last executing test programs: 26.923985329s ago: executing program 2 (id=2791): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000c14040027bd7000ffdbdf250802010002000000080001000000000008003d000000000008003d000300000008003d00010000000800010000000000081000000000000000003d"], 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a0100000000000000"], 0xfc}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) 26.77482741s ago: executing program 2 (id=2794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000005000000000000000000711232000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x9, 0xff, 0x7fff, 0x110, r0, 0x4a68, '\x00', r1, r2, 0x1, 0x1, 0x2, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.705043551s ago: executing program 2 (id=2795): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0xf, r2, 0x0, r0}, 0x10) 26.654112525s ago: executing program 0 (id=2797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffc48, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004800}, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r3, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073794b7468152ed086a6ce335c677a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 26.572590234s ago: executing program 0 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), r0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) 26.57155943s ago: executing program 2 (id=2799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x478e}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{}], 0x1, 0x10) 26.280087397s ago: executing program 2 (id=2800): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 26.216946847s ago: executing program 0 (id=2801): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) recvfrom$ax25(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40004, 0x0, r3, 0x2000, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 26.118090097s ago: executing program 0 (id=2804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000007000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000001e621844abce3deadcc1a65a3452ad06f7649ed0c7ff08ff8d414b3d6572c35d04251e869fb3e63d51691bc9ed8d57502665fc0b43bb06bd90d48971b9eb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r2, &(0x7f0000000080)={{0x3, @null, 0x1}, [@default, @bcast, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)}, 0x10) 25.999168463s ago: executing program 2 (id=2807): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000f4ff00"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000001080), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "00000073e9e05e00", "8e083700daf38a6d69e9b5e9c2f133d7", "0700f328", "12772541f8eb02bb"}, 0x28) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0xffffffffffffffff, 0x12) sendfile(r4, r7, 0x0, 0x20000000002) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r5], 0xfc}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x5, @private=0xa010100}, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0x85, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) 25.949062598s ago: executing program 0 (id=2808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x24020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x10, 0x3, [0x9, 0x1000, 0x8]}, &(0x7f0000000580)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000006c0)={r3, 0xb8, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x2efb, @loopback}, @in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e22, 0xe, @remote, 0x5}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x9, @loopback, 0x7}, @in6={0xa, 0x4e24, 0x5, @private2, 0x4}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}]}, &(0x7f0000000700)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000080)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xf8, &(0x7f0000000140)=""/248, 0x40f00, 0x35, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xe, 0xd, 0x6c39}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x0, 0x3, 0x9, 0x8}, {0x3, 0x5, 0x1, 0x4}, {0x5, 0x2, 0x2, 0x9}, {0x2, 0x4, 0x10, 0x6}, {0x2, 0x2, 0x7, 0x7}], 0x10, 0x100}, 0x94) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40800048}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7012fddbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f00000000c0)=r6, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000040), 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 25.777080778s ago: executing program 0 (id=2811): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x3}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277e6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff110078ac1e0001ffffffff16f19078e70000000000000000"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)='}', 0x1}], 0x1}}], 0x1, 0x40090) shutdown(r3, 0x0) setsockopt(r9, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="d7b19426ae162e2165e1f8592cdabd7ca562516a1a4e3bd688f63e7b5c91fd620d7b7db9e7adb101177c845a5449fbcdad70989edcf97120e2ad25c5875cf42894c3955bae814ee345cecda588c3cc"], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 25.395172226s ago: executing program 3 (id=2820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="620ac4ff0000000071104d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000140)="09c69e16e160673a133d6164467635bd", 0x10}], 0x2) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000600)={0x0, 0x6, @status={[0x7, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7, 0x9, 0x100000001]}, [0x1, 0x10001, 0xffffffffffff8000, 0x180000000000, 0xa29, 0x9, 0x6, 0x9, 0x77b, 0x400, 0x8, 0x3, 0x81, 0x0, 0x5, 0x3, 0x10000, 0x8000, 0xfffffffffffffff7, 0xd06e, 0x100000001, 0xfff, 0xa6c5d15, 0xcc, 0x6, 0x4, 0x4, 0x8a, 0x2, 0xffffffff, 0x1dd, 0xffff, 0x5, 0xbf0, 0x7fffffffffffffff, 0x1ff, 0x96b, 0x7fffffffffffffff, 0x5, 0x7, 0xe, 0xe10, 0x5, 0x5, 0x2, 0xffffffff, 0x0, 0x3ff, 0x5, 0x7ff, 0x7d19, 0x3, 0x5, 0x9, 0x3, 0x0, 0x8, 0x4, 0x0, 0x2b14, 0x7, 0x4, 0xb46, 0x9]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x3a}, {0x18, 0x110, 0xe, "025f0dc359"}], 0x28}, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000e6dc00000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 25.107206383s ago: executing program 3 (id=2825): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, 0x0}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xd0, 0x0, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) recvfrom$unix(r3, &(0x7f00000001c0)=""/128, 0x80, 0x40000000, 0x0, 0x0) 24.207408925s ago: executing program 3 (id=2835): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x57}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x25, 0x0, {0x25, 0x4, 0x0, 0x0, 0x9, 0x0, 0xb, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x73, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x6, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x12, "c60000b3000006000000000000000000"}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xa, 0x3, [{0x2, 0x4, "7f36"}]}]}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9bc3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1d, '\x00', r1, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) 24.086034141s ago: executing program 3 (id=2837): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x88010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x6c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x6c}}, 0x8004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f00000005002d000000000005002e030600000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8015}, 0x20004804) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x2}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r9, &(0x7f0000000840)="e8", 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x1f}, 0x1c) 24.029573782s ago: executing program 3 (id=2840): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x9c, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e24, 0x7, @loopback, 0x4}, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff9}, @in6={0xa, 0x4e23, 0x8, @empty, 0x400}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x9c, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e24, 0x7, @loopback, 0x4}, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff9}, @in6={0xa, 0x4e23, 0x8, @empty, 0x400}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1}, 0x8) socketpair(0x2, 0x80005, 0x6, &(0x7f0000000180)) (async) socketpair(0x2, 0x80005, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000001c0)=0x9, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000200)={0x0, @aes128, 0x0, @desc2}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000240)={0x7f, {{0xa, 0x4e23, 0x0, @mcast2, 0x80}}}, 0x88) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000340)='cgroup.max.depth\x00', 0x2, 0x0) (async) openat$cgroup_int(r5, &(0x7f0000000340)='cgroup.max.depth\x00', 0x2, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x0, {0x2, 0xf0, 0x4}, {0x1, 0xff}}], 0x20) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$SIOCAX25GETINFO(r6, 0x89ed, &(0x7f00000003c0)) ioctl$SIOCAX25GETINFO(r6, 0x89ed, &(0x7f0000000440)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f00000004c0)=""/218, 0xda, 0x0, &(0x7f00000005c0)=""/89, 0x59}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f00000004c0)=""/218, 0xda, 0x0, &(0x7f00000005c0)=""/89, 0x59}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000006c0)={r2, 0x9e, 0x6, 0xe}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r2) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r8, 0x8, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008051}, 0x40040) (async) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r8, 0x8, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008051}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@newchain={0x34, 0x64, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0x8}, {0x0, 0x1fffa}}, [@TCA_RATE={0x6, 0x5, {0x3f, 0x1b}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}}, 0x814) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0xc) ioctl$NS_GET_PARENT(r9, 0xb702, 0x0) (async) r12 = ioctl$NS_GET_PARENT(r9, 0xb702, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000a40)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@RTM_GETNSID={0x54, 0x5a, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r7}, @NETNSA_PID={0x8, 0x2, r11}, @NETNSA_FD={0x8, 0x3, r12}, @NETNSA_PID={0x8, 0x2, r13}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r9}, @NETNSA_PID={0x8, 0x2, r14}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x48850) (async) sendmsg$nl_route(r3, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@RTM_GETNSID={0x54, 0x5a, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r7}, @NETNSA_PID={0x8, 0x2, r11}, @NETNSA_FD={0x8, 0x3, r12}, @NETNSA_PID={0x8, 0x2, r13}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r9}, @NETNSA_PID={0x8, 0x2, r14}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x48850) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r15, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) 23.806109674s ago: executing program 3 (id=2842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.716965397s ago: executing program 4 (id=2937): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r3 = socket(0x10, 0x80002, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800048004000500080000003e"], 0x44}}, 0x0) 16.660778383s ago: executing program 4 (id=2939): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="923efd3dd3fbd0b539c74df3478b29a17cb679c25234c1c107bf2db340022b7b527e9a5f84e3366bbff2f7fa118506b468fc461687e1b15cd5341a90cf288ad0e8e471bb2c6a7119b0f84036cce2a173", @ANYRESHEX], 0x30}, 0x1, 0xff07}, 0x2000000) pipe(&(0x7f0000000080)) 16.59789951s ago: executing program 4 (id=2941): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x1, &(0x7f0000000000)=@raw=[@generic={0x60, 0x1, 0x7, 0x2, 0x10000}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.527536459s ago: executing program 4 (id=2943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async, rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (rerun: 64) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) (async) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000180)=""/71, 0x47}], 0x2}, 0x0) 16.380716528s ago: executing program 4 (id=2946): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r2) sendmmsg$alg(r2, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x100, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0xa5, 0x7, 0x1, 0x0, "f3c7766f944683b3356b9ebb68868eb47490d70cd5cc6e41a0a0fd8069d192a2459bbc0c912d419ff4a7f40ea35723b2c6247024959350f04da857676d6980cf5fc1cab1e283760b117b98f456a312f977e7a5733f1f24a20afc61831286288c025b8d166375e3b4ac5f2954eabed28c2dac69e4ae6d1c71bf2093809da737a404b4d5e347808d13f01c8d3956afc30be249aea952f3134247608dfef594c1474b"}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x19, 0x7, 0x1, 0x0, "ed7180fbf71c993747fd82a7ab60545671a4b0f8b6"}]}, 0x100}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="110000000400000004000000feffffff00000000", @ANYRES32, @ANYBLOB="1a00000000000000000000f7ffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="040100001600010000000000000000007f000001000000000000000000000000f7010080000000000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ac1414aa000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe5d00000c000f00fdffffffffffffff"], 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r6, 0x200}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70160, 0x100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffd, 0xc2}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 15.761274088s ago: executing program 1 (id=2955): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00010000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="a0ff00001100000000000000a7ef0000c30a00fe4100000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000200)) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) 15.49518945s ago: executing program 4 (id=2956): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) (async) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x100, 0x7, 0x0, 0x0, [{{r0}, 0x2}, {{r0}, 0xffffffffffffffff}, {{r0}, 0x6}, {{r1}, 0x8}, {{r0}, 0x3ff}, {{r0}, 0x325}, {{r2}, 0x2}]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2f, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) write$cgroup_devices(r4, &(0x7f0000000300)={'b', ' *:* ', 'rwm\x00'}, 0xa) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000340)={{0xfffff000, 0xfffffff7}, 0x100, './file0\x00'}) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000480)={r0, 0xfffff088, 0x4, "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"}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r3, 0xaf8ba000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r3, 0xffffffffffffffff}, 0x4) (async) getsockname$packet(r3, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000016c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x13, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000015c0)='GPL\x00', 0x2, 0x48, &(0x7f0000001600)=""/72, 0x40f00, 0x4b, '\x00', r7, 0x0, r3, 0x8, &(0x7f0000001700)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x3, 0xb, 0x1ff, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001780)=[r4, r3, r3, r3], &(0x7f00000017c0)=[{0x4, 0x3, 0x5, 0x3}, {0x0, 0x4, 0x4, 0x6}], 0x10, 0x8001}, 0x94) (async) connect$unix(r3, &(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg(r4, &(0x7f0000002e40)=[{{&(0x7f0000001940)=@x25, 0x80, &(0x7f00000029c0)=[{&(0x7f00000019c0)="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", 0x1000}], 0x1, &(0x7f0000002a00)=[{0xa0, 0x10f, 0xfffffa75, "841b686c2a820e0cf8588f4499f2d30632330eff5b61fb90073e01cf68ff91c63182b212b801d6a214f602a842807b921bbd3bd09fc98c7b56a32cceab9c97f04a0c0e58a99a722dac4720cc16d08de5bd59363b04570455b1ca299f87233a347d409bb335acbfcc98b857098316ef81a82b7d7d3c784d45c5c1b7c619074206dbeae1a3ed313f5259712e527061"}, {0x90, 0x102, 0x7ff, "b9093b76365d7e44d9dc39604d927b4b1abceb2719eb31c806c9767289a688da1c5e4ede10775bc27662d2ce757242d9ee5bed5c8105d2288b821a836bfeb54099c6f5b52f59082ca07894c5e4ef0ede38b0ef7dbbbb8978957fb4a472941fc301240a7b4d12c45112150c5e581d5f3097727f980e8a9d05d828729693d2"}, {0x90, 0x119, 0x7, "9ad6b05d1aee79f1f00bcf349d899ee1d13fdbe21dfdf1265989838e5bbdfe9a3c0e588b49567a22d709f8f9736f4c8da3c010fc3efd96d43760f0a90f7ebc27fdf978e95be2411a8ab16ee8f47e7c18e04d8846e2de31bc08d48e4e7e45bb711e0e5690518fa9f4706b02cb059cea94d431bea2905df7ea96f7b6e2"}], 0x1c0}}, {{&(0x7f0000002bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x3, 0x4, 0x4, {0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4be}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)="aad2356aa8887ee2ef4db5fe90f975f254949409da59c6fea1b84bdc45e7150a8ea3f66e8955843840910184723ef62a1b57904ae112f272f467591e500159fd18850d2dee709c29d060b90fdbaf8077b9b21951131be3e219b838cf3319e2875e6c43feb4899f1c4f7b98ae50bb80db7fe7957da5ca8c87f88ab4facd421f0836552518d152c4b041b2ca26595b7379632143e9f3b000ae25012e2b994e5ee9f7d433654a5509e09a02f642bed8e20ca732d6c31c079abc50a9f8ec7dcc30cf3ca418b6acc744c8b017b26a572b94869e04858faf4c4249951561aa79ba805b81", 0xe1}], 0x1, &(0x7f0000002d80)=[{0x90, 0xf6, 0xfffffff8, "acc4f1d11d07957eb189439e4a08791c0f073f8c53576de49a298c3fa51ebedb6033279238f047076d9fae50f40272b22f69be1453b771bb9268bf55bc6866fc930307645741b3686cf446ec373e94f8451df3db38d36c58b3581fd422a49ff532fd0031a3a0946f8698ebc94090d69e6b924eb783d78c76a7226d6809"}, {0x28, 0x106, 0x2, "25fd63dd6d63d5f1232caa7dc8f2807f7dbe4da0d6b676"}], 0xb8}}], 0x2, 0x1) r8 = openat$cgroup(r3, &(0x7f0000002ec0)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000002f00)='devices.deny\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000002f40)={0xb6, 0x8, 0x0, 0xffffffad, 0x8, 0x0, [{0x9, 0x7fffffffffffffff, 0x6, '\x00', 0x800}, {0x8, 0x9, 0x1, '\x00', 0x800}, {0xfffffffffffffffa, 0xb18000000, 0xffff, '\x00', 0x108}, {0x100, 0x7, 0xffffffff, '\x00', 0x1d00}, {0x5, 0xd3, 0x1, '\x00', 0x301}, {0x80000001, 0xfffffffffffffff8, 0x10001, '\x00', 0x407}, {0x9, 0x401, 0x5, '\x00', 0x2000}, {0x7fffffffffffffff, 0xf, 0x2, '\x00', 0x500}]}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000003180)='cgroup.threads\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)=@ipv6_newrule={0x7c, 0x20, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0x10, 0x1, 0xf9, 0x0, 0x0, 0x3, 0x10}, [@FRA_DST={0x14, 0x1, @mcast2}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x28ae}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008080) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) openat$cgroup_pressure(r4, &(0x7f0000003340)='memory.pressure\x00', 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000003380), &(0x7f00000033c0)=0x4) (async) r12 = openat$cgroup(r5, &(0x7f0000003400)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000003440)='freezer.state\x00', 0x0, 0x0) 15.404634762s ago: executing program 1 (id=2957): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b400000000000000691049000000000004a00000f0ffffff9500000000000000595ff42438e09d46d5771f2499aab00f95e771a01912244048da84e3981138666fe261965f244a83bb99c807683fc26880cc071c70eadb60a18bb6d542fb110f2cc6a8f253ffe56f1b03209cf9aeaed79c76c629189379e5c5c3f91baf0b332c04ef8e6c0506c7f1c2fc8b51a47129fb00db6112b1fc82ecfdcef6f122258e857fbea199c061f3a91efb974a09f11efc19c3dd147362ff557bf7808295bce8aa0ddcff13aa3dc8c0f5b0c2275e"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x2f3, &(0x7f000000cf3d)=""/195, 0x0, 0x28}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000006c0)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50005}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r5 = socket(0x3, 0x3, 0xfffffff4) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1a2faa751c5838bd, 0x40010, r1, 0x21db6000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000000800000070000", @ANYRES32, @ANYBLOB="000f56c973", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r11}, &(0x7f00000007c0), &(0x7f0000000640)=r10}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000240), &(0x7f0000000340)='%pI4 \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r11, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r11, 0x0, &(0x7f0000000400)=""/154}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 15.398951678s ago: executing program 1 (id=2958): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x1}}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x668, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x9}, {}, {0x1c, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x63c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bond\x00'}, @TCA_FW_ACT={0x600, 0x4, [@m_nat={0x100, 0x1a, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xfffff800, 0xc}, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0xfffffffb, 0x0, 0x4835a65a, 0x10001}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xff, 0x1, 0xf2, 0x3aa5}, @empty, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x3, 0x6, 0x3, 0x1000}, @private=0xa010101, @multicast1}}]}, {0x37, 0x6, "527b346953a7f4eab963d2838aea7eed31d3e1ffa96ddf6b30682831a6144aa07f7a0749a6e9b85725547f82088ef68706098a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x128, 0x0, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xff10}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x901}]}]}, {0xec, 0x6, "1dd10353b5baf2a8f185a18a68728dca51999f9917248193ff97e6b07ca7af257e217acd2bae15da494a85fc588184a24632ade56b273d776d25315ea789b14c6147d2a11e6824f0163fe36701df9a73822b04b4901dfc047af4942b132fdadc741cd3b6023b0084477ea6f470cddaa98d9100cea2f99f463087ac3962cfb21b249ed988027a8686fc704d70b5daedb8818c56ca13626a9e6344f969f6f5026dca037f86975dc1b23dae63634a19d0c47d4a0427b3b8907c22fde11ddea0c3a63b13349f67775fa75da1c1c444ffd7f8798dcbbdda61255529acbd1e63723f4ed02d2e4638c67058"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0xc0, 