.911030][T17935] IPVS: stop unused estimator thread 0... [ 756.050815][T29335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 756.073423][T29335] bond_slave_0: entered promiscuous mode [ 756.079623][T29335] bond_slave_1: entered promiscuous mode [ 756.086822][T29335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 756.097031][T29335] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 756.147872][T29338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6718'. [ 756.159752][T29338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6718'. [ 756.172678][T29338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6718'. [ 756.287562][T17938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.297127][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.306164][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.419351][T29350] netlink: 25 bytes leftover after parsing attributes in process `syz.4.6724'. [ 756.468281][ T43] IPVS: starting estimator thread 0... [ 756.507450][T29360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6724'. [ 756.575443][T29357] IPVS: using max 26 ests per chain, 62400 per kthread [ 756.585640][T29362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6727'. [ 756.687235][ T9374] net_ratelimit: 2 callbacks suppressed [ 756.687257][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.767898][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.930941][T29393] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6734'. [ 756.948322][T29399] Bluetooth: MGMT ver 1.23 [ 756.984441][T11515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.995142][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.006684][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.019169][T29409] netlink: 'syz.0.6735': attribute type 1 has an invalid length. [ 757.034735][T29409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.222541][T29416] netlink: 'syz.2.6739': attribute type 5 has an invalid length. [ 757.239292][T29416] netlink: 'syz.2.6739': attribute type 5 has an invalid length. [ 757.726835][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.013521][T29467] netlink: 'syz.2.6753': attribute type 64 has an invalid length. [ 758.121062][T29470] tipc: Enabled bearer , priority 0 [ 758.212420][T29470] syzkaller0: entered promiscuous mode [ 758.229146][T29470] syzkaller0: entered allmulticast mode [ 758.244246][T29470] tipc: Resetting bearer [ 758.290405][T29481] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 758.298970][T29481] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 758.309293][T29469] tipc: Resetting bearer [ 758.429271][T29489] netlink: 'syz.3.6759': attribute type 21 has an invalid length. [ 758.437678][T29489] IPv6: NLM_F_CREATE should be specified when creating new route [ 758.446039][T29489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 758.453404][T29489] IPv6: NLM_F_CREATE should be set when creating new route [ 758.460737][T29489] IPv6: NLM_F_CREATE should be set when creating new route [ 758.468238][T29489] IPv6: NLM_F_CREATE should be set when creating new route [ 758.770209][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.806773][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.048372][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.302366][T29469] tipc: Disabling bearer [ 760.318172][T29486] syz.3.6759: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 760.336514][T29486] CPU: 1 UID: 0 PID: 29486 Comm: syz.3.6759 Not tainted syzkaller #0 PREEMPT(full) [ 760.336541][T29486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.336554][T29486] Call Trace: [ 760.336562][T29486] [ 760.336571][T29486] dump_stack_lvl+0x189/0x250 [ 760.336609][T29486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.336637][T29486] ? __pfx__printk+0x10/0x10 [ 760.336659][T29486] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 760.336689][T29486] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 760.336721][T29486] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 760.336754][T29486] warn_alloc+0x214/0x310 [ 760.336792][T29486] ? __pfx_warn_alloc+0x10/0x10 [ 760.336849][T29486] ? __get_vm_area_node+0x28f/0x300 [ 760.336880][T29486] ? fq_pie_init+0x435/0x840 [ 760.336913][T29486] __vmalloc_node_range_noprof+0x690/0x12d0 [ 760.336951][T29486] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 760.337000][T29486] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 760.337031][T29486] ? fq_pie_init+0x435/0x840 [ 760.337064][T29486] ? rcu_is_watching+0x15/0xb0 [ 760.337088][T29486] ? fq_pie_init+0x435/0x840 [ 760.337116][T29486] __kvmalloc_node_noprof+0x674/0x910 [ 760.337149][T29486] ? fq_pie_init+0x435/0x840 [ 760.337178][T29486] ? tcf_block_get+0x67/0xa0 [ 760.337208][T29486] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 760.337246][T29486] fq_pie_init+0x435/0x840 [ 760.337277][T29486] ? __pfx_fq_pie_init+0x10/0x10 [ 760.337306][T29486] qdisc_create+0x7ac/0xea0 [ 760.337344][T29486] tc_modify_qdisc+0x1547/0x2020 [ 760.337387][T29486] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 760.337469][T29486] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 760.337499][T29486] rtnetlink_rcv_msg+0x77c/0xb70 [ 760.337538][T29486] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 760.337573][T29486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 760.337606][T29486] ? ref_tracker_free+0x63a/0x7d0 [ 760.337629][T29486] ? __asan_memcpy+0x40/0x70 [ 760.337658][T29486] ? __pfx_ref_tracker_free+0x10/0x10 [ 760.337694][T29486] netlink_rcv_skb+0x208/0x470 [ 760.337716][T29486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 760.337752][T29486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 760.337788][T29486] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.337827][T29486] netlink_unicast+0x82f/0x9e0 [ 760.337872][T29486] ? __pfx_netlink_unicast+0x10/0x10 [ 760.337908][T29486] ? netlink_sendmsg+0x642/0xb30 [ 760.337929][T29486] ? skb_put+0x11b/0x210 [ 760.337956][T29486] netlink_sendmsg+0x805/0xb30 [ 760.337990][T29486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.338017][T29486] ? aa_sock_msg_perm+0xf1/0x1d0 [ 760.338053][T29486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 760.338075][T29486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.338100][T29486] __sock_sendmsg+0x21c/0x270 [ 760.338135][T29486] ____sys_sendmsg+0x505/0x830 [ 760.338167][T29486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.338203][T29486] ? import_iovec+0x74/0xa0 [ 760.338255][T29486] ___sys_sendmsg+0x21f/0x2a0 [ 760.338284][T29486] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.338356][T29486] ? __fget_files+0x2a/0x420 [ 760.338377][T29486] ? __fget_files+0x3a0/0x420 [ 760.338412][T29486] __x64_sys_sendmsg+0x19b/0x260 [ 760.338442][T29486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.338488][T29486] ? do_syscall_64+0xbe/0xfa0 [ 760.338528][T29486] do_syscall_64+0xfa/0xfa0 [ 760.338561][T29486] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.338595][T29486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.338617][T29486] ? clear_bhb_loop+0x60/0xb0 [ 760.338645][T29486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.338668][T29486] RIP: 0033:0x7f3c7618f749 [ 760.338701][T29486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.338720][T29486] RSP: 002b:00007f3c76fe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.338743][T29486] RAX: ffffffffffffffda RBX: 00007f3c763e5fa0 RCX: 00007f3c7618f749 [ 760.338760][T29486] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000003 [ 760.338774][T29486] RBP: 00007f3c76213f91 R08: 0000000000000000 R09: 0000000000000000 [ 760.338788][T29486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.338807][T29486] R13: 00007f3c763e6038 R14: 00007f3c763e5fa0 R15: 00007fff42ff7018 [ 760.338846][T29486] [ 760.338855][T29486] Mem-Info: [ 760.422194][T29503] ipt_rpfilter: unknown options [ 760.425048][T29486] active_anon:5168 inactive_anon:0 isolated_anon:0 [ 760.425048][T29486] active_file:3150 inactive_file:40130 isolated_file:0 [ 760.425048][T29486] unevictable:768 dirty:60 writeback:0 [ 760.425048][T29486] slab_reclaimable:12935 slab_unreclaimable:152856 [ 760.425048][T29486] mapped:33252 shmem:1362 pagetables:1235 [ 760.425048][T29486] sec_pagetables:0 bounce:0 [ 760.425048][T29486] kernel_misc_reclaimable:0 [ 760.425048][T29486] free:1265803 free_pcp:11709 free_cma:0 [ 760.425117][T29486] Node 0 active_anon:20672kB inactive_anon:0kB active_file:12600kB inactive_file:160320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133008kB dirty:240kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16044kB pagetables:4772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 760.425186][T29486] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 760.425244][T29486] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.425317][T29486] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 760.425370][T29486] Node 0 DMA32 free:1147836kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20672kB inactive_anon:0kB active_file:12600kB inactive_file:160320kB unevictable:1536kB writepending:240kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:37980kB local_pcp:16976kB free_cma:0kB [ 760.425444][T29486] lowmem_reserve[]: 