0xc, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xb2, 0x846, 0x3, 0x400, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x6f, 0x6, "876090883237454c7147eb4fafd673d6c0c439c7daf1e2b277f208355e0fbd0664adb22d40ee96e54b8b6dedbea47035e14470f995340093e227c95af88418f1e0e509b53d108010f2ba05abaae5f2de0ac7899395b93064d1f6542a330f964ba403eae7057f1c9fa25da2"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_xt={0x314, 0x2, 0x0, 0x0, {{0x7}, {0x204, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x8c, 0x6, {0x55da, 'filter\x00', 0x3, 0xe, "1bad2e3b5d966e6a6c85a3381f9b7102d72accc0fdd3e307aea3ec60f54372ebc31f3afd752fdb205d972181230c2d50e077f19e56b2d7838915e2ae146e7595c19adc021abbaefd23ef03688ed09abb717a900879ad9e32e3cd223def52e323a49a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0xe5, 0x6, {0x3, 'raw\x00', 0x2, 0x726, "e95386102b8ef5f5edb58535285a763f63ac55684d0a3b13e59a315c5301d74cc94e16ce20066dfa9698cbd8542158dfc32d92501ef87e1219aef77c177a75b7744911a6bf29d1242f0e6238afd283691c664f8db27a8c56a780e7c9a3c4ec23b848d6ebc0a54c01aa18e766d30c432d5a92fbfc4f54ce80d48602d0e6b0aec2f5f4301caa33079c69b542c65575d1e7b18c7484d0a1ce7dd3e43691fe326e9cdca73ac7bb38e346670b05495904bc5c3114fcd8b2c2a0cc78e0b4"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xeb, 0x6, "3bed416a6fc74c2d2040155d8536bd4cebed8f000cadcaa031ccdafc6112ce25a1b8beeda4f9f3adc0434ada069c9a50e24f060256151db2a0980bc47f2ac50df86224f1a862c6d75d77cea7f0ab50dbfe550628b4ef1aa8fb39a57337e988bd6df5aa808a70063e77fd2831799cdee82853dbdc8142061179572c6e882c720db15d9f81165b9e056ce186679a923746153e261dbf25e33a24c24bc5da488859f49cdb63f5859b2bf603f009c32fd2c0226daeba56e30cafadbbaaf719e479492eb3d776933fd27a9c370813c7a4a69c38202d6473a4e34dd19efde73eff14dd038056f654f764"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x3ddb}]}}]}, 0x668}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.357968457s ago: executing program 1 (id=2959): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000080)="6dee091a14789348919798fabc50a19c31d33107571e3542d35242b8a0926158efb3edb10ea05308c6e1a5b2726ac8694730b87ecc6249c603856a7095e91d3905f14a33cfae8b50fad639516f0e17656ed0f2997e152c4ffc98a9c1b296f1d860219b6ef700"/114) r2 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c) 15.124762551s ago: executing program 1 (id=2960): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x38, r1, 0x1, 0x70bd2d, 0xa2, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x38}}, 0x8804) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x38, r1, 0x1, 0x70bd2d, 0xa2, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x38}}, 0x8804) (async) 15.124525094s ago: executing program 1 (id=2961): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r0, 0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x65, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2e}, {[@generic={0x88, 0x2}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}, {"66bfb3932d8e9ecd07f03026b59b2a758b63041010e93ad92dc16d1f89d0275afd57adefffdbf3c01d9b57e22f3f6f68976e774bc2a5cff5cd"}}}}, 0x73) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x2400c00c) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e1f, 0x5, @private1, 0x8}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998b61d7da0c86d70000001010"], 0x10b8}, 0x0) 10.102553316s ago: executing program 32 (id=2811): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x3}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277e6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff110078ac1e0001ffffffff16f19078e70000000000000000"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)='}', 0x1}], 0x1}}], 0x1, 0x40090) shutdown(r3, 0x0) setsockopt(r9, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="d7b19426ae162e2165e1f8592cdabd7ca562516a1a4e3bd688f63e7b5c91fd620d7b7db9e7adb101177c845a5449fbcdad70989edcf97120e2ad25c5875cf42894c3955bae814ee345cecda588c3cc"], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 10.061015275s ago: executing program 33 (id=2807): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000f4ff00"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000001080), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "00000073e9e05e00", "8e083700daf38a6d69e9b5e9c2f133d7", "0700f328", "12772541f8eb02bb"}, 0x28) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0xffffffffffffffff, 0x12) sendfile(r4, r7, 0x0, 0x20000000002) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r5], 0xfc}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x5, @private=0xa010100}, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0x85, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) 36.20205ms ago: executing program 34 (id=2961): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r0, 0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x65, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2e}, {[@generic={0x88, 0x2}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}, {"66bfb3932d8e9ecd07f03026b59b2a758b63041010e93ad92dc16d1f89d0275afd57adefffdbf3c01d9b57e22f3f6f68976e774bc2a5cff5cd"}}}}, 0x73) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x2400c00c) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e1f, 0x5, @private1, 0x8}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998b61d7da0c86d70000001010"], 0x10b8}, 0x0) 0s ago: executing program 35 (id=2956): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) (async) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x100, 0x7, 0x0, 0x0, [{{r0}, 0x2}, {{r0}, 0xffffffffffffffff}, {{r0}, 0x6}, {{r1}, 0x8}, {{r0}, 0x3ff}, {{r0}, 0x325}, {{r2}, 0x2}]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2f, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) write$cgroup_devices(r4, &(0x7f0000000300)={'b', ' *:* ', 'rwm\x00'}, 0xa) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000340)={{0xfffff000, 0xfffffff7}, 0x100, './file0\x00'}) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000480)={r0, 0xfffff088, 0x4, "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"}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r3, 0xaf8ba000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r3, 0xffffffffffffffff}, 0x4) (async) getsockname$packet(r3, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000016c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x13, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000015c0)='GPL\x00', 0x2, 0x48, &(0x7f0000001600)=""/72, 0x40f00, 0x4b, '\x00', r7, 0x0, r3, 0x8, &(0x7f0000001700)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x3, 0xb, 0x1ff, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001780)=[r4, r3, r3, r3], &(0x7f00000017c0)=[{0x4, 0x3, 0x5, 0x3}, {0x0, 0x4, 0x4, 0x6}], 0x10, 0x8001}, 0x94) (async) connect$unix(r3, &(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg(r4, &(0x7f0000002e40)=[{{&(0x7f0000001940)=@x25, 0x80, &(0x7f00000029c0)=[{&(0x7f00000019c0)="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", 0x1000}], 0x1, &(0x7f0000002a00)=[{0xa0, 0x10f, 0xfffffa75, "841b686c2a820e0cf8588f4499f2d30632330eff5b61fb90073e01cf68ff91c63182b212b801d6a214f602a842807b921bbd3bd09fc98c7b56a32cceab9c97f04a0c0e58a99a722dac4720cc16d08de5bd59363b04570455b1ca299f87233a347d409bb335acbfcc98b857098316ef81a82b7d7d3c784d45c5c1b7c619074206dbeae1a3ed313f5259712e527061"}, {0x90, 0x102, 0x7ff, "b9093b76365d7e44d9dc39604d927b4b1abceb2719eb31c806c9767289a688da1c5e4ede10775bc27662d2ce757242d9ee5bed5c8105d2288b821a836bfeb54099c6f5b52f59082ca07894c5e4ef0ede38b0ef7dbbbb8978957fb4a472941fc301240a7b4d12c45112150c5e581d5f3097727f980e8a9d05d828729693d2"}, {0x90, 0x119, 0x7, "9ad6b05d1aee79f1f00bcf349d899ee1d13fdbe21dfdf1265989838e5bbdfe9a3c0e588b49567a22d709f8f9736f4c8da3c010fc3efd96d43760f0a90f7ebc27fdf978e95be2411a8ab16ee8f47e7c18e04d8846e2de31bc08d48e4e7e45bb711e0e5690518fa9f4706b02cb059cea94d431bea2905df7ea96f7b6e2"}], 0x1c0}}, {{&(0x7f0000002bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x3, 0x4, 0x4, {0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4be}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)="aad2356aa8887ee2ef4db5fe90f975f254949409da59c6fea1b84bdc45e7150a8ea3f66e8955843840910184723ef62a1b57904ae112f272f467591e500159fd18850d2dee709c29d060b90fdbaf8077b9b21951131be3e219b838cf3319e2875e6c43feb4899f1c4f7b98ae50bb80db7fe7957da5ca8c87f88ab4facd421f0836552518d152c4b041b2ca26595b7379632143e9f3b000ae25012e2b994e5ee9f7d433654a5509e09a02f642bed8e20ca732d6c31c079abc50a9f8ec7dcc30cf3ca418b6acc744c8b017b26a572b94869e04858faf4c4249951561aa79ba805b81", 0xe1}], 0x1, &(0x7f0000002d80)=[{0x90, 0xf6, 0xfffffff8, "acc4f1d11d07957eb189439e4a08791c0f073f8c53576de49a298c3fa51ebedb6033279238f047076d9fae50f40272b22f69be1453b771bb9268bf55bc6866fc930307645741b3686cf446ec373e94f8451df3db38d36c58b3581fd422a49ff532fd0031a3a0946f8698ebc94090d69e6b924eb783d78c76a7226d6809"}, {0x28, 0x106, 0x2, "25fd63dd6d63d5f1232caa7dc8f2807f7dbe4da0d6b676"}], 0xb8}}], 0x2, 0x1) r8 = openat$cgroup(r3, &(0x7f0000002ec0)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000002f00)='devices.deny\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000002f40)={0xb6, 0x8, 0x0, 0xffffffad, 0x8, 0x0, [{0x9, 0x7fffffffffffffff, 0x6, '\x00', 0x800}, {0x8, 0x9, 0x1, '\x00', 0x800}, {0xfffffffffffffffa, 0xb18000000, 0xffff, '\x00', 0x108}, {0x100, 0x7, 0xffffffff, '\x00', 0x1d00}, {0x5, 0xd3, 0x1, '\x00', 0x301}, {0x80000001, 0xfffffffffffffff8, 0x10001, '\x00', 0x407}, {0x9, 0x401, 0x5, '\x00', 0x2000}, {0x7fffffffffffffff, 0xf, 0x2, '\x00', 0x500}]}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000003180)='cgroup.threads\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)=@ipv6_newrule={0x7c, 0x20, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0x10, 0x1, 0xf9, 0x0, 0x0, 0x3, 0x10}, [@FRA_DST={0x14, 0x1, @mcast2}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x28ae}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008080) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) openat$cgroup_pressure(r4, &(0x7f0000003340)='memory.pressure\x00', 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000003380), &(0x7f00000033c0)=0x4) (async) r12 = openat$cgroup(r5, &(0x7f0000003400)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000003440)='freezer.state\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): witch: netlink: IP tunnel dst address not specified [ 125.825429][ T7430] netlink: zone id is out of range [ 125.838523][ T7430] netlink: zone id is out of range [ 125.847976][ T7430] netlink: zone id is out of range [ 125.853199][ T7430] netlink: zone id is out of range [ 125.859029][ T7430] netlink: zone id is out of range [ 125.864192][ T7430] netlink: zone id is out of range [ 125.871231][ T7430] netlink: zone id is out of range [ 125.965354][ T7436] geneve2: entered promiscuous mode [ 125.970831][ T7436] geneve2: entered allmulticast mode [ 125.980905][ T1340] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.000937][ T1340] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.038737][ T1340] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.055923][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 126.058813][ T1340] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.070360][ T7441] netlink: 56 bytes leftover after parsing attributes in process `syz.1.419'. [ 126.262416][ T7439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.276206][ T7439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 126.294147][ T7462] netlink: 'syz.4.420': attribute type 10 has an invalid length. [ 126.314232][ T7462] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 126.366183][ T7439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.378909][ T7439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 126.491262][ T7439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.521280][ T7439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 126.785444][ T7481] netlink: 'syz.2.428': attribute type 2 has an invalid length. [ 126.860917][ T7439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.880013][ T7439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 127.037833][ T1133] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.052169][ T1133] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.123207][ T1133] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.142804][ T1133] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.250187][ T7176] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.287034][ T7176] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.295312][ T7176] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 127.331933][ T7176] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.357240][ T7502] tipc: Started in network mode [ 127.362185][ T7502] tipc: Node identity 3a97c7090c09, cluster identity 4711 [ 127.388787][ T7502] tipc: Enabled bearer , priority 0 [ 127.396057][ T7506] netlink: 'syz.2.435': attribute type 11 has an invalid length. [ 127.405091][ T7499] syzkaller0: entered promiscuous mode [ 127.415026][ T7499] syzkaller0: entered allmulticast mode [ 127.471383][ T7499] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 127.560383][ T7499] tipc: Resetting bearer [ 127.623684][ T7524] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 127.635685][ T7498] tipc: Resetting bearer [ 127.666822][ T7498] tipc: Disabling bearer [ 127.839622][ T7530] bond1: (slave bridge2): making interface the new active one [ 127.913115][ T7530] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 129.100400][ T7609] __nla_validate_parse: 8 callbacks suppressed [ 129.100424][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 129.160645][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 129.169803][ T7615] net_ratelimit: 19 callbacks suppressed [ 129.169821][ T7615] openvswitch: netlink: Missing key (keys=40, expected=80) [ 129.270879][ T7620] netlink: 68 bytes leftover after parsing attributes in process `syz.2.465'. [ 129.601898][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 129.617592][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 129.626797][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 129.628049][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 130.061544][ T7665] netlink: 104 bytes leftover after parsing attributes in process `syz.4.478'. [ 130.091069][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 130.105505][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.175102][ T7666] bridge_slave_1 (unregistering): left allmulticast mode [ 130.193513][ T7666] bridge_slave_1 (unregistering): left promiscuous mode [ 130.249587][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.871043][ T7699] netlink: 56 bytes leftover after parsing attributes in process `syz.0.489'. [ 131.542143][ T7747] bridge_slave_1: left allmulticast mode [ 131.570090][ T7747] bridge_slave_1: left promiscuous mode [ 131.576131][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.608916][ T7747] bridge_slave_0: left allmulticast mode [ 131.614864][ T7747] bridge_slave_0: left promiscuous mode [ 131.623157][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.974493][ T7769] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 132.041383][ T7771] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:5 [ 132.215550][ T7734] delete_channel: no stack [ 132.435848][ T7785] syzkaller1: entered promiscuous mode [ 132.444327][ T7785] syzkaller1: entered allmulticast mode [ 133.183189][ T7828] tipc: Enabled bearer , priority 0 [ 133.193017][ T7828] syzkaller0: entered promiscuous mode [ 133.198630][ T7828] syzkaller0: entered allmulticast mode [ 133.317519][ T7827] tipc: Resetting bearer [ 133.374394][ T7827] tipc: Disabling bearer [ 133.546836][ T7844] syzkaller0: entered promiscuous mode [ 133.553389][ T7844] syzkaller0: entered allmulticast mode [ 133.562608][ T7844] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 134.010189][ T7874] netlink: 'syz.2.552': attribute type 32 has an invalid length. [ 134.084564][ T7875] xt_cluster: node mask cannot exceed total number of nodes [ 134.355372][ T7893] __nla_validate_parse: 18 callbacks suppressed [ 134.355396][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 134.649812][ T7909] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.821156][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.568'. [ 134.828529][ T7913] openvswitch: netlink: Message has 8 unknown bytes. [ 135.147786][ T7935] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 135.184595][ T7934] bridge_slave_0: left allmulticast mode [ 135.209908][ T7934] bridge_slave_0: left promiscuous mode [ 135.227656][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.297060][ T7934] bond0: (slave bond_slave_0): Releasing backup interface [ 135.320841][ T7951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.355451][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.572'. [ 135.369659][ T7934] bond_slave_0: left allmulticast mode [ 135.383174][ T7934] bond0: (slave bond_slave_1): Releasing backup interface [ 135.394706][ T7934] bond_slave_1: left allmulticast mode [ 135.414771][ T7934] team0: Port device team_slave_0 removed [ 135.444874][ T7934] team0: Port device team_slave_1 removed [ 135.452274][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.462304][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.464483][ T7961] netlink: 108 bytes leftover after parsing attributes in process `syz.4.579'. [ 135.480961][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.488847][ T5834] Bluetooth: hci0: command tx timeout [ 135.495449][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.507945][ T7934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.528512][ T7935] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 135.563094][ T7944] team0: Mode changed to "loadbalance" [ 135.655636][ T7972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.670369][ T7962] bond2: Unable to set up delay as MII monitoring is disabled [ 135.672203][ T7972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.691345][ T7962] bond2 (unregistering): Released all slaves [ 135.847176][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 136.030224][ T7996] netlink: 156 bytes leftover after parsing attributes in process `syz.2.587'. [ 136.350904][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.353149][ T8022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 136.401616][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.594'. [ 136.444910][ T8028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.594'. [ 136.585691][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'. [ 136.742922][ T8041] nbd: must specify a size in bytes for the device [ 136.759430][ T8041] openvswitch: netlink: EtherType 50a is less than min 600 [ 137.276166][ T8070] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 137.340727][ T8066] syzkaller0: entered promiscuous mode [ 137.346257][ T8066] syzkaller0: entered allmulticast mode [ 137.394429][ T8073] x_tables: duplicate underflow at hook 1 [ 137.472460][ T8075] No such timeout policy "syz0" [ 137.724955][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.765944][ T5933] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 137.794783][ T5933] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 137.811611][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.824293][ T1309] wlan1: authenticated [ 137.849005][ T1309] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 137.896226][ T13] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=55 aid=1) [ 137.906617][ T13] wlan1: 08:02:11:00:00:00 denied association (code=55) [ 137.916209][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.928692][ T8106] netlink: 'syz.0.614': attribute type 11 has an invalid length. [ 138.050756][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.066975][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.151281][ T8112] unsupported nlmsg_type 40 [ 138.177473][ T8116] netlink: 'syz.4.618': attribute type 2 has an invalid length. [ 138.241959][ T8120] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 138.255968][ T8123] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 138.395418][ T8132] netlink: 'syz.0.621': attribute type 39 has an invalid length. [ 138.784137][ T8156] netlink: 'syz.1.627': attribute type 30 has an invalid length. [ 138.828649][ T8155] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 138.842018][ T8155] bond3 (unregistering): Released all slaves [ 138.909017][ T8156] bond2: option arp_missed_max: invalid value (0) [ 138.915521][ T8156] bond2: option arp_missed_max: allowed values 1 - 255 [ 138.933563][ T8156] bond2 (unregistering): Released all slaves [ 139.141652][ T8172] tipc: Started in network mode [ 139.146709][ T8172] tipc: Node identity 465d565ff5ea, cluster identity 4711 [ 139.230932][ T8172] tipc: Enabled bearer , priority 0 [ 139.238275][ T8183] syzkaller0: entered promiscuous mode [ 139.243796][ T8183] syzkaller0: entered allmulticast mode [ 139.412867][ T8172] batadv0: mtu less than device minimum [ 139.427485][ T8171] tipc: Resetting bearer [ 139.460403][ T8171] tipc: Disabling bearer [ 139.471791][ T8191] __nla_validate_parse: 16 callbacks suppressed [ 139.471813][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 139.508380][ T8193] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.634'. [ 139.639368][ T8200] IPVS: Error connecting to the multicast addr [ 139.981674][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 139.991055][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 140.019989][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 140.210338][ T8246] delete_channel: no stack [ 140.216516][ T8246] netlink: 164 bytes leftover after parsing attributes in process `syz.3.648'. [ 