0 0 0 0 0 [ 760.425493][T29486] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.425561][T29486] lowmem_reserve[]: 0 0 0 0 0 [ 760.425610][T29486] Node 1 Normal free:3900016kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8856kB local_pcp:0kB free_cma:0kB [ 760.425681][T29486] lowmem_reserve[]: 0 0 0 0 0 [ 760.425730][T29486] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 760.425893][T29486] Node 0 DMA32: 956*4kB (UME) 1017*8kB (UME) 353*16kB (UME) 268*32kB (UME) 44*64kB (UME) 9*128kB (UME) 8*256kB (M) 13*512kB (UM) 13*1024kB (UME) 5*2048kB (UME) 265*4096kB (UM) = 1147848kB [ 760.426114][T29486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 760.426247][T29486] Node 1 Normal: 160*4kB (UME) 48*8kB (UME) 47*16kB (UME) 222*32kB (UME) 84*64kB (UME) 16*128kB (UME) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3900080kB [ 760.426459][T29486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 760.426480][T29486] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 760.426500][T29486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 760.426520][T29486] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 760.426540][T29486] 44638 total pagecache pages [ 760.426551][T29486] 0 pages in swap cache [ 760.426560][T29486] Free swap = 124996kB [ 760.426571][T29486] Total swap = 124996kB [ 760.426581][T29486] 2097051 pages RAM [ 760.426591][T29486] 0 pages HighMem/MovableOnly [ 760.426600][T29486] 424122 pages reserved [ 760.426610][T29486] 0 pages cma reserved [ 761.559321][T29529] veth0: entered promiscuous mode [ 761.585853][T29532] __nla_validate_parse: 7 callbacks suppressed [ 761.585874][T29532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6772'. [ 761.587042][T29533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6772'. [ 761.607171][T29529] veth0: left promiscuous mode [ 761.737314][T29540] nbd: couldn't find device at index 204 [ 762.091207][T29554] bond0 (unregistering): Released all slaves [ 762.242124][T29567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6785'. [ 762.286405][ T9376] net_ratelimit: 1 callbacks suppressed [ 762.286426][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.433645][T29573] syzkaller1: entered promiscuous mode [ 762.462445][T29573] syzkaller1: entered allmulticast mode [ 762.583656][T29584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6790'. [ 762.696823][T29389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.746613][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.801774][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.320517][T29624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6801'. [ 763.337996][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.419823][T29629] netlink: 'syz.2.6803': attribute type 1 has an invalid length. [ 763.445313][T29629] netlink: 'syz.2.6803': attribute type 3 has an invalid length. [ 763.478971][T29629] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6803'. [ 763.491056][T29627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.512373][T29629] NCSI netlink: No device for ifindex 813332851 [ 763.538092][T29632] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6803'. [ 763.551013][T29632] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6803'. [ 763.729453][T29640] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 763.737630][T29640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.973137][T29652] tipc: Enabling of bearer rejected, failed to enable media [ 763.982107][T29649] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6809'. [ 764.367655][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.489498][T29675] Bluetooth: MGMT ver 1.23 [ 764.529261][T29675] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 764.662811][T29684] IPVS: sh: FWM 3 0x00000003 - no destination available [ 764.800764][T29690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6820'. [ 765.009116][T29701] bond5: option all_slaves_active: invalid value (222) [ 765.029691][T29701] bond5 (unregistering): Released all slaves [ 765.697676][T29746] netlink: 'syz.2.6835': attribute type 13 has an invalid length. [ 765.719394][T29746] netlink: 'syz.2.6835': attribute type 58 has an invalid length. [ 766.277642][T29776] netlink: 'syz.3.6846': attribute type 4 has an invalid length. [ 766.672351][T29801] __nla_validate_parse: 3 callbacks suppressed [ 766.672393][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6852'. [ 766.892698][T29809] netlink: 'syz.1.6855': attribute type 23 has an invalid length. [ 767.485704][ T9374] net_ratelimit: 5 callbacks suppressed [ 767.485724][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.638000][T29844] netlink: 12604 bytes leftover after parsing attributes in process `syz.3.6863'. [ 767.637999][T29845] netlink: 12604 bytes leftover after parsing attributes in process `syz.3.6863'. [ 767.638027][T29845] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 767.697167][T29844] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 767.812599][T29847] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 767.861818][T29847] bond6 (unregistering): Released all slaves [ 767.998217][T29864] geneve2: entered promiscuous mode [ 768.003571][T29864] geneve2: entered allmulticast mode [ 768.030898][T29404] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 768.069192][T29874] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 768.082836][T29404] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 768.138275][T29404] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 768.209245][T29404] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 768.358335][T29891] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 768.399478][T29891] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 768.467788][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6881'. [ 768.477996][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6881'. [ 768.491615][T29892] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 768.491815][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6881'. [ 768.523228][T29892] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 768.538175][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.689291][T29915] tipc: Enabled bearer , priority 0 [ 768.730065][T29917] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 768.739268][T29917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.774001][T29920] netlink: 'syz.0.6883': attribute type 33 has an invalid length. [ 768.797146][T29920] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6883'. [ 768.833923][T29928] xt_l2tp: v2 sid > 0xffff: 1114112 [ 768.840460][T29915] syzkaller0: entered promiscuous mode [ 768.840488][T29915] syzkaller0: entered allmulticast mode [ 768.841312][T29915] tipc: Resetting bearer [ 768.858411][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.877195][T29921] netem: change failed [ 768.907773][T29933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6888'. [ 768.940487][T29936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6888'. [ 768.992917][T29920] tipc: Resetting bearer [ 769.211137][T29953] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6893'. [ 769.567035][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.739460][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.367631][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.606399][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.998003][T29920] tipc: Disabling bearer [ 771.031034][ T5900] tipc: Node number set to 4269801492 [ 771.199465][T29972] xt_addrtype: ipv6 does not support BROADCAST matching [ 771.236079][T29969] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 771.292050][T29972] atomic_op ffff888027f97198 conn xmit_atomic 0000000000000000 [ 771.316589][T29971] mac80211_hwsim hwsim55 syzkaller0: left promiscuous mode [ 771.323989][T29971] mac80211_hwsim hwsim55 syzkaller0: left allmulticast mode [ 771.457765][T29986] netlink: 'syz.0.6901': attribute type 1 has an invalid length. [ 771.543856][T29989] netlink: 'syz.1.6900': attribute type 4 has an invalid length. [ 771.684196][T29996] __nla_validate_parse: 5 callbacks suppressed [ 771.684219][T29996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6906'. [ 771.771338][T30005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6908'. [ 771.789578][T29996] netlink: 'syz.0.6906': attribute type 1 has an invalid length. [ 771.799448][T29996] netlink: 'syz.0.6906': attribute type 2 has an invalid length. [ 771.820400][T30007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6909'. [ 771.831753][T29998] veth1: entered allmulticast mode [ 771.873396][T30012] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 771.877141][T30007] syzkaller1: entered promiscuous mode [ 771.918309][T30007] syzkaller1: entered allmulticast mode [ 771.972772][T30018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6909'. [ 772.119631][T30028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6913'. [ 772.420367][T30045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6921'. [ 772.448279][T30045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6921'. [ 772.493519][T30045] geneve2: entered promiscuous mode [ 772.510595][T30049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6923'. [ 