140.292277][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 140.305346][ T8251] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 140.325905][ T8251] netlink: 112 bytes leftover after parsing attributes in process `syz.1.649'. [ 140.406417][ T8256] netlink: 'syz.0.650': attribute type 1 has an invalid length. [ 140.427913][ T8256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.650'. [ 140.565078][ T8258] netlink: 'syz.3.653': attribute type 2 has an invalid length. [ 140.573006][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 140.768474][ T8265] syzkaller1: entered promiscuous mode [ 140.775269][ T8265] syzkaller1: entered allmulticast mode [ 140.795416][ T8268] bridge0: entered promiscuous mode [ 141.369862][ T8299] netlink: 'syz.1.667': attribute type 3 has an invalid length. [ 141.431730][ T8299] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 141.447001][ T8299] netlink: 'syz.1.667': attribute type 2 has an invalid length. [ 141.448076][ T8302] netlink: 'syz.4.670': attribute type 5 has an invalid length. [ 141.607787][ T8310] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 141.730947][ T8310] gretap1: entered promiscuous mode [ 141.757247][ T8310] bond2: (slave gretap1): making interface the new active one [ 141.773609][ T8310] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 141.796113][ T8327] sctp: [Deprecated]: syz.0.677 (pid 8327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.796113][ T8327] Use struct sctp_sack_info instead [ 141.833712][ T8317] bond2: entered promiscuous mode [ 141.850623][ T8317] macvlan2: entered promiscuous mode [ 141.856093][ T8317] macvlan2: entered allmulticast mode [ 141.872189][ T8317] bond2: entered allmulticast mode [ 141.886096][ T8317] gretap1: entered allmulticast mode [ 141.897250][ T8317] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.907870][ T8317] bond2: left promiscuous mode [ 142.190905][ T8341] netlink: 'syz.1.683': attribute type 7 has an invalid length. [ 142.310457][ T8341] netlink: 'syz.1.683': attribute type 7 has an invalid length. [ 144.447272][ T5834] Bluetooth: hci3: command tx timeout [ 171.054561][ T8373] __nla_validate_parse: 7 callbacks suppressed [ 171.054581][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'. [ 171.073035][ T8371] netlink: 'syz.3.695': attribute type 1 has an invalid length. [ 171.079065][ T8372] pim6reg1: entered promiscuous mode [ 171.088325][ T8372] pim6reg1: entered allmulticast mode [ 171.103645][ T8377] vlan4: entered allmulticast mode [ 171.109582][ T8377] bridge_slave_0: entered allmulticast mode [ 171.117601][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.211460][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 171.438632][ T8398] netlink: 120 bytes leftover after parsing attributes in process `syz.0.701'. [ 171.465715][ T8398] netlink: 41 bytes leftover after parsing attributes in process `syz.0.701'. [ 171.667091][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 171.688125][ T8414] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 171.695347][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 171.725495][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 171.737788][ T8411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.705'. [ 171.931695][ T8428] vlan2: entered promiscuous mode [ 171.945245][ T8428] bridge0: entered promiscuous mode [ 171.983906][ T8432] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.711'. [ 172.199098][ T8453] xt_hashlimit: size too large, truncated to 1048576 [ 173.780488][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.725'. [ 174.390137][ T8526] ipt_rpfilter: unknown options [ 174.620492][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.629131][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.778273][ T8552] netlink: 'syz.1.749': attribute type 4 has an invalid length. [ 174.954461][ T8560] veth0: entered promiscuous mode [ 174.960164][ T8560] veth0: left promiscuous mode [ 175.490056][ T8600] netlink: 'syz.3.766': attribute type 12 has an invalid length. [ 175.623154][ T8613] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 175.640828][ T8613] team0: Device ipvlan1 failed to register rx_handler [ 175.887752][ T5834] Bluetooth: hci4: command tx timeout [ 175.958214][ T8638] syzkaller0: entered promiscuous mode [ 175.963987][ T8638] syzkaller0: entered allmulticast mode [ 176.226505][ T8657] __nla_validate_parse: 16 callbacks suppressed [ 176.226534][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 176.317274][ T8661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 176.342072][ T8661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 176.382201][ T8661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 176.684230][ T8686] netlink: 'syz.2.792': attribute type 2 has an invalid length. [ 176.710070][ T8686] : entered promiscuous mode [ 176.728609][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 176.743520][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 176.876518][ T8692] netlink: 'syz.1.793': attribute type 13 has an invalid length. [ 177.015188][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.798'. [ 177.047046][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.798'. [ 177.262983][ T8719] syzkaller1: entered promiscuous mode [ 177.279149][ T8719] syzkaller1: entered allmulticast mode [ 177.293707][ T8721] netlink: 'syz.3.803': attribute type 3 has an invalid length. [ 177.313829][ T8721] netlink: 'syz.3.803': attribute type 3 has an invalid length. [ 177.332029][ T8721] netlink: 'syz.3.803': attribute type 3 has an invalid length. [ 177.348270][ T8721] netlink: 'syz.3.803': attribute type 3 has an invalid length. [ 177.366395][ T8721] netlink: 'syz.3.803': attribute type 3 has an invalid length. [ 177.378616][ T8732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.399861][ T8721] netlink: 'syz.3.803': attribute type 3 has an invalid length. [ 177.420572][ T8721] netlink: 'syz.3.803': attribute type 3 has an invalid length. [ 177.438820][ T8734] x_tables: duplicate underflow at hook 1 [ 177.447725][ T8721] netlink: 'syz.3.803': attribute type 3 has an invalid length. [ 177.533598][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.805'. [ 177.543003][ T8732] ip6tnl0: Caught tx_queue_len zero misconfig [ 178.285724][ T8769] sctp: [Deprecated]: syz.3.814 (pid 8769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.285724][ T8769] Use struct sctp_sack_info instead [ 178.311233][ T8774] netlink: 72 bytes leftover after parsing attributes in process `syz.2.816'. [ 179.872809][ T8852] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.879460][ T8969] IPv6: NLM_F_REPLACE set, but no existing node found! [ 181.996079][ T8969] __nla_validate_parse: 13 callbacks suppressed [ 181.996101][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 182.134285][ T8977] validate_nla: 33 callbacks suppressed [ 182.134304][ T8977] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 182.155195][ T8975] ipt_REJECT: TCP_RESET invalid for non-tcp [ 182.282270][ T8977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.393500][ T8982] veth3: entered promiscuous mode [ 182.404400][ T8982] bond3: (slave veth3): Enslaving as an active interface with an up link [ 182.514568][ T8990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.879'. [ 182.579251][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.879'. [ 182.634006][ T8997] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.881'. [ 182.858213][ T9018] netlink: 'syz.1.886': attribute type 9 has an invalid length. [ 182.885590][ T9019] netlink: 'syz.1.886': attribute type 9 has an invalid length. [ 182.906408][ T9019] netlink: 212396 bytes leftover after parsing attributes in process `syz.1.886'. [ 182.915332][ T9018] netlink: 212396 bytes leftover after parsing attributes in process `syz.1.886'. [ 183.139059][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 183.152962][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 183.351119][ T9050] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 183.455829][ T9060] netlink: 240 bytes leftover after parsing attributes in process `syz.4.898'. [ 183.495233][ T9062] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 183.706440][ T9079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.833132][ T9079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.879286][ T9086] tipc: Enabled bearer , priority 0 [ 183.930380][ T9086] syzkaller0: entered promiscuous mode [ 183.936467][ T9086] syzkaller0: entered allmulticast mode [ 183.987523][ T9079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.031470][ T9087] tipc: Resetting bearer [ 184.061172][ T9085] tipc: Resetting bearer [ 185.252283][ T9085] tipc: Disabling bearer [ 185.268755][ T9095] bond0: entered promiscuous mode [ 185.273983][ T9095] bond_slave_0: entered promiscuous mode [ 185.280525][ T9095] bond_slave_1: entered promiscuous mode [ 185.289375][ T9095] batadv0: entered promiscuous mode [ 185.319147][ T9079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.376890][ T10] tipc: Node number set to 3015136863 [ 185.509651][ T7176] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.532123][ T9128] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 185.549890][ T7176] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.574116][ T7176] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.615185][ T9132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.615582][ T9127] openvswitch: netlink: Flow actions attr not present in new flow. [ 185.633754][ T1309] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.675121][ T5834] block nbd0: Receive control failed (result -32) [ 185.760661][ T9141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.925'. [ 185.905044][ T9150] dvmrp6: entered allmulticast mode [ 185.968279][ T9155] netlink: 'syz.1.929': attribute type 4 has an invalid length. [ 186.274504][ T9177] lo: entered promiscuous mode [ 186.284018][ T9177] netlink: 'syz.2.938': attribute type 2 has an invalid length. [ 186.304653][ T9177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.434385][ T9184] batadv_slave_0: entered promiscuous mode [ 186.480974][ T9182] batadv_slave_0: left promiscuous mode [ 186.576478][ T9197] syzkaller0: entered promiscuous mode [ 186.582224][ T9197] syzkaller0: entered allmulticast mode [ 186.597421][ T9197] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 187.134221][ T9236] __nla_validate_parse: 4 callbacks suppressed [ 187.134240][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 187.164190][ T9233] veth1_to_bond: entered allmulticast mode [ 187.164702][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 187.181706][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 187.185458][ T9241] SET target dimension over the limit! [ 187.321042][ T9233] bond0: (slave bond_slave_1): Releasing backup interface [ 187.359559][ T9233] veth1_to_bond (unregistering): left allmulticast mode [ 187.365711][ T9253] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.956'. [ 187.398213][ T9247] syzkaller1: entered promiscuous mode [ 187.404104][ T9247] syzkaller1: entered allmulticast mode [ 187.494686][ T9259] xt_socket: unknown flags 0x50 [ 187.501811][ T9260] xt_socket: unknown flags 0x50 [ 187.675348][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 187.696479][ T9273] unsupported nla_type 52263 [ 187.961170][ T9287] netlink: 224 bytes leftover after parsing attributes in process `syz.3.968'. [ 188.138413][ T9298] syzkaller0: entered promiscuous mode [ 188.150842][ T9298] syzkaller0: entered allmulticast mode [ 188.188200][ T9297] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.242508][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.973'. [ 188.273913][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 188.300591][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'. [ 188.335159][ T9305] xt_ecn: cannot match TCP bits for non-tcp packets [ 188.369659][ T9307] tipc: Enabled bearer , priority 0 [ 188.485944][ T9314] netlink: 'syz.2.977': attribute type 63 has an invalid length. [ 188.514761][ T9312] netlink: 'syz.2.977': attribute type 63 has an invalid length. [ 188.531995][ T9307] syzkaller0: entered promiscuous mode [ 188.541879][ T9307] syzkaller0: entered allmulticast mode [ 188.550332][ T9313] batadv_slave_1: entered promiscuous mode [ 188.576271][ T9319] tipc: Resetting bearer [ 188.806729][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.980'. [ 190.140350][ T9339] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 190.180935][ T9318] batadv_slave_1: left promiscuous mode [ 190.205718][ T10] tipc: Node number set to 3758096386 [ 190.240943][ T9306] tipc: Resetting bearer [ 190.275036][ T9306] tipc: Disabling bearer [ 190.413855][ T9358] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.421875][ T9358] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.714233][ T9366] geneve2: entered promiscuous mode [ 190.721551][ T9366] geneve2: entered allmulticast mode [ 190.730526][ T9369] tipc: Enabling of bearer rejected, failed to enable media [ 190.740599][ T7176] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.794821][ T7176] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.812403][ T7176] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 190.837528][ T7176] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.851569][ T7176] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.861797][ T7176] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 190.883206][ T7176] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.924482][ T7176] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.934966][ T7176] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 191.015872][ T7176] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.048001][ T7176] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.065373][ T7176] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 191.161104][ T9408] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 191.179811][ T9408] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 191.362108][ T9424] xt_ecn: cannot match TCP bits for non-tcp packets [ 191.380378][ T9428] bridge_slave_0: Caught tx_queue_len zero misconfig [ 192.206500][ T9454] bridge0: Caught tx_queue_len zero misconfig [ 192.248164][ T9462] __nla_validate_parse: 9 callbacks suppressed [ 192.248193][ T9462] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1011'. [ 192.400138][ T9469] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1008'. [ 192.689768][ T9491] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.947278][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1024'. [ 192.956488][ T9511] openvswitch: netlink: Flow actions attr not present in new flow. [ 192.998703][ T9515] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 193.126624][ T9515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.128566][ T9523] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1027'. [ 193.140160][ T9521] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1026'. [ 193.152163][ T9521] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1026'. [ 193.184779][ T9508] veth3: entered promiscuous mode [ 193.214342][ T9515] veth5: entered promiscuous mode [ 193.280822][ T9508] bond5: entered allmulticast mode [ 193.466641][ T9536] netlink: 'syz.3.1033': attribute type 9 has an invalid length. [ 193.566365][ T9539] openvswitch: netlink: Unknown key attributes 2 [ 193.794434][ T9550] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 193.874399][ T9550] bond1: (slave gretap1): making interface the new active one [ 193.905247][ T9550] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 194.082522][ T9561] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.1042'. [ 194.115536][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 194.150642][ T9561] netlink: 'syz.3.1042': attribute type 10 has an invalid length. [ 194.428902][ T9580] sit0: entered promiscuous mode [ 194.457504][ T9580] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 194.537007][ T9580] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1048'. [ 194.729867][ T9596] netlink: 'syz.2.1051': attribute type 4 has an invalid length. [ 194.742580][ T9601] netlink: 'syz.0.1050': attribute type 10 has an invalid length. [ 194.839265][ T9608] geneve2: entered promiscuous mode [ 194.844816][ T9608] geneve2: entered allmulticast mode [ 194.852691][ T7176] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 194.863884][ T7176] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 194.890692][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1054'. [ 194.926823][ T9608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.973111][ T7176] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.109409][ T9631] netlink: 'syz.2.1059': attribute type 3 has an invalid length. [ 195.435084][ T9643] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 195.578275][ T9649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.602677][ T9651] tipc: Enabling of bearer rejected, failed to enable media [ 195.722197][ T9663] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 195.771819][ T9663] bond2: (slave gre0): Device is not bonding slave [ 195.779598][ T9663] bond2: option active_slave: invalid value (gre0) [ 195.812077][ T9663] bond2 (unregistering): Released all slaves [ 196.236256][ T9695] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.444002][ T9608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.467630][ T9608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 196.627831][ T9608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.647814][ T9608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 196.648555][ T9718] netlink: 'syz.3.1086': attribute type 11 has an invalid length. [ 196.770811][ T9608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.774350][ T9724] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 196.789667][ T9608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 196.986364][ T7176] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.994879][ T7176] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.054500][ T7176] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 197.070136][ T7176] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.092650][ T9738] bond0: Caught tx_queue_len zero misconfig [ 197.122028][ T9738] netlink: 'syz.1.1094': attribute type 58 has an invalid length. [ 197.171524][ T7176] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 197.182809][ T7176] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.265817][ T7176] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 197.275552][ T7176] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.327417][ T9756] __nla_validate_parse: 19 callbacks suppressed [ 197.327437][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 197.675015][ T9770] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1102'. [ 197.726707][ T9770] x_tables: duplicate underflow at hook 1 [ 198.011293][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1106'. [ 198.125385][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'. [ 198.147258][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'. [ 198.291122][ T9790] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.305245][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 198.418659][ T9802] veth1_macvtap: left promiscuous mode [ 198.489614][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 198.652643][ T9814] syzkaller0: entered promiscuous mode [ 198.658514][ T9814] syzkaller0: entered allmulticast mode [ 198.771579][ T9817] tipc: Enabled bearer , priority 0 [ 198.783329][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 198.830762][ T9817] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 198.844353][ T9816] tipc: Disabling bearer [ 199.043055][ T9833] lo: Caught tx_queue_len zero misconfig [ 199.187622][ T9850] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1127'. [ 199.299429][ T9855] gretap0: entered promiscuous mode [ 199.325162][ T9855] vlan2: entered promiscuous mode [ 199.379177][ T9859] vlan2: entered promiscuous mode [ 199.413478][ T9857] tipc: Enabled bearer , priority 0 [ 199.424133][ T9857] syzkaller0: entered promiscuous mode [ 199.429865][ T9857] syzkaller0: entered allmulticast mode [ 199.430590][ T9865] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1135'. [ 199.492625][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.501977][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.526759][ T9857] tipc: Resetting bearer [ 199.546387][ T9856] tipc: Resetting bearer [ 199.575553][ T9856] tipc: Disabling bearer [ 199.803232][ T9884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.814232][ T9884] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 199.881311][ T9889] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 200.031072][ T9891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.444679][ T7176] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.463629][ T7176] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.485676][ T7176] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.505327][ T7176] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.675750][ T9935] 8021q: VLANs not supported on sit0 [ 201.474706][ T9963] syzkaller1: entered promiscuous mode [ 201.487698][ T9963] syzkaller1: entered allmulticast mode [ 201.613992][ T9969] tipc: Enabled bearer , priority 0 [ 201.678380][ T9969] syzkaller0: entered promiscuous mode [ 201.684139][ T9969] syzkaller0: entered allmulticast mode [ 201.695663][ T9967] tipc: Resetting bearer [ 201.716076][ T9967] tipc: Disabling bearer [ 201.740387][ T9983] block nbd1: Unsupported socket: should be TCP or UNIX. [ 201.871375][ T9993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.117409][T10006] validate_nla: 4 