772.525852][T30045] geneve2: entered allmulticast mode [ 772.634170][T30055] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6925'. [ 772.687122][ T5900] net_ratelimit: 2 callbacks suppressed [ 772.687176][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.708186][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6925'. [ 772.738784][T30057] netlink: 'syz.0.6926': attribute type 1 has an invalid length. [ 772.931800][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.960265][ T9386] IPVS: starting estimator thread 0... [ 772.984223][T30070] xt_hashlimit: size too large, truncated to 1048576 [ 773.055413][T30072] IPVS: using max 24 ests per chain, 57600 per kthread [ 773.160870][T30082] xt_hashlimit: size too large, truncated to 1048576 [ 773.511592][T30094] syzkaller0: entered promiscuous mode [ 773.528697][T30094] syzkaller0: entered allmulticast mode [ 773.730121][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.769174][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.855017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.807572][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.966741][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.427450][T30170] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 776.436048][T30170] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 776.471337][T30172] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 776.482985][T30173] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 776.851202][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.393524][T30197] __nla_validate_parse: 6 callbacks suppressed [ 777.393546][T30197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6969'. [ 777.887542][ T9376] net_ratelimit: 7 callbacks suppressed [ 777.887564][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.002741][T30243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6984'. [ 778.107716][T30243] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 778.117338][ T7646] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 778.159277][ T7646] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 778.206253][ T7646] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 778.231570][ T7646] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 778.477392][T30272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6992'. [ 778.620686][T30280] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6996'. [ 778.647988][T30284] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6996'. [ 778.662700][T30280] openvswitch: netlink: Missing key (keys=40, expected=100) [ 778.674568][T30284] openvswitch: netlink: Missing key (keys=40, expected=100) [ 778.757254][T30292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.767963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.844087][T30292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.854000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.868483][T30299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7003'. [ 778.879748][T30292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.889657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.926531][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.703492][T30327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7008'. [ 779.739204][T30327] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7008'. [ 779.777251][T30327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7008'. [ 779.800287][T30333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 780.005093][T30346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7016'. [ 780.069514][T30343] sctp: [Deprecated]: syz.1.7014 (pid 30343) Use of int in maxseg socket option. [ 780.069514][T30343] Use struct sctp_assoc_value instead [ 780.082130][T30353] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 780.106859][T30343] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 780.130042][T30343] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 780.267587][T30363] veth0: entered promiscuous mode [ 780.281297][T30362] veth0: left promiscuous mode [ 780.751997][T30404] bridge0: port 3(ipvlan3) entered blocking state [ 780.760441][T30404] bridge0: port 3(ipvlan3) entered disabled state [ 780.777106][T30404] ipvlan3: entered allmulticast mode [ 780.782566][T30404] bridge0: entered allmulticast mode [ 780.798932][T30404] ipvlan3: left allmulticast mode [ 780.807580][T30404] bridge0: left allmulticast mode [ 780.959011][T30410] netlink: 'syz.2.7032': attribute type 1 has an invalid length. [ 781.085486][T30410] bond6: entered promiscuous mode [ 781.108412][T30410] 8021q: adding VLAN 0 to HW filter on device bond6 [ 781.182231][T30412] bond6: (slave bridge4): making interface the new active one [ 781.196671][T30412] bridge4: entered promiscuous mode [ 781.203296][T30412] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 781.712949][T30457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.133075][T30479] wg1 speed is unknown, defaulting to 1000 [ 782.154100][T30484] wg1 speed is unknown, defaulting to 1000 [ 782.157274][T30491] netlink: 'syz.1.7057': attribute type 1 has an invalid length. [ 782.185869][T30491] netlink: 'syz.1.7057': attribute type 2 has an invalid length. [ 782.449524][T30512] __nla_validate_parse: 15 callbacks suppressed [ 782.449546][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7062'. [ 782.465394][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7062'. [ 782.496305][T30500] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 782.636989][T30522] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7064'. [ 783.086317][ T5900] net_ratelimit: 2059 callbacks suppressed [ 783.086340][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.179231][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.286620][T30558] syzkaller0: entered promiscuous mode [ 783.297496][T30558] syzkaller0: entered allmulticast mode [ 783.323763][T30562] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.7077'. [ 783.360989][T30562] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 783.528758][T30570] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 783.679017][T30580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7082'. [ 784.057692][T30597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.127033][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.588508][T30626] netlink: 'syz.1.7096': attribute type 6 has an invalid length. [ 784.602854][T30626] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 784.616542][T30626] netlink: 'syz.1.7096': attribute type 6 has an invalid length. [ 784.635989][T30626] netlink: 'syz.1.7096': attribute type 3 has an invalid length. [ 784.643924][T30626] netlink: 'syz.1.7096': attribute type 1 has an invalid length. [ 784.780780][T30633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7097'. [ 784.837819][T30636] macsec1: entered promiscuous mode [ 784.901299][T30643] Bluetooth: MGMT ver 1.23 [ 784.909557][T30643] netlink: 'syz.0.7101': attribute type 1 has an invalid length. [ 784.938296][T30640] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 785.156307][T30653] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:2 [ 785.166193][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.313284][T30661] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 785.769088][T30681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7112'. [ 785.833236][T30683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7113'. [ 786.049145][T30701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7119'. [ 786.068123][T30703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7120'. [ 786.205033][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.213192][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.561946][T30732] netlink: 'syz.1.7127': attribute type 30 has an invalid length. [ 786.566446][T30734] syzkaller1: entered promiscuous mode [ 786.581673][T30734] syzkaller1: entered allmulticast mode [ 786.633509][T30735] team0: Device ip6gre1 is of different type [ 786.674036][T30732] netlink: 'syz.1.7127': attribute type 30 has an invalid length. [ 787.158526][T30764] wg1 speed is unknown, defaulting to 1000 [ 787.250877][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.328618][ T7634] tipc: Subscription rejected, illegal request [ 787.578543][T30793] __nla_validate_parse: 6 callbacks suppressed [ 787.578568][T30793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7149'. [ 787.873051][T30794] netlink: 'syz.4.7145': attribute type 1 has an invalid length. [ 787.920407][T30820] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7152'. [ 788.226174][T30817] syzkaller0: entered promiscuous mode [ 788.242913][T30817] syzkaller0: entered allmulticast mode [ 788.291804][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.538358][T30837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7157'. [ 788.764220][T30847] ipvlan3: entered promiscuous mode [ 788.978505][T30859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7165'. [ 789.003175][T30859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7165'. [ 789.081563][T30859] bridge0: port 3(vlan2) entered blocking state [ 789.112445][T30859] bridge0: port 3(vlan2) entered disabled state [ 