callbacks suppressed [ 202.117429][T10006] netlink: 'syz.3.1182': attribute type 4 has an invalid length. [ 202.155086][T10008] netlink: 'syz.0.1183': attribute type 3 has an invalid length. [ 202.309483][T10014] macvtap1: entered allmulticast mode [ 202.315274][T10014] veth0_macvtap: entered allmulticast mode [ 202.569842][T10021] __nla_validate_parse: 20 callbacks suppressed [ 202.569861][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 203.354133][T10084] netlink: 'syz.2.1203': attribute type 11 has an invalid length. [ 203.375982][T10084] netlink: 'syz.2.1203': attribute type 11 has an invalid length. [ 203.392593][T10085] openvswitch: netlink: Message has 536 unknown bytes. [ 203.400847][T10084] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1203'. [ 203.417837][T10085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.550813][T10096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.696676][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 203.717429][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 204.075899][T10137] openvswitch: netlink: IP tunnel dst address not specified [ 204.088110][T10137] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1218'. [ 204.099265][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 204.118274][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 204.140292][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 204.430356][T10163] ksmbd: Unknown IPC event: 3, ignore. [ 204.801354][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 205.013016][T10193] syzkaller1: entered promiscuous mode [ 205.037456][T10193] syzkaller1: entered allmulticast mode [ 205.059180][T10193] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 205.078938][T10198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.443618][T10220] Unknown options in mask b7f2 [ 205.580974][T10231] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 205.669651][T10235] Bluetooth: MGMT ver 1.23 [ 205.778478][T10242] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 205.820098][T10242] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.932664][T10242] veth5: entered promiscuous mode [ 205.973887][T10242] bond4: (slave veth5): Enslaving as an active interface with a down link [ 206.028509][T10254] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 206.047480][T10254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.095393][T10260] team0: Device wireguard0 is of different type [ 206.413855][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'. [ 206.460646][T10280] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 206.486507][T10287] netlink: 'syz.4.1263': attribute type 1 has an invalid length. [ 206.834602][T10301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.876570][T10301] bond0: (slave rose0): Enslaving as an active interface with an up link [ 207.152237][T10324] netlink: zone id is out of range [ 207.215443][T10330] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 207.326534][T10324] netlink: set zone limit has 4 unknown bytes [ 207.410545][T10339] netlink: 'syz.2.1276': attribute type 3 has an invalid length. [ 207.736404][T10352] ipvlan1: entered promiscuous mode [ 207.752166][T10352] __nla_validate_parse: 2 callbacks suppressed [ 207.752186][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'. [ 207.821358][T10358] netlink: 'syz.0.1282': attribute type 4 has an invalid length. [ 208.067287][T10379] lo: entered allmulticast mode [ 208.102130][T10379] lo: left allmulticast mode [ 208.325055][T10394] pim6reg: entered allmulticast mode [ 208.770431][T10428] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 208.790352][T10428] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1298'. [ 208.802709][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1295'. [ 209.193873][T10450] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1304'. [ 209.205891][T10448] tipc: Enabled bearer , priority 0 [ 209.238331][T10445] tipc: Disabling bearer [ 209.461358][T10466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 209.511272][T10466] syzkaller1: entered promiscuous mode [ 209.529303][T10466] syzkaller1: entered allmulticast mode [ 209.540408][T10468] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20000 [ 209.623284][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 210.450724][T10490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.458036][T10490] IPv6: NLM_F_CREATE should be set when creating new route [ 210.694716][T10502] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1317'. [ 210.704038][T10502] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1317'. [ 210.794838][T10510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1319'. [ 210.844921][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 210.863680][T10515] bridge0: entered promiscuous mode [ 210.887411][T10515] bridge0: entered allmulticast mode [ 211.115026][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 211.152884][T10533] xt_l2tp: invalid flags combination: 8 [ 211.376307][T10547] netlink: 'syz.2.1331': attribute type 10 has an invalid length. [ 211.431283][T10547] team0: Port device dummy0 added [ 211.463594][T10557] vetè0_virt_wifi: renamed from dummy0 (while UP) [ 211.499824][T10557] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 211.790880][T10577] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 211.815066][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 211.821384][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 211.827455][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 211.833507][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 211.871743][T10575] vlan4: entered allmulticast mode [ 211.990033][T10586] bond0: Caught tx_queue_len zero misconfig [ 212.096303][T10591] netlink: 'syz.1.1344': attribute type 2 has an invalid length. [ 212.104607][T10591] netlink: 'syz.1.1344': attribute type 1 has an invalid length. [ 212.111163][T10592] Cannot find add_set index 1 as target [ 212.173815][T10593] syzkaller1: entered promiscuous mode [ 212.179852][T10593] syzkaller1: entered allmulticast mode [ 212.274048][T10588] netlink: 'syz.1.1344': attribute type 11 has an invalid length. [ 212.643450][T10618] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 212.761735][T10627] __nla_validate_parse: 8 callbacks suppressed [ 212.761754][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 212.761842][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1356'. [ 212.769321][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 212.816134][T10629] IPVS: set_ctl: invalid protocol: 92 172.20.20.31:20003 [ 212.853917][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 213.441164][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1367'. [ 213.471038][T10670] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.612816][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1367'. [ 213.831906][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 213.919501][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 213.977408][T10696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1372'. [ 214.144623][T10687] hsr_slave_0 (unregistering): left promiscuous mode [ 214.172830][T10697] sit0: Caught tx_queue_len zero misconfig [ 214.583765][T10726] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1381'. [ 215.040119][T10750] !€ÿ: renamed from bond_slave_0 (while UP) [ 215.130718][T10752] syzkaller0: entered promiscuous mode [ 215.136608][T10752] syzkaller0: entered allmulticast mode [ 215.643589][T10780] tipc: Enabled bearer , priority 0 [ 215.669121][T10780] syzkaller0: entered promiscuous mode [ 215.693521][T10780] syzkaller0: entered allmulticast mode [ 215.747175][T10780] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 215.831375][T10780] tipc: Resetting bearer [ 215.847268][T10779] tipc: Resetting bearer [ 215.861830][T10787] xt_TCPMSS: Only works on TCP SYN packets [ 215.903283][T10779] tipc: Disabling bearer [ 215.975935][T10795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.024431][T10797] ip6tnl0: entered promiscuous mode [ 216.070047][T10797] ip6tnl0: entered allmulticast mode [ 216.233623][T10810] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 216.395170][T10815] pimreg3: entered allmulticast mode [ 216.589980][T10826] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 216.613791][T10824] xt_TCPMSS: Only works on TCP SYN packets [ 216.805551][T10842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.451604][T10881] syz.4.1428: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.487121][T10881] CPU: 1 UID: 0 PID: 10881 Comm: syz.4.1428 Not tainted syzkaller #0 PREEMPT(full) [ 217.487154][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.487175][T10881] Call Trace: [ 217.487184][T10881] [ 217.487193][T10881] dump_stack_lvl+0x189/0x250 [ 217.487245][T10881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.487275][T10881] ? __pfx__printk+0x10/0x10 [ 217.487297][T10881] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 217.487327][T10881] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 217.487359][T10881] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 217.487392][T10881] warn_alloc+0x214/0x310 [ 217.487423][T10881] ? stack_depot_save_flags+0x40/0x860 [ 217.487461][T10881] ? __pfx_warn_alloc+0x10/0x10 [ 217.487494][T10881] ? kasan_save_track+0x3e/0x80 [ 217.487522][T10881] ? __kasan_kmalloc+0x93/0xb0 [ 217.487553][T10881] ? xsk_setsockopt+0x4dc/0x8d0 [ 217.487577][T10881] ? do_sock_setsockopt+0x17c/0x1b0 [ 217.487596][T10881] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 217.487615][T10881] ? do_syscall_64+0xfa/0xfa0 [ 217.487643][T10881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.487674][T10881] __vmalloc_node_range_noprof+0x125/0x12d0 [ 217.487741][T10881] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.487777][T10881] ? __kasan_kmalloc+0x93/0xb0 [ 217.487816][T10881] vmalloc_user_noprof+0xad/0xf0 [ 217.487854][T10881] ? xskq_create+0xbf/0x170 [ 217.487885][T10881] xskq_create+0xbf/0x170 [ 217.487917][T10881] xsk_init_queue+0xb0/0x110 [ 217.487948][T10881] xsk_setsockopt+0x4dc/0x8d0 [ 217.487977][T10881] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.488007][T10881] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.488038][T10881] ? aa_sock_opt_perm+0xff/0x1b0 [ 217.488074][T10881] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 217.488095][T10881] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.488122][T10881] do_sock_setsockopt+0x17c/0x1b0 [ 217.488150][T10881] __x64_sys_setsockopt+0x13f/0x1b0 [ 217.488178][T10881] do_syscall_64+0xfa/0xfa0 [ 217.488206][T10881] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.488235][T10881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.488255][T10881] ? clear_bhb_loop+0x60/0xb0 [ 217.488280][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.488301][T10881] RIP: 0033:0x7f5206b8f6c9 [ 217.488330][T10881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.488347][T10881] RSP: 002b:00007f520797b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.488370][T10881] RAX: ffffffffffffffda RBX: 00007f5206de5fa0 RCX: 00007f5206b8f6c9 [ 217.488386][T10881] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 217.488398][T10881] RBP: 00007f5206c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 217.488411][T10881] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.488423][T10881] R13: 00007f5206de6038 R14: 00007f5206de5fa0 R15: 00007ffcd5175038 [ 217.488460][T10881] [ 217.488473][T10881] Mem-Info: [ 217.795171][T10881] active_anon:3951 inactive_anon:0 isolated_anon:0 [ 217.795171][T10881] active_file:2698 inactive_file:39921 isolated_file:0 [ 217.795171][T10881] unevictable:768 dirty:63 writeback:0 [ 217.795171][T10881] slab_reclaimable:11730 slab_unreclaimable:100984 [ 217.795171][T10881] mapped:28877 shmem:1359 pagetables:984 [ 217.795171][T10881] sec_pagetables:0 bounce:0 [ 217.795171][T10881] kernel_misc_reclaimable:0 [ 217.795171][T10881] free:1329349 free_pcp:16225 free_cma:0 [ 217.841558][T10881] Node 0 active_anon:15704kB inactive_anon:0kB active_file:10792kB inactive_file:159480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115508kB dirty:248kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12804kB pagetables:3888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.887783][T10881] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.920986][T10881] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.993509][T10881] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 218.014393][T10881] Node 0 DMA32 free:1412944kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15492kB inactive_anon:0kB active_file:10792kB inactive_file:159480kB unevictable:1536kB writepending:248kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:45012kB local_pcp:19524kB free_cma:0kB [ 218.069759][T10899] __nla_validate_parse: 10 callbacks suppressed [ 218.069782][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 218.101006][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 218.147659][T10881] lowmem_reserve[]: 0 0 0 0 0 [ 218.149272][T10899] bond7: Invalid ad_actor_system MAC address. [ 218.152675][T10881] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.152768][T10881] lowmem_reserve[]: 0 0 0 0 0 [ 218.152816][T10881] Node 1 Normal free:3891892kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18816kB local_pcp:10016kB free_cma:0kB [ 218.152882][T10881] lowmem_reserve[]: 0 0 0 0 0 [ 218.152944][T10881] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.153120][T10881] Node 0 DMA32: 409*4kB (UME) 327*8kB (UM) 242*16kB (UM) 587*32kB (UME) 270*64kB (UME) 76*128kB (UME) 40*256kB (UME) 18*512kB (UME) 10*1024kB (UME) 7*2048kB (UME) 321*4096kB (UM) = 1412764kB [ 218.153323][T10881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 218.153447][T10881] Node 1 Normal: 173*4kB (UME) 46*8kB (UME) 45*16kB (UME) 122*32kB (UME) 28*64kB (UME) 7*128kB (UME) 4*256kB (ME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891892kB [ 218.153699][T10881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.161765][T10899] bond7: option ad_actor_system: invalid value (1) [ 218.320540][T10881] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.330170][T10881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.357182][T10881] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.379301][T10899] bond7 (unregistering): Released all slaves [ 218.389122][T10881] 43975 total pagecache pages [ 218.393860][T10881] 0 pages in swap cache [ 218.407598][T10881] Free swap = 124996kB [ 218.411818][T10881] Total swap = 124996kB [ 218.416011][T10881] 2097051 pages RAM [ 218.434181][T10881] 0 pages HighMem/MovableOnly [ 218.441349][T10881] 424119 pages reserved [ 218.451527][T10914] netlink: 'syz.0.1436': attribute type 1 has an invalid length. [ 218.460831][T10881] 0 pages cma reserved [ 218.505933][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 218.528990][T10914] bond3: entered promiscuous mode [ 218.534482][T10914] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.610169][T10919] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1436'. [ 218.619687][T10919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.075615][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 219.085955][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 219.104247][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1450'. [ 219.116755][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'. [ 219.178832][T10959] smc: net device gre0 applied user defined pnetid SYZ1 [ 219.202030][T10959] smc: net device gre0 erased user defined pnetid SYZ1 [ 219.224275][T10963] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 219.237063][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 219.523909][T10976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.150673][T11022] veth0: entered promiscuous mode [ 220.213586][T11026] rdma_op ffff88807a8a51f0 conn xmit_rdma 0000000000000000 [ 220.293716][T11018] veth0: left promiscuous mode [ 220.345755][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 220.369860][T11031] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 220.420559][T11031] team1: entered promiscuous mode [ 220.425664][T11031] team1: entered allmulticast mode [ 220.949522][T11082] netlink: 'syz.1.1481': attribute type 3 has an invalid length. [ 221.082664][T11089] netlink: 'syz.0.1484': attribute type 2 has an invalid length. [ 221.092196][T11089] netlink: 'syz.0.1484': attribute type 2 has an invalid length. [ 221.335989][T11098] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 221.635966][T11102] erspan0: entered allmulticast mode [ 222.281696][T11155] : entered promiscuous mode [ 222.310374][T11159] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 222.324136][T11159] xt_SECMARK: invalid mode: 9 [ 222.330954][T11160] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 222.362548][T11162] netlink: 'syz.1.1508': attribute type 33 has an invalid length. [ 222.513464][T11176] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 222.525948][T11176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.722776][T11193] lo: Caught tx_queue_len zero misconfig [ 222.748576][T11190] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 222.798158][T11201] IPVS: set_ctl: invalid protocol: 8 172.30.1.1:20004 [ 223.161505][T11220] __nla_validate_parse: 8 callbacks suppressed [ 223.161527][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1522'. [ 223.218266][T11224] sctp: [Deprecated]: syz.2.1523 (pid 11224) Use of int in max_burst socket option deprecated. [ 223.218266][T11224] Use struct sctp_assoc_value instead [ 223.534461][T11243] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1531'. [ 223.761031][T11256] erspan0: left allmulticast mode [ 223.811921][T11256] bridge0: left promiscuous mode [ 223.819166][T11256] bridge0: left allmulticast mode [ 223.830802][T11256] bond0: left allmulticast mode [ 223.919045][T11256] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 224.146783][T11263] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 224.489283][T11294] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 224.513350][T11292] netlink: 'syz.2.1545': attribute type 4 has an invalid length. [ 224.648486][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1549'. [ 224.741315][T11309] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 224.750224][T11309] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 224.765622][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 224.820151][T11313] ip6tnl0: Caught tx_queue_len zero misconfig [ 225.108815][T11337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1557'. [ 225.120160][T11337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1557'. [ 225.136666][T11337] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1557'. [ 225.319021][T11349] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 225.621839][T11368] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 225.776638][T11383] openvswitch: netlink: IP tunnel dst address not specified [ 225.829826][T11369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.849423][T11369] bond4: (slave bond5): making interface the new active one [ 225.869229][T11369] bond4: (slave bond5): Enslaving as an active interface with an up link [ 225.894444][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1573'. [ 225.935238][T11382] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 225.945341][T11398] x_tables: duplicate underflow at hook 3 [ 225.978894][T11391] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.262887][T11422] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1575'. [ 226.363577][T11425] tap0: tun_chr_ioctl cmd 1074025673 [ 226.371453][T11427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1582'. [ 226.381424][T11424] tap0: tun_chr_ioctl cmd 1074025678 [ 226.386768][T11424] tap0: group set to 0 [ 226.479926][T11425] tap0: tun_chr_ioctl cmd 1074025678 [ 226.485345][T11425] tap0: group set to 0 [ 226.527368][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 226.782426][T11456] bond8: (slave gre0): Device is not bonding slave [ 226.789188][T11456] bond8: option active_slave: invalid value (gre0) [ 226.804418][T11456] bond8 (unregistering): Released all slaves [ 227.173064][T11486] netlink: 'syz.4.1596': attribute type 12 has an invalid length. [ 227.208358][T11486] netlink: 'syz.4.1596': attribute type 11 has an invalid length. [ 227.216716][T11493] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 227.255755][T11493] netlink: 'syz.2.1599': attribute type 3 has an invalid length. [ 227.941646][T11529] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 228.049082][T11532] syzkaller0: entered promiscuous mode [ 228.071012][T11532] syzkaller0: entered allmulticast mode [ 228.259599][T11542] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 228.370240][T11557] tipc: Enabling of bearer rejected, failed to enable media [ 228.423127][T11561] __nla_validate_parse: 6 callbacks suppressed [ 228.423149][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 228.459151][T11561] vxcan2: entered allmulticast mode [ 228.479479][T11563] netlink: 'syz.3.1618': attribute type 2 has an invalid length. [ 228.487997][T11563] netlink: 'syz.3.1618': attribute type 11 has an invalid length. [ 228.495964][T11563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1618'. [ 228.582169][T11568] netlink: 'syz.4.1620': attribute type 10 has an invalid length. [ 228.608543][T11571] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 228.614202][T11567] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 228.629892][T11567] bond7 (unregistering): Released all slaves [ 228.685267][T11571] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.733059][T11571] veth9: entered