789.131920][T30859] vlan2: entered allmulticast mode [ 789.144196][T30859] bridge0: entered allmulticast mode [ 789.157643][T30859] vlan2: left allmulticast mode [ 789.162601][T30859] bridge0: left allmulticast mode [ 789.213609][T30875] netlink: 'syz.1.7167': attribute type 6 has an invalid length. [ 789.245744][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.281643][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7170'. [ 789.327140][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.591862][T30899] veth1_macvtap: left promiscuous mode [ 789.845677][T30911] geneve0: entered promiscuous mode [ 789.850965][T30911] geneve0: entered allmulticast mode [ 789.913338][T30919] netlink: 'syz.2.7183': attribute type 3 has an invalid length. [ 789.951849][T30922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7182'. [ 790.020490][ T7634] syzkaller0: tun_net_xmit 76 [ 790.028435][ T7634] syzkaller0: tun_net_xmit 48 [ 790.218318][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.366618][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.409192][ T9376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.896825][T30922] ip6tnl3: entered promiscuous mode [ 792.073587][T30942] bridge0: entered allmulticast mode [ 792.153020][T30943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7186'. [ 792.286913][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.380882][T30957] syzkaller1: entered promiscuous mode [ 792.388570][T30957] syzkaller1: entered allmulticast mode [ 792.418770][T30957] netlink: 'syz.2.7193': attribute type 39 has an invalid length. [ 792.445758][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.493343][T30961] tipc: Enabling of bearer rejected, failed to enable media [ 792.697489][T30969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7198'. [ 793.482090][T31023] netlink: 'syz.3.7217': attribute type 4 has an invalid length. [ 793.492162][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.616459][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7218'. [ 793.631914][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7218'. [ 793.641194][T31028] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7218'. [ 793.672560][T31028] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7218'. [ 793.708032][T31030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.748517][T31033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.809641][T31038] netlink: 'syz.2.7223': attribute type 9 has an invalid length. [ 793.978878][T31050] netlink: 'syz.3.7227': attribute type 1 has an invalid length. [ 794.105451][T31059] netlink: 'syz.2.7228': attribute type 9 has an invalid length. [ 794.116461][T31060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7227'. [ 794.293616][T31044] tipc: Disabling bearer [ 794.420902][T31057] gretap2: entered promiscuous mode [ 794.453415][T31057] bond2: (slave gretap2): making interface the new active one [ 794.471657][T31067] netlink: 'syz.4.7229': attribute type 4 has an invalid length. [ 794.484027][T31057] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 794.507700][T31067] netlink: 'syz.4.7229': attribute type 4 has an invalid length. [ 794.829559][T31086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7236'. [ 794.870250][T31095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7239'. [ 795.044093][T31101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7241'. [ 795.173277][T31103] netlink: 'syz.1.7240': attribute type 10 has an invalid length. [ 795.190318][T31103] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7240'. [ 795.273957][T31112] tipc: Enabling of bearer rejected, failed to enable media [ 795.460858][T31122] syzkaller0: entered promiscuous mode [ 795.469072][T31122] syzkaller0: entered allmulticast mode [ 795.731398][T31136] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 795.858841][T31140] tipc: Enabled bearer , priority 0 [ 795.868345][T31140] syzkaller0: entered promiscuous mode [ 795.889393][T31140] syzkaller0: entered allmulticast mode [ 795.905367][T31142] gtp0: entered promiscuous mode [ 795.910549][T31142] gtp0: entered allmulticast mode [ 795.958452][T31140] tipc: Resetting bearer [ 795.967207][T31139] tipc: Resetting bearer [ 796.022590][T31139] tipc: Disabling bearer [ 796.223165][T31156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 796.431703][T31155] bond3 (unregistering): Released all slaves [ 796.888232][T31190] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 797.299792][T31212] syzkaller1: entered promiscuous mode [ 797.307145][T31212] syzkaller1: entered allmulticast mode [ 797.458177][T31215] netlink: 'syz.2.7279': attribute type 10 has an invalid length. [ 797.477852][T31215] dummy0: entered promiscuous mode [ 797.484160][T31215] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 797.603926][T31230] netlink: 'syz.4.7282': attribute type 2 has an invalid length. [ 797.626667][T31231] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 797.803360][T31237] netdevsim netdevsim2: Direct firmware load for /. failed with error -2 [ 797.825448][T31237] netdevsim netdevsim2: Falling back to sysfs fallback for: /. [ 798.113823][T31253] wg1 speed is unknown, defaulting to 1000 [ 798.476314][T31267] geneve2: entered promiscuous mode [ 798.481863][T31267] geneve2: entered allmulticast mode [ 798.535903][T31264] nbd6: detected capacity change from 0 to 127 [ 798.553890][T31270] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 798.573261][ T5837] block nbd6: Receive control failed (result -32) [ 798.924775][ T5837] Bluetooth: hci0: command tx timeout [ 799.017351][T31283] netlink: 'syz.3.7297': attribute type 24 has an invalid length. [ 799.111310][T31285] netem: incorrect ge model size [ 799.140484][T31285] netem: change failed [ 799.403559][T31295] sctp: [Deprecated]: syz.4.7301 (pid 31295) Use of int in max_burst socket option deprecated. [ 799.403559][T31295] Use struct sctp_assoc_value instead [ 799.445933][T31298] tipc: Enabling of bearer rejected, failed to enable media [ 800.392272][T31320] __nla_validate_parse: 8 callbacks suppressed [ 800.392292][T31320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7303'. [ 800.478698][T31320] batadv1: left allmulticast mode [ 800.483793][T31320] batadv1: left promiscuous mode [ 800.508638][T31320] bridge0: port 4(batadv1) entered disabled state [ 800.557376][T31320] bridge_slave_1: left allmulticast mode [ 800.563351][T31320] bridge_slave_1: left promiscuous mode [ 800.571247][T31320] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.583570][T31320] bridge_slave_0: left allmulticast mode [ 800.591480][T31320] bridge_slave_0: left promiscuous mode [ 800.599024][T31320] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.604730][T31326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7308'. [ 800.834114][T31325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.851301][T31329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.237214][T31335] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7311'. [ 801.253989][T31335] netlink: 'syz.2.7311': attribute type 2 has an invalid length. [ 801.290374][T31335] : entered promiscuous mode [ 801.480614][T31339] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7311'. [ 801.630215][T31347] atomic_op ffff88803242e998 conn xmit_atomic 0000000000000000 [ 801.849589][T31355] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7316'. [ 801.860947][T31356] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7316'. [ 802.039124][T31367] xt_l2tp: missing protocol rule (udp|l2tpip) [ 802.234763][T31378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7323'. [ 802.256890][T31378] netlink: 'syz.3.7323': attribute type 8 has an invalid length. [ 802.802995][T31390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7328'. [ 802.857077][T31402] wg1 speed is unknown, defaulting to 1000 [ 802.989800][T31410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7335'. [ 803.077201][T31410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7335'. [ 803.111603][T31413] C: renamed from lo (while UP) [ 803.644616][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 803.762411][T31446] netlink: 'syz.3.7344': attribute type 1 has an invalid length. [ 803.922873][T31239] Set syz1 is full, maxelem 65536 reached [ 803.942995][ T7634] bridge_slave_0: left allmulticast mode [ 803.956820][ T7634] bridge_slave_0: left promiscuous mode [ 803.984646][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.027716][T31457] delete_channel: no stack [ 804.579347][ T7634] bond3 (unregistering): (slave gretap1): Releasing active interface [ 804.683093][ T7634] dvmrp0 (unregistering): left allmulticast mode [ 805.017862][ T7634] bond5 (unregistering): (slave bridge3): Releasing active interface [ 805.303576][ T7634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.316993][ T7634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.330063][ T7634] bond0 (unregistering): Released all slaves [ 805.346807][ T7634] bond1 (unregistering): Released all slaves [ 805.361735][ T7634] bond2 (unregistering): Released all slaves [ 805.377853][ T7634] bond3 (unregistering): Released all slaves [ 805.518324][ T7634] bond4 (unregistering): Released all slaves [ 805.533199][ T7634] bond5 (unregistering): Released all slaves [ 805.548911][ T7634] bond6 (unregistering): Released all slaves [ 805.563919][ T7634] bond7 (unregistering): Released all slaves [ 805.778914][T31485] __nla_validate_parse: 2 callbacks suppressed [ 805.778936][T31485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7353'. [ 805.802294][ T7634] 9: left promiscuous mode [ 805.810042][T31485] netlink: 'syz.3.7353': attribute type 7 has an invalid length. [ 805.811115][T31486] netlink: 'syz.4.7354': attribute type 10 has an invalid length. [ 805.819643][T31485] netlink: 'syz.3.7353': attribute type 8 has an invalid length. [ 805.863796][T31485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7353'. [ 805.875784][T31487] netlink: 'syz.4.7354': attribute type 10 has an invalid length. [ 805.951796][T31486] team0: Port device dummy0 added [ 805.968550][T31487] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 806.017898][T31487] team0: Failed to send options change via netlink (err -105) [ 806.034906][T31487] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 806.078131][T31487] team0: Port device dummy0 removed [ 806.110145][T31487] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 806.139811][T31497] netlink: 'syz.0.7357': attribute type 1 has an invalid length. [ 806.167194][ T7634] : left promiscuous mode [ 806.242169][T31500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7359'. [ 806.311482][ T7634] tipc: Disabling bearer [ 806.345800][ T7634] tipc: Disabling bearer [ 806.382401][ T7634] tipc: Left network mode [ 806.414070][T31505] xt_CT: No such helper "pptp" [ 806.562368][T31515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7365'. [ 806.829735][T31527] netlink: 'syz.1.7367': attribute type 24 has an invalid length. [ 807.042645][ T7634] hsr_slave_0: left promiscuous mode [ 807.074072][ T7634] hsr_slave_1: left promiscuous mode [ 807.117280][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.125172][ T7634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.137837][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.155694][ T7634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.289090][ T7634] veth0_macvtap: left allmulticast mode [ 807.298417][ T7634] veth1_macvtap: left promiscuous mode [ 807.304105][ T7634] veth0_macvtap: left promiscuous mode [ 807.322447][ T7634] veth1_vlan: left promiscuous mode [ 807.623066][ T7634] pimreg3 (unregistering): left allmulticast mode [ 808.904091][ T7634] IPVS: stop unused estimator thread 0... [ 808.977052][T31570] netlink: 'syz.1.7376': attribute type 142 has an invalid length. [ 809.566645][ T7634] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 809.575814][ T7634] bridge5 (unregistering): left promiscuous mode [ 809.627191][ T7634] bond6 (unregistering): (slave bridge6): Releasing active interface [ 809.722758][ T7634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.732677][ T7634] bond_slave_0: left promiscuous mode [ 809.738382][ T7634] bond_slave_0: left allmulticast mode [ 809.749258][ T7634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.758828][ T7634] bond_slave_1: left promiscuous mode [ 809.764351][ T7634] bond_slave_1: left allmulticast mode [ 809.774349][ T7634] bond0 (unregistering): Released all slaves [ 809.789563][ T7634] bond1 (unregistering): Released all slaves [ 809.803847][ T7634] bond2 (unregistering): Released all slaves [ 809.909412][ T7634] bond3 (unregistering): Released all slaves [ 809.925214][ T7634] bond4 (unregistering): Released all slaves [ 810.028904][ T7634] bond5 (unregistering): Released all slaves [ 810.043897][ T7634] bond6 (unregistering): Released all slaves [ 810.061015][ T7634] bond7 (unregistering): Released all slaves [ 810.079581][T31570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7376'. [ 810.173533][ T7634] tipc: Disabling bearer [ 810.179490][ T7634] tipc: Disabling bearer [ 810.185473][ T7634] tipc: Left network mode [ 813.293625][T31605] netlink: 4848 bytes leftover after parsing attributes in process `syz.1.7386'. [ 813.307539][T31604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.889513][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 813.903694][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.044812][ T43] page_pool_release_retry() stalled pool shutdown: id 124, 2 inflight 60 sec [ 875.328626][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 875.337943][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.926258][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 916.285226][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.769092][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 936.778275][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 966.205498][ T31] INFO: task kworker/u8:10:7634 blocked for more than 143 seconds. [ 966.213460][ T31] Not tainted syzkaller #0 [ 966.218926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 966.228352][ T31] task:kworker/u8:10 state:D stack:22392 pid:7634 tgid:7634 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 966.240949][ T31] Workqueue: netns cleanup_net [ 966.246516][ T31] Call Trace: [ 966.249826][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 966.252769][ T31] __schedule+0x1798/0x4cc0 [ 966.257480][ T31] ? __lock_acquire+0xab9/0xd20 [ 966.262392][ T31] ? __lock_acquire+0xab9/0xd20 [ 966.267391][ T31] ? __pfx___schedule+0x10/0x10 [ 966.272324][ T31] ? schedule+0x91/0x360 [ 966.276794][ T31] schedule+0x165/0x360 [ 966.281014][ T31] schedule_preempt_disabled+0x13/0x30 [ 966.286768][ T31] __mutex_lock+0x7e6/0x1350 [ 966.291440][ T31] ? __mutex_lock+0x5bb/0x1350 [ 966.326192][ T31] ? rfkill_unregister+0xc8/0x220 [ 966.331321][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 966.353620][ T31] ? __pfx_device_del+0x10/0x10 [ 966.363438][ T31] rfkill_unregister+0xc8/0x220 [ 966.369945][ T31] wiphy_unregister+0x238/0xae0 [ 966.377070][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 966.383042][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 966.388579][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.393837][ T31] ? ieee80211_unregister_hw+0x144/0x2c0 [ 966.400002][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 966.405665][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 966.411255][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 966.418255][ T31] hwsim_exit_net+0xef4/0xfb0 [ 966.422979][ T31] ? hwsim_exit_net+0x333/0xfb0 [ 966.427921][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 966.433142][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 966.439678][ T31] ops_undo_list+0x49a/0x990 [ 966.444597][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 966.449750][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 966.455091][ T31] cleanup_net+0x4d8/0x820 [ 966.459554][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 966.464652][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.469891][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 966.475831][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 966.481597][ T31] process_scheduled_works+0xae1/0x17b0 [ 966.487648][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 966.493682][ T31] worker_thread+0x8a0/0xda0 [ 966.498358][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 966.504858][ T31] ? __kthread_parkme+0x7b/0x200 [ 966.509849][ T31] kthread+0x711/0x8a0 [ 966.513937][ T31] ? __pfx_worker_thread+0x10/0x10 [ 966.519100][ T31] ? __pfx_kthread+0x10/0x10 [ 966.523710][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.529262][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.534575][ T31] ? __pfx_kthread+0x10/0x10 [ 966.539209][ T31] ret_from_fork+0x4bc/0x870 [ 966.543818][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 966.549365][ T31] ? __switch_to_asm+0x39/0x70 [ 966.554228][ T31] ? __switch_to_asm+0x33/0x70 [ 966.559071][ T31] ? __pfx_kthread+0x10/0x10 [ 966.563684][ T31] ret_from_fork_asm+0x1a/0x30 [ 966.568603][ T31] [ 966.571724][ T31] INFO: task kworker/1:0:26358 blocked for more than 143 seconds. [ 966.579752][ T31] Not tainted syzkaller #0 [ 966.584793][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 966.593486][ T31] task:kworker/1:0 state:D stack:24200 pid:26358 tgid:26358 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 966.605728][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 966.612445][ T31] Call Trace: [ 966.615798][ T31] [ 966.618772][ T31] __schedule+0x1798/0x4cc0 [ 966.623361][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 966.629054][ T31] ? __pfx___schedule+0x10/0x10 [ 966.633982][ T31] ? schedule+0x91/0x360 [ 966.638339][ T31] schedule+0x165/0x360 [ 966.642536][ T31] schedule_preempt_disabled+0x13/0x30 [ 966.648122][ T31] __mutex_lock+0x7e6/0x1350 [ 966.652759][ T31] ? __mutex_lock+0x5bb/0x1350 [ 966.657922][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 966.664184][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 966.669320][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 966.675218][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 966.681031][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 966.687487][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 966.693256][ T31] process_scheduled_works+0xae1/0x17b0 [ 966.698902][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 966.705036][ T31] worker_thread+0x8a0/0xda0 [ 966.709678][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 966.716189][ T31] ? __kthread_parkme+0x7b/0x200 [ 966.721175][ T31] kthread+0x711/0x8a0 [ 966.725310][ T31] ? __pfx_worker_thread+0x10/0x10 [ 966.730435][ T31] ? __pfx_kthread+0x10/0x10 [ 966.735170][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.740410][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.745755][ T31] ? __pfx_kthread+0x10/0x10 [ 966.750379][ T31] ret_from_fork+0x4bc/0x870 [ 966.755080][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 966.760229][ T31] ? __switch_to_asm+0x39/0x70 [ 966.765468][ T31] ? __switch_to_asm+0x33/0x70 [ 966.770255][ T31] ? __pfx_kthread+0x10/0x10 [ 966.774957][ T31] ret_from_fork_asm+0x1a/0x30 [ 966.779783][ T31] [ 966.782904][ T31] INFO: task syz.4.7362:31504 blocked for more than 143 seconds. [ 966.790758][ T31] Not tainted syzkaller #0 [ 966.795876][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 966.804622][ T31] task:syz.4.7362 state:D stack:25960 pid:31504 tgid:31504 ppid:26045 task_flags:0x400040 flags:0x00080002 [ 966.816630][ T31] Call Trace: [ 966.819921][ T31] [ 966.822862][ T31] __schedule+0x1798/0x4cc0 [ 966.827450][ T31] ? __lock_acquire+0xab9/0xd20 [ 966.832315][ T31] ? __lock_acquire+0xab9/0xd20 [ 966.837227][ T31] ? __pfx___schedule+0x10/0x10 [ 966.842107][ T31] ? schedule+0x91/0x360 [ 966.846842][ T31] schedule+0x165/0x360 [ 966.851053][ T31] schedule_preempt_disabled+0x13/0x30 [ 966.856630][ T31] __mutex_lock+0x7e6/0x1350 [ 966.861273][ T31] ? __mutex_lock+0x5bb/0x1350 [ 966.866165][ T31] ? rfkill_unregister+0xc8/0x220 [ 966.871217][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 966.876664][ T31] ? __pfx_device_del+0x10/0x10 [ 966.881550][ T31] rfkill_unregister+0xc8/0x220 [ 966.886510][ T31] nfc_unregister_device+0x96/0x2a0 [ 966.891807][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 966.897597][ T31] virtual_ncidev_close+0x56/0x90 [ 966.902636][ T31] __fput+0x44c/0xa70 [ 966.906701][ T31] task_work_run+0x1d4/0x260 [ 966.911321][ T31] ? __pfx_task_work_run+0x10/0x10 [ 966.916583][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 966.922085][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 966.927843][ T31] do_syscall_64+0x2bd/0xfa0 [ 966.932575][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.938735][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 966.945010][ T31] ? clear_bhb_loop+0x60/0xb0 [ 966.949734][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.955718][ T31] RIP: 0033:0x7f79b218f749 [ 966.960230][ T31] RSP: 002b:00007ffcb7e53278 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 966.968720][ T31] RAX: 0000000000000000 RBX: 00007f79b23e7da0 RCX: 00007f79b218f749 [ 966.976802][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 966.985381][ T31] RBP: 00007f79b23e7da0 R08: 00000000000000b4 R09: 0000000ab7e5356f [ 966.993405][ T31] R10: 00007f79b23e7cb0 R11: 0000000000000246 R12: 00000000000c50d2 [ 967.001437][ T31] R13: 00007f79b23e6090 R14: ffffffffffffffff R15: 00007ffcb7e53390 [ 967.009580][ T31] [ 967.012630][ T31] INFO: task syz.0.7369:31538 blocked for more than 144 seconds. [ 967.022585][ T31] Not tainted syzkaller #0 [ 967.027601][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 967.036355][ T31] task:syz.0.7369 state:D stack:26088 pid:31538 tgid:31532 ppid:26549 task_flags:0x400140 flags:0x00080002 [ 967.048370][ T31] Call Trace: [ 967.051677][ T31] [ 967.054704][ T31] __schedule+0x1798/0x4cc0 [ 967.059261][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.064130][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.069070][ T31] ? __pfx___schedule+0x10/0x10 [ 967.074223][ T31] ? schedule+0x91/0x360 [ 967.078593][ T31] schedule+0x165/0x360 [ 967.082867][ T31] schedule_preempt_disabled+0x13/0x30 [ 967.088568][ T31] __mutex_lock+0x7e6/0x1350 [ 967.093215][ T31] ? __mutex_lock+0x5bb/0x1350 [ 967.098403][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 967.103711][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 967.108828][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.114067][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 967.120053][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 967.126477][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 967.132210][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 967.137393][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 967.143129][ T31] rfkill_set_block+0x1d2/0x440 [ 967.148061][ T31] rfkill_fop_write+0x44b/0x570 [ 967.152930][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 967.158359][ T31] ? security_file_permission+0x50/0x290 [ 967.164008][ T31] ? rw_verify_area+0x255/0x4d0 [ 967.169245][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.174134][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 967.179602][ T31] vfs_write+0x27e/0xb30 [ 967.183874][ T31] ? __pfx_vfs_write+0x10/0x10 [ 967.188725][ T31] ? __fget_files+0x2a/0x420 [ 967.193331][ T31] ? __fget_files+0x2a/0x420 [ 967.197989][ T31] ? __fget_files+0x3a0/0x420 [ 967.202674][ T31] ? __fget_files+0x2a/0x420 [ 967.207869][ T31] ksys_write+0x145/0x250 [ 967.212238][ T31] ? __pfx_ksys_write+0x10/0x10 [ 967.217174][ T31] ? do_syscall_64+0xbe/0xfa0 [ 967.221877][ T31] do_syscall_64+0xfa/0xfa0 [ 967.226518][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.231766][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.237944][ T31] ? clear_bhb_loop+0x60/0xb0 [ 967.242654][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.248723][ T31] RIP: 0033:0x7fc44278f749 [ 967.253176][ T31] RSP: 002b:00007fc44362f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 967.261660][ T31] RAX: ffffffffffffffda RBX: 00007fc4429e5fa0 RCX: 00007fc44278f749 [ 967.269711][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 967.277747][ T31] RBP: 00007fc442813f91 R08: 0000000000000000 R09: 0000000000000000 [ 967.285789][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.293765][ T31] R13: 00007fc4429e6038 R14: 00007fc4429e5fa0 R15: 00007fff6920a3e8 [ 967.301928][ T31] [ 967.305076][ T31] INFO: task syz.2.7370:31546 blocked for more than 144 seconds. [ 967.312822][ T31] Not tainted syzkaller #0 [ 967.317928][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 967.326938][ T31] task:syz.2.7370 state:D stack:27016 pid:31546 tgid:31545 ppid:27028 task_flags:0x400140 flags:0x00080002 [ 967.338934][ T31] Call Trace: [ 967.342260][ T31] [ 967.345305][ T31] __schedule+0x1798/0x4cc0 [ 967.349873][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.354841][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.359727][ T31] ? __pfx___schedule+0x10/0x10 [ 967.364768][ T31] ? schedule+0x91/0x360 [ 967.369070][ T31] schedule+0x165/0x360 [ 967.373254][ T31] schedule_preempt_disabled+0x13/0x30 [ 967.378799][ T31] __mutex_lock+0x7e6/0x1350 [ 967.383439][ T31] ? __mutex_lock+0x5bb/0x1350 [ 967.388318][ T31] ? rfkill_fop_open+0x12d/0x820 [ 967.393279][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 967.398377][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 967.403675][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 967.409353][ T31] rfkill_fop_open+0x12d/0x820 [ 967.414173][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 967.419536][ T31] misc_open+0x2d5/0x350 [ 967.423816][ T31] chrdev_open+0x4cc/0x5e0 [ 967.428334][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 967.433288][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 967.440016][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 967.445043][ T31] do_dentry_open+0x953/0x13f0 [ 967.449853][ T31] vfs_open+0x3b/0x340 [ 967.453933][ T31] ? path_openat+0x2ecd/0x3830 [ 967.458790][ T31] path_openat+0x2ee5/0x3830 [ 967.463440][ T31] ? __pfx_path_openat+0x10/0x10 [ 967.468470][ T31] do_filp_open+0x1fa/0x410 [ 967.473170][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.478074][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 967.483148][ T31] ? _raw_spin_unlock+0x28/0x50 [ 967.490329][ T31] ? alloc_fd+0x64c/0x6c0 [ 967.494813][ T31] do_sys_openat2+0x121/0x1c0 [ 967.499547][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 967.504843][ T31] ? rcu_is_watching+0x15/0xb0 [ 967.509629][ T31] __x64_sys_openat+0x138/0x170 [ 967.514574][ T31] do_syscall_64+0xfa/0xfa0 [ 967.519136][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.524453][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.530528][ T31] ? clear_bhb_loop+0x60/0xb0 [ 967.535280][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.541247][ T31] RIP: 0033:0x7f9d4ed8f749 [ 967.546079][ T31] RSP: 002b:00007f9d4fccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 967.554659][ T31] RAX: ffffffffffffffda RBX: 00007f9d4efe5fa0 RCX: 00007f9d4ed8f749 [ 967.562659][ T31] RDX: 0000000000044000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 967.570775][ T31] RBP: 00007f9d4ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 967.578854][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.586904][ T31] R13: 00007f9d4efe6038 R14: 00007f9d4efe5fa0 R15: 00007ffd0464fed8 [ 967.594980][ T31] [ 967.598036][ T31] INFO: task syz.3.7372:31555 blocked for