promiscuous mode [ 228.742583][T11571] bond7: (slave veth9): Enslaving as an active interface with a down link [ 228.772329][T11575] veth11: entered promiscuous mode [ 228.816447][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1623'. [ 228.890846][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1624'. [ 228.925195][T11583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1624'. [ 229.143503][T11597] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1629'. [ 229.190257][T11597] xt_hashlimit: size too large, truncated to 1048576 [ 229.221941][T11597] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1629'. [ 229.228418][T11603] xt_hashlimit: size too large, truncated to 1048576 [ 229.272323][T11605] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1631'. [ 229.293595][T11604] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1629'. [ 229.364869][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 229.498236][T11618] block nbd1: server does not support multiple connections per device. [ 229.509540][T11618] block nbd1: shutting down sockets [ 229.561852][T11622] veth0: entered promiscuous mode [ 229.570958][T11621] veth0: left promiscuous mode [ 229.683842][T11635] tc_dump_action: action bad kind [ 229.797964][T11635] can: request_module (can-proto-5) failed. [ 230.602419][T11673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.650361][T11677] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 230.806749][T11684] macvtap0: entered promiscuous mode [ 230.813096][T11684] vlan0: entered promiscuous mode [ 230.818903][T11684] macvtap0: entered allmulticast mode [ 230.824491][T11684] vlan0: entered allmulticast mode [ 230.830351][T11684] veth0_vlan: entered allmulticast mode [ 230.896696][T11695] vlan2: entered allmulticast mode [ 230.918799][T11695] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 231.064817][T11702] IPVS: length: 239 != 24 [ 231.371361][T11723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.459679][T11729] validate_nla: 1 callbacks suppressed [ 231.459698][T11729] netlink: 'syz.0.1667': attribute type 1 has an invalid length. [ 231.494980][T11735] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 231.657845][T11741] sit1: entered promiscuous mode [ 231.663041][T11741] sit1: entered allmulticast mode [ 232.094950][T11779] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 232.280227][ T7176] syzkaller0: tun_net_xmit 76 [ 232.286789][ T7176] syzkaller0: tun_net_xmit 48 [ 232.296807][T11788] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 232.301541][T11790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.304585][T11788] syzkaller0: Linktype set failed because interface is up [ 232.321718][ T9375] syzkaller0: tun_net_xmit 76 [ 232.447723][ T9375] syzkaller0: tun_net_xmit 76 [ 232.645007][T11805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.854536][T11823] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:5 [ 234.063155][T11825] __nla_validate_parse: 48 callbacks suppressed [ 234.063177][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1694'. [ 234.228878][T11835] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1697'. [ 234.329515][T11842] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1698'. [ 234.426383][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1700'. [ 234.458624][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1700'. [ 235.051222][T11893] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.081997][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 235.091470][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 235.224128][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1716'. [ 235.397720][T11913] tunl0: entered promiscuous mode [ 235.415037][T11913] netlink: 'syz.1.1718': attribute type 3 has an invalid length. [ 235.423198][T11913] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1718'. [ 235.434190][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 235.533217][T11918] netlink: 'syz.1.1719': attribute type 1 has an invalid length. [ 235.614487][T11925] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 235.685902][T11929] netlink: 'syz.1.1722': attribute type 12 has an invalid length. [ 235.713936][T11925] bond6: (slave bridge3): making interface the new active one [ 235.723496][T11925] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 235.844679][T11934] netlink: 'syz.2.1723': attribute type 16 has an invalid length. [ 235.867827][T11934] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 235.904332][T11934] lo: left promiscuous mode [ 235.960533][T11934] sit0: left promiscuous mode [ 236.064471][T11944] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 236.072164][T11934] ip6tnl0: left promiscuous mode [ 236.084287][T11934] ip6tnl0: left allmulticast mode [ 236.102335][T11934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.475898][T11957] veth0_macvtap: left allmulticast mode [ 236.547348][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 236.562028][ T12] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 236.588532][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 236.598677][ T12] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 236.608252][ T1133] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 236.617062][ T1133] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 236.640750][ T1133] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 236.659914][ T1133] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 236.748163][T11986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.771087][T11986] netlink: 'syz.3.1742': attribute type 64 has an invalid length. [ 237.610082][T12026] vlan3: entered promiscuous mode [ 237.623557][T12026] bridge0: entered promiscuous mode [ 237.707126][T12027] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 237.714920][T12027] netlink: 'syz.4.1753': attribute type 2 has an invalid length. [ 237.743154][T12030] vlan3: entered promiscuous mode [ 237.977910][T12041] netlink: 'syz.4.1757': attribute type 9 has an invalid length. [ 238.169080][T12049] netlink: 'syz.4.1759': attribute type 21 has an invalid length. [ 238.422160][T12053] syzkaller0: entered promiscuous mode [ 238.428231][T12053] syzkaller0: entered allmulticast mode [ 239.058905][T12079] netlink: 'syz.4.1768': attribute type 21 has an invalid length. [ 239.087293][T12079] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.255597][T12092] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 240.638518][T12135] __nla_validate_parse: 14 callbacks suppressed [ 240.638538][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 240.682184][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 240.692382][T12135] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1783'. [ 241.792596][T12013] Set syz1 is full, maxelem 65536 reached [ 260.932061][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.939081][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.558421][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 266.652801][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 266.678265][T12157] openvswitch: netlink: Flow actions attr not present in new flow. [ 266.692499][T12158] pim6reg1: entered promiscuous mode [ 266.707609][T12158] pim6reg1: entered allmulticast mode [ 266.728495][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 266.777635][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 266.923023][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1793'. [ 267.001379][T12183] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 267.011167][T12183] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1796'. [ 267.129805][T12190] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 267.148233][T12190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.168408][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1800'. [ 267.201465][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1800'. [ 267.230053][T12194] netlink: 'syz.3.1801': attribute type 18 has an invalid length. [ 267.258092][ T1133] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.270308][ T1133] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.297273][ T1133] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.364388][T12207] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1805'. [ 267.379054][ T1133] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.491594][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1807'. [ 267.702355][T12253] netlink: 'syz.3.1813': attribute type 21 has an invalid length. [ 267.846690][T12258] netlink: 'syz.0.1815': attribute type 18 has an invalid length. [ 267.861164][T12258] netlink: 'syz.0.1815': attribute type 18 has an invalid length. [ 268.599621][T12301] netlink: 'syz.2.1825': attribute type 29 has an invalid length. [ 268.650262][T12302] netlink: 'syz.2.1825': attribute type 29 has an invalid length. [ 268.796756][T12316] netlink: 'syz.4.1829': attribute type 39 has an invalid length. [ 269.273490][T12348] ipt_REJECT: ECHOREPLY no longer supported. [ 269.274382][T12349] ipt_REJECT: ECHOREPLY no longer supported. [ 270.080436][T12400] tipc: Enabled bearer , priority 0 [ 270.122775][T12400] syzkaller0: entered promiscuous mode [ 270.133817][T12400] syzkaller0: entered allmulticast mode [ 270.158987][T12400] tipc: Resetting bearer [ 270.169542][T12399] tipc: Resetting bearer [ 270.196155][T12399] tipc: Disabling bearer [ 270.241792][T12413] x_tables: duplicate underflow at hook 3 [ 270.369120][T12417] syzkaller0: entered promiscuous mode [ 270.393546][T12417] syzkaller0: entered allmulticast mode [ 271.365817][T12486] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 271.384781][T12486] bond7 (unregistering): Released all slaves [ 271.571162][T12499] netlink: 'syz.2.1886': attribute type 1 has an invalid length. [ 271.579132][T12499] __nla_validate_parse: 27 callbacks suppressed [ 271.579152][T12499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1886'. [ 271.684597][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1885'. [ 272.406191][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 272.437290][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 272.702419][T12569] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 272.718326][T12569] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 272.742108][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 272.888152][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'. [ 272.913139][T12583] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1914'. [ 272.977462][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 273.041176][T12594] validate_nla: 3 callbacks suppressed [ 273.041198][T12594] netlink: 'syz.4.1915': attribute type 4 has an invalid length. [ 273.099191][T12599] netlink: 'syz.4.1915': attribute type 4 has an invalid length. [ 273.289654][T12608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.506421][T12624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1924'. [ 273.543835][T12624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1924'. [ 273.568541][T12625] syzkaller0: entered promiscuous mode [ 273.574170][T12625] syzkaller0: entered allmulticast mode [ 273.833875][T12635] syzkaller0: entered promiscuous mode [ 273.839558][T12635] syzkaller0: entered allmulticast mode [ 273.943583][T12639] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 274.436195][T12674] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 274.803547][T12691] netlink: 'syz.1.1948': attribute type 11 has an invalid length. [ 274.892807][T12698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.967471][T12706] tipc: Enabling of bearer rejected, failed to enable media [ 275.295819][T12723] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 275.727444][T12755] netlink: 'syz.0.1962': attribute type 83 has an invalid length. [ 275.813679][T12761] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 276.170638][T12773] xt_CT: No such helper "pptp" [ 276.760954][T12818] netlink: 'syz.4.1983': attribute type 10 has an invalid length. [ 276.796891][T12818] __nla_validate_parse: 15 callbacks suppressed [ 276.796961][T12818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1983'. [ 276.883723][T12818] team0: Port device geneve0 added [ 276.884327][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1986'. [ 276.918642][T12825] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20000 [ 277.428503][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'. [ 277.657752][T12864] netlink: 'syz.0.2000': attribute type 30 has an invalid length. [ 278.233070][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2009'. [ 278.688246][T12918] veth0_to_team: entered promiscuous mode [ 279.048551][T12935] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 279.109435][T12942] Bluetooth: MGMT ver 1.23 [ 279.148370][T12944] netlink: 'syz.2.2023': attribute type 10 has an invalid length. [ 279.284925][T12956] : renamed from hsr0 (while UP) [ 279.667774][T12959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.687188][T12959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.807130][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 279.976577][T12959] vlan0: left allmulticast mode [ 279.982260][T12959] veth0_vlan: left allmulticast mode [ 279.987843][T12959] vlan0: left promiscuous mode [ 280.018079][ T7176] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.029172][ T7176] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.038182][T12975] syzkaller0: entered promiscuous mode [ 280.043827][T12975] syzkaller0: entered allmulticast mode [ 280.062424][ T7176] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.071432][ T7176] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.080515][ T7176] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.089959][ T7176] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.150465][ T7176] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.159138][ T7176] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.423722][T13000] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2038'. [ 280.446007][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 280.494395][T13007] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 280.539044][T13007] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2039'. [ 280.561812][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 280.578350][T13007] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2039'. [ 280.591537][T13007] netlink: 'syz.0.2039': attribute type 2 has an invalid length. [ 280.607422][T13007] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2039'. [ 281.152916][T13038] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 281.161929][T13038] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 281.167870][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 281.176179][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 281.430464][T13048] IPv6: sit2: Disabled Multicast RS [ 281.439432][T13048] sit2: entered allmulticast mode [ 281.899390][T13079] __nla_validate_parse: 3 callbacks suppressed [ 281.899412][T13079] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2062'. [ 282.075593][T13089] tc_dump_action: action bad kind [ 282.250823][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2070'. [ 282.273904][T13100] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2070'. [ 282.330696][ T5945] hid-generic 0005:0458:05DF.0002: item fetching failed at offset 0/1 [ 282.367850][ T5945] hid-generic 0005:0458:05DF.0002: probe with driver hid-generic failed with error -22 [ 282.495983][T13114] syzkaller1: entered promiscuous mode [ 282.514346][T13114] syzkaller1: entered allmulticast mode [ 282.608767][T13109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.678074][T13124] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2078'. [ 282.824354][T13133] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 283.086359][T13148] veth5: entered allmulticast mode [ 283.114710][T13148] veth7: entered allmulticast mode [ 283.221081][T13156] C: renamed from team_slave_0 [ 283.230519][T13156] netlink: 'syz.2.2086': attribute type 1 has an invalid length. [ 283.259664][T13156] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 283.329078][T13161] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 283.594474][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 283.691222][T13172] tipc: Enabled bearer , priority 0 [ 283.717540][T13180] syzkaller0: entered promiscuous mode [ 283.752121][T13180] syzkaller0: entered allmulticast mode [ 283.773949][T13179] tipc: Enabling of bearer rejected, failed to enable media [ 283.853071][T13180] tipc: Resetting bearer [ 283.920368][T13180] tipc: Disabling bearer [ 284.004463][T13195] tipc: Started in network mode [ 284.021121][T13195] tipc: Node identity 7ee695cfb175, cluster identity 4711 [ 284.057960][T13195] tipc: Enabled bearer , priority 0 [ 284.123114][T13212] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2100'. [ 284.134767][T13202] syzkaller0: entered promiscuous mode [ 284.141447][T13202] syzkaller0: entered allmulticast mode [ 284.238876][T13199] syzkaller0: entered allmulticast mode [ 284.309868][T13195] tipc: Resetting bearer [ 284.319116][T13193] tipc: Resetting bearer [ 284.344813][T13193] tipc: Disabling bearer [ 284.442032][T13224] xt_SECMARK: invalid mode: 9 [ 284.851397][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 285.907847][T13224] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 285.933199][T13237] macvlan1: entered promiscuous mode [ 285.939190][T13237] macvlan1: entered allmulticast mode [ 286.107006][ T9390] IPVS: starting estimator thread 0... [ 286.211505][T13250] IPVS: using max 28 ests per chain, 67200 per kthread [ 286.299445][T13266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2115'. [ 286.816708][T13295] netlink: 91 bytes leftover after parsing attributes in process `syz.4.2124'. [ 287.352778][T13329] netlink: 'syz.3.2130': attribute type 28 has an invalid length. [ 287.380539][T13329] netlink: 'syz.3.2130': attribute type 3 has an invalid length. [ 287.389491][T13329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2130'. [ 287.568521][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2136'. [ 287.570150][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 287.633792][T13342] pim6reg1: entered promiscuous mode [ 287.659043][T13342] pim6reg1: entered allmulticast mode [ 287.823597][T13361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2142'. [ 287.996413][T13377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2146'. [ 288.315764][T13401] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2153'. [ 288.347023][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 288.423627][T13411] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2155'. [ 288.519931][T13417] tipc: Enabled bearer , priority 0 [ 288.658614][T13414] tipc: Disabling bearer [ 289.089230][T13446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.125122][T13451] tipc: Enabling of bearer rejected, failed to enable media [ 289.212648][T13452] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 289.240310][T13452] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.274492][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2171'. [ 289.283777][T13459] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2171'. [ 289.330543][T13452] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 289.350140][T13452] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.422129][T13452] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 289.433322][T13452] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.451893][T13462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.481946][T13466] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 289.501397][T13452] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 289.511799][T13452] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.563848][T13466] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.787386][ T7176] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.803116][ T7176] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 289.876426][T12228] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.885985][T12228] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 289.980800][T12228] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.990877][T12228] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 290.030616][T13489] Bluetooth: MGMT ver 1.23 [ 290.047801][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 290.054944][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 290.098629][T12241] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.129345][T12241] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 290.346255][ T1133] tipc: Subscription rejected, illegal request [ 292.412833][T13639] netlink: 'syz.1.2221': attribute type 1 has an invalid length. [ 292.468353][T13641] __nla_validate_parse: 6 callbacks suppressed [ 292.468372][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 293.004284][T13683] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20001 [ 293.139889][ T5833] Bluetooth: hci4: link tx timeout [ 293.146502][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.157015][ T5830] Bluetooth: hci4: link tx timeout [ 293.162354][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.171835][ T5830] Bluetooth: hci4: link tx timeout [ 293.177490][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.185576][ T5830] Bluetooth: hci4: link tx timeout [ 293.190942][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.199489][ T5830] Bluetooth: hci4: link tx timeout [ 293.204834][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.697628][T13711] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 293.757736][T13730] tunl0: Caught tx_queue_len zero misconfig [ 294.040149][T13749] bond1: (slave lo): Releasing backup interface [ 294.055878][T13749] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 294.108696][T13749] bridge_slave_0: left allmulticast mode [ 294.114507][T13749] bridge_slave_0: left promiscuous mode [ 294.121329][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.148318][T13749] bridge_slave_1: left allmulticast mode [ 294.164258][T13749] bridge_slave_1: left promiscuous mode [ 294.174610][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.213756][T13749] bond0: (slave bond_slave_0): Releasing backup interface [ 294.263898][T13749] bond0: (slave bond_slave_1): Releasing backup interface [ 294.303163][T13749] team0: Port device team_slave_0 removed [ 294.356620][T13749] team0: Port device team_slave_1 removed [ 294.374073][T13749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.389006][T13749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.411141][T13749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.422131][T13749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.434336][T13749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 294.670732][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2248'. [ 294.727572][T13789] netlink: 'syz.4.2248': attribute type 20 has an invalid length. [ 294.794935][T13800] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2250'. [ 294.851903][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2251'. [ 294.877854][T13801] tc_dump_action: action bad kind [ 294.903840][T12241] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.918512][T12225] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.942162][T12225] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.971211][T12225] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.020556][T13809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2251'. [ 295.170710][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 295.248930][T13825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2256'. [ 295.343260][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2257'. [ 295.520772][T13838] syzkaller0: entered promiscuous mode [ 295.529936][T13838] syzkaller0: entered allmulticast mode [ 295.692604][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'. [ 295.708637][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'. [ 295.821074][T13852] tipc: Enabled bearer , priority 0 [ 295.836780][T13852] syzkaller0: entered promiscuous mode [ 295.852342][T13852] syzkaller0: entered allmulticast mode [ 295.885187][T13852] tipc: Resetting bearer [ 295.911089][T13851] tipc: Resetting bearer [ 295.919023][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 295.953586][T13851] tipc: Disabling bearer [ 296.310112][T13881] pim6reg1: entered promiscuous mode [ 296.326732][T13881] pim6reg1: entered allmulticast mode [ 296.345648][T13884] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.624421][T12211] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.634195][T13891] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.642995][T13892] 8021q: VLANs not supported on ip6tnl0 [ 296.716062][T12211] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.751452][T12211] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.871681][ T7176] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.064615][T13924] netlink: 'syz.1.2282': attribute type 4 has an invalid length. [ 298.284232][T13998] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 298.300281][T14002] netlink: zone id is out of range [ 298.328504][T14002] netlink: zone id is out of range [ 298.333693][T14002] netlink: zone id is out of range [ 298.381367][T13998] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.390707][T14002] netlink: zone id is out of range [ 298.395902][T14002] netlink: set zone limit has 8 unknown bytes [ 298.513012][T14012] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.521777][T14012] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 298.536231][T14012] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 298.704590][T14017] veth13: entered promiscuous mode [ 298.718724][T14017] bond9: (slave veth13): Enslaving as an active interface with a down link [ 298.970774][T14057] __nla_validate_parse: 9 callbacks suppressed [ 298.970794][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2310'. [ 299.342256][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2315'. [ 299.382828][T14077] veth9: entered allmulticast mode [ 299.810404][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2323'. [ 299.972648][T14110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2327'. [ 300.005384][T14110] netlink: 'syz.3.2327': attribute type 7 has an invalid length. [ 300.022806][T14110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2327'. [ 300.053209][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2326'. [ 300.241117][T14127] pim6reg527: entered allmulticast mode [ 300.533856][T14145] tunl0: entered promiscuous mode [ 300.540186][T14145] gre0: entered promiscuous mode [ 300.545727][T14145] gretap0: entered promiscuous mode [ 300.560170][T14145] erspan0: entered promiscuous mode [ 300.576287][T14145] ip_vti0: entered promiscuous mode [ 300.652752][T14155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2338'. [ 300.677000][T14155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2338'. [ 301.022367][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 301.572076][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2354'. [ 301.880203][T14239] ip6t_REJECT: ECHOREPLY is not supported [ 302.141378][T14255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.359509][T14268] netlink: 'syz.4.2369': attribute type 1 has an invalid length. [ 302.442851][T14268] bond8 (unregistering): Released all slaves [ 302.773842][T14286] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 303.311688][T14298] netlink: 'syz.4.2378': attribute type 10 has an invalid length. [ 303.324779][T14298] veth0_virt_wifi: entered allmulticast mode [ 303.373731][T14298] team0: Port device veth0_virt_wifi added [ 303.568432][T14319] netlink: zone id is out of range [ 303.578112][T14319] netlink: zone id is out of range [ 303.583408][T14319] netlink: zone id is out of range [ 303.608032][T14319] netlink: zone id is out of range [ 303.613491][T14319] netlink: zone id is out of range [ 303.640333][T14319] netlink: zone id is out of range [ 303.645507][T14319] netlink: zone id is out of range [ 303.653091][T14319] netlink: zone id is out of range [ 303.678721][T14319] netlink: zone id is out of range [ 304.074143][T14351] SET target dimension over the limit! [ 304.081911][T14349] netlink: 'syz.1.2389': attribute type 2 has an invalid length. [ 304.109117][T14349] vlan1: entered allmulticast mode [ 304.152458][T14357] __nla_validate_parse: 8 callbacks suppressed [ 304.152478][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 304.209077][T14353] "syz.0.2390" (14353) uses obsolete ecb(arc4) skcipher [ 304.241850][T14357] 8021q: adding VLAN 0 to HW filter on device bond9 [ 304.253783][T14362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2392'. [ 304.297340][T14362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2392'. [ 304.392801][T14373] netlink: 3900 bytes leftover after parsing attributes in process `syz.2.2395'. [ 304.751693][T14395] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2401'. [ 304.815388][T14398] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2402'. [ 304.995626][T14407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.064339][T14398] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 305.094315][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2406'. [ 305.099669][T14398] bond0 (unregistering): Released all slaves [ 305.285767][T14415] macsec0: entered promiscuous mode [ 305.304161][T14415] macsec0: entered allmulticast mode [ 305.304197][T14422] netlink: 'syz.0.2408': attribute type 1 has an invalid length. [ 305.310913][T14415] bond7: (slave macsec0): Error -34 calling dev_set_mtu [ 305.344352][T14427] sctp: [Deprecated]: syz.1.2410 (pid 14427) Use of int in maxseg socket option. [ 305.344352][T14427] Use struct sctp_assoc_value instead [ 305.546130][T14442] sctp: [Deprecated]: syz.2.2415 (pid 14442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.546130][T14442] Use struct sctp_sack_info instead [ 305.610462][T14448] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2412'. [ 305.624066][T14449] sctp: [Deprecated]: syz.2.2415 (pid 14449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.624066][T14449] Use struct sctp_sack_info instead [ 305.660611][T14449] IPVS: length: 131 != 8 [ 306.355399][T12225] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.375516][T12225] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.400756][T12225] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 306.431003][T12225] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.462000][T12225] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.477626][T12225] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 306.536170][T12225] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.545714][T12225] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.554391][T12225] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 306.574700][T12225] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.589455][T14465] netlink: 'syz.1.2420': attribute type 2 has an invalid length. [ 306.598441][T12225] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.623774][T14465] netlink: 'syz.1.2420': attribute type 11 has an invalid length. [ 306.632946][T12225] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 306.648585][T14465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2420'. [ 306.659747][T14469] tipc: Invalid UDP bearer configuration [ 306.659795][T14469] tipc: Enabling of bearer rejected, failed to enable media [ 306.901040][T14481] tipc: Enabled bearer , priority 0 [ 306.934439][T14481] syzkaller0: entered promiscuous mode [ 306.949620][T14489] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2429'. [ 306.951969][T14481] syzkaller0: entered allmulticast mode [ 307.015593][T14482] tipc: Resetting bearer [ 307.042752][T14480] tipc: Resetting bearer [ 307.112661][T14480] tipc: Disabling bearer [ 307.223662][T14506] xt_hashlimit: max too large, truncated to 1048576 [ 307.346580][T14512] netlink: 'syz.3.2434': attribute type 8 has an invalid length. [ 307.620674][T14531] netlink: 'syz.0.2439': attribute type 1 has an invalid length. [ 308.245320][T12225] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 309.174680][T14614] __nla_validate_parse: 23 callbacks suppressed [ 309.174702][T14614] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2457'. [ 309.242038][T14614] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.249421][T14614] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.269166][T14619] netlink: 'syz.0.2455': attribute type 6 has an invalid length. [ 309.435022][T14630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2458'. [ 309.522312][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 309.816296][T14653] netlink: 'syz.2.2466': attribute type 10 has an invalid length. [ 309.831652][T14653] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 309.916395][T14661] xt_l2tp: invalid flags combination: 0 [ 309.945627][T14662] xt_l2tp: invalid flags combination: 0 [ 310.332958][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 310.345153][T14684] 8021q: VLANs not supported on ipvlan1 [ 310.365302][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 310.391714][T14684] netlink: 'syz.0.2471': attribute type 5 has an invalid length. [ 310.488045][T14696] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2475'. [ 310.544149][T14698] netlink: 'syz.2.2476': attribute type 12 has an invalid length. [ 310.584916][T14698] bond8: option primary_reselect: invalid value (255) [ 310.595386][T14698] bond8 (unregistering): Released all slaves [ 310.606518][T14703] netlink: 'syz.2.2476': attribute type 10 has an invalid length. [ 310.616250][T14703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2476'. [ 310.686723][T14703] team0: Port device geneve0 added [ 310.700237][T12241] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.710210][T12241] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.765342][T14709] nbd: socks must be embedded in a SOCK_ITEM attr [ 310.783400][T12241] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.803701][T12241] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.985777][T14725] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 311.296481][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2488'. [ 311.344038][T14746] netlink: 'syz.2.2486': attribute type 1 has an invalid length. [ 311.362243][T14746] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2486'. [ 311.427334][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'. [ 312.152920][T14805] tipc: Enabled bearer , priority 0 [ 312.169905][T14805] syzkaller0: entered promiscuous mode [ 312.181107][T14805] syzkaller0: entered allmulticast mode [ 312.192897][T14809] netlink: 'syz.4.2503': attribute type 24 has an invalid length. [ 312.207661][T14804] netlink: 'syz.0.2502': attribute type 10 has an invalid length. [ 312.241219][T14805] tipc: Resetting bearer [ 312.258293][T14811] netlink: 'syz.0.2502': attribute type 10 has an invalid length. [ 312.303127][T14804] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 312.323954][T14804] team0: Failed to send options change via netlink (err -105) [ 312.331853][T14804] team0: Port device dummy0 added [ 312.358051][T14811] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 312.412086][T14811] team0: Failed to send options change via netlink (err -105) [ 312.428758][T14811] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 312.439877][T14811] team0: Port device dummy0 removed [ 312.475602][T14811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 312.486682][T14802] tipc: Resetting bearer [ 312.516559][T14802] tipc: Disabling bearer [ 312.543835][T14818] pimreg3: entered allmulticast mode [ 312.697711][T14830] netlink: 'syz.4.2509': attribute type 16 has an invalid length. [ 312.905109][T14842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.971935][T14842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.982558][T14849] team_slave_1: left promiscuous mode [ 312.988642][T14849] geneve2: left promiscuous mode [ 312.994159][T14849] team1: left promiscuous mode [ 313.034055][T14842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.608564][T14870] veth0_virt_wifi: entered allmulticast mode [ 313.619271][T14870] team0: Port device veth0_virt_wifi added [ 313.698114][T14873] net_ratelimit: 2 callbacks suppressed [ 313.698135][T14873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.250269][T14908] __nla_validate_parse: 9 callbacks suppressed [ 314.250290][T14908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2532'. [ 314.465907][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 314.619265][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2539'. [ 314.826673][T14941] netlink: 4240 bytes leftover after parsing attributes in process `syz.2.2539'. [ 314.947966][T14943] syzkaller0: refused to change device tx_queue_len [ 314.982001][T14945] validate_nla: 3 callbacks suppressed [ 314.982047][T14945] netlink: 'syz.0.2541': attribute type 1 has an invalid length. [ 315.098650][T14950] netlink: 'syz.2.2544': attribute type 1 has an invalid length. [ 315.128741][T14951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2544'. [ 315.315741][T14958] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 315.348098][T14958] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2545'. [ 315.403495][T14965] ipt_rpfilter: unknown options [ 315.480484][T14972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2550'. [ 315.491519][T14973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2550'. [ 315.945914][T14994] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2555'. [ 316.496660][T15025] netlink: 'syz.0.2566': attribute type 13 has an invalid length. [ 316.517020][T15025] netlink: 'syz.0.2566': attribute type 27 has an invalid length. [ 316.554272][T15029] netlink: 'syz.1.2568': attribute type 1 has an invalid length. [ 316.573991][T15029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.780158][T15042] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2571'. [ 316.815848][T15044] openvswitch: netlink: IP tunnel dst address not specified [ 316.830064][T15045] netlink: 'syz.2.2573': attribute type 1 has an invalid length. [ 316.859788][T15045] netlink: 'syz.2.2573': attribute type 1 has an invalid length. [ 316.868663][T15045] netlink: 'syz.2.2573': attribute type 1 has an invalid length. [ 316.884241][T15045] netlink: 'syz.2.2573': attribute type 1 has an invalid length. [ 317.138862][T15066] lo: left promiscuous mode [ 317.166593][T15066] tunl0: left promiscuous mode [ 317.195009][T15066] gre0: left promiscuous mode [ 317.212088][T15066] gretap0: left promiscuous mode [ 317.235331][T15066] erspan0: left promiscuous mode [ 317.256084][T15066] ip_vti0: left promiscuous mode [ 317.304621][T15066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.314323][T15066] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.325651][T15066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.343666][T15069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 317.361142][T15071] netem: invalid attributes len -24 [ 317.371855][T15071] netem: change failed [ 317.497084][T15076] Cannot find del_set index 4 as target [ 317.786317][T15097] tipc: Enabling of bearer rejected, failed to enable media [ 318.134284][T15113] tap0: tun_chr_ioctl cmd 1074025672 [ 318.143313][T15113] tap0: ignored: set checksum disabled [ 318.495812][T15134] smc: net device vcan0 applied user defined pnetid SYZ1 [ 319.320354][T15158] bond10: option lp_interval: invalid value (0) [ 319.331464][T15158] bond10: option lp_interval: allowed values 1 - 2147483647 [ 319.344726][T15171] __nla_validate_parse: 13 callbacks suppressed [ 319.344748][T15171] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2610'. [ 319.364523][T15158] bond10 (unregistering): Released all slaves [ 319.825138][T15192] syzkaller0: entered promiscuous mode [ 319.845894][T15192] syzkaller0: entered allmulticast mode [ 319.871289][T15193] bond10: (slave gretap2): making interface the new active one [ 319.880212][T15193] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 319.938248][T15192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2615'. [ 319.963760][T15192] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2615'. [ 320.044697][T15209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2621'. [ 320.143378][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2619'. [ 320.170538][T15213] validate_nla: 34 callbacks suppressed [ 320.170647][T15213] netlink: 'syz.1.2622': attribute type 39 has an invalid length. [ 320.171351][T15215] netlink: 'syz.3.2623': attribute type 11 has an invalid length. [ 320.196940][T15215] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2623'. [ 320.675342][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 320.785082][T15252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2635'. [ 320.815447][T15249] netlink: 'syz.3.2634': attribute type 11 has an invalid length. [ 320.839108][T15249] netlink: 'syz.3.2634': attribute type 11 has an invalid length. [ 320.852915][T15249] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2634'. [ 320.874733][T15255] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2636'. [ 320.991524][T15262] sock: sock_set_timeout: `syz.0.2638' (pid 15262) tries to set negative timeout [ 321.694624][T15293] tipc: Enabled bearer , priority 0 [ 321.730209][T15298] tipc: Enabled bearer , priority 13 [ 321.743068][T15293] syzkaller0: entered promiscuous mode [ 321.771423][T15293] syzkaller0: entered allmulticast mode [ 321.831191][T15293] tipc: Resetting bearer [ 321.841461][T15291] tipc: Resetting bearer [ 321.884551][T15291] tipc: Disabling bearer [ 322.295370][T15329] tipc: Enabled bearer , priority 0 [ 322.303800][T15329] syzkaller0: entered promiscuous mode [ 322.310992][T15329] syzkaller0: entered allmulticast mode [ 322.379587][T15329] tipc: Resetting bearer [ 322.390569][T15328] tipc: Resetting bearer [ 322.429496][T15328] tipc: Disabling bearer [ 322.510249][T15336] IPVS: length: 216 != 8 [ 322.653501][T15340] x_tables: duplicate underflow at hook 1 [ 322.670999][T15343] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 322.897394][T15364] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 322.918455][T15357] netlink: 'syz.4.2669': attribute type 4 has an invalid length. [ 322.919389][T15363] netlink: 'syz.3.2670': attribute type 28 has an invalid length. [ 322.935498][T15363] netlink: 'syz.3.2670': attribute type 3 has an invalid length. [ 323.145704][T15375] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 323.211222][T15375] bond0: (slave gretap1): making interface the new active one [ 323.220117][T15375] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 323.357507][T15386] openvswitch: netlink: IP tunnel dst address not specified [ 323.369707][T15392] netlink: 'syz.0.2680': attribute type 3 has an invalid length. [ 323.394334][T15396] openvswitch: netlink: IP tunnel dst address not specified [ 323.600489][T15404] netlink: 'syz.2.2686': attribute type 7 has an invalid length. [ 323.622232][T15407] netlink: 'syz.0.2687': attribute type 6 has an invalid length. [ 324.004961][T15430] tipc: Enabled bearer , priority 0 [ 324.014213][T15430] syzkaller0: entered promiscuous mode [ 324.069121][T15430] syzkaller0: entered allmulticast mode [ 324.201076][T15444] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.210574][T15444] bond9: (slave bond10): making interface the new active one [ 324.224028][T15444] bond9: (slave bond10): Enslaving as an active interface with an up link [ 324.272388][T15430] tipc: Resetting bearer [ 324.293660][T15451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.358599][T15426] tipc: Resetting bearer [ 324.363923][T15461] __nla_validate_parse: 11 callbacks suppressed [ 324.363949][T15461] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2702'. [ 324.448504][T15426] tipc: Disabling bearer [ 324.520827][T15474] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2704'. [ 324.876386][T15499] tipc: Enabling of bearer rejected, failed to enable media [ 324.983426][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'. [ 325.028782][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 325.075541][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'. [ 325.149993][T15514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.175245][T15522] xt_hashlimit: size too large, truncated to 1048576 [ 325.177671][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 325.254681][T15521] tipc: Enabling of bearer rejected, failed to enable media [ 325.314272][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'. [ 325.346684][T15533] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 325.390475][T15535] 8021q: VLANs not supported on ip_vti0 [ 325.459241][T15537] validate_nla: 3 callbacks suppressed [ 325.459264][T15537] netlink: 'syz.2.2723': attribute type 9 has an invalid length. [ 325.577407][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'. [ 325.586752][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'. [ 325.598174][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'. [ 325.718004][T15556] netlink: 'syz.3.2727': attribute type 4 has an invalid length. [ 326.046647][T15573] netlink: 'syz.4.2734': attribute type 1 has an invalid length. [ 326.550910][T15601] tipc: Enabled bearer , priority 0 [ 326.574595][T15608] tipc: Enabling of bearer rejected, already enabled [ 326.601684][T15601] syzkaller0: entered promiscuous mode [ 326.620549][T15601] syzkaller0: entered allmulticast mode [ 326.648023][T15613] : entered promiscuous mode [ 326.667691][T15599] tipc: Resetting bearer [ 326.718275][T15599] tipc: Disabling bearer [ 326.826980][T15619] netlink: 'syz.4.2747': attribute type 6 has an invalid length. [ 327.490274][T15663] tipc: Enabled bearer , priority 0 [ 327.504040][T15663] syzkaller0: entered promiscuous mode [ 327.510806][T15663] syzkaller0: entered allmulticast mode [ 327.521669][T15663] syzkaller0: mtu less than device minimum [ 327.532935][T15661] tipc: Resetting bearer [ 327.551524][T15661] tipc: Disabling bearer [ 328.245565][T15705] ip6gre1: entered promiscuous mode [ 328.251592][T15705] ip6gre1: entered allmulticast mode [ 328.419404][T12225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.433742][T12225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.481992][T15715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.519248][T15726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.218455][T15760] netlink: 'syz.1.2792': attribute type 4 has an invalid length. [ 329.248155][T15760] `: renamed from bond0 (while UP) [ 329.350127][T15766] team_slave_1: Caught tx_queue_len zero misconfig [ 329.384513][T15771] __nla_validate_parse: 16 callbacks suppressed [ 329.384534][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'. [ 329.401289][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'. [ 329.853678][T15784] vlan4: entered promiscuous mode [ 329.876953][T15784] bridge0: entered promiscuous mode [ 329.995315][T15796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2805'. [ 330.025318][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 330.041610][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 330.131916][T15805] pim6reg1: entered promiscuous mode [ 330.137456][T15805] pim6reg1: entered allmulticast mode [ 330.214680][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2807'. [ 330.244892][T15814] sctp: [Deprecated]: syz.0.2811 (pid 15814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.244892][T15814] Use struct sctp_sack_info instead [ 330.462214][T15827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2815'. [ 330.492885][T15814] bridge0: port 3(ipvlan2) entered blocking state [ 330.507766][T15814] bridge0: port 3(ipvlan2) entered disabled state [ 330.543480][T15814] ipvlan2: entered allmulticast mode [ 330.549717][T15814] bridge0: entered allmulticast mode [ 330.559406][T15814] ipvlan2: left allmulticast mode [ 330.564658][T15814] bridge0: left allmulticast mode [ 330.710026][T15841] macvlan3: entered promiscuous mode [ 330.715398][T15841] macvlan3: entered allmulticast mode [ 330.722913][T15841] bond0: (slave macvlan3): Opening slave failed [ 330.821832][T15850] tipc: Can't bind to reserved service type 2 [ 330.880908][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 330.987028][T15862] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2827'. [ 331.053000][T15868] sock: sock_set_timeout: `syz.1.2827' (pid 15868) tries to set negative timeout [ 331.080477][T15819] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.088119][T15819] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 331.133713][T15819] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.141052][T15819] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 331.154739][T15819] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 331.160906][T15819] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 331.174313][T15819] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.180563][T15819] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 331.193918][T15819] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 331.202791][T15819] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 331.276489][ T5973] IPVS: starting estimator thread 0... [ 331.377066][T15876] IPVS: using max 26 ests per chain, 62400 per kthread [ 331.660214][T15891] pimreg: entered allmulticast mode [ 332.107248][T15916] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2841'. [ 332.372956][T15930] tipc: Enabled bearer , priority 0 [ 332.381650][T15929] syzkaller0: entered promiscuous mode [ 332.389664][T15929] syzkaller0: entered allmulticast mode [ 332.440411][T15929] tipc: Resetting bearer [ 332.515909][T15929] tipc: Disabling bearer [ 333.892909][T15996] openvswitch: netlink: IP tunnel dst address not specified [ 333.904061][T15996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.263610][T16012] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 334.276699][T16012] bond0 (unregistering): Released all slaves [ 334.416235][T16021] __nla_validate_parse: 12 callbacks suppressed [ 334.416255][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2865'. [ 334.464866][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2866'. [ 334.483689][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2866'. [ 334.784579][T16040] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2870'. [ 334.878712][T16050] netlink: 'syz.4.2873': attribute type 10 has an invalid length. [ 334.886576][T16050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2873'. [ 334.896350][T16050] vetè0_virt_wifi: entered promiscuous mode [ 334.905201][T16050] A link change request failed with some changes committed already. Interface vetè0_virt_wifi may have been left with an inconsistent configuration, please check. [ 335.078935][T16059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2875'. [ 335.089040][T16059] netlink: 'syz.4.2875': attribute type 7 has an invalid length. [ 335.096832][T16059] netlink: 'syz.4.2875': attribute type 8 has an invalid length. [ 335.104673][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'. [ 335.117997][T16059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.406293][T16072] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2879'. [ 335.468032][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 335.480009][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 335.540673][T16076] netlink: 'syz.4.2881': attribute type 13 has an invalid length. [ 335.792241][T16083] netlink: zone id is out of range [ 335.797871][T16083] netlink: zone id is out of range [ 335.803202][T16083] netlink: zone id is out of range [ 335.808910][T16083] netlink: zone id is out of range [ 335.814158][T16083] netlink: zone id is out of range [ 335.821091][T16083] netlink: set zone limit has 8 unknown bytes [ 335.828645][T16083] netlink: 'syz.4.2884': attribute type 7 has an invalid length. [ 335.836467][T16083] netlink: 'syz.4.2884': attribute type 8 has an invalid length. [ 336.104967][T16087] netlink: 'syz.4.2885': attribute type 13 has an invalid length. [ 336.132076][T16087] vetè0_virt_wifi: left promiscuous mode [ 336.144786][T16087] team_slave_1: left allmulticast mode [ 336.162847][T16087] veth0_virt_wifi: left allmulticast mode [ 336.180386][T16087] geneve2: left allmulticast mode [ 336.192273][T16087] team1: left allmulticast mode [ 336.198661][T16087] vlan2: left allmulticast mode [ 336.203633][T16087] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 336.868079][T16128] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 337.135676][T16147] hsr0 speed is unknown, defaulting to 1000 [ 337.144214][T16147] hsr0 speed is unknown, defaulting to 1000 [ 337.154952][T16147] hsr0 speed is unknown, defaulting to 1000 [ 337.170428][T16147] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 337.189225][T16147] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 337.230432][T16147] hsr0 speed is unknown, defaulting to 1000 [ 337.239510][T16147] hsr0 speed is unknown, defaulting to 1000 [ 337.248526][T16147] hsr0 speed is unknown, defaulting to 1000 [ 337.256574][T16147] hsr0 speed is unknown, defaulting to 1000 [ 337.266194][T16147] hsr0 speed is unknown, defaulting to 1000 [ 337.819571][T16177] netlink: 'syz.1.2909': attribute type 1 has an invalid length. [ 337.845012][T16177] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 338.404900][T16213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.622764][T16224] syzkaller0: entered promiscuous mode [ 338.632188][T16224] syzkaller0: entered allmulticast mode [ 339.401613][T16283] net_ratelimit: 13 callbacks suppressed [ 339.401631][T16283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.592058][T16296] __nla_validate_parse: 7 callbacks suppressed [ 339.592078][T16296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2945'. [ 339.663298][T16302] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 339.677756][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2946'. [ 339.687721][T16302] gre3: entered promiscuous mode [ 339.692819][T16302] gre3: entered allmulticast mode [ 339.702162][T16303] lo: entered promiscuous mode [ 339.707684][T16303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.792451][T16306] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2948'. [ 339.804294][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2948'. [ 339.864745][T16309] netlink: 'syz.1.2949': attribute type 4 has an invalid length. [ 493.887053][ T31] INFO: task syz-executor:5832 blocked for more than 143 seconds. [ 493.895021][ T31] Not tainted syzkaller #0 [ 493.900188][ T31] Blocked by coredump. [ 493.904773][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.913773][ T31] task:syz-executor state:D stack:21544 pid:5832 tgid:5832 ppid:1 task_flags:0x40054c flags:0x00080003 [ 493.925759][ T31] Call Trace: [ 493.929174][ T31] [ 493.932153][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.936684][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.942364][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.947759][ T31] ? __pfx___schedule+0x10/0x10 [ 493.953032][ T31] ? schedule+0x91/0x360 [ 493.957676][ T31] schedule+0x165/0x360 [ 493.961932][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.967938][ T31] __mutex_lock+0x7e6/0x1350 [ 493.991599][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.996504][ T31] ? rfkill_unregister+0xc8/0x220 [ 494.027731][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.032873][ T31] ? __pfx_device_del+0x10/0x10 [ 494.039052][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 494.044323][ T31] rfkill_unregister+0xc8/0x220 [ 494.050125][ T31] hci_unregister_dev+0x374/0x510 [ 494.055214][ T31] vhci_release+0x152/0x1a0 [ 494.059906][ T31] ? __pfx_vhci_release+0x10/0x10 [ 494.064993][ T31] __fput+0x44c/0xa70 [ 494.070139][ T31] task_work_run+0x1d4/0x260 [ 494.074750][ T31] ? __pfx_task_work_run+0x10/0x10 [ 494.079965][ T31] ? do_exit+0x6b0/0x2300 [ 494.084342][ T31] ? kmem_cache_free+0x19b/0x690 [ 494.089401][ T31] do_exit+0x6b5/0x2300 [ 494.093618][ T31] ? do_raw_spin_lock+0x121/0x290 [ 494.099593][ T31] ? __pfx_do_exit+0x10/0x10 [ 494.104280][ T31] do_group_exit+0x21c/0x2d0 [ 494.108992][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.114218][ T31] get_signal+0x1285/0x1340 [ 494.118844][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 494.124446][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 494.131899][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 494.137541][ T31] exit_to_user_mode_loop+0x72/0x130 [ 494.142858][ T31] do_syscall_64+0x2bd/0xfa0 [ 494.147532][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.152849][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.160025][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.164751][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.170719][ T31] RIP: 0033:0x7f1969d8e0dc [ 494.175156][ T31] RSP: 002b:00007ffdc8d6eb20 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.183632][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f1969d8e0dc [ 494.192614][ T31] RDX: 0000000000000030 RSI: 00007ffdc8d6ebe0 RDI: 00000000000000f9 [ 494.200648][ T31] RBP: 00007ffdc8d6eb8c R08: 0000000000000000 R09: 0079746972756365 [ 494.208697][ T31] R10: 00007ffdc8d6e4e0 R11: 0000000000000246 R12: 0000000000000258 [ 494.216683][ T31] R13: 00000000000927c0 R14: 0000000000051216 R15: 00007ffdc8d6ebe0 [ 494.225655][ T31] [ 494.228764][ T31] INFO: task kworker/0:5:5933 blocked for more than 143 seconds. [ 494.236500][ T31] Not tainted syzkaller #0 [ 494.242893][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.252444][ T31] task:kworker/0:5 state:D stack:22968 pid:5933 tgid:5933 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 494.264576][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 494.271304][ T31] Call Trace: [ 494.274587][ T31] [ 494.278398][ T31] __schedule+0x1798/0x4cc0 [ 494.282984][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 494.288483][ T31] ? __pfx___schedule+0x10/0x10 [ 494.293377][ T31] ? schedule+0x91/0x360 [ 494.297663][ T31] schedule+0x165/0x360 [ 494.301830][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.308148][ T31] __mutex_lock+0x7e6/0x1350 [ 494.312785][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.317614][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 494.323889][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.329000][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.334737][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.341384][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 494.347592][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.353361][ T31] process_scheduled_works+0xae1/0x17b0 [ 494.359148][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.365242][ T31] worker_thread+0x8a0/0xda0 [ 494.370711][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.377115][ T31] ? __kthread_parkme+0x7b/0x200 [ 494.382098][ T31] kthread+0x711/0x8a0 [ 494.386196][ T31] ? __pfx_worker_thread+0x10/0x10 [ 494.391351][ T31] ? __pfx_kthread+0x10/0x10 [ 494.395961][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.402065][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.407344][ T31] ? __pfx_kthread+0x10/0x10 [ 494.412145][ T31] ret_from_fork+0x4bc/0x870 [ 494.416821][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.421973][ T31] ? __switch_to_asm+0x39/0x70 [ 494.427702][ T31] ? __switch_to_asm+0x33/0x70 [ 494.432564][ T31] ? __pfx_kthread+0x10/0x10 [ 494.437200][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.442037][ T31] [ 494.445146][ T31] INFO: task syz.2.2807:15802 blocked for more than 143 seconds. [ 494.454012][ T31] Not tainted syzkaller #0 [ 494.459866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.468654][ T31] task:syz.2.2807 state:D stack:25960 pid:15802 tgid:15802 ppid:5839 task_flags:0x400040 flags:0x00080002 [ 494.481045][ T31] Call Trace: [ 494.484337][ T31] [ 494.488225][ T31] __schedule+0x1798/0x4cc0 [ 494.492767][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.497667][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.502531][ T31] ? __pfx___schedule+0x10/0x10 [ 494.507471][ T31] ? schedule+0x91/0x360 [ 494.511743][ T31] schedule+0x165/0x360 [ 494.515935][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.522312][ T31] __mutex_lock+0x7e6/0x1350 [ 494.527079][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.531883][ T31] ? rfkill_unregister+0xc8/0x220 [ 494.536981][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.542045][ T31] ? __pfx_device_del+0x10/0x10 [ 494.547856][ T31] rfkill_unregister+0xc8/0x220 [ 494.552733][ T31] nfc_unregister_device+0x96/0x2a0 [ 494.557973][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 494.563719][ T31] virtual_ncidev_close+0x56/0x90 [ 494.568823][ T31] __fput+0x44c/0xa70 [ 494.572838][ T31] task_work_run+0x1d4/0x260 [ 494.578426][ T31] ? __pfx_task_work_run+0x10/0x10 [ 494.583607][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 494.589176][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 494.594504][ T31] do_syscall_64+0x2bd/0xfa0 [ 494.599135][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.604359][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.611303][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.616007][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.621982][ T31] RIP: 0033:0x7f097af8f6c9 [ 494.626405][ T31] RSP: 002b:00007ffe7cba5b48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 494.634874][ T31] RAX: 0000000000000000 RBX: 0000000000050946 RCX: 00007f097af8f6c9 [ 494.643736][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 494.651754][ T31] RBP: 00007f097b1e7da0 R08: 0000000000000001 R09: 0000001e7cba5e3f [ 494.659794][ T31] R10: 0000001b2ff20000 R11: 0000000000000246 R12: 00007f097b1e5fac [ 494.668666][ T31] R13: 00007f097b1e5fa0 R14: ffffffffffffffff R15: 00007ffe7cba5c60 [ 494.677028][ T31] [ 494.680091][ T31] INFO: task syz.0.2811:15819 blocked for more than 144 seconds. [ 494.694785][ T31] Not tainted syzkaller #0 [ 494.700698][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.709505][ T31] task:syz.0.2811 state:D stack:24616 pid:15819 tgid:15813 ppid:5828 task_flags:0x400040 flags:0x00080003 [ 494.721558][ T31] Call Trace: [ 494.724868][ T31] [ 494.728683][ T31] __schedule+0x1798/0x4cc0 [ 494.733243][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.738146][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.743016][ T31] ? __pfx___schedule+0x10/0x10 [ 494.748046][ T31] ? schedule+0x91/0x360 [ 494.752300][ T31] schedule+0x165/0x360 [ 494.756463][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.762840][ T31] __mutex_lock+0x7e6/0x1350 [ 494.767546][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.772348][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 494.777701][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.782742][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.788813][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 494.794721][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.801231][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 494.807033][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 494.812259][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 494.818871][ T31] rfkill_set_block+0x1d2/0x440 [ 494.823750][ T31] rfkill_fop_write+0x44b/0x570 [ 494.828661][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 494.834071][ T31] ? security_kernfs_init_security+0x250/0x290 [ 494.840289][ T31] ? rw_verify_area+0x255/0x4d0 [ 494.845154][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.851278][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 494.856695][ T31] vfs_write+0x27e/0xb30 [ 494.861077][ T31] ? __pfx_vfs_write+0x10/0x10 [ 494.865888][ T31] ? __fget_files+0x2a/0x420 [ 494.870641][ T31] ? __fget_files+0x2a/0x420 [ 494.875247][ T31] ? __fget_files+0x3a0/0x420 [ 494.880798][ T31] ? __fget_files+0x2a/0x420 [ 494.885409][ T31] ksys_write+0x145/0x250 [ 494.889776][ T31] ? __pfx_ksys_write+0x10/0x10 [ 494.894679][ T31] ? do_syscall_64+0xbe/0xfa0 [ 494.899455][ T31] do_syscall_64+0xfa/0xfa0 [ 494.903994][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.911013][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.917359][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.922062][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.928055][ T31] RIP: 0033:0x7f4b7498f6c9 [ 494.932514][ T31] RSP: 002b:00007f4b75782038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 494.941850][ T31] RAX: ffffffffffffffda RBX: 00007f4b74be6090 RCX: 00007f4b7498f6c9 [ 494.949967][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 494.958040][ T31] RBP: 00007f4b74a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.966067][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.974935][ T31] R13: 00007f4b74be6128 R14: 00007f4b74be6090 R15: 00007fff2087e028 [ 494.983129][ T31] [ 494.986191][ T31] INFO: task syz-executor:15962 blocked for more than 144 seconds. [ 494.994262][ T31] Not tainted syzkaller #0 [ 495.000094][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.008875][ T31] task:syz-executor state:D stack:27368 pid:15962 tgid:15962 ppid:1 task_flags:0x400040 flags:0x00080000 [ 495.020889][ T31] Call Trace: [ 495.024241][ T31] [ 495.028530][ T31] __schedule+0x1798/0x4cc0 [ 495.033106][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.038008][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.042885][ T31] ? __pfx___schedule+0x10/0x10 [ 495.047908][ T31] ? schedule+0x91/0x360 [ 495.052169][ T31] schedule+0x165/0x360 [ 495.056360][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.062725][ T31] __mutex_lock+0x7e6/0x1350 [ 495.067387][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.072173][ T31] ? rfkill_register+0x37/0x8e0 [ 495.077133][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.082231][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 495.088679][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 495.094080][ T31] ? device_initialize+0x24b/0x440 [ 495.099237][ T31] rfkill_register+0x37/0x8e0 [ 495.103933][ T31] hci_register_dev+0x3f5/0x890 [ 495.108880][ T31] vhci_create_device+0x39c/0x650 [ 495.114046][ T31] vhci_write+0x3ce/0x4a0 [ 495.119271][ T31] vfs_write+0x5c9/0xb30 [ 495.123623][ T31] ? __pfx_vhci_write+0x10/0x10 [ 495.128514][ T31] ? __pfx_vfs_write+0x10/0x10 [ 495.133383][ T31] ? count_memcg_event_mm+0x21/0x260 [ 495.138733][ T31] ksys_write+0x145/0x250 [ 495.143101][ T31] ? __pfx_ksys_write+0x10/0x10 [ 495.148914][ T31] ? do_syscall_64+0xbe/0xfa0 [ 495.153617][ T31] do_syscall_64+0xfa/0xfa0 [ 495.158163][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.163385][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.169501][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.174185][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.180945][ T31] RIP: 0033:0x7fc4f498e140 [ 495.185370][ T31] RSP: 002b:00007ffd35adaf18 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 495.193837][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc4f498e140 [ 495.201850][ T31] RDX: 0000000000000002 RSI: 00007ffd35adaf2a RDI: 00000000000000ca [ 495.210758][ T31] RBP: 00007fc4f4be67b8 R08: 0000000000000000 R09: 00007fc4f571d6c0 [ 495.218873][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 495.226897][ T31] R13: 0000000000000003 R14: 00007ffd35adb278 R15: 0000000000000000 [ 495.234910][ T31] [ 495.238833][ T31] INFO: task syz.4.2956:16331 blocked for more than 144 seconds. [ 495.246573][ T31] Not tainted syzkaller #0 [ 495.251613][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.260377][ T31] task:syz.4.2956 state:D stack:26472 pid:16331 tgid:16330 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 495.273207][ T31] Call Trace: [ 495.276497][ T31] [ 495.279487][ T31] __schedule+0x1798/0x4cc0 [ 495.284036][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.288919][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.293773][ T31] ? __pfx___schedule+0x10/0x10 [ 495.299532][ T31] ? schedule+0x91/0x360 [ 495.303805][ T31] schedule+0x165/0x360 [ 495.308194][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.313667][ T31] __mutex_lock+0x7e6/0x1350 [ 495.318328][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.323237][ T31] ? rfkill_register+0x37/0x8e0 [ 495.329089][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.334148][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 495.339662][ T31] ? device_initialize+0x24b/0x440 [ 495.344791][ T31] rfkill_register+0x37/0x8e0 [ 495.349541][ T31] nfc_register_device+0x14a/0x320 [ 495.354664][ T31] nci_register_device+0x87f/0x9d0 [ 495.360754][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 495.366403][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 495.371774][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 495.377254][ T31] virtual_ncidev_open+0x129/0x1a0 [ 495.382411][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 495.388982][ T31] misc_open+0x2d5/0x350 [ 495.393244][ T31] chrdev_open+0x4cc/0x5e0 [ 495.397695][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.402641][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 495.409017][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.414050][ T31] do_dentry_open+0x953/0x13f0 [ 495.419733][ T31] vfs_open+0x3b/0x340 [ 495.423814][ T31] ? path_openat+0x2ecd/0x3830 [ 495.428732][ T31] path_openat+0x2ee5/0x3830 [ 495.433607][ T31] ? __pfx_path_openat+0x10/0x10 [ 495.438628][ T31] do_filp_open+0x1fa/0x410 [ 495.443157][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.448979][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 495.454059][ T31] ? _raw_spin_unlock+0x28/0x50 [ 495.458951][ T31] ? alloc_fd+0x64c/0x6c0 [ 495.463308][ T31] do_sys_openat2+0x121/0x1c0 [ 495.468017][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.473317][ T31] ? rcu_is_watching+0x15/0xb0 [ 495.479061][ T31] __x64_sys_openat+0x138/0x170 [ 495.483935][ T31] do_syscall_64+0xfa/0xfa0 [ 495.488517][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.493732][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.499869][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.504563][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.511311][ T31] RIP: 0033:0x7f5206b8f6c9 [ 495.515734][ T31] RSP: 002b:00007f520797b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.524177][ T31] RAX: ffffffffffffffda RBX: 00007f5206de5fa0 RCX: 00007f5206b8f6c9 [ 495.532203][ T31] RDX: 0000000000000002 RSI: 00002000000031c0 RDI: ffffffffffffff9c [ 495.541124][ T31] RBP: 00007f5206c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.549230][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.557323][ T31] R13: 00007f5206de6038 R14: 00007f5206de5fa0 R15: 00007ffcd5175038 [ 495.565333][ T31] [ 495.569240][ T31] INFO: task syz.1.2961:16349 blocked for more than 145 seconds. [ 495.577106][ T31] Not tainted syzkaller #0 [ 495.582072][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.590774][ T31] task:syz.1.2961 state:D stack:28296 pid:16349 tgid:16348 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 495.603588][ T31] Call Trace: [ 495.606918][ T31] [ 495.609876][ T31] __schedule+0x1798/0x4cc0 [ 495.614393][ T31] ? security_file_open+0xb1/0x270 [ 495.619563][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.624439][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.630169][ T31] ? __pfx___schedule+0x10/0x10 [ 495.635056][ T31] ? schedule+0x91/0x360 [ 495.639445][ T31] schedule+0x165/0x360 [ 495.643611][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.649264][ T31] __mutex_lock+0x7e6/0x1350 [ 495.653891][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.659627][ T31] ? misc_open+0x51/0x350 [ 495.664082][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.669207][ T31] misc_open+0x51/0x350 [ 495.673471][ T31] chrdev_open+0x4cc/0x5e0 [ 495.678086][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.683051][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 495.690398][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.695441][ T31] do_dentry_open+0x953/0x13f0 [ 495.700382][ T31] vfs_open+0x3b/0x340 [ 495.704544][ T31] ? path_openat+0x2ecd/0x3830 [ 495.709352][ T31] path_openat+0x2ee5/0x3830 [ 495.713993][ T31] ? __pfx_path_openat+0x10/0x10 [ 495.719826][ T31] do_filp_open+0x1fa/0x410 [ 495.724347][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.732988][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 495.738092][ T31] ? _raw_spin_unlock+0x28/0x50 [ 495.742952][ T31] ? alloc_fd+0x64c/0x6c0 [ 495.748172][ T31] do_sys_openat2+0x121/0x1c0 [ 495.752878][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.758111][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 495.763325][ T31] __x64_sys_openat+0x138/0x170 [ 495.768249][ T31] do_syscall_64+0xfa/0xfa0 [ 495.772792][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.778883][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.784964][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.789682][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.795580][ T31] RIP: 0033:0x7f634dd8f6c9 [ 495.800036][ T31] RSP: 002b:00007f634ecb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.809378][ T31] RAX: ffffffffffffffda RBX: 00007f634dfe5fa0 RCX: 00007f634dd8f6c9 [ 495.817464][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 495.825439][ T31] RBP: 00007f634de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.833452][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.842302][ T31] R13: 00007f634dfe6038 R14: 00007f634dfe5fa0 R15: 00007ffc213440f8 [ 495.850338][ T31] [ 495.853378][ T31] INFO: task syz-executor:16359 blocked for more than 145 seconds. [ 495.861350][ T31] Not tainted syzkaller #0 [ 495.866282][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.875798][ T31] task:syz-executor state:D stack:28008 pid:16359 tgid:16359 ppid:1 task_flags:0x400040 flags:0x00080000 [ 495.887978][ T31] Call Trace: [ 495.891284][ T31] [ 495.894317][ T31] __schedule+0x1798/0x4cc0 [ 495.899812][ T31] ? security_file_open+0xb1/0x270 [ 495.904948][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.909843][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.914699][ T31] ? __pfx___schedule+0x10/0x10 [ 495.919671][ T31] ? schedule+0x91/0x360 [ 495.923967][ T31] schedule+0x165/0x360 [ 495.929035][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.934534][ T31] __mutex_lock+0x7e6/0x1350 [ 495.939189][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.943976][ T31] ? misc_open+0x51/0x350 [ 495.948344][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.953395][ T31] misc_open+0x51/0x350 [ 495.958428][ T31] chrdev_open+0x4cc/0x5e0 [ 495.962907][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.968007][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 495.974390][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.979417][ T31] do_dentry_open+0x953/0x13f0 [ 495.984212][ T31] vfs_open+0x3b/0x340 [ 495.989161][ T31] ? path_openat+0x2ecd/0x3830 [ 495.993963][ T31] path_openat+0x2ee5/0x3830 [ 495.998733][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 496.004236][ T31] ? count_memcg_event_mm+0x21/0x260 [ 496.009598][ T31] ? __pfx_path_openat+0x10/0x10 [ 496.014548][ T31] ? __pfx___up_read+0x10/0x10 [ 496.020390][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 496.025790][ T31] do_filp_open+0x1fa/0x410 [ 496.030378][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.035362][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 496.040475][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.045339][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.050648][ T31] do_sys_openat2+0x121/0x1c0 [ 496.055340][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.060609][ T31] ? fd_install+0x97/0x540 [ 496.065050][ T31] ? fd_install+0x30d/0x540 [ 496.069589][ T31] __x64_sys_openat+0x138/0x170 [ 496.074461][ T31] do_syscall_64+0xfa/0xfa0 [ 496.079928][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.085283][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.091405][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.096103][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.102051][ T31] RIP: 0033:0x7f719cb8de91 [ 496.106480][ T31] RSP: 002b:00007ffee6fa3f70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 496.115784][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f719cb8de91 [ 496.123893][ T31] RDX: 0000000000000002 RSI: 00007f719cc129b7 RDI: 00000000ffffff9c [ 496.131904][ T31] RBP: 00007f719cc129b7 R08: 0000000000000000 R09: 00007f719d91d6c0 [ 496.140757][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 496.148778][ T31] R13: 0000000000000003 R14: 00007ffee6fa4348 R15: 0000000000000000 [ 496.156835][ T31] [ 496.159889][ T31] INFO: task syz-executor:16360 blocked for more than 145 seconds. [ 496.168715][ T31] Not tainted syzkaller #0 [ 496.173755][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.182585][ T31] task:syz-executor state:D stack:27112 pid:16360 tgid:16360 ppid:1 task_flags:0x400040 flags:0x00080000 [ 496.194828][ T31] Call Trace: [ 496.199038][ T31] [ 496.201997][ T31] __schedule+0x1798/0x4cc0 [ 496.206519][ T31] ? security_file_open+0xb1/0x270 [ 496.211687][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.216579][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.221499][ T31] ? __pfx___schedule+0x10/0x10 [ 496.226468][ T31] ? schedule+0x91/0x360 [ 496.231628][ T31] schedule+0x165/0x360 [ 496.235892][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.241391][ T31] __mutex_lock+0x7e6/0x1350 [ 496.246005][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.250815][ T31] ? misc_open+0x51/0x350 [ 496.255164][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.261155][ T31] misc_open+0x51/0x350 [ 496.265331][ T31] chrdev_open+0x4cc/0x5e0 [ 496.269885][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.274848][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 496.281232][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 496.286173][ T31] do_dentry_open+0x953/0x13f0 [ 496.291811][ T31] vfs_open+0x3b/0x340 [ 496.295895][ T31] ? path_openat+0x2ecd/0x3830 [ 496.300701][ T31] path_openat+0x2ee5/0x3830 [ 496.305375][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 496.310978][ T31] ? count_memcg_event_mm+0x21/0x260 [ 496.316284][ T31] ? __pfx_path_openat+0x10/0x10 [ 496.322150][ T31] ? __pfx___up_read+0x10/0x10 [ 496.326963][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 496.332456][ T31] do_filp_open+0x1fa/0x410 [ 496.337105][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.342003][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 496.347927][ T31] ? _raw_spin_unlock+0x28/0x50 [ 496.352844][ T31] ? alloc_fd+0x64c/0x6c0 [ 496.357250][ T31] do_sys_openat2+0x121/0x1c0 [ 496.361967][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.367260][ T31] ? fd_install+0x97/0x540 [ 496.371727][ T31] ? fd_install+0x30d/0x540 [ 496.376272][ T31] __x64_sys_openat+0x138/0x170 [ 496.382022][ T31] do_syscall_64+0xfa/0xfa0 [ 496.386553][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.391928][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.398053][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.402742][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.409584][ T31] RIP: 0033:0x7f463e78de91 [ 496.414094][ T31] RSP: 002b:00007ffd02751ec0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 496.422541][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f463e78de91 [ 496.430560][ T31] RDX: 0000000000000002 RSI: 00007f463e8129b7 RDI: 00000000ffffff9c [ 496.439541][ T31] RBP: 00007f463e8129b7 R08: 0000000000000000 R09: 00007f463f51d6c0 [ 496.447576][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 496.455642][ T31] R13: 0000000000000003 R14: 00007ffd02752298 R15: 0000000000000000 [ 496.463736][ T31] [ 496.467975][ T31] [ 496.467975][ T31] Showing all locks held in the system: [ 496.475735][ T31] 1 lock held by khungtaskd/31: [ 496.480659][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 496.490574][ T31] 2 locks held by getty/5587: [ 496.495252][ T31] #0: ffff88814d57d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 496.505975][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 496.516254][ T31] 1 lock held by syz-executor/5832: [ 496.521489][ T31] #0: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 496.532550][ T31] 2 locks held by kworker/u9:3/5833: [ 496.537874][ T31] #0: ffff888024bd8948 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.549145][ T31] #1: ffffc90004267ba0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.561790][ T31] 3 locks held by kworker/0:5/5933: [ 496.567022][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.578136][ T31] #1: ffffc900047b7ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.592507][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 496.603899][ T31] 2 locks held by kworker/u8:22/12227: [ 496.609387][ T31] #0: ffff88801a069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.621927][ T31] #1: ffffc9001b75fba0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.634829][ T31] 2 locks held by syz.2.2807/15802: [ 496.640102][ T31] #0: ffff888026adc100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 496.650933][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 496.661105][ T31] 2 locks held by syz.0.2811/15819: [ 496.666310][ T31] #0: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 496.676645][ T31] #1: ffff888026adc100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 496.686423][ T31] 2 locks held by syz-executor/15962: [ 496.692716][ T31] #0: ffff888026592918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 496.702808][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 496.712811][ T31] 3 locks held by syz.4.2956/16331: [ 496.718891][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.727395][ T31] #1: ffff88807c1f3100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 496.737020][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 496.747963][ T31] 1 lock held by syz.1.2961/16349: [ 496.753078][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.761658][ T31] 1 lock held by syz-executor/16359: [ 496.767639][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.776325][ T31] 1 lock held by syz-executor/16360: [ 496.781733][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.790618][ T31] 1 lock held by syz-executor/16363: [ 496.795903][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.804812][ T31] 1 lock held by syz-executor/16364: [ 496.810317][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.819386][ T31] 1 lock held by syz-executor/16366: [ 496.824682][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.833279][ T31] 1 lock held by syz-executor/16369: [ 496.838661][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.847622][ T31] 1 lock held by syz-executor/16370: [ 496.852941][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.861476][ T31] 1 lock held by syz-executor/16373: [ 496.866971][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.875443][ T31] 1 lock held by syz-executor/16374: [ 496.881175][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.889881][ T31] 1 lock held by syz-executor/16376: [ 496.895187][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.903749][ T31] 1 lock held by syz-executor/16379: [ 496.909510][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.918056][ T31] 1 lock held by syz-executor/16380: [ 496.923353][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.932358][ T31] 1 lock held by syz-executor/16383: [ 496.937940][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.946422][ T31] 1 lock held by syz-executor/16384: [ 496.951853][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.960394][ T31] [ 496.962830][ T31] ============================================= [ 496.962830][ T31] [ 496.971601][ T31] NMI backtrace for cpu 1 [ 496.971617][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 496.971634][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.971643][ T31] Call Trace: [ 496.971649][ T31] [ 496.971656][ T31] dump_stack_lvl+0x189/0x250 [ 496.971684][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.971705][ T31] ? __pfx__printk+0x10/0x10 [ 496.971729][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 496.971750][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 496.971768][ T31] ? __pfx__printk+0x10/0x10 [ 496.971787][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.971814][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 496.971833][ T31] watchdog+0xf60/0xfa0 [ 496.971851][ T31] ? watchdog+0x1e2/0xfa0 [ 496.971871][ T31] kthread+0x711/0x8a0 [ 496.971893][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.971907][ T31] ? __pfx_kthread+0x10/0x10 [ 496.971928][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.971953][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.971973][ T31] ? __pfx_kthread+0x10/0x10 [ 496.971993][ T31] ret_from_fork+0x4bc/0x870 [ 496.972011][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.972031][ T31] ? __switch_to_asm+0x39/0x70 [ 496.972043][ T31] ? __switch_to_asm+0x33/0x70 [ 496.972054][ T31] ? __pfx_kthread+0x10/0x10 [ 496.972074][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.972099][ T31] [ 496.972105][ T31] Sending NMI from CPU 1 to CPUs 0: [ 497.119055][ C0] NMI backtrace for cpu 0 [ 497.119084][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 497.119104][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.119116][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 497.119146][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 497.119162][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 497.119177][ C0] RAX: 50911854bd47fc00 RBX: ffffffff81967b47 RCX: 50911854bd47fc00 [ 497.119190][ C0] RDX: 0000000000000001 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 497.119202][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 497.119215][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce870 [ 497.119228][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 497.119239][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 497.119253][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.119264][ C0] CR2: 00007fbdd9d17d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 497.119280][ C0] Call Trace: [ 497.119288][ C0] [ 497.119295][ C0] default_idle+0x13/0x20 [ 497.119311][ C0] default_idle_call+0x73/0xb0 [ 497.119327][ C0] do_idle+0x1e7/0x510 [ 497.119349][ C0] ? __pfx_do_idle+0x10/0x10 [ 497.119376][ C0] cpu_startup_entry+0x44/0x60 [ 497.119394][ C0] rest_init+0x2de/0x300 [ 497.119413][ C0] start_kernel+0x3ae/0x410 [ 497.119434][ C0] x86_64_start_reservations+0x24/0x30 [ 497.119457][ C0] x86_64_start_kernel+0x143/0x1c0 [ 497.119480][ C0] common_startup_64+0x13e/0x147 [ 497.119512][ C0]