more than 144 seconds. [ 967.605874][ T31] Not tainted syzkaller #0 [ 967.610833][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 967.619572][ T31] task:syz.3.7372 state:D stack:28296 pid:31555 tgid:31554 ppid:27923 task_flags:0x400040 flags:0x00080002 [ 967.631615][ T31] Call Trace: [ 967.635006][ T31] [ 967.637965][ T31] __schedule+0x1798/0x4cc0 [ 967.642676][ T31] ? security_file_open+0xb1/0x270 [ 967.647963][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.652827][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.658134][ T31] ? __pfx___schedule+0x10/0x10 [ 967.663047][ T31] ? schedule+0x91/0x360 [ 967.668207][ T31] schedule+0x165/0x360 [ 967.672411][ T31] schedule_preempt_disabled+0x13/0x30 [ 967.678494][ T31] __mutex_lock+0x7e6/0x1350 [ 967.683155][ T31] ? __mutex_lock+0x5bb/0x1350 [ 967.688653][ T31] ? misc_open+0x51/0x350 [ 967.693035][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 967.698795][ T31] misc_open+0x51/0x350 [ 967.702980][ T31] chrdev_open+0x4cc/0x5e0 [ 967.707914][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 967.712868][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 967.719728][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 967.725629][ T31] do_dentry_open+0x953/0x13f0 [ 967.730529][ T31] vfs_open+0x3b/0x340 [ 967.735304][ T31] ? path_openat+0x2ecd/0x3830 [ 967.740129][ T31] path_openat+0x2ee5/0x3830 [ 967.745131][ T31] ? __pfx_path_openat+0x10/0x10 [ 967.750128][ T31] do_filp_open+0x1fa/0x410 [ 967.755303][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.760203][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 967.765369][ T31] ? _raw_spin_unlock+0x28/0x50 [ 967.770279][ T31] ? alloc_fd+0x64c/0x6c0 [ 967.775179][ T31] do_sys_openat2+0x121/0x1c0 [ 967.779878][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 967.785831][ T31] ? exc_page_fault+0x82/0x100 [ 967.790707][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 967.796500][ T31] __x64_sys_openat+0x138/0x170 [ 967.801372][ T31] do_syscall_64+0xfa/0xfa0 [ 967.806809][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.812060][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.818851][ T31] ? clear_bhb_loop+0x60/0xb0 [ 967.823701][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.830076][ T31] RIP: 0033:0x7f3c7618f749 [ 967.835037][ T31] RSP: 002b:00007f3c76fe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 967.843478][ T31] RAX: ffffffffffffffda RBX: 00007f3c763e5fa0 RCX: 00007f3c7618f749 [ 967.852188][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 967.860838][ T31] RBP: 00007f3c76213f91 R08: 0000000000000000 R09: 0000000000000000 [ 967.869633][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.878359][ T31] R13: 00007f3c763e6038 R14: 00007f3c763e5fa0 R15: 00007fff42ff7018 [ 967.887359][ T31] [ 967.890431][ T31] INFO: task syz.1.7391:31620 blocked for more than 145 seconds. [ 967.899254][ T31] Not tainted syzkaller #0 [ 967.904196][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 967.913580][ T31] task:syz.1.7391 state:D stack:28296 pid:31620 tgid:31619 ppid:27462 task_flags:0x400040 flags:0x00080002 [ 967.926001][ T31] Call Trace: [ 967.929298][ T31] [ 967.932249][ T31] __schedule+0x1798/0x4cc0 [ 967.937515][ T31] ? security_file_open+0xb1/0x270 [ 967.942660][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.948006][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.952865][ T31] ? __pfx___schedule+0x10/0x10 [ 967.958227][ T31] ? schedule+0x91/0x360 [ 967.962522][ T31] schedule+0x165/0x360 [ 967.967787][ T31] schedule_preempt_disabled+0x13/0x30 [ 967.973276][ T31] __mutex_lock+0x7e6/0x1350 [ 967.978648][ T31] ? __mutex_lock+0x5bb/0x1350 [ 967.983448][ T31] ? misc_open+0x51/0x350 [ 967.988450][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 967.993521][ T31] misc_open+0x51/0x350 [ 967.998393][ T31] chrdev_open+0x4cc/0x5e0 [ 968.002822][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 968.008374][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 968.015534][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 968.020490][ T31] do_dentry_open+0x953/0x13f0 [ 968.025976][ T31] vfs_open+0x3b/0x340 [ 968.030055][ T31] ? path_openat+0x2ecd/0x3830 [ 968.035418][ T31] path_openat+0x2ee5/0x3830 [ 968.040091][ T31] ? __pfx_path_openat+0x10/0x10 [ 968.045475][ T31] do_filp_open+0x1fa/0x410 [ 968.050031][ T31] ? __lock_acquire+0xab9/0xd20 [ 968.055149][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 968.060288][ T31] ? _raw_spin_unlock+0x28/0x50 [ 968.065170][ T31] ? alloc_fd+0x64c/0x6c0 [ 968.069524][ T31] do_sys_openat2+0x121/0x1c0 [ 968.074229][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 968.079985][ T31] ? __pfx_flush_tlb_func+0x10/0x10 [ 968.086389][ T31] ? sched_clock_cpu+0x74/0x430 [ 968.091303][ T31] __x64_sys_openat+0x138/0x170 [ 968.096880][ T31] do_syscall_64+0xfa/0xfa0 [ 968.101444][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.108079][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 968.114248][ T31] ? clear_bhb_loop+0x60/0xb0 [ 968.119660][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.126590][ T31] RIP: 0033:0x7fe8dcb8f749 [ 968.131044][ T31] RSP: 002b:00007fe8dda0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 968.139949][ T31] RAX: ffffffffffffffda RBX: 00007fe8dcde5fa0 RCX: 00007fe8dcb8f749 [ 968.148669][ T31] RDX: 0000000000020702 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 968.157127][ T31] RBP: 00007fe8dcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 968.165650][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.173655][ T31] R13: 00007fe8dcde6038 R14: 00007fe8dcde5fa0 R15: 00007ffd4ba4dc38 [ 968.182412][ T31] [ 968.185960][ T31] INFO: task syz.1.7391:31621 blocked for more than 145 seconds. [ 968.193783][ T31] Not tainted syzkaller #0 [ 968.199348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 968.209885][ T31] task:syz.1.7391 state:D stack:28296 pid:31621 tgid:31619 ppid:27462 task_flags:0x400040 flags:0x00080002 [ 968.222124][ T31] Call Trace: [ 968.225660][ T31] [ 968.228636][ T31] __schedule+0x1798/0x4cc0 [ 968.233162][ T31] ? security_file_open+0xb1/0x270 [ 968.239098][ T31] ? __lock_acquire+0xab9/0xd20 [ 968.243993][ T31] ? __lock_acquire+0xab9/0xd20 [ 968.249377][ T31] ? __pfx___schedule+0x10/0x10 [ 968.254265][ T31] ? schedule+0x91/0x360 [ 968.259048][ T31] schedule+0x165/0x360 [ 968.263241][ T31] schedule_preempt_disabled+0x13/0x30 [ 968.269441][ T31] __mutex_lock+0x7e6/0x1350 [ 968.274055][ T31] ? __mutex_lock+0x5bb/0x1350 [ 968.279338][ T31] ? misc_open+0x51/0x350 [ 968.283690][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 968.289500][ T31] misc_open+0x51/0x350 [ 968.293713][ T31] chrdev_open+0x4cc/0x5e0 [ 968.298905][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 968.303860][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 968.310791][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 968.316620][ T31] do_dentry_open+0x953/0x13f0 [ 968.321430][ T31] vfs_open+0x3b/0x340 [ 968.326335][ T31] ? path_openat+0x2ecd/0x3830 [ 968.331146][ T31] path_openat+0x2ee5/0x3830 [ 968.336306][ T31] ? __pfx_path_openat+0x10/0x10 [ 968.341294][ T31] do_filp_open+0x1fa/0x410 [ 968.345971][ T31] ? __lock_acquire+0xab9/0xd20 [ 968.350870][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 968.356255][ T31] ? _raw_spin_unlock+0x28/0x50 [ 968.361131][ T31] ? alloc_fd+0x64c/0x6c0 [ 968.365563][ T31] do_sys_openat2+0x121/0x1c0 [ 968.370280][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 968.375969][ T31] ? exc_page_fault+0x82/0x100 [ 968.380774][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 968.386810][ T31] __x64_sys_openat+0x138/0x170 [ 968.391684][ T31] do_syscall_64+0xfa/0xfa0 [ 968.396679][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.401902][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.408447][ T31] ? clear_bhb_loop+0x60/0xb0 [ 968.413134][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.419784][ T31] RIP: 0033:0x7fe8dcb8f749 [ 968.424211][ T31] RSP: 002b:00007fe8dd9ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 968.433346][ T31] RAX: ffffffffffffffda RBX: 00007fe8dcde6090 RCX: 00007fe8dcb8f749 [ 968.441855][ T31] RDX: 0000000000020702 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 968.454867][ T31] RBP: 00007fe8dcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 968.462883][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.471396][ T31] R13: 00007fe8dcde6128 R14: 00007fe8dcde6090 R15: 00007ffd4ba4dc38 [ 968.480115][ T31] [ 968.483159][ T31] INFO: task syz-executor:31627 blocked for more than 145 seconds. [ 968.491789][ T31] Not tainted syzkaller #0 [ 968.497209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 968.506581][ T31] task:syz-executor state:D stack:27704 pid:31627 tgid:31627 ppid:1 task_flags:0x400040 flags:0x00080000 [ 968.519049][ T31] Call Trace: [ 968.522355][ T31] [ 968.526223][ T31] __schedule+0x1798/0x4cc0 [ 968.530782][ T31] ? security_file_open+0xb1/0x270 [ 968.536921][ T31] ? __lock_acquire+0xab9/0xd20 [ 968.541804][ T31] ? __lock_acquire+0xab9/0xd20 [ 968.547151][ T31] ? __pfx___schedule+0x10/0x10 [ 968.552032][ T31] ? schedule+0x91/0x360 [ 968.556759][ T31] schedule+0x165/0x360 [ 968.560938][ T31] schedule_preempt_disabled+0x13/0x30 [ 968.567198][ T31] __mutex_lock+0x7e6/0x1350 [ 968.571843][ T31] ? __mutex_lock+0x5bb/0x1350 [ 968.577140][ T31] ? misc_open+0x51/0x350 [ 968.581485][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 968.587018][ T31] misc_open+0x51/0x350 [ 968.591183][ T31] chrdev_open+0x4cc/0x5e0 [ 968.596392][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 968.601354][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 968.608459][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 968.613443][ T31] do_dentry_open+0x953/0x13f0 [ 968.618762][ T31] vfs_open+0x3b/0x340 [ 968.622837][ T31] ? path_openat+0x2ecd/0x3830 [ 968.628356][ T31] path_openat+0x2ee5/0x3830 [ 968.632972][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 968.638915][ T31] ? count_memcg_event_mm+0x21/0x260 [ 968.644225][ T31] ? __pfx_path_openat+0x10/0x10 [ 968.649501][ T31] ? __pfx___up_read+0x10/0x10 [ 968.654338][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 968.659656][ T31] do_filp_open+0x1fa/0x410 [ 968.664186][ T31] ? __lock_acquire+0xab9/0xd20 [ 968.669321][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 968.675068][ T31] ? _raw_spin_unlock+0x28/0x50 [ 968.679959][ T31] ? alloc_fd+0x64c/0x6c0 [ 968.684360][ T31] do_sys_openat2+0x121/0x1c0 [ 968.689079][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 968.695101][ T31] ? fd_install+0x97/0x540 [ 968.699527][ T31] ? fd_install+0x30d/0x540 [ 968.704065][ T31] __x64_sys_openat+0x138/0x170 [ 968.709464][ T31] do_syscall_64+0xfa/0xfa0 [ 968.713987][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.719701][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.726579][ T31] ? clear_bhb_loop+0x60/0xb0 [ 968.731290][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.737661][ T31] RIP: 0033:0x7fa6a458df11 [ 968.742083][ T31] RSP: 002b:00007fff6bbb2090 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 968.751058][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa6a458df11 [ 968.759951][ T31] RDX: 0000000000000002 RSI: 00007fa6a46149b7 RDI: 00000000ffffff9c [ 968.768947][ T31] RBP: 00007fa6a46149b7 R08: 0000000000000000 R09: 00007fa6a531d6c0 [ 968.777448][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 968.786266][ T31] R13: 0000000000000003 R14: 00007fff6bbb2468 R15: 0000000000000000 [ 968.794269][ T31] [ 968.797810][ T31] [ 968.797810][ T31] Showing all locks held in the system: [ 968.806115][ T31] 1 lock held by khungtaskd/31: [ 968.810974][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 968.821566][ T31] 2 locks held by getty/5590: [ 968.826897][ T31] #0: ffff88814d40a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 968.837195][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 968.848053][ T31] 4 locks held by kworker/u8:10/7634: [ 968.853430][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 968.865335][ T31] #1: ffffc90003b7fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 968.876815][ T31] #2: ffffffff8f2beed0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 968.886652][ T31] #3: ffffffff8f5abc68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 968.897278][ T31] 3 locks held by kworker/1:0/26358: [ 968.902569][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 968.914289][ T31] #1: ffffc9000b317ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 968.928579][ T31] #2: ffffffff8f5abc68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 968.940612][ T31] 2 locks held by syz.4.7362/31504: [ 968.946305][ T31] #0: ffff888048e2d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 968.956592][ T31] #1: ffffffff8f5abc68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 968.967069][ T31] 2 locks held by syz.0.7369/31538: [ 968.972273][ T31] #0: ffffffff8f5abc68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 968.982647][ T31] #1: ffff888048e2d100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 968.992416][ T31] 2 locks held by syz.2.7370/31546: [ 968.998316][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.007885][ T31] #1: ffffffff8f5abc68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 969.018424][ T31] 1 lock held by syz.3.7372/31555: [ 969.023529][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.032737][ T31] 1 lock held by syz.1.7391/31620: [ 969.038343][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.047299][ T31] 1 lock held by syz.1.7391/31621: [ 969.052409][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.061589][ T31] 1 lock held by syz-executor/31627: [ 969.067394][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.076351][ T31] 1 lock held by syz-executor/31630: [ 969.081640][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.091155][ T31] 1 lock held by syz-executor/31631: [ 969.096935][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.105920][ T31] 1 lock held by syz-executor/31633: [ 969.111206][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.120444][ T31] 1 lock held by syz-executor/31638: [ 969.126427][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.135437][ T31] 1 lock held by syz-executor/31640: [ 969.140817][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.149988][ T31] 1 lock held by syz-executor/31643: [ 969.155756][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.164347][ T31] 1 lock held by syz-executor/31644: [ 969.169673][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.179056][ T31] 1 lock held by syz-executor/31646: [ 969.184934][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.193438][ T31] 1 lock held by syz-executor/31648: [ 969.199421][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.208632][ T31] 1 lock held by syz-executor/31653: [ 969.213921][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.222948][ T31] 1 lock held by syz-executor/31656: [ 969.228731][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.237924][ T31] 1 lock held by syz-executor/31657: [ 969.243220][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.252637][ T31] 1 lock held by syz-executor/31659: [ 969.258695][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.267562][ T31] 1 lock held by syz-executor/31661: [ 969.272852][ T31] #0: ffffffff8e7757a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 969.281352][ T31] [ 969.283695][ T31] ============================================= [ 969.283695][ T31] [ 969.292175][ T31] NMI backtrace for cpu 0 [ 969.292190][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 969.292207][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 969.292217][ T31] Call Trace: [ 969.292228][ T31] [ 969.292237][ T31] dump_stack_lvl+0x189/0x250 [ 969.292265][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 969.292287][ T31] ? __pfx__printk+0x10/0x10 [ 969.292313][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 969.292334][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 969.292355][ T31] ? __pfx__printk+0x10/0x10 [ 969.292374][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 969.292402][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 969.292423][ T31] watchdog+0xf60/0xfa0 [ 969.292443][ T31] ? watchdog+0x1e2/0xfa0 [ 969.292463][ T31] kthread+0x711/0x8a0 [ 969.292487][ T31] ? __pfx_watchdog+0x10/0x10 [ 969.292502][ T31] ? __pfx_kthread+0x10/0x10 [ 969.292524][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 969.292545][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.292566][ T31] ? __pfx_kthread+0x10/0x10 [ 969.292588][ T31] ret_from_fork+0x4bc/0x870 [ 969.292606][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 969.292628][ T31] ? __switch_to_asm+0x39/0x70 [ 969.292640][ T31] ? __switch_to_asm+0x33/0x70 [ 969.292652][ T31] ? __pfx_kthread+0x10/0x10 [ 969.292673][ T31] ret_from_fork_asm+0x1a/0x30 [ 969.292700][ T31] [ 969.292706][ T31] Sending NMI from CPU 0 to CPUs 1: [ 969.447007][ C1] NMI backtrace for cpu 1 [ 969.447038][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 969.447071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 969.447084][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 969.447116][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 b1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 969.447133][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 969.447151][ C1] RAX: a962a85eab9af400 RBX: ffffffff81967b47 RCX: a962a85eab9af400 [ 969.447165][ C1] RDX: 0000000000000001 RSI: ffffffff8d70e436 RDI: ffffffff8bbf08e0 [ 969.447179][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 969.447193][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cee70 [ 969.447208][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003957b58 [ 969.447221][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 969.447253][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.447266][ C1] CR2: 0000563e0df94168 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 969.447283][ C1] Call Trace: [ 969.447291][ C1] [ 969.447298][ C1] default_idle+0x13/0x20 [ 969.447317][ C1] default_idle_call+0x73/0xb0 [ 969.447338][ C1] do_idle+0x1e7/0x510 [ 969.447362][ C1] ? __pfx_do_idle+0x10/0x10 [ 969.447393][ C1] cpu_startup_entry+0x44/0x60 [ 969.447414][ C1] start_secondary+0x101/0x110 [ 969.447443][ C1] common_startup_64+0x13e/0x147 [ 969.447480][ C1]